Function at 0x429ce0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x160
mov al, byte [ebp + 0xc]
mov edx, dword [ebp + 8]
mov esi, 0x53ece7a4
and al, 1
mov byte [esp + 0x15b], al
mov dword [esp + 0x154], edx
mov dword [esp + 0x150], ecx
mov edx, dword [0x48e848]
dec edx
mov dword [0x48e848], edx
or edx, 0xe00033b
mov edi, dword [0x48efc8]
imul edi, edx
mov dword [0x48efc8], edi
mov dword [esp + 0x14c], 0
mov bx, word [0x499c68]
movsx edx, bx
imul edx, edx, 0x37ae9c55
mov edi, dword [0x4935bc]
sub edi, edx
mov dword [0x4935bc], edi
mov edx, esp
mov dword [edx], 0
mov dword [esp + 0xb0], esi
mov dword [esp + 0xac], ecx
call fcn.00451ad0
mov dword [esp + 0x144], edx
mov dword [esp + 0x140], eax
mov eax, dword [0x48dbd8]
add eax, 0x2a696e32
mov ecx, dword [esp + 0xb0]
cmp ecx, eax
jg 0x429db8
mov eax, dword [0x48ed40]
dec eax
mov dword [0x48ed40], eax
xor eax, 0xfd5f
mov cx, ax
mov word [0x497832], cx
mov byte [esp + 0x13f], 0
mov eax, dword [0x48be7c]
or eax, 0xb7faff6d
mov dword [0x48be7c], eax
mov eax, dword [0x48ac64]
mov ecx, esp
mov edx, dword [esp + 0xac]
mov dword [ecx], edx
call eax
sub esp, 4
mov si, word [0x49986a]
mov ax, si
and eax, 0x8631
mov si, ax
mov word [0x49986a], si
test byte [esp + 0x15b], 1
je 0x429f45
mov eax, dword [0x48dad8]
mov ecx, eax
dec ecx
mov dword [0x48dad8], ecx
mov ecx, dword [0x49194c]
and eax, ecx
mov ecx, dword [0x495aac]
xor eax, ecx
xor eax, 0x9e87436b
mov dword [0x495aac], eax
mov eax, dword [esp + 0xac]
add eax, 0x18
mov ecx, dword [esp + 0xac]
mov edx, dword [ecx + 0x18]
mov esi, dword [ecx + 0x1c]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa0], esi
jmp 0x429e64
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
xor edx, edx
mov dword [esp + 0x9c], eax
mov eax, ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x98], edx
mov edx, ecx
mov ebx, dword [esp + 0x98]
mov ecx, dword [esp + 0x98]
mov esi, dword [esp + 0xa8]
lock cmpxchg8b qword [esi]
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa0], edx
jne 0x429e64
jmp 0x429ebf
mov ax, word [0x49b2a0]
movsx ecx, ax
mov edx, 0x9b99d239
sub edx, ecx
mov ecx, dword [0x48f320]
mov esi, ecx
inc esi
mov dword [0x48f320], esi
and ecx, 0x23c22a19
or ecx, 0xc88b2aca
cmp edx, ecx
jne 0x429f40
mov eax, dword [0x492a2c]
mov ecx, eax
inc ecx
mov dword [0x492a2c], ecx
imul eax, eax, 0xfc46c509
mov dx, word [0x498630]
mov cx, dx
inc ecx
mov si, cx
mov word [0x498630], si
movsx ecx, dx
xor ecx, 0x9922d8d1
cmp eax, ecx
je 0x429f3b
mov eax, dword [0x493378]
xor eax, 0x815f5b4b
mov dword [0x493378], eax
jmp 0x429f40
jmp 0x429f45
mov ax, word [0x49917c]
mov cx, ax
dec ecx
mov dx, cx
mov word [0x49917c], dx
movsx ecx, ax
xor ecx, 0x46c0bb61
cmp ecx, 0xefed7bfb
jle 0x429f7d
mov dword [0x48b8ac], 0x1866c2a9
jmp 0x429f8c
mov eax, dword [0x495790]
xor eax, 0x1828eb7c
mov dword [0x495790], eax
xor eax, eax
mov dword [esp + 0x94], eax
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x94]
mov ecx, dword [esp + 0x94]
mov esi, dword [esp + 0xac]
lock cmpxchg8b qword [esi + 0x18]
mov ecx, dword [esp + 0x140]
mov ebx, dword [esp + 0x144]
sub ecx, eax
sbb ebx, edx
mov dword [esp + 0x90], ecx
mov dword [esp + 0x8c], ebx
jae 0x42a0ac
jmp 0x429fe1
mov eax, 0xbe6102d3
mov ecx, dword [0x495454]
inc ecx
mov dword [0x495454], ecx
