Function at 0x466d95
Capabilities:
Inspect section memory permissions

Disassembly:
sub esp, 0x1b8
push ebx
push ebp
push esi
push edi
xor ebp, ebp
push 0x80
lea eax, [esp + 0x4c]
push ebp
push eax
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x38], ebp
call fcn.0047cfc5
mov ecx, dword [esp + 0x1dc]
mov al, byte [ecx]
add esp, 0xc
test al, al
mov dword [esp + 0x20], ebp
je 0x46787e
mov edx, dword [esp + 0x1d0]
mov al, byte [edx + ebp]
inc ebp
cmp al, 0x25
mov dword [esp + 0x1c], ebp
jne 0x46786d
mov ecx, edx
cmp byte [ecx + ebp], 0x25
jne 0x466dfe
inc ebp
jmp 0x46786d
mov esi, dword [esp + 0x1d0]
xor ebx, ebx
lea edi, [esp + 0x1c]
mov dword [esp + 0x24], ebx
call fcn.00466d05
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov dword [esp + 0x10], eax
cmp ecx, ebx
mov dword [esp + 0x38], ecx
jne 0x466e30
mov eax, dword [esp + 0x20]
mov dword [esp + 0x10], eax
cmp eax, 0x40
jge 0x4678b9
cmp eax, dword [esp + 0x14]
jle 0x466e43
mov dword [esp + 0x14], eax
mov ebp, dword [esp + 0x1c]
mov edx, dword [esp + 0x1d0]
mov cl, byte [edx + ebp]
or eax, 0xffffffff
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x34], eax
mov al, cl
mov dword [esp + 0x30], 0
call fcn.00466c35
test eax, eax
je 0x466fb1
movsx eax, cl
inc ebp
add eax, 0xffffffe0
cmp eax, 0x5a
mov dword [esp + 0x1c], ebp
ja case.0x4670bf.61
movzx edx, byte [eax + 0x467b7d]
jmp dword [edx*4 + 0x467b1d]
or ebx, 2
jmp case.0x466e92.90
or ebx, 4
jmp case.0x466e92.90
and ebx, 0xffffdfff
or ebx, 8
jmp case.0x466e92.90
or ebx, 0x10
jmp case.0x466e92.90
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x4670c6
mov eax, dword [esp + 0x1d0]
lea edx, [eax + ebp]
mov al, byte [edx]
cmp al, 0x2e
mov dword [esp + 0x24], 1
je case.0x466e92.90
or ebx, 0x40000
cmp al, 0x2a
je 0x466f14
cmp al, 0x40
je 0x466f14
mov eax, 0xa
lea ecx, [esp + 0x3c]
call fcn.00466c15
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x28], eax
sub ebp, dword [esp + 0x1d0]
jmp case.0x466e92.90
mov esi, dword [esp + 0x1d0]
inc ebp
lea edi, [esp + 0x1c]
mov dword [esp + 0x1c], ebp
or ebx, 0x80000
call fcn.00466d05
mov dword [esp + 0x28], eax
cmp eax, 0xffffffff
mov eax, dword [esp + 0x38]
jne 0x466f5e
mov ecx, dword [esp + 0x20]
inc ecx
test eax, eax
mov dword [esp + 0x20], ecx
je 0x466f4f
mov dword [esp + 0x28], ecx
jmp 0x466f7d
mov eax, dword [esp + 0x10]
mov dword [esp + 0x28], eax
inc eax
mov dword [esp + 0x10], eax
jmp 0x466f7d
test eax, eax
jne 0x466f6b
mov edx, dword [esp + 0x28]
inc edx
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x30]
cmp eax, dword [esp + 0x14]
jle 0x466f7d
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
cmp eax, edx
jle 0x466f8d
mov dword [esp + 0x14], eax
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1d0]
mov cl, byte [ecx + ebp]
mov al, cl
call fcn.00466c35
test eax, eax
jne 0x466e77
