Function at 0x4665d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x11b78bc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x18]
cmp eax, dword [ecx + 8]
jbe 0x467334
sub esp, 0x98
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x94], ecx
lea edx, [0xa6bc40]
mov dword [esp], edx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x90]
mov dword [esp + 8], ebp
call fcn.0046c490
movzx eax, byte [esp + 0x10]
test al, al
jne 0x466cd5
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x94], ecx
lea edx, [0xa6bc40]
mov dword [esp], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
lea ebx, [esp + 0x90]
mov dword [esp + 8], ebx
call fcn.0046c690
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x9c]
cmp eax, ecx
je 0x466cc6
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
movzx ebp, byte [eax + 0xf]
and ebp, 0x1f
xchg ebp, eax
cmp al, dl
xchg ebp, eax
jne 0x466cb7
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], dl
mov dword [esp], ecx
call fcn.00465bb0
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0xa0]
mov dword [esp], edx
call fcn.00465bb0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x466ca8
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x466ca8
mov ebp, dword [esp + 0x9c]
movzx esi, byte [ebp + 0xc]
xchg esi, eax
test al, 1
xchg esi, eax
jne 0x466727
xor esi, esi
jmp 0x466798
movzx esi, byte [ebp + 0xf]
and esi, 0x1f
xchg esi, eax
cmp al, 0x14
xchg esi, eax
ja 0x466765
xchg esi, eax
cmp al, 0x12
xchg esi, eax
ja 0x466754
xchg esi, eax
cmp al, 0x11
xchg esi, eax
jne 0x466748
lea esi, [ebp + 0x2c]
jmp 0x466798
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jne 0x466795
lea esi, [ebp + 0x28]
jmp 0x466798
xchg esi, eax
cmp al, 0x13
xchg esi, eax
jne 0x466760
lea esi, [ebp + 0x24]
jmp 0x466798
lea esi, [ebp + 0x30]
jmp 0x466798
xchg esi, eax
cmp al, 0x16
xchg esi, eax
ja 0x46677d
xchg esi, eax
cmp al, 0x15
xchg esi, eax
jne 0x466778
lea esi, [ebp + 0x38]
jmp 0x466798
lea esi, [ebp + 0x24]
jmp 0x466798
xchg esi, eax
cmp al, 0x17
xchg esi, eax
jne 0x466789
lea esi, [ebp + 0x24]
jmp 0x466798
xchg esi, eax
cmp al, 0x19
xchg esi, eax
jne 0x466795
lea esi, [ebp + 0x30]
jmp 0x466798
lea esi, [ebp + 0x20]
mov edi, dword [esp + 0xa0]
movzx eax, byte [edi + 0xc]
test al, 1
jne 0x4667ac
xor eax, eax
jmp 0x46680b
movzx eax, byte [edi + 0xf]
and eax, 0x1f
cmp al, 0x14
ja 0x4667e0
cmp al, 0x12
ja 0x4667d1
cmp al, 0x11
jne 0x4667c7
lea eax, [edi + 0x2c]
jmp 0x46680b
cmp al, 0x12
jne 0x466808
lea eax, [edi + 0x28]
jmp 0x46680b
cmp al, 0x13
jne 0x4667db
lea eax, [edi + 0x24]
jmp 0x46680b
lea eax, [edi + 0x30]
jmp 0x46680b
cmp al, 0x16
ja 0x4667f4
cmp al, 0x15
jne 0x4667ef
lea eax, [edi + 0x38]
jmp 0x46680b
lea eax, [edi + 0x24]
jmp 0x46680b
cmp al, 0x17
jne 0x4667fe
lea eax, [edi + 0x24]
jmp 0x46680b
cmp al, 0x19
jne 0x466808
lea eax, [edi + 0x30]
jmp 0x46680b
lea eax, [edi + 0x20]
test esi, esi
jne 0x46681b
test eax, eax
je 0x4668ba
test esi, esi
je 0x46681f
test eax, eax
jne 0x46682e
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov dword [esp + 0x60], eax
mov eax, dword [esi]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00474fa0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.004034c0
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x60]
mov ecx, dword [ecx]
mov edx, dword [esp + 4]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0xa0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00474fa0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.004034c0
mov eax, dword [esp + 0x28]
cmp dword [esp + 8], eax
jne 0x466c99
mov ecx, dword [esp + 0x70]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x466c99
mov ebp, dword [esp + 0x9c]
mov edi, dword [esp + 0xa0]
movzx esi, byte [esp + 0x16]
xchg esi, eax
test al, al
xchg esi, eax
je 0x466ce4
xchg esi, eax
cmp al, 0x10
xchg esi, eax
jbe 0x466c8a
xchg esi, eax
cmp al, 0x15
xchg esi, eax
ja 0x466b54
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jbe 0x466ab7
xchg esi, eax
cmp al, 0x13
xchg esi, eax
jne 0x4669af
movzx esi, word [ebp + 0x22]
cmp word [edi + 0x22], si
jne 0x4669a0
movzx esi, word [ebp + 0x20]
movzx eax, word [edi + 0x20]
cmp ax, si
jne 0x4669a0
movzx ecx, byte [ebp + 0xc]
test cl, 1
je 0x466924
mov ecx, 0x34
jmp 0x466929
mov ecx, 0x24
test si, si
jne 0x466934
xor edx, edx
xor esi, esi
jmp 0x466946
movzx edx, si
lea esi, [ecx + ebp]
cmp edx, 0x10000
ja 0x467329
movzx ecx, byte [edi + 0xc]
test cl, 1
je 0x466956
mov ecx, 0x34
jmp 0x46695b
mov ecx, 0x24
test ax, ax
jne 0x466966
xor eax, eax
xor ecx, ecx
jmp 0x466976
movzx eax, ax
add ecx, edi
cmp eax, 0x10000
ja 0x46731d
mov dword [esp + 0x5c], esi
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x58], ecx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 0x3c], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x3c]
jmp 0x46716e
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
xchg esi, eax
cmp al, 0x14
xchg esi, eax
jne 0x466a4f
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.004034c0
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 0x20]
mov ebx, dword [esp + 4]
mov dword [esp + 0x8c], ebx
mov dword [esp], edx
call fcn.004034c0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x466a40
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x466a40
mov edx, dword [esp + 0x9c]
mov ebx, dword [edx + 0x28]
mov ebp, dword [esp + 0xa0]
cmp dword [ebp + 0x28], ebx
jne 0x466a31
mov dword [esp + 0x4c], ebx
xor eax, eax
jmp 0x466f4d
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.004665d0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x466a79
xor eax, eax
jmp 0x466aa9
mov eax, dword [esp + 0x9c]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xa0]
mov ecx, dword [ecx + 0x24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.004665d0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xa8], al
add esp, 0x98
ret
xchg esi, eax
cmp al, 0x11
xchg esi, eax
je 0x466b05
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jne 0x466ce4
mov eax, dword [ebp + 0x24]
cmp dword [edi + 0x24], eax
je 0x466ad5
xor eax, eax
jmp 0x466af7
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.004665d0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xa8], al
add esp, 0x98
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.004665d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x466b44
mov eax, dword [esp + 0x9c]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa0]
cmp dword [ecx + 0x28], eax
sete al
jmp 0x466b46
xor eax, eax
mov byte [esp + 0xa8], al
add esp, 0x98
ret
xchg esi, eax
cmp al, 0x17
xchg esi, eax
ja 0x466bc2
xchg esi, eax
cmp al, 0x16
xchg esi, eax
jne 0x466b92
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.004665d0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xa8], al
add esp, 0x98
ret
mov eax, dword [ebp + 0x20]
mov ecx, dword [edi + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.004665d0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xa8], al
add esp, 0x98
ret
xchg esi, eax
cmp al, 0x18
xchg esi, eax
je 0x466c7b
xchg esi, eax
cmp al, 0x19
xchg esi, eax
jne 0x466c74
mov eax, dword [edi + 0x28]
cmp dword [ebp + 0x28], eax
jne 0x466c65
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call fcn.004034c0
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 0x20]
mov ebx, dword [esp + 4]
mov dword [esp + 0x8c], ebx
mov dword [esp], edx
call fcn.004034c0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 8], eax
jne 0x466c56
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x466c56
mov edx, dword [esp + 0x9c]
mov ebx, dword [edx + 0x28]
mov dword [esp + 0x4c], ebx
mov ebp, dword [esp + 0xa0]
xor eax, eax
jmp 0x466d50
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
xchg esi, eax
cmp al, 0x1a
xchg esi, eax
jne 0x466ce4
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
call fcn.0043d1a0
lea eax, [0xb0fe9f]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.0043da00
movzx eax, byte [esp + 0x17]
and eax, 0x1f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043d6f0
call fcn.0043d3a0
call fcn.0043d200
lea eax, [0xb0e750]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.004709c0
mov esi, dword [esp + 0x2c]
lea eax, [esi + 1]
mov ebx, dword [esp + 0x4c]
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0xa0]
cmp eax, ebx
jge 0x466f1b
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x466f2f
mov ecx, dword [ebp + 0x28]
lea esi, [eax + eax*2]
cmp eax, ecx
jae 0x466f2a
mov dword [esp + 0x48], esi
mov dword [esp + 0x2c], eax
mov eax, dword [edx + 0x24]
mov dword [esp + 0x88], eax
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x84], ecx
mov ebx, dword [eax + esi*4]
mov dword [esp], ebx
call fcn.004034c0
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x84]
mov ebx, dword [edx + ecx*4]
mov ebp, dword [esp + 4]
mov dword [esp + 0x8c], ebp
mov dword [esp], ebx
call fcn.004034c0
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x466f0c
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x466f0c
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x88]
mov edx, dword [ecx + eax*4 + 4]
mov ebx, dword [esp + 0x84]
mov ebp, dword [ebx + eax*4 + 4]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov edx, dword [esp + 0xa4]
mov dword [esp + 8], edx
call fcn.004665d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x466efd
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x88]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.00403580
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x84]
mov ebx, dword [edx + ecx*4]
mov ebp, dword [esp + 4]
mov dword [esp + 0x8c], ebp
mov dword [esp], ebx
call fcn.00403580
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
jne 0x466eee
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x466eee
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x88]
mov ebp, dword [ebx + edx*4 + 8]
mov esi, dword [esp + 0x84]
lea edi, [esi + edx*4 + 8]
cmp dword [edi], ebp
jne 0x466edf
mov ebx, dword [ebx + edx*4]
mov edx, dword [esi + edx*4]
movzx ebx, byte [ebx]
movzx edx, byte [edx]
test bl, 8
setne bl
test dl, 8
setne dl
cmp dl, bl
je 0x466d37
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
call fcn.004770c0
call fcn.004770c0
mov esi, dword [esp + 0x30]
lea eax, [esi + 1]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0xa0]
mov edx, dword [esp + 0x9c]
cmp eax, ebx
jge 0x467121
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x467135
mov esi, dword [edx + 0x24]
mov ecx, dword [ebp + 0x28]
lea edi, [esi + eax*8]
cmp eax, ecx
jae 0x467130
mov dword [esp + 0x80], esi
mov dword [esp + 0x30], eax
mov dword [esp + 0x68], edi
mov ecx, dword [ebp + 0x24]
mov dword [esp + 0x7c], ecx
lea edx, [ecx + eax*8]
mov dword [esp + 0x64], edx
lea ebx, [esi + eax*8]
mov ebx, dword [ebx]
mov dword [esp], edi
mov dword [esp + 4], ebx
call fcn.00474fa0
mov eax, dword [esp + 8]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x7c]
lea ebx, [edx + ecx*8]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x64]
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.00474fa0
mov eax, dword [esp + 8]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
call fcn.004034c0
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call fcn.004034c0
mov eax, dword [esp + 0x48]
cmp dword [esp + 8], eax
jne 0x467112
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x467112
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00465f80
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
call fcn.00465f80
mov eax, dword [esp + 0x48]
cmp dword [esp + 8], eax
jne 0x467103
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.004024a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x467103
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x80]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x68]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00475250
mov eax, dword [esp + 8]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x7c]
lea edx, [edx + ecx*8 + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0x64]
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.00475250
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 8], eax
call fcn.004665d0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x466f34
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
call fcn.004770c0
call fcn.004770c0
mov eax, dword [esp + 0x38]
inc eax
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x20]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x5c]
mov ecx, ebp
mov ebp, dword [esp + 0x9c]
mov edi, dword [esp + 0xa0]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x38]
cmp edi, edx
jge 0x4671ac
mov ebp, dword [esi + edi*4]
cmp edi, eax
jae 0x467314
mov eax, dword [ecx + edi*4]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004665d0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x46713a
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
movzx esi, word [ebp + 0x22]
and esi, 0x7fff
nop
test si, si
jne 0x4671c2
xor esi, esi
xor ebp, ebp
jmp 0x46720b
movzx edi, byte [ebp + 0xc]
xchg edi, eax
test al, 1
xchg edi, eax
je 0x4671d4
mov eax, 0x34
jmp 0x4671d9
mov eax, 0x24
movzx edi, word [ebp + 0x20]
add esi, edi
movzx edx, si
add ebp, eax
cmp edx, 0x20000
ja 0x46730a
movzx eax, di
cmp eax, edx
ja 0x467303
sub edx, eax
mov esi, edx
neg edx
shl eax, 2
sar edx, 0x1f
and eax, edx
add ebp, eax
mov edi, dword [esp + 0xa0]
movzx eax, word [edi + 0x22]
and eax, 0x7fff
nop
test ax, ax
jne 0x467227
xor ecx, ecx
xor edx, edx
jmp 0x46726d
movzx ecx, byte [edi + 0xc]
test cl, 1
je 0x467237
mov ecx, 0x34
jmp 0x46723c
mov ecx, 0x24
movzx edx, word [edi + 0x20]
add eax, edx
movzx eax, ax
add edi, ecx
cmp eax, 0x20000
ja 0x4672f7
movzx edx, dx
cmp edx, eax
ja 0x4672ee
sub eax, edx
mov ecx, eax
neg eax
shl edx, 2
sar eax, 0x1f
and edx, eax
add edx, edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x54], ebp
mov dword [esp + 0x18], ecx
mov dword [esp + 0x50], edx
xor eax, eax
jmp 0x46729f
mov edi, dword [esp + 0x34]
lea eax, [edi + 1]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
cmp eax, esi
jge 0x4672da
mov edi, dword [ebp + eax*4]
cmp eax, ecx
jae 0x4672e9
mov dword [esp + 0x34], eax
mov ecx, dword [edx + eax*4]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.004665d0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x467281
mov byte [esp + 0xa8], 0
add esp, 0x98
ret
mov byte [esp + 0xa8], 1
add esp, 0x98
ret
call fcn.004770c0
mov ecx, eax
mov eax, edx
call fcn.00477160
mov edx, eax
mov ebx, 0x20000
call fcn.00477140
mov ecx, edx
call fcn.00477160
mov ebx, 0x20000
call fcn.00477140
mov ecx, eax
mov eax, edi
call fcn.004770c0
mov edx, eax
mov ebx, 0x10000
call fcn.00477140
mov ebx, 0x10000
call fcn.00477140
nop
call fcn.00475c40
jmp fcn.004665d0