mov edx, dword [0x492984]
imul edx, ecx
mov dword [0x492984], edx
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0xac]
mov esi, dword [edx + 0x2c]
mov dword [ecx + 0xc], esi
mov esi, dword [edx + 0x28]
mov dword [ecx + 8], esi
mov esi, dword [edx + 0x20]
mov edi, dword [edx + 0x24]
mov dword [ecx + 4], edi
mov dword [ecx], esi
mov bx, word [0x4998c4]
movsx ecx, bx
cmp eax, ecx
jle 0x42a048
mov eax, dword [0x48e5dc]
add eax, 0x849524e0
mov dword [0x48e5dc], eax
mov eax, 0xa05892c9
mov dword [esp + 0x14c], 1
mov cx, word [0x497472]
mov dx, cx
inc edx
mov si, dx
mov word [0x497472], si
movsx edx, cx
add edx, 0x883ecf1e
xor edx, 0x76b0c66b
cmp eax, edx
jne 0x42a098
mov eax, dword [0x490c04]
add eax, 0x54c5e96a
mov dword [0x490c04], eax
jmp 0x42a0a7
mov eax, dword [0x491d50]
xor eax, 0x86606231
mov dword [0x491d50], eax
jmp 0x42a172
mov eax, dword [0x4929ec]
or eax, 0x433a000
mov dword [0x4929ec], eax
mov byte [esp + 0x13f], 1
mov eax, dword [0x48f378]
imul eax, eax, 0xba4b602b
mov ecx, dword [0x48e0d8]
xor ecx, 0x7b579c57
mov edx, dword [0x490bc8]
mov esi, edx
dec esi
mov dword [0x490bc8], esi
xor ecx, edx
cmp eax, ecx
jg 0x42a134
mov eax, 0x86af98a8
mov ecx, dword [0x493ec4]
and ecx, 0xe70a03a6
cmp eax, ecx
jle 0x42a120
mov eax, dword [0x48c7bc]
xor eax, 0xd6eb9dd8
mov dword [0x48c7bc], eax
jmp 0x42a12f
mov eax, dword [0x49486c]
xor eax, 0x93dd6631
mov dword [0x49486c], eax
jmp 0x42a16d
mov eax, 0x3d170664
mov cx, word [0x49b0cc]
movsx edx, cx
cmp eax, edx
je 0x42a168
mov eax, 0x5e9d92d5
mov ecx, dword [0x493e48]
cmp eax, ecx
je 0x42a163
jmp 0x42a163
jmp 0x42a168
jmp 0x42a16d
jmp 0x42a172
mov eax, dword [0x48e2fc]
imul eax, eax, 0xfff8fd0a
mov dword [0x48e2fc], eax
mov eax, dword [0x48ac68]
mov ecx, esp
mov edx, dword [esp + 0xac]
mov dword [ecx], edx
call eax
sub esp, 4
mov eax, dword [0x48b5a0]
mov ecx, eax
inc ecx
mov dword [0x48b5a0], ecx
imul eax, eax, 0x933d5f6d
and eax, 0xb19a5b03
cmp eax, 0xbe3d0802
je 0x42a1d2
mov ax, word [0x496e2c]
movsx ecx, ax
mov edx, dword [0x491714]
sub edx, ecx
mov dword [0x491714], edx
test byte [esp + 0x13f], 1
je 0x42b53b
mov eax, 0x3193228e
mov cx, word [0x49a222]
mov dx, cx
inc edx
mov cx, dx
mov word [0x49a222], cx
movsx edx, cx
imul edx, edx, 0x6d4465ac
or edx, 0x707d3603
cmp eax, edx
je 0x42a240
mov eax, 0x18f4f7b4
mov cx, word [0x4989cc]
movsx edx, cx
shl edx, 5
xor edx, 0x6bc52d99
cmp eax, edx
jne 0x42a23b
mov dword [0x491c34], 0x6a244379
jmp 0x42a240
mov dword [esp + 0x134], 0
mov dword [esp + 0x130], 0
mov eax, dword [0x48b858]
mov ecx, eax
inc ecx
mov dword [0x48b858], ecx
mov ecx, dword [0x48f5b0]
dec ecx
mov dword [0x48f5b0], ecx
imul ecx, ecx, 0xf8745d8a
sub eax, ecx
cmp eax, 0x90764637
jle 0x42a293
mov eax, dword [0x48e4b4]
and eax, 0x5edd0af8
mov dword [0x48e4b4], eax
mov eax, 0xd98af382
mov dword [esp + 0x12c], 0
mov word [0x498302], 0x31b1
mov ecx, esp
mov dword [ecx + 4], 0x600
mov dword [ecx], 0x26d3
mov dword [esp + 0x88], eax
call fcn.00447ef0
mov dword [esp + 0x128], eax
mov dx, word [0x496a84]
mov ax, dx
dec eax
mov dx, ax
mov word [0x496a84], dx
movsx eax, dx
mov ecx, dword [esp + 0x88]
cmp ecx, eax
jle 0x42a305
mov eax, dword [0x493b54]
imul eax, eax, 0x44408148
mov dword [0x493b54], eax
mov eax, dword [esp + 0x128]
mov cl, byte [eax]
