Function at 0x426ad0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa4
push ebx
mov ebx, dword [ebp + 8]
movsx eax, word [ebx + 0x20]
mov ecx, dword [ebx + 0x18]
mov edx, dword [ebx + 0x1c]
mov dword [esp + 0x38], eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x54], eax
movsx eax, word [ebx + 0x22]
push esi
xor esi, esi
mov dword [esp + 0x30], ecx
xor ecx, ecx
cmp eax, 0x76
setne cl
mov dword [esp + 0x54], eax
mov eax, dword [ebx + 0x14]
push edi
mov edi, dword [ebx]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x3c], ecx
cmp eax, esi
jne 0x426c71
cmp byte [edi + 6], 0
je 0x426b66
mov edx, dword [edi + 0x10]
mov esi, dword [edx + 0x70]
mov ebx, 0x49b418
call fcn.00420ca0
mov eax, dword [edi + 0x10]
mov ebx, dword [eax + 0x70]
push 0
push 0x49b42c
call fcn.00422180
add esp, 8
xor eax, eax
xor edx, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov esi, dword [edi + 8]
sub esi, dword [edi + 0xc]
mov eax, dword [edi + 0x10]
mov ecx, dword [eax + 0x48]
sar esi, 4
mov dword [esp + 0x24], esi
cmp ecx, dword [eax + 0x44]
jb 0x426b85
mov eax, edi
call fcn.00437bd0
mov eax, dword [edi + 0x14]
cmp eax, dword [edi + 0x28]
jne 0x426b92
mov eax, dword [edi + 0x40]
jmp 0x426b9a
mov edx, dword [eax + 4]
mov eax, dword [edx]
mov eax, dword [eax + 0x10]
push eax
push 0
push edi
call fcn.00447360
mov dword [eax + 0x14], fcn.00422580
mov ecx, dword [edi + 8]
mov dword [ecx], eax
mov dword [ecx + 8], 6
add dword [edi + 8], 0x10
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
inc esi
mov dword [esp + 0x2c], eax
mov eax, dword [eax + 0x10]
add esp, 0xc
mov dword [esp + 0x38], esi
mov esi, dword [eax + 0x60]
push ecx
call fcn.00435cd0
mov esi, dword [eax]
mov edx, dword [esp + 0x24]
mov ecx, dword [edx + 8]
mov dword [ecx], esi
mov esi, dword [eax + 4]
mov dword [ecx + 4], esi
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
add dword [edx + 8], 0x10
add esp, 4
cmp dword [ebx + 8], 0
jne 0x426c0e
mov ecx, dword [edi + 8]
mov dword [ecx + 8], 0
add dword [edi + 8], 0x10
jmp 0x4271b5
mov ecx, dword [ebx + 0xc]
mov eax, dword [edi + 0x10]
mov esi, dword [eax + 0x60]
push ecx
call fcn.00435cd0
mov edx, dword [eax]
mov ecx, dword [edi + 8]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
add dword [edi + 8], 0x10
mov eax, dword [edi + 8]
mov ebx, dword [ebx + 8]
mov esi, dword [eax - 0x10]
add esp, 4
push ebx
call fcn.00435cd0
mov edx, dword [eax]
mov ecx, dword [edi + 8]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
add dword [edi + 8], 0x10
add esp, 4
mov eax, 0xfffffffe
mov esi, edi
call fcn.00420410
jmp 0x4271b5
add eax, 0x20
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebx + 0x14]
mov edi, dword [ecx + 0x1c]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [esp + 0x24], eax
cmp edi, esi
je 0x426c9c
nop
cmp dword [edi + 4], eax
je 0x426cf0
mov edi, dword [edi + 0x14]
cmp edi, esi
jne 0x426c90
mov edx, dword [ebx + 0x14]
mov dword [esp + 0x20], esi
mov edi, dword [edx + 0x1c]
mov dword [esp + 0x38], esi
test edi, edi
je 0x426d4a
mov eax, dword [edi + 4]
push eax
push 0
push 0x40
call dword [sym.imp.KERNEL32.dll_OpenThread]
mov esi, eax
test esi, esi
je 0x426d00
lea ecx, [esp + 0x20]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
je 0x426cf9
cmp dword [esp + 0x20], 0x103
jne 0x426cf9
mov dword [esp + 0x38], edi
mov edi, dword [edi + 0x14]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x426d3e
mov dword [esp + 0x10], edi
jmp 0x426d98
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [edi + 0x10]
test eax, eax
je 0x426d0f
mov edx, dword [edi + 0x14]
