Function at 0x426200
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x47eabb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xac
mov eax, dword [0x4a8ae4]
xor eax, esp
push ebx
push ebp
push esi
mov dword [esp + 0xb4], eax
push edi
mov dword [esp + 0x38], ecx
mov eax, dword [ecx + 0x88]
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0xc4], 1
je 0x426286
push 0x489aa4
call fcn.00449da9
add esp, 4
push eax
push 0x489aa4
lea ecx, [esp + 0xd4]
call fcn.00403be0
push 0x489aa4
call fcn.00449da9
add esp, 4
push eax
push 0x489aa4
lea ecx, [esp + 0xd8]
call fcn.00403be0
mov dword [esp + 0x1c], ebx
call fcn.004621d7
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x24], eax
mov byte [esp + 0xc4], 2
call fcn.004621d7
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x34], eax
mov byte [esp + 0xc4], 3
call fcn.004621d7
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x28], eax
push 0x87
mov byte [esp + 0xc8], 4
call fcn.00462133
cmp eax, ebx
je 0x4262f8
push 0x87
push eax
lea ecx, [esp + 0x2c]
call fcn.0042b1e0
push 0x88
call fcn.00462133
cmp eax, ebx
je 0x426315
push 0x88
push eax
lea ecx, [esp + 0x3c]
call fcn.0042b1e0
push 0x8f
call fcn.00462133
cmp eax, ebx
je 0x426332
push 0x8f
push eax
lea ecx, [esp + 0x30]
call fcn.0042b1e0
call fcn.00476002
mov esi, dword [eax + 4]
mov eax, dword [esp + 0xcc]
mov ebp, dword [eax - 0xc]
cmp ebp, dword [esi + 0x1e4]
jl 0x426351
cmp ebp, 0x7f
jle 0x426359
mov dword [esp + 0x1c], 0x80004005
xor edi, edi
cmp ebp, ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x14], ebx
jle 0x426433
cmp edi, ebx
jl 0x426449
cmp edi, ebp
jg 0x426449
mov ecx, dword [esp + 0xcc]
xor eax, eax
mov ax, word [ecx + edi*2]
push 1
push ebx
lea edx, [esp + 0x18]
push edx
lea ecx, [esi + 0x1e8]
mov dword [esp + 0x1c], eax
call fcn.00425420
cmp edi, ebp
mov dword [esp + 0x10], eax
jg 0x426449
mov ebp, dword [esp + 0xcc]
movzx eax, word [ebp + edi*2]
push eax
call fcn.0044b55b
add esp, 4
test eax, eax
je 0x4263d6
inc dword [esp + 0x18]
jmp 0x426420
cmp edi, dword [ebp - 0xc]
jg 0x426449
movzx ecx, word [ebp + edi*2]
push ecx
call fcn.0044b595
add esp, 4
test eax, eax
je 0x4263f3
inc dword [esp + 0x30]
jmp 0x426420
cmp edi, dword [ebp - 0xc]
jg 0x426449
movzx edx, word [ebp + edi*2]
push edx
call fcn.0044b5cf
add esp, 4
test eax, eax
je 0x426410
inc dword [esp + 0x2c]
jmp 0x426420
cmp dword [esp + 0x10], ebx
jl 0x42641c
inc dword [esp + 0x20]
jmp 0x426420
inc dword [esp + 0x14]
mov eax, dword [esp + 0xcc]
mov ebp, dword [eax - 0xc]
inc edi
cmp edi, ebp
jl 0x426377
mov ecx, dword [esp + 0x18]
cmp ecx, dword [esi + 0x208]
jge 0x426453
mov dword [esp + 0x1c], 0x80004005
jmp 0x4264b3
push 0x80070057
call fcn.004010a0
mov edx, dword [esp + 0x30]
cmp edx, dword [esi + 0x20c]
jge 0x426469
mov dword [esp + 0x1c], 0x80004005
jmp 0x4264b3
mov eax, dword [esp + 0x2c]
cmp eax, dword [esi + 0x210]
jge 0x42647f
mov dword [esp + 0x1c], 0x80004005
jmp 0x4264b3
mov ecx, dword [esp + 0x20]
cmp ecx, dword [esi + 0x204]
jge 0x426495
mov dword [esp + 0x1c], 0x80004005
jmp 0x4264b3
cmp dword [esp + 0x14], ebx
jle 0x4264a5
mov dword [esp + 0x1c], 0x80004005
jmp 0x4264b3
cmp dword [esp + 0x1c], 0x80004005
jne 0x426dea
call fcn.004621d7
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x18], edi
push 0x106
mov byte [esp + 0xc8], 5
call fcn.00462133
cmp eax, ebx
je 0x4264ef
push 0x106
push eax
lea ecx, [esp + 0x20]
call fcn.0042b1e0
mov edi, dword [esp + 0x18]
mov ebp, 7
push edi
mov dword [esp + 0x90], ebp
mov dword [esp + 0x8c], ebx
mov word [esp + 0x7c], bx
call fcn.00449da9
add esp, 4
push eax
push edi
lea ecx, [esp + 0x7c]
call fcn.00402410
mov byte [esp + 0xc4], 6
call fcn.004621d7
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x20], eax
push 0x107
mov byte [esp + 0xc8], 7
call fcn.00462133
cmp eax, ebx
je 0x42655b
push 0x107
