Function at 0x428730
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x238
xor cl, cl
mov dword [esp + 0x18], 0
xor ch, ch
mov byte [esp + 2], cl
push ebx
mov ebx, dword [esp + 0x248]
xor eax, eax
mov byte [esp + 5], ch
xor dl, dl
mov byte [esp + 7], cl
mov ecx, dword [esp + 0x250]
push ebp
mov ebp, dword [esp + 0x244]
mov dword [esp + 0xfc], eax
lea eax, [ebx + ecx]
mov byte [esp + 8], dl
push esi
mov esi, eax
mov dword [esp + 0xf4], eax
push edi
xor edx, edx
mov dword [esp + 0x34], 0
xor edi, edi
mov dword [esp + 0x10c], 0
mov dword [esp + 0xfc], edi
lea eax, [esi - 1]
mov edi, dword [esp + 0x258]
mov dword [esp + 0x108], eax
lea eax, [esp + 0x114]
mov dword [esp + 0x30], edx
mov dword [esp + 0x114], edx
mov dword [esp + 0x118], edx
mov dword [esp + 0xf0], eax
test ebp, ebp
jne 0x428800
mov edx, dword [esp + 0x250]
test edx, edx
jne 0x428800
test ebx, ebx
jne 0x428800
cmp edi, 0xfffffc19
jne 0x428800
cmp ecx, edi
jne 0x428800
pop edi
pop esi
pop ebp
mov eax, 0xfffffecc
pop ebx
add esp, 0x238
ret
mov edx, dword [esp + 0x260]
test edx, 0xe20f5a6f
je 0x42881f
pop edi
pop esi
pop ebp
mov eax, 0xfffffffd
pop ebx
add esp, 0x238
ret
test ebp, ebp
je 0x429606
test ebx, ebx
je 0x429606
mov ebx, dword [esp + 0x264]
mov eax, dword [esp + 0x268]
test ebx, ebx
jne 0x428849
test eax, eax
jg 0x429606
test eax, eax
jns 0x42885d
pop edi
pop esi
pop ebp
mov eax, 0xfffffff1
pop ebx
add esp, 0x238
ret
test edi, edi
jns 0x428871
pop edi
pop esi
pop ebp
mov eax, 0xffffffe0
pop ebx
add esp, 0x238
ret
test ecx, ecx
js 0x4295f6
cmp ecx, edi
jg 0x4295f6
mov eax, dword [ebp]
cmp eax, 0x50435245
je 0x4288a5
sub eax, 0x45524350
neg eax
pop edi
sbb eax, eax
pop esi
and eax, 0x19
pop ebp
add eax, 0xffffffe3
pop ebx
add esp, 0x238
ret
test byte [ebp + 0xc], 1
jne 0x4288bb
pop edi
pop esi
pop ebp
mov eax, 0xffffffe4
pop ebx
add esp, 0x238
ret
mov ecx, dword [ebp + 8]
shr ecx, 0xb
and ecx, 1
mov dword [esp + 0x20], ecx
mov dword [esp + 0x84], ecx
test edx, 0x8000000
je 0x4288de
mov eax, 2
jmp 0x4288e6
mov eax, edx
shr eax, 0xf
and eax, 1
mov dword [esp + 0xc0], eax
test ecx, ecx
je 0x42897a
test edx, 0x2000
jne 0x42897a
lea eax, [esp + 0x24]
push eax
push edi
push dword [esp + 0x25c]
call fcn.0042a020
add esp, 0xc
test eax, eax
je 0x428951
cmp dword [esp + 0x268], 2
jl 0x428929
mov ecx, dword [esp + 0x24]
mov dword [ebx], ecx
mov dword [ebx + 4], eax
cmp eax, 5
jg 0x428941
cmp dword [esp + 0xc0], 1
mov eax, 0xffffffe7
jg 0x42960b
pop edi
pop esi
pop ebp
mov eax, 0xfffffff6
pop ebx
add esp, 0x238
ret
mov eax, dword [esp + 0x25c]
test eax, eax
jle 0x42897a
cmp eax, edi
jge 0x42897a
mov eax, esi
mov al, byte [eax]
and al, 0xc0
cmp al, 0x80
jne 0x42897a
pop edi