mov dword [eax + 0x14], edx
jmp 0x426d18
mov eax, dword [edi + 0x14]
mov ecx, dword [ebx + 0x14]
mov dword [ecx + 0x1c], eax
mov eax, dword [edi + 0x14]
test eax, eax
je 0x426d25
mov edx, dword [edi + 0x10]
mov dword [eax + 0x10], edx
mov esi, edi
mov eax, dword [esi]
mov edi, dword [edi + 0x14]
push eax
call fcn.00462300
add esp, 4
push esi
call fcn.00470886
add esp, 4
test edi, edi
jne 0x426cb2
mov esi, dword [esp + 0x38]
push 0x18
call fcn.004708c0
mov edi, eax
xor eax, eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
mov dword [edi + 0x10], eax
add esp, 4
mov dword [esp + 0x10], edi
mov dword [edi + 0x14], eax
call fcn.004623e0
mov ecx, dword [esp + 0x24]
mov dword [edi], eax
xor eax, eax
mov dword [edi + 4], ecx
mov dword [edi + 0x14], eax
mov dword [edi + 0x10], esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
cmp esi, eax
je 0x426d92
mov dword [esi + 0x14], edi
jmp 0x426d98
mov edx, dword [ebx + 0x14]
mov dword [edx + 0x1c], edi
mov edi, ebx
mov eax, dword [edi + 0x14]
add eax, 0x20
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov ebx, dword [ecx]
mov esi, dword [ebx + 8]
sub esi, dword [ebx + 0xc]
mov dword [esp + 0x1c], ebx
sar esi, 4
cmp dword [eax + 8], 0
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x24], esi
jne 0x427102
mov edx, dword [eax + 0x48]
cmp edx, dword [eax + 0x44]
jb 0x426ddc
mov eax, ebx
call fcn.00437bd0
mov eax, dword [ebx + 0x14]
cmp eax, dword [ebx + 0x28]
jne 0x426de9
mov eax, dword [ebx + 0x40]
jmp 0x426df1
mov eax, dword [eax + 4]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x10]
push eax
push 0
push ebx
call fcn.00447360
mov dword [eax + 0x14], fcn.00422580
mov ecx, dword [ebx + 8]
mov dword [ecx], eax
mov dword [ecx + 8], 6
mov ecx, 0x10
add dword [ebx + 8], ecx
mov edx, dword [edi + 0x14]
mov eax, dword [ebx + 8]
inc esi
add esp, 0xc
cmp dword [edx + 8], 0
mov dword [esp + 0x38], esi
jne 0x426e38
mov dword [eax + 8], 0
add dword [ebx + 8], ecx
jmp 0x426ed9
mov edi, edx
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 8]
push 0x49af30
push ebx
call fcn.00425700
add esp, 8
test eax, eax
je 0x426ec5
mov esi, dword [ebx + 8]
mov eax, dword [esi - 8]
sub esi, 0x10
cmp eax, 4
je 0x426e99
cmp eax, 7
jne 0x426e72
mov eax, dword [esi]
cmp dword [eax + 8], 0
jne 0x426e72
lea esi, [eax + 0x18]
jmp 0x426e9e
mov edi, ebx
call fcn.00437e00
test eax, eax
jne 0x426e81
xor esi, esi
jmp 0x426e9e
mov eax, dword [ebx + 0x10]
mov ecx, dword [eax + 0x48]
cmp ecx, dword [eax + 0x44]
jb 0x426e93
mov eax, ebx
call fcn.00437bd0
mov esi, dword [ebx + 8]
sub esi, 0x10
mov esi, dword [esi]
add esi, 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push 0x49b440
call fcn.004718a7
add eax, 0x40
push eax
call fcn.00470f25
mov edi, dword [esp + 0x2c]
add esp, 0x10
jmp 0x427c25
mov edi, 0x49af30
mov eax, 0xffffd8ee
mov esi, ebx
call fcn.004211d0
mov edi, dword [ebp + 8]
mov ecx, dword [edi + 0x14]
mov eax, dword [ecx + 4]
mov ecx, dword [ecx]
cmp eax, 3
jb 0x426efd
cmp byte [ecx], 0xef
jne 0x426efd
cmp byte [ecx + 1], 0xbb
jne 0x426efd
cmp byte [ecx + 2], 0xbf
jne 0x426efd
add ecx, 3
sub eax, 3
lea edx, [esp + 0x78]
mov dword [esp + 0x90], edx
mov edx, dword [ebx + 8]
sub edx, dword [ebx + 0x20]
mov dword [esp + 0x7c], eax
xor eax, eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa4], eax
push edx
mov edx, dword [ebx + 0x6c]
lea eax, [esp + 0x9c]
push eax
mov dword [esp + 0x80], ecx
lea ecx, [esp + 0x8c]
push 0x445eb0
mov eax, ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x98], 0x4256c0
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xb8], 0x49aeb0
