Function at 0x4666f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x238
xor cl, cl
mov dword [esp + 0x18], 0
xor ch, ch
mov byte [esp + 2], cl
push ebx
mov ebx, dword [esp + 0x248]
xor eax, eax
mov byte [esp + 5], ch
xor dl, dl
mov byte [esp + 7], cl
mov ecx, dword [esp + 0x250]
push ebp
mov ebp, dword [esp + 0x244]
mov dword [esp + 0xfc], eax
lea eax, [ebx + ecx]
mov byte [esp + 8], dl
push esi
mov esi, eax
mov dword [esp + 0xf4], eax
push edi
xor edx, edx
mov dword [esp + 0x34], 0
xor edi, edi
mov dword [esp + 0x10c], 0
mov dword [esp + 0xfc], edi
lea eax, [esi - 1]
mov edi, dword [esp + 0x258]
mov dword [esp + 0x108], eax
lea eax, [esp + 0x114]
mov dword [esp + 0x30], edx
mov dword [esp + 0x114], edx
mov dword [esp + 0x118], edx
mov dword [esp + 0xf0], eax
test ebp, ebp
jne 0x4667c0
mov edx, dword [esp + 0x250]
test edx, edx
jne 0x4667c0
test ebx, ebx
jne 0x4667c0
cmp edi, 0xfffffc19
jne 0x4667c0
cmp ecx, edi
jne 0x4667c0
pop edi
pop esi
pop ebp
mov eax, 0xfffffecc
pop ebx
add esp, 0x238
ret
mov edx, dword [esp + 0x260]
test edx, 0xe20f5a6f
je 0x4667df
pop edi
pop esi
pop ebp
mov eax, 0xfffffffd
pop ebx
add esp, 0x238
ret
test ebp, ebp
je 0x4675c6
test ebx, ebx
je 0x4675c6
mov ebx, dword [esp + 0x264]
mov eax, dword [esp + 0x268]
test ebx, ebx
jne 0x466809
test eax, eax
jg 0x4675c6
test eax, eax
jns 0x46681d
pop edi
pop esi
pop ebp
mov eax, 0xfffffff1
pop ebx
add esp, 0x238
ret
test edi, edi
jns 0x466831
pop edi
pop esi
pop ebp
mov eax, 0xffffffe0
pop ebx
add esp, 0x238
ret
test ecx, ecx
js 0x4675b6
cmp ecx, edi
jg 0x4675b6
mov eax, dword [ebp]
cmp eax, 0x50435245
je 0x466865
sub eax, 0x45524350
neg eax
pop edi
sbb eax, eax
pop esi
and eax, 0x19
pop ebp
add eax, 0xffffffe3
pop ebx
add esp, 0x238
ret
test byte [ebp + 0xc], 1
jne 0x46687b
pop edi
pop esi
pop ebp
mov eax, 0xffffffe4
pop ebx
add esp, 0x238
ret
mov ecx, dword [ebp + 8]
shr ecx, 0xb
and ecx, 1
mov dword [esp + 0x20], ecx
mov dword [esp + 0x84], ecx
test edx, 0x8000000
je 0x46689e
mov eax, 2
jmp 0x4668a6
mov eax, edx
shr eax, 0xf
and eax, 1
mov dword [esp + 0xc0], eax
test ecx, ecx
je 0x46693a
test edx, 0x2000
jne 0x46693a
lea eax, [esp + 0x24]
push eax
push edi
push dword [esp + 0x25c]
call fcn.00467fe0
add esp, 0xc
test eax, eax
je 0x466911
cmp dword [esp + 0x268], 2
jl 0x4668e9
mov ecx, dword [esp + 0x24]
mov dword [ebx], ecx
mov dword [ebx + 4], eax
cmp eax, 5
jg 0x466901
cmp dword [esp + 0xc0], 1
mov eax, 0xffffffe7
jg 0x4675cb
pop edi
pop esi
pop ebp
mov eax, 0xfffffff6
pop ebx
add esp, 0x238
ret
mov eax, dword [esp + 0x25c]
test eax, eax
jle 0x46693a
cmp eax, edi
jge 0x46693a
mov eax, esi
mov al, byte [eax]
and al, 0xc0
cmp al, 0x80
jne 0x46693a
pop edi
pop esi
pop ebp
mov eax, 0xfffffff5
pop ebx
add esp, 0x238
ret
movzx eax, word [ebp + 0x22]
mov edx, 0x989680
mov dword [esp + 0x24], eax
mov ebx, edx
add eax, ebp
mov dword [esp + 0x2c], 0
mov dword [esp + 0x68], eax
movzx eax, word [ebp + 0x26]
mov dword [esp + 0x58], eax
movzx eax, word [ebp + 0x24]
mov ebp, dword [ebp + 0x30]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x250]
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], ebx
mov dword [esp + 0xe0], 0
test eax, eax
je 0x4669d3
mov ecx, dword [eax]
test cl, 1
je 0x46699d
mov edi, dword [eax + 4]
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 0x258]
test cl, 2
je 0x4669a9
mov edx, dword [eax + 8]
mov dword [esp + 0x3c], edx
test cl, 0x10
je 0x4669b5
mov ebx, dword [eax + 0x14]
mov dword [esp + 0x40], ebx
test cl, 4
je 0x4669cb
mov eax, dword [eax + 0xc]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x250]
test cl, 8
je 0x4669d3
mov ebp, dword [eax + 0x10]
mov eax, dword [esp + 0x24c]
mov ecx, dword [eax + 0xc]
test ecx, 0x2000
je 0x4669f7
mov eax, dword [eax + 0x10]
cmp eax, edx
jae 0x4669f0
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x24c]
test ecx, 0x4000
je 0x466a0a
mov eax, dword [eax + 0x14]
cmp eax, ebx
jae 0x466a0a
mov dword [esp + 0x40], eax
test ebp, ebp
jne 0x466a13
mov ebp, 0x519d80
mov ebx, dword [esp + 0x24c]
mov dword [esp + 0x64], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xe8], 0
mov ecx, dword [ebx + 8]
mov eax, ecx
or eax, dword [esp + 0x260]
shr eax, 4
and eax, 1
mov edx, dword [ebx + 0xc]
mov dword [esp + 0x110], eax
mov eax, edx
shr eax, 8
and eax, 1
mov dword [esp + 0xe4], 0
mov dword [esp + 0x100], eax
mov eax, ecx
shr eax, 0x12
and eax, 1
mov dword [esp + 0xdc], 0
mov dword [esp + 0xf4], eax
movzx eax, word [ebx + 0x24]
imul eax, dword [esp + 0x58]
mov dword [esp + 0x70], ebp
add eax, dword [esp + 0x24]
add eax, ebx
mov ebx, dword [esp + 0x254]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x25c]
mov dword [esp + 0xcc], eax
lea eax, [ebx + edi]
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], eax
mov dword [esp + 0x14], eax
mov eax, ecx
shr eax, 5
and eax, 1
mov ebx, dword [esp + 0x260]
mov dword [esp + 0x90], eax
mov eax, ecx
shr eax, 0x1d
and eax, 1
mov dword [esp + 0x8c], eax
mov eax, ecx
shr eax, 0x19
and eax, 1
mov dword [esp + 0x88], eax
mov eax, ebx
shr eax, 7
and eax, 1
mov dword [esp + 0x7c], eax
mov eax, ebx
shr eax, 8
and eax, 1
mov dword [esp + 0x80], eax
mov eax, ebx
shr eax, 0xa
and eax, 1
mov dword [esp + 0x94], eax
mov eax, ebx
shr eax, 0x1c
and eax, 1
mov dword [esp + 0x98], eax
mov eax, edx
shr eax, 0xc
and eax, 1
mov dword [esp + 0xa4], eax
lea eax, [ebp + 0x100]
mov dword [esp + 0x74], eax
lea eax, [ebp + 0x340]
mov dword [esp + 0x78], eax
mov eax, ebx
and eax, 0x1800000
je 0x466b90
cmp eax, 0x800000
je 0x466b83
cmp eax, 0x1000000
je 0x466ba9
pop edi
pop esi
pop ebp
mov eax, 0xffffffe9
pop ebx
add esp, 0x238
ret
mov dword [esp + 0xa0], 1
jmp 0x466bb4
test ecx, 0x1800000
je 0x466ba9
mov eax, ecx
shr eax, 0x17
and eax, 1
mov dword [esp + 0xa0], eax
jmp 0x466bb4
mov dword [esp + 0xa0], 0
test ebx, 0x700000
je 0x466bbe
mov ecx, ebx
and ecx, 0x700000
cmp ecx, 0x300000
ja 0x466c22
je 0x466c0e
test ecx, ecx
je 0x466be2
cmp ecx, 0x100000
je 0x466bf8
cmp ecx, 0x200000
jne 0x466b73
mov eax, 0xa
mov ebx, 1
xor ebp, ebp
mov dword [esp + 0x54], ebx
mov byte [esp + 0x6c], al
jmp 0x466c46
mov eax, 0xd
mov ebx, 1
xor ebp, ebp
mov dword [esp + 0x54], ebx
mov byte [esp + 0x6c], al
jmp 0x466c46
mov ebx, 2
mov word [esp + 0x6c], 0xa0d
xor ebp, ebp
mov dword [esp + 0x54], ebx
jmp 0x466c46
cmp ecx, 0x400000
je 0x466c3d
cmp ecx, 0x500000
jne 0x466b73
mov ebp, 2
jmp 0x466c42
mov ebp, 1
mov ebx, dword [esp + 0x54]
cmp dword [esp + 0xc0], 0
mov dword [esp + 0x50], ebp
je 0x466c6c
test edx, 0x200
je 0x466c6c
pop edi
pop esi
pop ebp
mov eax, 0xfffffff3
pop ebx
add esp, 0x238
ret
mov eax, 0x55555556
imul dword [esp + 0x268]
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edi, [eax + eax*2]
mov eax, 0x55555556
lea ecx, [edi + edi]
mov dword [esp + 0x18], edi
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24c]
movzx eax, word [eax + 0x20]
test ax, ax
je 0x466d00
mov ecx, eax
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x466d00
lea eax, [ecx + 1]
lea eax, [eax + eax*2]
mov dword [esp + 0x18], eax
shl eax, 2
push eax
call dword [0x1144454]
mov edi, eax
add esp, 4
mov dword [esp + 0x44], edi
test edi, edi
jne 0x466cee
lea eax, [edi - 6]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov dword [esp + 0x28], 1
jmp 0x466d0b
mov edi, dword [esp + 0x264]
mov dword [esp + 0x44], edi
mov eax, dword [esp + 0x18]
mov dword [esp + 0x48], eax
mov dword [esp + 0xc8], 0
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x4c], eax
test edi, edi
je 0x466daa
mov eax, dword [esp + 0x18]
lea ecx, [edi + eax*4]
mov eax, dword [esp + 0x24c]
mov edx, ecx
movzx eax, word [eax + 0x1e]
shl eax, 2
sub edx, eax
lea eax, [edi + 8]
cmp edx, eax
jae 0x466d59
mov edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x466d79
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x466d60
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov edi, dword [esp + 0x44]
mov eax, dword [esp + 0x268]
test eax, eax
jle 0x466d96
mov dword [edi], 0xffffffff
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov edi, dword [esp + 0x44]
cmp eax, 1
jle 0x466daa
mov dword [edi + 4], 0xffffffff
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
cmp dword [esp + 0x110], 0
mov edx, dword [esp + 0x24c]
jne 0x466e0d
mov eax, dword [edx + 0xc]
test al, 0x10
je 0x466deb
mov ch, byte [edx + 0x18]
mov dword [esp + 0x34], 1
mov cl, ch
mov byte [esp + 0x11], ch
mov byte [esp + 0x12], cl
test al, 0x20
je 0x466e0d
mov eax, dword [esp + 0x74]
movzx ecx, ch
mov ch, byte [ecx + eax]
mov byte [esp + 0x11], ch
jmp 0x466e0d
cmp dword [esp + 0x100], 0
jne 0x466e0d
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x466e0d
test byte [eax + 4], 1
je 0x466e0d
add eax, 8
mov dword [esp + 0x104], eax
mov eax, dword [edx + 0xc]
test al, 0x40
je 0x466e40
mov dl, byte [edx + 0x1a]
mov dword [esp + 0x10c], 1
mov cl, dl
mov byte [esp + 0x10], dl
mov byte [esp + 0x13], cl
test al, al
jns 0x466e40
mov eax, dword [esp + 0x74]
movzx ecx, dl
mov dl, byte [ecx + eax]
mov byte [esp + 0x10], dl
mov edi, edi
cmp dword [esp + 0xf4], 0
mov edx, dword [esp + 0x14]
mov dword [esp + 0x1c], edx
je 0x466f44
mov eax, dword [esp + 0x20]
mov edi, esi
test eax, eax
je 0x466ee7
mov ecx, dword [esp + 0xb0]
cmp esi, ecx
jae 0x466f3e
test ebp, ebp
je 0x466ea5
push eax
lea eax, [esp + 0x58]
push eax
push ecx
push ebp
push edi
call fcn.00467cf0
mov ebx, dword [esp + 0x68]
add esp, 0x14
mov ebp, dword [esp + 0x50]
test eax, eax
jne 0x466f3e
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x14]
jmp 0x466ec7
mov eax, ecx
sub eax, ebx
cmp edi, eax
ja 0x466ec7
mov al, byte [edi]
cmp al, byte [esp + 0x6c]
jne 0x466ec7
cmp ebx, 1
je 0x466f3e
mov al, byte [edi + 1]
cmp al, byte [esp + 0x6d]
je 0x466f3e
inc edi
cmp edi, edx
jae 0x466edd
lea esp, [esp]
mov al, byte [edi]
and al, 0xc0
cmp al, 0x80
jne 0x466edd
inc edi
cmp edi, edx
jb 0x466ed0
cmp edi, ecx
jae 0x466f3e
mov eax, dword [esp + 0x20]
jmp 0x466e73
mov eax, dword [esp + 0xb0]
cmp esi, eax
jae 0x466f3e
test ebp, ebp
je 0x466f16
push 0
lea ecx, [esp + 0x58]
push ecx
push eax
push ebp
push edi
call fcn.00467cf0
mov ebx, dword [esp + 0x68]
add esp, 0x14
mov ebp, dword [esp + 0x50]
test eax, eax
jne 0x466f3e
jmp 0x466f32
sub eax, ebx
cmp edi, eax
ja 0x466f32
mov al, byte [edi]
cmp al, byte [esp + 0x6c]
jne 0x466f32
cmp ebx, 1
je 0x466f3e
mov al, byte [edi + 1]
cmp al, byte [esp + 0x6d]
je 0x466f3e
mov eax, dword [esp + 0xb0]
inc edi
cmp edi, eax
jb 0x466ef2
mov edx, edi
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x24c]
mov eax, dword [eax + 8]
or eax, dword [esp + 0x260]
test eax, 0x4000000
jne 0x46711c
cmp dword [esp + 0x34], 0
je 0x466fb6
mov cl, byte [esp + 0x12]
mov bl, byte [esp + 0x11]
cmp cl, bl
je 0x466f9c
cmp esi, edx
jae 0x46711c
jmp 0x466f80
