Function at 0x429690
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x24
push ebx
push ebp
mov ebp, dword [esp + 0x30]
push esi
push edi
xor edi, edi
cmp ebp, edi
je 0x4296a6
lea ecx, [ebp + 0x2c]
jmp 0x4296a8
xor ecx, ecx
lea esi, [ebp + 0xe0]
mov ebx, 3
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], ebx
mov dword [esi + 8], edi
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov eax, dword [ecx]
mov edx, dword [eax]
push esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, esi
call edx
cmp ebp, edi
je 0x4296fd
lea ecx, [ebp + 0x2c]
jmp 0x4296ff
xor ecx, ecx
lea esi, [ebp + 0x110]
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], ebx
mov dword [esi + 8], edi
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov eax, dword [ecx]
mov edx, dword [eax]
push esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, esi
call edx
push str.font4360
push esi
call fcn.0042b560
mov ebx, dword [ebp + 0x170]
cmp ebx, dword [ebp + 0x174]
jbe 0x429764
call fcn.0046fc99
mov esi, dword [ebp + 0x164]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebx
mov ebx, dword [ebp + 0x174]
cmp dword [ebp + 0x170], ebx
jbe 0x429785
call fcn.0046fc99
mov eax, dword [ebp + 0x164]
cmp esi, edi
je 0x429793
cmp esi, eax
je 0x429798
call fcn.0046fc99
cmp dword [esp + 0x14], ebx
je 0x429849
cmp ebp, edi
je 0x4297ab
lea ebx, [ebp + 0x2c]
jmp 0x4297ad
xor ebx, ebx
cmp esi, edi
jne 0x42983e
call fcn.0046fc99
xor eax, eax
mov esi, dword [esp + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x4297ca
call fcn.0046fc99
mov esi, dword [esi]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], 3
mov dword [esi + 8], edi
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov eax, dword [ebx]
mov edx, dword [eax]
push esi
mov ecx, ebx
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, esi
call edx
mov eax, dword [esp + 0x10]
cmp eax, edi
jne 0x429845
call fcn.0046fc99
xor eax, eax
mov ecx, dword [esp + 0x14]
cmp ecx, dword [eax + 0x10]
jb 0x429830
call fcn.0046fc99
add dword [esp + 0x14], 4
mov esi, dword [esp + 0x10]
jmp 0x429772
mov eax, dword [esi]
jmp 0x4297bc
mov eax, dword [eax]
jmp 0x429822
mov eax, dword [ebp + 0x240]
and eax, 0xf
dec eax
cmp eax, 5
ja case.default.0x42985c
jmp dword [eax*4 + 0x42a200]
lea esi, [ebp + 0x17c]
lea ebx, [ebp + 0x2c]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], 2
mov dword [esi + 8], 1
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov edx, dword [ebx]
mov eax, dword [edx]
push esi
mov ecx, ebx
call eax
mov edx, dword [esi]
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x14]
push edi
push edi
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x18]
push edi
push edi
mov ecx, esi
call eax
lea esi, [ebp + 0x1bc]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], 3
mov dword [esi + 8], 1
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov edx, dword [ebx]
mov eax, dword [edx]
push esi
mov ecx, ebx
call eax
mov edx, dword [esi]
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x14]
push edi
push edi
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x18]
push edi
push edi
mov ecx, esi
call eax
add ebp, 0x1fc
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x20], edi
mov dword [ebp + 0x24], edi
mov dword [ebp + 4], 3
mov dword [ebp + 8], 2
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x10], edi
mov dword [ebp + 0x14], edi
mov dword [ebp + 0x18], edi
mov edx, dword [ebx]
mov eax, dword [edx]
push ebp
mov ecx, ebx
call eax
mov edx, dword [ebp]
mov eax, dword [edx + 8]
mov ecx, ebp
call eax
mov edx, dword [ebp]
mov eax, dword [edx + 0x14]
push edi
push edi
mov ecx, ebp
call eax
mov edx, dword [ebp]
mov eax, dword [edx + 0x18]
push edi
push edi
mov ecx, ebp
call eax