call fcn.00445dc0
mov esi, dword [ebx + 0x10]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esi + 0x10]
add esp, 0xc
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xa4]
push 0
push eax
push ecx
mov dword [esp + 0x2c], eax
mov eax, dword [esi + 0xc]
push edx
call eax
mov ecx, dword [esp + 0x30]
sub dword [esi + 0x48], ecx
add esp, 0x10
cmp dword [esp + 0x14], 0
je 0x426fd7
push 0
push 0x49b460
call fcn.00422180
add esp, 8
xor eax, eax
xor edx, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebx + 8]
mov edx, dword [eax - 0x10]
mov dword [eax], edx
mov ecx, dword [eax - 0xc]
mov dword [eax + 4], ecx
mov edx, dword [eax - 8]
mov dword [eax + 8], edx
add dword [ebx + 8], 0x10
push 0xffffd8f0
mov eax, ebx
call fcn.00424f70
mov ecx, dword [esp + 0x14]
mov dword [ecx + 8], eax
mov edx, dword [edi + 0x14]
mov eax, dword [edx + 0x10]
add esp, 4
test eax, eax
je 0x427031
mov esi, dword [esp + 0x1c]
mov ebx, eax
call fcn.00420ca0
push 0xffffd8f0
mov eax, esi
call fcn.00424f70
mov edi, dword [ebp + 8]
add esp, 4
mov dword [esi + 0x38], eax
mov ebx, esi
mov eax, dword [edi + 0x14]
cmp dword [eax + 0x14], 0
jne 0x427049
mov ecx, dword [ebx + 8]
mov dword [ecx + 8], 0
jmp 0x4271ad
mov edi, eax
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x14]
push 0x49b478
push ebx
call fcn.00425700
add esp, 8
test eax, eax
jne 0x4270bb
mov eax, dword [ebx + 8]
sub eax, 0x10
mov dword [esp + 0x70], eax
sub eax, dword [ebx + 0x20]
lea edx, [esp + 0x70]
push eax
push edx
push 0x421670
xor edx, edx
mov eax, ebx
mov dword [esp + 0x80], 1
call fcn.00445dc0
add esp, 0xc
test eax, eax
jne 0x4270bb
or eax, 0xffffffff
mov esi, ebx
call fcn.00420530
push 0xffffd8f0
mov eax, ebx
call fcn.00424f70
mov ecx, dword [esp + 0x14]
add esp, 4
mov dword [ecx + 0xc], eax
jmp 0x4271b1
mov esi, dword [ebx + 8]
mov eax, dword [esi - 8]
sub esi, 0x10
cmp eax, 4
je 0x426e99
cmp eax, 7
jne 0x4270e2
mov eax, dword [esi]
cmp dword [eax + 8], 0
jne 0x4270e2
lea esi, [eax + 0x18]
jmp 0x426e9e
mov edi, ebx
call fcn.00437e00
test eax, eax
jne 0x4270f4
xor esi, esi
jmp 0x426e9e
mov eax, dword [ebx + 0x10]
mov edx, dword [eax + 0x48]
cmp edx, dword [eax + 0x44]
jmp 0x426e8a
mov ecx, dword [eax + 0x48]
cmp ecx, dword [eax + 0x44]
jb 0x427111
mov eax, ebx
call fcn.00437bd0
mov eax, dword [ebx + 0x14]
cmp eax, dword [ebx + 0x28]
jne 0x42711e
mov eax, dword [ebx + 0x40]
jmp 0x427126
mov edx, dword [eax + 4]
mov eax, dword [edx]
mov eax, dword [eax + 0x10]
push eax
push 0
push ebx
call fcn.00447360
mov dword [eax + 0x14], fcn.00422580
mov ecx, dword [ebx + 8]
mov dword [ecx], eax
mov dword [ecx + 8], 6
add dword [ebx + 8], 0x10
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx + 8]
mov eax, dword [ebx + 0x10]
mov edi, dword [ebx + 8]
inc esi
add esp, 0xc
mov dword [esp + 0x38], esi
mov esi, dword [eax + 0x60]
push ecx
call fcn.00435cd0
mov edx, dword [eax]
mov dword [edi], edx
mov ecx, dword [eax + 4]
mov dword [edi + 4], ecx
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x14]
mov dword [edi + 8], edx
add dword [ebx + 8], 0x10
mov eax, dword [eax + 0xc]
mov edi, dword [ebx + 8]
add esp, 4
test eax, eax
jne 0x42718e
mov dword [edi + 8], eax
jmp 0x4271ad
mov ecx, dword [ebx + 0x10]
mov esi, dword [ecx + 0x60]
push eax
call fcn.00435cd0
mov ecx, dword [eax]
mov dword [edi], ecx
mov edx, dword [eax + 4]
mov dword [edi + 4], edx
mov eax, dword [eax + 8]
add esp, 4
mov dword [edi + 8], eax
add dword [ebx + 8], 0x10
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x40]
inc eax
cmp eax, 0xc350
jg 0x4271c8
mov ecx, edi
call fcn.00420310
mov ecx, dword [esp + 0x34]
mov cl, byte [ecx]
test cl, cl
je 0x4277f6
mov eax, dword [ebp + 0xc]
lea esi, [eax - 4]
lea edx, [eax - 8]
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x34]
mov ebx, 0x10
mov dword [esp + 0x54], eax
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edx
lea eax, [ebx - 0xd]
jmp 0x427209
mov edx, dword [esp + 0x14]
movzx ecx, cl
add ecx, 0xffffffda
cmp ecx, 0x53
ja case.0x4274f7.67
movzx ecx, byte [ecx + 0x427e68]
jmp dword [ecx*4 + 0x427e24]
fild dword [esi + 4]
mov ecx, dword [edi + 8]
add edx, 4
add esi, 4
fstp qword [ecx]
mov dword [esp + 0x14], edx
mov dword [ecx + 8], eax
jmp 0x4277d7
fild dword [esi + 4]
add edx, 4
add esi, 4
mov dword [esp + 0x14], edx
mov edx, dword [esi]
mov ecx, dword [edi + 8]
mov dword [esp + 0x10], esi
test edx, edx
jns 0x427260
fadd qword [0x49dee0]
fstp qword [ecx]
mov dword [ecx + 8], eax
jmp 0x4277db
mov ecx, dword [esi + 4]
add esi, 4
add edx, 4
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], esi
cmp ecx, 0xffff
jb 0x4273bb
cmp ecx, 0xffffffff
je 0x4273bb
push 0xfde9
lea eax, [esp + 0x64]
push eax
push ecx
or edi, 0xffffffff
call fcn.00433020
add esp, 0xc
mov dword [esp + 0x18], eax
test eax, eax
je 0x42730e
mov ecx, dword [esp + 0x60]
mov esi, dword [esp + 0x1c]
push ecx
push eax
call fcn.00420bb0
mov edi, dword [esi + 8]
sub edi, ebx
add esp, 8
cmp dword [edi + 8], 4
jne 0x4272ef
mov edx, dword [edi]
test byte [edx + 7], 0x10
je 0x4272e9
mov ebx, 0x49aea4
call fcn.00420ca0
mov eax, esi
call fcn.00447260
mov ebx, 0x10
mov eax, dword [edi]
mov byte [eax + 7], 8
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00470886
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x14]
add esp, 4
mov eax, 3
jmp case.0x4274f7.67
mov eax, dword [esp + 0x1c]
mov edx, dword [eax + 8]
mov esi, dword [esp + 0x10]
mov dword [edx + 8], 0
add dword [eax + 8], ebx
mov edi, eax
mov eax, 3
jmp case.0x4274f7.67
mov edx, dword [edi + 8]
mov dword [edx], ecx
mov dword [edx + 8], 2
jmp 0x4277db
cmp dword [esp + 0x5c], 0
je case.0x42721f.112
mov ecx, dword [esp + 0x20]
cmp dword [ecx], 0
je case.0x42721f.112
push 0xa
push 0
mov ebx, edi
call fcn.00421050
mov edx, dword [esp + 0x28]
mov ebx, dword [edx]
add esp, 8
mov esi, edi
call fcn.00420ca0
mov esi, dword [esp + 0x1c]
mov edi, 0x49af84
mov eax, 0xfffffffe
call fcn.004211d0
mov eax, dword [esp + 0x10]
add dword [esp + 0x14], 4
add eax, 4
mov dword [esp + 0x10], eax
mov eax, dword [eax]
mov edx, esi
call fcn.0042dbc0
mov ebx, 0x10
mov edi, esi
mov esi, dword [esp + 0x10]
lea eax, [ebx - 0xd]
jmp case.0x4274f7.67
mov ecx, dword [esi + 4]
add edx, 4
add esi, 4
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], esi
test ecx, ecx
jne 0x42732f
mov ecx, dword [edi + 8]
mov dword [ecx + 8], 0
jmp 0x4277db
mov ecx, dword [edi + 8]
add edx, 4
add esi, 4
mov dword [esp + 0x14], edx
movsx edx, word [esi]
mov dword [esp + 0x18], edx
mov dword [ecx + 8], eax
fild dword [esp + 0x18]
fstp qword [ecx]
jmp 0x4277d7
mov ecx, dword [edi + 8]
add edx, 4
add esi, 4
mov dword [esp + 0x14], edx
movzx edx, word [esi]
mov dword [esp + 0x18], edx
mov dword [ecx + 8], eax
fild dword [esp + 0x18]
fstp qword [ecx]
jmp 0x4277d7
mov ecx, dword [edi + 8]
add edx, 4
add esi, 4
mov dword [esp + 0x14], edx
movsx edx, byte [esi]
mov dword [esp + 0x18], edx
mov dword [ecx + 8], eax
fild dword [esp + 0x18]
fstp qword [ecx]
jmp 0x4277d7
mov ecx, dword [edi + 8]
add edx, 4
add esi, 4
mov dword [esp + 0x14], edx
movzx edx, byte [esi]
mov dword [esp + 0x18], edx
mov dword [ecx + 8], eax
fild dword [esp + 0x18]
fstp qword [ecx]
jmp 0x4277d7
fild qword [edx + 8]
mov ecx, dword [edi + 8]
add edx, 8
mov dword [esp + 0x14], edx
fstp qword [ecx]
add esi, 8
mov dword [ecx + 8], eax
jmp 0x4277d7
mov eax, dword [esp + 0x14]
add eax, 8
mov dword [esp + 0x14], eax
add esi, 8
jmp 0x427765
mov ecx, dword [edi + 8]
fld dword [esi + 4]
add edx, 4
fstp qword [ecx]
add esi, 4
mov dword [esp + 0x14], edx
mov dword [ecx + 8], eax
jmp 0x4277d7
mov ecx, dword [edi + 8]
fld qword [edx + 8]
add edx, 8
fstp qword [ecx]
mov dword [esp + 0x14], edx
add esi, 8
mov dword [ecx + 8], eax
jmp 0x4277d7
mov ecx, dword [edi + 8]
add edx, 4
mov dword [esp + 0x14], edx
xor edx, edx
add esi, 4
cmp dword [esi], edx
setne dl
jmp 0x4277ce
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x34]
movzx ecx, byte [ecx + edx]
inc dword [esp + 0x3c]
add ecx, 0xffffffbe
cmp ecx, 0x37
ja case.0x4274f7.67
movzx ecx, byte [ecx + 0x427efc]
jmp dword [ecx*4 + 0x427ebc]
add dword [esp + 0x14], 4
mov edx, dword [esi + 4]
fild dword [edx]
mov ecx, dword [edi + 8]
add esi, 4
mov dword [ecx + 8], eax
fstp qword [ecx]
jmp 0x4277d7
add dword [esp + 0x14], 4
mov edx, dword [esi + 4]
mov edx, dword [edx]
add esi, 4
mov dword [esp + 0x44], edx
fild dword [esp + 0x44]
jmp 0x42724f
mov eax, dword [esp + 0x10]
mov ebx, dword [eax + 4]
add dword [esp + 0x14], 4
add eax, 4
mov esi, edi
mov dword [esp + 0x10], eax
call fcn.00420ca0
mov esi, dword [esp + 0x10]
mov ebx, 0x10
lea eax, [ebx - 0xd]
jmp case.0x4274f7.67
mov ecx, dword [esi + 4]
add dword [esp + 0x14], 4
add esi, 4
push 0xfde9
lea eax, [esp + 0x70]
push eax
push ecx
or edi, 0xffffffff
mov dword [esp + 0x1c], esi
call fcn.00433020
add esp, 0xc
mov dword [esp + 0x18], eax
test eax, eax
je 0x4275ea
mov edx, dword [esp + 0x6c]
mov esi, dword [esp + 0x1c]
push edx
push eax
call fcn.00420bb0
mov edi, dword [esi + 8]
sub edi, ebx
add esp, 8
cmp dword [edi + 8], 4
jne 0x4275cb
mov eax, dword [edi]
test byte [eax + 7], 0x10
je 0x4275c5
mov ebx, 0x49aea4
call fcn.00420ca0
mov eax, esi
call fcn.00447260
mov ebx, 0x10
mov ecx, dword [edi]
mov byte [ecx + 7], 8
mov edx, dword [esp + 0x18]
push edx
call fcn.00470886
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x14]
add esp, 4
mov eax, 3
jmp case.0x4274f7.67
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 8]
mov esi, dword [esp + 0x10]
mov dword [ecx + 8], 0
add dword [eax + 8], ebx
mov edi, eax
mov eax, 3
jmp case.0x4274f7.67
cmp dword [esp + 0x5c], 0
je 0x427675
mov edx, dword [esp + 0x20]
cmp dword [edx], 0
je 0x427675
push 0xa
push 0
mov ebx, edi
call fcn.00421050
mov eax, dword [esp + 0x28]
mov ebx, dword [eax]
add esp, 8
mov esi, edi
call fcn.00420ca0
mov esi, dword [esp + 0x1c]
mov edi, 0x49af84
mov eax, 0xfffffffe
call fcn.004211d0
mov eax, dword [esp + 0x10]
add dword [esp + 0x14], 4
add eax, 4
mov dword [esp + 0x10], eax
mov eax, dword [eax]
mov edx, esi
call fcn.0042dbc0
mov ebx, 0x10
mov edi, esi
mov esi, dword [esp + 0x10]
lea eax, [ebx - 0xd]
jmp case.0x4274f7.67
mov edx, dword [esi + 4]
add dword [esp + 0x14], 4
add esi, 4
mov eax, edi
mov dword [esp + 0x10], esi
call fcn.00420e00
mov eax, 3
jmp case.0x4274f7.67
mov ecx, dword [esi + 4]
mov edx, dword [ecx]
add dword [esp + 0x14], 4
add esi, 4
mov eax, edi
mov dword [esp + 0x10], esi
call fcn.00420e00
mov eax, 3
jmp case.0x4274f7.67
add dword [esp + 0x14], 4
mov edx, dword [esi + 4]
movsx edx, byte [edx]
mov ecx, dword [edi + 8]
add esi, 4
mov dword [esp + 0x18], edx
mov dword [ecx + 8], eax
fild dword [esp + 0x18]
fstp qword [ecx]
jmp 0x4277d7