mov byte [esp + 0x127], cl
mov eax, dword [0x48bb14]
imul eax, eax, 0x90d23a03
mov edx, dword [0x495048]
or edx, eax
mov dword [0x495048], edx
mov eax, dword [0x48f364]
mov edx, dword [0x491828]
mov esi, edx
inc esi
mov dword [0x491828], esi
lea eax, [eax + edx - 0x400d3808]
mov edx, dword [0x49243c]
dec edx
mov dword [0x49243c], edx
add edx, 0x4b456377
cmp eax, edx
jg 0x42a37c
mov ax, word [0x4995c6]
mov cx, ax
add ecx, 0x194de302
mov ax, cx
mov word [0x4995c6], ax
xorps xmm0, xmm0
movaps xmmword [esp + 0x110], xmm0
mov eax, dword [0x4956cc]
mov ecx, eax
dec ecx
mov dword [0x4956cc], ecx
or eax, 0x7bd598bf
cmp eax, 0xe64f2df2
jg 0x42a400
mov eax, 0xc7e3078d
mov ecx, dword [0x48af58]
inc ecx
mov dword [0x48af58], ecx
add ecx, 0x520fd8c9
cmp eax, ecx
jle 0x42a3e9
mov eax, dword [0x4904a8]
mov ecx, dword [0x48ccc0]
shl ecx, 4
sub eax, ecx
and eax, 0xcdf
mov dx, ax
mov word [0x49884c], dx
jmp 0x42a3fb
mov eax, dword [0x494010]
mov ecx, 0xfd036a6b
sub ecx, eax
mov dword [0x48f30c], ecx
jmp 0x42a400
mov word [esp + 0x110], 2
mov eax, dword [0x492374]
dec eax
mov dword [0x492374], eax
mov cx, word [0x4978d2]
mov dx, cx
dec edx
mov cx, dx
mov word [0x4978d2], cx
or eax, edx
mov cx, word [0x497120]
mov dx, cx
and edx, eax
mov cx, dx
mov word [0x497120], cx
mov eax, dword [0x493ca4]
and eax, 0x4a105556
mov dword [0x493ca4], eax
mov dword [esp + 0xfd], 0x13
mov eax, dword [0x493318]
or eax, 0x62c90081
mov dword [0x493318], eax
mov dword [esp + 0x101], 0
mov cx, word [0x4962c8]
movsx eax, cx
sar eax, 4
mov edx, dword [0x492dc0]
mov esi, edx
dec esi
mov dword [0x492dc0], esi
xor eax, edx
cmp eax, 0x7007293e
jg 0x42a4b7
mov ax, word [0x49984a]
mov cx, ax
or ecx, 0x3fbd
mov ax, cx
mov word [0x49984a], ax
mov dword [esp + 0x105], 7
mov ax, word [0x49b370]
mov cx, ax
mov edx, ecx
dec edx
mov ax, dx
mov word [0x49b370], ax
mov ax, word [0x4993ca]
mov dx, ax
or edx, ecx
mov ax, dx
mov word [0x4993ca], ax
mov byte [esp + 0x109], 3
mov ecx, dword [0x49156c]
mov edx, ecx
dec edx
mov dword [0x49156c], edx
xor ecx, 0xdd7812ca
mov edx, dword [0x48d5ac]
add edx, ecx
mov dword [0x48d5ac], edx
lea ecx, [esp + 0xe8]
mov dword [esp + 0x84], ecx
call fcn.00418730
mov si, word [0x496ad0]
mov cx, si
add ecx, 0x9f24f828
mov si, cx
mov word [0x496ad0], si
movzx ecx, byte [esp + 0x127]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x80], eax
call fcn.00444960
sub esp, 8
mov eax, dword [0x48dac8]
not eax
add eax, 0xf91638fc
mov ecx, dword [0x48aed0]
imul ecx, eax
mov dword [0x48aed0], ecx
mov dword [esp + 0xe4], 0
mov eax, dword [esp + 0xe4]
movzx ecx, byte [esp + 0x127]
cmp eax, ecx
je 0x42a5f8
mov eax, dword [0x4947f0]
imul eax, eax, 0x496591b8
mov dword [0x4947f0], eax
mov eax, esp
lea ecx, [esp + 0xe4]
mov dword [eax], ecx
lea ecx, [esp + 0xe8]
call fcn.004356e0
sub esp, 4
mov eax, dword [0x48c0f0]
and eax, 0xfa38129c
mov dword [0x48c0f0], eax
mov eax, dword [esp + 0xe4]
add eax, 1
mov dword [esp + 0xe4], eax
jmp 0x42a592
mov eax, dword [0x4944d0]
and eax, 0xefbbc5d2
mov dword [0x4944d0], eax
mov eax, esp
lea ecx, [esp + 0xe8]
mov dword [eax], ecx
call fcn.0041a840
mov dx, word [0x49994a]
movsx eax, dx
mov ecx, dword [0x48b5a0]
and ecx, eax
mov dword [0x48b5a0], ecx
mov dword [esp + 0xe0], 0
mov eax, dword [esp + 0xe0]
movzx ecx, byte [esp + 0x127]
cmp eax, ecx
je 0x42b22a
mov eax, dword [0x48b958]
mov ecx, eax
dec ecx
mov dword [0x48b958], ecx
mov ecx, dword [0x48fa34]
imul eax, ecx
cmp eax, 0x662edec7
jne 0x42a68e
mov eax, dword [0x48ede4]
sar eax, 9
or eax, 0x3a4b08db
mov ecx, dword [0x493218]
and ecx, eax
mov dword [0x493218], ecx
mov eax, 0x496cd361
mov ecx, dword [esp + 0xe0]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0xe8]
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], eax
call fcn.00439100
sub esp, 4
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov ecx, dword [esp + 0x128]
mov eax, dword [ecx + eax*2 + 1]
mov dword [esp + 0x114], eax
mov eax, dword [0x48e5f0]
or eax, 0x5faa3d5b
mov dword [0x48e5f0], eax
mov eax, dword [esp + 0xe0]
mov ecx, esp
mov dword [ecx], eax
mov ecx, dword [esp + 0x7c]
call fcn.00439100
sub esp, 4
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov ecx, dword [esp + 0x128]
mov si, word [ecx + eax*2 + 5]
mov word [esp + 0x112], si
mov eax, dword [0x48e3f8]
and eax, 0xd04162d7
mov ecx, dword [esp + 0x78]
cmp ecx, eax
jl 0x42a76f
mov eax, 0xfda17b53
mov ecx, dword [0x495970]
shl ecx, 8
sub eax, ecx
cmp eax, 0xedf65f3c
jne 0x42a76a
mov eax, dword [0x4951ec]
dec eax
mov dword [0x4951ec], eax
mov ecx, dword [0x48cde4]
and eax, ecx
xor eax, 0x747e
mov dx, word [0x49a240]
mov cx, dx
and ecx, eax
mov dx, cx
mov word [0x49a240], dx
jmp 0x42a77e
mov eax, dword [0x4954a0]
add eax, 0xab7230af
mov dword [0x4954a0], eax
lea eax, [esp + 0xcc]
mov ecx, eax
mov dword [esp + 0x74], eax
call fcn.00433db0
mov dword [0x48f610], 0x3ec4413f
mov ecx, dword [esp + 0x114]
mov dword [esp + 0x10a], ecx
mov ecx, dword [0x48be88]
and ecx, 0x5fb3f09f
mov edx, dword [0x48c84c]
or edx, ecx
mov dword [0x48c84c], edx
mov si, word [esp + 0x112]
mov word [esp + 0x10e], si
mov ecx, dword [0x48ddc8]
not ecx
and ecx, 0x4185608a
xor ecx, 0x89755f62
mov edx, dword [0x490444]
sub edx, ecx
mov dword [0x490444], edx
mov ecx, esp
lea edx, [esp + 0xfd]
mov dword [ecx], edx
mov dword [ecx + 4], 0x13
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x70], eax
call fcn.00437730
sub esp, 8
mov ecx, dword [0x48f248]
mov edx, ecx
inc edx
mov dword [0x48f248], edx
add ecx, 0xddec1099
mov edx, dword [0x494f18]
shl edx, 6
xor ecx, edx
mov si, word [0x49678c]
mov dx, si
add edx, ecx
mov si, dx
mov word [0x49678c], si
mov ecx, esp
lea edx, [esp + 0xcc]
mov dword [ecx + 4], edx
lea edx, [esp + 0x110]
mov dword [ecx], edx
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], 2
mov ecx, dword [esp + 0xac]
mov dword [esp + 0x6c], eax
call fcn.0043e690
sub esp, 0x10
cmp eax, 0
jg 0x42a8c4
mov eax, 0xc7fc108
mov ecx, dword [0x492c60]
imul ecx, ecx, 0x2b2d4bd7
cmp eax, ecx
jne 0x42a8b4
mov eax, dword [0x48ed74]
imul eax, eax, 0x4a59ca6e
mov dword [0x48ed74], eax
mov dword [esp + 0xc8], 7
jmp 0x42b1d3
lea eax, [esp + 0xcc]
mov cx, word [0x49abcc]
movsx edx, cx
mov esi, dword [0x490570]
not esi
imul esi, esi, 0xb68d6156
sub edx, esi
mov esi, dword [0x48bdfc]
imul esi, edx
mov dword [0x48bdfc], esi
mov ecx, eax
call fcn.00435a70
cmp eax, 0x400
ja 0x42a920
mov dword [0x490eac], 0x7ff9cbff
mov dword [esp + 0xc8], 7
jmp 0x42b1d3
lea eax, [esp + 0xcc]
mov ecx, dword [0x48e4b8]
add ecx, 0x15d7b278
mov dword [0x48e4b8], ecx