mov edi, 0x49c588
mov eax, esi
call fcn.004293c0
mov edi, 0x49c590
mov eax, ebp
call fcn.004293c0
xor edi, edi
mov ebx, dword [esp + 0x38]
mov eax, dword [ebx + 0x244]
lea esi, [ebx + 0x17c]
mov dword [esi + 0x38], eax
call fcn.00429410
mov ecx, dword [ebx + 0x244]
lea esi, [ebx + 0x1bc]
mov dword [esi + 0x38], ecx
call fcn.00429410
mov edx, dword [ebx + 0x244]
mov esi, ebp
mov dword [ebp + 0x38], edx
call fcn.00429410
mov esi, dword [ebx + 0x170]
mov dword [esp + 0x38], edi
mov dword [esp + 0x10], edi
cmp esi, dword [ebx + 0x174]
jbe 0x4299cd
call fcn.0046fc99
mov ebp, dword [ebx + 0x164]
mov dword [esp + 0x1c], esi
jmp 0x4299e0
mov esi, dword [ebx + 0x174]
cmp dword [ebx + 0x170], esi
jbe 0x4299f3
call fcn.0046fc99
mov eax, dword [ebx + 0x164]
cmp ebp, edi
je 0x429a01
cmp ebp, eax
je 0x429a06
call fcn.0046fc99
cmp dword [esp + 0x1c], esi
je 0x42a151
cmp ebp, edi
jne 0x42a141
call fcn.0046fc99
xor eax, eax
mov ecx, dword [esp + 0x1c]
cmp ecx, dword [eax + 0x10]
jb 0x429a2d
call fcn.0046fc99
mov edx, dword [esp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax + 0x14]
sub ecx, dword [eax + 0xc]
cmp ecx, dword [esp + 0x38]
jbe 0x429a43
mov dword [esp + 0x38], ecx
mov ecx, dword [eax + 0x18]
sub ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x10]
lea eax, [edx + ecx + 5]
mov dword [esp + 0x10], eax
cmp ebp, edi
jne 0x42a149
call fcn.0046fc99
xor eax, eax
mov ecx, dword [esp + 0x1c]
cmp ecx, dword [eax + 0x10]
jb 0x429a72
call fcn.0046fc99
add dword [esp + 0x1c], 4
jmp 0x4299e0
lea esi, [ebp + 0x17c]
lea ecx, [ebp + 0x2c]
mov eax, 3
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov edx, dword [ecx]
mov eax, dword [edx]
push esi
mov dword [esp + 0x14], ecx
call eax
mov edx, dword [esi]
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x14]
push edi
push edi
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x18]
push edi
push edi
mov ecx, esi
call eax
mov ecx, dword [esp + 0x10]
lea ebx, [ebp + 0x1bc]
mov dword [ebx + 0x1c], ecx
mov dword [ebx + 0x20], edi
mov dword [ebx + 0x24], edi
mov dword [ebx + 4], 3
mov dword [ebx + 8], 4
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x18], edi
mov edx, dword [ecx]
mov eax, dword [edx]
push ebx
call eax
mov edx, dword [ebx]
mov eax, dword [edx + 8]
mov ecx, ebx
call eax
mov edx, dword [ebx]
mov eax, dword [edx + 0x14]
push edi
push edi
mov ecx, ebx
call eax
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
push edi
push edi
mov ecx, ebx
call eax
mov ecx, dword [esp + 0x10]
add ebp, 0x1fc
mov dword [ebp + 0x1c], ecx
mov dword [ebp + 0x20], edi
mov dword [ebp + 0x24], edi
mov dword [ebp + 4], 3
mov dword [ebp + 8], 5
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x10], edi
mov dword [ebp + 0x14], edi
mov dword [ebp + 0x18], edi
mov edx, dword [ecx]
mov eax, dword [edx]
push ebp
call eax
mov edx, dword [ebp]
mov ecx, ebp
mov eax, dword [edx + 8]
call eax
mov edx, dword [ebp]
mov eax, dword [edx + 0x14]
push edi
push edi
mov ecx, ebp
call eax
mov edx, dword [ebp]
mov eax, dword [edx + 0x18]
push edi
push edi
mov ecx, ebp
call eax
mov edi, 0x49c598
mov eax, esi
call fcn.004293c0
mov edi, 0x49c5a0
mov eax, ebx
call fcn.004293c0
mov edi, 0x49c5a8
mov eax, ebp
call fcn.004293c0
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x9c]
add edx, 0x98
mov ecx, eax
shr ecx, 2
not ecx
test cl, 1
je 0x429974
or eax, 4
mov dword [edx + 4], eax
mov ecx, dword [edx + 0x1c]
test ecx, ecx
je 0x429974
mov eax, dword [ecx]
push 0
push 0
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
jmp 0x429974
lea esi, [ebp + 0x17c]
lea ecx, [ebp + 0x2c]
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], 3
mov dword [esi + 8], 6
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov eax, dword [ecx]
