Function at 0x427dba
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x42bc6f
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1964
call fcn.004149b0
mov eax, dword [0x439e00]
xor eax, esp
mov dword [esp + 0x1960], eax
push ebx
push esi
push edi
mov eax, dword [0x439e00]
xor eax, esp
push eax
lea eax, [esp + 0x1978]
mov dword fs:[0], eax
push 0xa
mov ebx, ecx
pop edi
xor esi, esi
push edi
lea ecx, [esp + 0xac]
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x50], esi
call fcn.00404c09
mov dword [esp + 0x1980], esi
mov dword [esp + 0xc4], 0x43321c
mov dword [esp + 0xd0], esi
mov dword [esp + 0xd4], esi
mov dword [esp + 0xcc], esi
mov dword [esp + 0xc8], esi
mov dword [esp + 0xd8], esi
mov dword [esp + 0xdc], edi
mov byte [esp + 0x1980], 1
call fcn.0040482e
push eax
lea ecx, [esp + 0x34]
call fcn.004014d0
push 0x800
lea eax, [esp + 0x170]
push esi
push eax
mov byte [esp + 0x198c], 2
call fcn.00413bc0
add esp, 0xc
push 0x1000
lea eax, [esp + 0x970]
push esi
push eax
call fcn.00413bc0
mov eax, dword [ebx + 0x74]
add esp, 0xc
neg eax
sbb eax, eax
push esi
add eax, 0x85
push eax
mov esi, ebx
call fcn.00426bcb
mov edi, dword [0x42d2dc]
call edi
mov dword [esp + 0x80], eax
call fcn.0040482e
push eax
lea ecx, [esp + 0x98]
call fcn.004014d0
push 0x41
mov byte [esp + 0x1984], 3
mov dword [esp + 0x20], 1
pop esi
mov eax, dword [esp + 0x1c]
test dword [esp + 0x80], eax
je 0x427f91
call fcn.0040482e
push eax
lea ecx, [esp + 0x4c]
call fcn.004014d0
push esi
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1984], 4
call fcn.0040229d
push 0x4328b4
lea ecx, [esp + 0x4c]
call fcn.0040197e
push dword [esp + 0x48]
call dword [0x42d29c]
cmp eax, 2
jne 0x427f45
push esi
push ebx
call fcn.00426721
test al, al
jne 0x427f7d
push 0x4328b8
lea eax, [esp + 0x4c]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00401e25
add esp, 0xc
push eax
lea ecx, [esp + 0x98]
mov byte [esp + 0x1984], 5
call fcn.0040194c
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 3
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.00401383
shl dword [esp + 0x1c], 1
inc esi
cmp si, 0x5a
jbe 0x427eeb
push 3
push 0xa2
mov esi, ebx
call fcn.00426bcb
call fcn.0040482e
push eax
lea ecx, [esp + 0x60]
call fcn.004014d0
mov eax, 0x104
push eax
push eax
lea ecx, [esp + 0x64]
mov byte [esp + 0x1988], 6
call fcn.00401513
push eax
call dword [0x42d294]
push 0xffffffffffffffff
lea ecx, [esp + 0x60]
call fcn.00402b45
push 0x4328bc
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00401e25
add esp, 0xc
mov byte [esp + 0x1980], 7
push dword [eax]
mov ecx, ebx
call fcn.00426a66
mov byte [esp + 0x1980], 6
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401383
push 0x4328d8
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00401e25
add esp, 0xc
mov byte [esp + 0x1980], 8
push dword [eax]
mov ecx, ebx
call fcn.00426a66
mov byte [esp + 0x1980], 6
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401383
push 0x4328f4
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00401e25
add esp, 0xc
mov byte [esp + 0x1980], 9
push dword [eax]
mov ecx, ebx
call fcn.00426a66
mov byte [esp + 0x1980], 6
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401383
push 0x432920
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00401e25
add esp, 0xc
mov byte [esp + 0x1980], 0xa
push dword [eax]
mov ecx, ebx
call fcn.00426a66
mov byte [esp + 0x1980], 6
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401383
push 0x432960
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00401e25
add esp, 0xc
mov byte [esp + 0x1980], 0xb
push dword [eax]
mov ecx, ebx
call fcn.00426a66
mov byte [esp + 0x1980], 6
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401383
push 3
push 0xa4
call fcn.00426bcb
push 0x4329a0
mov ecx, ebx
call fcn.004269ce
push 0x4329c0
mov ecx, ebx
call fcn.004269ce
push 0x43294c
mov ecx, ebx
call fcn.004269ce
push 0x4329d8
mov ecx, ebx
call fcn.004269ce
push 3
push 0x8a
call fcn.00426bcb
lea eax, [esp + 0x10]
push 0x8b
push eax
call fcn.0042a6c7
lea ecx, [esp + 0x9c]
push ecx
push eax
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x1994], 0xc
call fcn.00401dce
add esp, 0x14
mov byte [esp + 0x1980], 0xd
mov eax, dword [eax]
push 0
