Function at 0x426600
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x74
mov edx, dword [esp + 0x78]
push ebx
push ebp
push esi
mov ebp, dword [edx]
lea eax, [edx + 0x148]
mov dword [esp + 0x48], eax
push edi
mov dword [esp + 0x3c], ebp
mov eax, dword [ebp]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x8c]
mov ebx, dword [ebp + 8]
mov dword [esp + 0x44], ebx
lea esi, [eax + eax*4]
shl esi, 4
add esi, edx
mov dword [esp + 0x14], esi
mov edi, dword [esi + 0x320]
lea eax, [esi + 0x2e0]
mov dword [esp + 0x20], eax
movzx eax, byte [esi + 0x30c]
mov dword [esp + 0x80], edi
lea ecx, [eax + eax*4]
mov eax, dword [edx + 4]
mov edx, dword [edx + 0x44]
add eax, 8
shl ecx, 4
add eax, ecx
mov dword [esp + 0x6c], eax
mov eax, dword [eax + 0x30]
mov dword [esp + 0x18], eax
xor eax, eax
test edx, edx
jle 0x42669e
mov ecx, dword [esp + 0x88]
add ecx, 0x48
mov ebp, dword [esp + 0x18]
cmp dword [ecx], ebp
mov ebp, dword [esp + 0x3c]
je 0x4267f3
inc eax
add ecx, 4
cmp eax, edx
jl 0x426686
xor ecx, ecx
xor edx, edx
not ecx
not edx
and ecx, dword [esp + 0x90]
and edx, dword [esp + 0x94]
mov dword [esi + 0x328], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esi + 0x32c], edx
mov esi, dword [esp + 0x88]
mov eax, dword [esi + 0x18]
mov edx, dword [esi + 0x1c]
call fcn.004bffa0
and eax, 1
test byte [edi + 0x24], 0x40
mov dword [esp + 0x1c], eax
je 0x4266f4
test byte [esi + 0x22], 0x20
mov dword [esp + 0x70], 1
je 0x4266fc
mov dword [esp + 0x70], 0
push ebx
call fcn.0047e6d0
mov esi, eax
mov eax, dword [esp + 0x18]
push ebx
mov dword [esp + 0x68], esi
mov dword [eax + 0x2f0], esi
mov dword [eax + 0x2ec], esi
call fcn.0047e6d0
mov ecx, eax
add esp, 8
mov eax, dword [esp + 0x14]
mov dword [esp + 0x68], ecx
cmp byte [eax + 0x30c], 0
mov dword [eax + 0x2f8], ecx
jbe 0x4267ab
mov ecx, dword [esp + 0x6c]
test byte [ecx + 0x24], 8
je 0x4267ab
mov eax, dword [ebp + 0x48]
mov ecx, dword [esp + 0x20]
inc eax
mov dword [ebp + 0x48], eax
mov dword [esp + 0x78], eax
mov dword [ecx], eax
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
mov dword [esp + 0x7c], ecx
cmp dword [eax + 0x54], ecx
jg 0x426777
push 1
push ebx
call fcn.00435e50
add esp, 8
test eax, eax
jne 0x4267ab
mov ecx, dword [esp + 0x7c]
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
inc dword [ebx + 0x20]
mov edx, dword [esp + 0x78]
mov word [eax + ecx*4], 0x19
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x6c]
mov eax, dword [edx + 0x28]
mov dword [esp + 0x7c], eax
test al, 4
je 0x426853
push dword [edx + 0x18]
mov edi, dword [edx + 0x1c]
push 0
push edi
push 0x14
push ebx
call fcn.004752e0
mov eax, dword [ebx + 0x18]
add esp, 0x14
mov esi, dword [ebx + 0x20]
cmp dword [eax + 0x54], esi
jg 0x42680d
push 1
push ebx
call fcn.00435e50
add esp, 8
test eax, eax
je 0x42680d
mov esi, 1
jmp 0x42683d
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4266a2
mov eax, dword [ebx + 4]
lea ecx, [esi + esi*4]
inc dword [ebx + 0x20]
mov edx, dword [esp + 0x60]
mov word [eax + ecx*4], 0x16
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x14]
mov dword [eax + 0x314], esi
mov byte [eax + 0x30d], 0x10
jmp 0x427d08
mov edx, dword [edi + 0x24]
test edx, 0x400
je 0x426ad7
movzx eax, word [edi + 0x28]
inc dword [ebp + 0x64]
mov ecx, dword [ebp + 0x38]
mov edx, dword [ebp + 0x3c]
lea esi, [eax + 2]
mov dword [esp + 0x48], eax
mov dword [esp + 0x6c], esi
mov dword [esp + 0x40], edx
cmp esi, ecx
jg 0x42688f
lea eax, [esi + edx]
sub ecx, esi
mov dword [ebp + 0x3c], eax
mov dword [ebp + 0x38], ecx
jmp 0x42689e
mov eax, dword [ebp + 0x48]
lea edx, [eax + 1]
add eax, esi
mov dword [esp + 0x40], edx
mov dword [ebp + 0x48], eax
mov eax, dword [esp + 0x14]
xor esi, esi
mov eax, dword [eax + 0x2ec]
mov dword [esp + 0x70], eax
cmp dword [esp + 0x48], esi
jbe 0x426911
mov ebx, dword [esp + 0x48]
lea ecx, [edx + 2]
mov dword [esp + 0x74], ecx
nop
mov eax, dword [edi + 0x30]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x426908
add ecx, esi
test byte [eax + 0x12], 1
push ecx
je 0x4268f6
push dword [esp + 0x20]
push esi
push dword [esp + 0x2c]
push eax
push ebp
call fcn.00426080
mov eax, dword [esp + 0x2c]
add esp, 0x18
mov eax, dword [eax + 0x2f0]
mov dword [esp + 0x70], eax
jmp 0x426904
mov eax, dword [eax]
push dword [eax + 0x10]
push ebp
call fcn.004547e0
add esp, 0xc
mov ecx, dword [esp + 0x74]
inc esi
cmp esi, ebx
jl 0x4268c0
mov ebx, dword [esp + 0x44]
mov eax, dword [edi + 0x18]
mov esi, dword [ebx + 0x20]
mov ecx, esi
mov dword [esp + 0x7c], eax
mov eax, dword [ebx + 0x18]
cmp dword [eax + 0x54], esi
jg 0x426937
push 1
push ebx
call fcn.00435e50
add esp, 8
test eax, eax
jne 0x42696e