mov edx, dword [esp + 0x1d0]
test ebx, 0x20000
mov esi, dword [esp + 0x1d4]
mov eax, dword [esp + 0x2c]
je 0x466ff4
mov edi, dword [esp + 0x30]
inc word [esp + edi*2 + 0x48]
mov ecx, eax
imul ecx, ecx, 0x168
add ecx, esi
mov dword [esp + edi*4 + 0xc8], eax
mov dword [esp + 0x30], eax
inc eax
mov dword [ecx], 7
mov dword [ecx + 4], 0
mov dword [esp + 0x2c], eax
test ebx, 0x80000
je 0x46702c
mov edi, dword [esp + 0x28]
inc word [esp + edi*2 + 0x48]
mov ecx, eax
imul ecx, ecx, 0x168
add ecx, esi
mov dword [esp + edi*4 + 0xc8], eax
mov dword [esp + 0x28], eax
inc eax
mov dword [ecx], 7
mov dword [ecx + 4], 0
mov dword [esp + 0x2c], eax
test ebx, 0x200000
je 0x467064
mov edi, dword [esp + 0x18]
inc word [esp + edi*2 + 0x48]
mov ecx, eax
imul ecx, ecx, 0x168
add ecx, esi
mov dword [esp + edi*4 + 0xc8], eax
mov dword [esp + 0x18], eax
inc eax
mov dword [ecx], 7
mov dword [ecx + 4], 0
mov dword [esp + 0x2c], eax
test ebx, 0x20000000
je 0x46709c
mov edi, dword [esp + 0x34]
inc word [esp + edi*2 + 0x48]
mov ecx, eax
imul ecx, ecx, 0x168
add ecx, esi
mov dword [esp + edi*4 + 0xc8], eax
mov dword [esp + 0x34], eax
inc eax
mov dword [ecx], 7
mov dword [ecx + 4], 0
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0xc8], eax
movsx ecx, byte [edx + ebp]
sub ecx, 0x3c
inc ebp
cmp ecx, 0x3c
ja case.0x4670bf.61
movzx ecx, byte [ecx + 0x467c41]
jmp dword [ecx*4 + 0x467bd9]
cmp eax, 1
jne case.0x4670bf.61
mov esi, dword [esp + 0x1d0]
mov al, byte [esi + ebp]
lea edx, [esi + ebp]
or ebx, 0x100000
cmp al, 0x2a
mov dword [esp + 0x24], 2
je 0x467118
cmp al, 0x40
je 0x467118
mov eax, 0xa
lea ecx, [esp + 0x3c]
call fcn.00466c15
cmp eax, 0x24
mov dword [esp + 0x18], eax
jg case.0x4670bf.61
mov ebp, dword [esp + 0x3c]
sub ebp, esi
jmp case.0x466e92.90
mov esi, dword [esp + 0x1d0]
inc ebp
lea edi, [esp + 0x1c]
mov dword [esp + 0x1c], ebp
or ebx, 0x200000
call fcn.00466d05
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
mov eax, dword [esp + 0x38]
jne 0x467162
mov ecx, dword [esp + 0x20]
inc ecx
test eax, eax
mov dword [esp + 0x20], ecx
je 0x467153
mov dword [esp + 0x18], ecx
jmp 0x46717b
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], eax
inc eax
mov dword [esp + 0x10], eax
jmp 0x46717b
test eax, eax
mov eax, dword [esp + 0x18]
jne 0x467171
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
cmp eax, dword [esp + 0x14]
jle 0x46717b
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x14]
jle 0x466f8d
jmp 0x466f89
mov dword [esp + 0x1cc], 1
jmp 0x4671a5
cmp dword [esp + 0x1cc], 1
jne 0x467214
mov esi, dword [esp + 0x1d0]
lea edi, [esp + 0x1c]
or ebx, 0x30000
call fcn.00466d05
cmp eax, 0xffffffff
mov dword [esp + 0x30], eax
jne 0x4671f2
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x38]
inc ecx
test eax, eax
mov dword [esp + 0x20], ecx
je 0x4671e0
mov eax, ecx