push eax
call fcn.00426067
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 6
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00401383
push 0x7d0
call dword [0x42d2a4]
call edi
push 0xa
lea ecx, [esp + 0x154]
mov dword [ebx + 0x130], eax
call fcn.00404c09
lea eax, [esp + 0x28]
push eax
push 0x20019
push 0x4315a8
mov byte [esp + 0x198c], 0xe
and dword [esp + 0x34], 0
push ebx
mov edi, 0x80000002
call fcn.00426ade
test eax, eax
jne 0x428297
and dword [esp + 0x1c], eax
mov esi, dword [0x42d358]
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
mov edi, 0x400
push 0
jmp 0x42827f
lea eax, [esp + 0x16c]
push eax
call dword [0x42d2a0]
cmp eax, 0xd
jne 0x42826a
push 0xa
push 0x4329e8
lea eax, [esp + 0x174]
push eax
call dword [0x42d368]
test eax, eax
jne 0x42826a
lea eax, [esp + 0x16c]
push eax
lea ecx, [esp + 0x154]
call fcn.00404ec5
inc dword [esp + 0x1c]
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push dword [esp + 0x24]
push dword [esp + 0x34]
mov dword [esp + 0x28], edi
call esi
test eax, eax
je 0x42822a
push dword [esp + 0x28]
call dword [section..rdata]
push dword [esp + 0x15c]
lea eax, [esp + 0x34]
push 0x432a00
push eax
call fcn.00402c02
add esp, 0xc
lea eax, [esp + 0x10]
push 0x96
push eax
call fcn.0042a6c7
lea ecx, [esp + 0x38]
push ecx
push eax
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x1994], 0xf
call fcn.00401dce
add esp, 0x14
mov byte [esp + 0x1980], 0x10
mov eax, dword [eax]
xor edi, edi
push edi
push eax
mov esi, ebx
call fcn.00426067
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0xe
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00401383
mov eax, dword [esp + 0x154]
mov dword [esp + 0x1c], eax
cmp eax, edi
je 0x428cb1
push 0x4315a8
lea ecx, [esp + 0xa8]
call fcn.00402b6f
push 0x432a0c
push eax
lea eax, [esp + 0x8c]
push eax
mov byte [esp + 0x198c], 0x11
call fcn.00401e25
add esp, 0xc
mov byte [esp + 0x1980], 0x12
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x428eca
mov edx, ecx
mov edx, dword [edx]
add ecx, 8
push ecx
push eax
lea eax, [esp + 0xa4]
push eax
mov dword [esp + 0x28], edx
call fcn.00401dce
add esp, 0xc
push 0x432a08
push eax
lea eax, [esp + 0x34]
push eax
mov byte [esp + 0x198c], 0x13
call fcn.00401e25
add esp, 0xc
mov ecx, dword [esp + 0x9c]
add ecx, 0xfffffff0
call fcn.00401383
mov ecx, dword [esp + 0x84]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0x17
mov ecx, dword [esp + 0xa4]
add ecx, 0xfffffff0
call fcn.00401383
push 0x432a10
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.00401e25
add esp, 0xc
lea eax, [esp + 0x54]
push eax
push 0x20019
mov byte [esp + 0x1988], 0x18
push dword [esp + 0x7c]
and dword [esp + 0x60], 0
push ebx
mov edi, 0x80000002
call fcn.00426ade
mov esi, dword [0x42d358]
test eax, eax
jne 0x4287b5
and dword [esp + 0x38], eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push 0
jmp 0x428795
push 0x432a24
lea eax, [esp + 0x170]
push eax
push 4
pop edi
call fcn.0042a68d
pop ecx
pop ecx
test al, al
je 0x428776
push 0x432a30
lea eax, [esp + 0x78]
push eax
lea eax, [esp + 0xa0]
push eax
call fcn.00401e25
add esp, 0xc
lea ecx, [esp + 0x16c]
push ecx
push eax
lea eax, [esp + 0x70]
push eax
mov byte [esp + 0x198c], 0x19
call fcn.00401e25
add esp, 0xc
mov byte [esp + 0x1980], 0x1b
mov ecx, dword [esp + 0x98]
add ecx, 0xfffffff0
call fcn.00401383
and dword [esp + 0x48], 0
lea eax, [esp + 0x48]
push eax
push 0x20019
push dword [esp + 0x70]
mov edi, 0x80000002
push ebx
call fcn.00426ade
test eax, eax
jne 0x428762
push 0xa
lea ecx, [esp + 0xe4]
call fcn.00404c09
mov byte [esp + 0x1980], 0x1c
xor eax, eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
xor edi, edi
push eax
push edi
push dword [esp + 0x54]
mov dword [esp + 0x7c], edi
mov dword [esp + 0x8c], edi
mov dword [esp + 0x28], 0x400
call esi
cmp eax, edi
jne 0x4286d2
and dword [esp + 0x40], 0
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x970]
push eax
lea eax, [esp + 0x48]
push eax
push 0x432a34
lea eax, [esp + 0x17c]
push eax
push dword [esp + 0x5c]
mov byte [esp + 0x984], 0
mov byte [esp + 0x985], 0
mov dword [esp + 0x4c], 0x1000
call dword [0x42d360]
test eax, eax
jne 0x42869d
lea eax, [esp + 0x96c]
push 0x432a44
push eax
or edi, 0xffffffff