pop esi
pop ebp
mov eax, 0xfffffff5
pop ebx
add esp, 0x238
ret
movzx eax, word [ebp + 0x22]
mov edx, 0x989680
mov dword [esp + 0x24], eax
mov ebx, edx
add eax, ebp
mov dword [esp + 0x2c], 0
mov dword [esp + 0x68], eax
movzx eax, word [ebp + 0x26]
mov dword [esp + 0x58], eax
movzx eax, word [ebp + 0x24]
mov ebp, dword [ebp + 0x30]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x250]
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], ebx
mov dword [esp + 0xe0], 0
test eax, eax
je 0x428a13
mov ecx, dword [eax]
test cl, 1
je 0x4289dd
mov edi, dword [eax + 4]
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 0x258]
test cl, 2
je 0x4289e9
mov edx, dword [eax + 8]
mov dword [esp + 0x3c], edx
test cl, 0x10
je 0x4289f5
mov ebx, dword [eax + 0x14]
mov dword [esp + 0x40], ebx
test cl, 4
je 0x428a0b
mov eax, dword [eax + 0xc]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x250]
test cl, 8
je 0x428a13
mov ebp, dword [eax + 0x10]
mov eax, dword [esp + 0x24c]
mov ecx, dword [eax + 0xc]
test ecx, 0x2000
je 0x428a37
mov eax, dword [eax + 0x10]
cmp eax, edx
jae 0x428a30
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x24c]
test ecx, 0x4000
je 0x428a4a
mov eax, dword [eax + 0x14]
cmp eax, ebx
jae 0x428a4a
mov dword [esp + 0x40], eax
test ebp, ebp
jne 0x428a53
mov ebp, 0x4f2b20
mov ebx, dword [esp + 0x24c]
mov dword [esp + 0x64], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xe8], 0
mov ecx, dword [ebx + 8]
mov eax, ecx
or eax, dword [esp + 0x260]
shr eax, 4
and eax, 1
mov edx, dword [ebx + 0xc]
mov dword [esp + 0x110], eax
mov eax, edx
shr eax, 8
and eax, 1
mov dword [esp + 0xe4], 0
mov dword [esp + 0x100], eax
mov eax, ecx
shr eax, 0x12
and eax, 1
mov dword [esp + 0xdc], 0
mov dword [esp + 0xf4], eax
movzx eax, word [ebx + 0x24]
imul eax, dword [esp + 0x58]
mov dword [esp + 0x70], ebp
add eax, dword [esp + 0x24]
add eax, ebx
mov ebx, dword [esp + 0x254]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x25c]
mov dword [esp + 0xcc], eax
lea eax, [ebx + edi]
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], eax
mov dword [esp + 0x14], eax
mov eax, ecx
shr eax, 5
and eax, 1
mov ebx, dword [esp + 0x260]
mov dword [esp + 0x90], eax
mov eax, ecx
shr eax, 0x1d
and eax, 1
mov dword [esp + 0x8c], eax
mov eax, ecx
shr eax, 0x19
and eax, 1
mov dword [esp + 0x88], eax
mov eax, ebx
shr eax, 7
and eax, 1
mov dword [esp + 0x7c], eax
mov eax, ebx
shr eax, 8
and eax, 1
mov dword [esp + 0x80], eax
mov eax, ebx
shr eax, 0xa
and eax, 1
mov dword [esp + 0x94], eax
mov eax, ebx
shr eax, 0x1c
and eax, 1
mov dword [esp + 0x98], eax
mov eax, edx
shr eax, 0xc
and eax, 1
mov dword [esp + 0xa4], eax
lea eax, [ebp + 0x100]
