Function at 0x426a40
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4bef20
mov eax, dword fs:[0]
push eax
sub esp, 0x44
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4e5b00]
xor eax, esp
push eax
lea eax, [esp + 0x58]
mov dword fs:[0], eax
xor esi, esi
push 0x400
mov dword [esp + 0x28], vtable.AI::BinaryArchive.0
mov byte [esp + 0x2c], 0
mov byte [esp + 0x30], 0
mov dword [esp + 0x34], esi
mov dword [esp + 0x3c], 0x400
call fcn.0046110e
push 0x400
push esi
push eax
mov dword [esp + 0x40], eax
call fcn.00465660
add esp, 0x10
mov dword [esp + 0x34], esi
mov dword [esp + 0x60], esi
mov edx, dword [esp + 0x24]
push 1
lea eax, [esp + 0x18]
push eax
mov eax, dword [edx + 0xc]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1c], 0x20
call eax
mov ebx, dword [esp + 0x68]
mov ecx, dword [ebx + 0x10]
sub ecx, dword [ebx + 0xc]
mov eax, dword [esp + 0x24]
sar ecx, 3
push 4
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], ecx
push edx
mov edx, dword [eax + 0xc]
lea ecx, [esp + 0x2c]
call edx
mov esi, dword [ebx + 0xc]
cmp esi, dword [ebx + 0x10]
jbe 0x426af7
call fcn.00462e53
mov edi, dword [ebx]
mov dword [esp + 0x1c], edi
mov ebp, esi
nop
mov esi, dword [ebx + 0x10]
cmp dword [ebx + 0xc], esi
jbe 0x426b0d
call fcn.00462e53
mov eax, dword [ebx]
test edi, edi
je 0x426b17
cmp edi, eax
je 0x426b1c
call fcn.00462e53
cmp ebp, esi
je 0x426cd6
test edi, edi
jne 0x426bfa
call fcn.00462e53
xor eax, eax
cmp ebp, dword [eax + 0x10]
jb 0x426b3d
call fcn.00462e53
mov eax, dword [ebp]
mov edx, dword [esp + 0x24]
push 4
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], eax
mov eax, dword [edx + 0xc]
push ecx
lea ecx, [esp + 0x2c]
call eax
test edi, edi
jne 0x426c01
call fcn.00462e53
xor eax, eax
cmp ebp, dword [eax + 0x10]
jb 0x426b71
call fcn.00462e53
mov esi, dword [ebp + 4]
mov edx, dword [esp + 0x24]
mov bl, byte [esi]
mov eax, dword [edx + 0xc]
push 1
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1c], bl
call eax
movzx eax, bl
sub eax, 2
je 0x426caf
sub eax, 1
je 0x426c08
sub eax, 1
jne 0x426bd5
mov edx, dword [esp + 0x24]
mov edi, dword [esi + 4]
mov eax, dword [edx + 0xc]
push 4
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x20], edi
call eax
test edi, edi
jle 0x426bd1
mov ecx, dword [esi + 8]
push edi
push ecx
lea ecx, [esp + 0x2c]
call fcn.00425210
mov edi, dword [esp + 0x1c]
test edi, edi
jne 0x426ccf
call fcn.00462e53
xor eax, eax
cmp ebp, dword [eax + 0x10]
jb 0x426bee
call fcn.00462e53
mov ebx, dword [esp + 0x68]
add ebp, 8
jmp 0x426b00
mov eax, dword [edi]
jmp 0x426b33
mov eax, dword [edi]
jmp 0x426b67
cmp dword [esi + 4], 0
jle 0x426c13
mov esi, dword [esi + 8]
jmp 0x426c18
mov esi, 0x4c9f98
mov eax, esi
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x426c32
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x44]
call fcn.00401910
mov byte [esp + 0x60], 1
mov edx, dword [esp + 0x50]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x24]
push 4
lea eax, [esp + 0x1c]
push eax
mov eax, dword [edx + 0xc]
lea ecx, [esp + 0x2c]
call eax
mov eax, dword [esp + 0x18]
test eax, eax
jbe 0x426c8d
cmp dword [esp + 0x54], 0x10
mov ecx, dword [esp + 0x40]
jae 0x426c7e
lea ecx, [esp + 0x40]
mov edx, dword [esp + 0x24]
push eax
mov eax, dword [edx + 0xc]
push ecx
lea ecx, [esp + 0x2c]
call eax
mov byte [esp + 0x60], 0
cmp dword [esp + 0x54], 0x10
jb 0x426bd5
mov ecx, dword [esp + 0x40]
push ecx
call fcn.004419ee
add esp, 4
jmp 0x426bd5
mov edx, dword [esi + 4]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x24]
push 4
lea eax, [esp + 0x1c]
push eax
mov eax, dword [edx + 0xc]
lea ecx, [esp + 0x2c]
call eax
jmp 0x426bd5
mov eax, dword [edi]
jmp 0x426be4
jmp 0x95bbe2