Function at 0x420300
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4864a0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x64
push ebx
push ebp
push esi
push edi
mov edi, ecx
push ecx
mov dword [esp + 0x1c], edi
lea esi, [edi + 0x450]
mov ecx, esp
mov dword [esp + 0x40], esp
push esi
call fcn.004766d9
call fcn.0041d670
mov ecx, esp
mov dword [esp + 0x40], esp
push esi
call fcn.004766d9
lea eax, [esp + 0x24]
push eax
call fcn.00401080
add esp, 8
lea ecx, [esp + 0x20]
call fcn.00476964
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push str.system.dat
call fcn.004769d2
lea ecx, [esp + 0x28]
push ecx
call fcn.004013c0
add esp, 4
xor ebx, ebx
mov edx, esp
mov dword [esp + 0x44], esp
push edx
mov dword [esp + 0x84], ebx
call fcn.00401730
add esp, 4
lea eax, [esp + 0x24]
push eax
call fcn.00401080
add esp, 8
lea ecx, [esp + 0x20]
call fcn.00476964
push 0x400
lea ecx, [esp + 0x48]
call fcn.0047ddd6
mov ecx, dword [0x49e2a4]
mov dword [esp + 0x70], ebx
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x6c]
push edx
mov byte [esp + 0x80], 1
call fcn.00476aa1
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x20]
push 4
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x28], 0xdfadbea9
call dword [edx + 0x38]
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x1c]
push 4
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x24], ebx
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
mov dword [esp + 0x70], eax
mov eax, dword [edi + 0x940]
neg eax
sbb eax, eax
mov dword [esp + 0x14], eax
cmp eax, ebx
je 0x4204d8
lea ebp, [edi + 0x934]
mov ecx, dword [0x49e2a4]
mov dword [esp + 0x1c], ecx
lea edx, [esp + 0x20]
lea eax, [esp + 0x1c]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
mov ecx, ebp
mov byte [esp + 0x88], 4
call fcn.004760ba
mov eax, dword [esp + 0x20]
cmp dword [eax + 4], ebx
je 0x4204c0
cmp dword [eax + 8], ebx
jne 0x4204c0
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.004766d9
lea ecx, [esp + 0x48]
call fcn.00407540
mov edi, dword [esp + 0x20]
xor esi, esi
mov al, byte [edi + esi]
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x13]
push 1
not al
push ecx
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1b], al
call dword [edx + 0x38]
inc esi
cmp esi, 4
jb 0x42048b
lea ecx, [esp + 0x1c]
mov byte [esp + 0x7c], 1
call fcn.00476964
mov edi, dword [esp + 0x18]
jmp 0x4204ce
lea ecx, [esp + 0x1c]
mov byte [esp + 0x7c], 1
call fcn.00476964
cmp dword [esp + 0x14], ebx
jne 0x420435
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x44]
add ecx, 0xfffffffc
push ebx
push ecx
lea ecx, [esp + 0x4c]
mov esi, eax
call dword [edx + 0x28]
mov edx, dword [esp + 0x70]
mov eax, esi
sub eax, edx
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x20]
push 4
not eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x28], eax
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
push ebx
push esi
lea ecx, [esp + 0x4c]
call dword [eax + 0x28]
mov dword [esp + 0x70], ebx
mov ebp, str.SCRN0I
add edi, 0x360
mov eax, dword [ebp]
cmp eax, ebx
je 0x4205f2
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x20]
push 4
push ecx
not eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x28], eax
call dword [edx + 0x38]
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x1c]
push 4
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x24], ebx
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
mov dword [esp + 0x70], eax
xor esi, esi
mov cl, byte [edi + esi]
mov eax, dword [esp + 0x44]
not cl
lea edx, [esp + 0x13]
mov byte [esp + 0x13], cl
push 1
push edx
lea ecx, [esp + 0x4c]
call dword [eax + 0x38]
inc esi
cmp esi, 4
jb 0x42057f
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [edx + 0xc]
mov edx, dword [esp + 0x44]
mov esi, eax
mov eax, dword [esp + 0x70]
push ebx
add eax, 0xfffffffc
lea ecx, [esp + 0x48]
push eax
call dword [edx + 0x28]
mov edx, dword [esp + 0x70]
mov eax, esi
sub eax, edx
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
push 4
not eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x30], eax
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
push ebx
push esi
lea ecx, [esp + 0x4c]
call dword [eax + 0x28]
mov dword [esp + 0x70], ebx
add ebp, 0x14
add edi, 4
cmp ebp, 0x49a938
jl 0x420535
xor esi, esi
mov dword [esp + 0x20], esi
jmp 0x420612
mov esi, dword [esp + 0x20]
xor ebx, ebx
cmp esi, 3
ja case.default.0x42061b
jmp dword [esi*4 + 0x421030]
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
push 4
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x30], 0xb2bdb3be
call dword [edx + 0x38]
mov dword [esp + 0x2c], ebx
push 4
lea eax, [esp + 0x30]
jmp 0x4206b8
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
push 4
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x30], 0xb7acb3b9
call dword [edx + 0x38]
mov dword [esp + 0x30], ebx
push 4
lea eax, [esp + 0x34]
jmp 0x4206b8
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
push 4
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x30], 0xbcb6acb2
call dword [edx + 0x38]
mov dword [esp + 0x34], ebx
push 4
lea eax, [esp + 0x38]
jmp 0x4206b8
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x28]
push 4
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x30], 0xadbeb7bc
call dword [edx + 0x38]
mov dword [esp + 0x38], ebx
push 4
lea eax, [esp + 0x3c]
mov edx, dword [esp + 0x48]
push eax
lea ecx, [esp + 0x4c]
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x18]
lea edx, [esi + esi*4]
cmp esi, ebx
mov ebp, dword [ecx + edx*4 + 0x990]
lea eax, [ecx + edx*4]
mov dword [esp + 0x28], eax
mov dword [esp + 0x1c], ebp
jne 0x42078c
push 0x4a8c18
lea eax, [esp + 0x40]
push 0x49b724
push eax
call fcn.00423ba0
mov eax, dword [eax]
push 0x49b6a8
push eax
call fcn.00456316
add esp, 8
lea ecx, [esp + 0x3c]
test eax, eax
sete bl
call fcn.00476964
test bl, bl
je 0x42078c
shl ebp, 5
mov dword [esp + 0x1c], ebp
lea eax, [ebp + 7]
cdq
and edx, 7
add eax, edx
mov ebx, eax
sar ebx, 3
push ebx
call fcn.00476eb1
mov ecx, ebx
mov esi, eax
mov edx, ecx
xor eax, eax
mov edi, esi
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
cmp ebp, 0x1f
rep stosb byte es:[edi], al
jle 0x4207ed
xor eax, eax
mov ecx, 0x1f
mov edx, dword [esp + 0x18]
add ecx, 0x20
add eax, 4
cmp ecx, ebp
mov edx, dword [edx + 0x98c]
mov edx, dword [eax + edx - 4]
mov dword [eax + esi - 4], edx
jl 0x42076e
jmp 0x4207ed
lea eax, [ebp + 7]
cdq
and edx, 7
add eax, edx
mov edi, eax
sar edi, 3
push edi
mov ebx, edi
call fcn.00476eb1
mov ecx, edi
mov esi, eax
mov edx, ecx
xor eax, eax
mov edi, esi
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
xor eax, eax
test ebp, ebp
jle 0x4207ed
mov edx, dword [esp + 0x28]
mov ecx, eax
sar ecx, 3
lea edi, [ecx + esi]
mov ecx, dword [edx + 0x98c]
mov edx, dword [ecx + eax*4]
mov ecx, eax
test edx, edx
setne dl
and ecx, 7
shl dl, cl
mov cl, byte [edi]
or cl, dl
inc eax
cmp eax, ebp
mov byte [edi], cl
jl 0x4207c1
xor edi, edi
mov al, byte [esp + edi + 0x1c]
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x13]
push 1
not al
push ecx
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1b], al
call dword [edx + 0x38]
inc edi
cmp edi, 4
jb 0x4207ef
xor edi, edi
test ebx, ebx
jbe 0x420837
mov al, byte [edi + esi]
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x13]
push 1
not al
push ecx
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1b], al
call dword [edx + 0x38]
inc edi
cmp edi, ebx
jb 0x420817
push esi
call fcn.00476eda
mov eax, dword [esp + 0x48]
add esp, 4
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x44]
add ecx, 0xfffffffc
push 0
push ecx
lea ecx, [esp + 0x4c]
mov esi, eax
call dword [edx + 0x28]
mov edx, dword [esp + 0x70]
mov eax, esi
sub eax, edx