mov dword [esp + 0x74], eax
lea eax, [ebp + 0x340]
mov dword [esp + 0x78], eax
mov eax, ebx
and eax, 0x1800000
je 0x428bd0
cmp eax, 0x800000
je 0x428bc3
cmp eax, 0x1000000
je 0x428be9
pop edi
pop esi
pop ebp
mov eax, 0xffffffe9
pop ebx
add esp, 0x238
ret
mov dword [esp + 0xa0], 1
jmp 0x428bf4
test ecx, 0x1800000
je 0x428be9
mov eax, ecx
shr eax, 0x17
and eax, 1
mov dword [esp + 0xa0], eax
jmp 0x428bf4
mov dword [esp + 0xa0], 0
test ebx, 0x700000
je 0x428bfe
mov ecx, ebx
and ecx, 0x700000
cmp ecx, 0x300000
ja 0x428c62
je 0x428c4e
test ecx, ecx
je 0x428c22
cmp ecx, 0x100000
je 0x428c38
cmp ecx, 0x200000
jne 0x428bb3
mov eax, 0xa
mov ebx, 1
xor ebp, ebp
mov dword [esp + 0x54], ebx
mov byte [esp + 0x6c], al
jmp 0x428c86
mov eax, 0xd
mov ebx, 1
xor ebp, ebp
mov dword [esp + 0x54], ebx
mov byte [esp + 0x6c], al
jmp 0x428c86
mov ebx, 2
mov word [esp + 0x6c], 0xa0d
xor ebp, ebp
mov dword [esp + 0x54], ebx
jmp 0x428c86
cmp ecx, 0x400000
je 0x428c7d
cmp ecx, 0x500000
jne 0x428bb3
mov ebp, 2
jmp 0x428c82
mov ebp, 1
mov ebx, dword [esp + 0x54]
cmp dword [esp + 0xc0], 0
mov dword [esp + 0x50], ebp
je 0x428cac
test edx, 0x200
je 0x428cac
pop edi
pop esi
pop ebp
mov eax, 0xfffffff3
pop ebx
add esp, 0x238
ret
mov eax, 0x55555556
imul dword [esp + 0x268]
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edi, [eax + eax*2]
mov eax, 0x55555556
lea ecx, [edi + edi]
mov dword [esp + 0x18], edi
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24c]
movzx eax, word [eax + 0x20]
test ax, ax
je 0x428d40
mov ecx, eax
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x428d40
lea eax, [ecx + 1]
lea eax, [eax + eax*2]
mov dword [esp + 0x18], eax
shl eax, 2
push eax
call dword [0x52437c]
mov edi, eax
add esp, 4
mov dword [esp + 0x44], edi
test edi, edi
jne 0x428d2e
lea eax, [edi - 6]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov dword [esp + 0x28], 1
jmp 0x428d4b
mov edi, dword [esp + 0x264]
mov dword [esp + 0x44], edi
mov eax, dword [esp + 0x18]
mov dword [esp + 0x48], eax
mov dword [esp + 0xc8], 0
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x4c], eax
test edi, edi
je 0x428dea
mov eax, dword [esp + 0x18]
lea ecx, [edi + eax*4]
mov eax, dword [esp + 0x24c]
mov edx, ecx
movzx eax, word [eax + 0x1e]
shl eax, 2
sub edx, eax
lea eax, [edi + 8]
cmp edx, eax
jae 0x428d99
mov edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x428db9
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x428da0
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov edi, dword [esp + 0x44]
mov eax, dword [esp + 0x268]
test eax, eax
jle 0x428dd6
mov dword [edi], 0xffffffff
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov edi, dword [esp + 0x44]
cmp eax, 1