mov ecx, dword [ebx + 0x20]
mov edx, dword [esp + 0x7c]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
lea ecx, [esi + esi*4]
mov eax, dword [ebx + 4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x40]
mov word [eax + ecx*4], 0x19
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
mov esi, dword [ebx + 0x20]
mov ecx, esi
cmp dword [eax + 0x54], esi
jg 0x42698d
push 1
push ebx
call fcn.00435e50
add esp, 8
test eax, eax
jne 0x4269c5
mov ecx, dword [ebx + 0x20]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
lea ecx, [esi + esi*4]
mov eax, dword [ebx + 4]
mov word [eax + ecx*4], 0x19
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 0xc], 0
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x48]
mov dword [ecx + 0x10], 0
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x40]
inc eax
mov dword [ecx + 8], eax
cmp byte [edi + 0x1c], 0
mov ecx, 0xfffffff5
mov esi, dword [ebx + 0x20]
mov eax, 0xfffffffe
cmovne eax, ecx
mov ecx, esi
mov dword [esp + 0x7c], eax
mov eax, dword [edi + 0x20]
mov dword [esp + 0x78], eax
mov eax, dword [ebx + 0x18]
cmp dword [eax + 0x54], esi
jg 0x426a07
push 1
push ebx
call fcn.00435e50
add esp, 8
test eax, eax
je 0x426a04
mov esi, 1
jmp 0x426a3e
mov ecx, dword [ebx + 0x20]
mov edx, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
lea ecx, [esi + esi*4]
mov eax, dword [ebx + 4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x70]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x40]
mov word [eax + ecx*4], 0xe
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push dword [esp + 0x7c]
push dword [esp + 0x7c]
push esi
push ebx
call fcn.004756a0
xor esi, esi
mov byte [edi + 0x1c], 0
add esp, 0x10
cmp dword [esp + 0x48], esi
jbe 0x426a8d
mov ebp, dword [esp + 0x20]
cmp esi, 0x10
jae 0x426a89
mov ax, word [edi + 0x1e]
mov cx, si
shr ax, cl
test al, 1
je 0x426a82
mov eax, dword [edi + 0x30]
push dword [eax + esi*4]
push ebp
call fcn.0042b660
add esp, 8
inc esi
cmp esi, dword [esp + 0x48]
jl 0x426a60
mov ebp, dword [esp + 0x3c]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x6c]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x40]
push edi
mov byte [ecx + 0x30d], 0x97
mov dword [ecx + 0x310], eax
mov eax, dword [ebx + 0x20]
push esi
push ebp
mov dword [ecx + 0x314], eax
call fcn.00454570
add esp, 0xc
cmp edi, dword [ebp + 0x38]
jle 0x426ac9
mov dword [ebp + 0x38], edi
mov dword [ebp + 0x3c], esi
push ebp
call fcn.00454520
add esp, 4
jmp 0x427d08
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x426baf
mov eax, dword [edi + 0x30]
mov eax, dword [eax]
inc dword [ebp + 0x48]
mov edi, dword [ebp + 0x48]
push edi
push dword [esp + 0x20]
push 0
push dword [esp + 0x2c]
push eax
push ebp
call fcn.00426080
mov esi, eax
add esp, 0x18
cmp esi, edi
je 0x426b1c
push edi
push ebp
call fcn.0046a780
add esp, 8
mov eax, dword [esp + 0x14]
mov edi, dword [ebx + 0x20]
mov eax, dword [eax + 0x2f0]
mov dword [esp + 0x74], eax
mov eax, dword [ebx + 0x18]
cmp dword [eax + 0x54], edi
jg 0x426b44
push 1
push ebx
call fcn.00435e50
add esp, 8
test eax, eax
jne 0x426b76
mov eax, dword [ebx + 4]
lea ecx, [edi + edi*4]
inc dword [ebx + 0x20]
mov edx, dword [esp + 0x74]
mov word [eax + ecx*4], 0x26
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x426b7a
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0x18]
push esi
push edx
push edi
push 0x46
push ebx
call fcn.004752e0
push 1
push esi
push ebp
call fcn.00454570
push esi
push 0xffffffffffffffff
push edi
push ebp
call fcn.004545d0
mov eax, dword [esp + 0x44]
add esp, 0x30
mov byte [eax + 0x30d], 0x9c
jmp 0x427d08
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x426d76
xor ecx, ecx
mov dword [esp + 0x64], 0x9c
xor eax, eax
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], ecx
test dl, 0x20
je 0x426bf3
mov eax, dword [edi + 0x30]
mov dword [esp + 0x74], 4
mov ecx, dword [eax]
xor eax, eax
mov dword [esp + 0x70], ecx
jmp 0x426bf7
mov dword [esp + 0x74], eax
test dl, 0x10
je 0x426c06
mov eax, dword [edi + 0x30]
mov edx, dword [esp + 0x74]
mov eax, dword [edx + eax]
mov edi, ecx
mov ecx, dword [esp + 0x1c]
test ecx, ecx
cmove edi, eax
cmove eax, dword [esp + 0x70]
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], eax
test eax, eax
je 0x426c87
mov edi, dword [eax]
lea eax, [esp + 0x7c]
push eax
mov dword [esp + 0x54], 0x403e3f41
push dword [edi + 0x10]
push ebp
call fcn.00456730
mov edx, dword [esp + 0x6c]
mov esi, eax
movzx eax, byte [edi]
push esi
push edx
push dword [esp + 0x2c]
movzx eax, byte [esp + eax + 0x18]
push eax
push ebx
call fcn.004752e0
push 1
push esi
push ebp
call fcn.00454570
push dword [esp + 0xa8]
