Function at 0x42ed95
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x49a464
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xac
push ebx
push ebp
push esi
push edi
mov edi, ecx
push 4
push 0x4ae668
lea ecx, [esp + 0x54]
mov dword [esp + 0xcc], 1
call fcn.0046ebc0
push 8
push 0x4ae65c
lea ecx, [esp + 0x28]
mov byte [esp + 0xcc], 2
call fcn.0046ebc0
xor ebx, ebx
lea ecx, [esp + 0x18]
push ebx
mov byte [esp + 0xc8], 3
call fcn.0046eb50
mov al, byte [esp + 0x13]
mov dword [esp + 0x40], ebx
mov byte [esp + 0x3c], al
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov cl, byte [esp + 0x13]
mov dword [esp + 0x30], ebx
mov byte [esp + 0x2c], cl
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0xc8], 6
call fcn.0046eb50
push ebx
lea ecx, [esp + 0x28]
mov byte [esp + 0xc8], 7
call fcn.0046eb50
push ebx
push ebx
push ecx
mov byte [esp + 0xd0], 8
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x4ae254
call fcn.0046ebc0
push ecx
mov byte [esp + 0xd4], 9
mov ecx, esp
mov dword [esp + 0x38], esp
push 6
push 0x4ae654
call fcn.0046ebc0
mov ecx, 0x4b6448
mov byte [esp + 0xd4], 8
call fcn.00472d90
push 0x4b63c8
push ecx
lea edx, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63dc]
call fcn.004104a0
cmp ax, 1
jne 0x42ee3a
push ebx
mov ecx, 0x4b63c8
call fcn.00401ba0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0046eb30
lea ecx, [esp + 0x1c]
call fcn.0046ee50
lea ecx, [esp + 0x18]
call fcn.0046efe0
movsx eax, ax
sub eax, 2
cdq
and edx, 3
add eax, edx
mov ebp, eax
sar ebp, 2
cmp bp, 1
jge 0x42efa2
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x4ae254
call fcn.0046ebc0
push ecx
mov byte [esp + 0xd4], 0xa
mov ecx, esp
mov dword [esp + 0x38], esp
push 6
push 0x4ae64c
call fcn.0046ebc0
mov ecx, 0x4b6448
mov byte [esp + 0xd4], 8
call fcn.00472d90
lea ecx, [esp + 0x24]
mov byte [esp + 0xc4], 7
call fcn.0046ec60
lea ecx, [esp + 0x1c]
mov byte [esp + 0xc4], 6
call fcn.0046ec60
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
mov byte [esp + 0xc4], 5
mov edi, eax
je 0x42eec8
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42eeb5
mov esi, dword [esp + 0x30]
push esi
call fcn.0048d500
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x44]
add esp, 4
cmp esi, edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov byte [esp + 0xc4], 4
je 0x42ef04
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42eef1
mov esi, dword [esp + 0x40]
push esi
call fcn.0048d500
add esp, 4
lea ecx, [esp + 0x18]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov byte [esp + 0xc4], 3
call fcn.0046ec60
lea ecx, [esp + 0x20]
mov byte [esp + 0xc4], 2
call fcn.0046ec60
lea ecx, [esp + 0x4c]
mov byte [esp + 0xc4], 1
call fcn.0046ec60
lea ecx, [esp + 0xcc]
mov byte [esp + 0xc4], bl
call fcn.0046ec60
mov eax, dword [esp + 0xd8]
mov esi, dword [esp + 0xd4]
cmp esi, eax
mov dword [esp + 0xc4], 0xffffffff
mov edi, eax
je 0x42ef94
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42ef7e
mov esi, dword [esp + 0xd4]
push esi
call fcn.0048d500
add esp, 4
jmp 0x42fd06
mov eax, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x48]
push eax
push eax
call fcn.0040b060
mov ecx, dword [esp + 0x50]
add esp, 0xc
mov esi, eax
push ecx
push esi
lea ecx, [esp + 0x44]
call fcn.0040ab00
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
push edx
push eax
push eax
mov dword [esp + 0x50], esi
call fcn.0040b060
add esp, 0xc
mov esi, eax
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x2c]
push eax
push esi
call fcn.0040ab00
cmp bp, bx
mov dword [esp + 0x34], esi
jle 0x42f0c0
mov esi, 3
movsx ebp, bp
lea ecx, [esi - 1]
push ecx
lea ecx, [esp + 0x1c]
