Function at 0x475190
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x28
push ebx
mov ebx, dword [esp + 0x34]
push ebp
push esi
xor eax, eax
push edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], eax
jmp 0x4751b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
nop
mov dl, byte [ecx + eax + 0x22]
test dl, dl
je 0x475260
mov eax, dword [ecx + eax*4 + 0x18]
mov edx, dword [eax + 0xc]
mov esi, dword [eax + 8]
mov edx, dword [ecx + edx*4 + 4]
mov esi, dword [ecx + esi*4 + 4]
mov eax, dword [eax + 4]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, dword [ebx + 0x2c]
cmp eax, 0xffffffff
mov edx, dword [edx + 0x78]
mov ecx, dword [ecx + 0x78]
mov ebp, dword [esi + 0x78]
mov dword [esp + 0x40], edx
mov dword [esp + 0x1c], ecx
jne 0x4751ff
cmp ecx, ebp
jge 0x4751f7
mov dword [ebx + 0x2c], ecx
jmp 0x47521f
mov dword [ebx + 0x2c], ebp
mov dword [ebx + 0x30], ecx
jmp 0x475222
cmp ecx, eax
jge 0x475208
mov dword [ebx + 0x2c], ecx
jmp 0x475210
cmp ecx, dword [ebx + 0x30]
jle 0x475210
mov dword [ebx + 0x30], ecx
cmp ebp, dword [ebx + 0x2c]
jge 0x47521a
mov dword [ebx + 0x2c], ebp
jmp 0x475222
cmp ebp, dword [ebx + 0x30]
jle 0x475222
mov dword [ebx + 0x30], ebp
cmp edx, dword [ebx + 0x2c]
jge 0x47522c
mov dword [ebx + 0x2c], edx
jmp 0x475234
cmp edx, dword [ebx + 0x30]
jle 0x475234
mov dword [ebx + 0x30], edx
mov esi, dword [ebx + 0x1c]
mov edx, dword [ebx + 0x20]
lea edi, [ebx + 0x14]
lea eax, [esi + 1]
mov dword [edi + 8], eax
shr eax, 0xc
inc eax
cmp eax, edx
je 0x475641
push eax
mov ecx, edi
call fcn.0043c5f0
mov ecx, dword [esp + 0x1c]
jmp 0x475641
mov al, byte [ecx + 0x70]
test al, al
je 0x475b88
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
test eax, eax
lea eax, [esi + 0x74]
je 0x475280
lea eax, [esi + 0xcc]
fld dword [eax + 0x1c]
mov ebp, dword [esp + 0x3c]
fadd dword [ebp + 0x41c]
mov dword [esp + 0x18], eax
fstp dword [esp + 0x28]
fld dword [eax + 0x20]
lea eax, [esp + 0x28]
fadd dword [ebp + 0x420]
push eax
fstp dword [esp + 0x30]
call fcn.00434c90
mov edx, eax
mov eax, dword [ebp + 0x408]
add esp, 4
test eax, eax
mov dword [esp + 0x1c], edx
je 0x47530a
mov ecx, dword [ebp + 0x410]
mov eax, dword [ebp + 0x418]
and ecx, edx
mov ecx, dword [eax + ecx*4]
test ecx, ecx
je 0x47530a
mov al, byte [ecx + 0x10]
test al, al
jne 0x47530a
cmp dword [ecx + 0xc], edx
jne 0x475303
fld dword [esp + 0x28]
fld dword [ecx]
fucompp
fnstsw ax
test ah, 0x44
jp 0x475303
fld dword [esp + 0x2c]
fld dword [ecx + 4]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4753ad
mov ecx, dword [ecx + 0x14]
test ecx, ecx
jne 0x4752d4
mov eax, dword [ebp + 0x370]
mov ecx, dword [ebp + 0x374]
lea edi, [ebp + 0x368]
mov dword [esp + 0x40], eax
inc eax
mov dword [edi + 8], eax
shr eax, 0xc
inc eax
cmp eax, ecx
je 0x475334
push eax
mov ecx, edi
call fcn.0043c5f0
mov edx, dword [esp + 0x40]
mov esi, dword [edi + 0x14]
mov eax, edx
and eax, 0xfff
imul eax, dword [edi + 4]
mov ecx, edx
shr ecx, 0xc
mov edi, dword [esi + ecx*4]
mov esi, dword [esp + 0x18]
add eax, edi
mov edi, eax
mov ecx, 0xb
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x28]
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x20], ecx
push edx
fld dword [ebp + 0x424]
mov edx, dword [esp + 0x20]
fadd dword [eax + 0x24]
push edx
lea ecx, [ebp + 0x408]
fstp dword [eax + 0x24]
fld dword [ebp + 0x428]
fadd dword [eax + 0x28]
fstp dword [eax + 0x28]
lea eax, [esp + 0x30]
push eax
call fcn.00474580
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4753b6
add esi, 0xa0
jmp 0x4753bc
mov ecx, dword [ecx + 8]
mov dword [esp + 0x40], ecx
jmp 0x47539d
add esi, 0xf8
fld dword [esi + 0x1c]
lea ecx, [esp + 0x30]
fadd dword [ebp + 0x41c]
push ecx
fstp dword [esp + 0x34]
fld dword [esi + 0x20]
fadd dword [ebp + 0x420]
fstp dword [esp + 0x38]
call fcn.00434c90
add ebp, 0x408
mov edx, eax
mov eax, dword [ebp]
add esp, 4
test eax, eax
mov dword [esp + 0x1c], edx
je 0x47543b
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x10]
and eax, edx
mov ecx, dword [ecx + eax*4]
test ecx, ecx
je 0x47543b
mov al, byte [ecx + 0x10]
test al, al
jne 0x47543b
cmp dword [ecx + 0xc], edx
jne 0x475434
fld dword [esp + 0x30]
fld dword [ecx]
fucompp
fnstsw ax
test ah, 0x44
jp 0x475434
fld dword [esp + 0x34]
fld dword [ecx + 4]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x475525
mov ecx, dword [ecx + 0x14]
test ecx, ecx
jne 0x475405
mov edi, dword [esp + 0x3c]
mov ebp, dword [edi + 0x370]
mov ecx, dword [edi + 0x374]
add edi, 0x368
lea eax, [ebp + 1]
mov dword [edi + 8], eax
shr eax, 0xc
inc eax
cmp eax, ecx
je 0x475467
push eax
mov ecx, edi
call fcn.0043c5f0
mov ecx, dword [edi + 0x14]
mov eax, ebp
and eax, 0xfff
imul eax, dword [edi + 4]
mov edx, ebp
shr edx, 0xc
add eax, dword [ecx + edx*4]
mov edi, eax
mov ecx, 0xb
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x30]
mov dword [eax + 0x1c], ecx
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0x20], edx
push ebp
fld dword [ecx + 0x424]
lea edx, [esp + 0x34]
fadd dword [eax + 0x24]
add ecx, 0x408
fstp dword [eax + 0x24]
fld dword [ecx + 0x20]
fadd dword [eax + 0x28]
fstp dword [eax + 0x28]
mov eax, dword [esp + 0x20]
push eax
push edx
call fcn.00474580
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov eax, dword [ecx + eax*4 + 0x18]
mov edx, dword [eax + 4]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov edx, dword [ecx + edx*4 + 4]
mov esi, dword [ecx + esi*4 + 4]
mov ecx, dword [ecx + eax*4 + 4]
mov al, byte [edx + 0x74]
test al, al
mov al, byte [esi + 0x74]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], esi
mov dword [esp + 0x18], ecx
je 0x47587c
test al, al
je 0x475678
mov eax, dword [edx + 0x78]
mov edx, dword [ebx + 0x2c]
cmp edx, 0xffffffff
mov ecx, dword [esi + 0x78]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x18], eax
jne 0x475532
cmp eax, ecx
jge 0x47552a
mov dword [ebx + 0x2c], eax
jmp 0x475552
mov ebp, dword [ecx + 8]
jmp 0x4754c3
mov dword [ebx + 0x2c], ecx
mov dword [ebx + 0x30], eax
jmp 0x475555
cmp eax, edx
jge 0x47553b
mov dword [ebx + 0x2c], eax
jmp 0x475543
cmp eax, dword [ebx + 0x30]
jle 0x475543
mov dword [ebx + 0x30], eax
cmp ecx, dword [ebx + 0x2c]
jge 0x47554d
mov dword [ebx + 0x2c], ecx
jmp 0x475555
cmp ecx, dword [ebx + 0x30]
jle 0x475555
mov dword [ebx + 0x30], ecx
cmp ebp, dword [ebx + 0x2c]
jge 0x47555f
mov dword [ebx + 0x2c], ebp
jmp 0x475567
cmp ebp, dword [ebx + 0x30]
jle 0x475567
mov dword [ebx + 0x30], ebp
mov esi, dword [ebx + 0x1c]
mov edx, dword [ebx + 0x20]
lea edi, [ebx + 0x14]
lea eax, [esi + 1]
mov dword [edi + 8], eax
shr eax, 0xc
inc eax
cmp eax, edx
je 0x47558a
push eax
mov ecx, edi
call fcn.0043c5f0
mov ecx, dword [esp + 0x20]
mov eax, dword [edi + 0x14]
mov edx, esi
and esi, 0xfff
imul esi, dword [edi + 4]
shr edx, 0xc
add esi, dword [eax + edx*4]
mov al, byte [ebx + 0x3c]
test al, al
je 0x4755b8
mov dx, word [esp + 0x18]
mov word [esi], dx
mov word [esi + 2], cx
mov word [esi + 4], bp
jmp 0x4755c4
mov eax, dword [esp + 0x18]
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], ebp
mov ecx, dword [esp + 0x1c]
mov eax, dword [ebx + 0x2c]
cmp eax, 0xffffffff
mov ecx, dword [ecx + 0x78]
mov dword [esp + 0x20], ecx
jne 0x4755e8
cmp ecx, ebp
jge 0x4755e0
mov dword [ebx + 0x2c], ecx
jmp 0x475608
mov dword [ebx + 0x2c], ebp
mov dword [ebx + 0x30], ecx
jmp 0x47560b
cmp ecx, eax
jge 0x4755f1
mov dword [ebx + 0x2c], ecx
jmp 0x4755f9
cmp ecx, dword [ebx + 0x30]
jle 0x4755f9
mov dword [ebx + 0x30], ecx
cmp ebp, dword [ebx + 0x2c]
jge 0x475603
mov dword [ebx + 0x2c], ebp
jmp 0x47560b
cmp ebp, dword [ebx + 0x30]
jle 0x47560b
mov dword [ebx + 0x30], ebp
mov eax, dword [esp + 0x40]
cmp eax, dword [ebx + 0x2c]
jge 0x475619
mov dword [ebx + 0x2c], eax
jmp 0x475621
cmp eax, dword [ebx + 0x30]
jle 0x475621
mov dword [ebx + 0x30], eax
mov esi, dword [edi + 8]
lea eax, [esi + 1]
mov dword [edi + 8], eax
mov edx, dword [edi + 0xc]
shr eax, 0xc
inc eax
cmp eax, edx
je 0x475641
push eax
mov ecx, edi
call fcn.0043c5f0
mov ecx, dword [esp + 0x20]
mov eax, dword [edi + 0x14]
mov edx, esi
and esi, 0xfff
imul esi, dword [edi + 4]
shr edx, 0xc
mov edi, dword [eax + edx*4]
mov al, byte [ebx + 0x3c]
add esi, edi
test al, al
je 0x4757ad
mov word [esi], cx
mov cx, word [esp + 0x40]
mov word [esi + 2], bp
mov word [esi + 4], cx
jmp 0x475b88
mov al, byte [ecx + 0x74]
test al, al
mov eax, dword [ebx + 0x2c]
je 0x4757be
cmp eax, 0xffffffff
mov ecx, dword [edx + 0x78]
mov dword [esp + 0x20], ecx
jne 0x4756a7
mov eax, dword [esp + 0x40]
cmp ecx, eax
jge 0x47569f
mov dword [ebx + 0x2c], ecx
jmp 0x4756cb
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x30], ecx
jmp 0x4756ce
cmp ecx, eax
jge 0x4756b0
mov dword [ebx + 0x2c], ecx
jmp 0x4756b8
cmp ecx, dword [ebx + 0x30]
jle 0x4756b8
mov dword [ebx + 0x30], ecx
mov eax, dword [esp + 0x40]
cmp eax, dword [ebx + 0x2c]
jge 0x4756c6
mov dword [ebx + 0x2c], eax
jmp 0x4756ce
cmp eax, dword [ebx + 0x30]
jle 0x4756ce
mov dword [ebx + 0x30], eax
cmp ebp, dword [ebx + 0x2c]
jge 0x4756d8
mov dword [ebx + 0x2c], ebp
jmp 0x4756e0
cmp ebp, dword [ebx + 0x30]
jle 0x4756e0
mov dword [ebx + 0x30], ebp
mov esi, dword [ebx + 0x1c]
mov edx, dword [ebx + 0x20]
lea edi, [ebx + 0x14]
lea eax, [esi + 1]
mov dword [edi + 8], eax
shr eax, 0xc
inc eax
cmp eax, edx
je 0x475703
push eax
mov ecx, edi
call fcn.0043c5f0
mov ecx, dword [esp + 0x20]
mov edx, dword [edi + 0x14]
mov eax, esi
and esi, 0xfff
imul esi, dword [edi + 4]
shr eax, 0xc
add esi, dword [edx + eax*4]
mov al, byte [ebx + 0x3c]
test al, al
je 0x475731
mov ax, word [esp + 0x40]
mov word [esi], cx
mov word [esi + 2], ax
mov word [esi + 4], bp
jmp 0x47573d
mov dword [esi], ecx
mov ecx, dword [esp + 0x40]
mov dword [esi + 4], ecx
mov dword [esi + 8], ebp
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x78]
mov edx, dword [esp + 0x18]
mov eax, dword [ebx + 0x2c]
cmp eax, 0xffffffff
mov edx, dword [edx + 0x78]
mov dword [esp + 0x40], edx
mov dword [esp + 0x20], ecx
jne 0x47576c
cmp ecx, ebp
jge 0x475764
mov dword [ebx + 0x2c], ecx
jmp 0x47578c
mov dword [ebx + 0x2c], ebp
mov dword [ebx + 0x30], ecx
jmp 0x47578f
cmp ecx, eax
jge 0x475775
mov dword [ebx + 0x2c], ecx
jmp 0x47577d
cmp ecx, dword [ebx + 0x30]
jle 0x47577d
mov dword [ebx + 0x30], ecx
cmp ebp, dword [ebx + 0x2c]
jge 0x475787
mov dword [ebx + 0x2c], ebp
jmp 0x47578f
cmp ebp, dword [ebx + 0x30]
jle 0x47578f
mov dword [ebx + 0x30], ebp
cmp edx, dword [ebx + 0x2c]
jge 0x47579c
mov dword [ebx + 0x2c], edx
jmp 0x475621
cmp edx, dword [ebx + 0x30]
jle 0x475621
mov dword [ebx + 0x30], edx
jmp 0x475621
mov edx, dword [esp + 0x40]
mov dword [esi], ecx
mov dword [esi + 4], ebp
mov dword [esi + 8], edx
jmp 0x475b88
cmp eax, 0xffffffff
mov edx, dword [edx + 0x78]
mov dword [esp + 0x20], edx
jne 0x4757df
mov eax, dword [esp + 0x40]
cmp edx, eax
jge 0x4757d7
mov dword [ebx + 0x2c], edx
jmp 0x475803
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x30], edx
jmp 0x475806
cmp edx, eax
jge 0x4757e8
mov dword [ebx + 0x2c], edx
jmp 0x4757f0
cmp edx, dword [ebx + 0x30]
jle 0x4757f0
mov dword [ebx + 0x30], edx
mov eax, dword [esp + 0x40]
cmp eax, dword [ebx + 0x2c]
jge 0x4757fe
mov dword [ebx + 0x2c], eax
jmp 0x475806
cmp eax, dword [ebx + 0x30]
jle 0x475806
mov dword [ebx + 0x30], eax
cmp ebp, dword [ebx + 0x2c]
jge 0x475810
mov dword [ebx + 0x2c], ebp
jmp 0x475818
cmp ebp, dword [ebx + 0x30]
jle 0x475818
mov dword [ebx + 0x30], ebp
mov esi, dword [ebx + 0x1c]
mov ecx, dword [ebx + 0x20]
lea edi, [ebx + 0x14]
lea eax, [esi + 1]
mov dword [edi + 8], eax
shr eax, 0xc
inc eax
cmp eax, ecx
je 0x47583b
push eax
mov ecx, edi
call fcn.0043c5f0
mov edx, dword [esp + 0x20]
mov ecx, dword [edi + 0x14]
mov eax, esi
and esi, 0xfff
imul esi, dword [edi + 4]
shr eax, 0xc
mov edi, dword [ecx + eax*4]
mov al, byte [ebx + 0x3c]
add esi, edi
test al, al
je 0x47586e
mov word [esi], dx
mov dx, word [esp + 0x40]
mov word [esi + 2], dx
mov word [esi + 4], bp
jmp 0x475b88
mov eax, dword [esp + 0x40]
mov dword [esi], edx
mov dword [esi + 4], eax
jmp 0x475b85
test al, al
mov al, byte [ecx + 0x74]
je 0x475ac4
mov ecx, dword [esi + 0x78]
test al, al
mov eax, dword [ebx + 0x2c]
je 0x475a0a
cmp eax, 0xffffffff
mov dword [esp + 0x20], ecx
jne 0x4758af
cmp ecx, ebp
jge 0x4758a7
mov dword [ebx + 0x2c], ecx
jmp 0x4758cf
mov dword [ebx + 0x2c], ebp
mov dword [ebx + 0x30], ecx
jmp 0x4758d2
cmp ecx, eax
jge 0x4758b8
mov dword [ebx + 0x2c], ecx
jmp 0x4758c0
cmp ecx, dword [ebx + 0x30]
jle 0x4758c0
mov dword [ebx + 0x30], ecx
cmp ebp, dword [ebx + 0x2c]
jge 0x4758ca
mov dword [ebx + 0x2c], ebp
jmp 0x4758d2
cmp ebp, dword [ebx + 0x30]
jle 0x4758d2
mov dword [ebx + 0x30], ebp
mov eax, dword [esp + 0x40]
cmp eax, dword [ebx + 0x2c]
jge 0x4758e0
mov dword [ebx + 0x2c], eax
jmp 0x4758e8
cmp eax, dword [ebx + 0x30]
jle 0x4758e8
mov dword [ebx + 0x30], eax
mov esi, dword [ebx + 0x1c]
mov edx, dword [ebx + 0x20]
lea edi, [ebx + 0x14]
lea eax, [esi + 1]
mov dword [edi + 8], eax
shr eax, 0xc
inc eax
cmp eax, edx
je 0x47590b
push eax
mov ecx, edi
call fcn.0043c5f0
mov ecx, dword [esp + 0x20]
mov eax, dword [edi + 0x14]
mov edx, esi
and esi, 0xfff
imul esi, dword [edi + 4]
shr edx, 0xc
add esi, dword [eax + edx*4]
mov al, byte [ebx + 0x3c]
test al, al
je 0x475939
mov word [esi], cx
mov cx, word [esp + 0x40]
mov word [esi + 2], bp
mov word [esi + 4], cx
jmp 0x475945
mov edx, dword [esp + 0x40]
mov dword [esi], ecx
mov dword [esi + 4], ebp
mov dword [esi + 8], edx
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
mov ecx, dword [eax + 0x78]
mov eax, dword [edx + 0x78]
mov edx, dword [ebx + 0x2c]
cmp edx, 0xffffffff
mov dword [esp + 0x20], ecx
mov dword [esp + 0x40], eax
jne 0x475974
cmp eax, ecx
jge 0x47596c
mov dword [ebx + 0x2c], eax
jmp 0x475994
mov dword [ebx + 0x2c], ecx
mov dword [ebx + 0x30], eax
jmp 0x475997
cmp eax, edx
jge 0x47597d
mov dword [ebx + 0x2c], eax
jmp 0x475985
cmp eax, dword [ebx + 0x30]
jle 0x475985
mov dword [ebx + 0x30], eax
cmp ecx, dword [ebx + 0x2c]
jge 0x47598f
mov dword [ebx + 0x2c], ecx
jmp 0x475997
cmp ecx, dword [ebx + 0x30]
jle 0x475997
mov dword [ebx + 0x30], ecx
cmp ebp, dword [ebx + 0x2c]
jge 0x4759a1
mov dword [ebx + 0x2c], ebp
jmp 0x4759a9
cmp ebp, dword [ebx + 0x30]
jle 0x4759a9
mov dword [ebx + 0x30], ebp
mov esi, dword [edi + 8]
mov edx, dword [edi + 0xc]
lea eax, [esi + 1]
mov dword [edi + 8], eax
shr eax, 0xc
inc eax
cmp eax, edx
je 0x4759c9
push eax
mov ecx, edi
call fcn.0043c5f0
mov ecx, dword [esp + 0x20]
mov edx, dword [edi + 0x14]
mov eax, esi
and esi, 0xfff
imul esi, dword [edi + 4]
shr eax, 0xc
mov edi, dword [edx + eax*4]
mov al, byte [ebx + 0x3c]
add esi, edi
test al, al
je 0x4759fc
mov ax, word [esp + 0x40]
mov word [esi], ax
mov word [esi + 2], cx
mov word [esi + 4], bp
jmp 0x475b88
mov edx, dword [esp + 0x40]
mov dword [esi], edx
mov dword [esi + 4], ecx
jmp 0x475b85
cmp eax, 0xffffffff
mov dword [esp + 0x24], ecx
jne 0x475a24
cmp ecx, ebp
jge 0x475a1c
mov dword [ebx + 0x2c], ecx
jmp 0x475a44
mov dword [ebx + 0x2c], ebp
mov dword [ebx + 0x30], ecx
jmp 0x475a47
cmp ecx, eax
jge 0x475a2d
mov dword [ebx + 0x2c], ecx
jmp 0x475a35
cmp ecx, dword [ebx + 0x30]
jle 0x475a35
mov dword [ebx + 0x30], ecx
cmp ebp, dword [ebx + 0x2c]
jge 0x475a3f
mov dword [ebx + 0x2c], ebp
jmp 0x475a47
cmp ebp, dword [ebx + 0x30]
jle 0x475a47
mov dword [ebx + 0x30], ebp
mov eax, dword [esp + 0x40]
cmp eax, dword [ebx + 0x2c]
jge 0x475a55
mov dword [ebx + 0x2c], eax
jmp 0x475a5d
cmp eax, dword [ebx + 0x30]
jle 0x475a5d
mov dword [ebx + 0x30], eax
mov esi, dword [ebx + 0x1c]
mov edx, dword [ebx + 0x20]
lea edi, [ebx + 0x14]
lea eax, [esi + 1]
mov dword [edi + 8], eax
shr eax, 0xc
inc eax
cmp eax, edx
je 0x475a80
push eax
mov ecx, edi
call fcn.0043c5f0
mov ecx, dword [esp + 0x24]
mov edx, dword [edi + 0x14]
mov eax, esi
and esi, 0xfff
imul esi, dword [edi + 4]
shr eax, 0xc
mov edi, dword [edx + eax*4]
mov al, byte [ebx + 0x3c]
add esi, edi
test al, al
je 0x475ab3
mov ax, word [esp + 0x40]
mov word [esi], cx
mov word [esi + 2], bp
mov word [esi + 4], ax
jmp 0x475b88
mov dword [esi], ecx
mov ecx, dword [esp + 0x40]
mov dword [esi + 4], ebp
mov dword [esi + 8], ecx
jmp 0x475b88
test al, al
je 0x475b88
mov eax, dword [ebx + 0x2c]
cmp eax, 0xffffffff
mov ecx, dword [ecx + 0x78]
mov dword [esp + 0x24], ecx
jne 0x475af0
mov eax, dword [esp + 0x40]
cmp ecx, eax
jge 0x475ae8
mov dword [ebx + 0x2c], ecx
jmp 0x475b14
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x30], ecx
jmp 0x475b17
cmp ecx, eax
jge 0x475af9
mov dword [ebx + 0x2c], ecx
jmp 0x475b01
cmp ecx, dword [ebx + 0x30]
jle 0x475b01
mov dword [ebx + 0x30], ecx
mov eax, dword [esp + 0x40]
cmp eax, dword [ebx + 0x2c]
jge 0x475b0f
mov dword [ebx + 0x2c], eax
jmp 0x475b17
cmp eax, dword [ebx + 0x30]
jle 0x475b17
mov dword [ebx + 0x30], eax
cmp ebp, dword [ebx + 0x2c]
jge 0x475b21
mov dword [ebx + 0x2c], ebp
jmp 0x475b29
cmp ebp, dword [ebx + 0x30]
jle 0x475b29
mov dword [ebx + 0x30], ebp
mov esi, dword [ebx + 0x1c]
mov edx, dword [ebx + 0x20]
lea edi, [ebx + 0x14]
lea eax, [esi + 1]
mov dword [edi + 8], eax
shr eax, 0xc
inc eax
cmp eax, edx
je 0x475b4c
push eax
mov ecx, edi
call fcn.0043c5f0
mov ecx, dword [esp + 0x24]
mov eax, dword [edi + 0x14]
mov edx, esi
and esi, 0xfff
imul esi, dword [edi + 4]
shr edx, 0xc
mov edi, dword [eax + edx*4]
mov al, byte [ebx + 0x3c]
add esi, edi
test al, al
je 0x475b7c
mov word [esi], cx
mov cx, word [esp + 0x40]
mov word [esi + 2], cx
mov word [esi + 4], bp
jmp 0x475b88
mov edx, dword [esp + 0x40]
mov dword [esi], ecx
mov dword [esi + 4], edx
mov dword [esi + 8], ebp
mov eax, dword [esp + 0x10]
inc eax
cmp eax, 2
mov dword [esp + 0x10], eax
jl 0x4751a7
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret 8