Function at 0x466940
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb0
mov eax, dword [esp + 0xc0]
push ebx
push ebp
push esi
mov eax, dword [eax + 0x18]
mov ebp, 1
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], ebp
push edi
test eax, 0x400
je 0x466986
mov edx, eax
mov ebp, 2
shr edx, 0xb
mov ecx, 0x466570
not edx
mov dword [esp + 0x58], ebp
and edx, 1
jmp 0x4669bc
test eax, 0x1000
je 0x4669a7
mov edx, eax
mov ebp, 2
shr edx, 0xd
mov ecx, 0x4665f0
not edx
mov dword [esp + 0x58], ebp
and edx, 1
jmp 0x4669bc
test eax, 0x100
je 0x4669f8
mov edx, eax
mov ecx, fcn.004663c0
shr edx, 9
not edx
and edx, ebp
mov dword [esp + 0x1c], ecx
mov esi, ebp
mov dword [esp + 0x64], edx
mov ebx, edx
mov dword [esp + 0x68], esi
mov dword [esp + 0x60], ebx
test eax, 0x800
jne 0x466a24
mov dword [esp + 0x64], edx
mov dword [esp + 0x58], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x68], esi
mov dword [esp + 0x60], ebx
test eax, 0x2000
je 0x466a82
jmp 0x466a5b
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
test eax, 0x800
je 0x466a3f
mov ebp, 2
mov dword [esp + 0x1c], 0x466570
mov dword [esp + 0x58], ebp
mov dword [esp + 0x68], ebp
mov eax, 1
mov dword [esp + 0x48], 0x468b20
mov dword [esp + 0x30], eax
mov dword [esp + 0x6c], 4
jmp 0x466a98
test eax, 0x2000
je 0x466a76
mov ebp, 2
mov dword [esp + 0x1c], 0x4665f0
mov dword [esp + 0x58], ebp
mov dword [esp + 0x68], ebp
mov eax, 1
mov dword [esp + 0x48], 0x468b40
mov dword [esp + 0x30], eax
mov dword [esp + 0x6c], 4
jmp 0x466a98
mov dword [esp + 0x1c], fcn.004663c0
mov dword [esp + 0x68], ebp
mov dword [esp + 0x48], fcn.00466300
mov eax, ebp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x6c], 6
mov ecx, dword [esp + 0xcc]
mov edi, dword [esp + 0xc4]
imul eax, ecx
mov dword [esp + 0x10], ecx
add eax, dword [edi + 4]
add eax, ebp
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
push dword [esp + 0x10]
mov ebx, dword [edi + 8]
lea eax, [esp + 0x1c]
mov esi, dword [edi + 4]
sub ebx, ebp
push dword [esp + 0xcc]
add esi, dword [edi]
add ebx, dword [edi]
push eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x40], ebx
call dword [esp + 0x54]
mov ecx, eax
add esp, 0xc
mov dword [esp + 0x2c], ecx
test ecx, ecx
je case.default.0x4678ca
jns 0x466b9d
push dword [esp + 0x18]
mov eax, ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
jne 0x466b6c
mov ecx, dword [esp + 0x30]
imul ecx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 8]
sub esi, dword [edi]
add eax, ecx
add eax, ebp
mov dword [edi + 4], esi
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
push dword [esp + 0x18]
add esi, ebx
sub ebx, ebp
add ebx, dword [edi + 8]
mov eax, ebx
mov dword [esp + 0x38], ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
add esp, 0xc
test eax, eax
je 0x466b25
mov ecx, dword [esp + 0xc8]
add esi, eax
mov edx, dword [esp + 0x10]
sub ecx, dword [esp + 0x2c]
add edx, dword [esp + 0x2c]
mov dword [esp + 0x28], esi
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x54], 0xffffffff
jmp 0x46785d
cmp ecx, dword [esp + 0x6c]
je 0x466bb7
cmp dword [esp + 0x60], 0
jne 0x466bb7
mov edx, dword [esp + 0xc8]
mov dword [esp + 0x20], edx
jmp 0x466bc4
mov edx, dword [esp + 0xc8]
xor eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
add edx, ecx
sub eax, ecx
mov dword [esp + 0xc8], edx
push eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x44]
push edx
push eax
call dword [esp + 0x54]
mov edx, eax
add esp, 0xc
mov dword [esp + 0x50], edx
test edx, edx
jle 0x4676e2
cmp edx, dword [esp + 0x6c]
je 0x466c0d
cmp dword [esp + 0x64], 0
jne 0x466c0d
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x38], eax
jmp 0x466c1c
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x38], 0
sub dword [esp + 0x10], edx
add eax, edx
mov edx, dword [esp + 0x40]
mov dword [esp + 0xc8], eax
mov eax, edx
shr eax, 8
mov dword [esp + 0x5c], eax
cmp eax, 0x1d2
ja 0x467002
cmp byte [eax + 0x4ff0e8], 0
je 0x467002
mov eax, dword [esp + 0x18]
lea ecx, [eax - 0x1100]
cmp ecx, 0x12
ja 0x466d81
add edx, 0xffffee9f
cmp edx, 0x14
ja 0x466c92
imul ecx, ecx, 0x15
mov dword [esp + 0x20], 0
add ecx, edx
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax*4 + 0xac00]
mov dword [esp + 0x18], eax
jmp 0x4670e9
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x466d12
mov eax, dword [esp + 0x2c]
add eax, esi
cmp eax, ebx
jbe 0x466ce1
mov eax, dword [esp + 0x30]
imul eax, dword [esp + 0x10]
sub esi, dword [edi]
mov dword [edi + 4], esi
add eax, dword [edi + 8]
add eax, ebp
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
mov ecx, dword [esp + 0x20]
add esi, ebx
sub ebx, ebp
mov dword [esp + 0x28], esi
add ebx, dword [edi + 8]
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x2c]
dec eax
cmp eax, 3
ja case.default.0x46705b
jmp dword [eax*4 + 0x467988]
mov al, byte [ecx]
mov byte [esi], al
inc esi
inc ecx
mov al, byte [ecx]
mov byte [esi], al
inc esi
inc ecx
mov al, byte [ecx]
mov byte [esi], al
inc esi
inc ecx
mov al, byte [ecx]
mov byte [esi], al
inc esi
jmp 0x4670cd
push eax
mov eax, ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
jne 0x4670cb
mov ecx, dword [esp + 0x30]
imul ecx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 8]
sub esi, dword [edi]
add eax, ecx
add eax, ebp
mov dword [edi + 4], esi
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
push dword [esp + 0x18]
add esi, ebx
sub ebx, ebp
add ebx, dword [edi + 8]
mov eax, ebx
mov dword [esp + 0x38], ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
add esp, 0xc
test eax, eax
je 0x466d35
jmp 0x4670cb
lea ecx, [eax - 0xac00]
mov dword [esp + 0x14], ecx
cmp ecx, 0x2ba3
ja 0x466ec6
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea eax, [ecx*8]
sub eax, ecx
mov ecx, dword [esp + 0x14]
shl eax, 2
sub ecx, eax
jne 0x466ec2
mov ecx, dword [esp + 0x40]
add ecx, 0xffffee59
lea eax, [ecx - 1]
cmp eax, 0x1a
ja 0x466de5
add dword [esp + 0x18], ecx
mov dword [esp + 0x20], 0
jmp 0x4670e9
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x466e50
mov eax, dword [esp + 0x2c]
add eax, esi
cmp eax, ebx
jbe 0x466e34
mov eax, dword [esp + 0x30]
imul eax, dword [esp + 0x10]
sub esi, dword [edi]
mov dword [edi + 4], esi
add eax, dword [edi + 8]
add eax, ebp
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
mov ecx, dword [esp + 0x20]
add esi, ebx
sub ebx, ebp
mov dword [esp + 0x28], esi
add ebx, dword [edi + 8]
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x2c]
dec eax
cmp eax, 3
ja case.default.0x46705b
jmp dword [eax*4 + 0x467998]
push dword [esp + 0x18]
mov eax, ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
jne 0x4670cb
mov ecx, dword [esp + 0x30]
imul ecx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 8]
sub esi, dword [edi]
add eax, ecx
add eax, ebp
mov dword [edi + 4], esi
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
push dword [esp + 0x18]
add esi, ebx
sub ebx, ebp
add ebx, dword [edi + 8]
mov eax, ebx
mov dword [esp + 0x38], ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
add esp, 0xc
test eax, eax
je 0x466e76
jmp 0x4670cb
mov eax, dword [esp + 0x18]
push dword [esp + 0x40]
push eax
call fcn.00468b60
add esp, 8
test eax, eax
je 0x466ee8
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], 0
jmp 0x4670e9
mov edx, dword [esp + 0x40]
cmp edx, 0x1d244
ja 0x466f2a
mov eax, dword [esp + 0x5c]
movzx ecx, byte [eax + 0x4ffc60]
mov eax, edx
shr eax, 4
add ecx, ecx
and eax, 0xf
and edx, 0xf
movzx eax, byte [eax + ecx*8 + 0x4ff9f0]
add eax, eax
movzx ecx, byte [edx + eax*8 + 0x4ff2c0]
mov dword [esp + 0x44], ecx
test ecx, ecx
jne 0x467113
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x466f90
mov eax, dword [esp + 0x2c]
add eax, esi
cmp eax, ebx
jbe 0x466f79
mov eax, dword [esp + 0x30]
imul eax, dword [esp + 0x10]
sub esi, dword [edi]
mov dword [edi + 4], esi
add eax, dword [edi + 8]
add eax, ebp
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
mov ecx, dword [esp + 0x20]
add esi, ebx
sub ebx, ebp
mov dword [esp + 0x28], esi
add ebx, dword [edi + 8]
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x2c]
dec eax
cmp eax, 3
ja case.default.0x46705b
jmp dword [eax*4 + 0x4679a8]
push dword [esp + 0x18]
mov eax, ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
jne 0x4670cb
mov ecx, dword [esp + 0x30]
imul ecx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 8]
sub esi, dword [edi]
add eax, ecx
add eax, ebp
mov dword [edi + 4], esi
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
push dword [esp + 0x18]
add esi, ebx
sub ebx, ebp
add ebx, dword [edi + 8]
mov eax, ebx
mov dword [esp + 0x38], ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
add esp, 0xc
test eax, eax
je 0x466fb6
jmp 0x4670cb
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x467062
mov eax, dword [esp + 0x2c]
add eax, esi
cmp eax, ebx
jbe 0x467051
mov eax, dword [esp + 0x30]
imul eax, dword [esp + 0x10]
sub esi, dword [edi]
mov dword [edi + 4], esi
add eax, dword [edi + 8]
add eax, ebp
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
mov ecx, dword [esp + 0x20]
add esi, ebx
sub ebx, ebp
mov dword [esp + 0x28], esi
add ebx, dword [edi + 8]
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x2c]
dec eax
cmp eax, 3
ja case.default.0x46705b
jmp dword [eax*4 + 0x4679b8]
push dword [esp + 0x18]
mov eax, ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
jne 0x4670cb
mov ecx, dword [esp + 0x30]
imul ecx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
mov eax, dword [edi + 8]
sub esi, dword [edi]
add eax, ecx
add eax, ebp
mov dword [edi + 4], esi
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
push dword [esp + 0x18]
add esi, ebx
sub ebx, ebp
add ebx, dword [edi + 8]
mov eax, ebx
mov dword [esp + 0x38], ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
add esp, 0xc
test eax, eax
je 0x467084
add esi, eax
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x2c], eax
push dword [esp + 0x10]
lea eax, [esp + 0x44]
push dword [esp + 0xcc]
push eax
call dword [esp + 0x54]
mov edx, eax
add esp, 0xc
mov dword [esp + 0x50], edx
test edx, edx
jg 0x466bf3
jmp 0x4676e2
mov eax, dword [esp + 0x40]
mov dword [esp + 0x70], eax
mov eax, 1
mov dword [esp + 0x3c], 0
mov dword [esp + 0x98], ecx
mov dword [esp + 0x24], eax
push dword [esp + 0x10]
shl eax, 2
lea ecx, [esp + 0x74]
push dword [esp + 0xcc]
mov dword [esp + 0x54], eax
add eax, ecx
push eax
call dword [esp + 0x54]
add esp, 0xc
mov dword [esp + 0x38], eax
test eax, eax
jle 0x467213
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + eax + 0x70]
cmp edx, 0x1d244
jbe 0x467173
xor ecx, ecx
jmp 0x4671a2
mov eax, edx
shr eax, 8
movzx ecx, byte [eax + 0x4ffc60]
mov eax, edx
shr eax, 4
add ecx, ecx
and eax, 0xf
movzx eax, byte [eax + ecx*8 + 0x4ff9f0]
add eax, eax
and edx, 0xf
movzx ecx, byte [edx + eax*8 + 0x4ff2c0]
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x3c], ecx
cmp edx, ecx
jb 0x4671be
cmp edx, 0xe4
je 0x4671be
cmp ecx, 0xe4
jne 0x4671ec
mov edx, dword [esp + 0x38]
add dword [esp + 0xc8], edx
sub dword [esp + 0x10], edx
mov dword [esp + eax + 0x98], ecx
mov eax, dword [esp + 0x24]
inc eax
mov dword [esp + 0x44], ecx
mov dword [esp + 0x24], eax
cmp eax, 0xa
jl 0x467133
jmp 0x4671f9
mov eax, dword [esp + 0x24]
mov dword [esp + 0x3c], ecx
cmp eax, 0xa
jl 0x46721b
mov dword [esp + 0x54], 0xffffffff
mov dword [esp + 0x24], 0xa
mov dword [esp + 0x4c], 1
jmp 0x467256
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0xc8]
mov dword [esp + 0xc8], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x4c], 1
mov dword [esp + 0x44], edx
mov dword [esp + 0x10], ecx
cmp eax, 1
jle 0x467423
mov edi, dword [esp + 0x24]
mov ebp, dword [esp + 0x3c]
mov ebx, dword [esp + 0x4c]
mov esi, dword [esp + 0x38]
nop word [eax + eax]
lea eax, [ebx*4]
push dword [esp + eax + 0x70]
mov dword [esp + 0x60], eax
push dword [esp + 0x1c]
call fcn.00468b60
mov ecx, eax
add esp, 8
lea eax, [ebx + 1]
mov dword [esp + 0x14], eax
test ecx, ecx
jne 0x4672a0
mov ebx, eax
jmp 0x467408
mov edi, dword [esp + 0x14]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x20], 0
cmp edi, ecx
jge 0x4672de
mov edx, dword [esp + 0x5c]
nop dword [eax]
mov eax, dword [esp + edx + 0x74]
lea edx, [edx + 4]
mov dword [esp + edx + 0x6c], eax
inc edi
mov eax, dword [esp + edx + 0x98]
mov dword [esp + edx + 0x94], eax
cmp edi, ecx
jl 0x4672c0
dec ecx
mov dword [esp + 0x24], ecx
test ecx, ecx
jle 0x467402
cmp ebx, ecx
jne 0x467402
test esi, esi
jle 0x467402
cmp ebp, dword [esp + 0x44]
jne 0x467402
mov ebx, dword [esp + ecx*4 + 0x94]
mov dword [esp + 0x44], ebx
cmp ecx, 0xa
jge 0x4673da
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0xc8]
lea ebp, [ecx*4]
push esi
lea edi, [esp + 0x74]
push edx
add edi, ebp
push edi
call dword [esp + 0x54]
mov ecx, eax
add esp, 0xc
mov dword [esp + 0x38], ecx
test ecx, ecx
jle 0x4673ed
mov edx, dword [edi]
cmp edx, 0x1d244
jbe 0x467357
xor eax, eax
jmp 0x467386
mov eax, edx
shr eax, 8
movzx ecx, byte [eax + 0x4ffc60]
mov eax, edx
shr eax, 4
add ecx, ecx
and eax, 0xf
movzx eax, byte [eax + ecx*8 + 0x4ff9f0]
mov ecx, dword [esp + 0x38]
add eax, eax
and edx, 0xf
movzx eax, byte [edx + eax*8 + 0x4ff2c0]
mov dword [esp + 0x3c], eax
cmp ebx, eax
jl 0x46739d
cmp ebx, 0xe4
je 0x46739d
cmp eax, 0xe4
jne 0x4673ed
mov edx, dword [esp + 0xc8]
sub esi, ecx
add edx, ecx
mov dword [esp + 0x10], esi
mov ecx, dword [esp + 0x24]
mov ebx, eax
inc ecx
mov dword [esp + 0xc8], edx
mov dword [esp + 0x44], ebx
mov dword [esp + ebp + 0x98], eax
mov dword [esp + 0x24], ecx
cmp ecx, 0xa
jl 0x467324
mov esi, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
mov edi, 0xa
mov dword [esp + 0x54], 0xffffffff
mov dword [esp + 0x24], edi
jmp 0x467406
mov ecx, dword [esp + 0x24]
cmp ecx, 0xa
jge 0x4673d2
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
mov dword [esp + 0x24], ecx
mov edi, dword [esp + 0x24]
xor ebx, ebx
cmp ebx, edi
jl 0x467270
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0xc4]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x58]
mov ecx, dword [esp + 0x30]
imul ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x5c], ecx
test edx, edx
je 0x4674b0
mov eax, dword [esp + 0x2c]
add eax, esi
cmp eax, ebx
jbe 0x46747c
mov eax, dword [edi + 8]
sub esi, dword [edi]
add eax, ecx
add eax, ebp
mov dword [edi + 4], esi
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
mov edx, dword [esp + 0x20]
add esi, ebx
sub ebx, ebp
mov dword [esp + 0x28], esi
add ebx, dword [edi + 8]
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x2c]
dec eax
cmp eax, 3
ja case.default.0x467486
jmp dword [eax*4 + 0x4679c8]
mov al, byte [edx]
mov byte [esi], al
inc esi
inc edx
mov al, byte [edx]
mov byte [esi], al
inc esi
inc edx
mov al, byte [edx]
mov byte [esi], al
inc esi
inc edx
mov al, byte [edx]
mov byte [esi], al
inc esi
mov dword [esp + 0x28], esi
xor eax, eax
mov dword [esp + 0x20], eax
jmp 0x467510
push dword [esp + 0x18]
mov eax, ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
jne 0x46750a
mov eax, dword [edi + 8]
add eax, dword [esp + 0x5c]
sub esi, dword [edi]
add eax, ebp
push eax
push edi
mov dword [edi + 4], esi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
push dword [esp + 0x18]
add esi, ebx
sub ebx, ebp
add ebx, dword [edi + 8]
mov eax, ebx
mov dword [esp + 0x38], ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
je 0x4674c5
add esi, eax
mov dword [esp + 0x28], esi
cmp dword [esp + 0x24], 0
mov dword [esp + 0x14], 0
jle 0x4675aa
lea eax, [esp + 0x70]
mov dword [esp + 0x4c], eax
nop dword [eax + eax]
push dword [eax]
mov eax, ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
jne 0x46758a
mov eax, dword [edi + 8]
add eax, dword [esp + 0x5c]
sub esi, dword [edi]
add eax, ebp
push eax
push edi
mov dword [edi + 4], esi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
mov eax, dword [esp + 0x4c]
add esi, ebx
sub ebx, ebp
add ebx, dword [edi + 8]
mov dword [esp + 0x34], ebx
push dword [eax]
mov eax, ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
je 0x467543
mov ecx, dword [esp + 0x14]
add esi, eax
mov eax, dword [esp + 0x4c]
inc ecx
add eax, 4
mov dword [esp + 0x28], esi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x4c], eax
cmp ecx, dword [esp + 0x24]
jl 0x467530
cmp dword [esp + 0x38], 0
mov edx, dword [esp + 0x10]
jle 0x4676e6
mov eax, dword [esp + 0x44]
cmp dword [esp + 0x3c], eax
jne 0x4676e6
test edx, edx
je 0x4676e6
push edx
push dword [esp + 0xcc]
lea eax, [esp + 0x78]
push eax
call dword [esp + 0x54]
mov ecx, eax
add esp, 0xc
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x4676e2
mov edx, dword [esp + 0x70]
cmp edx, 0x1d244
jbe 0x467601
xor eax, eax
jmp 0x467632
mov eax, edx
shr eax, 8
movzx ecx, byte [eax + 0x4ffc60]
mov eax, edx
shr eax, 4
add ecx, ecx
and eax, 0xf
movzx ecx, byte [eax + ecx*8 + 0x4ff9f0]
mov eax, edx
add ecx, ecx
and eax, 0xf
movzx eax, byte [eax + ecx*8 + 0x4ff2c0]
mov ecx, dword [esp + 0x14]
cmp dword [esp + 0x44], eax
jg 0x4676e2
add dword [esp + 0xc8], ecx
sub dword [esp + 0x10], ecx
mov dword [esp + 0x44], eax
mov eax, ebx
push edx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
jne 0x4676b7
mov ecx, dword [esp + 0x30]
imul ecx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
nop word [eax + eax]
mov eax, dword [edi + 8]
sub esi, dword [edi]
add eax, ecx
add eax, ebp
mov dword [edi + 4], esi
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
push dword [esp + 0x70]
add esi, ebx
sub ebx, ebp
add ebx, dword [edi + 8]
mov eax, ebx
mov dword [esp + 0x38], ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
add esp, 0xc
test eax, eax
je 0x467670
push dword [esp + 0x10]
add esi, eax
lea eax, [esp + 0x74]
push dword [esp + 0xcc]
mov dword [esp + 0x30], esi
push eax
call dword [esp + 0x54]
mov ecx, eax
mov dword [esp + 0x20], eax
add esp, 0xc
test ecx, ecx
jg 0x4675f1
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x50]
test eax, eax
jns 0x467854
mov ecx, dword [esp + 0x30]
imul ecx, edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x14], ecx
test edx, edx
je 0x467770
mov eax, dword [esp + 0x2c]
add eax, esi
cmp eax, ebx
jbe 0x467741
mov eax, dword [edi + 8]
sub esi, dword [edi]
add eax, ecx
add eax, ebp
mov dword [edi + 4], esi
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
mov edx, dword [esp + 0x20]
add esi, ebx
sub ebx, ebp
add ebx, dword [edi + 8]
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x2c]
dec eax
cmp eax, 3
ja case.default.0x46774f
jmp dword [eax*4 + 0x4679d8]
mov al, byte [edx]
mov byte [esi], al
inc esi
inc edx
mov al, byte [edx]
mov byte [esi], al
inc esi
inc edx
mov al, byte [edx]
mov byte [esi], al
inc esi
inc edx
mov al, byte [edx]
mov byte [esi], al
inc esi
jmp case.default.0x46774f
push dword [esp + 0x18]
mov eax, ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
jne 0x4677ca
mov eax, dword [edi + 8]
add eax, dword [esp + 0x14]
sub esi, dword [edi]
add eax, ebp
push eax
push edi
mov dword [edi + 4], esi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
push dword [esp + 0x18]
add esi, ebx
sub ebx, ebp
add ebx, dword [edi + 8]
mov eax, ebx
mov dword [esp + 0x38], ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
je 0x467785
add esi, eax
push dword [esp + 0x40]
mov eax, ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
jne 0x467826
mov eax, dword [edi + 8]
add eax, dword [esp + 0x14]
sub esi, dword [edi]
add eax, ebp
push eax
push edi
mov dword [edi + 4], esi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov ebx, dword [edi]
mov esi, dword [edi + 4]
push dword [esp + 0x40]
add esi, ebx
sub ebx, ebp
add ebx, dword [edi + 8]
mov eax, ebx
mov dword [esp + 0x38], ebx
sub eax, esi
push eax
push esi
call dword [esp + 0x28]
add esp, 0xc
test eax, eax
je 0x4677e1
mov ecx, dword [esp + 0xc8]
add esi, eax
mov edx, dword [esp + 0x10]
sub ecx, dword [esp + 0x50]
add edx, dword [esp + 0x50]
mov dword [esp + 0x28], esi
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x54], 0xffffffff
jmp 0x46785d
je 0x46787e
mov ecx, dword [esp + 0xc8]
push edx
push ecx
lea eax, [esp + 0x20]
push eax
call dword [esp + 0x54]
mov ecx, eax
mov dword [esp + 0x38], eax
add esp, 0xc
test ecx, ecx
jne 0x466afd
jmp case.default.0x4678ca
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x4678f0
mov eax, dword [esp + 0x2c]
add eax, esi
cmp eax, ebx
jbe 0x4678bc
mov eax, dword [esp + 0x30]
sub esi, dword [edi]
imul eax, edx
mov dword [edi + 4], esi
add eax, dword [edi + 8]
add eax, ebp
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov esi, dword [edi]
add esi, dword [edi + 4]
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x2c]
dec eax
cmp eax, 3
ja case.default.0x4678ca
jmp dword [eax*4 + 0x4679e8]
mov al, byte [ecx]
mov byte [esi], al
inc esi
inc ecx
mov al, byte [ecx]
mov byte [esi], al
inc esi
inc ecx
mov al, byte [ecx]
mov byte [esi], al
inc esi
inc ecx
mov al, byte [ecx]
mov byte [esi], al
inc esi
jmp case.default.0x4678ca
push dword [esp + 0x18]
sub ebx, esi
push ebx
mov ebx, dword [esp + 0x24]
push esi
call ebx
add esp, 0xc
test eax, eax
jne 0x46794d
mov ecx, dword [esp + 0x30]
imul ecx, dword [esp + 0x10]
mov dword [esp + 0x30], ecx
mov eax, dword [edi + 8]
sub esi, dword [edi]
add eax, ecx
add eax, ebp
mov dword [edi + 4], esi
push eax
push edi
call fcn.00464710
add esp, 8
test eax, eax
je 0x467979
mov eax, dword [edi]
mov esi, dword [edi + 4]
push dword [esp + 0x18]
add esi, eax
sub eax, ebp
add eax, dword [edi + 8]
sub eax, esi
push eax
push esi
call ebx
mov ecx, dword [esp + 0x3c]
add esp, 0xc
test eax, eax
je 0x467912
add esi, eax
mov eax, esi
sub eax, dword [edi]
cmp dword [esp + 0x68], 2
mov dword [edi + 4], eax
mov byte [esi], 0
jne 0x46796a
mov edx, dword [edi]
mov ecx, dword [edi + 4]
mov byte [edx + ecx + 1], 0
mov eax, dword [esp + 0x54]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb0
ret
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0xb0
ret