push eax
lea ecx, [esp + 0x28]
call fcn.0042b1e0
mov edi, dword [esp + 0x20]
push edi
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], ebx
mov word [esp + 0x60], bx
call fcn.00449da9
add esp, 4
push eax
push edi
lea ecx, [esp + 0x60]
call fcn.00402410
mov ecx, dword [esi + 0x1e4]
push 0xa
lea eax, [esp + 0x94]
push eax
push ecx
mov byte [esp + 0xd0], 8
call fcn.0044a388
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x30], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push eax
mov dword [esp + 0x30], eax
mov word [edi + 4], bx
call fcn.00449da9
mov edx, dword [esp + 0x30]
add esp, 4
push eax
push edx
mov ecx, edi
call fcn.00402410
sub esp, 0x1c
mov edi, esp
mov dword [esp + 0x48], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push 0x489a94
mov byte [esp + 0x100], 9
mov word [edi + 4], bx
call fcn.00449da9
add esp, 4
push eax
push 0x489a94
mov ecx, edi
call fcn.00402410
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0x100], 8
call fcn.00435820
push 0xa
lea ecx, [esp + 0xe4]
push ecx
push 0x7f
call fcn.0044a388
add esp, 0x48
sub esp, 0x1c
mov edi, esp
mov dword [esp + 0x30], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push eax
mov dword [esp + 0x30], eax
mov word [edi + 4], bx
call fcn.00449da9
mov edx, dword [esp + 0x30]
add esp, 4
push eax
push edx
mov ecx, edi
call fcn.00402410
sub esp, 0x1c
mov edi, esp
mov byte [esp + 0xfc], 0xa
mov dword [esp + 0x48], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push 0x489a8c
mov word [edi + 4], bx
call fcn.00449da9
add esp, 4
push eax
push 0x489a8c
mov ecx, edi
call fcn.00402410
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0x100], 8
call fcn.00435820
push 0x489a88
call fcn.00449da9
add esp, 0x40
push eax
push 0x489a88
lea ecx, [esp + 0x7c]
call fcn.00401d60
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x80]
call fcn.00401c60
cmp dword [esi + 0x1fc], ebx
jne 0x426712
push 0x108
call fcn.00462133
cmp eax, ebx
je 0x4266f5
push 0x108
push eax
lea ecx, [esp + 0x20]
call fcn.0042b1e0
mov edi, dword [esp + 0x18]
push edi
call fcn.00449da9
add esp, 4
push eax
push edi
lea ecx, [esp + 0x60]
call fcn.00402410
jmp 0x4267e0
push 0x109
call fcn.00462133
cmp eax, ebx
je 0x42672f
push 0x109
push eax
lea ecx, [esp + 0x20]
call fcn.0042b1e0
mov edi, dword [esp + 0x18]
push edi
call fcn.00449da9
add esp, 4
push eax
push edi
lea ecx, [esp + 0x60]
call fcn.00402410
cmp dword [esi + 0x200], 8
jb 0x42675c
mov edx, dword [esi + 0x1ec]
mov dword [esp + 0x14], edx
jmp 0x426766
lea eax, [esi + 0x1ec]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x14]
sub esp, 0x1c
mov edi, esp
mov dword [esp + 0x2c], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push ecx
mov word [edi + 4], bx
call fcn.00449da9
mov edx, dword [esp + 0x34]
add esp, 4
push eax
push edx
mov ecx, edi
call fcn.00402410
sub esp, 0x1c
mov edi, esp
mov dword [esp + 0x4c], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push 0x489a94
mov byte [esp + 0x100], 0xb
mov word [edi + 4], bx
call fcn.00449da9
add esp, 4
push eax
push 0x489a94
mov ecx, edi
call fcn.00402410
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0x100], 8
call fcn.00435820
add esp, 0x3c
push 0x489a88
call fcn.00449da9
add esp, 4
push eax
push 0x489a88
lea ecx, [esp + 0x7c]
call fcn.00401d60
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x80]
call fcn.00401c60
cmp dword [esi + 0x208], ebx
jle 0x42691b
push 0x8d
lea edx, [esp + 0x40]
push edx
mov ecx, esi
call fcn.00410d60
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x64]
mov byte [esp + 0xd0], 0xc
call fcn.00401f80
cmp dword [esp + 0x54], 8
mov byte [esp + 0xc4], 8
jb 0x42685e
mov eax, dword [esp + 0x40]
push eax
call fcn.004620d3
add esp, 4
mov edx, dword [esi + 0x208]
push 0xa
lea ecx, [esp + 0x94]
push ecx
push edx
call fcn.0044a388