mov dword [esp + 0x30], eax
jmp 0x466f7d
mov eax, dword [esp + 0x10]
mov dword [esp + 0x30], eax
inc eax
mov dword [esp + 0x10], eax
jmp 0x466f7d
mov ecx, dword [esp + 0x38]
test ecx, ecx
jne 0x467201
lea ecx, [eax + 1]
mov dword [esp + 0x10], ecx
cmp eax, dword [esp + 0x14]
jle 0x466f7d
mov dword [esp + 0x14], eax
jmp 0x466f7d
or ebx, 0x8000000
jmp case.0x466e92.90
test bl, 8
jne case.0x466e92.49
or ebx, 0x2000
mov esi, dword [esp + 0x1d0]
lea edx, [esi + ebp - 1]
mov eax, 0xa
lea ecx, [esp + 0x3c]
or ebx, 0x10000
call fcn.00466c15
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x30], eax
sub ebp, esi
jmp case.0x466e92.90
test bl, 0x40
jne case.0x4670bf.61
test bl, 0x20
je 0x46726e
or ebx, 0x40
jmp case.0x466e92.90
or ebx, 0x20
jmp case.0x466e92.90
test bh, 1
jne case.0x4670bf.61
test bl, bl
jns 0x46728e
or ebx, 0x100
jmp case.0x466e92.90
or ebx, 0x80
jmp case.0x466e92.90
or ebx, 0x200
jmp case.0x466e92.90
or ebx, 0x480
jmp case.0x466e92.90
or ebx, 0x880
jmp case.0x466e92.90
or ebx, 0x1100
jmp case.0x466e92.90
test ebx, 0x40000000
jne case.0x4670bf.61
test ebx, 0x22001fe0
jne case.0x4670bf.61
mov ecx, dword [esp + 0x1d0]
mov al, byte [ecx + ebp]
cmp al, 0x36
jne 0x467308
cmp byte [ecx + ebp + 1], 0x34
jne 0x467308
add ebp, 2
mov dword [esp + 0x34], 8
or ebx, 0x40000000
jmp case.0x466e92.90
cmp al, 0x33
jne 0x467329
cmp byte [ecx + ebp + 1], 0x32
jne 0x467329
add ebp, 2
mov dword [esp + 0x34], 4
or ebx, 0x40000000
jmp case.0x466e92.90
cmp al, 0x31
jne 0x46734a
cmp byte [ecx + ebp + 1], 0x36
jne 0x46734a
add ebp, 2
mov dword [esp + 0x34], 2
or ebx, 0x40000000
jmp case.0x466e92.90
cmp al, 0x38
jne case.0x4670bf.61
inc ebp
mov dword [esp + 0x34], 1
or ebx, 0x40000000
jmp case.0x466e92.90
or ebx, 0x2000000
jmp case.0x466e92.90
or ebx, 0x1000000
jmp case.0x466e92.90
or ebx, 1
mov dword [esp + 0x40], 1
jmp case.0x466e92.90
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x38]
or ebx, 0x20000000
inc ecx
test eax, eax
mov dword [esp + 0x20], ecx
je 0x4673a9
mov dword [esp + 0x34], ecx
jmp 0x4673b6
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
inc eax
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x10]
cmp edx, dword [esp + 0x14]
jle case.0x466e92.90
mov eax, edx
mov dword [esp + 0x14], eax
jmp case.0x466e92.90
or ebx, 0x1000
jmp case.0x466e92.90
or ebx, 0x2000000
test bl, bl
jns 0x4673fe
mov edx, eax
or ebx, 0x2000000
imul edx, edx, 0x168
mov dword [edx + esi], 3
jmp 0x46777c
test bl, 0x20
je 0x467409
and ebx, 0xfdffffff
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 3
jmp 0x46777c
or ebx, 0x2000000
test bl, bl
jns 0x467441
mov ecx, eax
or ebx, 0x2000000
imul ecx, ecx, 0x168
mov dword [ecx + esi], 4
jmp 0x46777c
test bl, 0x20
je 0x46744c
and ebx, 0xfdffffff
mov ecx, eax
imul ecx, ecx, 0x168
mov dword [ecx + esi], 4
jmp 0x46777c