mov al, byte [esi]
cmp al, cl
je 0x46711c
cmp al, bl
je 0x46711c
inc esi
cmp esi, edx
jb 0x466f80
jmp 0x46711c
cmp esi, edx
jae 0x46711c
cmp byte [esi], cl
je 0x46711c
inc esi
cmp esi, edx
jb 0x466fa4
jmp 0x46711c
cmp dword [esp + 0x100], 0
je 0x4670e6
mov eax, dword [esp + 0x25c]
mov ecx, dword [esp + 0xac]
add eax, ecx
cmp esi, eax
jbe 0x46711c
mov eax, dword [esp + 0x20]
test eax, eax
je 0x46706d
cmp esi, edx
jae 0x4670ca
test ebp, ebp
je 0x46701f
cmp esi, ecx
jbe 0x46704f
push eax
lea eax, [esp + 0x58]
push eax
push ecx
push ebp
push esi
call fcn.00467e40
mov ebp, dword [esp + 0x64]
add esp, 0x14
mov edx, dword [esp + 0x14]
test eax, eax
jne 0x4670ca
mov ebx, dword [esp + 0x54]
jmp 0x467048
lea eax, [ecx + ebx]
cmp esi, eax
jb 0x46704f
mov ecx, esi
sub ecx, ebx
mov al, byte [ecx]
cmp al, byte [esp + 0x6c]
jne 0x467048
cmp ebx, 1
je 0x4670ca
mov al, byte [ecx + 1]
cmp al, byte [esp + 0x6d]
je 0x4670ca
mov ecx, dword [esp + 0xac]
inc esi
cmp esi, edx
jae 0x4670ca
mov al, byte [esi]
and al, 0xc0
cmp al, 0x80
jne 0x467067
inc esi
cmp esi, edx
jb 0x467058
jmp 0x4670ca
mov eax, dword [esp + 0x20]
jmp 0x466ff0
cmp esi, edx
jae 0x4670ca
test ebp, ebp
je 0x46709d
cmp esi, ecx
jbe 0x4670c5
push 0
lea eax, [esp + 0x58]
push eax
push ecx
push ebp
push esi
call fcn.00467e40
mov ebp, dword [esp + 0x64]
add esp, 0x14
mov edx, dword [esp + 0x14]
test eax, eax
jne 0x4670ca
mov ebx, dword [esp + 0x54]
jmp 0x4670be
lea eax, [ecx + ebx]
cmp esi, eax
jb 0x4670c5
mov ecx, esi
sub ecx, ebx
mov al, byte [ecx]
cmp al, byte [esp + 0x6c]
jne 0x4670be
cmp ebx, 1
je 0x4670ca
mov al, byte [ecx + 1]
cmp al, byte [esp + 0x6d]
je 0x4670ca
mov ecx, dword [esp + 0xac]
inc esi
cmp esi, edx
jb 0x467071
cmp byte [esi - 1], 0xd
jne 0x46711c
cmp ebp, 1
je 0x4670da
cmp ebp, 2
jne 0x46711c
cmp esi, edx
jae 0x46711c
cmp byte [esi], 0xa
jne 0x46711c
inc esi
jmp 0x46711c
mov ebx, dword [esp + 0x104]
test ebx, ebx
je 0x46711c
cmp esi, edx
jae 0x46711c
mov edi, dword [esp + 0x14]
lea esp, [esp]
movzx edx, byte [esi]
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebx], al
jne 0x46711c
inc esi
cmp esi, edi
jb 0x467100
mov eax, dword [esp + 0x24c]
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x14], ebp
mov eax, dword [eax + 8]
or eax, dword [esp + 0x260]
test eax, 0x4000000
jne 0x4671de
cmp dword [esp + 0xc0], 0
jne 0x4671de
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x467165
test byte [ecx + 4], 2
je 0x467165
mov eax, ebp
sub eax, esi
cmp eax, dword [ecx + 0x28]
jb case.0x46726c.996
cmp dword [esp + 0x10c], 0
je 0x4671de
mov eax, ebp
sub eax, esi
cmp eax, 0x3e8
jge 0x4671de
xor ecx, ecx
cmp dword [esp + 0x34], ecx
setne cl
add ecx, esi
cmp ecx, dword [esp + 0x108]
jbe 0x4671de
mov dl, byte [esp + 0x13]
mov al, byte [esp + 0x10]
cmp dl, al
je 0x4671ba
cmp ecx, ebp
jae case.0x46726c.996
movzx edi, dl
movzx edx, byte [ecx]
inc ecx
cmp edx, edi
je 0x4671d2
movzx eax, al
cmp edx, eax
je 0x4671d2
cmp ecx, ebp
jae case.0x46726c.996
mov al, byte [esp + 0x10]
jmp 0x4671a1
cmp ecx, ebp
jae case.0x46726c.996
mov edi, edi
mov al, byte [ecx]
inc ecx
cmp al, dl
je 0x4671d2
cmp ecx, ebp
jb 0x4671c0
xor ebx, ebx
jmp 0x467392
dec ecx
cmp ecx, ebp
jae case.0x46726c.996
mov dword [esp + 0x108], ecx
push 0
push 0
lea eax, [esp + 0x40]
mov dword [esp + 0xbc], esi
push eax
push 2
push esi
push dword [esp + 0xbc]
mov dword [esp + 0xd4], esi
push esi
mov dword [esp + 0x54], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0x7c], 0
call fcn.00457e80
add esp, 0x1c
mov ebx, eax
cmp dword [esp + 0x9c], 0
je 0x467253
cmp dword [esp + 0x30], 0
jne 0x467253
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x30], eax
mov dword [esp + 0xfc], esi
test ebx, ebx
jg case.default.0x46726c
je case.0x46726c.995
lea eax, [ebx + 0x3e4]
cmp eax, 4
ja case.default.0x46726c
jmp dword [eax*4 + 0x4675d8]
mov eax, dword [esp + 0x60]
mov edi, esi
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x64], eax
jmp 0x4672bd
mov edi, dword [esp + 0xb4]
cmp edi, esi
jbe case.0x46726c.995
mov ecx, dword [esp + 0x20]
jmp 0x4672bd
mov ecx, dword [esp + 0x20]
lea edi, [esi + 1]
mov dword [esp + 0x64], 0
test ecx, ecx
je 0x4672bd
cmp edi, ebp
jae 0x4672bd
jmp 0x4672b0
mov al, byte [edi]
and al, 0xc0
cmp al, 0x80
jne 0x4672bd
inc edi
cmp edi, ebp
jb 0x4672b0
mov ebp, dword [esp + 0x50]
xor ebx, ebx
mov dword [esp + 0x18], ebx
cmp dword [esp + 0xf4], ebx
je 0x467300
mov eax, dword [esp + 0xb0]
test ebp, ebp
je 0x467366
cmp esi, eax
jae 0x467300
push ecx
lea ecx, [esp + 0x58]
push ecx
push eax
push ebp
push esi
call fcn.00467cf0
add esp, 0x14
test eax, eax
jne 0x46738e
mov ebp, dword [esp + 0x50]
mov ebx, dword [esp + 0x54]
cmp dword [esp + 0x110], 0
mov esi, edi
jne 0x46738a
mov eax, dword [esp + 0x1c]
cmp edi, eax
ja 0x46738a
cmp edi, dword [esp + 0xf8]
jbe 0x467356
cmp byte [edi - 1], 0xd
jne 0x467356
cmp edi, eax
jae 0x467356
cmp byte [edi], 0xa
jne 0x467356
mov eax, dword [esp + 0x24c]
test dword [eax + 0xc], 0x800
jne 0x467356
cmp ebp, 1
je 0x467353
cmp ebp, 2
je 0x467353
cmp ebx, 2
jne 0x467356
lea esi, [edi + 1]
mov dword [esp + 0xe4], 0
jmp 0x466e40
mov ebx, dword [esp + 0x54]
sub eax, ebx
cmp esi, eax
ja 0x467304
mov al, byte [esi]
cmp al, byte [esp + 0x6c]
jne 0x467304
cmp ebx, 1
je 0x46738a
mov al, byte [esi + 1]
cmp al, byte [esp + 0x6d]
jne 0x467304
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
cmp dword [esp + 0x28], 0
je 0x4673a6
push dword [esp + 0x44]
call dword [0x1144458]
add esp, 4
test ebx, ebx
je 0x467459
cmp ebx, 0xfffffff4
je 0x467459
lea eax, [esp + 0x114]
push eax
call fcn.004675f0
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret
cmp ebx, 1
je 0x4673e1
cmp ebx, 0xfffffc19
jne 0x467392
cmp dword [esp + 0x28], 0
mov edi, dword [esp + 0x24]
je 0x467432
mov esi, dword [esp + 0x44]
cmp edi, 4
jl 0x467414
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [esp + 0x26c]
add eax, 8
push eax
call fcn.0044d823
add esp, 0xc
cmp dword [esp + 0xc4], edi
jle 0x467428
or dword [esp + 0xc8], 0x10000
push esi
call dword [0x1144458]
add esp, 4
test dword [esp + 0xc8], 0x10000
mov ecx, dword [esp + 0xc4]
je 0x4674e3
cmp ecx, edi
jl 0x4674e3
xor edi, edi
jmp 0x4674ec
mov edi, dword [esp + 0xfc]
test edi, edi
je 0x4674a7
mov ecx, dword [esp + 0x268]
mov dword [esp + 0xe4], 0
cmp ecx, 1
jle 0x4674a0
mov eax, dword [esp + 0x264]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x254]
sub edx, ebx
sub ebp, ebx
mov dword [eax], edx
mov dword [eax + 4], ebp
cmp ecx, 2
jle 0x4674a0
sub edi, ebx
mov dword [eax + 8], edi
mov esi, 0xfffffff4
jmp 0x4674aa
or esi, 0xffffffff
mov edx, dword [esp + 0x250]
test edx, edx
je 0x4674c6
test byte [edx], 0x20
je 0x4674c6
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0xe8]
mov dword [edx], ecx
lea eax, [esp + 0x114]
push eax
call fcn.004675f0
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret
mov eax, ecx
cdq
sub eax, edx
mov edi, eax
sar edi, 1
mov eax, dword [esp + 0x24c]
mov ebx, dword [esp + 0x264]
movzx esi, word [eax + 0x1e]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp eax, esi
jg 0x46754e
test ebx, ebx
je 0x46754e
mov edx, dword [esp + 0x268]
lea eax, [esi*2 + 2]
cmp eax, edx
jle 0x467521
mov eax, edx
lea eax, [ebx + eax*4]
xor esi, esi
lea edx, [ebx + ecx*4]
mov ecx, eax
sub ecx, edx
add ecx, 3
shr ecx, 2
cmp eax, edx
sbb eax, eax
not eax
and eax, ecx
jbe 0x46754e
lea ecx, [ecx]
inc esi
mov dword [edx], 0xffffffff
lea edx, [edx + 4]
cmp esi, eax
jb 0x467540
cmp dword [esp + 0x268], 2
jge 0x46755c
xor edi, edi
jmp 0x46757d
mov eax, dword [esp + 0xb4]
sub eax, dword [esp + 0xac]
mov dword [ebx], eax
mov eax, dword [esp + 0xb8]
sub eax, dword [esp + 0xac]
mov dword [ebx + 4], eax
mov edx, dword [esp + 0x250]
test edx, edx
je 0x467599
test byte [edx], 0x20
je 0x467599
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0xe4]
mov dword [edx], ecx
lea eax, [esp + 0x114]
push eax
call fcn.004675f0
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret
pop edi
pop esi
pop ebp
mov eax, 0xffffffe8
pop ebx
add esp, 0x238
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret