Function at 0x479604
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd0
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x479d25
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x19], 1
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
cmp dword [eax], 0xb7d0
jne 0x479668
lea eax, [ebp - 8]
call fcn.00406290
mov ecx, eax
mov edx, 0x479d34
mov eax, dword [ebp - 4]
call fcn.00403af4
and eax, 0x7f
mov edx, dword [ebp - 0x18]
mov dword [edx + 0xc], eax
lea eax, [ebp - 8]
call fcn.00406290
lea eax, [ebp - 0xc]
call fcn.00406290
mov ecx, eax
mov edx, 0x479d44
mov eax, dword [ebp - 4]
call fcn.00403af4
test al, al
je 0x47982c
mov byte [ebp - 0x19], 0
xor eax, eax
push ebp
push 0x479825
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
add eax, 0xffff4ffa
cmp eax, 0x2a
ja case.0x4796b2.45062
mov al, byte [eax + 0x4796b9]
jmp dword [eax*4 + 0x4796e4]
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0xc]
jmp 0x47980f
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x10]
jmp 0x47980f
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x18]
jmp 0x47980f
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x1c]
jmp 0x47980f
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x20]
jmp 0x47980f
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x24]
jmp 0x47980f
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x28]
jmp 0x47980f
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x14]
jmp 0x47980f
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 8]
mov edx, eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x30]
and eax, 0x7f
mov edx, dword [ebp - 0x18]
mov dword [edx + 0xc], eax
jmp 0x47980f
mov ebx, dword [ebp - 0x18]
movsx ecx, word [ebx + 0xa]
movsx edx, word [ebx + 8]
mov eax, dword [ebp - 0xc]
mov esi, dword [eax]
call dword [esi + 0x34]
and eax, 0x7f
mov dword [ebx + 0xc], eax
jmp 0x47980f
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x47980f
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
jmp 0x47980f
mov ebx, dword [ebp - 0x18]
lea eax, [ebp - 0x30]
mov dx, word [ebx + 4]
call fcn.004050d4
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebx + 8]
call fcn.00466e50
mov ecx, eax
movzx edx, word [ebx + 4]
mov eax, dword [ebp - 0xc]
mov esi, dword [eax]
call dword [esi + 0x2c]
and eax, 0x7f
mov dword [ebx + 0xc], eax
jmp 0x47980f
mov byte [ebp - 0x19], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47982c
lea eax, [ebp - 0xc]
call fcn.00406290
ret
cmp byte [ebp - 0x19], 0
je 0x479c1a
lea eax, [ebp - 0x10]
call fcn.00406290
mov ecx, eax
mov edx, 0x479d54
mov eax, dword [ebp - 4]
call fcn.00403af4
test al, al
je 0x479c1a
mov byte [ebp - 0x19], 0
xor eax, eax
push ebp
push 0x479c13
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
cmp eax, 0xb00f
jg 0x4798ae
je 0x4798c9
cmp eax, 8
jg 0x479897
je 0x479ad0
sub eax, 5
je 0x479b42
sub eax, 2
je 0x479a5e
jmp 0x479bf9
sub eax, 0x14
je 0x479b6e
sub eax, 0x73
je 0x479956
jmp 0x479bf9
sub eax, 0xb019
je 0x4798d6
sub eax, 9
je 0x4798e3
sub eax, 0xa
je 0x4798f0
sub eax, 0xa
je 0x479923
jmp 0x479bf9
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x10]
jmp 0x479bfd
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
jmp 0x479bfd
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x18]
jmp 0x479bfd
mov eax, dword [ebp - 0x18]
cmp dword [eax + 8], 0
je 0x47990e
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 4]
mov cl, 1
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0x1c]
jmp 0x479bfd
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 4]
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0x20]
jmp 0x479bfd
mov eax, dword [ebp - 0x18]
cmp dword [eax + 8], 0
jne 0x479941
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 4]
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0x1c]
jmp 0x479bfd
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 4]
mov cl, 1
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0x20]
jmp 0x479bfd
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x479440]
call fcn.0047950c
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0x479a57
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 8]
push eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
mov eax, dword [ebp - 4]
call fcn.004795c8
mov edx, dword [ebp - 0x18]
mov dword [edx + 0xc], eax
mov al, byte [0x479d64]
mov byte [ebp - 0x21], al
mov eax, dword [ebp - 0x18]
mov ebx, dword [eax + 0xc]
test bl, 1
je 0x4799b1
or byte [ebp - 0x21], 2
test bl, 2
je 0x4799ba
or byte [ebp - 0x21], 4
test bl, 4
je 0x4799c3
or byte [ebp - 0x21], 1
test bl, 0x80
je 0x4799cc
or byte [ebp - 0x21], 8
test bh, 0x20
je 0x4799d5
or byte [ebp - 0x21], 0x10
mov eax, dword [ebp - 0x2c]
call fcn.00479594
test al, al
je 0x479a41
lea edx, [ebp - 0x21]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x24]
test byte [ebp - 0x21], 0x20
jne 0x479a41
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [eax + 0xc], edx
test byte [ebp - 0x21], 1
je 0x479a07
mov eax, dword [ebp - 0x18]
or dword [eax + 0xc], 4
test byte [ebp - 0x21], 2
je 0x479a14
mov eax, dword [ebp - 0x18]
or dword [eax + 0xc], 1
test byte [ebp - 0x21], 4
je 0x479a21
mov eax, dword [ebp - 0x18]
or dword [eax + 0xc], 2
test byte [ebp - 0x21], 8
je 0x479a31
mov eax, dword [ebp - 0x18]
or dword [eax + 0xc], 0x80
test byte [ebp - 0x21], 0x10
je 0x479a41
mov eax, dword [ebp - 0x18]
or dword [eax + 0xc], 0x2000
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x479bfd
mov eax, dword [ebp - 0x2c]
call fcn.00403a40
ret
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x479440]
call fcn.0047950c
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0x479ac9
push dword fs:[eax]
mov dword fs:[eax], esp
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebx + 8]
push eax
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
mov eax, dword [ebp - 4]
call fcn.004795c8
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x2c]
call fcn.00479594
test al, al
je 0x479ab3
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x28]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x479bfd
mov eax, dword [ebp - 0x2c]
call fcn.00403a40
ret
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x479440]
call fcn.0047950c
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0x479b3b
push dword fs:[eax]
mov dword fs:[eax], esp
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebx + 8]
push eax
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
mov eax, dword [ebp - 4]
call fcn.004795c8
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x2c]
call fcn.00479594
test al, al
je 0x479b25
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x479bfd
mov eax, dword [ebp - 0x2c]
call fcn.00403a40
ret
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0xc]
lea eax, [ebp - 0x10]
call fcn.00406290
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebx + 8]
push eax
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
mov eax, dword [ebp - 4]
call fcn.004795c8
mov dword [ebx + 0xc], eax
jmp 0x479bfd
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 4]
push eax
call sub.gdi32.dll_SaveDC
mov dword [ebp - 0x28], eax
mov dl, 1
mov eax, dword [0x4244a0]
call fcn.00426464
mov dword [ebp - 0x20], eax
xor eax, eax
push ebp
push 0x479bf2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x20]
call fcn.00426cb8
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0x30]
and eax, 0x7f
mov edx, dword [ebp - 0x18]
mov dword [edx + 0xc], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x479bfd
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00426cb8
mov eax, dword [ebp - 0x20]
call fcn.00403a40
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 4]
push eax
call sub.gdi32.dll_RestoreDC
ret
mov byte [ebp - 0x19], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x479c1a
lea eax, [ebp - 0x10]
call fcn.00406290
ret
cmp byte [ebp - 0x19], 0
je 0x479cd2
lea eax, [ebp - 0x14]
call fcn.00406290
mov ecx, eax
mov edx, 0x479d68
mov eax, dword [ebp - 4]
call fcn.00403af4
test al, al
je 0x479cd2
mov byte [ebp - 0x19], 0
xor eax, eax
push ebp
push 0x479ccb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
add eax, 0xfffffd00
cmp eax, 4
ja case.default.0x479c64
jmp dword [eax*4 + 0x479c6b]
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0xc]
jmp 0x479cb5
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x10]
jmp 0x479cb5
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x14]
jmp 0x479cb5
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x18]
jmp 0x479cb5
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
call dword [edx + 0x1c]
jmp 0x479cb5
mov byte [ebp - 0x19], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x479cd2
lea eax, [ebp - 0x14]
call fcn.00406290
ret
cmp byte [ebp - 0x19], 0
je 0x479cef
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebx + 8]
push eax
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
mov eax, dword [ebp - 4]
call fcn.004795c8
mov dword [ebx + 0xc], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x479d2c
lea eax, [ebp - 0x30]
call fcn.00404fc4
lea eax, [ebp - 0x14]
call fcn.00406290
lea eax, [ebp - 0x10]
call fcn.00406290
lea eax, [ebp - 0xc]
call fcn.00406290
lea eax, [ebp - 8]
call fcn.00406290
ret