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x30], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push eax
mov dword [esp + 0x30], eax
mov word [edi + 4], bx
call fcn.00449da9
add esp, 4
push eax
mov eax, dword [esp + 0x30]
push eax
mov ecx, edi
call fcn.00402410
sub esp, 0x1c
mov edi, esp
mov dword [esp + 0x48], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push 0x489a94
mov byte [esp + 0x100], 0xd
mov word [edi + 4], bx
call fcn.00449da9
add esp, 4
push eax
push 0x489a94
mov ecx, edi
call fcn.00402410
lea ecx, [esp + 0x90]
push ecx
mov byte [esp + 0x100], 8
call fcn.00435820
push 0x489a88
call fcn.00449da9
add esp, 0x40
push eax
push 0x489a88
lea ecx, [esp + 0x7c]
call fcn.00401d60
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x60]
push edx
lea ecx, [esp + 0x80]
call fcn.00401c60
cmp dword [esi + 0x20c], ebx
jle 0x426a26
push 0xd1
lea eax, [esp + 0x40]
push eax
mov ecx, esi
call fcn.00410d60
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x64]
mov byte [esp + 0xd0], 0xe
call fcn.00401f80
cmp dword [esp + 0x54], 8
mov byte [esp + 0xc4], 8
jb 0x426969
mov ecx, dword [esp + 0x40]
push ecx
call fcn.004620d3
add esp, 4
mov eax, dword [esi + 0x20c]
push 0xa
lea edx, [esp + 0x94]
push edx
push eax
call fcn.0044a388
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x30], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push eax
mov dword [esp + 0x30], eax
mov word [edi + 4], bx
call fcn.00449da9
mov ecx, dword [esp + 0x30]
add esp, 4
push eax
push ecx
mov ecx, edi
call fcn.00402410
sub esp, 0x1c
mov edi, esp
mov dword [esp + 0x48], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push 0x489a94
mov byte [esp + 0x100], 0xf
mov word [edi + 4], bx
call fcn.00449da9
add esp, 4
push eax
push 0x489a94
mov ecx, edi
call fcn.00402410
lea edx, [esp + 0x90]
push edx
mov byte [esp + 0x100], 8
call fcn.00435820
push 0x489a88
call fcn.00449da9
add esp, 0x40
push eax
push 0x489a88
lea ecx, [esp + 0x7c]
call fcn.00401d60
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x80]
call fcn.00401c60
cmp dword [esi + 0x210], ebx
jle 0x426b31
push 0x10b
lea ecx, [esp + 0x40]
push ecx
mov ecx, esi
call fcn.00410d60
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x64]
mov byte [esp + 0xd0], 0x10
call fcn.00401f80
cmp dword [esp + 0x54], 8
mov byte [esp + 0xc4], 8
jb 0x426a74
mov edx, dword [esp + 0x40]
push edx
call fcn.004620d3
add esp, 4
mov ecx, dword [esi + 0x210]
push 0xa
lea eax, [esp + 0x94]
push eax
push ecx
call fcn.0044a388
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x30], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push eax
mov dword [esp + 0x30], eax
mov word [edi + 4], bx
call fcn.00449da9
mov edx, dword [esp + 0x30]
add esp, 4
push eax
push edx
mov ecx, edi
call fcn.00402410
sub esp, 0x1c
mov edi, esp
mov dword [esp + 0x48], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push 0x489a94
mov byte [esp + 0x100], 0x11
mov word [edi + 4], bx
call fcn.00449da9
add esp, 4
push eax
push 0x489a94
mov ecx, edi
call fcn.00402410
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0x100], 8
call fcn.00435820
push 0x489a88
call fcn.00449da9
add esp, 0x40
push eax
push 0x489a88
lea ecx, [esp + 0x7c]
call fcn.00401d60
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x80]
call fcn.00401c60
cmp dword [esi + 0x204], ebx
jle 0x426c3c
push 0x10c
lea edx, [esp + 0x40]
push edx
mov ecx, esi
call fcn.00410d60
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x64]
mov byte [esp + 0xd0], 0x12
call fcn.00401f80
cmp dword [esp + 0x54], 8
mov byte [esp + 0xc4], 8
jb 0x426b7f
mov eax, dword [esp + 0x40]
push eax
call fcn.004620d3
add esp, 4
mov edx, dword [esi + 0x204]
push 0xa
lea ecx, [esp + 0x94]
push ecx
push edx
call fcn.0044a388
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x30], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push eax
mov dword [esp + 0x30], eax
mov word [edi + 4], bx
call fcn.00449da9
add esp, 4
push eax
mov eax, dword [esp + 0x30]
push eax
mov ecx, edi
call fcn.00402410
sub esp, 0x1c
mov edi, esp
mov dword [esp + 0x48], esp
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push 0x489a94
mov byte [esp + 0x100], 0x13
mov word [edi + 4], bx
call fcn.00449da9
add esp, 4
push eax
push 0x489a94
mov ecx, edi
call fcn.00402410
lea ecx, [esp + 0x90]
push ecx
mov byte [esp + 0x100], 8
call fcn.00435820
push 0x489a88
call fcn.00449da9
add esp, 0x40
push eax
push 0x489a88
lea ecx, [esp + 0x7c]
call fcn.00401d60
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x60]
push edx
lea ecx, [esp + 0x80]
call fcn.00401c60
push 0x10d
lea eax, [esp + 0x40]
push eax
mov ecx, esi
call fcn.00410d60
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x64]
mov byte [esp + 0xd0], 0x14
call fcn.00401f80
mov eax, dword [esp + 0x54]
mov edi, 8
cmp eax, edi
mov byte [esp + 0xc4], 8
jb 0x426c84
mov ecx, dword [esp + 0x40]
push ecx
call fcn.004620d3
add esp, 4
push 0x489a88
mov dword [esp + 0x58], ebp
mov dword [esp + 0x54], ebx
mov word [esp + 0x44], bx
call fcn.00449da9
add esp, 4
push eax
push 0x489a88
lea ecx, [esp + 0x7c]
call fcn.00401d60
push 0x489a88
call fcn.00449da9
add esp, 4
push eax
push 0x489a88
lea ecx, [esp + 0x7c]
call fcn.00401d60
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x60]
push edx
lea ecx, [esp + 0x80]
call fcn.00401c60
cmp dword [esp + 0x8c], edi
mov eax, dword [esp + 0x78]
jae 0x426cee
lea eax, [esp + 0x78]
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x38]
push 0x10
push ecx
push eax
mov ecx, edi
call fcn.0045e69d
cmp dword [esi + 0xd8], ebx
je 0x426d4c
push 0x489aa4
push 0x3f6
mov ecx, edi
call fcn.0046110a
mov ecx, eax
call fcn.0046122e
push 0x489aa4
push 0x3f7
mov ecx, edi
call fcn.0046110a
mov ecx, eax
call fcn.0046122e
push 0x3f6
mov ecx, edi
call fcn.0046110a
mov ecx, eax
call fcn.00461328
mov eax, dword [esp + 0x70]
mov esi, 8
cmp eax, esi
jb 0x426d66
mov edx, dword [esp + 0x5c]
push edx
call fcn.004620d3
add esp, 4
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov dword [esp + 0x70], ebp
mov dword [esp + 0x6c], ebx
mov word [esp + 0x5c], bx
mov byte [esp + 0xc4], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x426d99
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
cmp dword [esp + 0x8c], esi
jb 0x426daf
mov eax, dword [esp + 0x78]
push eax
call fcn.004620d3
add esp, 4
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x88], ebx
mov word [esp + 0x78], bx
mov byte [esp + 0xc4], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x426e23
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
jmp 0x426e23
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xd0]
push eax
push ecx
call fcn.0044a53d
add esp, 8
test eax, eax
je 0x426e23
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x38]
push 0x10
push edx
push eax
call fcn.0045e69d
mov dword [esp + 0x1c], 0x80004005
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0xc4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x426e49
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0xc4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x426e6f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0xc4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x426e95
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
mov byte [esp + 0xc4], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x426ebd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0xd0]
add eax, 0xfffffff0
mov dword [esp + 0xc4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x426ee9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0xbc]
mov eax, dword [esp + 0x1c]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0xb0]
pop ebp
pop ebx
xor ecx, esp
call fcn.0044a318
add esp, 0xb8
ret 8