Function at 0x468030
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x58]
cmp eax, dword [ecx + 8]
jbe 0x469563
sub esp, 0xd8
mov eax, 0
lea edi, [esp + 0xc4]
call fcn.0044c96b
mov edi, esp
lea esi, [esp + 0xdc]
call fcn.0044ce4e
call fcn.0046ed60
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xb4], edx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x6c], ebx
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x68], ebp
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x100]
mov esi, 0xffffffff
mov dword [esp + 0x30], esi
mov edi, 0xffffffff
mov dword [esp + 0x5c], edi
xor edi, edi
mov dword [esp + 0x50], edi
xor esi, esi
mov dword [esp + 0x60], esi
xor esi, esi
mov dword [esp + 0x54], esi
xor esi, esi
mov dword [esp + 0x40], esi
mov esi, dword [esp + 0xfc]
mov edi, dword [esp + 0x100]
jmp 0x468122
mov edx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x68]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x30], ebp
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], esi
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x6c]
mov esi, dword [esp + 0xa8]
mov ebp, dword [esp + 0x68]
test edi, edi
je 0x469503
mov dword [esp], esi
mov dword [esp + 4], edi
call fcn.00466780
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x38], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xa8], edx
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
test ebx, ebx
jne 0x469425
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
test eax, eax
je 0x469409
mov dword [esp + 0xc0], ebx
mov dword [esp + 0xa4], ebp
mov dword [esp + 0xa0], esi
mov edi, ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
jge 0x4681a8
test eax, 0x100
jne 0x4693b3
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jge 0x4681bf
test eax, 0x200
jne 0x46931f
mov dword [esp + 0x5c], ecx
and eax, 0xffff
cmp eax, 0x108
jg 0x468df5
cmp eax, 0x102
jg 0x468a26
cmp eax, 0x1f
jg 0x4687dd
cmp eax, 0x15
je 0x468599
lea ecx, [eax - 0x16]
cmp ecx, 9
ja 0x46858e
mov ecx, dword [esp + 0x64]
test ecx, ecx
jne 0x468583
mov eax, ecx
mov ecx, dword [esp + 0x3c]
cmp ecx, 0x16
jne 0x468268
lea ecx, [ebp + 1]
cmp ecx, esi
jg 0x468223
mov byte [ebx + ebp], 0x5a
jmp 0x4680e7
lea eax, [0x7718e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.00438b10
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov ebp, dword [esp + 0xa4]
mov edi, dword [esp + 0x38]
jmp 0x46821a
cmp ecx, 0x19
je 0x468213
cmp ecx, 0x17
je 0x468213
cmp ecx, 0x18
je 0x468213
cmp ecx, 0x1a
je 0x468213
mov eax, 0x88888889
mov edx, dword [esp + 0x64]
imul edx
mov eax, edi
mov edi, dword [esp + 0x64]
add edx, edi
sar edi, 0x1f
sar edx, 5
mov dword [esp + 0x9c], edx
sub edx, edi
test edx, edx
jge 0x468519
lea edx, [ebp + 1]
cmp edx, esi
jg 0x4684ca
mov byte [ebx + ebp], 0x2d
mov ebp, dword [esp + 0x9c]
sub edi, ebp
mov ebp, dword [esp + 0x64]
xchg ebp, ebx
neg ebx
xchg ebp, ebx
mov dword [esp + 0x28], edi
mov dword [esp + 0x9c], ebp
mov eax, 0x88888889
mov ecx, edx
imul edi
add edx, edi
sar edx, 5
sar edi, 0x1f
sub edx, edi
mov dword [esp + 0x98], edx
mov dword [esp + 0xc], edx
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0x10], 2
call fcn.00467690
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x3c]
cmp ebp, 0x19
jne 0x4684a8
lea esi, [edx + 1]
cmp esi, ecx
jg 0x468464
mov byte [ebx + edx], 0x3a
cmp ebp, 0x1d
je 0x46833f
cmp ebp, 0x18
jne 0x468423
cmp ebp, 0x17
je 0x46836d
cmp ebp, 0x1c
je 0x46836d
cmp ebp, 0x1f
je 0x46836d
cmp ebp, 0x1a
je 0x46836d
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
mov ebp, ecx
mov ecx, esi
mov esi, ebp
jmp 0x4680e7
cmp ebp, 0x1f
jne 0x468413
lea edx, [esi + 1]
cmp edx, ecx
jg 0x4683d3
mov byte [ebx + esi], 0x3a
mov eax, dword [esp + 0x9c]
mov ebp, 0x88888889
mov esi, edx
imul ebp
mov edi, dword [esp + 0x9c]
add edx, edi
mov eax, edi
sar edi, 0x1f
sar edx, 5
sub edx, edi
imul edx, edx, 0x3c
sub eax, edx
mov dword [esp + 0xc], eax
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 2
call fcn.00467690
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
jmp 0x468353
mov dword [esp + 0x94], esi
lea eax, [0x7718e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.00438b10
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov esi, dword [esp + 0x94]
jmp 0x46837d
cmp ebp, 0x1a
je 0x468376
mov edx, esi
jmp 0x468381
mov eax, dword [esp + 0x98]
imul eax, eax, 0x3c
mov edx, dword [esp + 0x28]
sub edx, eax
mov dword [esp + 0xc], edx
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 2
call fcn.00467690
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x3c]
jmp 0x46833f
mov dword [esp + 0x90], edx
lea eax, [0x7718e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.00438b10
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov edx, dword [esp + 0x90]
mov ebp, dword [esp + 0x3c]
jmp 0x46832d
cmp ebp, 0x1e
je 0x468322
cmp ebp, 0x1a
je 0x468322
cmp ebp, 0x1f
je 0x468322
mov esi, edx
jmp 0x468331
mov dword [esp + 0x98], edi
lea eax, [0x7718e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.00438b10
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov ebp, dword [esp + 0xa4]
mov edi, dword [esp + 0x98]
jmp 0x4682b1
lea edi, [ebp + 1]
cmp edi, esi
jg 0x468537
mov byte [ebx + ebp], 0x2b
mov ebp, dword [esp + 0x64]
mov ebp, edx
mov edx, edi
mov edi, ebp
mov ebp, dword [esp + 0x64]
jmp 0x4682c8
mov dword [esp + 0x8c], edx
lea eax, [0x7718e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
call fcn.00438b10
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edi, [eax + 1]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x8c]
mov ebp, dword [esp + 0xa4]
jmp 0x468520
mov eax, ecx
mov ecx, dword [esp + 0x3c]
jmp 0x46827c
mov eax, dword [esp + 0x64]
mov ecx, ebp
jmp 0x4680e7
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x46865c
lea eax, [ecx + ebp]
mov dword [esp + 0xf4], eax
cmp eax, esi
ja 0x468614
test eax, eax
jl 0x46951d
cmp eax, esi
ja 0x46951d
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xf8], esi
lea eax, [ebx + ebp]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d070
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
mov ebx, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
jmp 0x4680e7
lea ecx, [0x7718e0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.00438b10
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0xa8]
mov ebp, dword [esp + 0xa4]
mov edi, dword [esp + 0x38]
jmp 0x4685b3
mov eax, 0x88888889
mov ecx, dword [esp + 0x64]
imul ecx
add edx, ecx
mov eax, ecx
sar ecx, 0x1f
sar edx, 5
mov dword [esp + 0x9c], edx
sub edx, ecx
test edx, edx
jge 0x46877b
lea edx, [ebp + 1]
cmp edx, esi
jg 0x46872c
mov byte [ebx + ebp], 0x2d
mov ebp, dword [esp + 0x9c]
sub ecx, ebp
mov dword [esp + 0x2c], ecx
mov eax, 0x88888889
mov ebp, edx
imul ecx
add edx, ecx
sar ecx, 0x1f
sar edx, 5
sub edx, ecx
mov dword [esp + 0x9c], edx
mov dword [esp + 0xc], edx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0x10], 2
call fcn.00467690
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x9c]
imul ebp, ebp, 0x3c
mov esi, dword [esp + 0x2c]
sub esi, ebp
mov dword [esp + 0xc], esi
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0x10], 2
call fcn.00467690
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
mov dword [esp + 0x98], ecx
lea eax, [0x7718e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.00438b10
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x98]
mov ebp, dword [esp + 0xa4]
mov edi, dword [esp + 0x38]
jmp 0x46868d
lea ecx, [ebp + 1]
cmp ecx, esi
jg 0x468791
mov byte [ebx + ebp], 0x2b
mov ebp, edx
mov edx, ecx
mov ecx, ebp
jmp 0x46869a
mov dword [esp + 0x88], edx
lea eax, [0x7718e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.00438b10
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x88]
mov ebp, dword [esp + 0xa4]
mov edi, dword [esp + 0x38]
jmp 0x468782
lea ecx, [eax - 0x20]
cmp ecx, 1
jbe 0x4689b6
cmp eax, 0x101
je 0x4688d0
cmp eax, 0x102
jne 0x46858e
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.0046e950
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
cmp eax, 3
jb 0x469555
mov eax, dword [esp + 0xa4]
lea edx, [eax + 3]
mov ebx, dword [esp + 0xa0]
cmp edx, ebx
ja 0x46887b
mov ebp, dword [esp + 0xc0]
test edx, edx
jl 0x469555
cmp edx, ebx
ja 0x469555
mov esi, ebp
movzx ebp, word [ecx]
mov edi, ebp
movzx ebp, byte [ecx + 2]
mov word [esi + eax], di
xchg ebp, ebx
mov byte [esi + eax + 2], bl
xchg ebp, ebx
mov eax, dword [esp + 0x64]
mov edi, dword [esp + 0x38]
mov ecx, edx
mov edx, dword [esp + 0xa8]
mov ebp, ebx
mov ebx, esi
mov esi, ebp
jmp 0x4680e7
mov dword [esp + 0x84], edx
mov dword [esp + 0xbc], ecx
lea ecx, [0x7718e0]
mov dword [esp], ecx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00438b10
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0x84]
jmp 0x468838
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.0046e950
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xa4]
lea ebx, [eax + edx]
mov dword [esp + 0xf4], ebx
mov ebp, dword [esp + 0xa0]
cmp ebx, ebp
ja 0x468960
mov esi, dword [esp + 0xc0]
test ebx, ebx
jl 0x46954e
cmp ebx, ebp
ja 0x46954e
mov dword [esp + 0xf8], ebp
mov dword [esp + 0xf0], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044d070
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
mov ebx, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
jmp 0x4680e7
mov dword [esp + 0x58], eax
mov dword [esp + 0xb8], ecx
lea eax, [0x7718e0]
mov dword [esp], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00438b10
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0xf4]
jmp 0x468907
lea edi, [esp + 0xc4]
lea esi, [esp + 0xdc]
call fcn.0044ce4e
mov ecx, dword [esp + 0xc4]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov edx, dword [esp + 0xa0]
mov dword [esp + 8], edx
and ecx, 0x3fffffff
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x3c]
sar ecx, 0x10
mov dword [esp + 0x10], ecx
cmp eax, 0x21
sete al
mov byte [esp + 0x14], al
call fcn.004679b0
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
cmp eax, 0x105
jg 0x468bea
cmp eax, 0x103
je 0x468baa
cmp eax, 0x104
jne 0x468a83
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.00467690
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
mov eax, dword [esp + 0x68]
add eax, 0x15180
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
adc eax, 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x93a80
mov dword [esp + 0xc], 0
call fcn.00448400
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
mov eax, ecx
sar ecx, 0x1f
add eax, edx
sar eax, 0x10
sub eax, ecx
mov dword [esp], eax
call fcn.0046ea50
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xa4]
lea ebx, [eax + edx]
mov dword [esp + 0xf4], ebx
mov ebp, dword [esp + 0xa0]
cmp ebx, ebp
ja 0x468b54
mov esi, dword [esp + 0xc0]
test ebx, ebx
jl 0x469540
cmp ebx, ebp
ja 0x469540
mov dword [esp + 0xf8], ebp
mov dword [esp + 0xf0], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0044d070
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
mov ebx, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
jmp 0x4680e7
mov dword [esp + 0x44], eax
mov dword [esp + 0xac], ecx
lea eax, [0x7718e0]
mov dword [esp], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00438b10
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0xf4]
jmp 0x468afb
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.00467690
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
cmp eax, 0x106
je 0x468ce3
cmp eax, 0x107
je 0x468ca3
mov eax, dword [esp + 0x60]
cmp eax, 0xa
jge 0x468c9c
lea ecx, [ebp + 1]
cmp ecx, esi
jg 0x468c54
mov byte [ebx + ebp], 0x20
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.00467690
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
lea eax, [0x7718e0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ecx
call fcn.00438b10
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0xa8]
mov ebp, dword [esp + 0xa4]
mov edi, dword [esp + 0x38]
jmp 0x468c14
mov ecx, ebp
jmp 0x468c18
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.00467690
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
mov eax, dword [esp + 0x68]
add eax, 0x15180
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
adc eax, 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x93a80
mov dword [esp + 0xc], 0
call fcn.00448400
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
mov eax, ecx
sar ecx, 0x1f
add eax, edx
sar eax, 0x10
sub eax, ecx
mov dword [esp], eax
call fcn.0046ea50
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
cmp eax, 3
jb 0x469547
mov eax, dword [esp + 0xa4]
lea edx, [eax + 3]
mov ebx, dword [esp + 0xa0]
cmp edx, ebx
ja 0x468da0
mov ebp, dword [esp + 0xc0]
test edx, edx
jl 0x469547
cmp edx, ebx
ja 0x469547
mov esi, ebp
movzx ebp, word [ecx]
mov edi, ebp
movzx ebp, byte [ecx + 2]
mov word [esi + eax], di
xchg ebp, ebx
mov byte [esi + eax + 2], bl
xchg ebp, ebx
mov eax, dword [esp + 0x64]
mov edi, dword [esp + 0x38]
mov ecx, edx
mov edx, dword [esp + 0xa8]
mov ebp, ebx
mov ebx, esi
mov esi, ebp
jmp 0x4680e7
mov dword [esp + 0x80], edx
mov dword [esp + 0xbc], ecx
lea ecx, [0x7718e0]
mov dword [esp], ecx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00438b10
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0x80]
jmp 0x468d5d
cmp eax, 0x20c
jg 0x46901d
cmp eax, 0x112
jg 0x468f04
cmp eax, 0x109
je 0x468ec4
cmp eax, 0x111
je 0x468e84
cmp eax, 0x112
jne 0x46858e
mov ecx, dword [esp + 0x34]
test ecx, ecx
jge 0x468e32
neg ecx
mov eax, 0x51eb851f
imul ecx
mov edi, ecx
sar ecx, 0x1f
sar edx, 5
sub edx, ecx
imul ecx, edx, 0x64
sub edi, ecx
mov dword [esp + 0xc], edi
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0x10], 2
call fcn.00467690
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.00467690
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.00467690
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
cmp eax, 0x20a
je 0x468fe1
cmp eax, 0x20b
je 0x468f81
cmp eax, 0x20c
jne 0x46858e
mov eax, 0xaaaaaaab
imul ecx
add edx, ecx
sar edx, 3
mov eax, ecx
sar ecx, 0x1f
sub edx, ecx
lea ecx, [edx + edx*2]
shl ecx, 2
sub eax, ecx
test eax, eax
jne 0x468f45
mov eax, 0xc
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.00467690
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
mov eax, 0xaaaaaaab
imul ecx
add edx, ecx
mov eax, ecx
sar ecx, 0x1f
sar edx, 3
sub edx, ecx
lea ecx, [edx + edx*2]
shl ecx, 2
sub eax, ecx
test eax, eax
jne 0x468fa5
mov eax, 0xc
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.00467690
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.00467690
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
cmp eax, 0x20f
jle 0x46924d
cmp eax, 0x210
je 0x46920d
cmp eax, 0x213
jne 0x469120
cmp ecx, 0xc
jl 0x4690b6
lea eax, [ebp + 2]
cmp eax, esi
ja 0x469070
test eax, eax
jl 0x469539
cmp eax, esi
ja 0x469539
movzx ecx, word [0x7d41fe]
mov word [ebx + ebp], cx
mov ecx, eax
mov eax, dword [esp + 0x64]
jmp 0x4680e7
mov dword [esp + 0x7c], eax
lea ecx, [0x7718e0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.00438b10
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xa8]
mov ebp, dword [esp + 0xa4]
mov edi, dword [esp + 0x38]
jmp 0x46904a
lea eax, [ebp + 2]
cmp eax, esi
ja 0x4690da
test eax, eax
jl 0x469532
cmp eax, esi
ja 0x469532
movzx ecx, word [0x7d41d8]
mov word [ebx + ebp], cx
jmp 0x469065
mov dword [esp + 0x78], eax
lea ecx, [0x7718e0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.00438b10
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xa8]
mov ebp, dword [esp + 0xa4]
mov edi, dword [esp + 0x38]
jmp 0x4690bd
cmp eax, 0x214
jne 0x46858e
cmp ecx, 0xc
jl 0x4691a3
lea eax, [ebp + 2]
cmp eax, esi
ja 0x46915d
test eax, eax
jl 0x46952b
cmp eax, esi
ja 0x46952b
movzx ecx, word [0x7d428a]
mov word [ebx + ebp], cx
mov ecx, eax
mov eax, dword [esp + 0x64]
jmp 0x4680e7
mov dword [esp + 0x74], eax
lea ecx, [0x7718e0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.00438b10
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xa8]
mov ebp, dword [esp + 0xa4]
mov edi, dword [esp + 0x38]
jmp 0x469137
lea eax, [ebp + 2]
cmp eax, esi
ja 0x4691c7
test eax, eax
jl 0x469524
cmp eax, esi
ja 0x469524
movzx ecx, word [0x7d426c]
mov word [ebx + ebp], cx
jmp 0x469152
mov dword [esp + 0x70], eax
lea ecx, [0x7718e0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.00438b10
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xa8]
mov ebp, dword [esp + 0xa4]
mov edi, dword [esp + 0x38]
jmp 0x4691aa
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.00467690
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
cmp eax, 0x20d
je 0x4692df
cmp eax, 0x20e
jne 0x46929f
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.00467690
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.00467690
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.00467690
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x38]
jmp 0x4680e7
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x15180
mov dword [esp + 0xc], 0
call fcn.00448400
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0x91a2b3c5
imul ecx
lea eax, [edx + ecx]
mov edx, ecx
sar ecx, 0x1f
sar eax, 0xb
sub eax, ecx
imul ecx, eax, 0xe10
sub edx, ecx
mov ecx, eax
mov eax, 0x88888889
mov ebx, edx
imul edx
lea eax, [ebx + edx]
mov edx, ebx
sar ebx, 0x1f
sar eax, 5
sub eax, ebx
imul ebx, eax, 0x3c
sub edx, ebx
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xa4]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x38]
mov dword [esp + 0x54], eax
mov dword [esp + 0x40], edx
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0xa8]
jmp 0x4681bf
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov byte [esp + 8], 1
call fcn.004708e0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xa4]
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0x38]
mov dword [esp + 0x50], eax
mov dword [esp + 0x60], edx
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0xa8]
jmp 0x4681a8
mov dword [esp + 0x104], ebx
mov dword [esp + 0x108], ebp
mov dword [esp + 0x10c], esi
add esp, 0xd8
ret
mov esi, dword [esp + 0xf4]
lea edi, [ebx + esi]
mov dword [esp + 0x9c], edi
mov ecx, dword [esp + 0xf8]
cmp edi, ecx
ja 0x46949b
test edi, edi
jl 0x46955c
cmp edi, ecx
ja 0x46955c
mov dword [esp + 0xf8], ecx
mov eax, dword [esp + 0xf0]
lea ecx, [eax + esi]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.0044d070
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0xf0]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xf8]
jmp 0x468176
mov dword [esp + 0x48], ebx
mov dword [esp + 0xb0], ebp
lea eax, [0x7718e0]
mov dword [esp], eax
mov edx, dword [esp + 0xf0]
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edi
call fcn.00438b10
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0xb0]
mov esi, dword [esp + 0xf4]
mov edi, dword [esp + 0x9c]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x3c]
jmp 0x469441
mov ebp, dword [esp + 0xf4]
mov esi, dword [esp + 0xf8]
mov ebx, dword [esp + 0xf0]
jmp 0x469409
call fcn.00426530
ud2
call fcn.00426530
ud2
call fcn.00426530
ud2
call fcn.00426530
ud2
call fcn.00426530
ud2
call fcn.00426530
ud2
call fcn.00426530
ud2
call fcn.00426530
ud2
call fcn.00426530
ud2
call fcn.00426530
ud2
call fcn.0044b110
jmp fcn.00468030