call fcn.0042a68d
pop ecx
pop ecx
test al, al
je 0x42869d
inc dword [esp + 0x7c]
push 0x432a54
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x98]
push eax
call fcn.00401e25
add esp, 8
mov ecx, esp
mov dword [esp + 0x64], esp
lea edx, [esp + 0x170]
push edx
push eax
push ecx
mov byte [esp + 0x1990], 0x1d
call fcn.00401e25
lea eax, [esp + 0xf0]
add esp, 0xc
push eax
call fcn.0042a7cb
pop ecx
pop ecx
mov byte [esp + 0x1980], 0x1c
mov ecx, dword [esp + 0x90]
add ecx, 0xfffffff0
call fcn.00401383
and dword [esp + 0x40], 0
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x970]
push eax
lea eax, [esp + 0x48]
push eax
push 0x432a58
lea eax, [esp + 0x17c]
push eax
push dword [esp + 0x5c]
mov byte [esp + 0x984], 0
mov byte [esp + 0x985], 0
mov dword [esp + 0x4c], 0x1000
call dword [0x42d360]
test eax, eax
jne 0x42869d
push 0x432a68
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0xa8]
push eax
call fcn.00401e25
add esp, 8
mov ecx, esp
mov dword [esp + 0x64], esp
lea edx, [esp + 0x970]
push edx
push eax
push ecx
mov byte [esp + 0x1990], 0x1e
call fcn.00401e25
lea eax, [esp + 0xb8]
add esp, 0xc
push eax
call fcn.0042a7cb
pop ecx
pop ecx
mov byte [esp + 0x1980], 0x1c
mov ecx, dword [esp + 0xa0]
add ecx, 0xfffffff0
call fcn.00401383
inc dword [esp + 0x6c]
xor eax, eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push dword [esp + 0x74]
mov dword [esp + 0x24], 0x400
push dword [esp + 0x54]
call esi
test eax, eax
je 0x428522
push dword [esp + 0x48]
call dword [section..rdata]
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x428716
cmp dword [esp + 0x7c], eax
jne 0x428716
push ecx
lea eax, [esp + 0x6c]
mov dword [esp + 0x64], esp
mov ecx, esp
push eax
call fcn.004014f5
lea eax, [esp + 0xac]
push eax
call fcn.0042a7cb
pop ecx
pop ecx
lea ecx, [esp + 0xe0]
call fcn.00404d17
mov edi, dword [esp + 0xe4]
jmp 0x42874a
mov eax, edi
test edi, edi
je 0x428eca
mov edi, dword [edi]
push ecx
add eax, 8
mov dword [esp + 0x64], esp
mov ecx, esp
push eax
call fcn.004014f5
lea eax, [esp + 0xac]
push eax
call fcn.0042a7cb
pop ecx
pop ecx
test edi, edi
jne 0x42871f
lea ecx, [esp + 0xe0]
mov byte [esp + 0x1980], 0x1b
call fcn.00404d59
mov byte [esp + 0x1980], 0x18
mov ecx, dword [esp + 0x68]
add ecx, 0xfffffff0
call fcn.00401383
inc dword [esp + 0x38]
xor eax, eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push dword [esp + 0x40]
push dword [esp + 0x60]
mov dword [esp + 0x28], 0x400
call esi
test eax, eax
je 0x42843d
push dword [esp + 0x54]
call dword [section..rdata]
mov byte [esp + 0x1980], 0x17
mov ecx, dword [esp + 0x74]
add ecx, 0xfffffff0
call fcn.00401383
push 0x432a88
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x78]
push eax
call fcn.00401e25
add esp, 0xc
lea eax, [esp + 0x50]
push eax
push 0x20019
mov byte [esp + 0x1988], 0x1f
push dword [esp + 0x78]
and dword [esp + 0x5c], 0
push ebx
mov edi, 0x80000002
call fcn.00426ade
test eax, eax
jne 0x4289e6
and dword [esp + 0x38], eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push 0
jmp 0x4289c6
push 0x432aa4
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.00401e25
add esp, 0xc
lea ecx, [esp + 0x16c]
push ecx
push eax
lea eax, [esp + 0x28]
push eax
mov byte [esp + 0x198c], 0x20
call fcn.00401e25
add esp, 0xc
mov byte [esp + 0x1980], 0x22
mov ecx, dword [esp + 0x88]
add ecx, 0xfffffff0
call fcn.00401383
and dword [esp + 0x78], 0
lea eax, [esp + 0x78]
push eax
push 0x20019
push dword [esp + 0x28]
mov edi, 0x80000002
push ebx
call fcn.00426ade
test eax, eax
jne 0x428993
xor edi, edi
jmp 0x428958
and dword [esp + 0x40], 0
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x970]
push eax
lea eax, [esp + 0x48]
push eax
push 0x432aa8
lea eax, [esp + 0x17c]
push eax
push dword [esp + 0x8c]
mov byte [esp + 0x984], 0
mov byte [esp + 0x985], 0
mov dword [esp + 0x4c], 0x1000
call dword [0x42d360]
test eax, eax
jne 0x428957
push 0x432ab8
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x94]
push eax
call fcn.00401e25
add esp, 8
mov ecx, esp
mov dword [esp + 0x64], esp
lea edx, [esp + 0x970]
push edx
push eax
push ecx
mov byte [esp + 0x1990], 0x23
call fcn.00401e25
lea eax, [esp + 0xb8]
add esp, 0xc
push eax
call fcn.0042a7cb
pop ecx
pop ecx