mov edx, dword [eax]
push esi
mov dword [esp + 0x14], ecx
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, esi
call edx
mov ecx, dword [esp + 0x10]
lea ebx, [ebp + 0x1bc]
mov dword [ebx + 0x1c], ecx
mov dword [ebx + 0x20], edi
mov dword [ebx + 0x24], edi
mov dword [ebx + 4], 3
mov dword [ebx + 8], 7
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x18], edi
mov eax, dword [ecx]
mov edx, dword [eax]
push ebx
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 8]
mov ecx, ebx
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, ebx
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, ebx
call edx
mov ecx, dword [esp + 0x10]
add ebp, 0x1fc
mov dword [ebp + 0x1c], ecx
mov dword [ebp + 0x20], edi
mov dword [ebp + 0x24], edi
mov dword [ebp + 4], 3
mov dword [ebp + 8], 2
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x10], edi
mov dword [ebp + 0x14], edi
mov dword [ebp + 0x18], edi
mov eax, dword [ecx]
mov edx, dword [eax]
push ebp
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 8]
mov ecx, ebp
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, ebp
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, ebp
call edx
mov edi, 0x49c5b0
mov eax, esi
call fcn.004293c0
mov edi, 0x49c5b4
mov eax, ebx
jmp 0x429963
lea esi, [ebp + 0x17c]
lea ebx, [ebp + 0x2c]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], 2
mov dword [esi + 8], 1
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov eax, dword [ebx]
mov edx, dword [eax]
push esi
mov ecx, ebx
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, esi
call edx
lea esi, [ebp + 0x1bc]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], 3
mov dword [esi + 8], 6
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov eax, dword [ebx]
mov edx, dword [eax]
push esi
mov ecx, ebx
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, esi
call edx
add ebp, 0x1fc
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x20], edi
mov dword [ebp + 0x24], edi
mov dword [ebp + 4], 3
mov dword [ebp + 8], 7
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x10], edi
mov dword [ebp + 0x14], edi
mov dword [ebp + 0x18], edi
mov eax, dword [ebx]
mov edx, dword [eax]
push ebp
mov ecx, ebx
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 8]
mov ecx, ebp
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, ebp
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, ebp
call edx
mov edi, 0x49c5b0
mov eax, esi
call fcn.004293c0
mov edi, 0x49c5b4
jmp 0x429b95
lea esi, [ebp + 0x17c]
lea ebx, [ebp + 0x2c]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], 2
mov dword [esi + 8], 1
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov eax, dword [ebx]
mov edx, dword [eax]
push esi
mov ecx, ebx
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, esi
call edx
lea esi, [ebp + 0x1bc]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], 3
mov dword [esi + 8], 4
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov eax, dword [ebx]
mov edx, dword [eax]
push esi
mov ecx, ebx
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, esi
call edx
add ebp, 0x1fc
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x20], edi
mov dword [ebp + 0x24], edi
mov dword [ebp + 4], 3
mov dword [ebp + 8], 2
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x10], edi
mov dword [ebp + 0x14], edi
mov dword [ebp + 0x18], edi
mov eax, dword [ebx]
mov edx, dword [eax]
push ebp
mov ecx, ebx
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 8]
mov ecx, ebp
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, ebp
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, ebp
call edx
mov edi, 0x49c5a0
jmp 0x429961
lea esi, [ebp + 0x17c]
lea ecx, [ebp + 0x2c]
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], 3
