Function at 0x474be0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x74
mov eax, ecx
mov byte [esp + 7], 0
push ebx
mov dword [esp + 0xc], eax
xor ecx, ecx
push esi
mov ebx, dword [eax + 8]
mov esi, edx
push edi
mov dword [esp + 0x50], esi
mov dword [esp + 0x30], 0
mov eax, dword [ebx + 0xc]
mov edi, dword [ebx + 0x88]
mov dword [esp + 0x40], 0
mov dword [esp + 0x54], ecx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x60], edi
cmp dword [eax + 0x30], edi
jg 0x474c42
push ecx
push ecx
push ecx
lea edx, [ecx + 0x14]
mov ecx, ebx
call fcn.00427140
add esp, 0xc
mov dword [esp + 0x60], eax
jmp 0x474c78
lea eax, [edi + 1]
mov dword [ebx + 0x88], eax
lea ecx, [edi + edi*4]
mov eax, dword [ebx + 0x58]
mov dword [eax + ecx*4], 0x14
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp + 8]
xorps xmm0, xmm0
mov ecx, dword [ebp + 0x14]
mov esi, dword [esi + 0x14]
mov dword [esp + 0x20], 0
mov eax, dword [edx + 0x10]
mov ecx, dword [ecx + 0x40]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x18], ecx
movlpd qword [esp + 0x58], xmm0
mov eax, dword [eax + 0xc]
lea eax, [eax + eax*2]
shl eax, 4
add eax, esi
mov dword [esp + 0x4c], eax
cmp esi, eax
jae 0x474f14
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x38], 1
mov dword [esp + 0x2c], eax
mov eax, dword [ecx]
or eax, dword [ecx + 4]
mov edi, dword [esi]
jne 0x474d41
test byte [esi + 0xa], 2
jne 0x474d41
test byte [edi + 4], 1
jne 0x474d41
mov eax, dword [edx + 0x30]
lea ecx, [esp + 0x64]
mov edx, edi
mov byte [esp + 0x78], 3
mov dword [esp + 0x68], fcn.0043dde0
mov dword [esp + 0x6c], 0x43df00
mov dword [esp + 0x7c], eax
call fcn.004399d0
cmp byte [esp + 0x78], 0
je 0x474d3a
mov edx, edi
mov edi, dword [esp + 0x14]
push 0
push 0
mov ecx, dword [edi]
call fcn.0043cec0
mov edx, dword [esp + 0x38]
mov ecx, dword [edi]
push eax
call fcn.0043c9f0
add esp, 0xc
mov dword [esp + 0x30], eax
mov edx, dword [ebp + 8]
mov ecx, dword [esp + 0x18]
mov eax, dword [esi + 0x14]
cmp eax, dword [edx + 0x30]
jne 0x474efd
movzx ecx, word [esi + 0xc]
test cl, 0x82
je 0x474ef9
test byte [edx + 0x24], 8
je 0x474d70
mov eax, dword [esi]
test byte [eax + 4], 1
jne 0x474d70
test cl, cl
js 0x474ef9
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x24]
and ecx, dword [ebp + 0xc]
and eax, dword [ebp + 0x10]
or ecx, eax
jne 0x474ef9
mov ecx, dword [esi + 0x1c]
test ecx, ecx
js 0x474ef9
mov eax, dword [edx + 0x10]
add ecx, ecx
mov eax, dword [eax + 4]
mov al, byte [eax + ecx*8 + 0xd]
mov ecx, dword [esi]
mov byte [esp + 0x12], al
call fcn.0043bdd0
movsx eax, al
sub eax, 0x41
je 0x474dd1
sub eax, 1
je 0x474dbf
xor eax, eax
cmp byte [esp + 0x12], 0x43
setge al
jmp 0x474dc9
xor eax, eax
cmp byte [esp + 0x12], 0x42
sete al
test eax, eax
je 0x474ef6
mov edx, dword [esi + 0x1c]
xor edi, edi
cmp edx, 0x40
jl 0x474de5
mov dword [esp + 0x34], SysStringLen
jmp 0x474dfe
mov eax, edx
xor ecx, ecx
bts edi, eax
cmp eax, 0x20
cmovae ecx, edi
xor edi, ecx
cmp eax, 0x40
cmovae ecx, edi
mov dword [esp + 0x34], ecx
cmp byte [esp + 0x13], 0
jne 0x474e2a
mov ecx, dword [esp + 0x3c]
add edx, edx
mov eax, dword [ecx + 4]
push dword [eax + edx*8]
push dword [ecx]
push str.automatic_index_on__s__s_
push 0x11c
call fcn.0040c1c0
add esp, 0x10
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x34]
mov ecx, edi
and ecx, dword [esp + 0x2c]
and eax, dword [esp + 0x1c]
or ecx, eax
jne 0x474ef6
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x38]
mov ecx, dword [eax]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x58], ecx
movzx eax, word [eax + 0x2c]
cmp eax, edx
jge 0x474ec6
lea eax, [edx + 7]
and eax, 0xfffffff8
mov dword [esp + 0x44], eax
shl eax, 2
push 0
push eax
call fcn.0040a240
add esp, 8
mov dword [esp + 0x48], eax
test eax, eax
je 0x47584f
mov edx, dword [esp + 0x18]
movzx ecx, word [edx + 0x2c]
shl ecx, 2
push ecx
push dword [edx + 0x30]
push eax
call fcn.004a4c50
mov ecx, dword [esp + 0x24]
add esp, 0xc
mov edx, dword [ecx + 0x30]
lea eax, [ecx + 0x38]
cmp edx, eax
je 0x474eb1
mov ecx, dword [esp + 0x58]
call fcn.00409f50
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x38]
mov dword [ecx + 0x30], eax
mov eax, dword [esp + 0x44]
mov word [ecx + 0x2c], ax
jmp 0x474eca
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
inc edx
mov eax, dword [ecx + 0x30]
or dword [esp + 0x2c], edi
mov edi, dword [esp + 0x1c]
inc dword [esp + 0x20]
or edi, dword [esp + 0x34]
mov dword [eax + ebx*4], esi
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x38], edx
mov edx, dword [ebp + 8]
mov dword [esp + 0x1c], edi
jmp 0x474f01
mov edx, dword [ebp + 8]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
add esi, 0x30
cmp esi, dword [esp + 0x4c]
jb 0x474cd3
mov esi, dword [esp + 0x2c]
jmp 0x474f1c
mov edi, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
mov eax, dword [esp + 0x20]
not edi
mov word [ecx + 0x28], ax
or edi, 0x80000000
mov word [ecx + 0x18], ax
not esi
mov dword [ecx + 0x24], 0x4241
mov ecx, dword [edx + 0x40]
and esi, ecx
mov eax, dword [edx + 0x44]
and edi, eax
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x2c], esi
xor esi, esi
mov dword [esp + 0x44], ecx
movzx edi, word [edx + 0x2a]
mov edx, 0x3f
mov dword [esp + 0x48], eax
mov dword [esp + 0x58], edi
cmp dx, di
jge 0x474f71
mov dword [esp + 0x38], edx
jmp 0x474f7c
movsx edx, di
mov dword [esp + 0x38], edx
test edx, edx
jle 0x474fbe
mov ebx, dword [esp + 0x38]
mov edi, dword [esp + 0x1c]
xor edx, edx
xor ecx, ecx
mov eax, esi
bts edx, eax
cmp eax, 0x20
cmovae ecx, edx
xor edx, ecx
cmp eax, 0x40
cmovae ecx, edx
and edx, dword [esp + 0x2c]
and ecx, edi
or edx, ecx
je 0x474fa9
inc dword [esp + 0x20]
inc esi
cmp esi, ebx
jl 0x474f84
mov ebx, dword [esp + 0x28]
mov edi, dword [esp + 0x58]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
test eax, eax
jg 0x474fd8
jl 0x474fc8
test ecx, ecx
jae 0x474fd8
mov ecx, dword [esp + 0x20]
movsx eax, di
add ecx, 0xffffffc1
add ecx, eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
inc eax
movzx eax, ax
mov dword [esp + 0x48], eax
cwde
mov ecx, dword [ecx]
lea edx, [eax*4 + 7]
lea eax, [eax + eax*4]
and edx, 0xfffffff8
add eax, 9
mov dword [esp + 0x58], edx
and eax, 0xfffffff8
add edx, 0x40
add eax, edx
cdq
mov esi, eax
push edx
push esi
test ecx, ecx
je 0x47501d
call fcn.0040a240
mov edi, eax
mov dword [esp + 0x2c], edi
jmp 0x475028
call fcn.00409b80
mov edi, eax
mov dword [esp + 0x2c], eax
add esp, 8
test edi, edi
je 0x47584f
push esi
push 0
push edi
call fcn.004a4720
mov edx, dword [esp + 0x54]
lea eax, [edi + 0x40]
mov dword [edi + 0x20], eax
add esp, 0xc
add eax, dword [esp + 0x58]
xorps xmm0, xmm0
mov dword [edi + 8], eax
movsx ecx, dx
mov word [edi + 0x34], dx
movlpd qword [esp + 0x58], xmm0
lea eax, [eax + ecx*2]
add eax, 2
mov dword [edi + 4], eax
lea eax, [eax + ecx*2]
mov dword [edi + 0x1c], eax
lea eax, [edx - 1]
mov word [edi + 0x32], ax
mov eax, dword [esp + 0x18]
mov dword [eax + 0x20], edi
mov eax, dword [esp + 0x3c]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x50]
mov dword [edi], str.auto_index
xor edi, edi
mov esi, dword [eax + 0x14]
mov dword [esp + 0x34], esi
cmp esi, dword [esp + 0x4c]
jae 0x475219
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x24]
mov edx, dword [ebp + 8]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x44], eax
nop dword [eax + eax]
mov eax, dword [esi + 0x14]
cmp eax, dword [edx + 0x30]
jne 0x475204
movzx ecx, word [esi + 0xc]
test cl, 0x82
je 0x475204
test byte [edx + 0x24], 8
je 0x4750ef
mov eax, dword [esi]
test byte [eax + 4], 1
jne 0x4750ef
test cl, cl
js 0x475204
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x24]
and ecx, dword [ebp + 0xc]
and eax, dword [ebp + 0x10]
or ecx, eax
jne 0x475204
mov ecx, dword [esi + 0x1c]
test ecx, ecx
js 0x475204
mov eax, dword [edx + 0x10]
add ecx, ecx
mov eax, dword [eax + 4]
mov al, byte [eax + ecx*8 + 0xd]
mov ecx, dword [esi]
mov byte [esp + 0x13], al
call fcn.0043bdd0
movsx eax, al
sub eax, 0x41
je 0x475150
sub eax, 1
je 0x47513e
xor eax, eax
cmp byte [esp + 0x13], 0x43
setge al
jmp 0x475148
xor eax, eax
cmp byte [esp + 0x13], 0x42
sete al
test eax, eax
je 0x475201
mov ecx, dword [esi + 0x1c]
xor esi, esi
cmp ecx, 0x40
jl 0x475161
mov eax, SysReAllocString
jmp 0x475174
xor eax, eax
bts esi, ecx
cmp ecx, 0x20
cmovae eax, esi
xor esi, eax
cmp ecx, 0x40
cmovae eax, esi
mov ecx, esi
mov dword [esp + 0x58], eax
and ecx, dword [esp + 0x44]
and eax, dword [esp + 0x48]
or ecx, eax
jne 0x4751fd
mov edx, dword [esp + 0x34]
or dword [esp + 0x44], esi
mov eax, dword [esp + 0x48]
or eax, dword [esp + 0x58]
mov esi, dword [esp + 0x34]
mov edx, dword [edx]
mov ecx, dword [ebx + 4]
mov dword [esp + 0x48], eax
mov ax, word [esi + 0x1c]
mov word [ecx + edi*2], ax
mov eax, dword [edx + 0x10]
mov edx, dword [edx + 0xc]
mov dword [esp + 0x58], eax
test dword [edx + 4], 0x100
jne 0x4751e0
test eax, eax
je 0x4751cf
test dword [eax + 4], 0x100
je 0x4751cf
mov edx, eax
jmp 0x4751e0
mov ecx, dword [esp + 0x14]
call fcn.0043bc50
test eax, eax
jne 0x4751f2
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x14]
call fcn.0043bc50
mov ecx, 0x4ebd0c
test eax, eax
je 0x4751f4
mov ecx, dword [eax]
mov eax, dword [ebx + 0x20]
mov dword [eax + edi*4], ecx
inc edi
jmp 0x475201
mov esi, dword [esp + 0x34]
mov edx, dword [ebp + 8]
add esi, 0x30
mov dword [esp + 0x34], esi
cmp esi, dword [esp + 0x4c]
jb 0x4750c0
mov ebx, dword [esp + 0x28]
xor esi, esi
cmp dword [esp + 0x38], esi
jle 0x475265
mov ebx, dword [esp + 0x24]
xor edx, edx
xor ecx, ecx
mov eax, esi
bts edx, eax
cmp eax, 0x20
cmovae ecx, edx
xor edx, ecx
cmp eax, 0x40
cmovae ecx, edx
and edx, dword [esp + 0x2c]
and ecx, dword [esp + 0x1c]
or edx, ecx
je 0x47525a
mov eax, dword [ebx + 4]
mov word [eax + edi*2], si
mov eax, dword [ebx + 0x20]
mov dword [eax + edi*4], 0x4ebd0c
inc edi
inc esi
cmp esi, dword [esp + 0x38]
jl 0x475225
mov ebx, dword [esp + 0x28]
mov eax, dword [ebp + 8]
cmp dword [eax + 0x44], 0
jg 0x4752ad
jl 0x475276
cmp dword [eax + 0x40], 0
jae 0x4752ad
mov esi, dword [esp + 0x3c]
mov eax, 0x3f
mov edx, dword [esp + 0x24]
cmp ax, word [esi + 0x2a]
jge 0x4752b1
mov ecx, eax
nop dword [eax + eax]
mov eax, dword [edx + 4]
mov word [eax + edi*2], cx
inc ecx
mov eax, dword [edx + 0x20]
mov dword [eax + edi*4], 0x4ebd0c
inc edi
movsx eax, word [esi + 0x2a]
cmp ecx, eax
jl 0x475290
jmp 0x4752b1
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 4]
or ecx, 0xffffffff
mov esi, dword [ebp + 0x14]
mov word [eax + edi*2], cx
mov eax, dword [edx + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x20]
inc edx
mov dword [eax + edi*4], 0x4ebd0c
mov eax, dword [ecx + 0x28]
mov dword [esi + 8], eax
inc dword [ecx + 0x28]
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebx + 0x88]
mov esi, dword [esi + 8]
cmp dword [eax + 0x30], ecx
jg 0x475300
push 0
push edx
push esi
mov edx, 0x6b
mov ecx, ebx
call fcn.00427140
add esp, 0xc
jmp 0x475332
lea eax, [ecx + 1]
mov dword [ebx + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 0x58]
mov ebx, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x6b
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x14]
mov ecx, eax
mov edx, dword [esp + 0x24]
mov esi, dword [eax + 8]
call fcn.0044d130
mov edx, eax
test edx, edx
je 0x475377
mov ecx, dword [esi]
cmp byte [ecx + 0x45], 0
je 0x475362
push edx
mov edx, 0xfffffff7
call fcn.00427dd0
add esp, 4
jmp 0x475377
mov eax, dword [esi + 0x88]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x58]
mov byte [eax + ecx*4 - 0x13], 0xf7
mov dword [eax + ecx*4 - 4], edx
mov eax, dword [esp + 0x14]
mov edx, dword [ebp + 0x14]
inc dword [eax + 0x3c]
movzx eax, byte [edx + 0x2c]
lea ecx, [eax + eax*4]
mov eax, dword [esp + 0x50]
shl ecx, 4
mov eax, dword [eax]
mov esi, dword [eax + 4]
mov eax, dword [ebx + 0xc]
add esi, 8
add esi, ecx
mov dword [esp + 0x50], esi
test byte [esi + 0x28], 0x10
je 0x4754b2
mov ecx, dword [ebx + 0x88]
mov edx, dword [esi + 0x1c]
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], ecx
cmp dword [eax + 0x30], ecx
jg 0x4753df
push 0
push 0
push 0
mov edx, 0x38
mov ecx, ebx
call fcn.00427140
mov edx, dword [esp + 0x64]
add esp, 0xc
mov dword [esp + 0x54], eax
jmp 0x475415
lea eax, [ecx + 1]
mov dword [ebx + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 0x58]
mov dword [eax + ecx*4], 0x38
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebx + 0x88]
mov esi, dword [esi + 0x18]
cmp dword [eax + 0x30], ecx
jg 0x47543f
push esi
push 0
push edx
mov edx, 0xf
mov ecx, ebx
call fcn.00427140
mov edx, dword [esp + 0x64]
add esp, 0xc
jmp 0x475471
lea eax, [ecx + 1]
mov dword [ebx + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 0x58]
mov ebx, dword [esp + 0x28]
mov dword [eax + ecx*4], 0xf
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0xc]
mov esi, dword [ebx + 0x88]
cmp dword [eax + 0x30], esi
jg 0x47549a
push 0
push 0
push edx
mov edx, 0x10
mov ecx, ebx
call fcn.00427140
add esp, 0xc
mov esi, eax
jmp 0x47550e
lea eax, [esi + 1]
mov dword [ebx + 0x88], eax
lea ecx, [esi + esi*4]
mov eax, dword [ebx + 0x58]
mov dword [eax + ecx*4], 0x10
jmp 0x4754ee
mov esi, dword [ebx + 0x88]
mov edx, dword [edx + 4]
cmp dword [eax + 0x30], esi
jg 0x4754d8
push 0
push 0
push edx
mov edx, 0x25
mov ecx, ebx
call fcn.00427140
add esp, 0xc
mov esi, eax
jmp 0x47550e
lea eax, [esi + 1]
mov dword [ebx + 0x88], eax
lea ecx, [esi + esi*4]
mov eax, dword [ebx + 0x58]
mov dword [eax + ecx*4], 0x25
mov ebx, dword [esp + 0x28]
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 4], edx
cmp dword [esp + 0x30], 0
je 0x475584
mov ecx, dword [ebx + 0xc]
mov dword [esp + 0x58], ecx
mov edx, dword [ecx + 0x44]
mov dword [esp + 0x40], edx
lea eax, [edx + 1]
mov dword [ecx + 0x44], eax
lea eax, [edx - 1]
test edx, eax
jne 0x475552
lea eax, [edx*8 + 4]
mov edx, dword [ecx + 0x48]
mov ecx, dword [ecx]
push 0
push eax
call fcn.0040a3e0
mov ecx, dword [esp + 0x60]
add esp, 8
mov edx, dword [esp + 0x40]
mov dword [ecx + 0x48], eax
mov eax, dword [ecx + 0x48]
test eax, eax
je 0x475560
mov dword [eax + edx*4], 0xffffffff
not edx
push 0x10
push edx
push dword [esp + 0x38]
mov dword [esp + 0x4c], edx
push dword [esp + 0x20]
call fcn.00442630
mov eax, dword [esp + 0x28]
add esp, 0x10
or dword [eax + 0x24], 0x20000
mov ecx, dword [esp + 0x14]
mov al, byte [ecx + 0x13]
test al, al
jne 0x475597
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
jmp 0x4755a6
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov eax, dword [ecx + eax*4 + 0x15c]
mov edx, dword [esp + 0x24]
push 0
push 0
push 0
push 0
push eax
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x14]
push dword [eax + 4]
call fcn.0044f230
mov ecx, dword [ebx + 0xc]
add esp, 0x18
mov edx, dword [ebx + 0x88]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 8]
mov dword [esp + 0x58], eax
cmp dword [ecx + 0x30], edx
jg 0x4755fa
mov edx, dword [esp + 0x3c]
mov ecx, ebx
push 0
push edx
push eax
mov edx, 0x7e
call fcn.00427140
add esp, 0xc
jmp 0x475630
lea eax, [edx + 1]
mov dword [ebx + 0x88], eax
lea ecx, [edx + edx*4]
mov eax, dword [ebx + 0x58]
mov edx, dword [esp + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0x7e
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x88]
test eax, eax
jle 0x47564a
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [ebx + 0x58]
mov word [eax + ecx*4 - 0x12], dx
cmp dword [esp + 0x30], 0
je 0x475670
mov eax, dword [ebx + 0xc]
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x475670
mov eax, dword [esp + 0x40]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [ebx + 0x88]
mov dword [ecx], eax
mov eax, dword [esp + 0x50]
test byte [eax + 0x28], 0x10
je 0x47572e
mov ecx, dword [esp + 0x54]
test ecx, ecx
jns 0x47568d
mov ecx, dword [ebx + 0x88]
dec ecx
mov eax, dword [ebx]
cmp byte [eax + 0x45], 0
je 0x47569c
mov ecx, 0x515514
jmp 0x4756a5
mov eax, dword [ebx + 0x58]
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x4c]
mov edx, esi
add eax, edi
mov edi, dword [esp + 0x50]
mov dword [ecx + 8], eax
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x14]
push 1
push dword [edi + 0x20]
push dword [eax + 4]
call fcn.00474b30
mov eax, dword [ebx + 0xc]
add esp, 0xc
mov ecx, dword [ebx + 0x88]
cmp dword [eax + 0x30], ecx
jg 0x4756f6
push 0
push esi
push 0
mov edx, 0xd
mov ecx, ebx
call fcn.00427140
add esp, 0xc
and dword [edi + 0x28], 0xffffffef
jmp 0x47578b
lea eax, [ecx + 1]
mov dword [ebx + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 0x58]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
and dword [edi + 0x28], 0xffffffef
jmp 0x47578b
mov eax, dword [ebp + 0x14]
lea edx, [esi + 1]
mov ecx, dword [ebx + 0x88]
mov edi, dword [eax + 4]
mov eax, dword [ebx + 0xc]
cmp dword [eax + 0x30], ecx
jg 0x47575a
push 0
push edx
push edi
mov edx, 7
mov ecx, ebx
call fcn.00427140
add esp, 0xc
jmp 0x47578b
lea eax, [ecx + 1]
mov dword [ebx + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [ebx + 0x58]
lea edx, [esi + 1]
mov dword [eax + ecx*4], 7
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x88]
test eax, eax
jle 0x4757a5
lea ecx, [eax + eax*4]
mov edx, 3
mov eax, dword [ebx + 0x58]
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [ebx + 0x88]
test esi, esi
jns 0x4757b2
lea esi, [edx - 1]
mov eax, dword [ebx]
cmp byte [eax + 0x45], 0
je 0x4757c1
mov eax, 0x515514
jmp 0x4757ca
mov eax, dword [ebx + 0x58]
lea ecx, [esi + esi*4]
lea eax, [eax + ecx*4]
mov edi, dword [esp + 0x14]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x3c]
test edx, edx
je 0x475810
mov al, byte [edi + 0x13]
mov byte [esp + 0x13], al
cmp al, 8
jae 0x475810
movzx esi, byte [edi + 0x19]
lea eax, [edi + 0x94]
xor ecx, ecx
test esi, esi
je 0x475801
cmp dword [eax + 0xc], edx
je 0x47583a
inc ecx
add eax, 0x14
cmp ecx, esi
jl 0x4757f4
movzx eax, byte [esp + 0x13]
mov dword [edi + eax*4 + 0x15c], edx
inc byte [edi + 0x13]
mov ecx, edi
call fcn.004409c0
mov ecx, dword [esp + 0x60]
mov edx, dword [ebx + 0x88]
test ecx, ecx
jns 0x475828
lea ecx, [edx - 1]
mov eax, dword [ebx]
cmp byte [eax + 0x45], 0
je 0x475840
mov eax, 0x515514
mov dword [eax + 8], edx
jmp 0x475853
mov byte [eax + 6], 1
jmp 0x475810
mov eax, dword [ebx + 0x58]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
jmp 0x475853
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x30]
test eax, eax
je 0x475864
mov ecx, dword [edi]
mov edx, eax
call fcn.0043ccd0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret