Function at 0x426bc1
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0x50
mov dword [esp + 0x4c], ecx
mov esi, edx
movsx edi, byte [esp + 0x84]
mov ebx, dword [esi + 0x34]
mov ebp, dword [ebx + 0x80]
mov dword [esp + 0x48], ebp
test ebp, ebp
je 0x426d2d
mov ebp, dword [ebx + 0x68]
mov dword [esp + 0x40], ebp
mov ebp, dword [ebx + 0x6c]
mov dword [esp + 0x3c], ebp
mov edx, dword [esp + 0x78]
sub edx, dword [esp + 0x70]
lea ebp, [edx + 1]
mov ecx, dword [esp + 0x7c]
sub ecx, dword [esp + 0x74]
inc ecx
mov dword [esp + 0x44], ecx
test edi, edi
jne 0x427231
movsx edi, al
cmp edi, 0xd
je 0x426c30
cmp edi, 0xf
je 0x426c30
cmp edi, 0x10
je 0x426c30
cmp edi, 0x11
jne 0x426c65
cmp edi, 0xd
je 0x426e42
cmp edi, 0xf
je 0x426de9
cmp edi, 0x10
je 0x426d90
cmp edi, 0x11
je 0x426d37
mov eax, esi
call fcn.00406698
xor eax, eax
add esp, 0x50
pop ebx
pop ebp
pop esi
pop edi
ret
lea edx, [edx*4 + 4]
cmp ebp, 0x2000
jg 0x427204
mov eax, ecx
imul eax, edx
lea eax, [edx + eax + 4]
push eax
call fcn.00458ddc
pop ecx
mov dword [esp + 0x38], eax
test eax, eax
je 0x4271d7
mov eax, dword [esp + 0x38]
test eax, eax
je 0x427a0c
cmp edi, 1
je 0x427182
cmp edi, 2
je 0x427125
cmp edi, 5
je 0x4270d0
cmp edi, 6
je 0x427086
cmp edi, 7
je 0x427031
cmp edi, 0xe
je 0x426fdc
cmp edi, 0x12
je 0x426f87
cmp edi, 0x14
je 0x426f32
cmp edi, 0x1c
je 0x426ee8
cmp edi, 0x1d
je 0x426e93
mov eax, esi
call fcn.00406698
mov edi, dword [ebx + 0x80]
test edi, edi
je 0x426d12
push edi
call fcn.0045903f
pop ecx
mov edi, dword [esp + 0x38]
mov dword [ebx + 0x80], edi
mov dword [ebx + 0x68], ebp
mov ebp, dword [esp + 0x44]
mov dword [ebx + 0x6c], ebp
mov eax, esi
call fcn.00406698
xor eax, eax
add esp, 0x50
pop ebx
pop ebp
pop esi
pop edi
ret
mov ebp, dword [esp + 0x70]
mov dword [esp + 0xc], ebp
mov edi, dword [esp + 0x74]
mov dword [esp + 0x10], edi
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x1c], ebp
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x20], ebp
mov ebp, dword [esp + 0x80]
mov dword [esp + 0x24], ebp
movsx eax, byte [esp + 0x88]
mov byte [esp + 0x28], al
xor eax, eax
mov edx, dword [esp + 0x48]
mov ecx, ebx
call fcn.00427a28
jmp 0x426c54
mov ebp, dword [esp + 0x70]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0x74]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x1c], ebp
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x20], ebp
mov ebp, dword [esp + 0x80]
mov dword [esp + 0x24], ebp
movsx eax, byte [esp + 0x88]
mov byte [esp + 0x28], al
xor eax, eax
mov edx, dword [esp + 0x48]
mov ecx, ebx
call fcn.00427a28
jmp 0x426c4b
mov ebp, dword [esp + 0x70]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0x74]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x1c], ebp
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x20], ebp
mov ebp, dword [esp + 0x80]
mov dword [esp + 0x24], ebp
movsx eax, byte [esp + 0x88]
mov byte [esp + 0x28], al
xor eax, eax
mov edx, dword [esp + 0x48]
mov ecx, ebx
call fcn.00427a28
jmp 0x426c42
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
mov ebp, ecx
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x80]
mov dword [esp + 0x28], ebp
xor eax, eax
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00427c0c
jmp 0x426c39
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x28], edi
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.0042a114
jmp 0x426cfa
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.0042a028
jmp 0x426cf1
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00429b24
jmp 0x426ce8
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00429a3c
jmp 0x426cdf
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00429074
jmp 0x426cd6
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00428d94
jmp 0x426ccd
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00428cb4
jmp 0x426cc4
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.0042881c
jmp 0x426cbb
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x28], eax
movsx eax, byte [ebx + 0x76]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00427ee8
jmp 0x426cb2
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00427d00
jmp 0x426ca9
mov eax, dword [esp + 0x44]
push eax
push ebp
push 0
push 0x7dda78
push 0x7d98a0
call fcn.00432de0
push 0
push 1
push 0x1965e
call fcn.004567a0
add esp, 0x20
jmp 0x426c94
mov eax, ecx
push eax
push ebp
push 0x7dda50
push 0x7d98a0
call fcn.0040af10
push 1
push 0x186aa
call fcn.004567fc
add esp, 0x18
xor eax, eax
mov dword [esp + 0x38], eax
jmp 0x426c94
mov edi, dword [esp + 0x4c]
mov edi, dword [edi + 0x34]
mov dword [esp + 0x38], edi
movsx edi, al
mov dword [esp + 0x34], edi
cmp edi, 0xd
je 0x427257
cmp edi, 0xf
je 0x427257
cmp edi, 0x10
je 0x427257
cmp edi, 0x11
jne 0x427263
mov ebp, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x44], edi
lea edi, [ebp + ebp]
add edi, edi
cmp ebp, 0x2000
jg 0x4279dd
mov eax, edi
imul eax, dword [esp + 0x44]
lea edi, [edi + eax + 4]
push edi
call fcn.00458ddc
pop ecx
mov dword [esp + 0x30], eax
mov edi, eax
test edi, edi
je 0x4279b0
mov edi, dword [esp + 0x30]
test edi, edi
je 0x427a0c
mov edi, dword [esp + 0x34]
cmp edi, 1
je 0x42795b
mov edi, dword [esp + 0x34]
cmp edi, 2
je 0x4278fe
mov edi, dword [esp + 0x34]
cmp edi, 3
je 0x4278b4
mov edi, dword [esp + 0x34]
cmp edi, 4
je 0x42786a
mov edi, dword [esp + 0x34]
cmp edi, 5
je 0x427815
mov edi, dword [esp + 0x34]
cmp edi, 6
je 0x4277cb
mov edi, dword [esp + 0x34]
cmp edi, 7
je 0x427776
mov edi, dword [esp + 0x34]
cmp edi, 0xd
je 0x427721
mov edi, dword [esp + 0x34]
cmp edi, 0xe
je 0x4276cc
mov edi, dword [esp + 0x34]
cmp edi, 0xf
je 0x427671
mov edi, dword [esp + 0x34]
cmp edi, 0x10
je 0x427616
mov edi, dword [esp + 0x34]
cmp edi, 0x11
je 0x4275bb
mov edi, dword [esp + 0x34]
cmp edi, 0x12
je 0x427566
mov edi, dword [esp + 0x34]
cmp edi, 0x14
je 0x427511
mov edi, dword [esp + 0x34]
cmp edi, 0x1c
je 0x4274c7
mov edi, dword [esp + 0x34]
cmp edi, 0x1d
je 0x427472
mov edi, dword [esp + 0x38]
mov edi, dword [edi + 0x80]
test edi, edi
je 0x427386
push edi
call fcn.0045903f
pop ecx
mov edi, dword [esp + 0x30]
mov eax, dword [esp + 0x38]
mov dword [eax + 0x80], edi
mov dword [eax + 0x68], ebp
mov ebp, dword [esp + 0x44]
mov dword [eax + 0x6c], ebp
mov eax, dword [esp + 0x4c]
call fcn.00406698
mov ebp, dword [esp + 0x34]
cmp ebp, 3
je 0x4273c0
movzx eax, byte [ebx + 0x76]
mov edx, dword [esp + 0x38]
mov byte [edx + 0x76], al
jmp 0x426d2d
test esi, esi
je 0x42746b
mov ecx, dword [esi + 0x34]
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x427460
mov edx, dword [eax + 0x34]
mov dword [esp + 0x30], edx
mov ebp, dword [esp + 0x30]
mov dword [ebp + 0x8c], 0
movzx eax, byte [ecx + 0x79]
mov byte [ebp + 0x79], al
movzx edx, word [ecx + 0x70]
mov word [ebp + 0x70], dx
mov eax, dword [ecx + 0x58]
mov edx, dword [ecx + 0x5c]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], edx
mov eax, dword [ecx + 0x60]
mov edx, dword [ecx + 0x64]
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x64], edx
movzx eax, word [ecx + 0x72]
mov word [ebp + 0x72], ax
movzx eax, word [ecx + 0x74]
mov word [ebp + 0x74], ax
movzx eax, byte [ecx + 0x77]
mov byte [ebp + 0x77], al
movzx eax, byte [ecx + 0x76]
mov byte [ebp + 0x76], al
mov esi, dword [ebp + 0x4c]
mov edi, dword [ecx + 0x4c]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x427437
mov eax, dword [esp + 0x30]
mov esi, dword [eax + 0x1e8]
mov edi, dword [ecx + 0x1e8]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x427451
jmp 0x4273b0
xor eax, eax
mov dword [esp + 0x30], eax
jmp 0x4273de
xor ecx, ecx
jmp 0x4273cb
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x28], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.0042a114
jmp 0x427371
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.0042a028
jmp 0x427364
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x28], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00429b24
jmp 0x427357
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x28], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00429a3c
jmp 0x42734a
mov edi, dword [esp + 0x70]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x74]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x20], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x24], edi
movsx eax, byte [esp + 0x88]
mov byte [esp + 0x28], al
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, ebx
call fcn.00427a28
jmp 0x42733d
mov edi, dword [esp + 0x70]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x74]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x20], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x24], edi
movsx eax, byte [esp + 0x88]
mov byte [esp + 0x28], al
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, ebx
call fcn.00427a28
jmp 0x427330
mov edi, dword [esp + 0x70]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x74]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x20], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x24], edi
movsx eax, byte [esp + 0x88]
mov byte [esp + 0x28], al
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, ebx
call fcn.00427a28
jmp 0x427323
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x28], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00429074
jmp 0x427316
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x28], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00427c0c
jmp 0x427309
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x28], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00428d94
jmp 0x4272fc
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00428cb4
jmp 0x4272ef
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x28], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.0042881c
jmp 0x4272e2
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00430544
jmp 0x4272d5
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00430544
jmp 0x4272c8
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x28], edi
movsx edi, byte [ebx + 0x76]
mov dword [esp + 0x2c], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00427ee8
jmp 0x4272bb
mov edi, dword [esp + 0x74]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x44]
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x28], edi
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x70]
call fcn.00427d00
jmp 0x4272ae
mov edi, dword [esp + 0x44]
push edi
push ebp
push 0
push 0x7dda78
push 0x7d98a0
call fcn.00432de0
push 0
push 1
push 0x1965e
call fcn.004567a0
add esp, 0x20
jmp 0x427295
mov edi, dword [esp + 0x44]
push edi
push ebp
push 0x7dda50
push 0x7d98a0
call fcn.0040af10
push 1
push 0x186aa
call fcn.004567fc
add esp, 0x18
xor edi, edi
mov dword [esp + 0x30], edi
jmp 0x427295
mov eax, 0xffffffff
add esp, 0x50
pop ebx
pop ebp
pop esi
pop edi
ret