mov ecx, eax
call fcn.00435a70
cmp eax, 0x4000
jbe 0x42a979
mov ax, word [0x49b30a]
movsx ecx, ax
mov edx, 0xea28cdc7
sub edx, ecx
mov ecx, dword [0x48bb2c]
xor ecx, edx
mov dword [0x48bb2c], ecx
mov dword [esp + 0xc8], 7
jmp 0x42b1d3
mov eax, dword [0x4918e4]
imul eax, eax, 0x696b9e9d
mov dword [0x4918e4], eax
lea ecx, [esp + 0xcc]
call fcn.00431410
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x140]
mov esi, dword [esp + 0x144]
sub ecx, edx
sbb eax, esi
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], ecx
jae 0x42aac9
jmp 0x42a9bf
mov eax, 0xb8d1a2d4
mov ecx, dword [0x49595c]
and ecx, 0xb68ef135
mov dword [0x49595c], ecx
mov ecx, dword [esp + 0x12c]
inc ecx
mov dword [esp + 0x12c], ecx
mov ecx, dword [0x48f1e4]
add ecx, 0xa918888d
cmp eax, ecx
jne 0x42aa08
mov eax, dword [0x48c548]
xor eax, 0x67fc7fbc
mov dword [0x48c548], eax
cmp dword [esp + 0x12c], 3
jne 0x42aaaf
mov eax, 0xfffd777f
mov cx, word [0x496af8]
mov dx, cx
inc edx
mov si, dx
mov word [0x496af8], si
movsx edx, cx
cmp eax, edx
jle 0x42aa5a
mov eax, dword [0x491024]
inc eax
mov dword [0x491024], eax
mov ecx, dword [0x49011c]
imul ecx, eax
mov dword [0x49011c], ecx
jmp 0x42aa9f
mov eax, dword [0x48f238]
and eax, 0x20701e1b
mov ecx, dword [0x48fe04]
and ecx, 0x3ca80051
cmp eax, ecx
jl 0x42aa9a
mov ax, word [0x496fb2]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x496fb2], ax
movsx ecx, ax
add ecx, 0xb806cc85
mov dword [0x48aee8], ecx
jmp 0x42aa9f
mov dword [esp + 0xc8], 5
jmp 0x42b1d3
mov dword [0x48bc6c], 0x4204d6d
mov dword [esp + 0xc8], 7
jmp 0x42b1d3
mov eax, dword [0x48feec]
imul eax, eax, 0x2b6e6eeb
add eax, 0xbcd19322
mov ecx, dword [0x4913dc]
dec ecx
mov dword [0x4913dc], ecx
xor ecx, 0x679d906
cmp eax, ecx
jg 0x42ab26
mov eax, dword [0x49224c]
imul eax, eax, 0x6efcfd97
mov ecx, dword [0x48ec1c]
shr ecx, 3
or eax, ecx
mov dx, word [0x4976fc]
mov cx, dx
imul ecx, eax
mov dx, cx
mov word [0x4976fc], dx
jmp 0x42ab35
mov eax, dword [0x48ce40]
add eax, 0x92db57e2
mov dword [0x48ce40], eax
mov eax, 0x4e6ff7eb
mov dword [esp + 0x12c], 0
mov cx, word [0x498e24]
mov dx, cx
dec edx
mov si, dx
mov word [0x498e24], si
movsx edx, cx
cmp eax, edx
jne 0x42ab98
mov eax, dword [0x494f54]
mov ecx, eax
dec ecx
mov dword [0x494f54], ecx
xor eax, 0xe5abd8f3
cmp eax, 0xcbabdd4f
je 0x42ab93
mov eax, dword [0x49103c]
shl eax, 0x10
lea eax, [eax + eax*8]
mov dword [0x49103c], eax
jmp 0x42abb0
mov ax, word [0x49993c]
mov cx, ax
and ecx, 0x5198
mov ax, cx
mov word [0x49993c], ax
lea eax, [esp + 0xcc]
lea ecx, [esp + 0xcc]
mov dword [esp + 0x60], eax
call fcn.00431410
movzx eax, word [eax + 8]
mov dword [esp + 0xc4], eax
mov dx, word [0x49902e]
movsx eax, dx
mov ecx, dword [0x48eae0]
xor eax, ecx
not eax
mov dword [0x48eae0], eax
imul eax, dword [esp + 0xc4], 6
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x5c], eax
call fcn.00435a70
sub eax, 0x400
sub eax, 0xa
mov ecx, dword [esp + 0x5c]
cmp ecx, eax
jbe 0x42ac3c
mov ax, word [0x498e1c]
mov cx, ax
add ecx, 0x5df96b6c
mov ax, cx
mov word [0x498e1c], ax
mov dword [esp + 0xc8], 7
jmp 0x42b1d3
mov eax, dword [0x48c42c]
add eax, 0x877077ba
mov dword [0x48c42c], eax
mov byte [esp + 0xc3], 0
mov eax, dword [0x49254c]
imul eax, eax, 0x329e2ea0
mov dword [0x49254c], eax
mov dword [esp + 0xbc], 0
mov eax, dword [esp + 0xbc]
cmp eax, dword [esp + 0xc4]
je 0x42ae57
lea eax, [esp + 0xcc]
mov ecx, dword [0x494918]
shr ecx, 8
mov dx, cx
mov word [0x498512], dx
mov ecx, dword [esp + 0x114]
imul esi, dword [esp + 0xbc], 6
add esi, 0xa
mov dword [esp + 0x58], ecx
mov ecx, eax
mov dword [esp + 0x54], esi
call fcn.00431410
mov ecx, dword [esp + 0x58]
mov esi, dword [esp + 0x54]
cmp ecx, dword [eax + esi]
jne 0x42ae29
mov ax, word [0x49a5dc]
mov cx, ax
inc ecx
mov dx, cx
mov word [0x49a5dc], dx
movsx ecx, ax
add ecx, 0x810a0c02
mov esi, dword [0x4912f8]
inc esi
mov dword [0x4912f8], esi
cmp ecx, esi
jle 0x42ad29
mov eax, dword [0x48ca8c]
dec eax
mov dword [0x48ca8c], eax
xor eax, 0xbacc5783
mov ecx, dword [0x490f40]
sar ecx, 8
or eax, ecx
mov ecx, dword [0x49467c]
and ecx, eax
mov dword [0x49467c], ecx
lea eax, [esp + 0xcc]
movzx ecx, word [esp + 0x112]
imul edx, dword [esp + 0xbc], 6
add edx, 0xa
mov dword [esp + 0x50], ecx
mov ecx, eax
mov dword [esp + 0x4c], edx
call fcn.00431410
mov ecx, dword [esp + 0x4c]
movzx eax, word [eax + ecx + 4]
mov edx, dword [esp + 0x50]
cmp edx, eax
jne 0x42ada3
mov ax, word [0x498204]
movsx ecx, ax
mov edx, dword [0x48beac]
or edx, ecx
mov dword [0x48beac], edx
mov byte [esp + 0xc3], 1
mov ax, word [0x495e2c]
mov cx, ax
add ecx, 0x28b0052c
mov ax, cx
mov word [0x495e2c], ax
jmp 0x42ae57
mov eax, 0x198d468e
mov ecx, dword [0x492c74]
and ecx, 0x6277c0
cmp eax, ecx
jne 0x42adcb
mov dword [0x48e4e4], 0x25800
jmp 0x42ae24
mov eax, dword [0x48d4e0]
not eax
imul eax, eax, 0x21062610
mov cx, word [0x498616]
mov dx, cx
inc edx
mov si, dx
mov word [0x498616], si
movsx edx, cx
add edx, 0xd633c232
cmp eax, edx
jg 0x42ae1f
mov eax, dword [0x49474c]
mov ecx, eax
inc ecx
mov dword [0x49474c], ecx
xor eax, 0xd6feed43
mov ecx, dword [0x493c4c]
and ecx, eax
mov dword [0x493c4c], ecx
jmp 0x42ae24
jmp 0x42ae29
mov ax, word [0x49ac38]
mov cx, ax
or ecx, 0x5523
mov ax, cx
mov word [0x49ac38], ax
mov eax, dword [esp + 0xbc]
add eax, 1
mov dword [esp + 0xbc], eax
jmp 0x42ac6e
mov eax, dword [0x48b348]
dec eax
mov dword [0x48b348], eax
mov ecx, dword [0x48da7c]
sub eax, ecx
cmp eax, 0xba7961b4
jge 0x42ae90
mov eax, dword [0x48ecf0]
sar eax, 1
imul eax, eax, 0x45c17d11
mov ecx, dword [0x494f1c]
and ecx, eax
mov dword [0x494f1c], ecx
test byte [esp + 0xc3], 1
jne 0x42aebd
mov eax, dword [0x49193c]
or eax, 0xf0ff8430
mov dword [0x49193c], eax
mov dword [esp + 0xc8], 7
jmp 0x42b1d3
mov eax, dword [0x48cc18]
mov ecx, eax
dec ecx
mov dword [0x48cc18], ecx
mov ecx, dword [0x48c62c]
and eax, ecx
or eax, 0xa56f14ee
cmp eax, 0x934201e1
jge 0x42aef1
mov word [0x49984a], 0xeedc
jmp 0x42af09
mov ax, word [0x497bbe]
mov cx, ax
add ecx, 0x4bc19a4d
mov ax, cx
mov word [0x497bbe], ax
mov eax, esp
mov dword [eax + 4], 0x408
mov dword [eax], 0x6b3
call fcn.00447ef0
mov dword [esp + 0xb8], eax
mov eax, dword [0x493e48]
not eax
imul eax, eax, 0xf40a314e
and eax, 0x5d55112e
mov ecx, dword [0x48bea0]
sub ecx, eax
mov dword [0x48bea0], ecx
lea eax, [esp + 0xcc]
mov ecx, eax
mov dword [esp + 0x48], eax
call fcn.00435a70
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x44], eax
call fcn.00431410
mov ecx, dword [esp + 0xb8]
mov edx, esp
mov esi, dword [esp + 0x44]
mov dword [edx + 8], esi
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00419f10
mov dword [esp + 0xb4], eax
mov eax, dword [0x48de50]
mov ecx, eax
dec ecx
mov dword [0x48de50], ecx
mov dword [0x48c0f0], eax
mov eax, dword [esp + 0xb8]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x408
call fcn.00437960
mov eax, dword [0x48e54c]
mov di, word [0x497740]
mov cx, di
inc ecx
mov bx, cx
mov word [0x497740], bx
movsx ecx, di
or eax, ecx
mov ecx, dword [0x48c528]
and ecx, eax
mov dword [0x48c528], ecx
cmp dword [esp + 0xb4], 4
jle 0x42b00e
lea eax, [esp + 0xcc]
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x40], ecx
mov ecx, eax
call fcn.00435a70
mov ecx, dword [esp + 0x40]
cmp ecx, eax
jbe 0x42b06f
mov eax, 0x44102e5a
mov ecx, dword [0x48cc98]
or ecx, 0xe7fe
mov dx, word [0x49a378]
mov si, dx
add esi, ecx
mov dx, si
mov word [0x49a378], dx
mov dword [esp + 0xb4], 0
mov dx, word [0x49ab56]
movsx ecx, dx
sar ecx, 7
sub ecx, 0x6f765b98
cmp eax, ecx
jne 0x42b06a
mov eax, dword [0x48f330]
add eax, 0xc0fdd0fb
mov dword [0x48f330], eax
jmp 0x42b0a7
mov eax, dword [0x48df58]
and eax, 0x72c44775
mov ecx, dword [0x492d30]
sub ecx, eax
mov dword [0x492d30], ecx
mov eax, dword [esp + 0xb4]
add eax, 0xfffffffc
mov dword [esp + 0xb4], eax
mov eax, dword [0x494748]
add eax, 0x9f5ec01a
mov dword [0x494748], eax
mov ax, word [0x49aa12]
movsx ecx, ax
imul ecx, ecx, 0xf4102346
mov edx, dword [0x494214]
add edx, ecx
mov dword [0x494214], edx
mov ecx, dword [esp + 0xb4]
imul edx, dword [esp + 0xc4], 6
add edx, 0xa
cmp ecx, edx
jge 0x42b11d
mov eax, 0x34431793
mov ecx, dword [0x4950c0]
xor ecx, 0xffffffff
cmp eax, ecx
jge 0x42b10d
mov eax, dword [0x495778]
dec eax
mov dword [0x495778], eax
mov ecx, dword [0x48bd2c]
sub ecx, eax
mov dword [0x48bd2c], ecx
mov dword [esp + 0xc8], 7
jmp 0x42b1d3
mov eax, 0xd3df89df
mov ecx, dword [0x48d55c]
inc ecx
mov dword [0x48d55c], ecx
imul ecx, ecx, 0x1bc078f1
mov edx, dword [0x495668]
add edx, ecx
mov dword [0x495668], edx
lea ecx, [esp + 0xcc]
mov dword [esp + 0x3c], eax
call fcn.00431410
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x134], eax
mov dword [esp + 0x130], ecx
mov si, word [0x4987bc]
mov ax, si
inc eax
mov di, ax
mov word [0x4987bc], di
movsx eax, si
mov ecx, dword [esp + 0x3c]
sub ecx, eax
or ecx, 0x6c397eaa
cmp ecx, 0x6a9ecf84
jge 0x42b1c8
mov eax, dword [0x48b534]
add eax, 0xd7e70c9a
cmp eax, 0xe397bd1d
jle 0x42b1ba
mov dword [0x490ae4], 0x1f44f304
jmp 0x42b1c3
mov word [0x498f1a], 0xf5a4
jmp 0x42b1c8
mov dword [esp + 0xc8], 5
lea ecx, [esp + 0xcc]
call fcn.00415f00
mov ecx, dword [esp + 0xc8]
mov eax, ecx
sub eax, 5
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], eax
je 0x42b22a
jmp 0x42b1fe
mov eax, dword [esp + 0x38]
sub eax, 7
mov dword [esp + 0x30], eax
jne 0x42b584
jmp 0x42b214
mov eax, dword [esp + 0xe0]
add eax, 1
mov dword [esp + 0xe0], eax
jmp 0x42a63a
mov eax, dword [0x48bde4]
mov cx, word [0x497238]
movsx edx, cx
imul edx, edx, 0xbae1b200
and eax, edx
mov cx, word [0x49a938]
movsx edx, cx
sar edx, 4
cmp eax, edx
jg 0x42b265
mov eax, dword [0x4905d8]
xor eax, 0x51b8ca90
mov dword [0x4905d8], eax
mov eax, esp
lea ecx, [esp + 0xfd]
mov dword [eax], ecx
mov dword [eax + 4], 0x13
call fcn.0041c290
mov dx, word [0x49ae8c]
mov ax, dx
add eax, 0x5415c7fe
mov dx, ax
mov word [0x49ae8c], dx
mov eax, dword [esp + 0x128]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x600
call fcn.00437960
mov eax, dword [0x4924c0]
add eax, 0xb171b3dc
mov dword [0x4924c0], eax
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
or eax, ecx
mov dword [esp + 0x2c], eax
je 0x42b520
jmp 0x42b2da
mov eax, 0xd0044b2
mov ecx, dword [0x48e490]
mov edx, ecx
inc edx
mov dword [0x48e490], edx
imul ecx, ecx, 0x4a9ff315
or ecx, 0x67d6b837
cmp eax, ecx
jg 0x42b311
mov eax, dword [0x48c6d0]
or eax, 0x27164c76
mov dword [0x48c6d0], eax
mov eax, dword [0x48ac64]
mov ecx, esp
mov edx, dword [esp + 0xac]
mov dword [ecx], edx
call eax
sub esp, 4
mov eax, dword [0x48b298]
add eax, 0x3e671892
mov dword [0x48b298], eax
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0xac]
mov dword [ecx + 0x2c], eax
mov eax, dword [esp + 0x118]
mov dword [ecx + 0x28], eax
mov eax, dword [esp + 0x110]
mov edx, dword [esp + 0x114]
mov dword [ecx + 0x24], edx
mov dword [ecx + 0x20], eax
mov eax, dword [0x490838]
dec eax
mov dword [0x490838], eax
or eax, 0x5d127b73
mov edx, dword [0x48efbc]
sub edx, eax
mov dword [0x48efbc], edx
mov ebx, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
mov eax, dword [esp + 0xac]
add eax, 0x18
mov edx, dword [esp + 0xac]
mov esi, dword [edx + 0x18]
mov edi, dword [edx + 0x1c]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], edi
jmp 0x42b3c0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x14], eax
mov eax, ecx
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x20]
lock cmpxchg8b qword [esi]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], edx
jne 0x42b3c0
jmp 0x42b3f5
mov eax, 0xe376977e
mov ecx, dword [0x4921ac]
and ecx, 0x8e2fafc4
mov dword [0x4921ac], ecx
mov ecx, dword [0x48ac68]
mov edx, esp
mov esi, dword [esp + 0xac]
mov dword [edx], esi
mov dword [esp + 0x10], eax
call ecx
sub esp, 4
mov dword [0x48c724], 0x4f28f47b
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x11c]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x118]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x114]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov di, word [0x498e8e]
movsx eax, di
or eax, 0xc24487a5
mov ecx, dword [esp + 0x10]
cmp ecx, eax
je 0x42b4fd
mov ax, word [0x49a1fe]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x49a1fe], ax
movsx ecx, ax
or ecx, 0xeb577a37
mov edx, dword [0x4900e8]
mov esi, edx
dec esi
mov dword [0x4900e8], esi
cmp ecx, edx
jle 0x42b4d1
mov eax, dword [0x48eef8]
sar eax, 8
mov ecx, dword [0x48af5c]
or eax, ecx
cmp eax, 0x3b188839
jne 0x42b4cc
jmp 0x42b4cc
jmp 0x42b4f8
mov eax, 0xb30c2c60
mov cx, word [0x4969c6]
movsx edx, cx
sub edx, 0xefcf8c25
cmp eax, edx
jge 0x42b4f3
jmp 0x42b4f3
jmp 0x42b4f8
jmp 0x42b4fd
mov dword [esp + 0x14c], 1
mov ax, word [0x49a146]
mov cx, ax
add ecx, 0x9e86eb90
mov ax, cx
mov word [0x49a146], ax
mov eax, dword [0x493d60]
add eax, 0x479da487
mov dword [0x493d60], eax
lea ecx, [esp + 0xe8]
call fcn.00436680
mov eax, 0xd70f3d33
mov ecx, dword [0x494ae8]
dec ecx
mov dword [0x494ae8], ecx
xor ecx, 0x5ae577e8
cmp eax, ecx
jge 0x42b573
mov ax, word [0x49ad62]
mov cx, ax
and ecx, 0xf701
mov ax, cx
mov word [0x49ad62], ax
mov eax, dword [esp + 0x14c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 8
int3