mov byte [esp + 0x1980], 0x22
mov ecx, dword [esp + 0x8c]
add ecx, 0xfffffff0
call fcn.00401383
inc edi
xor eax, eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push edi
push dword [esp + 0x84]
mov dword [esp + 0x28], 0x400
call esi
test eax, eax
je 0x4288aa
push dword [esp + 0x78]
call dword [section..rdata]
mov byte [esp + 0x1980], 0x1f
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401383
inc dword [esp + 0x38]
xor eax, eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push dword [esp + 0x40]
push dword [esp + 0x5c]
mov dword [esp + 0x28], 0x400
call esi
test eax, eax
je 0x42882e
push dword [esp + 0x50]
call dword [section..rdata]
mov byte [esp + 0x1980], 0x17
mov ecx, dword [esp + 0x70]
add ecx, 0xfffffff0
call fcn.00401383
push 0x432ad8
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x18]
push eax
call fcn.00401e25
add esp, 0xc
lea eax, [esp + 0x28]
push eax
push 0x20019
mov byte [esp + 0x1988], 0x24
push dword [esp + 0x18]
and dword [esp + 0x34], 0
push ebx
mov edi, 0x80000002
call fcn.00426ade
test eax, eax
jne 0x428c42
and dword [esp + 0x38], eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push 0
jmp 0x428c22
push 0x432b54
lea eax, [esp + 0x170]
push eax
call dword [0x42d35c]
test eax, eax
je 0x428c03
mov edi, dword [0x42d360]
and dword [esp + 0x40], 0
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x970]
push eax
lea eax, [esp + 0x48]
push eax
push 0x432b64
lea eax, [esp + 0x17c]
push eax
push dword [esp + 0x3c]
mov byte [esp + 0x984], 0
mov byte [esp + 0x985], 0
mov dword [esp + 0x4c], 0x1000
call edi
test eax, eax
jne 0x428c03
push 0x432b84
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x4c]
push eax
call fcn.00401e25
add esp, 0xc
lea ecx, [esp + 0x96c]
push ecx
push eax
lea eax, [esp + 0x6c]
push eax
mov byte [esp + 0x198c], 0x25
call fcn.00401e25
add esp, 0xc
mov byte [esp + 0x1980], 0x27
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.00401383
and dword [esp + 0x40], 0
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x970]
push eax
lea eax, [esp + 0x48]
push eax
push 0x432b90
push dword [esp + 0x74]
mov byte [esp + 0x980], 0
push 0x80000002
mov byte [esp + 0x985], 0
mov dword [esp + 0x4c], 0x1000
call edi
test eax, eax
jne 0x428bef
lea eax, [esp + 0x96c]
push 0x432ba0
push eax
or edi, 0xffffffff
call fcn.0042a68d
pop ecx
pop ecx
test al, al
je 0x428bef
push 0x432bb0
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x44]
push eax
call fcn.00401e25
add esp, 8
mov ecx, esp
mov dword [esp + 0x64], esp
lea edx, [esp + 0x170]
push edx
push eax
push ecx
mov byte [esp + 0x1990], 0x28
call fcn.00401e25
lea eax, [esp + 0xb8]
add esp, 0xc
push eax
call fcn.0042a7cb
pop ecx
pop ecx
mov byte [esp + 0x1980], 0x27
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.00401383
push ecx
lea eax, [esp + 0x68]
mov dword [esp + 0x64], esp
mov ecx, esp
push eax
call fcn.004014f5
lea eax, [esp + 0xac]
push eax
call fcn.0042a7cb
pop ecx
pop ecx
mov byte [esp + 0x1980], 0x24
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.00401383
inc dword [esp + 0x38]
xor eax, eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push dword [esp + 0x40]
push dword [esp + 0x34]
mov dword [esp + 0x28], 0x400
call esi
test eax, eax
je 0x428a5f
push dword [esp + 0x28]
call dword [section..rdata]
mov byte [esp + 0x1980], 0x17
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00401383
xor eax, eax
xor edi, edi
cmp dword [str.ControlClass36FC9E60_C465_11CF_8056_444553540000], eax
je 0x428c90
lea esi, [eax + 0x4322f8]
cmp dword [esi], 0
jne 0x428c81
lea eax, [esp + 0xa8]
push eax
lea eax, [esp + 0x30]
push eax
mov ecx, ebx
call fcn.00427b9f
inc edi
mov eax, edi
imul eax, eax, 0x18
cmp dword [eax + 0x4322fc], 0
jne 0x428c62
mov byte [esp + 0x1980], 0xe
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.00401383
cmp dword [esp + 0x1c], 0
jne 0x428322
xor edi, edi
mov dword [esp + 0x10], edi
cmp dword [str.ControlClass36FC9E60_C465_11CF_8056_444553540000], edi
je 0x428d1c
xor eax, eax
lea esi, [eax + 0x4322f8]
cmp dword [esi], 1
jne 0x428d09
call fcn.0040482e
push eax
lea ecx, [esp + 0x24]
call fcn.004014d0
lea eax, [esp + 0xa8]
push eax
lea eax, [esp + 0x24]
push eax
mov ecx, ebx
mov byte [esp + 0x1988], 0x29
call fcn.00427b9f
mov byte [esp + 0x1980], 0xe
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401383
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
imul eax, eax, 0x18
cmp dword [eax + 0x4322fc], edi
jne 0x428cbf
mov dword [esp + 0x10], edi
cmp dword [str.ControlClass36FC9E60_C465_11CF_8056_444553540000], edi
je 0x428d89
xor eax, eax
lea esi, [eax + 0x4322f8]
cmp dword [esi], 2
jne 0x428d76
call fcn.0040482e
push eax
lea ecx, [esp + 0x24]
call fcn.004014d0
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x24]
push eax
mov edx, esi
mov ecx, ebx
mov byte [esp + 0x1988], 0x2a
call fcn.0042743b
mov byte [esp + 0x1980], 0xe
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401383
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
imul eax, eax, 0x18
cmp dword [eax + 0x4322fc], edi
jne 0x428d2a
push dword [esp + 0xb4]
lea eax, [esp + 0x34]
push 0x432bb4
push eax
call fcn.00402c02
add esp, 0xc
lea eax, [esp + 0x44]
push 0x97
push eax
call fcn.0042a6c7
lea ecx, [esp + 0x38]
push ecx
push eax
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0x1994], 0x2b
call fcn.00401dce
add esp, 0x14
mov byte [esp + 0x1980], 0x2c
mov eax, dword [eax]
push edi
push eax
mov esi, ebx
call fcn.00426067
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0xe
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.00401383
push dword [esp + 0xd0]
lea eax, [esp + 0x34]
push 0x432bbc
push eax
call fcn.00402c02
add esp, 0xc
lea eax, [esp + 0x44]
push 0x98
push eax
call fcn.0042a6c7
lea ecx, [esp + 0x38]
push ecx
push eax
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0x1994], 0x2d
call fcn.00401dce
add esp, 0x14
mov byte [esp + 0x1980], 0x2e
mov eax, dword [eax]
push edi
push eax
call fcn.00426067
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0xe
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.00401383
cmp dword [esp + 0xb4], edi
jne 0x428e85
cmp dword [esp + 0xd0], edi
je 0x428e93
push 5
push 0x8c
mov esi, ebx
call fcn.00426bcb
mov esi, dword [esp + 0xac]
cmp esi, edi
je 0x428ec1
mov eax, esi
test esi, esi
je 0x428eca
mov ecx, dword [esp + 0x58]
mov esi, dword [esi]
lea edi, [eax + 8]
mov ebx, 0x80000002
call fcn.00427adc
test esi, esi
jne 0x428e9e
mov ebx, dword [esp + 0x58]
xor edi, edi
mov esi, dword [esp + 0xc8]
jmp 0x428ee2
call fcn.00403c4a
mov eax, esi
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
mov esi, dword [esi]
push ecx
push eax
mov ecx, ebx
call fcn.004279d7
cmp esi, edi
jne 0x428ecf
push 3
push 0x95
mov esi, ebx
call fcn.00426bcb
push 0xa
lea ecx, [esp + 0x11c]
call fcn.00404c09
lea eax, [esp + 0x1c]
push eax
push 0x20019
push 0x4315bc
mov byte [esp + 0x198c], 0x2f
and dword [esp + 0x28], 0
push ebx
mov edi, 0x80000002
call fcn.00426ade
test eax, eax
jne 0x429055
mov esi, dword [0x42d364]
xor ecx, ecx
mov word [esp + 0x16c], cx
mov byte [esp + 0x96c], cl
mov byte [esp + 0x96d], cl
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x970]
push ecx
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x17c]
push ecx
mov dword [esp + 0x24], eax
mov edi, 0x400
mov dword [esp + 0x54], eax
push eax
jmp 0x429031
mov eax, dword [esp + 0x34]
mov byte [esp + eax + 0x96c], 0
mov byte [esp + eax + 0x96d], 0
push 0x432bc4
lea eax, [esp + 0x970]
push eax
call dword [0x42d35c]
test eax, eax
jne 0x428fda
push 0x432be0
lea eax, [esp + 0x970]
push eax
call dword [0x42d35c]
test eax, eax
jne 0x428fda
push 0x432bfc
lea eax, [esp + 0x970]
push eax
call dword [0x42d35c]
test eax, eax
je 0x428fee
lea eax, [esp + 0x16c]
push eax
lea ecx, [esp + 0x11c]
call fcn.00404ec5
inc dword [esp + 0x10]
xor eax, eax
and dword [esp + 0x40], eax
mov word [esp + 0x16c], ax
mov byte [esp + 0x96c], al
mov byte [esp + 0x96d], al
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x970]
push eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x17c]
push eax
push dword [esp + 0x24]
push dword [esp + 0x34]
mov dword [esp + 0x34], edi
mov dword [esp + 0x50], 0x1000
call esi
test eax, eax
je 0x428f81
push dword [esp + 0x1c]
call dword [section..rdata]
push dword [esp + 0x124]
lea eax, [esp + 0x34]
push 0x432c2c
push eax
call fcn.00402c02
add esp, 0xc
lea eax, [esp + 0x44]
push 0x92
push eax
call fcn.0042a6c7
lea ecx, [esp + 0x38]
push ecx
push eax
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0x1994], 0x30
call fcn.00401dce
add esp, 0x14
mov byte [esp + 0x1980], 0x31
mov eax, dword [eax]
push 0
push eax
mov esi, ebx
call fcn.00426067
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0x2f
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.00401383
mov eax, dword [esp + 0x11c]
mov byte [esp + 0x17], 1
mov dword [esp + 0x1c], eax
test eax, eax
je 0x42924f
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
test eax, eax
je 0x428eca
mov ecx, eax
mov ecx, dword [ecx]
add eax, 8
mov dword [esp + 0x1c], ecx
push eax
lea ecx, [esp + 0x14]
call fcn.004014f5
mov byte [esp + 0x1980], 0x32
mov edi, dword [esp + 0x10]
cmp dword [edi - 0xc], 0xe
jne 0x42916c
push 0xc
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x18]
call fcn.00401d90
mov byte [esp + 0x1980], 0x33
or dword [esp + 0x4c], 1
push 0x432c34
mov ecx, eax
call fcn.00401e90
test eax, eax
jne 0x42916c
cmp dword [edi - 0xc], 0xc
jl 0x429294
movzx eax, word [edi + 0x18]
lea ecx, [eax - 0x41]
xor eax, eax
inc eax
shl eax, cl
mov byte [esp + 0x27], 1
test dword [esp + 0x80], eax
je 0x429171
mov byte [esp + 0x27], 0
push 0x32
pop esi
mov dword [esp + 0x1980], esi
test byte [esp + 0x4c], 1
je 0x429193
mov ecx, dword [esp + 0x3c]
and dword [esp + 0x4c], 0xfffffffe
add ecx, 0xfffffff0
call fcn.00401383
cmp byte [esp + 0x27], 0
jne 0x4291fd
cmp dword [edi - 0xc], 0x30
jne 0x4291d2
push 0xb
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x18]
call fcn.00401d90
mov byte [esp + 0x1980], 0x34
or dword [esp + 0x4c], 2
push 0x432c50
mov ecx, eax
call fcn.00401e90
mov byte [esp + 0x27], 1
test eax, eax
je 0x4291d7
mov byte [esp + 0x27], 0
mov dword [esp + 0x1980], esi
test byte [esp + 0x4c], 2
je 0x4291f6
mov ecx, dword [esp + 0x44]
and dword [esp + 0x4c], 0xfffffffd
add ecx, 0xfffffff0
call fcn.00401383
cmp byte [esp + 0x27], 0
je 0x429234
cmp byte [esp + 0x17], 0
je 0x429217
push 5
push 0x8c
mov esi, ebx
mov byte [esp + 0x1f], 0
call fcn.00426bcb
push edi
push 0x4315bc
mov ecx, ebx
call fcn.004279d7
push dword [esp + 0x20]
lea ecx, [esp + 0x11c]
call fcn.00404da1
lea ecx, [edi - 0x10]
mov byte [esp + 0x1980], 0x2f
call fcn.00401383
cmp dword [esp + 0x1c], 0
jne 0x4290e4
push 3
push 0x8f
mov esi, ebx
call fcn.00426bcb
push 0xa
lea ecx, [esp + 0x138]
call fcn.00404c09
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
mov byte [esp + 0x1984], 0x35
and dword [esp + 0x14], 0
mov esi, dword [0x42d358]
push eax
push 0
mov edi, 0x80000003
jmp 0x4292de
push 0x80070057
call fcn.004012c1
push 0x432c68
lea eax, [esp + 0x170]
push eax
call dword [0x42d35c]
test eax, eax
jne 0x4292c9
lea eax, [esp + 0x16c]
push eax
lea ecx, [esp + 0x138]
call fcn.00404ec5
inc dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push dword [esp + 0x18]
push edi
mov dword [esp + 0x28], 0x400
call esi
test eax, eax
je 0x42929e
push dword [esp + 0x140]
lea eax, [esp + 0x34]
push 0x432c7c
push eax
call fcn.00402c02
add esp, 0xc
lea eax, [esp + 0x44]
push 0x91
push eax
call fcn.0042a6c7
lea ecx, [esp + 0x38]
push ecx
push eax
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0x1994], 0x36
call fcn.00401dce
add esp, 0x14
mov byte [esp + 0x1980], 0x37
mov eax, dword [eax]
push 0
push eax
mov esi, ebx
call fcn.00426067
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0x35
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.00401383
mov esi, dword [esp + 0x138]
test esi, esi
je 0x429ac2
jmp 0x429379
mov esi, dword [esp + 0x70]
push 0xa
lea ecx, [esp + 0x100]
call fcn.00404c09
push 0xa
lea ecx, [esp + 0xe4]
mov byte [esp + 0x1984], 0x38
call fcn.00404c09
mov byte [esp + 0x1980], 0x39
mov eax, esi
test esi, esi
je 0x428eca
mov ecx, dword [esi]
add eax, 8
push 0x432c84
push eax
lea eax, [esp + 0x34]
push eax
mov dword [esp + 0x7c], ecx
call fcn.00401e25
add esp, 0xc
push 0
push 0x5c
lea ecx, [esp + 0x34]
mov byte [esp + 0x1988], 0x3a
call fcn.00401cc6
push eax
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x34]
call fcn.00401d90
mov esi, eax
lea eax, [esp + 0x44]
push 0x90
push eax
mov byte [esp + 0x1988], 0x3b
call fcn.0042a6c7
push esi
push eax
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0x1994], 0x3c
call fcn.00401dce
add esp, 0x14
mov byte [esp + 0x1980], 0x3d
mov eax, dword [eax]
push 3
push eax
mov esi, ebx
call fcn.00426067
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.00401383
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0x3a
mov ecx, dword [esp + 0x8c]
add ecx, 0xfffffff0
call fcn.00401383
and dword [esp + 0x1c], 0
mov esi, 0x4315f0
push esi
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.00401e25
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
mov byte [esp + 0x1984], 0x3e
mov eax, dword [eax]
push 0x20019
push eax
push ebx
mov edi, 0x80000003
call fcn.00426ade
mov byte [esp + 0x1980], 0x3a
mov ecx, dword [esp + 0x88]
add ecx, 0xfffffff0
mov edi, eax
call fcn.00401383
test edi, edi
jne 0x4295b5
and dword [esp + 0x10], edi
xor eax, eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push edi
mov edi, dword [0x42d358]
jmp 0x429595
push esi
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x98]
push eax
call fcn.00401e25
add esp, 0xc
push 0x432c88
push eax
lea eax, [esp + 0xa8]
push eax
mov byte [esp + 0x198c], 0x3f
call fcn.00401e25
add esp, 8
mov ecx, esp
mov dword [esp + 0x64], esp
lea edx, [esp + 0x170]
push edx
push eax
push ecx
mov byte [esp + 0x1990], 0x40
call fcn.00401e25
lea eax, [esp + 0x10c]
add esp, 0xc
push eax
call fcn.0042a7cb
pop ecx
pop ecx
mov ecx, dword [esp + 0xa0]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0x3a
mov ecx, dword [esp + 0x90]
add ecx, 0xfffffff0
call fcn.00401383
inc dword [esp + 0x10]
xor eax, eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push dword [esp + 0x18]
push dword [esp + 0x28]
mov dword [esp + 0x28], 0x400
call edi
test eax, eax
je 0x4294ed
push dword [esp + 0x1c]
call dword [section..rdata]
push dword [esp + 0x108]
lea eax, [esp + 0x34]
push 0x432c8c
push eax
call fcn.00402c02
add esp, 0xc
lea eax, [esp + 0xa4]
push 0x92
push eax
call fcn.0042a6c7
lea ecx, [esp + 0x38]
push ecx
push eax
lea eax, [esp + 0xa8]
push eax
mov byte [esp + 0x1994], 0x41
call fcn.00401dce
add esp, 0x14
mov byte [esp + 0x1980], 0x42
mov eax, dword [eax]
push 0
push eax
mov esi, ebx
call fcn.00426067
mov ecx, dword [esp + 0x98]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0x3a
mov ecx, dword [esp + 0xa4]
add ecx, 0xfffffff0
call fcn.00401383
and dword [esp + 0x1c], 0
mov esi, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerMountPoints2CPCVolume
push esi
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x8c]
push eax
call fcn.00401e25
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
mov byte [esp + 0x1984], 0x43
mov eax, dword [eax]
push 0x20019
push eax
push ebx
mov edi, 0x80000003
call fcn.00426ade
mov byte [esp + 0x1980], 0x3a
mov ecx, dword [esp + 0x84]
add ecx, 0xfffffff0
mov edi, eax
call fcn.00401383
test edi, edi
jne 0x429782
and dword [esp + 0x10], edi
xor eax, eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push edi
mov edi, dword [0x42d358]
jmp 0x429762
push esi
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.00401e25
add esp, 0xc
push 0x432c94
push eax
lea eax, [esp + 0xa4]
push eax
mov byte [esp + 0x198c], 0x44
call fcn.00401e25
add esp, 8
mov ecx, esp
mov dword [esp + 0x64], esp
lea edx, [esp + 0x170]
push edx
push eax
push ecx
mov byte [esp + 0x1990], 0x45
call fcn.00401e25
lea eax, [esp + 0xf0]
add esp, 0xc
push eax
call fcn.0042a7cb
pop ecx
pop ecx
mov ecx, dword [esp + 0x9c]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0x3a
mov ecx, dword [esp + 0x74]
add ecx, 0xfffffff0
call fcn.00401383
inc dword [esp + 0x10]
xor eax, eax
mov word [esp + 0x16c], ax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x170]
push eax
push dword [esp + 0x18]
push dword [esp + 0x28]
mov dword [esp + 0x28], 0x400
call edi
test eax, eax
je 0x4296c0
push dword [esp + 0x1c]
call dword [section..rdata]
push dword [esp + 0xec]
lea eax, [esp + 0x34]
push 0x432c98
push eax
call fcn.00402c02
add esp, 0xc
lea eax, [esp + 0x7c]
push 0x93
push eax
call fcn.0042a6c7
lea ecx, [esp + 0x38]
push ecx
push eax
lea eax, [esp + 0x48]
push eax
mov byte [esp + 0x1994], 0x46
call fcn.00401dce
add esp, 0x14
mov byte [esp + 0x1980], 0x47
mov eax, dword [eax]
push 0
push eax