push ebp
call fcn.0046a780
push dword [esp + 0xac]
push dword [esp + 0x58]
call fcn.0042b660
mov edi, dword [esp + 0xb0]
add esp, 0x3c
jmp 0x426ca5
push esi
push dword [esp + 0x1c]
test ecx, ecx
mov edx, 0x69
mov eax, 0x6c
cmovne eax, edx
push eax
push ebx
call fcn.004752c0
add esp, 0x10
test edi, edi
je 0x426cfc
mov esi, dword [edi]
inc dword [ebp + 0x48]
mov eax, dword [ebp + 0x48]
push eax
push dword [esi + 0x10]
mov dword [esp + 0x74], eax
push ebp
call fcn.004547e0
mov al, byte [esi]
add esp, 0xc
cmp al, 0x52
je 0x426cdd
cmp al, 0x50
je 0x426cdd
mov eax, dword [esp + 0x1c]
lea esi, [eax*2 + 0x50]
mov dword [esp + 0x64], esi
jmp 0x426cef
mov eax, dword [esp + 0x1c]
xor eax, 1
lea eax, [eax*2 + 0x51]
mov dword [esp + 0x64], eax
push edi
push dword [esp + 0x24]
call fcn.0042b660
add esp, 8
cmp dword [esp + 0x1c], 0
mov edx, dword [esp + 0x14]
mov ecx, dword [ebx + 0x20]
sete al
mov edi, dword [esp + 0x64]
add al, 8
mov byte [edx + 0x30d], al
mov eax, dword [esp + 0x18]
mov dword [edx + 0x310], eax
mov dword [edx + 0x314], ecx
cmp edi, 0x9c
je 0x427d08
inc dword [ebp + 0x48]
mov esi, dword [ebp + 0x48]
push esi
push eax
push 0x67
push ebx
call fcn.004752c0
push esi
push 0xffffffffffffffff
push dword [esp + 0x30]
push ebp
call fcn.004545d0
push esi
push dword [esp + 0x84]
push dword [esp + 0x94]
push edi
push ebx
call fcn.004752e0
push 0x53
push ebx
call fcn.00475780
add esp, 0x3c
jmp 0x427d08
test edx, 0x200
je 0x4273ff
mov esi, dword [esp + 0x14]
movzx ecx, word [edi + 0x18]
mov eax, dword [edi + 0x1c]
mov dword [esp + 0x60], ecx
mov esi, dword [esi + 0x2e8]
mov dword [esp + 0x34], esi
mov esi, dword [esp + 0x88]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov byte [esp + 0x54], 0
test byte [esi + 0x22], 1
mov byte [esp + 0x28], 0
mov byte [esp + 0x13], 0
mov dword [esp + 0x48], eax
je 0x426de3
cmp byte [esi + 0x24], 0
jle 0x426de3
cmp word [eax + 0x2e], cx
jbe 0x426de3
mov byte [esp + 0x28], 1
mov eax, 1
jmp 0x426de5
xor eax, eax
movzx esi, cx
mov ecx, esi
test dl, 0x20
je 0x426dff
mov eax, dword [edi + 0x30]
mov eax, dword [eax + ecx*4]
inc ecx
mov dword [esp + 0x2c], eax
mov eax, 1
test dl, 0x10
je 0x426ea4
mov eax, dword [edi + 0x30]
mov dword [esp + 0x64], 1
mov eax, dword [eax + ecx*4]
mov ecx, 0x100
mov dword [esp + 0x30], eax
test word [eax + 0x14], cx
je 0x426e64
mov eax, dword [ebp + 0x48]
mov ecx, dword [esp + 0x14]
inc eax
mov dword [ebp + 0x48], eax
push eax
mov dword [ecx + 0x304], eax
xor ecx, ecx
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + 0x1c]
cmp byte [esi + eax], 1
sete cl
xor ecx, dword [esp + 0x20]
push ecx
push 0x19
push ebx
call fcn.004752c0
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov eax, dword [ebx + 0x20]
mov dword [ecx + 0x308], eax
cmp dword [esp + 0x2c], 0
jne 0x426ea0
mov edx, dword [esp + 0x48]
mov eax, dword [edx + 4]
movsx eax, word [eax + esi*2]
test eax, eax
js 0x426ea0
lea ecx, [eax + eax*2]
mov dword [esp + 0x7c], 1
mov eax, dword [edx + 0xc]
mov edx, dword [esp + 0x28]
movzx edx, dl
mov eax, dword [eax + 4]
cmp byte [eax + ecx*8 + 0x14], 0
cmove edx, dword [esp + 0x7c]
mov dword [esp + 0x28], edx
mov eax, dword [esp + 0x64]
lea ecx, [esp + 0x40]
push ecx
push eax
push dword [esp + 0x24]
push dword [esp + 0x2c]
push ebp
call fcn.00425830
mov dword [esp + 0x38], eax
add esp, 0x14
mov eax, dword [esp + 0x40]
test eax, eax
je 0x426ece
mov al, byte [esi + eax]
mov byte [esp + 0x54], al
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x60]
mov eax, dword [eax + 0x2f0]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x48]
movzx edx, word [eax + 0x2e]
cmp cx, dx
jae 0x426f2d
mov eax, dword [eax + 0x1c]
xor ecx, ecx
cmp byte [esi + eax], cl
mov eax, dword [esp + 0x1c]
sete cl
cmp eax, ecx
je 0x426f0d
mov ecx, dword [esp + 0x60]
test eax, eax
je 0x426f33
cmp dx, cx
jne 0x426f33
mov dl, byte [esp + 0x28]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov byte [esp + 0x13], dl
xor dl, dl
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], edx
jmp 0x426f3f
mov eax, dword [esp + 0x1c]
jmp 0x426f04
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x426f51
test byte [eax + 0x12], 0x28
mov dword [esp + 0x5c], 0
je 0x426f59
mov dword [esp + 0x5c], 1
test ecx, ecx
je 0x426f6b
test byte [ecx + 0x12], 0x28
mov dword [esp + 0x6c], 0
je 0x426f73
mov dword [esp + 0x6c], 1
test eax, eax
jne 0x42710b
cmp word [esp + 0x60], ax
ja 0x42710b
mov dword [esp + 0x60], eax
mov dword [esp + 0x50], esi
test dl, dl
je 0x42700d
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
mov edx, ecx
mov dword [esp + 0x7c], ecx
cmp dword [eax + 0x54], ecx
jg 0x426fb9
push 1
