Function at 0x42fbb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5adffe
mov eax, dword fs:[0]
push eax
sub esp, 0x1c4
mov eax, dword [0x69e298]
xor eax, esp
mov dword [esp + 0x1c0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x69e298]
xor eax, esp
push eax
lea eax, [esp + 0x1d8]
mov dword fs:[0], eax
mov eax, dword [esp + 0x1e8]
mov esi, dword [esp + 0x1ec]
xor ebx, ebx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x90], eax
mov dword [esp + 0x38], esi
mov dword [esp + 0xc8], 3
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xb4], ebx
mov eax, dword [esi + 0x18]
mov dword [esp + 0x1e0], ebx
lea edx, [esi + 4]
cmp eax, 4
jb 0x42fc39
mov edi, dword [edx]
jmp 0x42fc3b
mov edi, edx
cmp edi, ebx
je 0x42fc63
cmp eax, 4
jb 0x42fc48
mov ecx, dword [edx]
jmp 0x42fc4a
mov ecx, edx
cmp ecx, edi
ja 0x42fc63
cmp eax, 4
jb 0x42fc57
mov eax, dword [edx]
jmp 0x42fc59
mov eax, edx
mov ecx, dword [esi + 0x14]
lea edx, [eax + ecx*4]
cmp edi, edx
jbe 0x42fc68
call fcn.00589a8c
mov esi, dword [esp + 0x38]
mov dword [esp + 0xe4], esi
mov ebp, edi
mov eax, dword [esp + 0x38]
mov edx, dword [eax + 0x18]
cmp edx, 4
jb 0x42fc89
mov ecx, dword [eax + 4]
add eax, 4
jmp 0x42fc8c
lea ecx, [eax + 4]
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
add eax, eax
add eax, eax
lea edi, [ecx + eax]
cmp edi, ebx
je 0x42fcc4
mov ecx, dword [esp + 0x38]
add ecx, 4
cmp edx, 4
jb 0x42fcac
mov ecx, dword [ecx]
cmp ecx, edi
ja 0x42fcc4
mov ecx, dword [esp + 0x38]
add ecx, 4
cmp edx, 4
jb 0x42fcbe
mov ecx, dword [ecx]
add ecx, eax
cmp edi, ecx
jbe 0x42fcc9
call fcn.00589a8c
cmp esi, 0xfffffffc
je 0x42fcdd
cmp esi, ebx
je 0x42fcd8
cmp esi, dword [esp + 0x38]
je 0x42fcdd
call fcn.00589a8c
cmp ebp, edi
je 0x430771
cmp esi, 0xfffffffc
je 0x42fd10
cmp esi, ebx
jne 0x42fcf3
call fcn.00589a8c
cmp dword [esi + 0x18], 4
jb 0x42fcfe
mov eax, dword [esi + 4]
jmp 0x42fd01
lea eax, [esi + 4]
mov ecx, dword [esi + 0x14]
lea edx, [eax + ecx*4]
cmp ebp, edx
jb 0x42fd10
call fcn.00589a8c
mov edi, dword [ebp]
cmp esi, 0xfffffffc
je 0x42fd3e
cmp esi, ebx
jne 0x42fd21
call fcn.00589a8c
cmp dword [esi + 0x18], 4
jb 0x42fd2c
mov eax, dword [esi + 4]
jmp 0x42fd2f
lea eax, [esi + 4]
mov ecx, dword [esi + 0x14]
lea edx, [eax + ecx*4]
cmp ebp, edx
jb 0x42fd3e
call fcn.00589a8c
add ebp, 4
mov dword [esp + 0xe8], ebp
cmp edi, 0x5b
jne 0x42fe70
mov dword [esp + 0x8c], 3
mov dword [esp + 0x88], ebx
mov dword [esp + 0x78], ebx
mov byte [esp + 0x1e0], 1
nop
cmp esi, 0xfffffffc
je 0x42fd9b
cmp esi, ebx
jne 0x42fd7e
call fcn.00589a8c
cmp dword [esi + 0x18], 4
jb 0x42fd89
mov eax, dword [esi + 4]
jmp 0x42fd8c
lea eax, [esi + 4]
mov ecx, dword [esi + 0x14]
lea edx, [eax + ecx*4]
cmp ebp, edx
jb 0x42fd9b
call fcn.00589a8c
mov edi, dword [ebp]
cmp esi, 0xfffffffc
je 0x42fdc9
cmp esi, ebx
jne 0x42fdac
call fcn.00589a8c
cmp dword [esi + 0x18], 4
jb 0x42fdb7
mov eax, dword [esi + 4]
