Function at 0x4221c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xad0
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov edi, 0
mov ebx, 0x8c
mov dword [esp + 0x1e4], eax
lea eax, [esp + 0xa18]
mov dword [esp + 0x1e0], eax
mov eax, dword [esp + 0x1e4]
mov dword [esp + 0xabc], eax
mov dword [esp + 0xab8], ecx
mov dword [esp + 0xab4], edx
mov dword [esp + 0xab0], esi
mov dword [esp + 0xaac], 0
mov dword [esp + 0xaa8], 0
mov dword [esp + 0xa14], 0xd
mov dword [esp + 0xa10], 0
mov dword [esp + 0xa08], 0
mov dword [esp + 0xa04], 0x400
mov dword [esp + 0x9f8], 0xffffffff
mov ecx, dword [esp + 0x1e0]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x8c
mov dword [esp + 0x1dc], ebx
mov dword [esp + 0x1d8], edi
call fcn.00407920
mov ecx, 5
lea edx, [esp + 0x1ef]
mov esi, dword [esp + 0xab0]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], 5
mov dword [esp + 0x1d4], eax
mov dword [esp + 0x1d0], ecx
call fcn.00406ba0
mov ecx, 5
lea edx, [esp + 0xa18]
lea esi, [esp + 0x1ef]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], 5
mov dword [esp + 0x1cc], eax
mov dword [esp + 0x1c8], ecx
call fcn.00423680
mov dword [esp + 0xac0], eax
mov dword [esp + 0x1e8], 0x13b5b4df
mov eax, dword [esp + 0x1e8]
mov ecx, eax
sub ecx, 0x79ca4341
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c0], ecx
jg 0x422dfd
jmp 0x42233e
mov eax, dword [esp + 0x1c4]
sub eax, 0x69242424
mov dword [esp + 0x1bc], eax
jg 0x422de2
jmp 0x42235c
mov eax, dword [esp + 0x1c4]
sub eax, 0x67ec4e71
mov dword [esp + 0x1b8], eax
jg 0x422dc7
jmp 0x42237a
mov eax, dword [esp + 0x1c4]
sub eax, 0x64c196ea
mov dword [esp + 0x1b4], eax
jg 0x422dac
jmp 0x422398
mov eax, dword [esp + 0x1c4]
sub eax, 0x61b14d2d
mov dword [esp + 0x1b0], eax
jg 0x422d91
jmp 0x4223b6
mov eax, dword [esp + 0x1c4]
sub eax, 0x5c2cb586
mov dword [esp + 0x1ac], eax
jg 0x422d76
jmp 0x4223d4
mov eax, dword [esp + 0x1c4]
sub eax, 0x58277ba8
mov dword [esp + 0x1a8], eax
jg 0x422d5b
jmp 0x4223f2
mov eax, dword [esp + 0x1c4]
sub eax, 0x52d9cf8c
mov dword [esp + 0x1a4], eax
jg 0x422d40
jmp 0x422410
mov eax, dword [esp + 0x1c4]
sub eax, 0x8596c810
mov dword [esp + 0x1a0], eax
jg 0x42244c
jmp 0x42242e
mov eax, dword [esp + 0x1c4]
sub eax, 0x84a8beec
mov dword [esp + 0x19c], eax
je 0x422f21
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xa2558d83
mov dword [esp + 0x198], eax
jg 0x422488
jmp 0x42246a
mov eax, dword [esp + 0x1c4]
sub eax, 0x8596c811
mov dword [esp + 0x194], eax
je 0x42302e
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xa357a381
mov dword [esp + 0x190], eax
jg 0x4224c4
jmp 0x4224a6
mov eax, dword [esp + 0x1c4]
sub eax, 0xa2558d84
mov dword [esp + 0x18c], eax
je 0x422fbc
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xa9209489
mov dword [esp + 0x188], eax
jg 0x422500
jmp 0x4224e2
mov eax, dword [esp + 0x1c4]
sub eax, 0xa357a382
mov dword [esp + 0x184], eax
je 0x422ece
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xae8b6fcb
mov dword [esp + 0x180], eax
jg 0x42253c
jmp 0x42251e
mov eax, dword [esp + 0x1c4]
sub eax, 0xa920948a
mov dword [esp + 0x17c], eax
je 0x4233aa
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xb07791ee
mov dword [esp + 0x178], eax
jg 0x422578
jmp 0x42255a
mov eax, dword [esp + 0x1c4]
sub eax, 0xae8b6fcc
mov dword [esp + 0x174], eax
je 0x423514
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xb12cf34f
mov dword [esp + 0x170], eax
jg 0x4225b4
jmp 0x422596
mov eax, dword [esp + 0x1c4]
sub eax, 0xb07791ef
mov dword [esp + 0x16c], eax
je 0x4234f0
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xb52672af
mov dword [esp + 0x168], eax
jg 0x4225f0
jmp 0x4225d2
mov eax, dword [esp + 0x1c4]
sub eax, 0xb12cf350
mov dword [esp + 0x164], eax
je 0x423656
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xb8a93714
mov dword [esp + 0x160], eax
jg 0x42262c
jmp 0x42260e
mov eax, dword [esp + 0x1c4]
sub eax, 0xb52672b0
mov dword [esp + 0x15c], eax
je 0x423068
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xc26cc1f8
mov dword [esp + 0x158], eax
jg 0x422668
jmp 0x42264a
mov eax, dword [esp + 0x1c4]
sub eax, 0xb8a93715
mov dword [esp + 0x154], eax
je 0x4233d9
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xc359fb9b
mov dword [esp + 0x150], eax
jg 0x4226a4
jmp 0x422686
mov eax, dword [esp + 0x1c4]
sub eax, 0xc26cc1f9
mov dword [esp + 0x14c], eax
je 0x423666
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xd7a78b08
mov dword [esp + 0x148], eax
jg 0x4226e0
jmp 0x4226c2
mov eax, dword [esp + 0x1c4]
sub eax, 0xc359fb9c
mov dword [esp + 0x144], eax
je 0x4234ad
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xdd2caabf
mov dword [esp + 0x140], eax
jg 0x42271c
jmp 0x4226fe
mov eax, dword [esp + 0x1c4]
sub eax, 0xd7a78b09
mov dword [esp + 0x13c], eax
je 0x4232f1
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xde10736b
mov dword [esp + 0x138], eax
jg 0x422758
jmp 0x42273a
mov eax, dword [esp + 0x1c4]
sub eax, 0xdd2caac0
mov dword [esp + 0x134], eax
je 0x423638
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xdfc1c81f
mov dword [esp + 0x130], eax
jg 0x422794
jmp 0x422776
mov eax, dword [esp + 0x1c4]
sub eax, 0xde10736c
mov dword [esp + 0x12c], eax
je 0x423572
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xe1c9957e
mov dword [esp + 0x128], eax
jg 0x4227d0
jmp 0x4227b2
mov eax, dword [esp + 0x1c4]
sub eax, 0xdfc1c820
mov dword [esp + 0x124], eax
je 0x42319f
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xe2d491a7
mov dword [esp + 0x120], eax
jg 0x42280c
jmp 0x4227ee
mov eax, dword [esp + 0x1c4]
sub eax, 0xe1c9957f
mov dword [esp + 0x11c], eax
je 0x42358b
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xeeaa38d2
mov dword [esp + 0x118], eax
jg 0x422848
jmp 0x42282a
mov eax, dword [esp + 0x1c4]
sub eax, 0xe2d491a8
mov dword [esp + 0x114], eax
je 0x422f91
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xf1a092b3
mov dword [esp + 0x110], eax
jg 0x422884
jmp 0x422866
mov eax, dword [esp + 0x1c4]
sub eax, 0xeeaa38d3
mov dword [esp + 0x10c], eax
je 0x422f81
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0xf87e1123
mov dword [esp + 0x108], eax
jg 0x4228c0
jmp 0x4228a2
mov eax, dword [esp + 0x1c4]
sub eax, 0xf1a092b4
mov dword [esp + 0x104], eax
je 0x42330f
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x49c3467
mov dword [esp + 0x100], eax
jg 0x4228fc
jmp 0x4228de