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x40]
push 4
not eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], eax
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
push 0
push esi
lea ecx, [esp + 0x4c]
call dword [eax + 0x28]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x70], 0
inc eax
cmp eax, 4
mov dword [esp + 0x20], eax
jl 0x42060c
mov ebx, dword [esp + 0x18]
mov eax, dword [ebx + 0x908]
neg eax
sbb eax, eax
xor ebp, ebp
cmp eax, ebp
mov dword [esp + 0x14], eax
je 0x420a0c
lea edi, [ebx + 0x8fc]
add ebx, 0x918
mov eax, dword [0x49e2a4]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x88], 6
call fcn.004762de
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, ebx
call fcn.0047627c
mov eax, dword [eax]
mov edx, dword [esp + 0x1c]
push eax
push edx
call fcn.00456316
add esp, 8
test eax, eax
je 0x4209e6
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x40]
push 4
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], 0xbba8a6b4
call dword [edx + 0x38]
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x3c]
push 4
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x44], ebp
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
push ecx
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov dword [esp + 0x78], eax
call fcn.004766d9
lea ecx, [esp + 0x48]
call fcn.00407540
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.004766d9
lea ecx, [esp + 0x48]
call fcn.00407540
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [edx + 0xc]
mov edx, dword [esp + 0x44]
mov esi, eax
mov eax, dword [esp + 0x70]
push ebp
add eax, 0xfffffffc
lea ecx, [esp + 0x48]
push eax
call dword [edx + 0x28]
mov edx, dword [esp + 0x70]
mov eax, esi
sub eax, edx
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x38]
push 4
not eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x40], eax
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
push ebp
push esi
lea ecx, [esp + 0x4c]
call dword [eax + 0x28]
mov dword [esp + 0x70], ebp
lea ecx, [esp + 0x1c]
mov byte [esp + 0x7c], 5
call fcn.00476964
lea ecx, [esp + 0x20]
mov byte [esp + 0x7c], 1
call fcn.00476964
cmp dword [esp + 0x14], ebp
jne 0x4208d2
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x40]
push 4
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], 0xbab3b6b9
call dword [edx + 0x38]
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x3c]
push 4
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x44], ebp
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
mov dword [esp + 0x70], eax
xor esi, esi
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x13]
push 1
push eax
mov dl, byte [ecx + esi + 0x35c]
lea ecx, [esp + 0x4c]
not dl
mov byte [esp + 0x1b], dl
mov edx, dword [esp + 0x4c]
call dword [edx + 0x38]
inc esi
cmp esi, 4
jb 0x420a4d
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x44]
add ecx, 0xfffffffc
push ebp
push ecx
lea ecx, [esp + 0x4c]
mov esi, eax
call dword [edx + 0x28]
mov edi, dword [esp + 0x70]
mov edx, dword [esp + 0x44]
mov eax, esi
lea ecx, [esp + 0x40]
sub eax, edi
push 4
not eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], eax
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
push ebp
push esi
lea ecx, [esp + 0x4c]
call dword [eax + 0x28]
mov edi, dword [esp + 0x18]
mov dword [esp + 0x70], ebp
mov eax, dword [edi + 0x95c]
neg eax
sbb eax, eax
cmp eax, ebp
mov dword [esp + 0x14], eax
je 0x420c49
mov ecx, dword [0x49e2a4]
mov dword [esp + 0x20], ecx
lea edx, [esp + 0x1c]
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
lea ecx, [edi + 0x950]
mov byte [esp + 0x88], 7
call fcn.004760ba
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push 4
push edx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], 0xbbbebaad
call dword [eax + 0x38]
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x3c]
push 4
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x44], ebp
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
push ecx
lea edx, [esp + 0x24]
mov esi, esp
mov dword [esp + 0x44], esp
push ecx
mov dword [esp + 0x78], eax
mov ecx, esp
mov dword [esp + 0x48], esp
push edx
call fcn.004766d9
push esi
call fcn.00401170
add esp, 8
lea ecx, [esp + 0x48]
call fcn.00407540
mov eax, dword [esp + 0x1c]
xor esi, esi
lea edi, [eax + 4]
mov cl, byte [esi + edi]
mov eax, dword [esp + 0x44]
not cl
lea edx, [esp + 0x13]
mov byte [esp + 0x13], cl
push 1
push edx
lea ecx, [esp + 0x4c]
call dword [eax + 0x38]
inc esi
cmp esi, 4
jb 0x420b80
mov ecx, dword [esp + 0x1c]
mov esi, ebp
mov eax, dword [ecx + 4]
mov ebx, dword [ecx]
cdq
and edx, 7
add eax, edx
mov edi, eax
sar edi, 3
je 0x420bd9
mov cl, byte [esi + ebx]
mov eax, dword [esp + 0x44]
not cl
lea edx, [esp + 0x13]
mov byte [esp + 0x13], cl
push 1
push edx
lea ecx, [esp + 0x4c]
call dword [eax + 0x38]
inc esi
cmp esi, edi
jb 0x420bb9
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [edx + 0xc]
mov edx, dword [esp + 0x44]
mov esi, eax
mov eax, dword [esp + 0x70]
push ebp
add eax, 0xfffffffc
lea ecx, [esp + 0x48]
push eax
call dword [edx + 0x28]
mov edx, dword [esp + 0x70]
mov eax, esi
sub eax, edx
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x38]
push 4
not eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x40], eax
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
push ebp
push esi
lea ecx, [esp + 0x4c]
call dword [eax + 0x28]
lea ecx, [esp + 0x20]
mov dword [esp + 0x70], ebp
mov byte [esp + 0x7c], 1
call fcn.00476964
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
cmp eax, ebp
jne 0x420ae2
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x40]
push 4
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], 0xacb2bca9
call dword [edx + 0x38]
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x3c]
push 4
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x44], ebp
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
mov dword [esp + 0x70], eax
xor esi, esi
mov cl, byte [esi + edi + 0xcc8]
mov eax, dword [esp + 0x44]
not cl
lea edx, [esp + 0x13]
mov byte [esp + 0x13], cl
push 1
push edx
lea ecx, [esp + 0x4c]
call dword [eax + 0x38]
inc esi
cmp esi, 4
jb 0x420c8a
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [edx + 0xc]
mov edx, dword [esp + 0x44]
mov esi, eax
mov eax, dword [esp + 0x70]
push ebp
add eax, 0xfffffffc
lea ecx, [esp + 0x48]
push eax
call dword [edx + 0x28]
mov edx, dword [esp + 0x70]
mov eax, esi
sub eax, edx
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x40]
push 4
not eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], eax
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
push ebp
push esi
lea ecx, [esp + 0x4c]
call dword [eax + 0x28]
mov eax, dword [0x4a975c]
mov dword [esp + 0x70], ebp
cmp eax, ebp
je 0x420dc5
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x40]
push 4
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], 0xbca9abab
call dword [edx + 0x38]
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x3c]
push 4
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x44], ebp
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
mov dword [esp + 0x70], eax
xor esi, esi
mov cl, byte [esi + 0x4a975c]
mov eax, dword [esp + 0x44]
not cl
lea edx, [esp + 0x13]
mov byte [esp + 0x13], cl
push 1
push edx
lea ecx, [esp + 0x4c]
call dword [eax + 0x38]
inc esi
cmp esi, 4
jb 0x420d4f
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [edx + 0xc]
mov edx, dword [esp + 0x44]
mov esi, eax
mov eax, dword [esp + 0x70]
push ebp
add eax, 0xfffffffc
lea ecx, [esp + 0x48]
push eax
call dword [edx + 0x28]
mov edx, dword [esp + 0x70]
mov eax, esi
sub eax, edx
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x40]
push 4
not eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], eax
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
push ebp
push esi
lea ecx, [esp + 0x4c]
call dword [eax + 0x28]
mov dword [esp + 0x70], ebp
mov eax, dword [edi + 0x4e4]
mov ecx, dword [edi + 0x4e0]
lea esi, [edi + 0x4e0]
push eax
push ecx
call fcn.00456316
add esp, 8
test eax, eax
je 0x420e90
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x40]
push 4
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], 0xabb1b0b9
call dword [edx + 0x38]
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x3c]
push 4
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x44], ebp
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
push ecx
mov dword [esp + 0x74], eax
mov ecx, esp
mov dword [esp + 0x44], esp
push esi
call fcn.004766d9
lea ecx, [esp + 0x48]
call fcn.00407540
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [edx + 0xc]
mov edx, dword [esp + 0x44]
mov esi, eax
mov eax, dword [esp + 0x70]
push ebp
add eax, 0xfffffffc
lea ecx, [esp + 0x48]
push eax
call dword [edx + 0x28]
mov edx, dword [esp + 0x70]
mov eax, esi
sub eax, edx
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x40]
push 4
not eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], eax
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
push ebp
push esi
lea ecx, [esp + 0x4c]
call dword [eax + 0x28]
mov dword [esp + 0x70], ebp
mov ecx, dword [edi + 0x508]
lea esi, [edi + 0x508]
cmp dword [ecx - 8], ebp
je 0x420f4c
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push 4
push edx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], 0xa9b6adbb
call dword [eax + 0x38]
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x3c]
push 4
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x44], ebp
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
push ecx
mov dword [esp + 0x74], eax
mov ecx, esp
mov dword [esp + 0x44], esp
push esi
call fcn.004766d9
lea ecx, [esp + 0x48]
call fcn.00407540
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [edx + 0xc]
mov edx, dword [esp + 0x44]
mov esi, eax
mov eax, dword [esp + 0x70]
push ebp
add eax, 0xfffffffc
lea ecx, [esp + 0x48]
push eax
call dword [edx + 0x28]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x44]
mov eax, esi
push 4
sub eax, ecx
lea ecx, [esp + 0x44]
not eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], eax
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
push ebp
push esi
lea ecx, [esp + 0x4c]
call dword [eax + 0x28]
mov dword [esp + 0x70], ebp
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x40]
push 4
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], 0xdfbbb1ba
call dword [edx + 0x38]
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x3c]
push 4
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x44], ebp
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x44]
call dword [eax + 0xc]
mov edx, dword [esp + 0x44]
lea ecx, [esp + 0x44]
mov dword [esp + 0x70], eax
call dword [edx + 0xc]
mov edx, dword [esp + 0x44]
mov esi, eax
mov eax, dword [esp + 0x70]
push ebp
add eax, 0xfffffffc
lea ecx, [esp + 0x48]
push eax
call dword [edx + 0x28]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x44]
mov eax, esi
push 4
sub eax, ecx
lea ecx, [esp + 0x44]
not eax
push ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], eax
call dword [edx + 0x38]
mov eax, dword [esp + 0x44]
push ebp
push esi
lea ecx, [esp + 0x4c]
call dword [eax + 0x28]
mov dword [esp + 0x70], ebp
lea ecx, [esp + 0x44]
mov byte [esp + 0x7c], 9
call fcn.0041d410
lea ecx, [esp + 0x6c]
mov byte [esp + 0x7c], 8
call fcn.00476964
lea ecx, [esp + 0x44]
mov byte [esp + 0x7c], 0
call fcn.0047de9b
lea ecx, [esp + 0x24]
mov dword [esp + 0x7c], 0xffffffff
call fcn.00476964
mov ecx, dword [esp + 0x74]
pop edi
pop esi
pop ebp
mov eax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x70
ret