Function at 0x475f70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5abf70
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
mov ebx, dword [esp + 0x60]
push esi
push edi
mov edi, dword [esp + 0x60]
cmp edi, ebx
jle 0x475fa7
mov eax, edi
mov dword [esp + 0x60], ebx
mov edi, dword [esp + 0x60]
mov ebx, eax
mov dword [esp + 0x68], ebx
mov esi, dword [esp + 0x64]
push ebp
mov ebp, dword [esp + 0x70]
cmp esi, ebp
jle 0x475fc2
mov eax, esi
mov esi, ebp
mov ebp, eax
mov dword [esp + 0x68], esi
mov dword [esp + 0x70], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x10], 0x3f800000
cmp word [eax], 0xa
je 0x47600e
push eax
lea ecx, [esp + 0x48]
call sub.MFC42.DLL_COleVariant::COleVariant_1
push 0
push 4
lea ecx, [esp + 0x4c]
mov dword [esp + 0x64], 0
call sub.MFC42.DLL_COleVariant::ChangeType
mov eax, dword [esp + 0x4c]
lea ecx, [esp + 0x44]
push ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x60], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [esp + 0x74]
lea ecx, [esp + 0x24]
push edx
call sub.MFC42.DLL_CString::CString_1
push 0x6499d8
lea ecx, [esp + 0x28]
mov dword [esp + 0x60], 1
call sub.MFC42.DLL_CString::TrimLeft_1
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x28]
push eax
push 0x6499d4
push ecx
call dword [sym.imp.MSVCRT.dll_sscanf]
lea edx, [esp + 0x20]
push edx
push ebp
push ebx
push esi
push edi
call fcn.00475c70
fld dword [esp + 0x30]
fsubr qword [0x5bca78]
mov edi, eax
mov eax, dword [esp + 0x48]
mov edx, eax
xor ecx, ecx
mov cl, byte [esp + 0x4a]
and edx, 0xff
shl edx, 0x10
or ecx, edx
and eax, 0xff00
fmul qword [0x5c0f18]
or ecx, eax
add esp, 0x20
mov dword [esp + 0x3c], ecx
call sub.MSVCRT.dll__ftol
mov edx, dword [esp + 0x14]
mov dword [esp + 0x74], eax
test edi, edi
je 0x47690a
mov ax, word [esp + 0x78]
test ax, ax
jne 0x476173
fld dword [esp + 0x10]
fcomp qword [0x5c0f10]
fnstsw ax
test ah, 0x41
jne 0x4760f1
xor ecx, ecx
test edx, edx
jle 0x47690e
mov eax, edi
mov edx, dword [eax]
mov esi, dword [esp + 0x3c]
and edx, 0xffffff
cmp edx, esi
je 0x47690e
mov edx, dword [esp + 0x14]
inc ecx
add eax, 4
cmp ecx, edx
jl 0x4760cc
jmp 0x47690e
xor ecx, ecx
test edx, edx
jle 0x47690e
mov ebx, dword [esp + 0x3e]
mov eax, dword [esp + 0x3d]
mov ebp, dword [esp + 0x3c]
and ebx, 0xff
and eax, 0xff
and ebp, 0xff
mov dword [esp + 0x70], eax
mov dword [esp + 0x78], ebp
lea esi, [edi + 1]
jmp 0x476129
mov ebp, dword [esp + 0x78]
xor eax, eax
mov al, byte [esi - 1]
sub eax, ebp
cdq
mov ebp, eax
xor eax, eax
mov al, byte [esi + 1]
xor ebp, edx
sub eax, ebx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x70]
add ebp, eax
xor eax, eax
mov al, byte [esi]
sub eax, edx
cdq
xor eax, edx
sub eax, edx
add ebp, eax
mov eax, dword [esp + 0x74]
cmp ebp, eax
jl 0x47690e
mov eax, dword [esp + 0x14]
inc ecx
add esi, 4
cmp ecx, eax
jl 0x476125
jmp 0x47690e
cmp ax, 1
jne 0x47664f
mov edx, dword [esp + 0x64]
sub ebp, esi
sub ebx, edx
mov dword [esp + 0x70], ebp
mov dword [esp + 0x78], ebx
lea eax, [ebx + 1]
cdq
sub eax, edx
mov ecx, eax
lea eax, [ebp + 1]
cdq
sub eax, edx
mov esi, eax
mov eax, ebx
sar ecx, 1
sar esi, 1
cmp ebx, ebp
jg 0x4761a9
mov eax, ebp
mov edx, dword [esp + 0x70]
cmp ebx, edx
jle 0x4761b3
mov edx, ebx
mov ebx, edx
and ebx, 0x80000001
jns 0x4761c2
dec ebx
or ebx, 0xfffffffe
inc ebx
fld dword [esp + 0x10]
fcomp qword [0x5c0f10]
cdq
sub eax, edx
sar eax, 1
add ebx, eax
fnstsw ax
mov dword [esp + 0x30], ebx
test ah, 0x41
jne 0x4763a5
test ebx, ebx
mov dword [esp + 0x1c], 0
jl 0x476367
mov ebx, dword [esp + 0x78]
mov edx, dword [esp + 0x6c]
mov ebp, ecx
mov dword [esp + 0x74], ecx
lea eax, [ebx + 1]
imul eax, esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x64]
sub eax, edx
dec eax
sub esi, ecx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x7c], esi
cmp ecx, ebp
mov eax, ecx
jg 0x4762ab
mov edx, dword [esp + 0x7c]
lea esi, [edx + ecx]
mov dword [esp + 0x20], esi
lea ecx, [ebx + 1]
imul ecx, esi
add ecx, eax
test eax, eax
jl 0x476267
cmp eax, ebx
jg 0x476267
test esi, esi
jl 0x476267
cmp esi, dword [esp + 0x70]
jg 0x476267
mov edx, dword [edi + ecx*4]
mov ebx, dword [esp + 0x3c]
and edx, 0xffffff
cmp edx, ebx
je 0x47690e
mov ebx, dword [esp + 0x78]
mov ecx, dword [esp + 0x18]
add ecx, eax
test eax, eax
jl 0x4762a2
cmp eax, ebx
jg 0x4762a2
mov edx, dword [esp + 0x7c]
add edx, ebp
test edx, edx
jl 0x4762a2
cmp edx, dword [esp + 0x70]
jg 0x47629e
mov edx, dword [edi + ecx*4]
mov esi, dword [esp + 0x3c]
and edx, 0xffffff
cmp edx, esi
je 0x47690e
mov ebx, dword [esp + 0x78]
mov esi, dword [esp + 0x20]
inc eax
cmp eax, ebp
jle 0x476234
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x7c]
lea eax, [edx + ecx]
lea ecx, [edx + ebp]
cmp eax, ecx
jg 0x47632d
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x74]
test esi, esi
lea ecx, [esi + edx]
jl 0x4762ef
cmp esi, ebx
jg 0x4762ef
test eax, eax
jl 0x4762ef
cmp eax, dword [esp + 0x70]
jg 0x4762ef
mov esi, dword [edi + ecx*4]
mov ebx, dword [esp + 0x3c]
and esi, 0xffffff
cmp esi, ebx
je 0x47690e
mov ebx, dword [esp + 0x78]
test ebp, ebp
lea ecx, [edx + ebp]
jl 0x47631d
cmp ebp, ebx
jg 0x47631d
test eax, eax
jl 0x47631d
cmp eax, dword [esp + 0x70]
jg 0x47631d
mov esi, dword [edi + ecx*4]
mov ebx, dword [esp + 0x3c]
and esi, 0xffffff
cmp esi, ebx
je 0x47690e
mov ebx, dword [esp + 0x78]
lea ecx, [ebx + 1]
inc eax
add edx, ecx
mov ecx, dword [esp + 0x7c]
add ecx, ebp
cmp eax, ecx
jle 0x4762bd
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
add ecx, eax
lea eax, [ebx + 1]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x74]
inc edx
add esi, eax
mov eax, dword [esp + 0x30]
dec ecx
inc ebp
cmp edx, eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x74], ecx
mov dword [esp + 0x18], esi
jle 0x47621f
or ebx, 0xffffffff
or esi, 0xffffffff
test edi, edi
pop ebp
je 0x47637b
push edi
call sub.MFC42.DLL_operatordelete
add esp, 4
shl esi, 0xd
lea ecx, [esp + 0x20]
add esi, ebx
mov dword [esp + 0x58], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0x50]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x50
ret
test ebx, ebx
mov dword [esp + 0x2c], 0
jl 0x476367
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x6c]
mov ebp, ecx
mov dword [esp + 0x10], ecx
lea eax, [edx + 1]
mov dword [esp + 0x1c], ebp
imul eax, esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x64]
sub eax, ebx
dec eax
sub esi, ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x7c], esi
mov ebx, dword [esp + 0x10]
cmp ebx, ebp
jg 0x4764f8
mov eax, dword [esp + 0x7c]
add eax, ebx
mov dword [esp + 0x34], eax
jmp 0x4763fe
mov eax, dword [esp + 0x34]
lea ecx, [edx + 1]
imul ecx, eax
add ecx, ebx
test ebx, ebx
jl 0x476472
cmp ebx, edx
jg 0x476472
test eax, eax
jl 0x476472
cmp eax, dword [esp + 0x70]
jg 0x476472
mov edx, dword [esp + 0x3d]
xor eax, eax
mov al, byte [edi + ecx*4 + 1]
and edx, 0xff
sub eax, edx
cdq
mov esi, eax
xor eax, eax
mov al, byte [edi + ecx*4 + 2]
xor esi, edx
sub esi, edx
mov edx, dword [esp + 0x3e]
and edx, 0xff
sub eax, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x3c]
add esi, eax
xor eax, eax
mov al, byte [edi + ecx*4]
and edx, 0xff
sub eax, edx
cdq
xor eax, edx
sub eax, edx
add esi, eax
mov eax, dword [esp + 0x74]
cmp esi, eax
jl 0x47690e
mov edx, dword [esp + 0x78]
mov eax, dword [esp + 0x20]
test ebx, ebx
lea ecx, [eax + ebx]
jl 0x4764eb
cmp ebx, edx
jg 0x4764eb
mov eax, dword [esp + 0x7c]
add eax, ebp
test eax, eax
jl 0x4764eb
cmp eax, dword [esp + 0x70]
jg 0x4764eb
mov edx, dword [esp + 0x3d]
xor eax, eax
mov al, byte [edi + ecx*4 + 1]
and edx, 0xff
sub eax, edx
cdq
mov esi, eax
xor eax, eax
mov al, byte [edi + ecx*4 + 2]
xor esi, edx
sub esi, edx
mov edx, dword [esp + 0x3e]
and edx, 0xff
sub eax, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x3c]
add esi, eax
xor eax, eax
mov al, byte [edi + ecx*4]
and edx, 0xff
sub eax, edx
cdq
xor eax, edx
sub eax, edx
add esi, eax
mov eax, dword [esp + 0x74]
cmp esi, eax
jl 0x47690e
mov edx, dword [esp + 0x78]
inc ebx
cmp ebx, ebp
jle 0x4763fa
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x7c]
add ebx, eax
add eax, ebp
cmp ebx, eax
mov dword [esp + 0x34], eax
jg 0x47660c
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
test eax, eax
lea ecx, [eax + esi]
jl 0x476587
cmp eax, edx
jg 0x476587
test ebx, ebx
jl 0x476587
cmp ebx, dword [esp + 0x70]
jg 0x476587
mov edx, dword [esp + 0x3d]
xor eax, eax
mov al, byte [edi + ecx*4 + 1]
and edx, 0xff
sub eax, edx
cdq
mov ebp, eax
xor eax, eax
mov al, byte [edi + ecx*4 + 2]
xor ebp, edx
sub ebp, edx
mov edx, dword [esp + 0x3e]
and edx, 0xff
sub eax, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x3c]
add ebp, eax
xor eax, eax
mov al, byte [edi + ecx*4]
and edx, 0xff
sub eax, edx
cdq
xor eax, edx
sub eax, edx
add ebp, eax
mov eax, dword [esp + 0x74]
cmp ebp, eax
jl 0x47690e
mov edx, dword [esp + 0x78]
mov ebp, dword [esp + 0x1c]
test ebp, ebp
lea ecx, [esi + ebp]
jl 0x4765fa
cmp ebp, edx
jg 0x4765fa
test ebx, ebx
jl 0x4765fa
cmp ebx, dword [esp + 0x70]
jg 0x4765fa
mov edx, dword [esp + 0x3d]
xor eax, eax
mov al, byte [edi + ecx*4 + 1]
and edx, 0xff
sub eax, edx
cdq
mov ebp, eax
xor eax, eax
mov al, byte [edi + ecx*4 + 2]
xor ebp, edx
sub ebp, edx
mov edx, dword [esp + 0x3e]
and edx, 0xff
sub eax, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x3c]
add ebp, eax
xor eax, eax
mov al, byte [edi + ecx*4]
and edx, 0xff
sub eax, edx
cdq
xor eax, edx
sub eax, edx
add ebp, eax
mov eax, dword [esp + 0x74]
cmp ebp, eax
jl 0x47690e
mov edx, dword [esp + 0x78]
mov ebp, dword [esp + 0x1c]
lea eax, [edx + 1]
inc ebx
add esi, eax
mov eax, dword [esp + 0x34]
cmp ebx, eax
jle 0x476510
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
add esi, eax
mov eax, dword [esp + 0x10]
inc ecx
dec eax
mov dword [esp + 0x18], esi
mov esi, dword [esp + 0x20]
mov dword [esp + 0x10], eax
lea eax, [edx + 1]
inc ebp
add esi, eax
mov eax, dword [esp + 0x30]
cmp ecx, eax
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], esi
jle 0x4763e2
jmp 0x476367
cmp ax, 2
jne 0x476716
fld dword [esp + 0x10]
fcomp qword [0x5c0f10]
lea ecx, [edx - 1]
fnstsw ax
test ah, 0x41
jne 0x476699
test ecx, ecx
jl 0x476367
lea eax, [edi + ecx*4]
mov edx, dword [eax]
mov esi, dword [esp + 0x3c]
and edx, 0xffffff
cmp edx, esi
je 0x47690e
dec ecx
sub eax, 4
test ecx, ecx
jge 0x476678
jmp 0x476367
test ecx, ecx
jl 0x476367
mov ebx, dword [esp + 0x3e]
mov eax, dword [esp + 0x3d]
mov ebp, dword [esp + 0x3c]
and ebx, 0xff
and eax, 0xff
and ebp, 0xff
mov dword [esp + 0x70], eax
mov dword [esp + 0x78], ebp
lea esi, [edi + ecx*4 + 1]
jmp 0x4766d0
mov ebp, dword [esp + 0x78]
xor eax, eax
mov al, byte [esi - 1]
sub eax, ebp
cdq
mov ebp, eax
xor eax, eax
mov al, byte [esi + 1]
xor ebp, edx
sub eax, ebx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x70]
add ebp, eax
xor eax, eax
mov al, byte [esi]
sub eax, edx
cdq
xor eax, edx
sub eax, edx
add ebp, eax
mov eax, dword [esp + 0x74]
cmp ebp, eax
jl 0x47690e
dec ecx
sub esi, 4
test ecx, ecx
jge 0x4766cc
jmp 0x476367
cmp ax, 3
jne 0x47680e
mov ecx, ebp
cmp ebp, esi
mov dword [esp + 0x78], ecx
jl 0x476367
mov edx, dword [esp + 0x64]
mov eax, dword [esp + 0x6c]
cmp edx, eax
mov dword [esp + 0x7c], edx
jg 0x4767f8
mov ebx, eax
mov eax, edx
sub ebx, eax
inc ebx
imul ebx, ecx
add eax, ebx
lea esi, [edi + eax*4]
fld dword [esp + 0x10]
fcomp qword [0x5c0f10]
lea ecx, [ebx + edx]
fnstsw ax
test ah, 0x41
jne 0x476778
mov eax, dword [esi]
mov ebp, dword [esp + 0x3c]
and eax, 0xffffff
cmp eax, ebp
je 0x47690e
fld dword [esp + 0x10]
fcomp qword [0x5c0f10]
fnstsw ax
test ah, 0x41
je 0x4767e0
mov edx, dword [esp + 0x3e]
xor eax, eax
mov al, byte [esi + 2]
and edx, 0xff
sub eax, edx
cdq
mov ebp, eax
xor eax, eax
mov al, byte [esi + 1]
xor ebp, edx
sub ebp, edx
mov edx, dword [esp + 0x3d]
and edx, 0xff
sub eax, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x3c]
add ebp, eax
xor eax, eax
mov al, byte [esi]
and edx, 0xff
sub eax, edx
cdq
xor eax, edx
sub eax, edx
add ebp, eax
mov eax, dword [esp + 0x74]
cmp ebp, eax
jl 0x47690e
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x6c]
inc edx
add esi, 4
cmp edx, eax
mov dword [esp + 0x7c], edx
jle 0x476751
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x68]
dec ecx
cmp ecx, eax
mov dword [esp + 0x78], ecx
jge 0x47672e
jmp 0x476367
cmp ax, 4
jne 0x47690a
cmp esi, ebp
mov dword [esp + 0x78], esi
jg 0x476367
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x7c], edx
cmp edx, eax
jl 0x4768f4
mov eax, dword [esp + 0x6c]
mov esi, dword [esp + 0x64]
mov ebx, eax
sub ebx, esi
inc ebx
imul ebx, dword [esp + 0x78]
add eax, ebx
lea esi, [edi + eax*4]
fld dword [esp + 0x10]
fcomp qword [0x5c0f10]
lea ecx, [ebx + edx]
fnstsw ax
test ah, 0x41
jne 0x476874
mov eax, dword [esi]
and eax, 0xffffff
cmp eax, dword [esp + 0x3c]
je 0x47690e
fld dword [esp + 0x10]
fcomp qword [0x5c0f10]
fnstsw ax
test ah, 0x41
je 0x4768dc
mov edx, dword [esp + 0x3e]
xor eax, eax
mov al, byte [esi + 2]
and edx, 0xff
sub eax, edx
cdq
mov ebp, eax
xor eax, eax
mov al, byte [esi]
xor ebp, edx
sub ebp, edx
mov edx, dword [esp + 0x3c]
and edx, 0xff
sub eax, edx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x3d]
add ebp, eax
xor eax, eax
mov al, byte [esi + 1]
and edx, 0xff
sub eax, edx
cdq
xor eax, edx
sub eax, edx
add ebp, eax
mov eax, dword [esp + 0x74]
cmp ebp, eax
jl 0x47690e
mov ebp, dword [esp + 0x70]
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x64]
dec edx
sub esi, 4
cmp edx, eax
mov dword [esp + 0x7c], edx
jge 0x47684f
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x78]
inc eax
cmp eax, ebp
mov dword [esp + 0x78], eax
jle 0x476828
jmp 0x476367
mov ecx, dword [esp + 0x78]
cmp ecx, dword [esp + 0x14]
je 0x476367
test edi, edi
je 0x476367
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x64]
mov eax, ecx
sub ebx, ebp
cdq
inc ebx
idiv ebx
mov eax, ecx
mov esi, edx
cdq
idiv ebx
add esi, ebp
mov ebx, eax
mov eax, dword [esp + 0x68]
add ebx, eax
jmp 0x47636d