mov esi, ebx
call fcn.00426067
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0x3a
mov ecx, dword [esp + 0x7c]
add ecx, 0xfffffff0
call fcn.00401383
mov eax, dword [esp + 0x100]
mov byte [esp + 0x17], 1
test eax, eax
je 0x4298f2
jmp 0x429813
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x428eca
mov ecx, dword [eax]
add eax, 8
mov dword [esp + 0x10], ecx
push eax
lea ecx, [esp + 0x54]
call fcn.004014f5
push 0x5c
lea ecx, [esp + 0x54]
mov byte [esp + 0x1984], 0x48
call fcn.00401cf8
inc eax
push eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x58]
call fcn.00401d6d
mov byte [esp + 0x1980], 0x49
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 0xc]
cmp ecx, 1
jne 0x4298cb
test ecx, ecx
jl 0x429294
movzx ecx, word [eax]
xor edx, edx
add ecx, 0xffffffbf
inc edx
shl edx, cl
mov ecx, dword [esp + 0x80]
test ecx, edx
jne 0x4298cb
cmp byte [esp + 0x17], 0
je 0x4298a1
push 5
push 0x8c
mov esi, ebx
mov byte [esp + 0x1f], 0
call fcn.00426bcb
mov ecx, dword [esp + 0x58]
lea edi, [esp + 0x50]
mov ebx, 0x80000003
call fcn.00427adc
push dword [esp + 0x1c]
lea ecx, [esp + 0x100]
call fcn.00404da1
mov ebx, dword [esp + 0x58]
mov eax, dword [esp + 0x20]
lea ecx, [eax - 0x10]
call fcn.00401383
mov byte [esp + 0x1980], 0x3a
mov ecx, dword [esp + 0x50]
add ecx, 0xfffffff0
call fcn.00401383
cmp dword [esp + 0x10], 0
jne 0x42980f
mov eax, dword [esp + 0xe4]
test eax, eax
je 0x429a83
jmp 0x429907
mov eax, dword [esp + 0x10]
mov dword [esp + 0x6c], eax
test eax, eax
je 0x428eca
mov ecx, dword [eax]
add eax, 8
mov dword [esp + 0x10], ecx
push eax
lea ecx, [esp + 0x58]
call fcn.004014f5
push 0x5c
lea ecx, [esp + 0x58]
mov byte [esp + 0x1984], 0x4a
call fcn.00401cf8
inc eax
push eax
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x5c]
call fcn.00401d6d
cmp byte [esp + 0x17], 0
mov byte [esp + 0x1980], 0x4b
je 0x42996b
push 5
push 0x8c
mov esi, ebx
mov byte [esp + 0x1f], 0
call fcn.00426bcb
mov edi, dword [esp + 0x100]
mov esi, dword [esp + 0x68]
jmp 0x4299ee
mov dword [esp + 0x1c], edi
mov eax, edi
test edi, edi
je 0x428eca
mov edi, dword [edi]
add eax, 8
push eax
lea ecx, [esp + 0x2c]
call fcn.004014f5
push 0x5c
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1984], 0x4c
call fcn.00401cf8
inc eax
push eax
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x30]
call fcn.00401d6d
push esi
lea ecx, [esp + 0x68]
mov byte [esp + 0x1984], 0x4d
call fcn.00401e90
test eax, eax
je 0x4299f4
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0x4b
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.00401383
test edi, edi
jne 0x429978
jmp 0x429a36
mov ecx, dword [esp + 0x58]
lea edi, [esp + 0x28]
mov ebx, 0x80000003
call fcn.00427adc
push dword [esp + 0x1c]
lea ecx, [esp + 0x100]
call fcn.00404da1
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.00401383
mov byte [esp + 0x1980], 0x4b
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.00401383
mov ecx, dword [esp + 0x58]
lea edi, [esp + 0x54]
mov ebx, 0x80000003
call fcn.00427adc
push dword [esp + 0x6c]
lea ecx, [esp + 0xe4]
call fcn.00404da1
lea ecx, [esi - 0x10]
call fcn.00401383
mov byte [esp + 0x1980], 0x3a
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.00401383
cmp dword [esp + 0x10], 0
mov ebx, dword [esp + 0x58]
jne 0x429903
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.00401383
lea ecx, [esp + 0xe0]
mov byte [esp + 0x1980], 0x38
call fcn.00404d59
lea ecx, [esp + 0xfc]
mov byte [esp + 0x1980], 0x35
call fcn.00404d59
cmp dword [esp + 0x70], 0
jne 0x429375
lea ecx, [esp + 0x134]
mov byte [esp + 0x1980], 0x2f
call fcn.00404d59
lea ecx, [esp + 0x118]
mov byte [esp + 0x1980], 0xe
call fcn.00404d59
lea ecx, [esp + 0x150]
mov byte [esp + 0x1980], 6
call fcn.00404d59
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.00401383
mov ecx, dword [esp + 0x94]
add ecx, 0xfffffff0
call fcn.00401383
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.00401383
lea esi, [esp + 0xc4]
mov byte [esp + 0x1980], 0
call fcn.00401fe7
or dword [esp + 0x1980], 0xffffffff
lea ecx, [esp + 0xa8]
call fcn.00404d59
mov ecx, dword [esp + 0x1978]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1960]
xor ecx, esp
call fcn.004128d2
mov esp, ebp
pop ebp
ret