Function at 0x461a80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xa6fb1c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x18]
cmp eax, dword [ecx + 8]
jbe 0x4627e4
sub esp, 0x98
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x94], ecx
lea edx, [0x735b80]
mov dword [esp], edx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x90]
mov dword [esp + 8], ebp
call fcn.00467830
movzx eax, byte [esp + 0x10]
test al, al
jne 0x462185
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x94], ecx
lea edx, [0x735b80]
mov dword [esp], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
lea ebx, [esp + 0x90]
mov dword [esp + 8], ebx
call fcn.00467a30
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x9c]
cmp eax, ecx
je 0x462176
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
movzx ebp, byte [eax + 0xf]
and ebp, 0x1f
xchg ebp, eax
cmp al, dl
xchg ebp, eax
jne 0x462167
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], dl
mov dword [esp], ecx
call fcn.00461060
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0xa0]
mov dword [esp], edx
call fcn.00461060
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x462158
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x462158
mov ebp, dword [esp + 0x9c]
movzx esi, byte [ebp + 0xc]
xchg esi, eax
test al, 1
xchg esi, eax
jne 0x461bd7
xor esi, esi
jmp 0x461c48
movzx esi, byte [ebp + 0xf]
and esi, 0x1f
xchg esi, eax
cmp al, 0x14
xchg esi, eax
ja 0x461c15
xchg esi, eax
cmp al, 0x12
xchg esi, eax
ja 0x461c04
xchg esi, eax
cmp al, 0x11
xchg esi, eax
jne 0x461bf8
lea esi, [ebp + 0x2c]
jmp 0x461c48
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jne 0x461c45
lea esi, [ebp + 0x28]
jmp 0x461c48
xchg esi, eax
cmp al, 0x13
xchg esi, eax
jne 0x461c10
lea esi, [ebp + 0x24]
jmp 0x461c48
lea esi, [ebp + 0x30]
jmp 0x461c48
xchg esi, eax
cmp al, 0x16
xchg esi, eax
ja 0x461c2d
xchg esi, eax
cmp al, 0x15
xchg esi, eax
jne 0x461c28
lea esi, [ebp + 0x38]
jmp 0x461c48
lea esi, [ebp + 0x24]
jmp 0x461c48
xchg esi, eax
cmp al, 0x17
xchg esi, eax
jne 0x461c39
lea esi, [ebp + 0x24]
jmp 0x461c48
xchg esi, eax
cmp al, 0x19
xchg esi, eax
jne 0x461c45
lea esi, [ebp + 0x30]
jmp 0x461c48
lea esi, [ebp + 0x20]
mov edi, dword [esp + 0xa0]
movzx eax, byte [edi + 0xc]
test al, 1
jne 0x461c5c
xor eax, eax
jmp 0x461cbb
movzx eax, byte [edi + 0xf]
and eax, 0x1f
cmp al, 0x14
ja 0x461c90
cmp al, 0x12
ja 0x461c81
cmp al, 0x11
jne 0x461c77
lea eax, [edi + 0x2c]
jmp 0x461cbb
cmp al, 0x12
jne 0x461cb8
lea eax, [edi + 0x28]
jmp 0x461cbb
cmp al, 0x13
jne 0x461c8b
lea eax, [edi + 0x24]
jmp 0x461cbb
lea eax, [edi + 0x30]
jmp 0x461cbb
cmp al, 0x16
ja 0x461ca4
cmp al, 0x15
jne 0x461c9f
lea eax, [edi + 0x38]
jmp 0x461cbb
lea eax, [edi + 0x24]
jmp 0x461cbb
cmp al, 0x17
jne 0x461cae
lea eax, [edi + 0x24]
jmp 0x461cbb
cmp al, 0x19
jne 0x461cb8
lea eax, [edi + 0x30]
jmp 0x461cbb
lea eax, [edi + 0x20]
test esi, esi
jne 0x461ccb
test eax, eax
je 0x461d6a
test esi, esi
je 0x461ccf
test eax, eax
jne 0x461cde
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov dword [esp + 0x60], eax
mov eax, dword [esi]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00470030
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.004028d0
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x60]
mov ecx, dword [ecx]
mov edx, dword [esp + 4]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00470030
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.004028d0
mov eax, dword [esp + 0x28]
cmp dword [esp + 8], eax
jne 0x462149
mov ecx, dword [esp + 0x70]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x462149
mov ebp, dword [esp + 0x9c]
mov edi, dword [esp + 0xa0]
movzx esi, byte [esp + 0x16]
xchg esi, eax
test al, al
xchg esi, eax
je 0x462194
xchg esi, eax
cmp al, 0x10
xchg esi, eax
jbe 0x46213a
xchg esi, eax
cmp al, 0x15
xchg esi, eax
ja 0x462004
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jbe 0x461f67
xchg esi, eax
cmp al, 0x13
xchg esi, eax
jne 0x461e5f
movzx esi, word [ebp + 0x22]
cmp word [edi + 0x22], si
jne 0x461e50
movzx esi, word [ebp + 0x20]
movzx eax, word [edi + 0x20]
cmp ax, si
jne 0x461e50
movzx ecx, byte [ebp + 0xc]
test cl, 1
je 0x461dd4
mov ecx, 0x34
jmp 0x461dd9
mov ecx, 0x24
test si, si
jne 0x461de4
xor edx, edx
xor esi, esi
jmp 0x461df6
movzx edx, si
lea esi, [ecx + ebp]
cmp edx, 0x10000
ja 0x4627d9
movzx ecx, byte [edi + 0xc]
test cl, 1
je 0x461e06
mov ecx, 0x34
jmp 0x461e0b
mov ecx, 0x24
test ax, ax
jne 0x461e16
xor eax, eax
xor ecx, ecx
jmp 0x461e26
movzx eax, ax
add ecx, edi
cmp eax, 0x10000
ja 0x4627cd
mov dword [esp + 0x5c], esi
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x58], ecx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 0x3c], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x3c]
jmp 0x46261e
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
xchg esi, eax
cmp al, 0x14
xchg esi, eax
jne 0x461eff
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.004028d0
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 0x20]
mov ebx, dword [esp + 4]
mov dword [esp + 0x8c], ebx
mov dword [esp], edx
call fcn.004028d0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x461ef0
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x461ef0
mov edx, dword [esp + 0x9c]
mov ebx, dword [edx + 0x28]
mov ebp, dword [esp + 0xa0]
cmp dword [ebp + 0x28], ebx
jne 0x461ee1
mov dword [esp + 0x4c], ebx
xor eax, eax
jmp 0x4623fd
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.00461a80
movzx eax, byte [esp + 0xc]
test al, al
jne 0x461f29
xor eax, eax
jmp 0x461f59
mov eax, dword [esp + 0x9c]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xa0]
mov ecx, dword [ecx + 0x24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.00461a80
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xa8], al
add esp, 0x98
ret
xchg esi, eax
cmp al, 0x11
xchg esi, eax
je 0x461fb5
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jne 0x462194
mov eax, dword [ebp + 0x24]
cmp dword [edi + 0x24], eax
je 0x461f85
xor eax, eax
jmp 0x461fa7
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.00461a80
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xa8], al
add esp, 0x98
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.00461a80
movzx eax, byte [esp + 0xc]
test al, al
je 0x461ff4
mov eax, dword [esp + 0x9c]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa0]
cmp dword [ecx + 0x28], eax
sete al
jmp 0x461ff6
xor eax, eax
mov byte [esp + 0xa8], al
add esp, 0x98
ret
xchg esi, eax
cmp al, 0x17
xchg esi, eax
ja 0x462072
xchg esi, eax
cmp al, 0x16
xchg esi, eax
jne 0x462042
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.00461a80
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xa8], al
add esp, 0x98
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.00461a80
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xa8], al
add esp, 0x98
ret
xchg esi, eax
cmp al, 0x18
xchg esi, eax
je 0x46212b
xchg esi, eax
cmp al, 0x19
xchg esi, eax
jne 0x462124
mov eax, dword [edi + 0x28]
cmp dword [ebp + 0x28], eax
jne 0x462115
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.004028d0
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 0x20]
mov ebx, dword [esp + 4]
mov dword [esp + 0x8c], ebx
mov dword [esp], edx
call fcn.004028d0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x462106
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x462106
mov edx, dword [esp + 0x9c]
mov ebx, dword [edx + 0x28]
mov dword [esp + 0x4c], ebx
mov ebp, dword [esp + 0xa0]
xor eax, eax
jmp 0x462200
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
xchg esi, eax
cmp al, 0x1a
xchg esi, eax
jne 0x462194
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
call fcn.00438700
lea eax, [0x79a053]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.00438f60
movzx eax, byte [esp + 0x17]
and eax, 0x1f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438c50
call fcn.00438900
call fcn.00438760
lea eax, [0x7997cc]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.0046baa0
mov esi, dword [esp + 0x2c]
lea eax, [esi + 1]
mov ebx, dword [esp + 0x4c]
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0xa0]
cmp eax, ebx
jge 0x4623cb
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x4623df
mov ecx, dword [ebp + 0x28]
lea esi, [eax + eax*2]
cmp eax, ecx
jae 0x4623da
mov dword [esp + 0x48], esi
mov dword [esp + 0x2c], eax
mov eax, dword [edx + 0x24]
mov dword [esp + 0x88], eax
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x84], ecx
mov ebx, dword [eax + esi*4]
mov dword [esp], ebx
call fcn.004028d0
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x84]
mov ebx, dword [edx + ecx*4]
mov ebp, dword [esp + 4]
mov dword [esp + 0x8c], ebp
mov dword [esp], ebx
call fcn.004028d0
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x4623bc
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4623bc
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x88]
mov edx, dword [ecx + eax*4 + 4]
mov ebx, dword [esp + 0x84]
mov ebp, dword [ebx + eax*4 + 4]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov edx, dword [esp + 0xa4]
mov dword [esp + 8], edx
call fcn.00461a80
movzx eax, byte [esp + 0xc]
test al, al
je 0x4623ad
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x88]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.00402990
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x84]
mov ebx, dword [edx + ecx*4]
mov ebp, dword [esp + 4]
mov dword [esp + 0x8c], ebp
mov dword [esp], ebx
call fcn.00402990
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x46239e
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x46239e
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x88]
mov ebp, dword [ebx + edx*4 + 8]
mov esi, dword [esp + 0x84]
lea edi, [esi + edx*4 + 8]
cmp dword [edi], ebp
jne 0x46238f
mov ebx, dword [ebx + edx*4]
mov edx, dword [esi + edx*4]
movzx ebx, byte [ebx]
movzx edx, byte [edx]
test bl, 8
setne bl
test dl, 8
setne dl
cmp dl, bl
je 0x4621e7
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
call fcn.00472150
call fcn.00472150
mov esi, dword [esp + 0x30]
lea eax, [esi + 1]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0xa0]
mov edx, dword [esp + 0x9c]
cmp eax, ebx
jge 0x4625d1
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x4625e5
mov esi, dword [edx + 0x24]
mov ecx, dword [ebp + 0x28]
lea edi, [esi + eax*8]
cmp eax, ecx
jae 0x4625e0
mov dword [esp + 0x80], esi
mov dword [esp + 0x30], eax
mov dword [esp + 0x68], edi
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x7c], ecx
lea edx, [ecx + eax*8]
mov dword [esp + 0x64], edx
lea ebx, [esi + eax*8]
mov ebx, dword [ebx]
mov dword [esp], edi
mov dword [esp + 4], ebx
call fcn.00470030
mov eax, dword [esp + 8]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x7c]
lea ebx, [edx + ecx*8]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x64]
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.00470030
mov eax, dword [esp + 8]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
call fcn.004028d0
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call fcn.004028d0
mov eax, dword [esp + 0x48]
cmp dword [esp + 8], eax
jne 0x4625c2
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4625c2
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00461430
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call fcn.00461430
mov eax, dword [esp + 0x48]
cmp dword [esp + 8], eax
jne 0x4625b3
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4625b3
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x80]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004702e0
mov eax, dword [esp + 8]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x7c]
lea edx, [edx + ecx*8 + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0x64]
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.004702e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.00461a80
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4623e4
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
call fcn.00472150
call fcn.00472150
mov eax, dword [esp + 0x38]
inc eax
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x20]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x5c]
mov ecx, ebp
mov ebp, dword [esp + 0x9c]
mov edi, dword [esp + 0xa0]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x38]
cmp edi, edx
jge 0x46265c
mov ebp, dword [esi + edi*4]
cmp edi, eax
jae 0x4627c4
mov eax, dword [ecx + edi*4]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00461a80
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4625ea
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
movzx esi, word [ebp + 0x22]
and esi, 0x7fff
nop
test si, si
jne 0x462672
xor esi, esi
xor ebp, ebp
jmp 0x4626bb
movzx edi, byte [ebp + 0xc]
xchg edi, eax
test al, 1
xchg edi, eax
je 0x462684
mov eax, 0x34
jmp 0x462689
mov eax, 0x24
movzx edi, word [ebp + 0x20]
add esi, edi
movzx edx, si
add ebp, eax
cmp edx, 0x20000
ja 0x4627ba
movzx eax, di
cmp eax, edx
ja 0x4627b3
sub edx, eax
mov esi, edx
neg edx
shl eax, 2
sar edx, 0x1f
and eax, edx
add ebp, eax
mov edi, dword [esp + 0xa0]
movzx eax, word [edi + 0x22]
and eax, 0x7fff
nop
test ax, ax
jne 0x4626d7
xor ecx, ecx
xor edx, edx
jmp 0x46271d
movzx ecx, byte [edi + 0xc]
test cl, 1
je 0x4626e7
mov ecx, 0x34
jmp 0x4626ec
mov ecx, 0x24
movzx edx, word [edi + 0x20]
add eax, edx
movzx eax, ax
add edi, ecx
cmp eax, 0x20000
ja 0x4627a7
movzx edx, dx
cmp edx, eax
ja 0x46279e
sub eax, edx
mov ecx, eax
neg eax
shl edx, 2
sar eax, 0x1f
and edx, eax
add edx, edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x54], ebp
mov dword [esp + 0x18], ecx
mov dword [esp + 0x50], edx
xor eax, eax
jmp 0x46274f
mov edi, dword [esp + 0x34]
lea eax, [edi + 1]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
cmp eax, esi
jge 0x46278a
mov edi, dword [ebp + eax*4]
cmp eax, ecx
jae 0x462799
mov dword [esp + 0x34], eax
mov ecx, dword [edx + eax*4]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00461a80
movzx eax, byte [esp + 0xc]
test al, al
jne 0x462731
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
call fcn.00472150
mov ecx, eax
mov eax, edx
call fcn.004721f0
mov edx, eax
mov ebx, 0x20000
call fcn.004721d0
mov ecx, edx
call fcn.004721f0
mov ebx, 0x20000
call fcn.004721d0
mov ecx, eax
mov eax, edi
call fcn.00472150
mov edx, eax
mov ebx, 0x10000
call fcn.004721d0
mov ebx, 0x10000
call fcn.004721d0
nop
call fcn.00470cd0
jmp fcn.00461a80