push ebx
call fcn.00435e50
add esp, 8
test eax, eax
jne 0x426ff2
mov edx, dword [ebx + 0x20]
mov ecx, dword [esp + 0x7c]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 4]
mov word [eax + ecx*4], 0x1c
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x24]
add eax, esi
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], eax
mov dword [ecx + 0x10], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 1
mov edx, dword [esp + 0x28]
lea eax, [esi + 1]
mov dword [esp + 0x50], eax
push dword [esp + 0x40]
mov ecx, dword [esp + 0x54]
movzx eax, dl
sub ecx, eax
push ecx
push dword [esp + 0x2c]
push ebp
call fcn.00425bc0
push dword [esp + 0x60]
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x74]
push dword [esp + 0x38]
push dword [esp + 0x70]
lea eax, [ecx + eax*2]
mov ecx, dword [esp + 0x38]
push dword [esp + 0x50]
movzx eax, byte [ecx + eax*2 + 0x4eac64]
push eax
push ebx
call fcn.00475390
mov eax, dword [esp + 0x58]
add esp, 0x28
test eax, eax
je 0x4271c8
mov eax, dword [eax]
push 1
mov eax, dword [eax + 0x10]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x28]
add eax, esi
push eax
push ebp
call fcn.00454570
mov eax, dword [esp + 0x30]
add eax, esi
push eax
push dword [esp + 0x60]
push ebp
call fcn.004547e0
push dword [esp + 0x48]
push dword [esp + 0x3c]
push ebx
call fcn.0048e030
push dword [esp + 0x74]
call fcn.00454730
add esp, 0x28
test eax, eax
je 0x4270bf
push dword [esp + 0x58]
mov eax, dword [esp + 0x28]
add eax, esi
push eax
push 0x4c
push ebx
call fcn.004752c0
add esp, 0x10
push dword [esp + 0x54]
push dword [esp + 0x54]
call fcn.0044fa20
add esp, 8
cmp al, 0x41
je 0x427237
push dword [esp + 0x54]
push dword [esp + 0x54]
call fcn.00457d80
add esp, 8
test eax, eax
jne 0x427237
lea eax, [esp + 0x54]
push eax
mov eax, dword [esp + 0x28]
push 1
add eax, esi
push eax
push ebp
call fcn.00425bc0
add esp, 0x10
jmp 0x427237
mov dword [esp + 0x60], 1
mov dword [esp + 0x50], esi
test eax, eax
je 0x426f8e
mov eax, dword [eax]
mov ecx, dword [esp + 0x24]
add ecx, esi
push ecx
mov eax, dword [eax + 0x10]
push eax
push ebp
mov dword [esp + 0x70], eax
call fcn.004547e0
push dword [esp + 0x38]
push dword [esp + 0x30]
push ebx
call fcn.0048e030
mov edx, dword [esp + 0x7c]
push edx
call fcn.00454730
add esp, 0x1c
test eax, eax
je 0x42716f
push dword [esp + 0x58]
mov eax, dword [esp + 0x28]
add eax, esi
push eax
push 0x4c
push ebx
call fcn.004752c0
mov edx, dword [esp + 0x74]
add esp, 0x10
mov eax, dword [esp + 0x40]
test eax, eax
je 0x427002
movzx eax, byte [esi + eax]
push eax
push edx
call fcn.0044fa20
add esp, 8
cmp al, 0x41
mov eax, dword [esp + 0x40]
jne 0x42719c
mov byte [esi + eax], 0x41
mov byte [esp + 0x74], 0x41
jmp 0x4271a3
mov al, byte [esi + eax]
mov byte [esp + 0x74], al
push dword [esp + 0x74]
push dword [esp + 0x68]
call fcn.00457d80
add esp, 8
test eax, eax
je 0x427002
mov eax, dword [esp + 0x40]
mov byte [esi + eax], 0x41
jmp 0x427002
cmp byte [esp + 0x13], 0
je 0x427238
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
mov edx, ecx
mov dword [esp + 0x7c], ecx
cmp dword [eax + 0x54], ecx
jg 0x4271f6
push 1
push ebx
call fcn.00435e50
add esp, 8
test eax, eax
jne 0x42722f
mov edx, dword [ebx + 0x20]
mov ecx, dword [esp + 0x7c]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 4]
mov word [eax + ecx*4], 0x1c
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x24]
add eax, esi
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], eax
mov dword [ecx + 0x10], 0
mov dword [esp + 0x6c], 0
inc esi
push dword [esp + 0x40]
push dword [esp + 0x3c]
call fcn.00451330
mov ecx, dword [esp + 0x1c]
add esp, 8
mov eax, dword [ebx + 0x20]
mov dword [ecx + 0x314], eax
test esi, esi
je 0x427280
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x1c]
push esi
push dword [esp + 0x28]
push dword [esp + 0x60]
movzx eax, byte [ecx + eax*2 + 0x4eac6c]
push dword [esp + 0x40]
push eax
push ebx
call fcn.00475390
add esp, 0x18
push dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
push esi
call fcn.0042b660
push dword [esp + 0x38]
push esi
call fcn.0042b660
add esp, 0x10
cmp dword [esp + 0x70], 0
jne 0x4273a9
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 0xc]
test byte [eax + 0x2a], 0x20
jne 0x4272e8
inc dword [ebp + 0x48]
mov esi, dword [ebp + 0x48]
push esi
push dword [esp + 0x38]
push 0x70
push ebx
call fcn.004752c0
push esi
push 0xffffffffffffffff
push dword [esp + 0x30]
push ebp
call fcn.004545d0
push esi
push dword [esp + 0x3c]
push 0x42
push ebx
call fcn.004752c0
add esp, 0x30
jmp 0x4273a9
mov ecx, dword [esp + 0x34]
cmp dword [esp + 0x18], ecx
je 0x4273ad
push eax
call fcn.00469b90
mov esi, eax
mov dword [esp + 0x80], esi
movzx eax, word [esi + 0x2e]
push eax
push ebp
call fcn.0045c970
mov dword [esp + 0x80], eax
xor edx, edx
movzx eax, word [esi + 0x2e]
add esp, 0xc
xor edi, edi
mov ecx, eax
cmp dx, ax
jae 0x427387
mov ebp, esi
jmp 0x427330
mov eax, dword [esp + 0x48]
xor ecx, ecx
movzx edx, word [eax + 0x30]
test edx, edx
je 0x42735d
mov eax, dword [ebp + 4]
movzx esi, word [eax + edi*2]
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 4]
lea esp, [esp]
cmp si, word [eax]
je 0x4273c3
inc ecx
add eax, 2
cmp ecx, edx
jl 0x427350
or ecx, 0xffffffff
mov eax, dword [esp + 0x74]
add eax, edi
push eax
movsx eax, cx
push eax
push dword [esp + 0x3c]
push 0x2f
push ebx
call fcn.004752e0
movzx ecx, word [ebp + 0x2e]
inc edi
add esp, 0x14
cmp edi, ecx
jl 0x427330
mov ebp, dword [esp + 0x3c]
movzx eax, cx
push eax
push dword [esp + 0x78]
push dword [esp + 0x70]
push dword [esp + 0x24]
push 0x44
push ebx
call fcn.00475390
mov edi, dword [esp + 0x98]
add esp, 0x18
mov ecx, dword [esp + 0x34]
test dword [edi + 0x24], 0x1000
mov edx, dword [esp + 0x14]
je 0x4273c8
mov byte [edx + 0x30d], 0x9c
jmp 0x4273d8
movzx ecx, cx
jmp 0x427360
cmp dword [esp + 0x1c], 0
sete al
add al, 8
mov byte [edx + 0x30d], al
mov dword [edx + 0x310], ecx
mov al, byte [edi + 0x26]
and al, 1
mov byte [edx + 0x30e], al
test byte [edi + 0x24], 0xf
jne 0x427d08
mov byte [edx + 0x30f], 1
jmp 0x427d08
test edx, 0x2000
je 0x427cb5
mov eax, dword [ebp + 0x44]
inc dword [ebp + 0x48]
mov dword [esp + 0x78], eax
inc eax
mov dword [ebp + 0x44], eax
mov eax, dword [ebp + 0x48]
push ebx
mov dword [esp + 0x68], 0
mov dword [esp + 0x74], eax
mov dword [esp + 0x34], 0
mov dword [esp + 0x5c], 0
call fcn.0047e6d0
mov esi, dword [esp + 0x70]
add esp, 4
mov edx, dword [esp + 0x70]
mov dword [esp + 0x7c], eax
xor eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x30]
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x74], 0
mov dword [esp + 0x2c], ecx
mov eax, dword [eax]
mov dword [esp + 0x34], eax
mov eax, dword [eax + 0xc]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x14]
mov byte [eax + 0x30d], 0x12
mov dword [eax + 0x310], edx
mov eax, dword [esp + 0x88]
mov al, byte [eax + 0x29]
cmp al, 1
jbe 0x4275cd
movzx eax, al
sub eax, dword [esp + 0x8c]
dec eax
push 0
mov dword [esp + 0x84], eax
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 0x58
push ecx
push dword [esp + 0x40]
call fcn.004513e0
mov ecx, eax
add esp, 0xc
mov dword [esp + 0x28], ecx
test ecx, ecx
jne 0x4274df
mov eax, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x74
ret
mov edx, dword [esp + 0x80]
lea edi, [ecx + 8]
mov al, dl
inc al
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov ecx, 0x14
mov eax, dword [esp + 0x88]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [eax + 4]
add ecx, 8
mov dword [esp + 0x80], ecx
cmp edx, 1
jl 0x427554
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x28]
add ebx, 0x35c
add ebp, 0x58
movzx eax, byte [ebx]
lea ebx, [ebx + 0x50]
mov edi, ebp
add ebp, 0x50
lea esi, [eax + eax*4]
shl esi, 4
add esi, ecx
mov ecx, 0x14
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x80]
sub edx, 1
jne 0x427526
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0x3c]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x88]
test byte [edx + 0x22], 8
jne 0x427617
test byte [ecx + 0x2a], 0x20
jne 0x4275e0
inc dword [ebp + 0x48]
mov eax, dword [ebx + 0x18]
mov esi, dword [ebx + 0x20]
mov ecx, esi
mov edi, dword [ebp + 0x48]
mov dword [esp + 0x30], edi
cmp dword [eax + 0x54], esi
jg 0x427598
push 1
push ebx
call fcn.00435e50
add esp, 8
test eax, eax
jne 0x42760d
mov ecx, dword [ebx + 0x20]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
lea ecx, [esi + esi*4]
mov eax, dword [ebx + 4]
mov word [eax + ecx*4], 0x1c
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x42760d
mov eax, dword [esp + 0x88]
mov eax, dword [eax + 4]
mov dword [esp + 0x28], eax
jmp 0x427558
push ecx
call fcn.00469b90
mov edi, dword [ebp + 0x44]
mov esi, eax
mov dword [esp + 0x34], edi
lea ecx, [edi + 1]
mov dword [ebp + 0x44], ecx
movzx ecx, word [esi + 0x2e]
push ecx
push edi
push 0x39
push ebx
call fcn.004752c0
push esi
push ebp
call fcn.00480ab0
add esp, 0x1c
inc dword [ebp + 0x48]
mov eax, dword [ebp + 0x48]
mov dword [esp + 0x58], eax
mov eax, dword [ebx + 0x18]
mov esi, dword [ebx + 0x20]
mov ecx, esi
mov dword [esp + 0x6c], esi
cmp dword [eax + 0x54], esi
jg 0x427644
push 1
push ebx
call fcn.00435e50
add esp, 8
test eax, eax
je 0x427641
mov dword [esp + 0x6c], 1
jmp 0x42767b
mov ecx, dword [ebx + 0x20]
mov edx, dword [esp + 0x70]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