call fcn.0046ee40
push eax
push 3
lea ecx, [esp + 0x28]
call fcn.0046ef60
push esi
lea ecx, [esp + 0x1c]
call fcn.0046ee40
push eax
push 4
lea ecx, [esp + 0x28]
call fcn.0046ef60
lea edx, [esi + 1]
lea ecx, [esp + 0x18]
push edx
call fcn.0046ee40
push eax
push 5
lea ecx, [esp + 0x28]
call fcn.0046ef60
lea eax, [esi + 2]
lea ecx, [esp + 0x18]
push eax
call fcn.0046ee40
push eax
push 6
lea ecx, [esp + 0x28]
call fcn.0046ef60
push 0x4b63c8
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0046eb30
mov ecx, dword [0x4b63dc]
call fcn.004104a0
cmp ax, 1
jne 0x42f0b2
mov ecx, dword [0x4b63cc]
call fcn.0046efe0
cmp ax, 0xa
jle 0x42f0b2
mov eax, dword [0x4b63cc]
lea ecx, [esp + 0x2c]
push eax
mov eax, dword [esp + 0x38]
push 1
push eax
call fcn.00401c40
add esi, 4
dec ebp
jne 0x42f003
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
cmp eax, ebx
je 0x42f0db
sub esi, eax
sar esi, 2
cmp si, 1
mov dword [esp + 0x28], esi
jge 0x42f243
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x4ae254
call fcn.0046ebc0
push ecx
mov byte [esp + 0xd4], 0xb
mov ecx, esp
mov dword [esp + 0x38], esp
push 6
push 0x4ae64c
call fcn.0046ebc0
mov ecx, 0x4b6448
mov byte [esp + 0xd4], 8
call fcn.00472d90
lea ecx, [esp + 0x24]
mov byte [esp + 0xc4], 7
call fcn.0046ec60
lea ecx, [esp + 0x1c]
mov byte [esp + 0xc4], 6
call fcn.0046ec60
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
mov byte [esp + 0xc4], 5
mov edi, eax
je 0x42f169
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42f156
mov esi, dword [esp + 0x30]
push esi
call fcn.0048d500
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x44]
add esp, 4
cmp esi, edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov byte [esp + 0xc4], 4
je 0x42f1a5
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42f192
mov esi, dword [esp + 0x40]
push esi
call fcn.0048d500
add esp, 4
lea ecx, [esp + 0x18]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov byte [esp + 0xc4], 3
call fcn.0046ec60
lea ecx, [esp + 0x20]
mov byte [esp + 0xc4], 2
call fcn.0046ec60
lea ecx, [esp + 0x4c]
mov byte [esp + 0xc4], 1
call fcn.0046ec60
lea ecx, [esp + 0xcc]
mov byte [esp + 0xc4], bl
call fcn.0046ec60
mov eax, dword [esp + 0xd8]
mov esi, dword [esp + 0xd4]
cmp esi, eax
mov dword [esp + 0xc4], 0xffffffff
mov edi, eax
je 0x42f235
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42f21f
mov esi, dword [esp + 0xd4]
push esi
call fcn.0048d500
add esp, 4
jmp 0x42fd06
push ebx
lea ecx, [esp + 0x78]
call fcn.0046eb50
mov cl, byte [esp + 0x13]
mov dword [esp + 0x68], ebx
mov byte [esp + 0x64], cl
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dl, byte [esp + 0x13]
mov dword [esp + 0x54], ebx
mov byte [esp + 0x50], dl
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
push ebx
lea ecx, [esp + 0x8c]
mov byte [esp + 0xc8], 0xe
call fcn.0046eb50
push ebx
lea ecx, [esp + 0x64]
mov byte [esp + 0xc8], 0xf
call fcn.0046eb50
lea eax, [esp + 0x88]
lea ecx, [esp + 0x50]
push eax
lea edx, [esp + 0x68]
push ecx
mov ecx, dword [0x4b63e8]
push edx
mov byte [esp + 0xd0], 0x10
call fcn.004282e0
test ax, ax
jne 0x42f4a0
lea ecx, [esp + 0x60]
mov byte [esp + 0xc4], 0xf
call fcn.0046ec60
lea ecx, [esp + 0x88]
mov byte [esp + 0xc4], 0xe
call fcn.0046ec60
mov edi, dword [esp + 0x58]
mov esi, dword [esp + 0x54]
cmp esi, edi
mov byte [esp + 0xc4], 0xd
je 0x42f316
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42f303
mov esi, dword [esp + 0x54]
push esi
call fcn.0048d500
mov edi, dword [esp + 0x70]
mov esi, dword [esp + 0x6c]
add esp, 4
cmp esi, edi
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov byte [esp + 0xc4], 0xc
je 0x42f352
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42f33f
mov esi, dword [esp + 0x68]
push esi
call fcn.0048d500
add esp, 4
lea ecx, [esp + 0x74]
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov byte [esp + 0xc4], 8
call fcn.0046ec60
lea ecx, [esp + 0x24]
mov byte [esp + 0xc4], 7
call fcn.0046ec60
lea ecx, [esp + 0x1c]
mov byte [esp + 0xc4], 6
call fcn.0046ec60
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
mov byte [esp + 0xc4], 5
mov edi, eax
je 0x42f3c3
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42f3b0
mov esi, dword [esp + 0x30]
push esi
call fcn.0048d500
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x44]
add esp, 4
cmp esi, edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov byte [esp + 0xc4], 4
je 0x42f3ff
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42f3ec
mov esi, dword [esp + 0x40]
push esi
call fcn.0048d500
add esp, 4
lea ecx, [esp + 0x18]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov byte [esp + 0xc4], 3
call fcn.0046ec60
lea ecx, [esp + 0x20]
mov byte [esp + 0xc4], 2
call fcn.0046ec60
lea ecx, [esp + 0x4c]
mov byte [esp + 0xc4], 1
call fcn.0046ec60
lea ecx, [esp + 0xcc]
mov byte [esp + 0xc4], bl
call fcn.0046ec60
mov eax, dword [esp + 0xd8]
mov esi, dword [esp + 0xd4]
cmp esi, eax
mov dword [esp + 0xc4], 0xffffffff
mov edi, eax
je 0x42f48f
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42f479
mov esi, dword [esp + 0xd4]
push esi
call fcn.0048d500
add esp, 4
xor ax, ax
jmp 0x42fd0a
push ebx
lea ecx, [esp + 0x54]
call fcn.00401ba0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0046eb30
lea ecx, [esp + 0x78]
call fcn.0046ee50
mov ecx, dword [edi + 0xc]
mov eax, dword [edi + 0x10]
lea esi, [edi + 8]
push ecx
push eax
push eax
call fcn.00431350
add esp, 0xc
mov ebp, eax
mov eax, dword [esi + 8]
mov ecx, esi
push eax
push ebp
call fcn.00430e90
cmp word [esp + 0x28], bx
mov dword [esi + 8], ebp
jle 0x42f5de
movsx ebp, word [esp + 0x28]
xor esi, esi
push esi
lea ecx, [esp + 0x30]
call fcn.00401ba0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0046eb30
lea ecx, [esp + 0x20]
call fcn.0046ee50
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push ebx
call fcn.0046eb50
lea ecx, [esp + 0x28]
call fcn.0046ee50
push 2
lea ecx, [esp + 0x20]
call fcn.0046ee40
push eax
lea ecx, [esp + 0x28]
call fcn.0046efc0
push 3
lea ecx, [esp + 0x20]
call fcn.0046ee40
push eax
lea ecx, [esp + 0x28]
call fcn.0046efc0
push 4
lea ecx, [esp + 0x20]
call fcn.0046ee40
push eax
lea ecx, [esp + 0x28]
call fcn.0046efc0
lea eax, [esp + 0x60]
lea edx, [esp + 0x74]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0046eb30
push 5
lea ecx, [esp + 0x28]
mov byte [esp + 0xd0], 0x10
call fcn.0046ee40
push eax
mov ecx, edi
call fcn.00430c10
push ecx
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0046eb30
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0xd0], 0x12
call fcn.0046eb30
mov ecx, edi
mov byte [esp + 0xcc], 0x10
call fcn.0042b910
inc esi
dec ebp
jne 0x42f4f7
mov al, byte [esp + 0x13]
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x78], al
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov cl, byte [esp + 0x13]
mov dword [esp + 0x90], ebx
mov byte [esp + 0x8c], cl
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dl, byte [esp + 0x13]
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x9c], dl
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
lea eax, [esp + 0x9c]
lea ecx, [esp + 0x8c]
push eax
lea edx, [esp + 0x7c]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0xd0], 0x15
mov dword [esp + 0xb8], ebx
call fcn.0042ba20
mov edi, eax
cmp di, bx