mov eax, dword [esp + 0x1c4]
sub eax, 0xf87e1124
mov dword [esp + 0xfc], eax
je 0x422eef
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x10e8f09e
mov dword [esp + 0xf8], eax
jg 0x422938
jmp 0x42291a
mov eax, dword [esp + 0x1c4]
sub eax, 0x49c3468
mov dword [esp + 0xf4], eax
je 0x422ede
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x11eb6227
mov dword [esp + 0xf0], eax
jg 0x422974
jmp 0x422956
mov eax, dword [esp + 0x1c4]
sub eax, 0x10e8f09f
mov dword [esp + 0xec], eax
je 0x422fa1
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x13b5b4de
mov dword [esp + 0xe8], eax
jg 0x4229b0
jmp 0x422992
mov eax, dword [esp + 0x1c4]
sub eax, 0x11eb6228
mov dword [esp + 0xe4], eax
je 0x4234d1
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x15300b79
mov dword [esp + 0xe0], eax
jg 0x4229ec
jmp 0x4229ce
mov eax, dword [esp + 0x1c4]
sub eax, 0x13b5b4df
mov dword [esp + 0xdc], eax
je 0x422e1d
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x1dd3c4ab
mov dword [esp + 0xd8], eax
jg 0x422a28
jmp 0x422a0a
mov eax, dword [esp + 0x1c4]
sub eax, 0x15300b7a
mov dword [esp + 0xd4], eax
je 0x423563
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x242a5511
mov dword [esp + 0xd0], eax
jg 0x422a64
jmp 0x422a46
mov eax, dword [esp + 0x1c4]
sub eax, 0x1dd3c4ac
mov dword [esp + 0xcc], eax
je 0x423492
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x258db0b8
mov dword [esp + 0xc8], eax
jg 0x422aa0
jmp 0x422a82
mov eax, dword [esp + 0x1c4]
sub eax, 0x242a5512
mov dword [esp + 0xc4], eax
je 0x42300a
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x26fe7ae5
mov dword [esp + 0xc0], eax
jg 0x422adc
jmp 0x422abe
mov eax, dword [esp + 0x1c4]
sub eax, 0x258db0b9
mov dword [esp + 0xbc], eax
je 0x42318f
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x28aaaf78
mov dword [esp + 0xb8], eax
jg 0x422b18
jmp 0x422afa
mov eax, dword [esp + 0x1c4]
sub eax, 0x26fe7ae6
mov dword [esp + 0xb4], eax
je 0x4233c8
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x2f57a32b
mov dword [esp + 0xb0], eax
jg 0x422b54
jmp 0x422b36
mov eax, dword [esp + 0x1c4]
sub eax, 0x28aaaf79
mov dword [esp + 0xac], eax
je 0x4230db
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x35a9f279
mov dword [esp + 0xa8], eax
jg 0x422b90
jmp 0x422b72
mov eax, dword [esp + 0x1c4]
sub eax, 0x2f57a32c
mov dword [esp + 0xa4], eax
je 0x42359b
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x4af9634c
mov dword [esp + 0xa0], eax
jg 0x422d25
jmp 0x422bae
mov eax, dword [esp + 0x1c4]
sub eax, 0x4a695a9b
mov dword [esp + 0x9c], eax
jg 0x422d0a
jmp 0x422bcc
mov eax, dword [esp + 0x1c4]
sub eax, 0x418896f7
mov dword [esp + 0x98], eax
jg 0x422cef
jmp 0x422bea
mov eax, dword [esp + 0x1c4]
sub eax, 0x413d57f2
mov dword [esp + 0x94], eax
jg 0x422cd4
jmp 0x422c08
mov eax, dword [esp + 0x1c4]
sub eax, 0x3f0795e7
mov dword [esp + 0x90], eax
jg 0x422cb9
jmp 0x422c26
mov eax, dword [esp + 0x1c4]
sub eax, 0x3dfe36d6
mov dword [esp + 0x8c], eax
jg 0x422c9e
jmp 0x422c44
mov eax, dword [esp + 0x1c4]
sub eax, 0x35a9f27a
mov dword [esp + 0x88], eax
je 0x423544
jmp 0x422c62
mov eax, dword [esp + 0x1c4]
sub eax, 0x35dffad0
mov dword [esp + 0x84], eax
je 0x4233f8
