Function at 0x4656f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x238
xor cl, cl
mov dword [esp + 0x18], 0
xor ch, ch
mov byte [esp + 2], cl
push ebx
mov ebx, dword [esp + 0x248]
xor eax, eax
mov byte [esp + 5], ch
xor dl, dl
mov byte [esp + 7], cl
mov ecx, dword [esp + 0x250]
push ebp
mov ebp, dword [esp + 0x244]
mov dword [esp + 0xfc], eax
lea eax, [ebx + ecx]
mov byte [esp + 8], dl
push esi
mov esi, eax
mov dword [esp + 0xf4], eax
push edi
xor edx, edx
mov dword [esp + 0x34], 0
xor edi, edi
mov dword [esp + 0x10c], 0
mov dword [esp + 0xfc], edi
lea eax, [esi - 1]
mov edi, dword [esp + 0x258]
mov dword [esp + 0x108], eax
lea eax, [esp + 0x114]
mov dword [esp + 0x30], edx
mov dword [esp + 0x114], edx
mov dword [esp + 0x118], edx
mov dword [esp + 0xf0], eax
test ebp, ebp
jne 0x4657c0
mov edx, dword [esp + 0x250]
test edx, edx
jne 0x4657c0
test ebx, ebx
jne 0x4657c0
cmp edi, 0xfffffc19
jne 0x4657c0
cmp ecx, edi
jne 0x4657c0
pop edi
pop esi
pop ebp
mov eax, 0xfffffecc
pop ebx
add esp, 0x238
ret
mov edx, dword [esp + 0x260]
test edx, 0xe20f5a6f
je 0x4657df
pop edi
pop esi
pop ebp
mov eax, 0xfffffffd
pop ebx
add esp, 0x238
ret
test ebp, ebp
je 0x4665c6
test ebx, ebx
je 0x4665c6
mov ebx, dword [esp + 0x264]
mov eax, dword [esp + 0x268]
test ebx, ebx
jne 0x465809
test eax, eax
jg 0x4665c6
test eax, eax
jns 0x46581d
pop edi
pop esi
pop ebp
mov eax, 0xfffffff1
pop ebx
add esp, 0x238
ret
test edi, edi
jns 0x465831
pop edi
pop esi
pop ebp
mov eax, 0xffffffe0
pop ebx
add esp, 0x238
ret
test ecx, ecx
js 0x4665b6
cmp ecx, edi
jg 0x4665b6
mov eax, dword [ebp]
cmp eax, 0x50435245
je 0x465865
sub eax, 0x45524350
neg eax
pop edi
sbb eax, eax
pop esi
and eax, 0x19
pop ebp
add eax, 0xffffffe3
pop ebx
add esp, 0x238
ret
test byte [ebp + 0xc], 1
jne 0x46587b
pop edi
pop esi
pop ebp
mov eax, 0xffffffe4
pop ebx
add esp, 0x238
ret
mov ecx, dword [ebp + 8]
shr ecx, 0xb
and ecx, 1
mov dword [esp + 0x20], ecx
mov dword [esp + 0x84], ecx
test edx, 0x8000000
je 0x46589e
mov eax, 2
jmp 0x4658a6
mov eax, edx
shr eax, 0xf
and eax, 1
mov dword [esp + 0xc0], eax
test ecx, ecx
je 0x46593a
test edx, 0x2000
jne 0x46593a
lea eax, [esp + 0x24]
push eax
push edi
push dword [esp + 0x25c]
call fcn.00466fe0
add esp, 0xc
test eax, eax
je 0x465911
cmp dword [esp + 0x268], 2
jl 0x4658e9
mov ecx, dword [esp + 0x24]
mov dword [ebx], ecx
mov dword [ebx + 4], eax
cmp eax, 5
jg 0x465901
cmp dword [esp + 0xc0], 1
mov eax, 0xffffffe7
jg 0x4665cb
pop edi
pop esi
pop ebp
mov eax, 0xfffffff6
pop ebx
add esp, 0x238
ret
mov eax, dword [esp + 0x25c]
test eax, eax
jle 0x46593a
cmp eax, edi
jge 0x46593a
mov eax, esi
mov al, byte [eax]
and al, 0xc0
cmp al, 0x80
jne 0x46593a
pop edi
pop esi
pop ebp
mov eax, 0xfffffff5
pop ebx
add esp, 0x238
ret
movzx eax, word [ebp + 0x22]
mov edx, 0x989680
mov dword [esp + 0x24], eax
mov ebx, edx
add eax, ebp
mov dword [esp + 0x2c], 0
mov dword [esp + 0x68], eax
movzx eax, word [ebp + 0x26]
mov dword [esp + 0x58], eax
movzx eax, word [ebp + 0x24]
mov ebp, dword [ebp + 0x30]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x250]
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], ebx
mov dword [esp + 0xe0], 0
test eax, eax
je 0x4659d3
mov ecx, dword [eax]
test cl, 1
je 0x46599d
mov edi, dword [eax + 4]
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 0x258]
test cl, 2
je 0x4659a9
mov edx, dword [eax + 8]
mov dword [esp + 0x3c], edx
test cl, 0x10
je 0x4659b5
mov ebx, dword [eax + 0x14]
mov dword [esp + 0x40], ebx
test cl, 4
je 0x4659cb
mov eax, dword [eax + 0xc]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x250]
test cl, 8
je 0x4659d3
mov ebp, dword [eax + 0x10]
mov eax, dword [esp + 0x24c]
mov ecx, dword [eax + 0xc]
test ecx, 0x2000
je 0x4659f7
mov eax, dword [eax + 0x10]
cmp eax, edx
jae 0x4659f0
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x24c]
test ecx, 0x4000
je 0x465a0a
mov eax, dword [eax + 0x14]
cmp eax, ebx
jae 0x465a0a
mov dword [esp + 0x40], eax
test ebp, ebp
jne 0x465a13
mov ebp, 0x518d80
mov ebx, dword [esp + 0x24c]
mov dword [esp + 0x64], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xe8], 0
mov ecx, dword [ebx + 8]
mov eax, ecx
or eax, dword [esp + 0x260]
shr eax, 4
and eax, 1
mov edx, dword [ebx + 0xc]
mov dword [esp + 0x110], eax
mov eax, edx
shr eax, 8
and eax, 1
mov dword [esp + 0xe4], 0
mov dword [esp + 0x100], eax
mov eax, ecx
shr eax, 0x12
and eax, 1
mov dword [esp + 0xdc], 0
mov dword [esp + 0xf4], eax
movzx eax, word [ebx + 0x24]
imul eax, dword [esp + 0x58]
mov dword [esp + 0x70], ebp
add eax, dword [esp + 0x24]
add eax, ebx
mov ebx, dword [esp + 0x254]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x25c]
mov dword [esp + 0xcc], eax
lea eax, [ebx + edi]
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], eax
mov dword [esp + 0x14], eax
mov eax, ecx
shr eax, 5
and eax, 1
mov ebx, dword [esp + 0x260]
mov dword [esp + 0x90], eax
mov eax, ecx
shr eax, 0x1d
and eax, 1
mov dword [esp + 0x8c], eax
mov eax, ecx
shr eax, 0x19
and eax, 1
mov dword [esp + 0x88], eax
mov eax, ebx
shr eax, 7
and eax, 1
mov dword [esp + 0x7c], eax
mov eax, ebx
shr eax, 8
and eax, 1
mov dword [esp + 0x80], eax
mov eax, ebx
shr eax, 0xa
and eax, 1
mov dword [esp + 0x94], eax
mov eax, ebx
shr eax, 0x1c
and eax, 1
mov dword [esp + 0x98], eax
mov eax, edx
shr eax, 0xc
and eax, 1
mov dword [esp + 0xa4], eax
lea eax, [ebp + 0x100]
mov dword [esp + 0x74], eax
lea eax, [ebp + 0x340]
mov dword [esp + 0x78], eax
mov eax, ebx
and eax, 0x1800000
je 0x465b90
cmp eax, 0x800000
je 0x465b83
cmp eax, 0x1000000
je 0x465ba9
pop edi
pop esi
pop ebp
mov eax, 0xffffffe9
pop ebx
add esp, 0x238
ret
mov dword [esp + 0xa0], 1
jmp 0x465bb4
test ecx, 0x1800000
je 0x465ba9
mov eax, ecx
shr eax, 0x17
and eax, 1
mov dword [esp + 0xa0], eax
jmp 0x465bb4
mov dword [esp + 0xa0], 0
test ebx, 0x700000
je 0x465bbe
mov ecx, ebx
and ecx, 0x700000
cmp ecx, 0x300000
ja 0x465c22
je 0x465c0e
test ecx, ecx
je 0x465be2
cmp ecx, 0x100000
je 0x465bf8
cmp ecx, 0x200000
jne 0x465b73
mov eax, 0xa
mov ebx, 1
xor ebp, ebp
mov dword [esp + 0x54], ebx
mov byte [esp + 0x6c], al
jmp 0x465c46
mov eax, 0xd
mov ebx, 1
xor ebp, ebp
mov dword [esp + 0x54], ebx
mov byte [esp + 0x6c], al
jmp 0x465c46
mov ebx, 2
mov word [esp + 0x6c], 0xa0d
xor ebp, ebp
mov dword [esp + 0x54], ebx
jmp 0x465c46
cmp ecx, 0x400000
je 0x465c3d
cmp ecx, 0x500000
jne 0x465b73
mov ebp, 2
jmp 0x465c42
mov ebp, 1
mov ebx, dword [esp + 0x54]
cmp dword [esp + 0xc0], 0
mov dword [esp + 0x50], ebp
je 0x465c6c
test edx, 0x200
je 0x465c6c
pop edi
pop esi
pop ebp
mov eax, 0xfffffff3
pop ebx
add esp, 0x238
ret
mov eax, 0x55555556
imul dword [esp + 0x268]
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edi, [eax + eax*2]
mov eax, 0x55555556
lea ecx, [edi + edi]
mov dword [esp + 0x18], edi
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24c]
movzx eax, word [eax + 0x20]
test ax, ax
je 0x465d00
mov ecx, eax
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x465d00
lea eax, [ecx + 1]
lea eax, [eax + eax*2]
mov dword [esp + 0x18], eax
shl eax, 2
push eax
call dword [0xec5568]
mov edi, eax
add esp, 4
mov dword [esp + 0x44], edi
test edi, edi
jne 0x465cee
lea eax, [edi - 6]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov dword [esp + 0x28], 1
jmp 0x465d0b
mov edi, dword [esp + 0x264]
mov dword [esp + 0x44], edi
mov eax, dword [esp + 0x18]
mov dword [esp + 0x48], eax
mov dword [esp + 0xc8], 0
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x4c], eax
test edi, edi
je 0x465daa
mov eax, dword [esp + 0x18]
lea ecx, [edi + eax*4]
mov eax, dword [esp + 0x24c]
mov edx, ecx
movzx eax, word [eax + 0x1e]
shl eax, 2
sub edx, eax
lea eax, [edi + 8]
cmp edx, eax
jae 0x465d59
mov edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x465d79
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x465d60
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov edi, dword [esp + 0x44]
mov eax, dword [esp + 0x268]
test eax, eax
jle 0x465d96
mov dword [edi], 0xffffffff
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov edi, dword [esp + 0x44]
cmp eax, 1
jle 0x465daa
mov dword [edi + 4], 0xffffffff
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
cmp dword [esp + 0x110], 0
mov edx, dword [esp + 0x24c]
jne 0x465e0d
mov eax, dword [edx + 0xc]
test al, 0x10
je 0x465deb
mov ch, byte [edx + 0x18]
mov dword [esp + 0x34], 1
mov cl, ch
mov byte [esp + 0x11], ch
mov byte [esp + 0x12], cl
test al, 0x20
je 0x465e0d
mov eax, dword [esp + 0x74]
movzx ecx, ch
mov ch, byte [ecx + eax]
mov byte [esp + 0x11], ch
jmp 0x465e0d
cmp dword [esp + 0x100], 0
jne 0x465e0d
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x465e0d
test byte [eax + 4], 1
je 0x465e0d
add eax, 8
mov dword [esp + 0x104], eax
mov eax, dword [edx + 0xc]
test al, 0x40
je 0x465e40
mov dl, byte [edx + 0x1a]
mov dword [esp + 0x10c], 1
mov cl, dl
mov byte [esp + 0x10], dl
mov byte [esp + 0x13], cl
test al, al
jns 0x465e40
mov eax, dword [esp + 0x74]
movzx ecx, dl
mov dl, byte [ecx + eax]
mov byte [esp + 0x10], dl
mov edi, edi
cmp dword [esp + 0xf4], 0
mov edx, dword [esp + 0x14]
mov dword [esp + 0x1c], edx
je 0x465f44
mov eax, dword [esp + 0x20]
mov edi, esi
test eax, eax
je 0x465ee7
mov ecx, dword [esp + 0xb0]
cmp esi, ecx
jae 0x465f3e
test ebp, ebp
je 0x465ea5
push eax
lea eax, [esp + 0x58]
push eax
push ecx
push ebp
push edi
call fcn.00466cf0
mov ebx, dword [esp + 0x68]
add esp, 0x14
mov ebp, dword [esp + 0x50]
test eax, eax
jne 0x465f3e
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x14]
jmp 0x465ec7
mov eax, ecx
sub eax, ebx
cmp edi, eax
ja 0x465ec7
mov al, byte [edi]
cmp al, byte [esp + 0x6c]
jne 0x465ec7
cmp ebx, 1
je 0x465f3e
mov al, byte [edi + 1]
cmp al, byte [esp + 0x6d]
je 0x465f3e
inc edi
cmp edi, edx
jae 0x465edd
lea esp, [esp]
mov al, byte [edi]
and al, 0xc0
cmp al, 0x80
jne 0x465edd
inc edi
cmp edi, edx
jb 0x465ed0
cmp edi, ecx
jae 0x465f3e
mov eax, dword [esp + 0x20]
jmp 0x465e73
mov eax, dword [esp + 0xb0]
cmp esi, eax
jae 0x465f3e
test ebp, ebp
je 0x465f16
push 0
lea ecx, [esp + 0x58]
push ecx
push eax
push ebp
push edi
call fcn.00466cf0
mov ebx, dword [esp + 0x68]
add esp, 0x14
mov ebp, dword [esp + 0x50]
test eax, eax
jne 0x465f3e
jmp 0x465f32
sub eax, ebx
cmp edi, eax
ja 0x465f32
mov al, byte [edi]
cmp al, byte [esp + 0x6c]
jne 0x465f32
cmp ebx, 1
je 0x465f3e
mov al, byte [edi + 1]
cmp al, byte [esp + 0x6d]
je 0x465f3e
mov eax, dword [esp + 0xb0]
inc edi
cmp edi, eax
jb 0x465ef2
mov edx, edi
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x24c]
mov eax, dword [eax + 8]
or eax, dword [esp + 0x260]
test eax, 0x4000000
jne 0x46611c
cmp dword [esp + 0x34], 0
je 0x465fb6
mov cl, byte [esp + 0x12]
mov bl, byte [esp + 0x11]
cmp cl, bl
je 0x465f9c
cmp esi, edx
jae 0x46611c
jmp 0x465f80
mov al, byte [esi]
cmp al, cl
je 0x46611c
cmp al, bl
je 0x46611c
inc esi
cmp esi, edx
jb 0x465f80
jmp 0x46611c
cmp esi, edx
jae 0x46611c
cmp byte [esi], cl
je 0x46611c
inc esi
cmp esi, edx
jb 0x465fa4
jmp 0x46611c
cmp dword [esp + 0x100], 0
je 0x4660e6
mov eax, dword [esp + 0x25c]
mov ecx, dword [esp + 0xac]
add eax, ecx
cmp esi, eax
jbe 0x46611c
mov eax, dword [esp + 0x20]
test eax, eax
je 0x46606d
cmp esi, edx
jae 0x4660ca
test ebp, ebp
je 0x46601f
cmp esi, ecx
jbe 0x46604f
push eax
lea eax, [esp + 0x58]
push eax
push ecx
push ebp
push esi
call fcn.00466e40
mov ebp, dword [esp + 0x64]
add esp, 0x14
mov edx, dword [esp + 0x14]
test eax, eax
jne 0x4660ca
mov ebx, dword [esp + 0x54]
jmp 0x466048
lea eax, [ecx + ebx]
cmp esi, eax
jb 0x46604f
mov ecx, esi
sub ecx, ebx
mov al, byte [ecx]
cmp al, byte [esp + 0x6c]
jne 0x466048
cmp ebx, 1
je 0x4660ca
mov al, byte [ecx + 1]
cmp al, byte [esp + 0x6d]
je 0x4660ca
mov ecx, dword [esp + 0xac]
inc esi
cmp esi, edx
jae 0x4660ca
mov al, byte [esi]
and al, 0xc0
cmp al, 0x80
jne 0x466067
inc esi
cmp esi, edx
jb 0x466058
jmp 0x4660ca
mov eax, dword [esp + 0x20]
jmp 0x465ff0
cmp esi, edx
jae 0x4660ca
test ebp, ebp
je 0x46609d
cmp esi, ecx
jbe 0x4660c5
push 0
lea eax, [esp + 0x58]
push eax
push ecx
push ebp
push esi
call fcn.00466e40
mov ebp, dword [esp + 0x64]
add esp, 0x14
mov edx, dword [esp + 0x14]
test eax, eax
jne 0x4660ca
mov ebx, dword [esp + 0x54]
jmp 0x4660be
lea eax, [ecx + ebx]
cmp esi, eax
jb 0x4660c5
mov ecx, esi
sub ecx, ebx
mov al, byte [ecx]
cmp al, byte [esp + 0x6c]
jne 0x4660be
cmp ebx, 1
je 0x4660ca
mov al, byte [ecx + 1]
cmp al, byte [esp + 0x6d]
je 0x4660ca
mov ecx, dword [esp + 0xac]
inc esi
cmp esi, edx
jb 0x466071
cmp byte [esi - 1], 0xd
jne 0x46611c
cmp ebp, 1
je 0x4660da
cmp ebp, 2
jne 0x46611c
cmp esi, edx
jae 0x46611c
cmp byte [esi], 0xa
jne 0x46611c
inc esi
jmp 0x46611c
mov ebx, dword [esp + 0x104]
test ebx, ebx
je 0x46611c
cmp esi, edx
jae 0x46611c
mov edi, dword [esp + 0x14]
lea esp, [esp]
movzx edx, byte [esi]
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebx], al
jne 0x46611c
inc esi
cmp esi, edi
jb 0x466100
mov eax, dword [esp + 0x24c]
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x14], ebp
mov eax, dword [eax + 8]
or eax, dword [esp + 0x260]
test eax, 0x4000000
jne 0x4661de
cmp dword [esp + 0xc0], 0
jne 0x4661de
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x466165
test byte [ecx + 4], 2
je 0x466165
mov eax, ebp
sub eax, esi
cmp eax, dword [ecx + 0x28]
jb case.0x46626c.996
cmp dword [esp + 0x10c], 0
je 0x4661de
mov eax, ebp
sub eax, esi
cmp eax, 0x3e8
jge 0x4661de
xor ecx, ecx
cmp dword [esp + 0x34], ecx
setne cl
add ecx, esi
cmp ecx, dword [esp + 0x108]
jbe 0x4661de
mov dl, byte [esp + 0x13]
mov al, byte [esp + 0x10]
cmp dl, al
je 0x4661ba
cmp ecx, ebp
jae case.0x46626c.996
movzx edi, dl
movzx edx, byte [ecx]
inc ecx
cmp edx, edi
je 0x4661d2
movzx eax, al
cmp edx, eax
je 0x4661d2
cmp ecx, ebp
jae case.0x46626c.996
mov al, byte [esp + 0x10]
jmp 0x4661a1
cmp ecx, ebp
jae case.0x46626c.996
mov edi, edi
mov al, byte [ecx]
inc ecx
cmp al, dl
je 0x4661d2
cmp ecx, ebp
jb 0x4661c0
xor ebx, ebx
jmp 0x466392
dec ecx
cmp ecx, ebp
jae case.0x46626c.996
mov dword [esp + 0x108], ecx
push 0
push 0
lea eax, [esp + 0x40]
mov dword [esp + 0xbc], esi
push eax
push 2
push esi
push dword [esp + 0xbc]
mov dword [esp + 0xd4], esi
push esi
mov dword [esp + 0x54], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0x7c], 0
call fcn.00456e80
add esp, 0x1c
mov ebx, eax
cmp dword [esp + 0x9c], 0
je 0x466253
cmp dword [esp + 0x30], 0
jne 0x466253
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x30], eax
mov dword [esp + 0xfc], esi
test ebx, ebx
jg case.default.0x46626c
je case.0x46626c.995
lea eax, [ebx + 0x3e4]
cmp eax, 4
ja case.default.0x46626c
jmp dword [eax*4 + 0x4665d8]
mov eax, dword [esp + 0x60]
mov edi, esi
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x64], eax
jmp 0x4662bd
mov edi, dword [esp + 0xb4]
cmp edi, esi
jbe case.0x46626c.995
mov ecx, dword [esp + 0x20]
jmp 0x4662bd
mov ecx, dword [esp + 0x20]
lea edi, [esi + 1]
mov dword [esp + 0x64], 0
test ecx, ecx
je 0x4662bd
cmp edi, ebp
jae 0x4662bd
jmp 0x4662b0
mov al, byte [edi]
and al, 0xc0
cmp al, 0x80
jne 0x4662bd
inc edi
cmp edi, ebp
jb 0x4662b0
mov ebp, dword [esp + 0x50]
xor ebx, ebx
mov dword [esp + 0x18], ebx
cmp dword [esp + 0xf4], ebx
je 0x466300
mov eax, dword [esp + 0xb0]
test ebp, ebp
je 0x466366
cmp esi, eax
jae 0x466300
push ecx
lea ecx, [esp + 0x58]
push ecx
push eax
push ebp
push esi
call fcn.00466cf0
add esp, 0x14
test eax, eax
jne 0x46638e
mov ebp, dword [esp + 0x50]
mov ebx, dword [esp + 0x54]
cmp dword [esp + 0x110], 0
mov esi, edi
jne 0x46638a
mov eax, dword [esp + 0x1c]
cmp edi, eax
ja 0x46638a
cmp edi, dword [esp + 0xf8]
jbe 0x466356
cmp byte [edi - 1], 0xd
jne 0x466356
cmp edi, eax
jae 0x466356
cmp byte [edi], 0xa
jne 0x466356
mov eax, dword [esp + 0x24c]
test dword [eax + 0xc], 0x800
jne 0x466356
cmp ebp, 1
je 0x466353
cmp ebp, 2
je 0x466353
cmp ebx, 2
jne 0x466356
lea esi, [edi + 1]
mov dword [esp + 0xe4], 0
jmp 0x465e40
mov ebx, dword [esp + 0x54]
sub eax, ebx
cmp esi, eax
ja 0x466304
mov al, byte [esi]
cmp al, byte [esp + 0x6c]
jne 0x466304
cmp ebx, 1
je 0x46638a
mov al, byte [esi + 1]
cmp al, byte [esp + 0x6d]
jne 0x466304
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
cmp dword [esp + 0x28], 0
je 0x4663a6
push dword [esp + 0x44]
call dword [0xec556c]
add esp, 4
test ebx, ebx
je 0x466459
cmp ebx, 0xfffffff4
je 0x466459
lea eax, [esp + 0x114]
push eax
call fcn.004665f0
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret
cmp ebx, 1
je 0x4663e1
cmp ebx, 0xfffffc19
jne 0x466392
cmp dword [esp + 0x28], 0
mov edi, dword [esp + 0x24]
je 0x466432
mov esi, dword [esp + 0x44]
cmp edi, 4
jl 0x466414
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [esp + 0x26c]
add eax, 8
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0xc
cmp dword [esp + 0xc4], edi
jle 0x466428
or dword [esp + 0xc8], 0x10000
push esi
call dword [0xec556c]
add esp, 4
test dword [esp + 0xc8], 0x10000
mov ecx, dword [esp + 0xc4]
je 0x4664e3
cmp ecx, edi
jl 0x4664e3
xor edi, edi
jmp 0x4664ec
mov edi, dword [esp + 0xfc]
test edi, edi
je 0x4664a7
mov ecx, dword [esp + 0x268]
mov dword [esp + 0xe4], 0
cmp ecx, 1
jle 0x4664a0
mov eax, dword [esp + 0x264]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x254]
sub edx, ebx
sub ebp, ebx
mov dword [eax], edx
mov dword [eax + 4], ebp
cmp ecx, 2
jle 0x4664a0
sub edi, ebx
mov dword [eax + 8], edi
mov esi, 0xfffffff4
jmp 0x4664aa
or esi, 0xffffffff
mov edx, dword [esp + 0x250]
test edx, edx
je 0x4664c6
test byte [edx], 0x20
je 0x4664c6
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0xe8]
mov dword [edx], ecx
lea eax, [esp + 0x114]
push eax
call fcn.004665f0
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret
mov eax, ecx
cdq
sub eax, edx
mov edi, eax
sar edi, 1
mov eax, dword [esp + 0x24c]
mov ebx, dword [esp + 0x264]
movzx esi, word [eax + 0x1e]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp eax, esi
jg 0x46654e
test ebx, ebx
je 0x46654e
mov edx, dword [esp + 0x268]
lea eax, [esi*2 + 2]
cmp eax, edx
jle 0x466521
mov eax, edx
lea eax, [ebx + eax*4]
xor esi, esi
lea edx, [ebx + ecx*4]
mov ecx, eax
sub ecx, edx
add ecx, 3
shr ecx, 2
cmp eax, edx
sbb eax, eax
not eax
and eax, ecx
jbe 0x46654e
lea ecx, [ecx]
inc esi
mov dword [edx], 0xffffffff
lea edx, [edx + 4]
cmp esi, eax
jb 0x466540
cmp dword [esp + 0x268], 2
jge 0x46655c
xor edi, edi
jmp 0x46657d
mov eax, dword [esp + 0xb4]
sub eax, dword [esp + 0xac]
mov dword [ebx], eax
mov eax, dword [esp + 0xb8]
sub eax, dword [esp + 0xac]
mov dword [ebx + 4], eax
mov edx, dword [esp + 0x250]
test edx, edx
je 0x466599
test byte [edx], 0x20
je 0x466599
mov edx, dword [edx + 0x18]
mov ecx, dword [esp + 0xe4]
mov dword [edx], ecx
lea eax, [esp + 0x114]
push eax
call fcn.004665f0
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret
pop edi
pop esi
pop ebp
mov eax, 0xffffffe8
pop ebx
add esp, 0x238
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x238
ret