Function at 0x422390
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x494147
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x4b6170]
xor eax, esp
mov dword [esp + 0xd8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4b6170]
xor eax, esp
push eax
lea eax, [esp + 0xf4]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x104]
mov eax, dword [ebp + 0x5c]
mov ecx, dword [eax + 0x2c]
test ecx, ecx
seta bl
cmp dword [eax + 0x48], 0
mov dword [esp + 0x6c], ebp
seta byte [esp + 0x17]
cmp dword [eax + 0x64], 0
lea eax, [esp + 0x88]
push eax
mov byte [esp + 0x57], bl
seta byte [esp + 0x1a]
mov byte [esp + 0xbc], 0
mov byte [esp + 0xc4], 0
mov byte [esp + 0xcc], 0
call fcn.0041f2b0
lea ecx, [esp + 0xa0]
push ecx
mov dword [esp + 0x100], 0
call fcn.0041f2b0
lea edx, [esp + 0x70]
push edx
mov byte [esp + 0x100], 1
call fcn.0041f2b0
mov byte [esp + 0xfc], 2
test bl, bl
je 0x422511
mov eax, dword [ebp + 0x5c]
lea esi, [eax + 0x18]
push 0x4ad250
mov ebx, 2
mov eax, esi
call fcn.00404300
cmp eax, 0xffffffff
setne al
sub esp, 0x1c
mov ecx, esp
xor edx, edx
mov dword [esp + 0x4c], esp
push 0xffffffffffffffff
mov byte [esp + 0xd8], al
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], edx
push edx
cmp al, dl
je 0x4224c3
xor eax, eax
mov word [ecx + 4], ax
mov eax, esi
mov edi, 0x4ad250
call fcn.004027a0
mov edx, edi
lea ecx, [esp + 0xec]
call fcn.00403fe0
add esp, 0x1c
mov byte [esp + 0xfc], 3
jmp 0x4224ee
xor eax, eax
mov word [ecx + 4], ax
mov eax, esi
mov edi, 0x4ad258
call fcn.004027a0
mov edx, edi
lea ecx, [esp + 0xec]
call fcn.00403fe0
add esp, 0x1c
mov byte [esp + 0xfc], 4
lea ecx, [esp + 0x88]
push ecx
mov ebx, eax
call fcn.00415140
lea esi, [esp + 0xd0]
mov byte [esp + 0xfc], 2
call fcn.00404d50
cmp byte [esp + 0x17], 0
je 0x4225d7
mov eax, dword [ebp + 0x5c]
lea esi, [eax + 0x34]
push 0x4ad250
mov ebx, 2
mov eax, esi
call fcn.00404300
cmp eax, 0xffffffff
setne al
sub esp, 0x1c
mov ecx, esp
xor edx, edx
mov dword [esp + 0x4c], esp
push 0xffffffffffffffff
mov byte [esp + 0xe0], al
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], edx
push edx
cmp al, dl
je 0x422589
xor eax, eax
mov word [ecx + 4], ax
mov eax, esi
mov edi, 0x4ad250
call fcn.004027a0
mov edx, edi
lea ecx, [esp + 0xec]
call fcn.00403fe0
add esp, 0x1c
mov byte [esp + 0xfc], 5
jmp 0x4225b4
xor eax, eax
mov word [ecx + 4], ax
mov eax, esi
mov edi, 0x4ad258
call fcn.004027a0
mov edx, edi
lea ecx, [esp + 0xec]
call fcn.00403fe0
add esp, 0x1c
mov byte [esp + 0xfc], 6
lea ecx, [esp + 0xa0]
push ecx
mov ebx, eax
call fcn.00415140
lea esi, [esp + 0xd0]
mov byte [esp + 0xfc], 2
call fcn.00404d50
cmp byte [esp + 0x16], 0
je 0x4226a1
mov eax, dword [ebp + 0x5c]
lea esi, [eax + 0x50]
push 0x4ad250
mov ebx, 2
mov eax, esi
call fcn.00404300
cmp eax, 0xffffffff
setne al
sub esp, 0x1c
xor edx, edx
mov ecx, esp
mov dword [esp + 0x4c], esp
push 0xffffffffffffffff
mov byte [esp + 0xe8], al
mov dword [ecx + 0x14], edx
push edx
cmp al, dl
je 0x42264f
xor eax, eax
mov ebx, 7
mov dword [ecx + 0x18], ebx
mov word [ecx + 4], ax
mov eax, esi
mov edi, 0x4ad250
call fcn.004027a0
mov edx, edi
lea ecx, [esp + 0xec]
call fcn.00403fe0
add esp, 0x1c
mov byte [esp + 0xfc], bl
jmp 0x422681
xor eax, eax
mov dword [ecx + 0x18], 7
mov word [ecx + 4], ax
mov eax, esi
mov edi, 0x4ad258
call fcn.004027a0
mov edx, edi
lea ecx, [esp + 0xec]
call fcn.00403fe0
add esp, 0x1c
mov byte [esp + 0xfc], 8
lea ecx, [esp + 0x70]
push ecx
mov ebx, eax
call fcn.00415140
lea esi, [esp + 0xd0]
mov byte [esp + 0xfc], 2
call fcn.00404d50
lea edx, [esp + 0x54]
push edx
call fcn.0041f2b0
mov byte [esp + 0xfc], 9
mov ecx, dword [ebp + 0x38]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
lea edx, [esp + 0x54]
push edx
push 0x427820
call eax
lea ecx, [esp + 0x18]
push ecx
call fcn.0041f2b0
cmp byte [esp + 0x53], 0
mov byte [esp + 0xfc], 0xa
je 0x4227cc
mov edx, dword [esp + 0x64]
sub edx, dword [esp + 0x60]
xor ebp, ebp
sar edx, 2
test edx, edx
jbe 0x422938
mov ebx, dword [esp + 0xb8]
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x48], esp
push eax
lea ecx, [esp + 0xa4]
call fcn.00404b80
mov ecx, dword [esp + 0x7c]
sub ecx, dword [esp + 0x78]
sar ecx, 2
cmp ebp, ecx
jb 0x42272a
call fcn.0043fb41
mov edx, dword [esp + 0x78]
mov eax, dword [edx + ebp*4]
mov ecx, dword [esp + 0x84]
push ebx
push eax
push ecx
call fcn.00423390
test al, al
je 0x4227b3
mov edx, dword [esp + 0x64]
sub edx, dword [esp + 0x60]
sar edx, 2
cmp ebp, edx
jb 0x422758
call fcn.0043fb41
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x60]
lea edi, [eax + ebp*4]
test edx, edx
jne 0x42276b
xor ecx, ecx
jmp 0x422774
mov ecx, dword [esp + 0x2c]
sub ecx, edx
sar ecx, 2
mov eax, dword [esp + 0x28]
mov esi, eax
sub esi, edx
sar esi, 2
cmp esi, ecx
jae 0x422790
mov ecx, dword [edi]
mov dword [eax], ecx
add eax, 4
mov dword [esp + 0x28], eax
jmp 0x4227b3
mov esi, eax
cmp edx, eax
jbe 0x42279b
call fcn.0043fb41
mov eax, dword [esp + 0x18]
push esi
push eax
push edi
lea edx, [esp + 0xc4]
push edx
lea eax, [esp + 0x28]
call fcn.0041f490
mov eax, dword [esp + 0x64]
sub eax, dword [esp + 0x60]
inc ebp
sar eax, 2
cmp ebp, eax
jb 0x422700
jmp 0x422938
mov eax, dword [esp + 0x64]
sub eax, dword [esp + 0x60]
xor ebx, ebx
sar eax, 2
test eax, eax
jbe 0x422938
cmp ebx, eax
jb 0x4227ea
call fcn.0043fb41
mov ecx, dword [ebp + 0x38]
mov eax, dword [esp + 0x60]
mov edx, dword [ecx]
mov eax, dword [eax + ebx*4]
mov edx, dword [edx + 0x3c]
push str.tagname
push eax
call edx
xor ecx, ecx
mov word [esp + 0xd4], cx
mov ecx, eax
mov dword [esp + 0xe8], 7
mov dword [esp + 0xe4], 0
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x422826
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [esp + 0xd4]
call fcn.00403500
mov byte [esp + 0xfc], 0xb
cmp dword [esp + 0xe8], 8
mov eax, dword [esp + 0xd4]
jae 0x422862
lea eax, [esp + 0xd4]
mov ecx, 0x4ae130
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42288d
test dx, dx
je 0x422889
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42288d
add eax, 4
add ecx, 4
test dx, dx
jne 0x422867
xor eax, eax
jmp 0x422892
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x422902
mov edx, dword [esp + 0x64]
sub edx, dword [esp + 0x60]
sar edx, 2
cmp ebx, edx
jb 0x4228aa
call fcn.0043fb41
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x60]
lea esi, [eax + ebx*4]
test edx, edx
jne 0x4228bd
xor ecx, ecx
jmp 0x4228c6
mov ecx, dword [esp + 0x2c]
sub ecx, edx
sar ecx, 2
mov eax, dword [esp + 0x28]
mov edi, eax
sub edi, edx
sar edi, 2
cmp edi, ecx
jae 0x4228e2
mov ecx, dword [esi]
mov dword [eax], ecx
add eax, 4
mov dword [esp + 0x28], eax
jmp 0x422902
mov edi, eax
cmp edx, eax
jbe 0x4228ed
call fcn.0043fb41
mov eax, dword [esp + 0x18]
push edi
push eax
push esi
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x28]
call fcn.0041f490
mov byte [esp + 0xfc], 0xa
cmp dword [esp + 0xe8], 8
jb 0x422924
mov eax, dword [esp + 0xd4]
push eax
call fcn.0043f604
add esp, 4
mov eax, dword [esp + 0x64]
sub eax, dword [esp + 0x60]
inc ebx
sar eax, 2
cmp ebx, eax
jb 0x4227ea
push 4
call fcn.0043f6a7
xor ebp, ebp
add esp, 4
cmp eax, ebp
je 0x422950
lea ecx, [esp + 0x38]
mov dword [eax], ecx
jmp 0x422952
xor eax, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x44], ebp
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebp
cmp byte [esp + 0x17], 0
mov byte [esp + 0xfc], 0xd
je 0x422ae6
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x3c]
call fcn.00423c20
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
mov ebx, ecx
cmp eax, ecx
jbe 0x42299e
call fcn.0043fb41
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x18]
mov edi, eax
cmp eax, ecx
jbe 0x4229ad
call fcn.0043fb41
mov eax, dword [esp + 0x18]
push ebx
push esi
push edi
push eax
lea ebx, [esp + 0x40]
lea esi, [esp + 0x28]
call fcn.0040d140
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov edx, ecx
sub edx, eax
sar edx, 2
xor esi, esi
test edx, edx
jbe 0x422aad
mov ebp, dword [esp + 0xc0]
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x48], esp
push eax
lea ecx, [esp + 0xbc]
call fcn.00404b80
mov ecx, dword [esp + 0x60]
sub ecx, dword [esp + 0x5c]
sar ecx, 2
cmp esi, ecx
jb 0x422a0c
call fcn.0043fb41
mov edx, dword [esp + 0x5c]
mov eax, dword [edx + esi*4]
mov ecx, dword [esp + 0x84]
push ebp
push eax
push ecx
call fcn.00423390
test al, al
je 0x422a95
mov edx, dword [esp + 0x48]
sub edx, dword [esp + 0x44]
sar edx, 2
cmp esi, edx
jb 0x422a3a
call fcn.0043fb41
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x44]
lea ebx, [eax + esi*4]
test edx, edx
jne 0x422a4d
xor ecx, ecx
jmp 0x422a56
mov ecx, dword [esp + 0x2c]
sub ecx, edx
sar ecx, 2
mov eax, dword [esp + 0x28]
mov edi, eax
sub edi, edx
sar edi, 2
cmp edi, ecx
jae 0x422a72
mov ecx, dword [ebx]
mov dword [eax], ecx
add eax, 4
mov dword [esp + 0x28], eax
jmp 0x422a95
mov edi, eax
cmp edx, eax
jbe 0x422a7d
call fcn.0043fb41
mov eax, dword [esp + 0x18]
push edi
push eax
push ebx
lea edx, [esp + 0xcc]
push edx
lea eax, [esp + 0x28]
call fcn.0041f490
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov edx, ecx
sub edx, eax
inc esi
sar edx, 2
cmp esi, edx
jb 0x4229e2
mov ebx, ecx
cmp eax, ecx
jbe 0x422ac0
call fcn.0043fb41
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov esi, dword [esp + 0x38]
mov edi, eax
cmp eax, ecx
jbe 0x422acf
call fcn.0043fb41
mov eax, dword [esp + 0x38]
push ebx
push esi
push edi
push eax
lea ebx, [esp + 0x40]
lea esi, [esp + 0x48]
call fcn.0040d140
xor ebp, ebp
cmp byte [esp + 0x16], 0
je 0x422c62
lea ecx, [esp + 0x18]
push ecx
lea eax, [esp + 0x3c]
call fcn.00423c20
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
mov ebx, ecx
cmp eax, ecx
jbe 0x422b1a
call fcn.0043fb41
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x18]
mov edi, eax
cmp eax, ecx
jbe 0x422b29
call fcn.0043fb41
mov edx, dword [esp + 0x18]
push ebx
push esi
push edi
push edx
lea ebx, [esp + 0x40]
lea esi, [esp + 0x28]
call fcn.0040d140
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov edx, ecx
sub edx, eax
sar edx, 2
xor esi, esi
test edx, edx
jbe 0x422c29
mov ebp, dword [esp + 0xc8]
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x48], esp
push eax
lea ecx, [esp + 0x8c]
call fcn.00404b80
mov ecx, dword [esp + 0x60]
sub ecx, dword [esp + 0x5c]
sar ecx, 2
cmp esi, ecx
jb 0x422b88
call fcn.0043fb41
mov edx, dword [esp + 0x5c]
mov eax, dword [edx + esi*4]
mov ecx, dword [esp + 0x84]
push ebp
push eax
push ecx
call fcn.00423390
test al, al
jne 0x422c11
mov edx, dword [esp + 0x48]
sub edx, dword [esp + 0x44]
sar edx, 2
cmp esi, edx
jb 0x422bb6
call fcn.0043fb41
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x44]
lea ebx, [eax + esi*4]
test edx, edx
jne 0x422bc9
xor ecx, ecx
jmp 0x422bd2
mov ecx, dword [esp + 0x2c]
sub ecx, edx
sar ecx, 2
mov eax, dword [esp + 0x28]
mov edi, eax
sub edi, edx
sar edi, 2
cmp edi, ecx
jae 0x422bee
mov ecx, dword [ebx]
mov dword [eax], ecx
add eax, 4
mov dword [esp + 0x28], eax
jmp 0x422c11
mov edi, eax
cmp edx, eax
jbe 0x422bf9
call fcn.0043fb41
mov eax, dword [esp + 0x18]
push edi
push eax
push ebx
lea edx, [esp + 0xd4]
push edx
lea eax, [esp + 0x28]
call fcn.0041f490
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov edx, ecx
sub edx, eax
inc esi
sar edx, 2
cmp esi, edx
jb 0x422b5e
mov ebx, ecx
cmp eax, ecx
jbe 0x422c3c
call fcn.0043fb41
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov esi, dword [esp + 0x38]
mov edi, eax
cmp eax, ecx
jbe 0x422c4b
call fcn.0043fb41
mov eax, dword [esp + 0x38]
push ebx
push esi
push edi
push eax
lea ebx, [esp + 0x40]
lea esi, [esp + 0x48]
call fcn.0040d140
xor ebp, ebp
mov ecx, dword [esp + 0x28]
sub ecx, dword [esp + 0x24]
sar ecx, 2
test ecx, ecx
ja 0x422e03
mov edx, dword [esp + 0x6c]
mov eax, dword [edx + 0x5c]
cmp dword [eax + 0x10], ebp
jne 0x422e03
call fcn.00401930
cmp dword [eax + 0x15c], 1
je 0x422e03
mov eax, dword [esp + 0x64]
sub eax, dword [esp + 0x60]
xor ebx, ebx
sar eax, 2
cmp eax, ebp
jbe 0x422e03
cmp ebx, eax
jb 0x422cb5
call fcn.0043fb41
mov ecx, dword [esp + 0x6c]
mov ecx, dword [ecx + 0x38]
mov eax, dword [esp + 0x60]
mov edx, dword [ecx]
mov eax, dword [eax + ebx*4]
mov edx, dword [edx + 0x3c]
push str.tagname
push eax
call edx
xor ecx, ecx
mov word [esp + 0xd4], cx
mov ecx, eax
mov dword [esp + 0xe8], 7
mov dword [esp + 0xe4], ebp
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bp
jne 0x422cf1
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [esp + 0xd4]
call fcn.00403500
mov byte [esp + 0xfc], 0xe
cmp dword [esp + 0xe8], 8
mov eax, dword [esp + 0xd4]
jae 0x422d2d
lea eax, [esp + 0xd4]
mov ecx, 0x4ae130
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x422d58
cmp dx, bp
je 0x422d54
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x422d58
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x422d32
xor eax, eax
jmp 0x422d5d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
jne 0x422dcd
mov edx, dword [esp + 0x64]
sub edx, dword [esp + 0x60]
sar edx, 2
cmp ebx, edx
jb 0x422d75
call fcn.0043fb41
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x60]
lea esi, [eax + ebx*4]
cmp edx, ebp
jne 0x422d88
xor ecx, ecx
jmp 0x422d91
mov ecx, dword [esp + 0x2c]
sub ecx, edx
sar ecx, 2
mov eax, dword [esp + 0x28]
mov edi, eax
sub edi, edx
sar edi, 2
cmp edi, ecx
jae 0x422dad
mov ecx, dword [esi]
mov dword [eax], ecx
add eax, 4
mov dword [esp + 0x28], eax
jmp 0x422dcd
mov edi, eax
cmp edx, eax
jbe 0x422db8
call fcn.0043fb41
mov eax, dword [esp + 0x18]
push edi
push eax
push esi
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x28]
call fcn.0041f490
mov byte [esp + 0xfc], 0xd
cmp dword [esp + 0xe8], 8
jb 0x422def
mov eax, dword [esp + 0xd4]
push eax
call fcn.0043f604
add esp, 4
mov eax, dword [esp + 0x64]
sub eax, dword [esp + 0x60]
inc ebx
sar eax, 2
cmp ebx, eax
jb 0x422cb5
mov esi, dword [esp + 0x28]
sub esi, dword [esp + 0x24]
sar esi, 2
cmp esi, ebp
jbe 0x4231e9
mov ecx, dword [esp + 0x6c]
mov edx, dword [ecx + 0x5c]
mov eax, dword [edx + 0x14]
cmp eax, ebp
jle 0x42303a
lea ecx, [eax - 1]
cmp ecx, esi
jge 0x4231e9
lea edi, [eax - 1]
cmp edi, esi
jb 0x422e3f
call fcn.0043fb41
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x24]
mov edi, dword [edx + edi*4]
cmp eax, ebp
je 0x422e57
push eax
call fcn.0043f604
add esp, 4
mov eax, dword [esp + 0x38]
push eax
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ebp
call fcn.0043f604
mov eax, dword [esp + 0x28]
add esp, 4
cmp eax, ebp
je 0x422e81
push eax
call fcn.0043f604
add esp, 4
mov ecx, dword [esp + 0x18]
push ecx
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
call fcn.0043f604
mov eax, dword [esp + 0x64]
add esp, 4
cmp eax, ebp
je 0x422eab
push eax
call fcn.0043f604
add esp, 4
mov edx, dword [esp + 0x54]
push edx
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ebp
mov dword [esp + 0x6c], ebp
call fcn.0043f604
mov eax, dword [esp + 0x80]
add esp, 4
cmp eax, ebp
je 0x422f19
mov ebp, dword [esp + 0x80]
cmp eax, ebp
je 0x422f0e
lea esi, [eax + 0x18]
xor ebx, ebx
nop
cmp dword [esi], 8
jb 0x422ef1
mov eax, dword [esi - 0x14]
push eax
call fcn.0043f604
add esp, 4
xor ecx, ecx
mov dword [esi], 7
mov dword [esi - 4], ebx
mov word [esi - 0x14], cx
add esi, 0x1c
lea edx, [esi - 0x18]
cmp edx, ebp
jne 0x422ee0
mov eax, dword [esp + 0x7c]
push eax
call fcn.0043f604
add esp, 4
xor ebp, ebp
mov eax, dword [esp + 0x70]
push eax
mov dword [esp + 0x80], ebp
mov dword [esp + 0x84], ebp
mov dword [esp + 0x88], ebp
call fcn.0043f604
mov eax, dword [esp + 0xb0]
add esp, 4
cmp eax, ebp
je 0x422f92
mov ebp, dword [esp + 0xb0]
cmp eax, ebp
je 0x422f87
lea esi, [eax + 0x18]
xor ebx, ebx
cmp dword [esi], 8
jb 0x422f67
mov ecx, dword [esi - 0x14]
push ecx
call fcn.0043f604
add esp, 4
xor edx, edx
mov dword [esi], 7
mov dword [esi - 4], ebx
mov word [esi - 0x14], dx
add esi, 0x1c
lea eax, [esi - 0x18]
cmp eax, ebp
jne 0x422f56
mov eax, dword [esp + 0xac]
push eax
call fcn.0043f604
add esp, 4
xor ebp, ebp
mov ecx, dword [esp + 0xa0]
push ecx
mov dword [esp + 0xb0], ebp
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb8], ebp
call fcn.0043f604
mov eax, dword [esp + 0x98]
add esp, 4
cmp eax, ebp
je 0x42300e
mov ebp, dword [esp + 0x98]
cmp eax, ebp
je 0x423003
lea esi, [eax + 0x18]
xor ebx, ebx
cmp dword [esi], 8
jb 0x422fe3
mov edx, dword [esi - 0x14]
push edx
call fcn.0043f604
add esp, 4
xor eax, eax
mov dword [esi], 7
mov dword [esi - 4], ebx
mov word [esi - 0x14], ax
add esi, 0x1c
lea ecx, [esi - 0x18]
cmp ecx, ebp
jne 0x422fd2
mov eax, dword [esp + 0x94]
push eax
call fcn.0043f604
add esp, 4
xor ebp, ebp
mov edx, dword [esp + 0x88]
push edx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], ebp
mov dword [esp + 0xa0], ebp
call fcn.0043f604
add esp, 4
mov eax, edi
jmp 0x423362
lea eax, [esi - 1]
test eax, eax
jle 0x42304e
call fcn.0040dd70
xor edx, edx
div esi
mov esi, edx
jmp 0x423050
xor esi, esi
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x24]
sar eax, 2
cmp esi, eax
jb 0x423064
call fcn.0043fb41
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x24]
mov esi, dword [ecx + esi*4]
cmp eax, ebp
je 0x42307c
push eax
call fcn.0043f604
add esp, 4
mov edx, dword [esp + 0x38]
push edx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ebp
call fcn.0043f604
mov eax, dword [esp + 0x28]
add esp, 4
cmp eax, ebp
je 0x4230a6
push eax
call fcn.0043f604
add esp, 4
mov eax, dword [esp + 0x18]
push eax
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
call fcn.0043f604
mov eax, dword [esp + 0x64]
add esp, 4
cmp eax, ebp
je 0x4230d0
push eax
call fcn.0043f604
add esp, 4
mov ecx, dword [esp + 0x54]
push ecx
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ebp
mov dword [esp + 0x6c], ebp
call fcn.0043f604
mov eax, dword [esp + 0x80]
add esp, 4
cmp eax, ebp
je 0x423118
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x80]
push edx
call fcn.00404cd0
mov eax, dword [esp + 0x80]
add esp, 4
push eax
call fcn.0043f604
add esp, 4
mov ecx, dword [esp + 0x70]
push ecx
mov dword [esp + 0x80], ebp
mov dword [esp + 0x84], ebp
mov dword [esp + 0x88], ebp
call fcn.0043f604
mov eax, dword [esp + 0xb0]
add esp, 4
cmp eax, ebp
je 0x423169
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0xb0]
push edx
call fcn.00404cd0
mov eax, dword [esp + 0xb0]
add esp, 4
push eax
call fcn.0043f604
add esp, 4
mov ecx, dword [esp + 0xa0]
push ecx
mov dword [esp + 0xb0], ebp
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb8], ebp
call fcn.0043f604
mov eax, dword [esp + 0x98]
add esp, 4
cmp eax, ebp
je 0x4231bd
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x98]
push edx
call fcn.00404cd0
mov eax, dword [esp + 0x98]
add esp, 4
push eax
call fcn.0043f604
add esp, 4
mov ecx, dword [esp + 0x88]
push ecx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], ebp
mov dword [esp + 0xa0], ebp
call fcn.0043f604
add esp, 4
mov eax, esi
jmp 0x423362
mov eax, dword [esp + 0x44]
cmp eax, ebp
je 0x4231fa
push eax
call fcn.0043f604
add esp, 4
mov edx, dword [esp + 0x38]
push edx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ebp
call fcn.0043f604
mov eax, dword [esp + 0x28]
add esp, 4
cmp eax, ebp
je 0x423224
push eax
call fcn.0043f604
add esp, 4
mov eax, dword [esp + 0x18]
push eax
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
call fcn.0043f604
mov eax, dword [esp + 0x64]
add esp, 4
cmp eax, ebp
je 0x42324e
push eax
call fcn.0043f604
add esp, 4
mov ecx, dword [esp + 0x54]
push ecx
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ebp
mov dword [esp + 0x6c], ebp
call fcn.0043f604
mov eax, dword [esp + 0x80]
add esp, 4
cmp eax, ebp
je 0x423296
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x80]
push edx
call fcn.00404cd0
mov eax, dword [esp + 0x80]
add esp, 4
push eax
call fcn.0043f604
add esp, 4
mov ecx, dword [esp + 0x70]
push ecx
mov dword [esp + 0x80], ebp
mov dword [esp + 0x84], ebp
mov dword [esp + 0x88], ebp
call fcn.0043f604
mov eax, dword [esp + 0xb0]
add esp, 4
cmp eax, ebp
je 0x4232e7
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0xb0]
push edx
call fcn.00404cd0
mov eax, dword [esp + 0xb0]
add esp, 4
push eax
call fcn.0043f604
add esp, 4
mov ecx, dword [esp + 0xa0]
push ecx
mov dword [esp + 0xb0], ebp
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb8], ebp
call fcn.0043f604
mov eax, dword [esp + 0x98]
add esp, 4
cmp eax, ebp
je 0x42333b
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x98]
push edx
call fcn.00404cd0
mov eax, dword [esp + 0x98]
add esp, 4
push eax
call fcn.0043f604
add esp, 4
mov ecx, dword [esp + 0x88]
push ecx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], ebp
mov dword [esp + 0xa0], ebp
call fcn.0043f604
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0xf4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xd8]
xor ecx, esp
call fcn.0043f4b7
add esp, 0xec
ret 4