jmp 0x422c80
mov eax, dword [esp + 0x1c4]
sub eax, 0x3cea7286
mov dword [esp + 0x80], eax
je 0x42342c
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x3dfe36d7
mov dword [esp + 0x7c], eax
je 0x423408
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x3f0795e8
mov dword [esp + 0x78], eax
je 0x422e5a
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x413d57f3
mov dword [esp + 0x74], eax
je 0x4230bd
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x418896f8
mov dword [esp + 0x70], eax
je 0x4232bf
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x4a695a9c
mov dword [esp + 0x6c], eax
je 0x42343c
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x4af9634d
mov dword [esp + 0x68], eax
je 0x423533
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x52d9cf8d
mov dword [esp + 0x64], eax
je 0x422e43
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x58277ba9
mov dword [esp + 0x60], eax
je 0x42345e
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x5c2cb587
mov dword [esp + 0x5c], eax
je 0x42344d
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x61b14d2e
mov dword [esp + 0x58], eax
je 0x42346e
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x64c196eb
mov dword [esp + 0x54], eax
je 0x422f44
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x67ec4e72
mov dword [esp + 0x50], eax
je 0x42303f
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x69242425
mov dword [esp + 0x4c], eax
je 0x42308b
jmp 0x422e18
mov eax, dword [esp + 0x1c4]
sub eax, 0x79ca4342
mov dword [esp + 0x48], eax
je 0x4230ec
jmp 0x422e18
jmp 0x423671
mov eax, 0x3f0795e8
mov ecx, 0x52d9cf8d
mov edx, dword [esp + 0xac0]
cmp edx, 0
cmovne eax, ecx
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, dword [sym.imp.ADVAPI32.dll_AccessCheckByType]
mov edi, dword [eax]
mov dword [esp + 0x1e8], 0xc359fb9c
jmp 0x423671
mov eax, 0x736
mov ecx, 0x300
mov edx, dword [esp + 0xa18]
mov esi, dword [esp + 0xa1c]
add edx, 0xec7de75e
add edx, esi
sub edx, 0xec7de75e
mov dword [esp + 0x44], ecx
mov ecx, edx
mov edx, dword [esp + 0x44]
shl edx, cl
sub eax, 0x915c3cb9
add eax, edx
add eax, 0x915c3cb9
shl eax, 1
mov dword [esp], eax
call fcn.0042b694
mov edx, 0xa357a382
mov esi, 0x49c3468
mov dword [esp + 0xa28], eax
cmp dword [esp + 0xa28], 0
cmovne edx, esi
mov dword [esp + 0x1e8], edx
jmp 0x423671
mov dword [esp + 0x1e8], 0xc359fb9c
jmp 0x423671
mov eax, 0xf87e1124
mov dword [esp + 0x1e8], eax
jmp 0x423671
call fcn.0041a240
mov ecx, 0x84a8beec
cmp dword [esp + 0xa24], 0
setne dl
and dl, 1
mov byte [esp + 0xac6], dl
mov dword [esp + 0x1e8], ecx
mov dword [esp + 0x40], eax
jmp 0x423671
mov eax, 0x10e8f09f
mov ecx, 0x64c196eb
mov dl, byte [esp + 0xac6]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, dword [esp + 0xa24]
shl eax, 0
mov dword [esp], eax
call fcn.0042b694
mov ecx, 0xeeaa38d3
mov edx, 0xe2d491a8
mov dword [esp + 0xa2c], eax
cmp dword [esp + 0xa2c], 0
cmovne ecx, edx
mov dword [esp + 0x1e8], ecx
jmp 0x423671
mov dword [esp + 0x1e8], 0xc359fb9c
jmp 0x423671
mov dword [esp + 0x1e8], 0xa2558d84
jmp 0x423671
mov dword [esp + 0xa2c], 0
mov dword [esp + 0x1e8], 0xa2558d84
jmp 0x423671
mov eax, 0
lea ecx, [esp + 0x1f4]
mov dword [esp + 0xaa8], ecx
mov ecx, dword [esp + 0xab4]
sub eax, 0xd
add ecx, eax
mov dword [esp + 0xab4], ecx
mov dword [esp + 0xa9c], 0xfffffffe
mov dword [esp + 0xa70], 0
mov dword [esp + 0x1e8], 0x242a5512
jmp 0x423671
mov eax, 0xdfc1c820
mov ecx, 0x8596c811
cmp dword [esp + 0xa08], 0
cmove eax, ecx
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, 0x67ec4e72
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, 0xb52672b0
cmp dword [esp + 0xab4], 0
setne cl
and cl, 1
mov byte [esp + 0xac7], cl
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, 0xdfc1c820
mov ecx, 0x69242425
mov dl, byte [esp + 0xac7]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, 0x28aaaf79
mov ecx, 0x413d57f3
mov dword [esp + 0xa0c], 0x400
mov edx, dword [esp + 0xa0c]
cmp edx, dword [esp + 0xab4]
cmova eax, ecx
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, dword [esp + 0xab4]
mov dword [esp + 0xa0c], eax
mov dword [esp + 0x1e8], 0x28aaaf79
jmp 0x423671
mov eax, 0x79ca4342
mov dword [esp + 0x1e8], eax
jmp 0x423671
lea eax, [esp + 0x5f4]
mov ecx, dword [esp + 0xa0c]
mov edx, dword [esp + 0xab0]
add edx, dword [esp + 0xa14]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00406ba0
mov ecx, 0x258db0b9
lea edx, [esp + 0x5f4]
mov esi, dword [esp + 0xa0c]
mov edi, dword [esp + 0xa14]
sub edi, 0x4e5cd5fa
add edi, esi
add edi, 0x4e5cd5fa
mov dword [esp + 0xa14], edi
mov esi, dword [esp + 0xa0c]
mov edi, dword [esp + 0xab4]
add edi, 0x7a98849d
sub edi, esi
sub edi, 0x7a98849d
mov dword [esp + 0xab4], edi
mov esi, dword [esp + 0xa0c]
mov dword [esp + 0xa08], esi
mov dword [esp + 0xaac], edx
mov dword [esp + 0x1e8], ecx
mov dword [esp + 0x3c], eax
jmp 0x423671
mov dword [esp + 0x1e8], 0xdfc1c820
jmp 0x423671
lea eax, [esp + 0xa18]
lea ecx, [esp + 0xa00]
lea edx, [esp + 0x9fc]
cmp dword [esp + 0xa08], 0
sete bl
and bl, 1
movzx esi, bl
mov edi, dword [esp + 0xa04]
mov ebx, dword [esp + 0xaa8]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xa08]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xaac]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], esi
call fcn.00423ed0
mov ecx, 0x3dfe36d7
mov edx, 0x418896f8
mov dword [esp + 0x9f4], eax
mov eax, dword [esp + 0xa00]
mov esi, dword [esp + 0xa08]
sub esi, 0xc5bd2780
sub esi, eax
add esi, 0xc5bd2780
mov dword [esp + 0xa08], esi
mov eax, dword [esp + 0xa00]
mov esi, dword [esp + 0xaac]
add esi, eax
mov dword [esp + 0xaac], esi
mov eax, dword [esp + 0x9fc]
mov esi, dword [esp + 0xa04]
sub esi, 0xfea058c8
sub esi, eax
add esi, 0xfea058c8
mov dword [esp + 0xa04], esi
mov eax, dword [esp + 0x9fc]
mov esi, dword [esp + 0xaa8]
add esi, eax
mov dword [esp + 0xaa8], esi
cmp dword [esp + 0xa04], 0
cmove ecx, edx
mov dword [esp + 0x1e8], ecx
jmp 0x423671
mov eax, 0xf1a092b4
mov ecx, 0xd7a78b09
mov dword [esp + 0xa0c], 0x400
mov edx, dword [esp + 0xa0c]
cmp edx, dword [esp + 0xabc]
cmova eax, ecx
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, dword [esp + 0xabc]
mov dword [esp + 0xa0c], eax
mov dword [esp + 0x1e8], 0xf1a092b4
jmp 0x423671
lea eax, [esp + 0x1f4]
mov ecx, dword [esp + 0xa0c]
mov edx, dword [esp + 0xab8]
