Function at 0x428f30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4a99ab
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4e86e0]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov edi, dword [esp + 0x34]
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x10]
movzx eax, word [ecx + 6]
movzx eax, ax
add eax, 0xffffd650
cmp eax, 0x30
ja case.0x428f79.10673
movzx edx, byte [eax + 0x42957c]
jmp dword [edx*4 + 0x429568]
push 0x4be3f8
push 0x40
lea eax, [edi + 0x48]
push eax
jmp 0x428fd9
push str.P35_G33_G31
push 0x40
lea ecx, [edi + 0x48]
push ecx
jmp 0x428fd9
push 0x4be3e8
push 0x40
lea edx, [edi + 0x48]
push edx
jmp 0x428fd9
push 0x4be3e4
lea esi, [edi + 0x48]
push 0x40
push esi
call fcn.004917bc
add esp, 0xc
push 0xe8
mov ecx, edi
call fcn.00436b00
test eax, 0x2000000
mov dword [esp + 0x34], eax
je case.0x428f79.10673
push 0x4be3e0
push 0x40
push esi
call fcn.004917bc
add esp, 0xc
push 0x48
mov ecx, edi
call fcn.00436b00
mov esi, eax
mov ecx, eax
and esi, 0xffffc000
and ecx, 1
mov dword [esp + 0x34], eax
mov dword [esp + 0x20], ecx
jne 0x429034
or eax, 1
push eax
push 0x48
mov ecx, edi
mov dword [esp + 0x3c], eax
call fcn.00436b30
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x48
mov ecx, edi
call fcn.00436b00
mov dword [esp + 0x34], eax
and eax, 1
mov dword [esp + 0x20], eax
je 0x429552
push 0x2000000
push esi
xor ebx, ebx
push ebx
call fcn.00438330
mov ecx, eax
call fcn.004376b0
cmp eax, ebx
mov dword [edi + 0x98], eax
jne 0x42909b
push 0x20
call fcn.00482367
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, ebx
mov dword [esp + 0x2c], ebx
je 0x42907b
push 0x1000
push esi
push ebx
mov ecx, eax
call fcn.0044b9d0
mov esi, eax
jmp 0x42907d
xor esi, esi
mov dword [esp + 0x2c], 0xffffffff
mov dword [edi + 0x98], esi
call fcn.00438330
mov ecx, dword [eax + 0x18]
push esi
call fcn.00426a70
jmp 0x4290a2
mov dword [eax + 0x10], 0x1000
mov ecx, dword [edi + 0x98]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
lea edx, [esp + 0x34]
push edx
push 0xc00
xor ebp, ebp
mov dword [esp + 0x1c], ebx
call eax
mov eax, dword [esp + 0x34]
cmp eax, 0xffffffff
je case.0x4293a1.1
cmp eax, ebx
je case.0x4293a1.1
mov ecx, dword [edi + 4]
mov edx, dword [ecx + 0x10]
movzx eax, word [edx + 6]
sub eax, 0x2e10
mov esi, dword [esp + 0x38]
je 0x4291a2
sub eax, 0x10
je 0x4291a2
sub eax, 0x10
je 0x4291a2
mov ecx, dword [edi + 0x98]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
lea edx, [esp + 0x34]
push edx
push 0x1e8
call eax
mov eax, dword [esp + 0x34]
and eax, 1
sub eax, ebp
je 0x4291d5
sub eax, 1
jne 0x429131
mov dword [esi + 4], 7
mov ecx, dword [edi + 0x98]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
lea edx, [esp + 0x34]
push edx
push 0x260
call eax
mov ecx, dword [esp + 0x34]
shr ecx, 0x14
and ecx, 0xf
mov dword [esp + 0x34], ecx
je 0x429164
mov dword [esp + 0x14], 1
mov ebx, dword [esp + 0x14]
mov ecx, dword [edi + 0x98]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x34]
push eax
push 0x660
call edx
mov eax, dword [esp + 0x34]
shr eax, 0x14
and eax, 0xf
mov dword [esp + 0x34], eax
je 0x429190
mov ebp, 1
cmp ebx, 1
jne 0x4291e1
cmp ebp, ebx
jne 0x4291e1
mov dword [esi + 0x50], 2
jmp 0x4291e8
mov ecx, dword [edi + 0x98]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x34]
push eax
push 0x1a8
call edx
mov eax, dword [esp + 0x34]
shr eax, 2
and eax, 1
sub eax, 0
je 0x42912a
sub eax, 1
jne 0x429131
mov dword [esi + 4], 9
jmp 0x429131
mov dword [esi + 0x50], 1
mov ecx, dword [edi + 0x98]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x34]
push eax
push 0x111
call edx
mov eax, dword [esp + 0x34]
shr eax, 1
and eax, 1
mov ecx, 1
sub ecx, eax
cmp ebx, 1
mov dword [esi + 0x54], ecx
jne 0x429231
mov ebx, 0x25d
mov dword [esp + 0x18], 0x265
lea ebp, [ebx - 0xb]
mov dword [esp + 0x1c], 0x258
jmp 0x429249
mov ebx, 0x65d
mov dword [esp + 0x18], 0x665
lea ebp, [ebx - 0xb]
mov dword [esp + 0x1c], 0x658