cmp dword [esp + 0x1cc], 2
jne 0x46777c
mov ecx, eax
imul ecx, ecx, 0x168
mov dword [ecx + esi], 8
cmp byte [edx + ebp], 0x5e
mov edi, 1
jne 0x467489
inc ebp
cmp byte [edx + ebp], 0x5d
jne 0x467490
inc ebp
cmp byte [edx + ebp], 0x2d
jne 0x467497
inc ebp
mov cl, byte [edx + ebp]
test cl, cl
je 0x46777c
lea ecx, [ecx]
cmp cl, 0x5b
jne 0x4674ad
inc edi
jmp 0x4674b7
cmp cl, 0x5d
jne 0x4674b7
dec edi
test edi, edi
jle 0x4674c5
mov cl, byte [edx + ebp + 1]
inc ebp
test cl, cl
jne 0x4674a5
jmp 0x46777c
inc ebp
jmp 0x46777c
mov ecx, eax
or ebx, 0x4000
imul ecx, ecx, 0x168
mov dword [ecx + esi], 1
jmp 0x46777c
mov edx, eax
and ebx, 0xffdfffff
imul edx, edx, 0x168
mov dword [esp + 0x18], 0xa
mov dword [edx + esi], 1
jmp 0x46777c
and ebx, 0xffdfffff
mov ecx, eax
or ebx, 0x4000
imul ecx, ecx, 0x168
mov dword [esp + 0x18], 8
mov dword [ecx + esi], 1
jmp 0x46777c
or ebx, 0x8000
and ebx, 0xffdfffff
or ebx, 0x2000
mov dword [esp + 0x18], 2
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 1
jmp 0x46777c
or ebx, 0x8000
and ebx, 0xffdfffff
mov ecx, eax
or ebx, 0x4000
imul ecx, ecx, 0x168
mov dword [esp + 0x18], 0x10
mov dword [ecx + esi], 1
jmp 0x46777c
or ebx, 0x8000
mov edx, eax
or ebx, 0x400000
imul edx, edx, 0x168
mov dword [edx + esi], 2
jmp 0x46777c
or ebx, 0x8000
mov ecx, eax
or ebx, 0x800000
imul ecx, ecx, 0x168
mov dword [ecx + esi], 2
jmp 0x46777c
or ebx, 0x8000
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 2
jmp 0x46777c
mov ecx, eax
or ebx, 0x80
imul ecx, ecx, 0x168
mov dword [ecx + esi], 5
jmp 0x46777c
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 6
jmp 0x46777c
or ebx, 0x8000
mov ecx, eax
imul ecx, ecx, 0x168
mov dword [esp + 0x18], 0x10
mov dword [ecx + esi], 2
jmp 0x46777c
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 9
jmp 0x46777c
mov ecx, eax
imul ecx, ecx, 0x168
lea edi, [ecx + esi]
lea ecx, [edi + 0x28]
mov dword [esp + 0x44], ecx
mov byte [ecx], 0
lea ecx, [edx + ebp]
mov edx, ecx
mov dword [edi], 0xa
mov dword [esp + 0x3c], edx
mov cl, byte [ecx]
test cl, cl
mov dword [esp + 0x1c], 1
mov dword [esp + 0x24], edi
je case.0x4670bf.61
lea ebx, [ebx]
inc ebp
cmp cl, 0x3e
je 0x4676f9
cmp cl, 0x3a
jne 0x4676d6
mov ecx, dword [esp + 0x1d0]
mov esi, ebp
sub esi, edx
add esi, ecx
cmp esi, 0x40
mov dword [esp + 0x1c], 0
jbe 0x4676af
mov esi, 0x40
mov edi, dword [esp + 0x44]
mov ecx, edx
call fcn.00466b95
mov edx, dword [esp + 0x1d0]
mov esi, dword [esp + 0x1d4]
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x24]
add edx, ebp
mov dword [esp + 0x3c], edx
mov ecx, dword [esp + 0x1d0]
mov cl, byte [ecx + ebp]
test cl, cl
jne 0x467685
pop edi
shl ebp, 8
mov eax, 0xfffffffe
pop esi
sub eax, ebp
pop ebp
pop ebx
add esp, 0x1b8
ret
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x467749
mov ecx, dword [esp + 0x10]
inc eax
inc word [esp + ecx*2 + 0x48]
mov dword [edi], 7
mov dword [edi + 0x18], ebp
mov dword [edi + 4], 0x8000000
mov edi, eax
imul edi, edi, 0x168
add esi, edi
inc ecx
mov dword [esp + 0x2c], eax
mov dword [esp + ecx*4 + 0xc8], eax
cmp ecx, dword [esp + 0x14]
mov dword [esp + 0x24], esi
mov dword [esi], 0xa
mov dword [esp + 0x10], ecx
jle 0x467749
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x1d0]
mov esi, ebp
sub esi, edx
add esi, ecx
cmp esi, 0x100
jbe 0x467763
mov esi, pe_nt_image_headers32
mov edi, dword [esp + 0x24]
add edi, 0x68
mov ecx, edx
call fcn.00466b95
mov esi, dword [esp + 0x1d4]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x10]
inc word [esp + ecx*2 + 0x48]
lea ecx, [esp + ecx*2 + 0x48]
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x467825
test bl, 1
jne 0x467825
lea ecx, [eax - 1]
test ecx, ecx
jl 0x467825
mov edx, ecx
imul edx, edx, 0x168
add edx, esi
mov dword [esp + 0x24], edx
mov edi, dword [edx]
cmp edi, 7
je 0x4677d5
test byte [edx + 4], 1
je 0x4677d5
mov edx, eax
imul edx, edx, 0x168
cmp edi, dword [edx + esi]
je 0x4677e6
mov edx, dword [esp + 0x24]
dec ecx
sub edx, 0x168
test ecx, ecx
mov dword [esp + 0x24], edx
jge 0x4677b7
jmp 0x467825
imul ecx, ecx, 0x168
mov edx, dword [ecx + esi + 4]
add ecx, esi
and edx, 0xfffffffe
or ebx, edx
mov edx, dword [esp + 0x30]
test edx, edx
jne 0x467806
mov edx, dword [ecx + 8]
mov dword [esp + 0x30], edx
mov edi, dword [esp + 0x28]
or edx, 0xffffffff
cmp edi, edx
jne 0x467818
mov edi, dword [ecx + 0xc]
mov dword [esp + 0x28], edi
cmp dword [esp + 0x18], edx
jne 0x467825
mov ecx, dword [ecx + 0x10]
mov dword [esp + 0x18], ecx
mov edx, eax
imul edx, edx, 0x168
lea ecx, [edx + esi]
mov edx, dword [esp + 0x30]
mov dword [ecx + 8], edx
mov edx, dword [esp + 0x28]
mov dword [ecx + 0xc], edx
mov edx, dword [esp + 0x18]
cmp edx, 0xffffffff
mov dword [ecx + 0x18], ebp
mov dword [ecx + 4], ebx
jne 0x467852
mov edx, 0xa
inc eax
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x38]
test eax, eax
mov dword [ecx + 0x10], edx
mov edx, dword [esp + 0x34]
mov dword [ecx + 0x14], edx
jne 0x46786d
inc dword [esp + 0x20]
mov eax, dword [esp + 0x1d0]
cmp byte [eax + ebp], 0
jne 0x466dd9
mov eax, dword [esp + 0x14]
xor ecx, ecx
test eax, eax
mov dword [esp + 0x40], ecx
jl 0x467add
mov eax, dword [esp + 0x1d8]
mov edx, dword [esp + 0x1dc]
lea esi, [eax - 4]
lea ebx, [eax - 8]
lea eax, [esp + 0xc8]
mov ebp, edx
sub eax, edx
mov dword [esp + 0x24], ebp
mov dword [esp + 0x44], eax
jmp 0x4678e5
mov ecx, dword [esp + 0x1c]
pop edi
pop esi
shl ecx, 8
mov eax, 0xfffffffd
pop ebp
sub eax, ecx
pop ebx
add esp, 0x1b8
ret
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x1dc]
jmp 0x4678e5
cmp word [esp + ecx*2 + 0x48], 1
jne 0x467aea
mov eax, dword [eax + ebp]
mov ecx, dword [esp + 0x1d4]
imul eax, eax, 0x168
mov edi, dword [ecx + eax]
add ecx, eax
cmp edi, 7
je 0x467918
test dword [ecx + 4], 0x8000000
jne case.0x467928.2
cmp edi, 0xa
ja case.0x467928.2
movzx eax, byte [edi + 0x467c91]
jmp dword [eax*4 + 0x467c81]
cmp dword [esp + 0x1cc], 2
jne 0x46796c
test edx, edx
jne 0x46794e
mov edx, dword [esi + 4]
add ebx, 4
add esi, 4
mov dword [ecx + 0x20], edx
jmp case.0x467928.2
cmp edi, 3
jne 0x46795b
mov eax, dword [ebp]
jmp 0x467abe
test byte [ecx + 4], 0x20
je 0x467953
mov edx, dword [ebp]
mov dword [ecx + 0x20], edx
jmp case.0x467928.2
mov eax, dword [ecx + 4]
test eax, 0x60000000
je 0x4679b6
test eax, 0x20000000
mov edx, dword [ecx + 0x14]
je 0x467995
mov ebp, dword [esp + 0x1d4]
imul edx, edx, 0x168
mov edx, dword [edx + ebp + 0x20]
mov ebp, dword [esp + 0x24]
and eax, 0xffffe27f
cmp edx, 4
mov dword [ecx + 4], eax
jle 0x4679b6
cmp edx, 8
jg 0x4679ae
or eax, 0x100
jmp 0x4679b3
or eax, 0x1000
mov dword [ecx + 4], eax
mov eax, dword [ecx + 4]
test ah, 4
je 0x4679e5
mov eax, dword [esp + 0x1dc]
test eax, eax
jne 0x4679d9
mov eax, dword [esi + 4]
add esi, 4
add ebx, 4
xor edx, edx
jmp 0x467abb
mov eax, dword [ebp]
mov eax, dword [eax]
xor edx, edx
jmp 0x467abb
test ah, 8
je 0x467a07
mov eax, dword [esp + 0x1dc]
test eax, eax
jne 0x467a83
mov eax, dword [esi + 4]
add ebx, 4
add esi, 4
jmp 0x467aba
test ah, 0x10
jne 0x467a11
test ah, 1
je 0x467a3a
mov eax, dword [esp + 0x1dc]
test eax, eax
jne 0x467a2d
mov eax, dword [ebx + 8]
mov edx, dword [ebx + 0xc]
add ebx, 8
add esi, 8
jmp 0x467abb
mov edx, dword [ebp]
mov eax, dword [edx]
mov edx, dword [edx + 4]
jmp 0x467abb
test al, al
jns 0x467a54
mov eax, dword [esp + 0x1dc]
test eax, eax
jne 0x467ab5
mov eax, dword [esi + 4]
add ebx, 4
add esi, 4
jmp 0x467aba
mov edx, dword [esp + 0x1dc]
test edx, edx
jne 0x467a6a
mov eax, dword [esi + 4]
add ebx, 4
add esi, 4
jmp 0x467aba
cmp edi, 3
jne 0x467a77
mov edx, dword [ebp]
movsx eax, byte [edx]
jmp 0x467aba
test al, 0x20
je 0x467a83
mov eax, dword [ebp]
movsx eax, word [eax]
jmp 0x467aba
mov edx, dword [ebp]
mov eax, dword [edx]
jmp 0x467aba
test dword [ecx + 4], 0x8000000
je 0x467aa6
test edx, edx
jne 0x467953
mov eax, dword [esi + 4]
add ebx, 4
add esi, 4
jmp 0x467abe
test edx, edx
jne 0x467ab5
mov eax, dword [esi + 4]
add ebx, 4
add esi, 4
jmp 0x467aba
mov eax, dword [ebp]
mov eax, dword [eax]
cdq
mov dword [ecx + 0x24], edx
mov dword [ecx + 0x20], eax
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x14]
inc ecx
add ebp, 4
cmp ecx, eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x24], ebp
jle 0x4678d2
pop edi
pop esi
pop ebp
mov eax, ecx
pop ebx
add esp, 0x1b8
ret
cmp word [esp + ecx*2 + 0x48], 0
jne 0x467b07
pop edi
pop esi
shl ecx, 8
mov eax, 0xfffffffb
pop ebp
sub eax, ecx
pop ebx
add esp, 0x1b8
ret
pop edi
pop esi
shl ecx, 8
mov eax, 0xfffffffc
pop ebp
sub eax, ecx
pop ebx
add esp, 0x1b8
ret