mov dword [esi + 8], 2
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov eax, dword [ecx]
mov edx, dword [eax]
push esi
mov dword [esp + 0x14], ecx
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, esi
call edx
mov ecx, dword [esp + 0x10]
lea ebx, [ebp + 0x1bc]
mov dword [ebx + 0x1c], ecx
mov dword [ebx + 0x20], edi
mov dword [ebx + 0x24], edi
mov dword [ebx + 4], 3
mov dword [ebx + 8], 0xa
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x18], edi
mov eax, dword [ecx]
mov edx, dword [eax]
push ebx
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 8]
mov ecx, ebx
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, ebx
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, ebx
call edx
mov ecx, dword [esp + 0x10]
add ebp, 0x1fc
mov dword [ebp + 0x1c], ecx
mov dword [ebp + 0x20], edi
mov dword [ebp + 0x24], edi
mov dword [ebp + 4], 3
mov dword [ebp + 8], 0xb
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x10], edi
mov dword [ebp + 0x14], edi
mov dword [ebp + 0x18], edi
mov eax, dword [ecx]
mov edx, dword [eax]
push ebp
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 8]
mov ecx, ebp
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, ebp
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, ebp
call edx
mov edi, 0x49c590
mov eax, esi
call fcn.004293c0
mov edi, 0x49c5a0
mov eax, ebx
call fcn.004293c0
mov edi, 0x49c5b8
jmp 0x42996d
lea esi, [ebp + 0x17c]
lea ebx, [ebp + 0x2c]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], 2
mov dword [esi + 8], 1
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov eax, dword [ebx]
mov edx, dword [eax]
push esi
mov ecx, ebx
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, esi
call edx
lea esi, [ebp + 0x1bc]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 4], 2
mov dword [esi + 8], 1
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov eax, dword [ebx]
mov edx, dword [eax]
push esi
mov ecx, ebx
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, esi
call edx
add ebp, 0x1fc
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x20], edi
mov dword [ebp + 0x24], edi
mov dword [ebp + 4], 3
mov dword [ebp + 8], 1
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x10], edi
mov dword [ebp + 0x14], edi
mov dword [ebp + 0x18], edi
mov eax, dword [ebx]
mov edx, dword [eax]
push ebp
mov ecx, ebx
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 8]
mov ecx, ebp
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 0x14]
push edi
push edi
mov ecx, ebp
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 0x18]
push edi
push edi
mov ecx, ebp
call edx
push 0x49c588
lea eax, [ebp + 0x2c]
mov ebx, 2
call fcn.004014b0
mov esi, ebp
call fcn.00429410
jmp 0x429976
mov eax, dword [ebp]
jmp 0x429a1f
mov eax, dword [ebp]
jmp 0x429a64
mov eax, dword [esp + 0x38]
cmp dword [ebx + 0x23c], edi
je 0x42a160
add eax, 0x28
mov ecx, dword [esp + 0x10]
add eax, 0x32
add ecx, 0x78
cmp eax, 0x122
jge 0x42a17d
mov dword [esp + 0x38], 0x122
mov eax, dword [esp + 0x38]
cmp ecx, 0xa0
jge 0x42a191
mov dword [esp + 0x10], 0xa0
mov ecx, dword [esp + 0x10]
mov edx, dword [ebx + 4]
lea esi, [ebx + 4]
mov ebx, dword [0x4964ec]
push 0xffffffffffffffec
push edx
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
call ebx
push eax
mov eax, dword [esi]
push edi
push 0xfffffffffffffff0
push eax
call ebx
push eax
lea ecx, [esp + 0x2c]
push ecx
call dword [0x4964bc]
mov edx, dword [esp + 0x2c]
sub edx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x20]
mov ecx, dword [esi]
push 6
push edx
push eax
push edi
push edi
push edi
push ecx
call dword [0x4964c8]
push esi
call fcn.004294e0
mov edx, dword [esp + 0x3c]
mov dword [edx], edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x24
ret 8