jle 0x428dea
mov dword [edi + 4], 0xffffffff
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
cmp dword [esp + 0x110], 0
mov edx, dword [esp + 0x24c]
jne 0x428e4d
mov eax, dword [edx + 0xc]
test al, 0x10
je 0x428e2b
mov ch, byte [edx + 0x18]
mov dword [esp + 0x34], 1
mov cl, ch
mov byte [esp + 0x11], ch
mov byte [esp + 0x12], cl
test al, 0x20
je 0x428e4d
mov eax, dword [esp + 0x74]
movzx ecx, ch
mov ch, byte [ecx + eax]
mov byte [esp + 0x11], ch
jmp 0x428e4d
cmp dword [esp + 0x100], 0
jne 0x428e4d
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x428e4d
test byte [eax + 4], 1
je 0x428e4d
add eax, 8
mov dword [esp + 0x104], eax
mov eax, dword [edx + 0xc]
test al, 0x40
je 0x428e80
mov dl, byte [edx + 0x1a]
mov dword [esp + 0x10c], 1
mov cl, dl
mov byte [esp + 0x10], dl
mov byte [esp + 0x13], cl
test al, al
jns 0x428e80
mov eax, dword [esp + 0x74]
movzx ecx, dl
mov dl, byte [ecx + eax]
mov byte [esp + 0x10], dl
mov edi, edi
cmp dword [esp + 0xf4], 0
mov edx, dword [esp + 0x14]
mov dword [esp + 0x1c], edx
je 0x428f84
mov eax, dword [esp + 0x20]
mov edi, esi
test eax, eax
je 0x428f27
mov ecx, dword [esp + 0xb0]
cmp esi, ecx
jae 0x428f7e
test ebp, ebp
je 0x428ee5
push eax
lea eax, [esp + 0x58]
push eax
push ecx
push ebp
push edi
call fcn.00429d30
mov ebx, dword [esp + 0x68]
add esp, 0x14
mov ebp, dword [esp + 0x50]
test eax, eax
jne 0x428f7e
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x14]
jmp 0x428f07
mov eax, ecx
sub eax, ebx
cmp edi, eax
ja 0x428f07
mov al, byte [edi]
cmp al, byte [esp + 0x6c]
jne 0x428f07
cmp ebx, 1
je 0x428f7e
mov al, byte [edi + 1]
cmp al, byte [esp + 0x6d]
je 0x428f7e
inc edi
cmp edi, edx
jae 0x428f1d
lea esp, [esp]
mov al, byte [edi]
and al, 0xc0
cmp al, 0x80
jne 0x428f1d
inc edi
cmp edi, edx
jb 0x428f10
cmp edi, ecx
jae 0x428f7e
mov eax, dword [esp + 0x20]
jmp 0x428eb3
mov eax, dword [esp + 0xb0]
cmp esi, eax
jae 0x428f7e
test ebp, ebp
je 0x428f56
push 0
lea ecx, [esp + 0x58]
push ecx
push eax
push ebp
push edi
call fcn.00429d30
mov ebx, dword [esp + 0x68]
add esp, 0x14
mov ebp, dword [esp + 0x50]
test eax, eax
jne 0x428f7e
jmp 0x428f72
sub eax, ebx
cmp edi, eax
ja 0x428f72
mov al, byte [edi]
cmp al, byte [esp + 0x6c]
jne 0x428f72
cmp ebx, 1
je 0x428f7e
mov al, byte [edi + 1]
cmp al, byte [esp + 0x6d]
je 0x428f7e
mov eax, dword [esp + 0xb0]
inc edi
cmp edi, eax
jb 0x428f32
mov edx, edi
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x24c]
mov eax, dword [eax + 8]
or eax, dword [esp + 0x260]
test eax, 0x4000000
jne 0x42915c
cmp dword [esp + 0x34], 0
je 0x428ff6
mov cl, byte [esp + 0x12]
mov bl, byte [esp + 0x11]
cmp cl, bl
je 0x428fdc
cmp esi, edx
jae 0x42915c
jmp 0x428fc0
mov al, byte [esi]
