Function at 0x421810
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47713e
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x4a100c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
mov eax, dword [ebp + 8]
mov dword [esi + 8], 0x64656333
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov word [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [ebp - 4], 0
mov dword [esi], vtable.AP4_Dec3Atom.0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], vtable.AP4_Array_struct_AP4_Dec3Atom::SubStream_.0
mov dword [esi + 0x38], 0
mov dword [esi + 0x3c], 0
mov dword [esi + 0x40], 0
lea ecx, [esi + 0x44]
mov dword [ecx], vtable.AP4_DataBuffer.0
mov byte [ecx + 4], 1
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov edi, dword [ebp + 0xc]
lea ebx, [eax - 8]
xor eax, eax
mov byte [ebp - 4], 2
test ebx, ebx
je 0x4218e7
push ebx
call fcn.00421500
test eax, eax
jne 0x4218f5
mov eax, dword [esi + 0x4c]
push ebx
push edi
push eax
call fcn.00474f39
add esp, 0xc
mov dword [esi + 0x54], ebx
cmp ebx, 2
jb 0x421aa2
movzx ecx, byte [edi + 1]
sub ebx, 2
movzx eax, byte [edi]
shr ecx, 3
shl eax, 5
or ecx, eax
mov dword [esi + 0x28], ecx
movzx ecx, byte [edi + 1]
add edi, 2
and ecx, 7
mov dword [ebp + 0xc], edi
inc ecx
mov dword [ebp + 8], ecx
cmp ecx, dword [esi + 0x3c]
je 0x421995
jb 0x421992
push ecx
lea ecx, [esi + 0x34]
call fcn.00421c00
mov ecx, dword [ebp + 8]
test eax, eax
jne 0x421995
mov eax, dword [esi + 0x3c]
cmp eax, ecx
jae 0x421992
lea edx, [eax*8]
mov edi, ecx
sub edx, eax
shl edx, 2
sub edi, eax
mov eax, dword [esi + 0x40]
add eax, edx
add edx, 0x1c
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
sub edi, 1
jne 0x421952
mov edi, dword [ebp + 0xc]
mov dword [esi + 0x3c], ecx
test ecx, ecx
je 0x421a8d
xor eax, eax
nop
mov ecx, dword [esi + 0x40]
cmp ebx, 3
jae 0x4219f6
mov dword [eax + ecx], 0
mov ecx, dword [esi + 0x40]
mov dword [eax + ecx + 4], 0
mov ecx, dword [esi + 0x40]
mov dword [eax + ecx + 8], 0
mov ecx, dword [esi + 0x40]
mov dword [eax + ecx + 0xc], 0
mov ecx, dword [esi + 0x40]
mov dword [eax + ecx + 0x10], 0
mov ecx, dword [esi + 0x40]
mov dword [eax + ecx + 0x14], 0
mov ecx, dword [esi + 0x40]
mov dword [eax + ecx + 0x18], 0
jmp 0x421a80
movzx edx, byte [edi]
shr edx, 6
mov dword [eax + ecx], edx
movzx edx, byte [edi]
mov ecx, dword [esi + 0x40]
shr edx, 1
and edx, 0x1f
mov dword [eax + ecx + 4], edx
movzx edx, byte [edi + 1]
movzx ecx, byte [edi]
shr edx, 4
shl ecx, 4
or edx, ecx
mov ecx, dword [esi + 0x40]
and edx, 0x1f
mov dword [eax + ecx + 8], edx
movzx edx, byte [edi + 1]
mov ecx, dword [esi + 0x40]
shr edx, 1
and edx, 7
mov dword [eax + ecx + 0xc], edx
mov ecx, dword [esi + 0x40]
movzx edx, byte [edi + 1]
and edx, 1
mov dword [eax + ecx + 0x10], edx
movzx edx, byte [edi + 2]
mov ecx, dword [esi + 0x40]
shr edx, 1
and edx, 0xf
mov dword [eax + ecx + 0x14], edx
mov edx, dword [esi + 0x40]
cmp dword [edx + eax + 0x14], 0
je 0x421a72
movzx ecx, byte [edi + 3]
add edi, 4
and ecx, 0x1f
sub ebx, 4
mov dword [edx + eax + 0x18], ecx
jmp 0x421a80
add edi, 3
mov dword [edx + eax + 0x18], 0
sub ebx, 3
add eax, 0x1c
sub dword [ebp + 8], 1
jne 0x4219a0
cmp ebx, 2
jb 0x421aa2
movzx eax, byte [edi]
and eax, 1
mov dword [esi + 0x2c], eax
movzx eax, byte [edi + 1]
mov dword [esi + 0x30], eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8