lea ecx, [esi + esi*4]
mov eax, dword [ebx + 4]
mov word [eax + ecx*4], 0x19
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x4c]
cmp dword [eax + 0xc], 1
jle 0x4277d2
mov ebx, dword [esp + 0x38]
xor edi, edi
mov ecx, dword [esp + 0x34]
xor esi, esi
mov edx, 0xfff
xor ebp, ebp
lea esp, [esp]
mov eax, dword [eax + 0x14]
add eax, esi
cmp eax, ecx
je 0x4276de
mov ecx, dword [eax]
test byte [ecx + 4], 1
jne 0x4276da
test byte [eax + 0x14], 2
jne 0x4276da
test word [eax + 0x12], dx
je 0x4276da
push 0
push 0
push ecx
push ebx
call fcn.0042ed30
push eax
push ebp
push ebx
call fcn.00453f50
add esp, 0x1c
mov ebp, eax
mov edx, 0xfff
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x4c]
inc edi
add esi, 0x30
cmp edi, dword [eax + 0xc]
jl 0x4276a0
mov ebx, dword [esp + 0x44]
test ebp, ebp
mov dword [esp + 0x40], ebp
mov ebp, dword [esp + 0x3c]
je 0x4277d6
mov esi, dword [ebp]
test esi, esi
je 0x427746
cmp byte [esi + 0x41], 0
je 0x427729
xor edi, edi
mov eax, dword [esp + 0x40]
push eax
push dword [ebp]
call fcn.00456b60
mov ecx, edi
add esp, 8
mov dword [esp + 0x40], ecx
jmp 0x4277da
cmp byte [esi + 0xfa], 0
je 0x427746
mov eax, 0x2c
cmp ax, word [esi + 0xf8]
jbe 0x427795
inc dword [esi + 0x108]
push 0
push 0x2c
call fcn.00461c40
mov edi, eax
add esp, 8
test edi, edi
jne 0x427764
test esi, esi
je 0x427760
mov byte [esi + 0x41], 1
test edi, edi
je 0x42770e
push 0x2c
push 0
push edi
call fcn.004c2200
or eax, 0xffffffff
mov byte [edi], 0x48
mov word [edi + 0x1e], ax
mov ecx, edi
mov eax, dword [esp + 0x4c]
add esp, 0xc
mov dword [edi + 0x10], eax
mov dword [esp + 0x40], ecx
mov eax, dword [eax + 4]
and eax, 0x200100
or dword [edi + 4], eax
jmp 0x4277da
mov edi, dword [esi + 0x110]
test edi, edi
jne 0x4277a7
inc dword [esi + 0x10c]
jmp 0x427746
mov eax, dword [edi]
mov dword [esi + 0x110], eax
mov eax, dword [esi + 0xfc]
inc eax
mov dword [esi + 0xfc], eax
inc dword [esi + 0x104]
cmp eax, dword [esi + 0x100]
jle 0x427764
mov dword [esi + 0x100], eax
jmp 0x427764
xor ecx, ecx
jmp 0x4277da
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x60]
xor esi, esi
mov edx, 0xf0
mov dword [esp + 0x5c], esi
mov dword [esp + 0x1c], edx
cmp dword [eax + 0xc], esi
jle 0x427bff
mov edi, dword [esp + 0x18]
lea ebx, [ebx]
mov ebx, dword [esp + 0x60]
lea eax, [esi + esi*2]
shl eax, 4
add eax, dword [ebx + 0x14]
mov ebx, dword [esp + 0x44]
cmp dword [eax + 8], edi
je 0x427829
mov ebx, 0x200
test word [eax + 0x12], bx
mov ebx, dword [esp + 0x44]
je 0x427be9
mov eax, dword [eax]
xor edi, edi
mov dword [esp + 0x24], edi
test ecx, ecx
je 0x427840
test byte [eax + 4], 1
jne 0x427840
mov dword [ecx + 0xc], eax
mov eax, ecx
push dword [esp + 0x78]
push edx
push 0
push 0
push eax
push dword [esp + 0x3c]
push ebp
call fcn.00482fe0
mov edx, eax
add esp, 0x1c
mov dword [esp + 0x80], edx
test edx, edx
je 0x427be1
mov eax, dword [esp + 0x14]
push 0
movzx ecx, byte [eax + 0x30c]
push ecx
push dword [esp + 0x94]
lea ecx, [edx + 0x2e0]
push ecx
push dword [esp + 0x38]
push ebp
call fcn.0042c750
mov eax, dword [esp + 0xa0]
add esp, 0x18
test byte [eax + 0x22], 8
jne 0x427ae4
mov eax, dword [esp + 0x60]
mov ecx, esi
mov eax, dword [eax + 0xc]
dec eax
cmp esi, eax
mov eax, 0xffffffff
cmove ecx, eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x54], ecx
test byte [eax + 0x2a], 0x20
jne 0x427980
push 0
push dword [esp + 0x5c]
push dword [esp + 0x20]
push 0xffffffffffffffff
push eax
push ebp
call fcn.00454c80
mov ecx, dword [ebx + 0x18]
add esp, 0x18
mov edi, dword [ebx + 0x20]
mov esi, eax
mov eax, edi
cmp dword [ecx + 0x54], edi
jg 0x427906
push 1
push ebx
call fcn.00435e50
add esp, 8
test eax, eax
je 0x427903
mov edi, 1
jmp 0x427937
mov eax, dword [ebx + 0x20]
mov edx, dword [esp + 0x30]
lea ecx, [edi + edi*4]
inc eax
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
mov word [eax + ecx*4], 0x82
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebx + 4]
mov eax, edi
mov ecx, dword [ebx]
test edx, edx
je 0x427ae0
cmp byte [ecx + 0x41], 0
jne 0x427ae0
test edi, edi
jns 0x427958
mov eax, dword [ebx + 0x20]
dec eax
lea eax, [eax + eax*4]
push dword [edx + eax*4 + 0x10]
lea esi, [edx + eax*4]
movsx eax, byte [esi + 1]
push eax
push ecx
call fcn.004332a0
mov eax, dword [esp + 0x60]
add esp, 0xc
mov dword [esi + 0x10], eax
mov byte [esi + 1], 0xf2
jmp 0x427ae0
mov esi, dword [eax + 8]
test esi, esi
je 0x427997
mov eax, dword [esi + 0x34]
and al, 3
cmp al, 2
je 0x427997
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x427987
movzx ecx, word [esi + 0x2e]
mov edx, dword [ebp + 0x38]
mov eax, dword [ebp + 0x3c]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x48], eax
cmp ecx, edx
jg 0x4279bd
add eax, ecx
sub edx, ecx
mov dword [ebp + 0x38], edx
mov edx, dword [esp + 0x48]
mov dword [ebp + 0x3c], eax
jmp 0x4279cc
mov eax, dword [ebp + 0x48]
lea edx, [eax + 1]
add eax, ecx
mov dword [esp + 0x48], edx
mov dword [ebp + 0x48], eax
xor edi, edi
test ecx, ecx
je 0x427a02
mov ebx, dword [esp + 0x50]
push 0
lea eax, [edx + edi]
push eax
mov eax, dword [esi + 4]
push dword [esp + 0x20]
movsx eax, word [eax + edi*2]
push eax
push dword [esp + 0x3c]
push ebp
call fcn.00454c80
mov edx, dword [esp + 0x60]
inc edi
add esp, 0x18
cmp edi, ebx
jl 0x4279d6
mov ebx, dword [esp + 0x44]
cmp dword [esp + 0x54], 0
je 0x427b7f
mov eax, dword [ebx + 0x18]
mov esi, dword [ebx + 0x20]
mov ecx, esi
mov dword [esp + 0x24], esi
cmp dword [eax + 0x54], esi
jg 0x427a3b
push 1
push ebx
call fcn.00435e50
add esp, 8
test eax, eax
je 0x427a38
mov esi, 1
mov dword [esp + 0x24], esi
jmp 0x427a72
mov ecx, dword [ebx + 0x20]
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
lea ecx, [esi + esi*4]
mov eax, dword [ebx + 4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x48]
mov word [eax + ecx*4], 0x45
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebx + 4]
mov eax, esi
mov ecx, dword [ebx]
test edx, edx
je 0x427ab0
cmp byte [ecx + 0x41], 0
jne 0x427ab0
test esi, esi
jns 0x427a8b
mov eax, dword [ebx + 0x20]
dec eax
lea eax, [eax + eax*4]
push dword [edx + eax*4 + 0x10]
lea esi, [edx + eax*4]
movsx eax, byte [esi + 1]
push eax
push ecx
call fcn.004332a0
mov edi, dword [esp + 0x5c]
add esp, 0xc
mov dword [esi + 0x10], edi
mov byte [esi + 1], 0xf2
jmp 0x427ab4
mov edi, dword [esp + 0x50]
cmp dword [esp + 0x54], 0
jge 0x427b83
mov esi, dword [esp + 0x48]
push edi
push esi
push ebp
call fcn.00454570
add esp, 0xc
cmp edi, dword [ebp + 0x38]
jle 0x427ad9
mov dword [ebp + 0x38], edi
mov dword [ebp + 0x3c], esi
mov edi, dword [esp + 0x24]
lea ecx, [ecx]
mov esi, dword [esp + 0x5c]
push 0
push dword [esp + 0x80]
push dword [esp + 0x78]
push 0x11
push ebx
call fcn.004752e0
add esp, 0x14
test edi, edi
je 0x427b1d
mov edx, dword [ebx + 0x20]
cmp edx, edi
jbe 0x427b14
mov eax, dword [ebx + 4]
lea ecx, [edi + edi*4]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
lea ecx, [edx - 1]
mov dword [eax + 0x58], ecx
mov edx, dword [esp + 0x80]
mov ecx, 1
mov eax, dword [esp + 0x74]
cmp byte [edx + 0x27], 0
cmovne eax, ecx
mov ecx, dword [edx + 0x320]
mov dword [esp + 0x74], eax
test dword [ecx + 0x24], 0x200
je 0x427bd0
test esi, esi
je 0x427b58
mov eax, dword [esp + 0x64]
cmp dword [ecx + 0x1c], eax
jne 0x427bd0
mov eax, dword [esp + 0x2c]
test byte [eax + 0x2a], 0x20
je 0x427b6e
mov eax, dword [ecx + 0x1c]
mov eax, dword [eax + 0x34]
and al, 3
cmp al, 2
je 0x427bd0
mov edi, dword [ecx + 0x1c]
or dword [esp + 0x1c], 0x1000
mov dword [esp + 0x64], edi
jmp 0x427bd8
mov edi, dword [esp + 0x50]
push dword [esp + 0x58]
mov esi, dword [esp + 0x4c]
push edi
push esi
push 0x31
push ebx
call fcn.004752e0
push 0
push dword [esp + 0x70]
push dword [esp + 0x4c]
push 0x6e
push ebx
call fcn.004752e0
add esp, 0x28
cmp dword [esp + 0x54], 0
je 0x427ac3
mov ecx, dword [ebx + 4]
test ecx, ecx
je 0x427ac3
mov eax, dword [ebx + 0x20]
lea eax, [eax + eax*4]
mov byte [ecx + eax*4 - 0x11], 0x10
jmp 0x427ac3
mov dword [esp + 0x64], 0
push edx
call fcn.004839a0
add esp, 4
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x60]
inc esi
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x5c], esi
cmp esi, dword [eax + 0xc]
jl 0x427800
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov dword [edi + 0x318], eax
test eax, eax
je 0x427c1b
mov eax, dword [esp + 0x78]
mov dword [edi + 0x2e8], eax
mov eax, dword [esp + 0x40]
mov esi, dword [esp + 0x38]
test eax, eax
je 0x427c38
push eax
push esi
mov dword [eax + 0xc], 0
call fcn.00456b60
add esp, 8
mov edx, dword [ebx + 0x20]
mov eax, dword [esp + 0x6c]
cmp edx, eax
jbe 0x427c4d
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 4]
mov dword [eax + ecx*4 + 4], edx
push 0
push dword [edi + 0x2ec]
push 0
push 0x10
push ebx
call fcn.004752e0
mov edx, dword [ebx + 0x18]
or edi, 0xffffffff
add esp, 0x14
sub edi, dword [esp + 0x7c]
js 0x427c7b
mov ecx, dword [edx + 0x70]
test ecx, ecx
je 0x427c7b
mov eax, dword [ebx + 0x20]
mov dword [ecx + edi*4], eax
mov eax, dword [ebx + 0x20]
dec eax
mov dword [edx + 0x58], eax
mov eax, dword [esp + 0x88]
cmp byte [eax + 0x29], 1
jbe 0x427c9c
push dword [esp + 0x28]
push esi
call fcn.00451330
add esp, 8
cmp dword [esp + 0x74], 0
jne 0x427d08
push dword [esp + 0x34]
push dword [esp + 0x24]
call fcn.0042b660
add esp, 8
jmp 0x427d08
test byte [esp + 0x7c], 8
je 0x427cc9
mov eax, dword [esp + 0x14]
mov byte [eax + 0x30d], 0x9c
jmp 0x427d08
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
push esi
mov al, byte [ecx + 0x4eacb0]
mov byte [edi + 0x30d], al
mov eax, dword [esp + 0x1c]
push eax
mov dword [edi + 0x310], eax
movzx eax, byte [ecx + 0x4eacb4]
push eax
push ebx
call fcn.004752c0
add esp, 0x10
mov byte [edi + 0x30f], 1
inc eax
mov dword [edi + 0x314], eax
mov edx, dword [esp + 0x4c]
mov edi, dword [edx + 0xc]
mov esi, dword [edx + 0x14]
mov dword [esp + 0x34], edi
test edi, edi
jle 0x427f3a
mov eax, edi
movzx edx, word [esi + 0x14]
xor edi, edi
test dl, 6
jne 0x427dd5
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x14]
mov ecx, dword [esi + 0x28]
and ecx, dword [eax + 0x328]
mov eax, dword [esi + 0x2c]
and eax, dword [ebp + 0x32c]
or ecx, eax
mov ebp, dword [esp + 0x3c]
je 0x427d5e
mov eax, dword [esp + 0x88]
mov byte [eax + 0x27], 1
jmp 0x427dd1
mov ecx, dword [esp + 0x20]
mov eax, dword [esi]
mov dword [esp + 0x80], eax
cmp dword [ecx], edi
je 0x427d75
test byte [eax + 4], 1
je 0x427dd1
test edx, 0x200
je 0x427d9b
mov eax, dword [esp + 0x14]
push dword [eax + 0x304]
push 0x2e
push ebx
call fcn.00475250
mov edi, eax
add esp, 0xc
mov eax, dword [esp + 0x80]
push 0x10
push dword [esp + 0x6c]
push eax
push ebp
call fcn.00456c80
add esp, 0x10
test edi, edi
je 0x427dcc
mov edx, dword [ebx + 0x20]
cmp edx, edi
jbe 0x427dc3
mov eax, dword [ebx + 4]
lea ecx, [edi + edi*4]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
lea ecx, [edx - 1]
mov dword [eax + 0x58], ecx
or word [esi + 0x14], 4
mov eax, dword [esp + 0x34]
dec eax
add esi, 0x30
mov dword [esp + 0x34], eax
test eax, eax
jg 0x427d20
mov edx, dword [esp + 0x4c]
mov edi, dword [edx + 0xc]
mov esi, dword [edx + 0x14]
mov dword [esp + 0x34], edi
test edi, edi
jle 0x427f3a
mov ebx, dword [esp + 0x3c]
add esi, 0x12
mov dword [esp + 0x7c], esi
mov eax, 0x402
jmp 0x427e10
test byte [esi + 2], 6
jne 0x427f1a
cmp word [esi], ax
jne 0x427f1a
mov ecx, dword [esp + 0x18]
cmp dword [esi - 0xa], ecx
jne 0x427f1a
mov eax, dword [esp + 0x20]
cmp dword [eax], 0
jne 0x427f15
mov eax, dword [esi - 0x12]
push 0
push 3
push dword [esp + 0x9c]
mov dword [esp + 0x84], eax
push dword [esp + 0x9c]
push dword [esi - 6]
push ecx
push edx
call fcn.0042fb70
add esp, 0x1c
mov dword [esp + 0x80], eax
test eax, eax
je 0x427f15
test byte [eax + 0x14], 4
jne 0x427f15
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x427eb2
cmp byte [ecx + 0x41], 0
jne 0x427f15
cmp byte [ecx + 0xfa], 0
je 0x427eb2
mov eax, 0x2c
cmp ax, word [ecx + 0xf8]
jbe 0x427fcc
inc dword [ecx + 0x108]
push 0
push 0x2c
call fcn.00461c40
mov ebp, eax
add esp, 8
test ebp, ebp
jne 0x427ed4
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x427ed0
mov byte [ecx + 0x41], 1
test ebp, ebp
je 0x427f15
mov esi, dword [esp + 0x80]
mov ecx, 0xb
mov eax, dword [esp + 0x78]
mov edi, ebp
push 0x10
push dword [esp + 0x6c]
mov esi, dword [esi]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 0xc]
push ebp
push ebx
mov dword [ebp + 0xc], eax
call fcn.00456c80
push ebp
push dword [esp + 0x4c]
call fcn.00451330
mov esi, dword [esp + 0x94]
add esp, 0x18
mov edi, dword [esp + 0x34]
mov eax, 0x402
mov edx, dword [esp + 0x4c]
dec edi
add esi, 0x30
mov dword [esp + 0x34], edi
mov dword [esp + 0x7c], esi
test edi, edi
jg 0x427e10
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0x3c]
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
test ecx, ecx
je 0x427fb4
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 0x20]
push 0
push ecx
push 1
push 0x19
push ebx
mov dword [edx + 0x2fc], eax
call fcn.004752e0
push ebp
call fcn.00454300
mov ebx, dword [esp + 0x64]
xor edi, edi
add esp, 0x18
mov esi, dword [ebx + 0x14]
cmp dword [ebx + 0xc], edi
jle 0x427fb4
test byte [esi + 0x14], 6
jne 0x427fab
mov edx, dword [esp + 0x14]
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [edx + 0x328]
and eax, dword [edx + 0x32c]
or ecx, eax
jne 0x427fab
push 0x10
push dword [esp + 0x6c]
push dword [esi]
push ebp
call fcn.00456c80
add esp, 0x10
or word [esi + 0x14], 4
inc edi
add esi, 0x30
cmp edi, dword [ebx + 0xc]
jl 0x427f75
mov ecx, dword [esp + 0x14]
pop edi
pop esi
pop ebp
mov eax, dword [ecx + 0x328]
mov edx, dword [ecx + 0x32c]
pop ebx
add esp, 0x74
ret
mov ebp, dword [ecx + 0x110]
test ebp, ebp
jne 0x427fe1
inc dword [ecx + 0x10c]
jmp 0x427eb2
mov eax, dword [ebp]
mov dword [ecx + 0x110], eax
mov eax, dword [ecx + 0xfc]
inc eax
mov dword [ecx + 0xfc], eax
inc dword [ecx + 0x104]
cmp eax, dword [ecx + 0x100]
jle 0x427ed4
mov dword [ecx + 0x100], eax
jmp 0x427ed4