add dword [esp + 0x14], 4
mov edx, dword [esi + 4]
movzx edx, byte [edx]
mov ecx, dword [edi + 8]
add esi, 4
mov dword [esp + 0x18], edx
mov dword [ecx + 8], eax
fild dword [esp + 0x18]
fstp qword [ecx]
jmp 0x4277d7
add dword [esp + 0x14], 4
mov edx, dword [esi + 4]
movsx edx, word [edx]
mov ecx, dword [edi + 8]
add esi, 4
mov dword [esp + 0x18], edx
mov dword [ecx + 8], eax
fild dword [esp + 0x18]
fstp qword [ecx]
jmp 0x4277d7
add dword [esp + 0x14], 4
mov edx, dword [esi + 4]
movzx edx, word [edx]
mov ecx, dword [edi + 8]
add esi, 4
mov dword [esp + 0x18], edx
mov dword [ecx + 8], eax
fild dword [esp + 0x18]
fstp qword [ecx]
jmp 0x4277d7
add dword [esp + 0x14], 4
mov edx, dword [esi + 4]
fild qword [edx]
mov ecx, dword [edi + 8]
add esi, 4
mov dword [ecx + 8], eax
fstp qword [ecx]
jmp 0x4277d7
add dword [esp + 0x14], 4
mov eax, dword [esi + 4]
add esi, 4
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
mov eax, edi
mov dword [esp + 0x18], esi
call fcn.00434050
add esp, 8
mov eax, 3
jmp case.0x4274f7.67
add dword [esp + 0x14], 4
mov edx, dword [esi + 4]
mov ecx, dword [edi + 8]
fld dword [edx]
add esi, 4
fstp qword [ecx]
mov dword [ecx + 8], eax
jmp 0x4277d7
add dword [esp + 0x14], 4
mov edx, dword [esi + 4]
mov ecx, dword [edi + 8]
fld qword [edx]
add esi, 4
fstp qword [ecx]
mov dword [ecx + 8], eax
jmp 0x4277d7
mov ecx, dword [edi + 8]
mov edx, dword [esi + 4]
add dword [esp + 0x14], 4
add esi, 4
mov dword [esp + 0x18], ecx
xor ecx, ecx
cmp dword [edx], ecx
setne cl
mov edx, ecx
mov ecx, dword [esp + 0x18]
mov dword [ecx + 8], 1
mov dword [ecx], edx
mov dword [esp + 0x10], esi
add dword [edi + 8], ebx
mov ecx, dword [esp + 0x34]
add dword [esp + 0x20], 4
inc ecx
mov dword [esp + 0x34], ecx
mov cl, byte [ecx]
test cl, cl
jne 0x427205
mov ebx, dword [esp + 0x38]
test ebx, ebx
jne 0x427802
xor edx, edx
jmp 0x427810
mov eax, ebx
mov ecx, edi
call fcn.00420290
sub eax, dword [edi + 0x20]
mov edx, eax
mov ecx, dword [esp + 0x40]
mov eax, dword [edi + 8]
mov esi, dword [esp + 0x3c]
inc ecx
shl ecx, 4
sub eax, ecx
mov dword [esp + 0x48], eax
sub eax, dword [edi + 0x20]
mov dword [esp + 0x4c], esi
push eax
lea eax, [esp + 0x4c]
push eax
push 0x421670
mov eax, edi
call fcn.00445dc0
add esp, 0xc
cmp esi, 0xffffffff
jne 0x427854
mov ecx, dword [edi + 0x14]
mov edx, dword [edi + 8]
cmp edx, dword [ecx + 8]
jb 0x427854
mov dword [ecx + 8], edx
test eax, eax
je 0x4278ad
push ebx
push 0x49b42c
mov ebx, edi
call fcn.00422180
mov eax, dword [esp + 0x2c]
mov ecx, eax
xor edx, edx
add esp, 8
shl ecx, 4
cmp eax, edx
jl 0x4278a2
mov esi, dword [edi + 0xc]
add esi, ecx
cmp dword [edi + 8], esi
jae 0x427895
mov esi, dword [edi + 8]
mov dword [esi + 8], edx
add dword [edi + 8], 0x10
mov esi, dword [edi + 0xc]
add esi, ecx
cmp dword [edi + 8], esi
jb 0x427881
mov edx, dword [edi + 0xc]
add edx, ecx
mov dword [edi + 8], edx
jmp 0x427c29
add ecx, 0x10
add dword [edi + 8], ecx
jmp 0x427c29
mov ebx, dword [esp + 0x58]
cmp ebx, 0x76
je 0x427a82
mov eax, dword [esp + 0x3c]
mov esi, eax
dec eax
neg esi
mov dword [esp + 0x3c], eax
mov eax, esi
mov ecx, edi
call fcn.00420290
cmp ebx, 0x74
jne 0x4279b4
mov edx, dword [eax]
mov ecx, dword [edi + 8]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
add dword [edi + 8], 0x10
mov eax, dword [edi + 8]
add eax, 0xfffffff0
cmp eax, 0x4990e8
je 0x42794b
cmp dword [eax + 8], 5
jne 0x42794b
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
lea ecx, [esp + 0x54]
push ecx
push edi
mov dword [esp + 0x5c], ebx
call fcn.0042b040
add esp, 0x18
cmp eax, 0x40
jg 0x42794d
push ebx
push ebx
push ebx
lea edx, [esp + 0x34]
push edx
lea eax, [esp + 0x64]
push eax
push edi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x6c], ebx
call fcn.0042b040
add esp, 0x18
add dword [edi + 8], 0xfffffff0
jmp 0x427a82
xor ebx, ebx
mov eax, esi
mov ecx, edi
call fcn.00420290
mov ecx, dword [eax + 8]
cmp ecx, 6
jne 0x42796d
mov edx, dword [eax]
cmp byte [edx + 7], 0
je 0x427980
mov ecx, 0x49c324
jmp 0x427995
cmp ecx, 7
jne 0x427980
mov edx, dword [eax]
cmp dword [edx + 8], ebx
jne 0x427980
mov ecx, 0x49b9c0
jmp 0x427995
cmp eax, 0x4990e8
jne 0x42798e
mov ecx, 0x49ae98
jmp 0x427995
mov ecx, dword [ecx*4 + 0x498e54]
push ecx
push 0x49b480
push edi
call fcn.004237c0
mov ecx, dword [esp + 0x30]
add esp, 0xc
mov eax, edi
call fcn.004203c0
jmp 0x427c25
cmp eax, 0x4990e8
jne 0x4279c0
or eax, 0xffffffff
jmp 0x4279c3
mov eax, dword [eax + 8]
dec eax
je 0x427a6f
sub eax, 2
je 0x427a2b
sub eax, 4
jne 0x427a1b
push 0x49a760
push 0x49a768
mov eax, esi
mov ecx, edi
call fcn.00423be0
add esp, 8
test eax, eax
je 0x427a1b
mov eax, esi
mov ecx, edi
call fcn.00420290
cmp dword [eax + 8], 7
jne 0x427a0e
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
add eax, 0x18
mov dword [esp + 0x28], ecx
mov edx, dword [eax + 4]
jmp 0x427a7e
xor eax, eax
mov ecx, dword [eax]
mov dword [esp + 0x28], ecx
mov edx, dword [eax + 4]
jmp 0x427a7e
push 0
push 1
push esi
push edi
call fcn.004258b0
add esp, 0x10
jmp 0x427a79
cmp ebx, 0x69
jne 0x427a39
push esi
push edi
call fcn.00420700
jmp 0x427a76
mov eax, esi
mov ecx, edi
call fcn.004206b0
cmp ebx, 0x64
jne 0x427a4d
fstp qword [esp + 0x28]
jmp 0x427a82
cmp ebx, 0x66
jne 0x427a68
mov ecx, dword [esp + 0x4c]
fstp dword [esp + 0x48]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
jmp 0x427a82
call fcn.0048d8a6
jmp 0x427a7a
push esi
push edi
call fcn.00420770
add esp, 8
cdq
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], edx
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x427c25
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x18]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x18], eax
mov al, byte [edx]
mov dword [esp + 0x34], edx
test al, al
je 0x427c25
mov edx, dword [ebp + 0xc]
add edx, 0xfffffffc
neg ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x40], ecx
movzx eax, al
add eax, 0xffffffda
cmp eax, 0x53
ja case.0x427acb.39
movzx eax, byte [eax + 0x427f44]
jmp dword [eax*4 + 0x427f34]
add dword [esp + 0x10], 4
jmp case.0x427b0b.67
add dword [esp + 0x10], 8
jmp case.0x427b0b.67
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x18]
mov ebx, eax
inc eax
mov dword [esp + 0x40], eax
movsx eax, byte [ecx]
add eax, 0xffffffbe
cmp eax, 0x37
ja case.0x427b0b.67
movzx edx, byte [eax + 0x427fcc]
jmp dword [edx*4 + 0x427f98]
push ebx
push edi
call fcn.00420700
jmp 0x427df2
push 0
push 1
push ebx
push edi
call fcn.004258b0
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx + 4]
add esp, 0x10
add ecx, 4
mov dword [esp + 0x10], ecx
mov dword [edx], eax
jmp case.0x427b0b.67
mov eax, ebx
mov ecx, edi
call fcn.00420290
mov ecx, dword [eax + 8]
cmp ecx, 4
je 0x427b96
cmp ecx, 7
jne 0x427b64
mov ecx, dword [eax]
cmp dword [ecx + 8], 0
jne 0x427b64
lea esi, [ecx + 0x18]
jmp 0x427b9b
mov esi, eax
call fcn.00437e00
test eax, eax
je 0x427c6d
mov esi, dword [esp + 0x1c]
mov eax, dword [esi + 0x10]
mov ecx, dword [eax + 0x48]
cmp ecx, dword [eax + 0x44]
jb 0x427b89
mov eax, esi
call fcn.00437bd0
mov eax, ebx
mov ecx, esi
call fcn.00420290
mov edi, dword [esp + 0x1c]
mov esi, dword [eax]
add esi, 0x10
test esi, esi
je case.0x427b0b.115
mov eax, ebx
mov ecx, edi
call fcn.004205b0
test eax, eax
je case.0x427b0b.115
mov eax, ebx
mov ecx, edi
call fcn.004207b0
test al, 0x10
jne case.0x427b0b.115
lea edx, [esp + 0x64]
push 0xfde9
push edx
or edi, 0xffffffff
mov ebx, esi
call fcn.00433090
mov esi, eax
add esp, 8
test esi, esi
je 0x427c0a
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x10]
add eax, 4
lea edx, [ecx + ecx]
push edx
mov dword [esp + 0x14], eax
mov eax, dword [eax]
push esi
push eax
call fcn.0047b7a0
add esp, 0xc
push esi
call fcn.00470886
add esp, 4
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x34]
inc dword [esp + 0x18]
inc eax
mov dword [esp + 0x34], eax
mov al, byte [eax]
test al, al
jne 0x427ab9
mov eax, dword [esp + 0x24]
xor ecx, ecx
cmp eax, ecx
jl 0x427e09
mov edx, dword [edi + 0xc]
shl eax, 4
add edx, eax
cmp dword [edi + 8], edx
jae 0x427c54
mov edx, dword [edi + 8]
mov dword [edx + 8], ecx
add dword [edi + 8], 0x10
mov edx, dword [edi + 0xc]
add edx, eax
cmp dword [edi + 8], edx
jb 0x427c40
mov ecx, dword [edi + 0xc]
add ecx, eax
mov dword [edi + 8], ecx
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov edi, dword [esp + 0x1c]
push ebx
lea ebx, [esp + 0x6c]
mov eax, edi
call fcn.00420a70
mov edx, dword [esp + 0x6c]
mov ecx, dword [esp + 0x14]
add esp, 4
push edx
add ecx, 4
push eax
mov eax, dword [ecx]
push eax
mov dword [esp + 0x1c], ecx
call fcn.0047b7a0
add esp, 0xc
jmp case.0x427b0b.67
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
add eax, 4
mov dword [esp + 0x10], eax
mov dword [esp + 0x58], ecx
mov eax, ebx
mov ecx, edi
call fcn.00420550
cmp eax, 5
jne case.0x427b0b.67
mov eax, ebx
mov esi, edi
call fcn.00420530
mov ecx, edi
call fcn.0042a320
mov esi, dword [esp + 0x58]
push eax
push 0
push esi
call fcn.004783d0
add esp, 0xc
mov eax, esi
mov edx, edi
call fcn.0042b010
add dword [edi + 8], 0xfffffff0
jmp case.0x427b0b.67
push ebx
push edi
call fcn.00420700
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 4]
add esp, 8
add ecx, 4
mov dword [esp + 0x10], ecx
mov byte [edx], al
jmp case.0x427b0b.67
push ebx
push edi
call fcn.00420700
mov ecx, dword [esp + 0x18]
add esp, 8
add ecx, 4
mov dword [esp + 0x10], ecx
mov ecx, dword [ecx]
mov word [ecx], ax
jmp case.0x427b0b.67
push 0x49a760
push 0x49a768
mov eax, ebx
mov ecx, edi
call fcn.00423be0
add esp, 8
test eax, eax
je case.0x427b0b.108
mov eax, ebx
mov ecx, edi
call fcn.00420b70
mov ecx, dword [esp + 0x10]
mov edx, dword [eax]
mov eax, dword [eax + 4]
add ecx, 4
mov dword [esp + 0x10], ecx
mov ecx, dword [ecx]
mov dword [ecx], edx
mov dword [ecx + 4], eax
jmp case.0x427b0b.67
mov eax, ebx
mov ecx, edi
call fcn.004206b0
call fcn.0048d8a6
mov ecx, dword [esp + 0x10]
add ecx, 4
mov dword [esp + 0x10], ecx
mov ecx, dword [ecx]
mov dword [ecx], eax
mov dword [ecx + 4], edx
jmp case.0x427b0b.67
mov eax, ebx
mov ecx, edi
call fcn.004206b0
fstp qword [esp + 0x48]
mov eax, dword [esp + 0x10]
mov edx, dword [eax + 4]
add eax, 4
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x48]
mov dword [edx], eax
jmp case.0x427b0b.67
mov eax, ebx
mov ecx, edi
call fcn.004206b0
fstp qword [esp + 0x48]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
add eax, 4
mov dword [esp + 0x10], eax
mov eax, dword [eax]
mov dword [eax], ecx
mov dword [eax + 4], edx
jmp case.0x427b0b.67
push ebx
push edi
call fcn.00420770
mov ecx, dword [esp + 0x18]
add esp, 8
add ecx, 4
mov dword [esp + 0x10], ecx
mov ecx, dword [ecx]
mov dword [ecx], eax
jmp case.0x427b0b.67
shl eax, 4
add eax, 0x10
add dword [edi + 8], eax
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8