Function at 0x46b5e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xf39438]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x1c]
cmp eax, dword [ecx + 8]
jbe 0x46c332
sub esp, 0x9c
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x98], ecx
lea edx, [0x7dfac0]
mov dword [esp], edx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x94]
mov dword [esp + 8], ebp
call fcn.0040ec10
movzx eax, byte [esp + 0x10]
test al, al
jne 0x46bcd3
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x98], ecx
lea edx, [0x7dfac0]
mov dword [esp], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 4], edx
lea ebx, [esp + 0x94]
mov dword [esp + 8], ebx
call fcn.0040efb0
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa0]
cmp eax, ecx
je 0x46bcc4
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
movzx ebp, byte [eax + 0xf]
and ebp, 0x1f
xchg ebp, eax
cmp al, dl
xchg ebp, eax
jne 0x46bcb5
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], dl
mov dword [esp], ecx
call fcn.0046a620
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
call fcn.0046a620
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x46bca6
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004035d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x46bca6
mov ebp, dword [esp + 0xa0]
movzx esi, byte [ebp + 0xc]
xchg esi, eax
test al, 1
xchg esi, eax
jne 0x46b737
xor esi, esi
jmp 0x46b796
movzx esi, byte [ebp + 0xf]
and esi, 0x1f
cmp esi, 0x14
ja 0x46b76b
cmp esi, 0x12
ja 0x46b75c
cmp esi, 0x11
jne 0x46b752
lea esi, [ebp + 0x2c]
jmp 0x46b796
cmp esi, 0x12
jne 0x46b793
lea esi, [ebp + 0x28]
jmp 0x46b796
cmp esi, 0x13
jne 0x46b766
lea esi, [ebp + 0x24]
jmp 0x46b796
lea esi, [ebp + 0x30]
jmp 0x46b796
cmp esi, 0x16
ja 0x46b77f
cmp esi, 0x15
jne 0x46b77a
lea esi, [ebp + 0x38]
jmp 0x46b796
lea esi, [ebp + 0x24]
jmp 0x46b796
cmp esi, 0x17
jne 0x46b789
lea esi, [ebp + 0x24]
jmp 0x46b796
cmp esi, 0x19
jne 0x46b793
lea esi, [ebp + 0x30]
jmp 0x46b796
lea esi, [ebp + 0x20]
mov edi, dword [esp + 0xa4]
movzx eax, byte [edi + 0xc]
test al, 1
jne 0x46b7aa
xor eax, eax
jmp 0x46b809
movzx eax, byte [edi + 0xf]
and eax, 0x1f
cmp eax, 0x14
ja 0x46b7de
cmp eax, 0x12
ja 0x46b7cf
cmp eax, 0x11
jne 0x46b7c5
lea eax, [edi + 0x2c]
jmp 0x46b809
cmp eax, 0x12
jne 0x46b806
lea eax, [edi + 0x28]
jmp 0x46b809
cmp eax, 0x13
jne 0x46b7d9
lea eax, [edi + 0x24]
jmp 0x46b809
lea eax, [edi + 0x30]
jmp 0x46b809
cmp eax, 0x16
ja 0x46b7f2
cmp eax, 0x15
jne 0x46b7ed
lea eax, [edi + 0x38]
jmp 0x46b809
lea eax, [edi + 0x24]
jmp 0x46b809
cmp eax, 0x17
jne 0x46b7fc
lea eax, [edi + 0x24]
jmp 0x46b809
cmp eax, 0x19
jne 0x46b806
lea eax, [edi + 0x30]
jmp 0x46b809
lea eax, [edi + 0x20]
test esi, esi
jne 0x46b819
test eax, eax
je 0x46b8b8
test esi, esi
je 0x46b81d
test eax, eax
jne 0x46b82c
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov dword [esp + 0x60], eax
mov eax, dword [esi]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0046a7e0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00401500
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x60]
mov ecx, dword [ecx]
mov edx, dword [esp + 4]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0xa4]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0046a7e0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00401500
mov eax, dword [esp + 0x28]
cmp dword [esp + 8], eax
jne 0x46bc97
mov ecx, dword [esp + 0x70]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004035d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x46bc97
mov ebp, dword [esp + 0xa0]
mov edi, dword [esp + 0xa4]
movzx esi, byte [esp + 0x16]
xchg esi, eax
test al, al
xchg esi, eax
je 0x46bce2
xchg esi, eax
cmp al, 0x10
xchg esi, eax
jbe 0x46bc88
xchg esi, eax
cmp al, 0x15
xchg esi, eax
ja 0x46bb52
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jbe 0x46bab5
xchg esi, eax
cmp al, 0x13
xchg esi, eax
jne 0x46b9ad
movzx esi, word [ebp + 0x22]
cmp word [edi + 0x22], si
jne 0x46b99e
movzx esi, word [ebp + 0x20]
movzx eax, word [edi + 0x20]
cmp ax, si
jne 0x46b99e
movzx ecx, byte [ebp + 0xc]
test cl, 1
je 0x46b922
mov ecx, 0x34
jmp 0x46b927
mov ecx, 0x24
test si, si
jne 0x46b932
xor edx, edx
xor esi, esi
jmp 0x46b944
movzx edx, si
lea esi, [ecx + ebp]
cmp edx, 0x10000
ja 0x46c327
movzx ecx, byte [edi + 0xc]
test cl, 1
je 0x46b954
mov ecx, 0x34
jmp 0x46b959
mov ecx, 0x24
test ax, ax
jne 0x46b964
xor eax, eax
xor ecx, ecx
jmp 0x46b974
movzx eax, ax
add ecx, edi
cmp eax, 0x10000
ja 0x46c31b
mov dword [esp + 0x24], edx
mov dword [esp + 0x5c], esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x58], ecx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 0x3c], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x3c]
jmp 0x46c16c
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x14
xchg esi, eax
jne 0x46ba4d
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.00401500
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xa4]
mov edx, dword [ecx + 0x20]
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov dword [esp], edx
call fcn.00401500
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x46ba3e
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004035d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x46ba3e
mov edx, dword [esp + 0xa0]
mov ebx, dword [edx + 0x28]
mov ebp, dword [esp + 0xa4]
cmp dword [ebp + 0x28], ebx
jne 0x46ba2f
mov dword [esp + 0x4c], ebx
xor eax, eax
jmp 0x46bf4b
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.0046b5e0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x46ba77
xor eax, eax
jmp 0x46baa7
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xa4]
mov ecx, dword [ecx + 0x24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.0046b5e0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x11
xchg esi, eax
je 0x46bb03
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jne 0x46bce2
mov eax, dword [ebp + 0x24]
cmp dword [edi + 0x24], eax
je 0x46bad3
xor eax, eax
jmp 0x46baf5
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.0046b5e0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.0046b5e0
movzx eax, byte [esp + 0xc]
test al, al
je 0x46bb42
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa4]
cmp dword [ecx + 0x28], eax
sete al
jmp 0x46bb44
xor eax, eax
mov byte [esp + 0xac], al
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x17
xchg esi, eax
ja 0x46bbc0
xchg esi, eax
cmp al, 0x16
xchg esi, eax
jne 0x46bb90
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.0046b5e0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.0046b5e0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x18
xchg esi, eax
je 0x46bc79
xchg esi, eax
cmp al, 0x19
xchg esi, eax
jne 0x46bc72
mov eax, dword [edi + 0x28]
cmp dword [ebp + 0x28], eax
jne 0x46bc63
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.00401500
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xa4]
mov edx, dword [ecx + 0x20]
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov dword [esp], edx
call fcn.00401500
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x46bc54
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004035d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x46bc54
mov edx, dword [esp + 0xa0]
mov ebx, dword [edx + 0x28]
mov dword [esp + 0x4c], ebx
mov ebp, dword [esp + 0xa4]
xor eax, eax
jmp 0x46bd4e
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
xchg esi, eax
cmp al, 0x1a
xchg esi, eax
jne 0x46bce2
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.0043ee50
lea eax, [0x85be9b]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.0043f6c0
movzx eax, byte [esp + 0x17]
and eax, 0x1f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043f3b0
call fcn.0043f060
call fcn.0043eeb0
lea eax, [0x85b45a]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.0043d020
mov esi, dword [esp + 0x2c]
lea eax, [esi + 1]
mov ebx, dword [esp + 0x4c]
mov edx, dword [esp + 0xa0]
mov ebp, dword [esp + 0xa4]
cmp eax, ebx
jge 0x46bf19
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x46bf2d
mov ecx, dword [ebp + 0x28]
lea esi, [eax + eax*2]
cmp eax, ecx
jae 0x46bf28
mov dword [esp + 0x48], esi
mov dword [esp + 0x2c], eax
mov eax, dword [edx + 0x24]
mov dword [esp + 0x8c], eax
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x88], ecx
mov ebx, dword [eax + esi*4]
mov dword [esp], ebx
call fcn.00401500
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x88]
mov ebx, dword [edx + ecx*4]
mov ebp, dword [esp + 4]
mov dword [esp + 0x90], ebp
mov dword [esp], ebx
call fcn.00401500
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x46bf0a
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004035d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x46bf0a
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x8c]
mov edx, dword [ecx + eax*4 + 4]
mov ebx, dword [esp + 0x88]
mov ebp, dword [ebx + eax*4 + 4]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov edx, dword [esp + 0xa8]
mov dword [esp + 8], edx
call fcn.0046b5e0
movzx eax, byte [esp + 0xc]
test al, al
je 0x46befb
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x8c]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.004015c0
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x88]
mov ebx, dword [edx + ecx*4]
mov ebp, dword [esp + 4]
mov dword [esp + 0x90], ebp
mov dword [esp], ebx
call fcn.004015c0
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x46beec
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004035d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x46beec
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [ebx + edx*4 + 8]
mov esi, dword [esp + 0x88]
lea edi, [esi + edx*4 + 8]
cmp dword [edi], ebp
jne 0x46bedd
mov ebx, dword [ebx + edx*4]
mov edx, dword [esi + edx*4]
movzx ebx, byte [ebx]
movzx edx, byte [edx]
test bl, 8
setne bl
test dl, 8
setne dl
cmp dl, bl
je 0x46bd35
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.00475a60
call fcn.00475a60
mov esi, dword [esp + 0x30]
lea eax, [esi + 1]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0xa4]
mov edx, dword [esp + 0xa0]
cmp eax, ebx
jge 0x46c11f
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x46c133
mov esi, dword [edx + 0x24]
mov ecx, dword [ebp + 0x28]
lea edi, [esi + eax*8]
cmp eax, ecx
jae 0x46c12e
mov dword [esp + 0x84], esi
mov dword [esp + 0x30], eax
mov dword [esp + 0x68], edi
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x80], ecx
lea edx, [ecx + eax*8]
mov dword [esp + 0x64], edx
lea ebx, [esi + eax*8]
mov ebx, dword [ebx]
mov dword [esp], edi
mov dword [esp + 4], ebx
call fcn.0046a7e0
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x80]
lea ebx, [edx + ecx*8]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x64]
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0046a7e0
mov eax, dword [esp + 8]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
call fcn.00401500
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call fcn.00401500
mov eax, dword [esp + 0x48]
cmp dword [esp + 8], eax
jne 0x46c110
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004035d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x46c110
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.0046af90
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call fcn.0046af90
mov eax, dword [esp + 0x48]
cmp dword [esp + 8], eax
jne 0x46c101
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004035d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x46c101
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x84]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0046aa90
mov eax, dword [esp + 8]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x80]
lea edx, [edx + ecx*8 + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0x64]
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.0046aa90
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.0046b5e0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x46bf32
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.00475a60
call fcn.00475a60
mov eax, dword [esp + 0x38]
inc eax
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0xa8]
mov ecx, dword [esp + 0x20]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x5c]
mov ecx, ebp
mov ebp, dword [esp + 0xa0]
mov edi, dword [esp + 0xa4]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x38]
cmp edi, edx
jge 0x46c1aa
mov ebp, dword [esi + edi*4]
cmp edi, eax
jae 0x46c312
mov eax, dword [ecx + edi*4]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0046b5e0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x46c138
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
movzx esi, word [ebp + 0x22]
and esi, 0x7fff
nop
test si, si
jne 0x46c1c0
xor esi, esi
xor ebp, ebp
jmp 0x46c209
movzx edi, byte [ebp + 0xc]
xchg edi, eax
test al, 1
xchg edi, eax
je 0x46c1d2
mov eax, 0x34
jmp 0x46c1d7
mov eax, 0x24
movzx edi, word [ebp + 0x20]
add esi, edi
movzx edx, si
add ebp, eax
cmp edx, 0x20000
ja 0x46c308
movzx eax, di
cmp eax, edx
ja 0x46c301
sub edx, eax
mov esi, edx
neg edx
shl eax, 2
sar edx, 0x1f
and eax, edx
add ebp, eax
mov edi, dword [esp + 0xa4]
movzx eax, word [edi + 0x22]
and eax, 0x7fff
nop
test ax, ax
jne 0x46c225
xor ecx, ecx
xor edx, edx
jmp 0x46c26b
movzx ecx, byte [edi + 0xc]
test cl, 1
je 0x46c235
mov ecx, 0x34
jmp 0x46c23a
mov ecx, 0x24
movzx edx, word [edi + 0x20]
add eax, edx
movzx eax, ax
add edi, ecx
cmp eax, 0x20000
ja 0x46c2f5
movzx edx, dx
cmp edx, eax
ja 0x46c2ec
sub eax, edx
mov ecx, eax
neg eax
shl edx, 2
sar eax, 0x1f
and edx, eax
add edx, edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x54], ebp
mov dword [esp + 0x18], ecx
mov dword [esp + 0x50], edx
xor eax, eax
jmp 0x46c29d
mov edi, dword [esp + 0x34]
lea eax, [edi + 1]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa8]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
cmp eax, esi
jge 0x46c2d8
mov edi, dword [ebp + eax*4]
cmp eax, ecx
jae 0x46c2e7
mov dword [esp + 0x34], eax
mov ecx, dword [edx + eax*4]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0046b5e0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x46c27f
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.00475a60
mov ecx, eax
mov eax, edx
call fcn.00475b10
mov edx, eax
mov ebx, 0x20000
call fcn.00475ae0
mov ecx, edx
call fcn.00475b10
mov ebx, 0x20000
call fcn.00475ae0
mov ecx, eax
mov eax, edi
call fcn.00475a60
mov edx, eax
mov ebx, 0x10000
call fcn.00475ae0
mov ebx, 0x10000
call fcn.00475ae0
nop
call fcn.004745e0
jmp fcn.0046b5e0