add edx, dword [esp + 0xa10]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00406ba0
mov ecx, 0x26fe7ae6
mov edx, 0xa920948a
mov esi, 0
mov edi, dword [esp + 0xa0c]
mov ebx, dword [esp + 0xa10]
mov dword [esp + 0x2c], eax
mov eax, esi
sub eax, edi
sub ebx, eax
mov dword [esp + 0xa10], ebx
mov eax, dword [esp + 0xa0c]
mov edi, dword [esp + 0xabc]
sub esi, eax
add edi, esi
mov dword [esp + 0xabc], edi
mov dword [esp + 0xa04], 0x400
mov eax, dword [esp + 0xa04]
cmp eax, dword [esp + 0xabc]
cmova ecx, edx
mov dword [esp + 0x1e8], ecx
jmp 0x423671
mov eax, dword [esp + 0xabc]
mov dword [esp + 0xa04], eax
mov dword [esp + 0x1e8], 0x26fe7ae6
jmp 0x423671
mov eax, 0xb8a93715
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, 0x35dffad0
lea ecx, [esp + 0x1f4]
mov dword [esp + 0xaa8], ecx
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov dword [esp + 0x1e8], 0x3dfe36d7
jmp 0x423671
mov eax, 0x4a695a9c
mov ecx, 0x3cea7286
cmp dword [esp + 0x9f4], 0
cmovne eax, ecx
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov dword [esp + 0x1e8], 0xc359fb9c
jmp 0x423671
mov eax, 0x5c2cb587
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, 0x58277ba9
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov dword [esp + 0x1e8], 0x61b14d2e
jmp 0x423671
mov eax, 0x1dd3c4ac
mov ecx, 0x242a5512
cmp dword [esp + 0xa04], 0
cmovne eax, ecx
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov dword [esp + 0x9f8], 0
mov dword [esp + 0x1e8], 0xc359fb9c
jmp 0x423671
mov eax, 0xb07791ef
mov ecx, 0x11eb6228
cmp dword [esp + 0xa2c], 0
cmovne eax, ecx
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, dword [esp + 0xa2c]
mov dword [esp], eax
call fcn.0042a3c0
mov dword [esp + 0x1e8], 0xb07791ef
jmp 0x423671
mov eax, 0x4af9634d
mov ecx, 0xae8b6fcc
cmp dword [esp + 0xa28], 0
cmovne eax, ecx
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, dword [esp + 0xa28]
mov dword [esp], eax
call fcn.0042a3c0
mov dword [esp + 0x1e8], 0x4af9634d
jmp 0x423671
mov eax, 0x35a9f27a
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, 0x15300b7a
mov ecx, dword [esp + 0x9f8]
mov dword [esp + 0xac8], ecx
mov dword [esp + 0x1e8], eax
jmp 0x423671
mov eax, dword [esp + 0xac8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041a240
mov dword [esp + 0x1e8], 0xf87e1124
mov dword [esp + 0x28], eax
jmp 0x423671
mov dword [esp + 0x1e8], 0x67ec4e72
jmp 0x423671
lea eax, [esp + 0x5f4]
mov ecx, dword [esp + 0xa0c]
mov edx, dword [esp + 0xab0]
add edx, dword [esp + 0xa14]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00406ba0
lea ecx, [esp + 0x5f4]
mov edx, 0
mov esi, dword [esp + 0xa0c]
mov edi, dword [esp + 0xa14]
sub edx, esi
sub edi, edx
mov dword [esp + 0xa14], edi
mov edx, dword [esp + 0xa0c]
mov esi, dword [esp + 0xab4]
sub esi, 0x8cd8b61f
sub esi, edx
add esi, 0x8cd8b61f
mov dword [esp + 0xab4], esi
mov edx, dword [esp + 0xa0c]
mov dword [esp + 0xa08], edx
mov dword [esp + 0xaac], ecx
mov dword [esp + 0x1e8], 0x79ca4342
mov dword [esp + 0x24], eax
jmp 0x423671
lea eax, [esp + 0x1f4]
mov dword [esp + 0xaa8], eax
mov dword [esp + 0x1e8], 0xb8a93715
jmp 0x423671
mov dword [esp + 0x1e8], 0x5c2cb587
jmp 0x423671
mov dword [esp + 0x1e8], 0x35a9f27a
jmp 0x422316