jmp 0x42fdba
lea eax, [esi + 4]
mov ecx, dword [esi + 0x14]
lea edx, [eax + ecx*4]
cmp ebp, edx
jb 0x42fdc9
call fcn.00589a8c
add ebp, 4
cmp edi, 0x5d
je 0x42fddf
push edi
push 1
lea ecx, [esp + 0x7c]
call fcn.00416fc0
jmp 0x42fd70
lea eax, [esp + 0x74]
push eax
call fcn.004959a0
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x1c]
add ecx, 0x160
call fcn.0040eae0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1e0], 2
call fcn.00481d40
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xbc]
call fcn.004222d0
mov edi, 4
cmp dword [esp + 0x54], edi
jb 0x42fe3a
mov edx, dword [esp + 0x40]
push edx
call fcn.0058984a
add esp, 4
mov dword [esp + 0x54], 3
mov dword [esp + 0x50], ebx
mov dword [esp + 0x40], ebx
mov byte [esp + 0x1e0], bl
cmp dword [esp + 0x8c], edi
jb case.0x430644.32
mov eax, dword [esp + 0x78]
push eax
call fcn.0058984a
add esp, 4
jmp case.0x430644.32
cmp edi, 0x7b
jne 0x4300bd
mov dword [esp + 0x70], 3
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x1e0], 3
cmp esi, 0xfffffffc
je 0x42febc
cmp esi, ebx
jne 0x42fe9f
call fcn.00589a8c
cmp dword [esi + 0x18], 4
jb 0x42feaa
mov eax, dword [esi + 4]
jmp 0x42fead
lea eax, [esi + 4]
mov ecx, dword [esi + 0x14]
lea edx, [eax + ecx*4]
cmp ebp, edx
jb 0x42febc
call fcn.00589a8c
mov edi, dword [ebp]
cmp esi, 0xfffffffc
je 0x42feea
cmp esi, ebx
jne 0x42fecd
call fcn.00589a8c
cmp dword [esi + 0x18], 4
jb 0x42fed8
mov eax, dword [esi + 4]
jmp 0x42fedb
lea eax, [esi + 4]
mov ecx, dword [esi + 0x14]
lea edx, [eax + ecx*4]
cmp ebp, edx
jb 0x42feea
call fcn.00589a8c
add ebp, 4
cmp edi, 0x7d
je 0x42ff00
push edi
push 1
lea ecx, [esp + 0x60]
call fcn.00416fc0
jmp 0x42fe91
lea eax, [esp + 0x58]
push eax
call fcn.004959a0
mov edi, eax
mov eax, dword [esp + 0x94]
mov ecx, dword [eax + 0x84]
sub ecx, dword [eax + 0x80]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add esp, 4
cmp ecx, edi
jg 0x430041
push 1
push 0x14a
push str.._scene_adv_sceneadv4.cpp
lea ecx, [esp + 0x130]
call fcn.00496f50
push 0x19
push 0x5d3098
lea ecx, [esp + 0x44]
mov byte [esp + 0x1e8], 4
mov dword [esp + 0x5c], 0xf
mov dword [esp + 0x58], ebx
mov byte [esp + 0x48], bl
call fcn.00401db0
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x78]
push eax
mov byte [esp + 0x1e8], 5
call fcn.00495c50
add esp, 8
push edi
push eax
lea ecx, [esp + 0x12c]
push ecx
mov byte [esp + 0x1ec], 6
call fcn.00496550
add esp, 8
mov ecx, eax
call fcn.00408aa0
cmp dword [esp + 0x8c], 4
jb 0x42ffcf
mov edx, dword [esp + 0x78]
push edx
call fcn.0058984a
add esp, 4
cmp dword [esp + 0x54], 0x10
mov dword [esp + 0x8c], 3
mov dword [esp + 0x88], ebx
mov dword [esp + 0x78], ebx
mov byte [esp + 0x1e0], 4
jb 0x430001
mov eax, dword [esp + 0x40]
push eax
call fcn.0058984a
add esp, 4
lea ecx, [esp + 0x124]
call fcn.00496c20
test al, al
je 0x430012
int3
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x1e0], 3
call fcn.00401f70
lea ecx, [esp + 0x1a0]
push ecx
mov dword [esp + method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.00588e93
add esp, 4
mov eax, dword [esp + 0x90]
mov ecx, dword [eax + 0x84]
sub ecx, dword [eax + 0x80]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x430070
call fcn.00589a8c
mov edx, dword [esp + 0x90]
mov eax, dword [edx + 0x80]
lea ecx, [edi*8]
sub ecx, edi
push 0xffffffffffffffff
lea eax, [eax + ecx*4]
push ebx
push eax
lea ecx, [esp + 0xbc]
call fcn.004222d0
cmp dword [esp + 0x70], 4
mov byte [esp + 0x1e0], bl
jb case.0x430644.32
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.0058984a
add esp, 4
jmp case.0x430644.32
cmp edi, 0x6c
jne 0x4303a2
cmp esi, 0xfffffffc
je 0x4300f1
cmp esi, ebx
jne 0x4300d4
call fcn.00589a8c
cmp dword [esi + 0x18], 4
jb 0x4300df
mov eax, dword [esi + 4]
jmp 0x4300e2
lea eax, [esi + 4]
mov edx, dword [esi + 0x14]
lea eax, [eax + edx*4]
cmp ebp, eax
jb 0x4300f1
call fcn.00589a8c
mov eax, dword [ebp]
cmp eax, 0x65
je 0x4302c9
push 1
cmp eax, 0x74
je 0x430201
push 0x156
push str.._scene_adv_sceneadv4.cpp
lea ecx, [esp + 0x130]
call fcn.00496f50
push 0x5d30e0
lea ecx, [esp + 0x98]
mov byte [esp + 0x1e4], 0xb
call fcn.00402290
lea ecx, [esp + 0x94]
push ecx
lea edx, [esp + 0x10c]
push edx
mov byte [esp + 0x1e8], 0xc
call fcn.00495c50
add esp, 8
push 0x6c
push eax
lea eax, [esp + 0x12c]
push eax
mov byte [esp + 0x1ec], 0xd
call fcn.00496550
add esp, 8
mov ecx, eax
call fcn.00547860
cmp dword [esp + 0x120], 4
jb 0x430193
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.0058984a
add esp, 4
cmp dword [esp + 0xac], 0x10
mov dword [esp + 0x120], 3
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x10c], ebx
mov byte [esp + 0x1e0], 0xb
jb 0x4301ce
mov edx, dword [esp + 0x98]
push edx
call fcn.0058984a
add esp, 4
lea ecx, [esp + 0x124]
mov dword [esp + 0xac], 0xf
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
call fcn.00496c20
test al, al
je 0x43073e
int3
mov edi, 0xf
push 0x5d30dc
lea ecx, [esp + 0xf4]
mov dword [esp + 0x10c], edi
mov dword [esp + 0x108], ebx
mov byte [esp + 0xf8], bl
call fcn.00401db0
lea ecx, [esp + 0xec]
push ecx
lea edx, [esp + 0x78]
push edx
mov byte [esp + 0x1e8], 9
call fcn.00495c50
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xbc]
mov byte [esp + 0x1ec], 0xa
call fcn.004222d0
cmp dword [esp + 0x8c], 4
jb 0x430278
mov eax, dword [esp + 0x78]
push eax
call fcn.0058984a
add esp, 4
cmp dword [esp + 0x104], 0x10
mov dword [esp + 0x8c], 3
mov dword [esp + 0x88], ebx
mov dword [esp + 0x78], ebx
mov byte [esp + 0x1e0], bl
jb 0x4302af
mov ecx, dword [esp + 0xf0]
push ecx
call fcn.0058984a
add esp, 4
mov dword [esp + 0x104], edi
mov dword [esp + 0x100], ebx
mov byte [esp + 0xf0], bl
jmp 0x430367
push 2
mov edi, 0xf
push 0x5d30d8
lea ecx, [esp + 0x60]
mov dword [esp + 0x78], edi
mov dword [esp + 0x74], ebx
mov byte [esp + 0x64], bl
call fcn.00401db0
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0x40]
push edx
mov byte [esp + 0x1e8], 7
call fcn.00495c50
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xbc]
mov byte [esp + 0x1ec], 8
call fcn.004222d0
cmp dword [esp + 0x54], 4
jb 0x430330
mov eax, dword [esp + 0x40]
push eax
call fcn.0058984a
add esp, 4
cmp dword [esp + 0x70], 0x10
mov dword [esp + 0x54], 3
mov dword [esp + 0x50], ebx
mov dword [esp + 0x40], ebx
mov byte [esp + 0x1e0], bl
jb 0x43035b
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.0058984a
add esp, 4
mov dword [esp + 0x70], edi
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x5c], bl
cmp esi, 0xfffffffc
je 0x43062d
cmp esi, ebx
jne 0x430379
call fcn.00589a8c
cmp dword [esi + 0x18], 4
jb 0x430384
mov eax, dword [esi + 4]
jmp 0x430387
lea eax, [esi + 4]
mov edx, dword [esi + 0x14]
lea eax, [eax + edx*4]
cmp ebp, eax
jb 0x43062d
call fcn.00589a8c
add ebp, 4
jmp case.0x430644.32
cmp edi, 0x67
jne 0x430635
cmp esi, 0xfffffffc
je 0x4303d6
cmp esi, ebx
jne 0x4303b9
call fcn.00589a8c
cmp dword [esi + 0x18], 4
jb 0x4303c4
mov eax, dword [esi + 4]
jmp 0x4303c7
lea eax, [esi + 4]
mov ecx, dword [esi + 0x14]
lea edx, [eax + ecx*4]
cmp ebp, edx
jb 0x4303d6
call fcn.00589a8c
mov eax, dword [ebp]
cmp eax, 0x65
je 0x43055b
cmp eax, 0x74
je 0x430498
push 1
push 0x161
push str.._scene_adv_sceneadv4.cpp
lea ecx, [esp + 0x130]
call fcn.00496f50
push 0x5d30e0
lea ecx, [esp + 0x10c]
mov byte [esp + 0x1e4], 0x12
call fcn.00402290
lea eax, [esp + 0x108]
push eax
lea ecx, [esp + 0xf0]
push ecx
mov byte [esp + 0x1e8], 0x13
call fcn.00495c50
add esp, 8
push 0x67
push eax
lea edx, [esp + 0x12c]
push edx
mov byte [esp + 0x1ec], 0x14
call fcn.00496550
add esp, 8
mov ecx, eax
call fcn.00547860
lea ecx, [esp + 0xec]
call fcn.004176e0
lea ecx, [esp + 0x108]
mov byte [esp + 0x1e0], 0x12
call fcn.00401a50
lea ecx, [esp + 0x124]
call fcn.00496c20
test al, al
je 0x43073e
int3
push 0x5d30d4
lea ecx, [esp + 0x98]
call fcn.00402290
lea ecx, [esp + 0x94]
push ecx
lea edx, [esp + 0x40]
push edx
mov byte [esp + 0x1e8], 0x10
call fcn.00495c50
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xbc]
mov byte [esp + 0x1ec], 0x11
call fcn.004222d0
cmp dword [esp + 0x54], 4
jb 0x4304f2
mov eax, dword [esp + 0x40]
push eax
call fcn.0058984a
add esp, 4
cmp dword [esp + 0xac], 0x10
mov dword [esp + 0x54], 3
mov dword [esp + 0x50], ebx
mov dword [esp + 0x40], ebx
mov byte [esp + 0x1e0], bl
jb 0x430523
mov ecx, dword [esp + 0x98]
push ecx
call fcn.0058984a
add esp, 4
lea ecx, [esp + 0xe4]
mov dword [esp + 0xac], 0xf
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
call fcn.0042d950
mov ebp, dword [esp + 0xe8]
mov esi, dword [esp + 0xe4]
jmp case.0x430644.32
push 2
mov edi, 0xf
push 0x5d30d0
lea ecx, [esp + 0x60]
mov dword [esp + 0x78], edi
mov dword [esp + 0x74], ebx
mov byte [esp + 0x64], bl
call fcn.00401db0
lea edx, [esp + 0x58]
push edx
lea eax, [esp + 0x78]
push eax
mov byte [esp + 0x1e8], 0xe
call fcn.00495c50
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xbc]
mov byte [esp + 0x1ec], 0xf
call fcn.004222d0
cmp dword [esp + 0x8c], 4
jb 0x4305c5
mov ecx, dword [esp + 0x78]
push ecx
call fcn.0058984a
add esp, 4
cmp dword [esp + 0x70], 0x10
mov dword [esp + 0x8c], 3
mov dword [esp + 0x88], ebx
mov dword [esp + 0x78], ebx
mov byte [esp + 0x1e0], bl
jb 0x4305f6
mov edx, dword [esp + 0x5c]
push edx
call fcn.0058984a
add esp, 4
mov dword [esp + 0x70], edi
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x5c], bl
cmp esi, 0xfffffffc
je 0x43062d
cmp esi, ebx
jne 0x430610
call fcn.00589a8c
cmp dword [esi + 0x18], 4
jb 0x43061b
mov eax, dword [esi + 4]
jmp 0x43061e
lea eax, [esi + 4]
mov ecx, dword [esi + 0x14]
lea edx, [eax + ecx*4]
cmp ebp, edx
jb 0x43062d
call fcn.00589a8c
add ebp, 4
jmp case.0x430644.32
lea eax, [edi - 0x20]
cmp eax, 0x1e
ja case.0x430644.34
movzx eax, byte [eax + 0x430c2c]
jmp dword [eax*4 + 0x430c20]
push edi
push 1
lea ecx, [esp + 0xb8]
call fcn.00416fc0
jmp case.0x430644.32
push 1
push 0x16f
push str.._scene_adv_sceneadv4.cpp
lea ecx, [esp + 0x130]
call fcn.00496f50
push 0x5d30e0
lea ecx, [esp + 0x98]
mov byte [esp + 0x1e4], 0x15
call fcn.00402290
lea ecx, [esp + 0x94]
push ecx
lea edx, [esp + 0x40]
push edx
mov byte [esp + 0x1e8], 0x16
call fcn.00495c50
add esp, 8
push edi
push eax
lea eax, [esp + 0x12c]
push eax
mov byte [esp + 0x1ec], 0x17
call fcn.00496550
add esp, 8
mov ecx, eax
call fcn.00547860
cmp dword [esp + 0x54], 4
jb 0x4306e2
mov ecx, dword [esp + 0x40]
push ecx
call fcn.0058984a
add esp, 4
cmp dword [esp + 0xac], 0x10
mov dword [esp + 0x54], 3
mov dword [esp + 0x50], ebx
mov dword [esp + 0x40], ebx
mov byte [esp + 0x1e0], 0x15
jb 0x430714
mov edx, dword [esp + 0x98]
push edx
call fcn.0058984a
add esp, 4
lea ecx, [esp + 0x124]
mov dword [esp + 0xac], 0xf
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
call fcn.00496c20
test al, al
je 0x43073e
int3
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x1e0], bl
call fcn.00401f70
lea eax, [esp + 0x1a0]
push eax
mov dword [esp + method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.00588e93
add esp, 4
jmp case.0x430644.32
lea ecx, [esp + 0xcc]
call fcn.004e5100
lea ecx, [esp + 0xcc]
push ecx
lea edx, [esp + 0xb4]
push edx
mov byte [esp + 0x1e8], 0x18
call fcn.0042efa0
push 4
call fcn.00589ab7
add esp, 0xc
cmp eax, ebx
je 0x4307b0
lea ecx, [esp + 0x18]
mov dword [eax], ecx
jmp 0x4307b2
xor eax, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov ecx, dword [esp + 0xdc]
sub ecx, dword [esp + 0xd8]
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
mov byte [esp + 0x1e0], 0x19
je 0x430ba3
xor ebp, ebp
cmp edi, eax
jb 0x430800
call fcn.00589a8c
mov ecx, dword [esp + 0xd8]
mov eax, dword [ecx + ebp]
add eax, 0xffffff9c
cmp eax, 0x11
ja case.0x430816.101
jmp dword [eax*4 + 0x430c4c]
lea edx, [ecx + ebp + 4]
push edx
call fcn.004959a0
mov dword [esp + 0x18], eax
add esp, 4
lea eax, [esp + 0x14]
push eax
jmp 0x430b6f
lea ecx, [esp + 0x18]
call fcn.0042da60
mov ecx, dword [eax]
mov dword [esp + 0x14], ecx
cmp dword [esp + 0x34], ebx
je 0x430b6a
sub dword [esp + 0x34], 1
jne 0x430b6a
mov dword [esp + 0x30], ebx
jmp 0x430b6a
lea ecx, [esp + 0x18]
call fcn.0042da60
mov eax, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430881
sub dword [esp + 0x34], 1
jne 0x430881
mov dword [esp + 0x30], ebx
neg eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
jmp 0x430b6f
lea ecx, [esp + 0x18]
call fcn.0042da60
mov eax, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x4308ad
sub dword [esp + 0x34], 1
jne 0x4308ad
mov dword [esp + 0x30], ebx
xor ecx, ecx
cmp eax, ebx
sete cl
jmp 0x430b66
lea ecx, [esp + 0x18]
call fcn.0042da60
mov esi, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x4308d5
sub dword [esp + 0x34], 1
jne 0x4308d5
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x18]
call fcn.0042da60
mov eax, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x4308f1
sub dword [esp + 0x34], 1
jne 0x4308f1
mov dword [esp + 0x30], ebx
add eax, esi
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
jmp 0x430b6f
lea ecx, [esp + 0x18]
call fcn.0042da60
mov esi, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x43091d
sub dword [esp + 0x34], 1
jne 0x43091d
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x18]
call fcn.0042da60
mov eax, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430939
sub dword [esp + 0x34], 1
jne 0x430939
mov dword [esp + 0x30], ebx
sub eax, esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], eax
push ecx
jmp 0x430b6f
lea ecx, [esp + 0x18]
call fcn.0042da60
mov esi, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430965
sub dword [esp + 0x34], 1
jne 0x430965
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x18]
call fcn.0042da60
mov eax, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430981
sub dword [esp + 0x34], 1
jne 0x430981
mov dword [esp + 0x30], ebx
imul eax, esi
mov dword [esp + 0x14], eax
jmp 0x430b6a
lea ecx, [esp + 0x18]
call fcn.0042da60
mov esi, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x4309a9
sub dword [esp + 0x34], 1
jne 0x4309a9
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x18]
call fcn.0042da60
mov eax, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x4309c5
sub dword [esp + 0x34], 1
jne 0x4309c5
mov dword [esp + 0x30], ebx
cdq
idiv esi
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
jmp 0x430b6f
lea ecx, [esp + 0x18]
call fcn.0042da60
mov esi, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x4309f2
sub dword [esp + 0x34], 1
jne 0x4309f2
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x18]
call fcn.0042da60
mov eax, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430a0e
sub dword [esp + 0x34], 1
jne 0x430a0e
mov dword [esp + 0x30], ebx
xor ecx, ecx
cmp esi, eax
sete cl
jmp 0x430b66
lea ecx, [esp + 0x18]
call fcn.0042da60
mov esi, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430a36
sub dword [esp + 0x34], 1
jne 0x430a36
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x18]
call fcn.0042da60
mov eax, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430a52
sub dword [esp + 0x34], 1
jne 0x430a52
mov dword [esp + 0x30], ebx
xor ecx, ecx
cmp esi, eax
setne cl
jmp 0x430b66
lea ecx, [esp + 0x18]
call fcn.0042da60
mov esi, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430a7a
sub dword [esp + 0x34], 1
jne 0x430a7a
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x18]
call fcn.0042da60
mov eax, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430a96
sub dword [esp + 0x34], 1
jne 0x430a96
mov dword [esp + 0x30], ebx
xor ecx, ecx
cmp eax, esi
setge cl
jmp 0x430b66
lea ecx, [esp + 0x18]
call fcn.0042da60
mov esi, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430abe
sub dword [esp + 0x34], 1
jne 0x430abe
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x18]
call fcn.0042da60
mov eax, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430ada
sub dword [esp + 0x34], 1
jne 0x430ada
mov dword [esp + 0x30], ebx
xor ecx, ecx
cmp eax, esi
setle cl
jmp 0x430b66
lea ecx, [esp + 0x18]
call fcn.0042da60
mov esi, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430b02
sub dword [esp + 0x34], 1
jne 0x430b02
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x18]
call fcn.0042da60
mov eax, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430b1e
sub dword [esp + 0x34], 1
jne 0x430b1e
mov dword [esp + 0x30], ebx
xor ecx, ecx
cmp eax, esi
setg cl
jmp 0x430b66
lea ecx, [esp + 0x18]
call fcn.0042da60
mov esi, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430b43
sub dword [esp + 0x34], 1
jne 0x430b43
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x18]
call fcn.0042da60
mov eax, dword [eax]
cmp dword [esp + 0x34], ebx
je 0x430b5f
sub dword [esp + 0x34], 1
jne 0x430b5f
mov dword [esp + 0x30], ebx
xor ecx, ecx
cmp eax, esi
setl cl
mov dword [esp + 0x14], ecx
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x1c]
call fcn.0042e110
mov ecx, dword [esp + 0xdc]
sub ecx, dword [esp + 0xd8]
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebp, 0x24
cmp edi, eax
jb 0x430800
lea ecx, [esp + 0x18]
call fcn.0042da60
lea ecx, [esp + 0x18]
call fcn.0042da60
mov esi, dword [eax]
lea ecx, [esp + 0x18]
call fcn.004019b0
mov eax, dword [esp + 0x18]
push eax
call fcn.0058984a
add esp, 4
lea ecx, [esp + 0xcc]
call fcn.0042ea60
cmp dword [esp + 0xc8], 4
jb 0x430bf3
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.0058984a
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x1d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1c0]
xor ecx, esp
call fcn.00589f78
add esp, 0x1d0
ret 8