mov dword [esp + 0x28], edi
jne 0x42f969
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x4ae254
call fcn.0046ebc0
push ecx
mov byte [esp + 0xd4], 0x16
mov ecx, esp
mov dword [esp + 0x38], esp
push 6
push 0x4ae64c
call fcn.0046ebc0
mov ecx, 0x4b6448
mov byte [esp + 0xd4], 0x15
call fcn.00472d90
mov eax, dword [esp + 0xa4]
mov esi, dword [esp + 0xa0]
cmp esi, eax
mov byte [esp + 0xc4], 0x14
mov edi, eax
je 0x42f6e7
push ebx
mov ecx, esi
call fcn.0040b370
add esi, 0x10
cmp esi, edi
jne 0x42f6d1
mov esi, dword [esp + 0xa0]
push esi
call fcn.0048d500
mov edi, dword [esp + 0x98]
mov esi, dword [esp + 0x94]
add esp, 4
cmp esi, edi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
mov byte [esp + 0xc4], 0x13
je 0x42f735
push ebx
mov ecx, esi
call fcn.0040b370
add esi, 0x10
cmp esi, edi
jne 0x42f71f
mov esi, dword [esp + 0x90]
push esi
call fcn.0048d500
mov edi, dword [esp + 0x84]
mov esi, dword [esp + 0x80]
add esp, 4
cmp esi, edi
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov byte [esp + 0xc4], 0x10
je 0x42f780
push ebx
mov ecx, esi
call fcn.0040b370
add esi, 0x10
cmp esi, edi
jne 0x42f76d
mov esi, dword [esp + 0x7c]
push esi
call fcn.0048d500
add esp, 4
lea ecx, [esp + 0x60]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov byte [esp + 0xc4], 0xf
call fcn.0046ec60
lea ecx, [esp + 0x88]
mov byte [esp + 0xc4], 0xe
call fcn.0046ec60
mov eax, dword [esp + 0x58]
mov esi, dword [esp + 0x54]
cmp esi, eax
mov byte [esp + 0xc4], 0xd
mov edi, eax
je 0x42f7e9
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42f7d6
mov esi, dword [esp + 0x54]
push esi
call fcn.0048d500
mov edi, dword [esp + 0x70]
mov esi, dword [esp + 0x6c]
add esp, 4
cmp esi, edi
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov byte [esp + 0xc4], 0xc
je 0x42f825
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42f812
mov esi, dword [esp + 0x68]
push esi
call fcn.0048d500
add esp, 4
lea ecx, [esp + 0x74]
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov byte [esp + 0xc4], 8
call fcn.0046ec60
lea ecx, [esp + 0x24]
mov byte [esp + 0xc4], 7
call fcn.0046ec60
lea ecx, [esp + 0x1c]
mov byte [esp + 0xc4], 6
call fcn.0046ec60
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
mov byte [esp + 0xc4], 5
mov edi, eax
je 0x42f896
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42f883
mov esi, dword [esp + 0x30]
push esi
call fcn.0048d500
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x44]
add esp, 4
cmp esi, edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov byte [esp + 0xc4], 4
je 0x42f8d2
push ebx
mov ecx, esi
call fcn.00402090
add esi, 4
cmp esi, edi
jne 0x42f8bf
mov esi, dword [esp + 0x40]
push esi
call fcn.0048d500
add esp, 4
lea ecx, [esp + 0x18]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov byte [esp + 0xc4], 3
call fcn.0046ec60
lea ecx, [esp + 0x20]
mov byte [esp + 0xc4], 2
call fcn.0046ec60
lea ecx, [esp + 0x4c]
mov byte [esp + 0xc4], 1
call fcn.0046ec60
lea ecx, [esp + 0xcc]
mov byte [esp + 0xc4], bl
call fcn.0046ec60
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xd4]
push eax
push ecx
lea ecx, [esp + 0xd8]
mov dword [esp + 0xcc], 0xffffffff
call fcn.0040ab00
mov edx, dword [esp + 0xd4]
push edx
call fcn.0048d500
add esp, 4
jmp 0x42fd06
push ebx
push ecx
lea eax, [esp + 0xd4]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.0046eb30
mov ecx, dword [0x4b644c]
call fcn.004816e0
cmp di, bx
jle 0x42fa47
movsx ecx, di
xor esi, esi
mov dword [esp + 0x14], ecx
push esi
lea ecx, [esp + 0xa0]
call fcn.00425f50
mov ebp, eax
sub esp, 0x10
mov edi, esp
mov dword [esp + 0xc8], esp
mov dl, byte [ebp]
push ebx
mov ecx, edi
mov byte [edi], dl
call fcn.00401bb0
mov eax, dword [0x4a0148]
mov ecx, edi
push eax
push ebx
push ebp
call fcn.0040a8e0
push esi
lea ecx, [esp + 0xa0]
mov byte [esp + 0xd8], 0x17
call fcn.00425f50
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0xd4], esp
push eax
call fcn.0040a690
push esi
lea ecx, [esp + 0x9c]
mov byte [esp + 0xe8], 0x18
call fcn.00425f50
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0xe0], esp
push eax
call fcn.0040a690
mov ecx, dword [0x4b644c]
mov byte [esp + 0xf4], 0x15
call fcn.00481820
mov eax, dword [esp + 0x14]
inc esi
dec eax
mov dword [esp + 0x14], eax
jne 0x42f99b
mov edi, dword [esp + 0x28]
lea ecx, [esp + 0xac]
push ecx
mov ecx, dword [0x4b644c]
call fcn.004817d0
cmp ax, 0xb
je 0x42fae8
mov edx, dword [esp + 0xac]
cmp dx, bx
jl 0x42f969
mov ecx, dword [esp + 0x7c]
cmp ecx, ebx
jne 0x42fa80
xor eax, eax
jmp 0x42fa8c
mov eax, dword [esp + 0x80]
sub eax, ecx
sar eax, 4
movsx ecx, dx
cmp ecx, eax
jae 0x42f969
push ecx
lea ecx, [esp + 0x30]
call fcn.00401ba0
push ecx
mov ecx, esp
mov dword [esp + 0xb4], esp
push eax
call fcn.0046eb30
push ecx
lea edx, [esp + 0xd4]
mov ecx, esp
mov dword [esp + 0xbc], esp
push edx
mov byte [esp + 0xd0], 0x19
call fcn.0046eb30
mov ecx, dword [0x4b63e0]
mov byte [esp + 0xcc], 0x15
call fcn.0041c3c0
jmp 0x42f969
mov edi, dword [esp + 0xa4]
mov esi, dword [esp + 0xa0]
cmp esi, edi
mov byte [esp + 0xc4], 0x14
je 0x42fb18
push ebx
mov ecx, esi
call fcn.0040b370
add esi, 0x10
cmp esi, edi
jne 0x42fb02
mov esi, dword [esp + 0xa0]
push esi
call fcn.0048d500
mov edi, dword [esp + 0x98]
mov esi, dword [esp + 0x94]
add esp, 4
cmp esi, edi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
mov byte [esp + 0xc4], 0x13
je 0x42fb66
push ebx
mov ecx, esi
call fcn.0040b370
add esi, 0x10
cmp esi, edi
jne 0x42fb50
mov esi, dword [esp + 0x90]
push esi
call fcn.0048d500
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x80]
add esp, 4
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
push eax
push ecx
lea ecx, [esp + 0x80]
mov byte [esp + 0xcc], 0x10
call fcn.0040ab30
mov edx, dword [esp + 0x7c]
push edx
call fcn.0048d500
add esp, 4
lea ecx, [esp + 0x60]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov byte [esp + 0xc4], 0xf
call fcn.0046ec60
lea ecx, [esp + 0x88]
mov byte [esp + 0xc4], 0xe
call fcn.0046ec60
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
push eax
push ecx
lea ecx, [esp + 0x58]
mov byte [esp + 0xcc], 0xd
call fcn.0040ab00
mov edx, dword [esp + 0x54]
push edx
call fcn.0048d500
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
add esp, 4
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
push eax
push ecx
lea ecx, [esp + 0x6c]
mov byte [esp + 0xcc], 0xc
call fcn.0040ab00
mov edx, dword [esp + 0x68]
push edx
call fcn.0048d500
add esp, 4
lea ecx, [esp + 0x74]
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov byte [esp + 0xc4], 8
call fcn.0046ec60
lea ecx, [esp + 0x24]
mov byte [esp + 0xc4], 7
call fcn.0046ec60
lea ecx, [esp + 0x1c]
mov byte [esp + 0xc4], 6
call fcn.0046ec60
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc4], 5
call fcn.00401b60
lea ecx, [esp + 0x3c]
mov byte [esp + 0xc4], 4
call fcn.00401b60
lea ecx, [esp + 0x18]
mov byte [esp + 0xc4], 3
call fcn.0046ec60
lea ecx, [esp + 0x20]
mov byte [esp + 0xc4], 2
call fcn.0046ec60
lea ecx, [esp + 0x4c]
mov byte [esp + 0xc4], 1
call fcn.0046ec60
lea ecx, [esp + 0xcc]
mov byte [esp + 0xc4], bl
call fcn.0046ec60
lea ecx, [esp + 0xd0]
mov dword [esp + 0xc4], 0xffffffff
call fcn.00401b60
mov ax, 1
mov ecx, dword [esp + 0xbc]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xb8
ret 0x14