Function at 0x4704b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x2305bc0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x1c]
cmp eax, dword [ecx + 8]
jbe 0x471202
sub esp, 0x9c
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x98], ecx
lea edx, [0xd37f80]
mov dword [esp], edx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x94]
mov dword [esp + 8], ebp
call fcn.004126b0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x470ba3
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x98], ecx
lea edx, [0xd37f80]
mov dword [esp], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 4], edx
lea ebx, [esp + 0x94]
mov dword [esp + 8], ebx
call fcn.00412a50
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa0]
cmp eax, ecx
je 0x470b94
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
movzx ebp, byte [eax + 0xf]
and ebp, 0x1f
xchg ebp, eax
cmp al, dl
xchg ebp, eax
jne 0x470b85
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], dl
mov dword [esp], ecx
call fcn.0046f4f0
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
call fcn.0046f4f0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x470b76
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00406e60
movzx eax, byte [esp + 0xc]
test al, al
je 0x470b76
mov ebp, dword [esp + 0xa0]
movzx esi, byte [ebp + 0xc]
xchg esi, eax
test al, 1
xchg esi, eax
jne 0x470607
xor esi, esi
jmp 0x470666
movzx esi, byte [ebp + 0xf]
and esi, 0x1f
cmp esi, 0x14
ja 0x47063b
cmp esi, 0x12
ja 0x47062c
cmp esi, 0x11
jne 0x470622
lea esi, [ebp + 0x2c]
jmp 0x470666
cmp esi, 0x12
jne 0x470663
lea esi, [ebp + 0x28]
jmp 0x470666
cmp esi, 0x13
jne 0x470636
lea esi, [ebp + 0x24]
jmp 0x470666
lea esi, [ebp + 0x30]
jmp 0x470666
cmp esi, 0x16
ja 0x47064f
cmp esi, 0x15
jne 0x47064a
lea esi, [ebp + 0x38]
jmp 0x470666
lea esi, [ebp + 0x24]
jmp 0x470666
cmp esi, 0x17
jne 0x470659
lea esi, [ebp + 0x24]
jmp 0x470666
cmp esi, 0x19
jne 0x470663
lea esi, [ebp + 0x30]
jmp 0x470666
lea esi, [ebp + 0x20]
mov edi, dword [esp + 0xa4]
movzx eax, byte [edi + 0xc]
test al, 1
jne 0x47067a
xor eax, eax
jmp 0x4706d9
movzx eax, byte [edi + 0xf]
and eax, 0x1f
cmp eax, 0x14
ja 0x4706ae
cmp eax, 0x12
ja 0x47069f
cmp eax, 0x11
jne 0x470695
lea eax, [edi + 0x2c]
jmp 0x4706d9
cmp eax, 0x12
jne 0x4706d6
lea eax, [edi + 0x28]
jmp 0x4706d9
cmp eax, 0x13
jne 0x4706a9
lea eax, [edi + 0x24]
jmp 0x4706d9
lea eax, [edi + 0x30]
jmp 0x4706d9
cmp eax, 0x16
ja 0x4706c2
cmp eax, 0x15
jne 0x4706bd
lea eax, [edi + 0x38]
jmp 0x4706d9
lea eax, [edi + 0x24]
jmp 0x4706d9
cmp eax, 0x17
jne 0x4706cc
lea eax, [edi + 0x24]
jmp 0x4706d9
cmp eax, 0x19
jne 0x4706d6
lea eax, [edi + 0x30]
jmp 0x4706d9
lea eax, [edi + 0x20]
test esi, esi
jne 0x4706e9
test eax, eax
je 0x470788
test esi, esi
je 0x4706ed
test eax, eax
jne 0x4706fc
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov dword [esp + 0x60], eax
mov eax, dword [esi]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0046f6b0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00402060
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x60]
mov ecx, dword [ecx]
mov edx, dword [esp + 4]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0xa4]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0046f6b0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00402060
mov eax, dword [esp + 0x28]
cmp dword [esp + 8], eax
jne 0x470b67
mov ecx, dword [esp + 0x70]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00406e60
movzx eax, byte [esp + 0xc]
test al, al
je 0x470b67
mov ebp, dword [esp + 0xa0]
mov edi, dword [esp + 0xa4]
movzx esi, byte [esp + 0x16]
xchg esi, eax
test al, al
xchg esi, eax
je 0x470bb2
xchg esi, eax
cmp al, 0x10
xchg esi, eax
jbe 0x470b58
xchg esi, eax
cmp al, 0x15
xchg esi, eax
ja 0x470a22
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jbe 0x470985
xchg esi, eax
cmp al, 0x13
xchg esi, eax
jne 0x47087d
movzx esi, word [ebp + 0x22]
cmp word [edi + 0x22], si
jne 0x47086e
movzx esi, word [ebp + 0x20]
movzx eax, word [edi + 0x20]
cmp ax, si
jne 0x47086e
movzx ecx, byte [ebp + 0xc]
test cl, 1
je 0x4707f2
mov ecx, 0x34
jmp 0x4707f7
mov ecx, 0x24
test si, si
jne 0x470802
xor edx, edx
xor esi, esi
jmp 0x470814
movzx edx, si
lea esi, [ecx + ebp]
cmp edx, 0x10000
ja 0x4711f7
movzx ecx, byte [edi + 0xc]
test cl, 1
je 0x470824
mov ecx, 0x34
jmp 0x470829
mov ecx, 0x24
test ax, ax
jne 0x470834
xor eax, eax
xor ecx, ecx
jmp 0x470844
movzx eax, ax
add ecx, edi
cmp eax, 0x10000
ja 0x4711eb
mov dword [esp + 0x24], edx
mov dword [esp + 0x5c], esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x58], ecx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 0x3c], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x3c]
jmp 0x47103c
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x14
xchg esi, eax
jne 0x47091d
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.00402060
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xa4]
mov edx, dword [ecx + 0x20]
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov dword [esp], edx
call fcn.00402060
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x47090e
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00406e60
movzx eax, byte [esp + 0xc]
test al, al
je 0x47090e
mov edx, dword [esp + 0xa0]
mov ebx, dword [edx + 0x28]
mov ebp, dword [esp + 0xa4]
cmp dword [ebp + 0x28], ebx
jne 0x4708ff
mov dword [esp + 0x4c], ebx
xor eax, eax
jmp 0x470e1b
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.004704b0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x470947
xor eax, eax
jmp 0x470977
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xa4]
mov ecx, dword [ecx + 0x24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.004704b0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x11
xchg esi, eax
je 0x4709d3
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jne 0x470bb2
mov eax, dword [ebp + 0x24]
cmp dword [edi + 0x24], eax
je 0x4709a3
xor eax, eax
jmp 0x4709c5
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.004704b0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.004704b0
movzx eax, byte [esp + 0xc]
test al, al
je 0x470a12
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa4]
cmp dword [ecx + 0x28], eax
sete al
jmp 0x470a14
xor eax, eax
mov byte [esp + 0xac], al
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x17
xchg esi, eax
ja 0x470a90
xchg esi, eax
cmp al, 0x16
xchg esi, eax
jne 0x470a60
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.004704b0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.004704b0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x18
xchg esi, eax
je 0x470b49
xchg esi, eax
cmp al, 0x19
xchg esi, eax
jne 0x470b42
mov eax, dword [edi + 0x28]
cmp dword [ebp + 0x28], eax
jne 0x470b33
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.00402060
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xa4]
mov edx, dword [ecx + 0x20]
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov dword [esp], edx
call fcn.00402060
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x470b24
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00406e60
movzx eax, byte [esp + 0xc]
test al, al
je 0x470b24
mov edx, dword [esp + 0xa0]
mov ebx, dword [edx + 0x28]
mov dword [esp + 0x4c], ebx
mov ebp, dword [esp + 0xa4]
xor eax, eax
jmp 0x470c1e
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x1a
xchg esi, eax
jne 0x470bb2
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.00443bf0
lea eax, [0xe4db3b]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.00444460
movzx eax, byte [esp + 0x17]
and eax, 0x1f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00444150
call fcn.00443e00
call fcn.00443c50
lea eax, [0xe4bd13]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00441d00
mov esi, dword [esp + 0x2c]
lea eax, [esi + 1]
mov ebx, dword [esp + 0x4c]
mov edx, dword [esp + 0xa0]
mov ebp, dword [esp + 0xa4]
cmp eax, ebx
jge 0x470de9
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x470dfd
mov ecx, dword [ebp + 0x28]
lea esi, [eax + eax*2]
cmp eax, ecx
jae 0x470df8
mov dword [esp + 0x48], esi
mov dword [esp + 0x2c], eax
mov eax, dword [edx + 0x24]
mov dword [esp + 0x8c], eax
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x88], ecx
mov ebx, dword [eax + esi*4]
mov dword [esp], ebx
call fcn.00402060
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x88]
mov ebx, dword [edx + ecx*4]
mov ebp, dword [esp + 4]
mov dword [esp + 0x90], ebp
mov dword [esp], ebx
call fcn.00402060
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x470dda
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00406e60
movzx eax, byte [esp + 0xc]
test al, al
je 0x470dda
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x8c]
mov edx, dword [ecx + eax*4 + 4]
mov ebx, dword [esp + 0x88]
mov ebp, dword [ebx + eax*4 + 4]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov edx, dword [esp + 0xa8]
mov dword [esp + 8], edx
call fcn.004704b0
movzx eax, byte [esp + 0xc]
test al, al
je 0x470dcb
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x8c]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.00402120
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x88]
mov ebx, dword [edx + ecx*4]
mov ebp, dword [esp + 4]
mov dword [esp + 0x90], ebp
mov dword [esp], ebx
call fcn.00402120
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x470dbc
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00406e60
movzx eax, byte [esp + 0xc]
test al, al
je 0x470dbc
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [ebx + edx*4 + 8]
mov esi, dword [esp + 0x88]
lea edi, [esi + edx*4 + 8]
cmp dword [edi], ebp
jne 0x470dad
mov ebx, dword [ebx + edx*4]
mov edx, dword [esi + edx*4]
movzx ebx, byte [ebx]
movzx edx, byte [edx]
test bl, 8
setne bl
test dl, 8
setne dl
cmp dl, bl
je 0x470c05
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.0047b370
call fcn.0047b370
mov esi, dword [esp + 0x30]
lea eax, [esi + 1]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0xa4]
mov edx, dword [esp + 0xa0]
cmp eax, ebx
jge 0x470fef
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x471003
mov esi, dword [edx + 0x24]
mov ecx, dword [ebp + 0x28]
lea edi, [esi + eax*8]
cmp eax, ecx
jae 0x470ffe
mov dword [esp + 0x84], esi
mov dword [esp + 0x30], eax
mov dword [esp + 0x68], edi
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x80], ecx
lea edx, [ecx + eax*8]
mov dword [esp + 0x64], edx
lea ebx, [esi + eax*8]
mov ebx, dword [ebx]
mov dword [esp], edi
mov dword [esp + 4], ebx
call fcn.0046f6b0
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x80]
lea ebx, [edx + ecx*8]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x64]
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0046f6b0
mov eax, dword [esp + 8]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
call fcn.00402060
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call fcn.00402060
mov eax, dword [esp + 0x48]
cmp dword [esp + 8], eax
jne 0x470fe0
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00406e60
movzx eax, byte [esp + 0xc]
test al, al
je 0x470fe0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.0046fe60
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call fcn.0046fe60
mov eax, dword [esp + 0x48]
cmp dword [esp + 8], eax
jne 0x470fd1
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00406e60
movzx eax, byte [esp + 0xc]
test al, al
je 0x470fd1
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x84]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0046f960
mov eax, dword [esp + 8]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x80]
lea edx, [edx + ecx*8 + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0x64]
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.0046f960
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.004704b0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x470e02
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.0047b370
call fcn.0047b370
mov eax, dword [esp + 0x38]
inc eax
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0xa8]
mov ecx, dword [esp + 0x20]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x5c]
mov ecx, ebp
mov ebp, dword [esp + 0xa0]
mov edi, dword [esp + 0xa4]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x38]
cmp edi, edx
jge 0x47107a
mov ebp, dword [esi + edi*4]
cmp edi, eax
jae 0x4711e2
mov eax, dword [ecx + edi*4]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004704b0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x471008
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
movzx esi, word [ebp + 0x22]
and esi, 0x7fff
nop
test si, si
jne 0x471090
xor esi, esi
xor ebp, ebp
jmp 0x4710d9
movzx edi, byte [ebp + 0xc]
xchg edi, eax
test al, 1
xchg edi, eax
je 0x4710a2
mov eax, 0x34
jmp 0x4710a7
mov eax, 0x24
movzx edi, word [ebp + 0x20]
add esi, edi
movzx edx, si
add ebp, eax
cmp edx, 0x20000
ja 0x4711d8
movzx eax, di
cmp eax, edx
ja 0x4711d1
sub edx, eax
mov esi, edx
neg edx
shl eax, 2
sar edx, 0x1f
and eax, edx
add ebp, eax
mov edi, dword [esp + 0xa4]
movzx eax, word [edi + 0x22]
and eax, 0x7fff
nop
test ax, ax
jne 0x4710f5
xor ecx, ecx
xor edx, edx
jmp 0x47113b
movzx ecx, byte [edi + 0xc]
test cl, 1
je 0x471105
mov ecx, 0x34
jmp 0x47110a
mov ecx, 0x24
movzx edx, word [edi + 0x20]
add eax, edx
movzx eax, ax
add edi, ecx
cmp eax, 0x20000
ja 0x4711c5
movzx edx, dx
cmp edx, eax
ja 0x4711bc
sub eax, edx
mov ecx, eax
neg eax
shl edx, 2
sar eax, 0x1f
and edx, eax
add edx, edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x54], ebp
mov dword [esp + 0x18], ecx
mov dword [esp + 0x50], edx
xor eax, eax
jmp 0x47116d
mov edi, dword [esp + 0x34]
lea eax, [edi + 1]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa8]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
cmp eax, esi
jge 0x4711a8
mov edi, dword [ebp + eax*4]
cmp eax, ecx
jae 0x4711b7
mov dword [esp + 0x34], eax
mov ecx, dword [edx + eax*4]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.004704b0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x47114f
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.0047b370
mov ecx, eax
mov eax, edx
call fcn.0047b420
mov edx, eax
mov ebx, 0x20000
call fcn.0047b3f0
mov ecx, edx
call fcn.0047b420
mov ebx, 0x20000
call fcn.0047b3f0
mov ecx, eax
mov eax, edi
call fcn.0047b370
mov edx, eax
mov ebx, 0x10000
call fcn.0047b3f0
mov ebx, 0x10000
call fcn.0047b3f0
nop
call fcn.00479ef0
jmp fcn.004704b0