Function at 0x427c00
Capabilities:
Check for software breakpoints

Disassembly:
sub esp, 0x54
push ebx
mov ebx, ecx
mov byte [esp + 0x2c], 0xe8
push ebp
xor cl, cl
mov dword [esp + 0x10], ebx
push esi
mov eax, dword [ebx + 8]
lea edx, [esp + 0x44]
mov byte [esp + 0xf], cl
xor ebp, ebp
xor ecx, ecx
mov dword [esp + 0x35], 0
push edi
mov edi, dword [ebx]
mov esi, edi
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], ecx
mov ecx, esi
mov byte [esp + 0x30], 0xe9
mov dword [esp + 0x31], 0
mov word [esp + 0x40], 0x800f
mov dword [esp + 0x42], 0
mov byte [esp + 0x12], 0
mov dword [esp + 0x20], ebp
mov dword [ebx + 0xc], ebp
mov dword [ebx + 0x10], ebp
mov dword [esp + 0x1c], eax
call fcn.004270d0
test dword [esp + 0x60], 0x1000
mov edx, eax
mov dword [esp + 0x2c], edx
jne 0x427e88
cmp byte [esp + 0x12], 5
mov dword [esp + 0x14], esi
jb 0x427cb3
mov eax, esi
mov dword [esp + 0x20], 1
sub eax, dword [esp + 0x1c]
lea ecx, [esp + 0x30]
sub eax, 5
mov dword [esp + 0x14], ecx
mov dword [esp + 0x31], eax
mov edx, 5
jmp 0x427dee
mov bl, byte [esp + 0x4e]
cmp bl, 0xe8
jne 0x427ce0
movzx eax, byte [esp + 0x48]
lea ecx, [esp + 0x38]
sub eax, dword [esp + 0x1c]
mov edx, 5
add eax, 0xfffffffb
add eax, dword [esp + 0x58]
add eax, esi
mov dword [esp + 0x39], eax
jmp 0x427de6
mov al, bl
and al, 0xfd
cmp al, 0xe9
jne 0x427d3e
movzx ecx, byte [esp + 0x48]
add ecx, esi
cmp bl, 0xeb
jne 0x427cfd
movsx eax, byte [esp + 0x58]
add ecx, eax
jmp 0x427d01
add ecx, dword [esp + 0x58]
cmp edi, ecx
ja 0x427d1c
lea eax, [edi + 5]
cmp ecx, eax
jae 0x427d1c
cmp dword [esp + 0x24], ecx
mov ebp, ecx
cmovae ebp, dword [esp + 0x24]
jmp 0x427dea
sub ecx, dword [esp + 0x1c]
mov edx, 5
sub ecx, 5
cmp esi, ebp
mov dword [esp + 0x31], ecx
lea ecx, [esp + 0x30]
sbb edi, edi
inc edi
mov dword [esp + 0x20], edi
jmp 0x427de6
mov ch, byte [esp + 0x4f]
mov cl, bl
and cl, 0xf0
cmp cl, 0x70
je 0x427d73
mov al, bl
and al, 0xfc
cmp al, 0xe0
je 0x427d73
mov al, ch
and al, 0xf0
cmp al, 0x80
je 0x427d73
and bl, 0xfe
cmp bl, 0xc2
jne 0x427dea
cmp esi, ebp
sbb edi, edi
inc edi
mov dword [esp + 0x20], edi
jmp 0x427dea
movzx edx, byte [esp + 0x48]
add edx, esi
cmp cl, 0x70
je 0x427d8d
mov al, bl
and al, 0xfc
cmp al, 0xe0
je 0x427d8d
add edx, dword [esp + 0x58]
jmp 0x427d94
movsx eax, byte [esp + 0x58]
add edx, eax
cmp edi, edx
ja 0x427db0
lea eax, [edi + 5]
cmp edx, eax
jae 0x427db0
cmp dword [esp + 0x24], edx
mov ebp, edx
mov edx, dword [esp + 0x2c]
cmovae ebp, dword [esp + 0x24]
jmp 0x427dea
mov al, bl
and al, 0xfc
cmp al, 0xe0
je 0x427e88
cmp bl, 0xf
movzx ecx, ch
movzx eax, bl
cmovne ecx, eax
sub edx, dword [esp + 0x1c]
and cl, 0xf
or cl, 0x80
sub edx, 6
mov byte [esp + 0x41], cl
lea ecx, [esp + 0x40]
mov dword [esp + 0x42], edx
mov edx, 6
mov dword [esp + 0x14], ecx
mov ebx, dword [esp + 0x18]
cmp esi, ebp
jae 0x427dff
movzx eax, byte [esp + 0x48]
cmp edx, eax
jne 0x427e88
mov eax, dword [esp + 0x28]
add eax, edx
cmp eax, 0x20
ja 0x427e88
mov eax, dword [ebx + 0x10]
cmp eax, 8
jae 0x427e88
mov cl, byte [esp + 0x12]
mov esi, dword [esp + 0x14]
mov byte [eax + ebx + 0x14], cl
mov eax, dword [ebx + 0x10]
mov cl, byte [esp + 0x13]
add byte [esp + 0x13], dl
movzx edi, cl
mov byte [eax + ebx + 0x1c], cl
mov ecx, edx
mov dl, byte [esp + 0x12]
mov eax, dword [ebx + 8]
add edi, eax
add dl, byte [esp + 0x48]
inc dword [ebx + 0x10]
cmp dword [esp + 0x20], 0
rep movsb byte es:[edi], byte [esi]
mov byte [esp + 0x12], dl
jne 0x427e92
movzx ecx, byte [esp + 0x13]
mov edi, dword [ebx]
add eax, ecx
movzx esi, dl
lea edx, [esp + 0x48]
add esi, edi
mov dword [esp + 0x28], ecx
mov ecx, esi
mov dword [esp + 0x24], ebp
mov dword [esp + 0x1c], eax
call fcn.004270d0
test dword [esp + 0x60], 0x1000
mov edx, eax
mov dword [esp + 0x2c], edx
je 0x427c81
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x54
ret
cmp dl, 5
jae 0x427f13
mov edi, dword [ebx]
movzx esi, dl
mov edx, 5
sub edx, esi
lea ecx, [edi + esi]
call fcn.00427bc0
test eax, eax
jne 0x427f13
cmp byte [esp + 0x12], 2
jae 0x427ec6
mov edx, 2
sub edx, esi
call fcn.00427bc0
test eax, eax
je 0x427e88
push 0x1c
lea eax, [esp + 0x4c]
push eax
lea eax, [edi - 5]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [esp + 0x58], 0x1000
jne 0x427e88
test byte [esp + 0x5c], 0xf0
je 0x427e88
mov edx, dword [ebx]
mov cl, byte [edx - 5]
test cl, cl
je 0x427efb
cmp cl, 0x90
je 0x427efb
cmp cl, 0xcc
jne 0x427e88
mov eax, 1
cmp byte [edx + eax - 5], cl
jne 0x427e88
inc eax
cmp eax, 5
jb 0x427f00
mov dword [ebx + 0xc], 1
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x54
ret