cmp al, cl
je 0x42915c
cmp al, bl
je 0x42915c
inc esi
cmp esi, edx
jb 0x428fc0
jmp 0x42915c
cmp esi, edx
jae 0x42915c
cmp byte [esi], cl
je 0x42915c
inc esi
cmp esi, edx
jb 0x428fe4
jmp 0x42915c
cmp dword [esp + 0x100], 0
je 0x429126
mov eax, dword [esp + 0x25c]
mov ecx, dword [esp + 0xac]
add eax, ecx
cmp esi, eax
jbe 0x42915c
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4290ad
cmp esi, edx
jae 0x42910a
test ebp, ebp
je 0x42905f
cmp esi, ecx
jbe 0x42908f
push eax
lea eax, [esp + 0x58]
push eax
push ecx
push ebp
push esi
call fcn.00429e80
mov ebp, dword [esp + 0x64]
add esp, 0x14
mov edx, dword [esp + 0x14]
test eax, eax
jne 0x42910a
mov ebx, dword [esp + 0x54]
jmp 0x429088
lea eax, [ecx + ebx]
cmp esi, eax
jb 0x42908f
mov ecx, esi
sub ecx, ebx
mov al, byte [ecx]
cmp al, byte [esp + 0x6c]
jne 0x429088
cmp ebx, 1
je 0x42910a
mov al, byte [ecx + 1]
cmp al, byte [esp + 0x6d]
je 0x42910a
mov ecx, dword [esp + 0xac]
inc esi
cmp esi, edx
jae 0x42910a
mov al, byte [esi]
and al, 0xc0
cmp al, 0x80
jne 0x4290a7
inc esi
cmp esi, edx
jb 0x429098
jmp 0x42910a
mov eax, dword [esp + 0x20]
jmp 0x429030
cmp esi, edx
jae 0x42910a
test ebp, ebp
je 0x4290dd
cmp esi, ecx
jbe 0x429105
push 0
lea eax, [esp + 0x58]
push eax
push ecx
push ebp
push esi
call fcn.00429e80
mov ebp, dword [esp + 0x64]
add esp, 0x14
mov edx, dword [esp + 0x14]
test eax, eax
jne 0x42910a
mov ebx, dword [esp + 0x54]
jmp 0x4290fe
lea eax, [ecx + ebx]
cmp esi, eax
jb 0x429105
mov ecx, esi
sub ecx, ebx
mov al, byte [ecx]
cmp al, byte [esp + 0x6c]
jne 0x4290fe
cmp ebx, 1
je 0x42910a
mov al, byte [ecx + 1]
cmp al, byte [esp + 0x6d]
je 0x42910a
mov ecx, dword [esp + 0xac]
inc esi
cmp esi, edx
jb 0x4290b1
cmp byte [esi - 1], 0xd
jne 0x42915c
cmp ebp, 1
je 0x42911a
cmp ebp, 2
jne 0x42915c
cmp esi, edx
jae 0x42915c
cmp byte [esi], 0xa
jne 0x42915c
inc esi
jmp 0x42915c
mov ebx, dword [esp + 0x104]
test ebx, ebx
je 0x42915c
cmp esi, edx
jae 0x42915c
mov edi, dword [esp + 0x14]
lea esp, [esp]
movzx edx, byte [esi]
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebx], al
jne 0x42915c
inc esi
cmp esi, edi
jb 0x429140
mov eax, dword [esp + 0x24c]
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x14], ebp
mov eax, dword [eax + 8]
or eax, dword [esp + 0x260]
test eax, 0x4000000
jne 0x42921e
cmp dword [esp + 0xc0], 0
jne 0x42921e
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x4291a5
test byte [ecx + 4], 2
je 0x4291a5
mov eax, ebp
sub eax, esi
cmp eax, dword [ecx + 0x28]
jb case.0x4292ac.996
cmp dword [esp + 0x10c], 0
je 0x42921e
mov eax, ebp
sub eax, esi
cmp eax, 0x3e8
jge 0x42921e
xor ecx, ecx
cmp dword [esp + 0x34], ecx
setne cl
add ecx, esi
cmp ecx, dword [esp + 0x108]
jbe 0x42921e
mov dl, byte [esp + 0x13]
mov al, byte [esp + 0x10]
cmp dl, al
je 0x4291fa
cmp ecx, ebp
jae case.0x4292ac.996
movzx edi, dl
movzx edx, byte [ecx]
inc ecx
cmp edx, edi
je 0x429212
movzx eax, al
cmp edx, eax
je 0x429212
cmp ecx, ebp
jae case.0x4292ac.996
mov al, byte [esp + 0x10]
jmp 0x4291e1
cmp ecx, ebp
jae case.0x4292ac.996
mov edi, edi
mov al, byte [ecx]
inc ecx
cmp al, dl
je 0x429212
cmp ecx, ebp
jb 0x429200
xor ebx, ebx
jmp 0x4293d2
dec ecx
cmp ecx, ebp
jae case.0x4292ac.996
mov dword [esp + 0x108], ecx
push 0
push 0
lea eax, [esp + 0x40]
mov dword [esp + 0xbc], esi
push eax
push 2
push esi
push dword [esp + 0xbc]
mov dword [esp + 0xd4], esi
push esi
mov dword [esp + 0x54], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0x7c], 0
call fcn.00419ec0
add esp, 0x1c
mov ebx, eax
cmp dword [esp + 0x9c], 0
je 0x429293
cmp dword [esp + 0x30], 0
jne 0x429293
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x30], eax
mov dword [esp + 0xfc], esi
test ebx, ebx
jg case.default.0x4292ac
je case.0x4292ac.995
lea eax, [ebx + 0x3e4]
cmp eax, 4
ja case.default.0x4292ac
jmp dword [eax*4 + 0x429618]
mov eax, dword [esp + 0x60]
mov edi, esi
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x64], eax
jmp 0x4292fd
mov edi, dword [esp + 0xb4]
cmp edi, esi
jbe case.0x4292ac.995
mov ecx, dword [esp + 0x20]
jmp 0x4292fd
mov ecx, dword [esp + 0x20]
lea edi, [esi + 1]
mov dword [esp + 0x64], 0
test ecx, ecx
je 0x4292fd
cmp edi, ebp
jae 0x4292fd
jmp 0x4292f0
mov al, byte [edi]
and al, 0xc0
cmp al, 0x80
jne 0x4292fd
inc edi
cmp edi, ebp
jb 0x4292f0
mov ebp, dword [esp + 0x50]
xor ebx, ebx
mov dword [esp + 0x18], ebx
cmp dword [esp + 0xf4], ebx
je 0x429340
mov eax, dword [esp + 0xb0]
test ebp, ebp
je 0x4293a6
cmp esi, eax
jae 0x429340
push ecx
lea ecx, [esp + 0x58]
push ecx
push eax
push ebp
push esi
call fcn.00429d30
add esp, 0x14
test eax, eax
jne 0x4293ce
mov ebp, dword [esp + 0x50]
mov ebx, dword [esp + 0x54]
cmp dword [esp + 0x110], 0
mov esi, edi
jne 0x4293ca
mov eax, dword [esp + 0x1c]
cmp edi, eax
ja 0x4293ca
cmp edi, dword [esp + 0xf8]
jbe 0x429396
cmp byte [edi - 1], 0xd
jne 0x429396
cmp edi, eax
jae 0x429396
cmp byte [edi], 0xa
jne 0x429396
mov eax, dword [esp + 0x24c]
test dword [eax + 0xc], 0x800
jne 0x429396
cmp ebp, 1
je 0x429393
cmp ebp, 2
je 0x429393
cmp ebx, 2
jne 0x429396
lea esi, [edi + 1]
mov dword [esp + 0xe4], 0
jmp 0x428e80
mov ebx, dword [esp + 0x54]
sub eax, ebx
cmp esi, eax
ja 0x429344
mov al, byte [esi]
cmp al, byte [esp + 0x6c]
jne 0x429344
cmp ebx, 1
je 0x4293ca
mov al, byte [esi + 1]
cmp al, byte [esp + 0x6d]
jne 0x429344
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
cmp dword [esp + 0x28], 0