mov ecx, dword [edi + 0x98]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x34]
push eax
mov eax, dword [esp + 0x1c]
push eax
call edx
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x10]
movzx eax, word [ecx + 6]
sub eax, 0x2e10
je 0x42929f
sub eax, 0x10
je 0x42929f
sub eax, 0x10
je 0x42929f
mov edx, dword [esp + 0x34]
shr edx, 8
and edx, 0x3f
test edx, edx
mov dword [esp + 0x18], edx
fild dword [esp + 0x18]
jge 0x429297
fadd dword [0x4be290]
fsub qword [0x4be3d8]
jmp 0x4292c1
mov eax, dword [esp + 0x34]
shr eax, 8
and eax, 0x3f
test eax, eax
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
jge 0x4292bb
fadd dword [0x4be290]
fsub qword [0x4be3d0]
fstp dword [esi + 0x18]
mov ecx, dword [edi + 0x98]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x34]
push eax
push ebx
call edx
mov eax, dword [esp + 0x34]
and eax, 0x3f
mov dword [esi + 0x24], eax
mov ecx, dword [edi + 0x98]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x34]
push eax
push ebp
call edx
mov eax, dword [esp + 0x34]
shr eax, 0xd
and eax, 0xf
mov dword [esi + 0x20], eax
mov ecx, dword [edi + 0x98]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x34]
push eax
mov eax, dword [esp + 0x20]
push eax
call edx
mov eax, dword [esp + 0x34]
shr eax, 0x11
and eax, 0xf
mov ebx, 1
cmp dword [esp + 0x14], ebx
mov dword [esi + 0x1c], eax
mov ecx, dword [edi + 0x98]
jne 0x429349
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x34]
push eax
push 0x220
call edx
jmp 0x42935a
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
lea edx, [esp + 0x34]
push edx
push 0x620
call eax
mov eax, dword [esp + 0x34]
shr eax, 4
and eax, ebx
sub eax, 0
je 0x429375
sub eax, ebx
jne 0x429378
mov dword [esi + 0x3c], 2
jmp 0x429378
mov dword [esi + 0x3c], ebx
mov ecx, dword [edi + 0x98]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x34]
push eax
push 0xc00
call edx
mov eax, dword [esp + 0x34]
mov ecx, eax
and ecx, 7
cmp ecx, 6
ja case.0x4293a1.1
jmp dword [ecx*4 + 0x4295b0]
shr eax, 4
and eax, 7
add eax, 0xffffffff
cmp eax, 4
ja case.default.0x4293b6
jmp dword [eax*4 + 0x4295cc]
fld1
push 0x4be1c4
push 0x20
lea eax, [esi + 0x78]
push eax
jmp 0x429410
fld dword [0x4bd348]
push 0x4be1ec
jmp 0x42940a
fld dword [0x4bd344]
push 0x4be1f4
push 0x20
lea edx, [esi + 0x78]
push edx
jmp 0x429410
fld dword [0x4bd340]
push 0x4be1f0
push 0x20
lea eax, [esi + 0x78]
push eax
jmp 0x429410
fld dword [0x4bd3f8]
push 0x4be2c0
push 0x20
lea ecx, [esi + 0x78]
push ecx
fstp dword [esi + 0xc]
call fcn.004917bc
add esp, 0xc
fld dword [0x4be3c8]
jmp 0x429521
shr eax, 4
and eax, 7
add eax, 0xfffffffe
cmp eax, 3
ja case.default.0x4293b6
jmp dword [eax*4 + 0x4295e0]
fld dword [0x4be1e4]
push 0x4be1e8
push 0x20
lea edx, [esi + 0x78]
push edx
jmp 0x429410
fld dword [0x4be3c4]
push 0x4be3c0
jmp 0x42940a
fld dword [str.UUU_3:8]
push 0x4be3b4
push 0x20
lea edx, [esi + 0x78]
push edx
jmp 0x429410
shr eax, 4
and eax, 7
add eax, 0xfffffffe
cmp eax, 3
ja case.default.0x4293b6
jmp dword [eax*4 + 0x4295f0]
fld1
push 0x4be1c4
push 0x20
lea eax, [esi + 0x78]
push eax
jmp 0x429410
fld dword [0x4be278]
push 0x4be274
jmp 0x42940a
fld dword [0x4be2c8]
push 0x4be2c4
push 0x20
lea edx, [esi + 0x78]
push edx
jmp 0x429410
shr eax, 4
and eax, 7
add eax, 0xfffffffd
cmp eax, 3
ja case.default.0x4294c9
jmp dword [eax*4 + 0x429600]
fld1
push 0x4be1c4
jmp 0x42950a
fld dword [0x4be1d8]
push 0x4be1dc
push 0x20
lea edx, [esi + 0x78]
push edx
jmp 0x429510
fld dword [0x4be1e4]
push 0x4be1e8
push 0x20
lea eax, [esi + 0x78]
push eax
jmp 0x429510
fld dword [0x4bd340]
push 0x4be1f0
push 0x20
lea ecx, [esi + 0x78]
push ecx
fstp dword [esi + 0xc]
call fcn.004917bc
add esp, 0xc
fld dword [0x4be3b0]
fstp dword [esi + 0x9c]
push 0x48
mov ecx, edi
call fcn.00436b00
cmp dword [esp + 0x20], 0
jne 0x429552
and eax, 0xfffffffe
push eax
push 0x48
mov ecx, edi
mov dword [esp + 0x3c], eax
call fcn.00436b30
mov dword [edi + 0x98], 0
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret