Function at 0x4279b0
Capabilities:
Hash data using murmur3
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 4]
cmp eax, dword [ecx + 0xc]
jbe 0x428292
sub esp, 0x84
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x58]
mov dword [esp + 0x80], eax
test eax, eax
je 0x427ae5
mov ecx, dword [esp + 0x8c]
cmp ecx, 0x10
jae 0x427aec
mov edx, dword [eax + 0x38]
test edx, edx
sete dl
mov ebx, dword [eax + 0x3c]
test ebx, ebx
sete bl
lea ebp, [eax + 0x34]
and ebx, edx
test bl, bl
je 0x427a79
mov dword [esp + 0x74], ebp
mov eax, dword [esp + 0x88]
test byte [eax], al
nop
mov dword [esp], eax
call fcn.004097f0
mov eax, dword [esp + 0x88]
lea ecx, [eax + 8]
mov dword [esp], ecx
call fcn.0042c390
lea edi, [esp + 0x5c]
lea esi, [esp + 4]
call fcn.00463c3e
mov edi, dword [esp + 0x74]
lea esi, [esp + 0x5c]
call fcn.00463c3e
nop
nop
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004099f0
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x74]
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.0042bbd0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x427add
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
mov edx, dword [edx + 0x58]
test edx, edx
je 0x427ad0
mov ebx, dword [edx + 0x708]
test ebx, ebx
je 0x427ad0
lea ebp, [ebx - 1]
cmp ebp, 0x80
jae 0x428285
mov ebx, dword [edx + ebx*4 + 0x708]
mov dword [edx + 0x708], ebp
jmp 0x427ad2
xor ebx, ebx
test ebx, ebx
je 0x427adf
xor edx, edx
jmp 0x427c19
xor ebx, ebx
mov edx, eax
mov ebp, ecx
jmp 0x427af2
mov ecx, dword [esp + 0x8c]
xor edx, edx
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x58], ebx
mov dword [esp + 0x50], edx
mov eax, dword [esp + 0x88]
test byte [eax], al
nop
mov dword [esp], eax
call fcn.004097f0
mov eax, dword [esp + 0x50]
test eax, eax
je 0x427b23
xor edx, edx
mov ecx, dword [esp + 0x3c]
jmp 0x427bcd
mov eax, dword [esp + 0x88]
lea ecx, [eax + 8]
mov dword [esp + 0x7c], ecx
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
call fcn.0042b200
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x427b54
xor edx, edx
jmp 0x427bcd
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
call fcn.004282a0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 8]
test al, al
jne 0x427b9e
nop
nop
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004099f0
mov dword [esp + 0x94], 0
add esp, 0x84
ret
mov dword [esp + 0x48], ecx
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
call fcn.0042b200
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x42826f
mov edx, dword [esp + 0x48]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x48], edx
mov dword [esp + 0x50], eax
mov ebx, dword [esp + 0x58]
test ebx, ebx
jne 0x427bf4
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00427880
mov ebx, dword [esp + 4]
mov dword [esp + 0x58], ebx
nop
nop
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004099f0
mov ebx, dword [esp + 0x58]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x48], edx
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x8c]
mov dword [esp + 8], ebp
call fcn.00428b40
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 8], edx
call fcn.00427720
movzx eax, byte [esp + 0xc]
test al, al
je 0x427c75
mov edx, dword [esp + 0x40]
mov byte [edx + 0x3c], 1
jmp 0x427c79
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x8c]
shl eax, 0xd
mov dword [esp + 0x44], eax
movzx ebp, byte [esp + 0x90]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x427d7a
movzx esi, byte [esp + 0x91]
xchg esi, eax
mov byte [edx + 0x3a], al
xchg esi, eax
xchg esi, eax
shr al, 1
xchg esi, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x427cc5
mov dword [edx + 0x40], eax
mov dword [edx + 0x1c], 1
mov dword [edx + 0x34], 0
mov ecx, edx
jmp 0x427cff
xchg esi, eax
movsx eax, al
xchg esi, eax
cmp esi, 0x44
jae 0x428263
lea ecx, [0xb516c0]
movzx ecx, word [ecx + esi*2]
mov dword [edx + 0x40], ecx
test ecx, ecx
je 0x42825e
xor edx, edx
div ecx
mov ecx, dword [esp + 0x40]
mov dword [ecx + 0x1c], eax
lea edx, [0xb53380]
mov edx, dword [edx + esi*4]
mov dword [ecx + 0x34], edx
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x50], 0
mov dword [ecx + 0x20], 0xffffffff
mov dword [ecx + 0x24], 0xffffffff
mov eax, dword [ecx + 0x1c]
mov dword [esp], eax
call fcn.004296e0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x40]
mov dword [ecx + 0x2c], eax
mov eax, dword [ecx + 0x1c]
mov dword [esp], eax
call fcn.00429870
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x40]
mov dword [ecx + 0x28], eax
lea eax, [ecx + 0x30]
mov edx, dword [esp + 0x88]
mov ebx, dword [edx + 0xa0]
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.004021d0
nop
mov eax, dword [esp + 0x40]
lea ecx, [eax + 0x3b]
mov dword [esp], ecx
mov byte [esp + 4], 1
call fcn.00402270
jmp 0x427da5
mov dword [edx + 0x14], 0
mov dword [edx + 0x1c], 0
mov eax, dword [edx + 0x10]
shl eax, 0xd
add eax, dword [edx + 0xc]
mov dword [edx + 0x44], eax
nop
lea eax, [edx + 0x3b]
mov dword [esp], eax
mov byte [esp + 4], 2
call fcn.00402270
lea eax, [0xbab208]
mov dword [esp], eax
call fcn.004020a0
mov eax, dword [esp + 4]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x30], ecx
nop
lea edx, [0xbaaac4]
mov dword [esp], edx
call fcn.00401f30
movzx eax, byte [esp + 4]
test al, al
je 0x427ddf
xor eax, eax
jmp 0x427e2c
nop
lea eax, [0xbab350]
mov dword [esp], eax
call fcn.00402200
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x3c]
add eax, ecx
mov edx, dword [esp + 8]
adc edx, 0
mov ebx, dword [esp + 0x28]
cmp eax, ebx
xchg ebp, ebx
seta bl
xchg ebp, ebx
mov esi, dword [esp + 0x30]
cmp esi, edx
sete dl
xchg esi, ebx
setb bl
xchg esi, ebx
and edx, ebp
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x427e2a
sub eax, ebx
jmp 0x427e2c
xor eax, eax
mov dword [esp + 0x4c], eax
lea ecx, [0xbaa810]
mov dword [esp], ecx
call fcn.00402200
mov eax, dword [esp + 8]
cmp eax, 0xffffffff
setne cl
mov edx, dword [esp + 4]
cmp edx, 0xffffffff
setne bl
or ecx, ebx
test cl, cl
je 0x427ef1
mov ecx, dword [esp + 0x48]
test ecx, ecx
ja 0x427e72
mov eax, dword [esp + 0x80]
test eax, eax
jmp 0x427efa
mov dword [esp + 0x34], eax
mov dword [esp + 0x24], edx
call fcn.00421b50
mov eax, dword [esp]
mov ecx, dword [esp + 0x48]
add eax, ecx
mov edx, dword [esp + 4]
adc edx, 0
mov ebx, dword [esp + 0x24]
cmp eax, ebx
xchg ebp, ebx
seta bl
xchg ebp, ebx
mov esi, dword [esp + 0x34]
cmp esi, edx
sete dl
xchg esi, ebx
setb bl
xchg esi, ebx
and edx, ebp
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x427ee2
sub eax, ebx
cmp eax, ecx
jb 0x427ebe
mov eax, ecx
mov ecx, dword [esp + 0x4c]
cmp ecx, eax
jae 0x427ed1
mov ecx, dword [esp + 0x80]
test ecx, ecx
jmp 0x427f00
mov edx, dword [esp + 0x80]
test edx, edx
mov ecx, edx
mov eax, dword [esp + 0x4c]
jmp 0x427f00
mov ecx, dword [esp + 0x80]
test ecx, ecx
mov eax, dword [esp + 0x4c]
jmp 0x427f00
mov eax, dword [esp + 0x80]
test eax, eax
mov ecx, eax
mov eax, dword [esp + 0x4c]
je 0x427fef
test eax, eax
jbe 0x427fef
mov dword [esp + 0x4c], eax
nop
call fcn.004643d0
mov eax, dword [esp + 0x80]
add eax, 0x948
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 4]
mov ebx, dword [esp]
mov dword [esp + 0x20], ebx
mov dword [esp], eax
mov byte [esp + 4], 3
mov dword [esp + 0xc], edx
mov dword [esp + 8], ebx
call fcn.0041aa80
mov eax, dword [esp + 0x88]
test byte [eax], al
movzx ecx, byte [esp + 0x10]
mov byte [esp + 0x1b], cl
lea edx, [eax + 8]
mov dword [esp], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 4], edx
lea edx, [0x9621a4]
mov dword [esp + 8], edx
call fcn.00422a00
nop
call fcn.004643d0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
mov edx, dword [esp]
movzx ebx, byte [esp + 0x1b]
test bl, bl
je 0x427fc2
mov dword [esp + 0x1c], edx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov byte [esp + 4], 3
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
call fcn.0041ac50
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov ebx, edx
sub edx, ecx
mov ebp, dword [esp + 0x88]
lea esi, [ebp + 0x88]
mov dword [esp], esi
sub ebx, ecx
mov ecx, dword [esp + 0x38]
sbb eax, ecx
mov dword [esp + 8], eax
mov dword [esp + 4], edx
call fcn.004020b0
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x428045
xor ecx, ecx
sub ecx, eax
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x50]
mov dword [esp], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00414e90
lea eax, [0xbab330]
mov dword [esp], eax
xor eax, eax
mov ecx, dword [esp + 0x3c]
sub eax, ecx
mov eax, 0
sbb eax, 0
mov dword [esp + 8], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00430a50
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x44]
sub ecx, eax
xor ebx, ebx
sub ebx, ecx
lea ecx, [0xbab338]
mov dword [esp], ecx
mov ecx, 0
sbb ecx, 0
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
call fcn.00430a50
movzx eax, byte [esp + 0x90]
test al, al
jne 0x428097
lea eax, [0xbab328]
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.00430a50
lea eax, [0xbae9c0]
mov dword [esp], eax
call fcn.00430b70
mov eax, dword [esp + 4]
mov dword [esp + 0x70], eax
test byte [eax], al
xor ecx, ecx
mov edx, dword [esp + 0x3c]
sub ecx, edx
mov dword [esp + 0x54], ecx
mov dword [esp], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edx
call fcn.004020b0
mov eax, dword [esp + 0x70]
lea ecx, [eax + 8]
mov dword [esp], ecx
xor ecx, ecx
mov edx, dword [esp + 0x3c]
sub ecx, edx
mov ecx, 0
sbb ecx, 0
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 4], ecx
call fcn.004020b0
movzx eax, byte [esp + 0x90]
cmp al, 1
ja 0x42814d
test al, al
jne 0x42812c
mov eax, dword [esp + 0x70]
add eax, 0x10
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.004020b0
jmp 0x428197
mov eax, dword [esp + 0x70]
add eax, 0x18
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.004020b0
jmp 0x428197
cmp al, 2
je 0x428178
cmp al, 3
jne 0x428197
mov eax, dword [esp + 0x70]
add eax, 0x20
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.004020b0
jmp 0x428197
mov eax, dword [esp + 0x70]
add eax, 0x28
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.004020b0
lea eax, [0xbae9c0]
mov dword [esp], eax
call fcn.00430c70
mov eax, dword [esp + 0x40]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 0x88]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00427690
movzx eax, byte [esp + 0x90]
test al, al
jne 0x428247
mov eax, dword [0xb8a564]
test byte [eax], al
nop
nop
mov edx, dword [esp + 0x40]
mov ecx, dword [edx + 0xc]
nop
mov edx, ecx
shr ecx, 0x16
mov eax, dword [eax + ecx*4]
test byte [eax], al
mov ecx, edx
shr edx, 0x10
and edx, 0x3f
lea eax, [eax + edx + 0x40800]
mov dword [esp], eax
shr ecx, 0xd
and ecx, 7
mov eax, 1
shl eax, cl
mov byte [esp + 4], al
call fcn.00402250
mov eax, dword [esp + 0x88]
test byte [eax], al
add eax, 0xb0
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
call fcn.00402130
call fcn.00463130
mov eax, dword [esp + 0x40]
mov dword [esp + 0x94], eax
add esp, 0x84
ret
call fcn.00435d80
mov eax, esi
mov ecx, 0x44
call fcn.00463540
lea eax, [0x740d5f]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.00437760
mov eax, ebp
mov ecx, pe_nt_image_headers32
call fcn.00463540
nop
call fcn.00460a20
jmp fcn.004279b0