je 0x4293e6
push dword [esp + 0x44]
call dword [0x524380]
add esp, 4
test ebx, ebx
je 0x429499
cmp ebx, 0xfffffff4
je 0x429499
lea eax, [esp + 0x114]
push eax
call fcn.00429630
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret
cmp ebx, 1
je 0x429421
cmp ebx, 0xfffffc19
jne 0x4293d2
cmp dword [esp + 0x28], 0
mov edi, dword [esp + 0x24]
je 0x429472
mov esi, dword [esp + 0x44]
cmp edi, 4
jl 0x429454
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [esp + 0x26c]
add eax, 8
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0xc
cmp dword [esp + 0xc4], edi
jle 0x429468
or dword [esp + 0xc8], 0x10000
push esi
call dword [0x524380]
add esp, 4
test dword [esp + 0xc8], 0x10000
mov ecx, dword [esp + 0xc4]
je 0x429523
cmp ecx, edi
jl 0x429523
xor edi, edi
jmp 0x42952c
mov edi, dword [esp + 0xfc]
test edi, edi
je 0x4294e7
mov ecx, dword [esp + 0x268]
mov dword [esp + 0xe4], 0
cmp ecx, 1
jle 0x4294e0
mov eax, dword [esp + 0x264]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x254]
sub edx, ebx
sub ebp, ebx
mov dword [eax], edx
mov dword [eax + 4], ebp
cmp ecx, 2
jle 0x4294e0
sub edi, ebx
mov dword [eax + 8], edi
mov esi, 0xfffffff4
jmp 0x4294ea
or esi, 0xffffffff
mov edx, dword [esp + 0x250]
test edx, edx
je 0x429506
test byte [edx], 0x20
je 0x429506
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0xe8]
mov dword [edx], ecx
lea eax, [esp + 0x114]
push eax
call fcn.00429630
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret
mov eax, ecx
cdq
sub eax, edx
mov edi, eax
sar edi, 1
mov eax, dword [esp + 0x24c]
mov ebx, dword [esp + 0x264]
movzx esi, word [eax + 0x1e]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp eax, esi
jg 0x42958e
test ebx, ebx
je 0x42958e
mov edx, dword [esp + 0x268]
lea eax, [esi*2 + 2]
cmp eax, edx
jle 0x429561
mov eax, edx
lea eax, [ebx + eax*4]
xor esi, esi
lea edx, [ebx + ecx*4]
mov ecx, eax
sub ecx, edx
add ecx, 3
shr ecx, 2
cmp eax, edx
sbb eax, eax
not eax
and eax, ecx
jbe 0x42958e
lea ecx, [ecx]
inc esi
mov dword [edx], 0xffffffff
lea edx, [edx + 4]
cmp esi, eax
jb 0x429580
cmp dword [esp + 0x268], 2
jge 0x42959c
xor edi, edi
jmp 0x4295bd
mov eax, dword [esp + 0xb4]
sub eax, dword [esp + 0xac]
mov dword [ebx], eax
mov eax, dword [esp + 0xb8]
sub eax, dword [esp + 0xac]
mov dword [ebx + 4], eax
mov edx, dword [esp + 0x250]
test edx, edx
je 0x4295d9
test byte [edx], 0x20
je 0x4295d9
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0xe4]
mov dword [edx], ecx
lea eax, [esp + 0x114]
push eax
call fcn.00429630
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret
pop edi
pop esi
pop ebp
mov eax, 0xffffffe8
pop ebx
add esp, 0x238
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret