Function at 0x474b30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x13c
mov ecx, dword [ebp + 0x14]
push ebx
push esi
push edi
mov edi, eax
or eax, 0xffffffff
mov dword [esp + 0x14], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0xc]
xor ebx, ebx
test dword [ebp + 0x18], 0xe20f5a6f
lea esi, [eax + ecx]
lea edx, [esi - 1]
mov ecx, edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x38], edx
mov dword [esp + 0x18], ecx
je 0x474b93
lea eax, [ebx - 3]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, ebx
je 0x475566
cmp eax, ebx
je 0x475566
cmp dword [ebp + 0x1c], ebx
jne 0x474bb1
cmp dword [ebp + 0x20], ebx
jg 0x475566
cmp dword [ebp + 0x20], ebx
jge 0x474bc2
mov eax, 0xfffffff1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [edi + 0x18]
movzx edx, word [edi + 0x1c]
add eax, edi
mov dword [esp + 0x80], eax
movzx eax, word [edi + 0x1a]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x78], edx
mov edx, dword [edi + 0x20]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x5c], 0x989680
mov dword [esp + 0x60], 0x1770
mov dword [esp + 0xe8], ebx
mov dword [esp + 0x10], edx
cmp eax, ebx
je 0x474c51
mov edx, dword [eax]
test dl, 1
je 0x474c18
mov ebx, dword [eax + 4]
mov dword [esp + 0x1c], ebx
xor ebx, ebx
test dl, 2
je 0x474c26
mov ebx, dword [eax + 8]
mov dword [esp + 0x5c], ebx
xor ebx, ebx
test dl, 0x10
je 0x474c34
mov ebx, dword [eax + 0x14]
mov dword [esp + 0x60], ebx
xor ebx, ebx
test dl, 4
je 0x474c45
mov ebx, dword [eax + 0xc]
mov dword [esp + 0xe8], ebx
xor ebx, ebx
test dl, 8
je 0x474c51
mov eax, dword [eax + 0x10]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], ebx
jne 0x474c5f
mov dword [esp + 0x10], 0x496928
cmp dword [edi], 0x50435245
je 0x474cae
mov ebx, dword [esp + 0x1c]
lea ecx, [esp + 0xf4]
push ecx
lea eax, [esp + 0x124]
mov edx, edi
call fcn.004756d0
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
jne 0x474c98
mov eax, 0xfffffffc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [esp + 0x1c], 0
mov ecx, dword [esp + 0x18]
je 0x474cae
lea edx, [esp + 0xf4]
mov dword [esp + 0x1c], edx
mov eax, dword [ecx + 8]
mov ebx, dword [ebp + 0x18]
mov edx, eax
or edx, ebx
shr edx, 4
and edx, 1
mov dword [esp + 0x44], edx
movzx edx, word [ecx + 0xc]
shr eax, 0x12
shr edx, 3
and eax, 1
and edx, 1
mov dword [esp + 0x3c], eax
movzx eax, word [ecx + 0x1a]
mov dword [esp + 0x34], edx
movzx edx, word [ecx + 0x1c]
imul edx, eax
movzx eax, word [ecx + 0x18]
add edx, edi
add eax, edx
mov edx, dword [ebp + 0x14]
mov dword [esp + 0xb4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xb8], eax
add eax, dword [ebp + 0x10]
mov dword [esp + 0xd8], edx
mov dword [esp + 0xbc], eax
mov dword [esp + 0x20], eax
mov eax, dword [ecx + 8]
shr eax, 5
and eax, 1
mov dword [esp + 0xa0], eax
mov edx, dword [ecx + 8]
shr edx, 0x19
and edx, 1
mov dword [esp + 0x9c], edx
mov eax, ebx
shr eax, 7
and eax, 1
mov edx, ebx
shr edx, 8
and edx, 1
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], edx
mov eax, ebx
mov edx, ebx
shr eax, 0xa
shr edx, 0x1c
and eax, 1
and edx, 1
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], edx
test ebx, 0x8000000
je 0x474d81
mov eax, 2
jmp 0x474d89
mov eax, ebx
shr eax, 0xf
and eax, 1
mov edi, eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x88], eax
add eax, 0x340
xor edx, edx
mov dword [esp + 0x8c], eax
mov eax, ebx
and eax, 0x1800000
mov dword [esp + 0xcc], edi
mov dword [esp + 0xac], edx
mov dword [esp + 0xec], edx
mov dword [esp + 0xe4], edx
je 0x474df0
cmp eax, 0x800000
je 0x474de3
cmp eax, 0x1000000
je 0x474e09
mov eax, 0xffffffe9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esp + 0xb0], 1
jmp 0x474e10
mov eax, dword [ecx + 8]
test eax, 0x1800000
je 0x474e09
shr eax, 0x17
and eax, 1
mov dword [esp + 0xb0], eax
jmp 0x474e10
mov dword [esp + 0xb0], edx
test ebx, 0x700000
jne 0x474e1d
mov eax, dword [ecx + 8]
jmp 0x474e1f
mov eax, ebx
and eax, 0x700000
cmp eax, 0x300000
ja 0x474e7c
je 0x474e75
cmp eax, edx
je 0x474e75
cmp eax, 0x100000
je 0x474e6e
cmp eax, 0x200000
jne 0x474dd7
mov eax, 0xa
mov dword [esp + 0x70], edx
cmp eax, 0xff
jle 0x474ea2
mov edx, eax
sar edx, 8
mov byte [esp + 0x84], dl
mov dword [esp + 0x74], 2
mov byte [esp + 0x85], al
xor edx, edx
jmp 0x474eb1
mov eax, 0xd
jmp 0x474e44
mov eax, 0xd0a
jmp 0x474e44
cmp eax, 0x400000
je 0x474e98
cmp eax, 0x500000
jne 0x474dd7
mov dword [esp + 0x70], 2
jmp 0x474eb1
mov dword [esp + 0x70], 1
jmp 0x474eb1
mov dword [esp + 0x74], 1
mov byte [esp + 0x84], al
cmp edi, edx
je 0x474ec7
test byte [ecx + 0xc], 1
je 0x474ec7
mov eax, 0xfffffff3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx + 8]
and eax, 7
mov dword [esp + 0xf0], eax
mov eax, 0x55555556
imul dword [ebp + 0x20]
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edi, [eax + eax*2]
movzx eax, word [ecx + 0x12]
test ax, ax
je 0x474f36
mov ecx, eax
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x474f36
lea edi, [ecx + ecx*2 + 3]
lea ecx, [edi*4]
push ecx
call dword [0x49d2d0]
add esp, 4
mov dword [esp + 0x64], eax
test eax, eax
jne 0x474f2c
mov eax, 0xfffffffa
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esp + 0x30], 1
jmp 0x474f3d
mov edx, dword [ebp + 0x1c]
mov dword [esp + 0x64], edx
lea ecx, [edi + edi]
mov eax, 0x55555556
imul ecx
mov ecx, dword [esp + 0x18]
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], edi
mov dword [esp + 0x90], 0
mov dword [esp + 0xd4], 0xffffffff
movzx eax, word [ecx + 0x10]
lea eax, [eax + eax + 2]
mov dword [esp + 0x2c], eax
cmp eax, dword [ebp + 0x20]
jle 0x474f85
mov dword [esp + 0x2c], edi
cmp dword [esp + 0x64], 0
je 0x474fbd
mov edx, dword [esp + 0x64]
mov eax, dword [esp + 0x2c]
lea ecx, [edx + edi*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 1
sub edx, eax
lea eax, [ecx + edx*4]
sub ecx, 4
cmp ecx, eax
jb 0x474fbd
lea ecx, [ecx]
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, eax
jae 0x474fb0
cmp dword [esp + 0x44], 0
mov edi, dword [esp + 0x64]
mov edx, dword [esp + 0x18]
jne 0x47501d
test byte [edx + 0xc], 2
je 0x475001
movzx eax, word [edx + 0x14]
mov ecx, eax
and ecx, 0xff
shr eax, 8
and eax, 1
mov dword [esp + 0x14], ecx
mov dword [esp + 0x54], eax
je 0x47501d
mov eax, ecx
mov ecx, dword [esp + 0x88]
movzx eax, byte [ecx + eax]
mov dword [esp + 0x14], eax
jmp 0x47501d
cmp dword [esp + 0x34], 0
jne 0x47501d
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x47501d
test byte [eax + 4], 1
je 0x47501d
add eax, 8
mov dword [esp + 0x24], eax
test byte [edx + 0xc], 4
je 0x47504d
movzx eax, word [edx + 0x16]
mov edx, dword [esp + 0x10]
mov ecx, eax
and ecx, 0xff
shr eax, 8
and eax, 1
mov dword [esp + 0x48], eax
movzx eax, byte [edx + ecx + 0x100]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], eax
and ebx, 0x4000000
mov dword [esp + 0x40], ebx
jmp 0x475060
mov edx, dword [esp + 0x20]
mov dword [esp + 0x10], edx
test edi, edi
je 0x475083
mov ecx, dword [esp + 0x2c]
lea ecx, [edi + ecx*4]
cmp edi, ecx
jae 0x475083
sub ecx, edi
dec ecx
shr ecx, 2
inc ecx
or eax, 0xffffffff
rep stosd dword es:[edi], eax
cmp dword [esp + 0x3c], 0
mov eax, dword [esp + 0xbc]
je 0x4750fa
mov ecx, esi
cmp esi, eax
jae 0x4750f4
cmp dword [esp + 0x70], 0
je 0x4750c7
mov edx, dword [esp + 0x70]
push edx
mov edx, dword [esp + 0xc0]
lea esi, [esp + 0x78]
call fcn.004758c0
mov esi, dword [esp + 0x10]
add esp, 4
test eax, eax
jne 0x4750f4
mov eax, dword [esp + 0xbc]
jmp 0x4750ef
mov edi, dword [esp + 0x74]
mov edx, eax
sub edx, edi
cmp ecx, edx
ja 0x4750ef
mov dl, byte [ecx]
cmp dl, byte [esp + 0x84]
jne 0x4750ef
cmp edi, 1
je 0x4750f4
mov dl, byte [ecx + 1]
cmp dl, byte [esp + 0x85]
je 0x4750f4
inc ecx
cmp ecx, eax
jb 0x475097
mov edx, ecx
mov dword [esp + 0x20], edx
cmp dword [esp + 0x40], 0
jne 0x475257
cmp dword [esp + 0x14], 0
jl 0x475167
cmp dword [esp + 0x54], 0
je 0x475142
cmp esi, edx
jae 0x475257
jmp 0x475120
movzx eax, byte [esi]
mov ecx, dword [esp + 0x88]
movzx eax, byte [eax + ecx]
cmp eax, dword [esp + 0x14]
je 0x475253
inc esi
cmp esi, edx
jb 0x475120
jmp 0x475253
cmp esi, edx
jae 0x475257
lea ebx, [ebx]
movzx ecx, byte [esi]
cmp ecx, dword [esp + 0x14]
je 0x475253
inc esi
cmp esi, edx
jb 0x475150
jmp 0x475253
cmp dword [esp + 0x34], 0
je 0x475226
mov ecx, dword [esp + 0xb8]
add ecx, dword [ebp + 0x14]
cmp esi, ecx
jbe 0x475257
cmp esi, edx
jae 0x475206
lea esp, [esp]
cmp dword [esp + 0x70], 0
je 0x4751ca
cmp esi, dword [esp + 0xb8]
jbe 0x4751fd
mov edx, dword [esp + 0x70]
mov esi, dword [esp + 0xb8]
mov ecx, dword [esp + 0xc]
push edx
lea edx, [esp + 0x78]
call fcn.00475950
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
add esp, 4
test eax, eax
jne 0x475206
jmp 0x4751fd
mov eax, dword [esp + 0x74]
add eax, dword [esp + 0xb8]
cmp esi, eax
jb 0x4751fd
mov cl, byte [esp + 0x84]
mov eax, esi
sub eax, dword [esp + 0x74]
cmp byte [eax], cl
jne 0x4751fd
cmp dword [esp + 0x74], 1
je 0x475206
mov cl, byte [esp + 0x85]
cmp byte [eax + 1], cl
je 0x475206
inc esi
mov dword [esp + 0xc], esi
cmp esi, edx
jb 0x475190
cmp byte [esi - 1], 0xd
jne 0x475257
mov eax, dword [esp + 0x70]
cmp eax, 1
je 0x47521a
cmp eax, 2
jne 0x475257
cmp esi, edx
jae 0x475257
cmp byte [esi], 0xa
jne 0x475257
inc esi
jmp 0x475253
cmp dword [esp + 0x24], 0
je 0x475257
cmp esi, edx
jae 0x475257
mov edi, dword [esp + 0x24]
movzx eax, byte [esi]
mov ecx, eax
and ecx, 7
mov ebx, 1
shl ebx, cl
shr eax, 3
mov al, byte [eax + edi]
test al, bl
jne 0x475253
inc esi
cmp esi, edx
jb 0x475235
mov dword [esp + 0xc], esi
cmp dword [esp + 0x40], 0
mov edi, dword [esp + 0x10]
mov dword [esp + 0x20], edi
jne 0x4752fc
cmp dword [esp + 0xcc], 0
jne 0x4752fc
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x47528f
test byte [eax + 4], 2
je 0x47528f
mov ecx, edi
sub ecx, esi
cmp ecx, dword [eax + 0x28]
jb case.0x475375.998
mov edx, dword [esp + 0x4c]
test edx, edx
js 0x4752fc
mov eax, edi
sub eax, esi
cmp eax, 0x3e8
jge 0x4752fc
xor eax, eax
cmp dword [esp + 0x14], eax
setge al
add eax, esi
cmp eax, dword [esp + 0x38]
jbe 0x4752fc
cmp dword [esp + 0x48], 0
je 0x4752d9
cmp eax, edi
jae case.0x475375.998
mov edi, edi
movzx ecx, byte [eax]
inc eax
cmp ecx, edx
je 0x4752f3
cmp ecx, dword [esp + 0x50]
je 0x4752f3
cmp eax, edi
jb 0x4752c0
xor edi, edi
jmp 0x475455
cmp eax, edi
jae case.0x475375.998
lea ecx, [ecx]
movzx ecx, byte [eax]
inc eax
cmp ecx, edx
je 0x4752f3
cmp eax, edi
jb 0x4752e0
xor edi, edi
jmp 0x475455
dec eax
cmp eax, edi
jae case.0x475375.998
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0xf0]
mov ecx, dword [esp + 0xb4]
push 0
push 0
push 0
push edx
lea eax, [esp + 0x68]
push eax
push 2
push 0
push esi
push ecx
push esi
mov dword [esp + 0xe8], esi
mov dword [esp + 0xf0], esi
mov dword [esp + 0x80], 0
call fcn.00470da0
add esp, 0x28
cmp dword [esp + 0xac], 0
mov edi, eax
je 0x47535c
cmp dword [esp + 0x28], 0
jne 0x47535c
mov edx, dword [esp + 0xc8]
mov dword [esp + 0x28], edx
test edi, edi
jg case.default.0x475375
je case.0x475375.997
lea eax, [edi + 0x3e6]
cmp eax, 4
ja case.default.0x475375
jmp dword [eax*4 + 0x475574]
mov eax, dword [esp + 0xc0]
mov ebx, eax
cmp eax, esi
jne 0x47538c
lea ebx, [esi + 1]
mov eax, dword [esp + 0x70]
xor edi, edi
cmp dword [esp + 0x3c], edi
je 0x4753f3
test eax, eax
je 0x4753c6
mov edx, dword [esp + 0xbc]
cmp esi, edx
jae 0x4753f3
mov ecx, dword [esp + 0xc]
push eax
lea esi, [esp + 0x78]
call fcn.004758c0
add esp, 4
test eax, eax
jne 0x475455
mov eax, dword [esp + 0x70]
jmp 0x4753f3
mov ecx, dword [esp + 0xbc]
sub ecx, dword [esp + 0x74]
cmp esi, ecx
ja 0x4753f3
mov dl, byte [esp + 0x84]
cmp byte [esi], dl
jne 0x4753f3
cmp dword [esp + 0x74], 1
je 0x475455
mov cl, byte [esp + 0x85]
cmp byte [esi + 1], cl
je 0x475455
mov dword [esp + 0xc], ebx
cmp dword [esp + 0x44], edi
jne 0x475455
cmp ebx, dword [esp + 0x10]
ja 0x475455
cmp byte [ebx - 1], 0xd
jne 0x475434
cmp ebx, dword [esp + 0x10]
jae 0x475434
cmp byte [ebx], 0xa
jne 0x475434
mov edx, dword [esp + 0x18]
test byte [edx + 0xc], 0x20
jne 0x475434
cmp eax, 1
je 0x47542f
cmp eax, 2
je 0x47542f
cmp dword [esp + 0x74], 2
jne 0x475434
inc ebx
mov dword [esp + 0xc], ebx
mov esi, dword [esp + 0xc]
mov dword [esp + 0xec], edi
mov edi, dword [esp + 0x64]
jmp 0x475060
cmp edi, 1
je 0x4754ba
cmp edi, 0xfffffc19
je 0x4754ba
cmp dword [esp + 0x30], 0
je 0x47546a
mov eax, dword [esp + 0x64]
push eax
call dword [0x49d2d4]
add esp, 4
test edi, edi
je 0x47547c
cmp edi, 0xfffffff4
je 0x47547c
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4754b2
cmp dword [ebp + 0x20], 1
mov dword [esp + 0xec], 0
jle 0x4754a8
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x1c]
sub eax, edx
mov dword [ecx], eax
mov eax, dword [esp + 0x10]
sub eax, edx
mov dword [ecx + 4], eax
mov eax, 0xfffffff4
jmp 0x475547
or eax, 0xffffffff
jmp 0x475547
cmp dword [esp + 0x30], 0
mov esi, dword [ebp + 0x20]
mov edi, dword [ebp + 0x1c]
je 0x475506
mov ebx, dword [esp + 0x64]
cmp esi, 4
jl 0x4754e8
lea ecx, [esi*4 - 8]
push ecx
lea edx, [ebx + 8]
push edx
lea eax, [edi + 8]
push eax
call fcn.0047b470
add esp, 0xc
cmp dword [esp + 0xd0], esi
jle 0x4754fc
mov dword [esp + 0x90], 1
push ebx
call dword [0x49d2d4]
add esp, 4
cmp dword [esp + 0x90], 0
je 0x475514
xor eax, eax
jmp 0x475520
mov eax, dword [esp + 0xd0]
cdq
sub eax, edx
sar eax, 1
cmp esi, 2
jge 0x475529
xor eax, eax
jmp 0x475547
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xc0]
sub edx, ecx
mov dword [edi], edx
mov edx, dword [esp + 0xc4]
sub edx, ecx
mov dword [edi + 4], edx
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x47556b
test byte [ecx], 0x20
je 0x47556b
mov ecx, dword [ecx + 0x18]
mov edx, dword [esp + 0xec]
mov dword [ecx], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret