Function at 0x474700
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x58]
cmp eax, dword [ecx + 8]
jbe 0x474d8d
sub esp, 0xd8
lea edi, [esp + 0xe4]
xor eax, eax
call fcn.00459389
lea ecx, [0x495860]
mov dword [esp], ecx
call fcn.0040ae80
mov ecx, dword [esp + 4]
mov dword [esp + 0x80], ecx
lea edi, [esp + 0xb4]
xor eax, eax
call fcn.00459397
mov ecx, dword [esp + 0xe0]
test ecx, ecx
jne 0x47476e
mov eax, dword [esp + 0x80]
xor ecx, ecx
jmp 0x4748fe
lea eax, [esp + 0xb4]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00473c90
mov eax, dword [esp + 8]
movzx ecx, byte [esp + 0xc]
test eax, eax
je 0x4748f2
test cl, cl
je 0x474858
mov ebp, dword [esp + 0x80]
mov eax, ebp
mov ebp, dword [ebp]
test ebp, 7
jne 0x47481d
mov ebp, dword [eax + 8]
mov ecx, ebp
mov ebp, dword [eax + 4]
mov edx, ebp
mov ebp, dword [eax + 0xc]
mov ebx, ebp
lea ebp, [ecx + 1]
cmp ebx, ebp
jae 0x474813
lea eax, [0x492fa0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.004440e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x80]
mov dword [ebx + 0xc], edx
mov edx, dword [0x5a42c0]
test edx, edx
jne 0x474807
mov dword [ebx + 4], eax
jmp 0x47480f
lea edi, [ebx + 4]
call fcn.004591d0
mov edx, eax
mov eax, ebx
lea ebp, [ecx + 1]
mov dword [eax + 8], ebp
mov byte [edx + ecx], 0
mov ebp, dword [eax + 4]
mov ecx, dword [eax + 8]
mov edx, ebp
mov ebp, dword [eax]
mov ebx, ebp
shr ebp, 3
cmp ecx, ebp
jbe 0x474d85
mov ecx, ebp
movzx ebp, byte [edx + ebp]
and ebx, 7
mov esi, ecx
mov ecx, ebx
mov edi, ebp
mov ebp, 1
shl ebp, cl
or edi, ebp
xchg edi, eax
mov byte [edx + esi], al
xchg edi, eax
inc dword [eax]
jmp 0x4748ee
nop
mov ebp, dword [esp + 0x80]
mov eax, ebp
mov ebp, dword [ebp]
test ebp, 7
jne 0x4748dc
mov ebp, dword [eax + 8]
mov ecx, ebp
mov ebp, dword [eax + 4]
mov edx, ebp
mov ebp, dword [eax + 0xc]
mov ebx, ebp
lea ebp, [ecx + 1]
cmp ebx, ebp
jae 0x4748d2
lea eax, [0x492fa0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.004440e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x80]
mov dword [ebx + 0xc], edx
mov edx, dword [0x5a42c0]
test edx, edx
jne 0x4748c6
mov dword [ebx + 4], eax
jmp 0x4748ce
lea edi, [ebx + 4]
call fcn.004591d0
mov edx, eax
mov eax, ebx
lea ebp, [ecx + 1]
mov dword [eax + 8], ebp
mov byte [edx + ecx], 0
mov ecx, dword [eax + 8]
mov ebp, dword [eax]
shr ebp, 3
cmp ecx, ebp
jbe 0x474d7e
inc dword [eax]
xor ecx, ecx
jmp 0x4748fe
mov eax, dword [esp + 0x80]
mov ecx, 4
mov ebp, dword [esp + 0xdc]
mov edx, ecx
movzx ecx, byte [ebp + 0xc]
test cl, 1
je 0x474917
mov ecx, 0x34
jmp 0x47491c
mov ecx, 0x24
mov ebx, ecx
movzx ecx, word [ebp + 0x20]
test cx, cx
jne 0x47492f
mov esi, ebp
xor ecx, ecx
xor ebp, ebp
jmp 0x474942
movzx ecx, cx
mov esi, ebp
add ebp, ebx
cmp ecx, 0x100000
ja 0x474d72
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x7c], ebp
xor ebx, ebx
jmp 0x47496d
mov ecx, dword [esp + 0x40]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0xdc]
mov edx, eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x38], edx
cmp ecx, ebx
jle 0x474a7b
mov dword [esp + 0x40], ebx
mov eax, dword [ebp + ebx*4]
mov dword [esp + 0x88], eax
lea ecx, [esp + 0xb4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00473a80
mov eax, dword [esp + 8]
test eax, eax
jne 0x474a51
mov ebp, dword [esp + 0x88]
mov eax, ebp
movzx ebp, byte [ebp + 0xd]
mov ecx, dword [esp + 0x38]
mov edx, ebp
lea ebp, [ecx + ebp - 1]
neg edx
and edx, ebp
add edx, dword [eax]
mov ecx, dword [esp + 0xc4]
mov ebp, dword [esp + 0xc0]
mov eax, dword [esp + 0x40]
cmp eax, ecx
jae 0x474d6d
mov ebx, ebp
mov ebp, dword [ebp + eax*4]
mov esi, ebp
lea ebp, [ecx - 1]
cmp eax, ebp
jne 0x4749f6
mov ebp, dword [esp + 0xb8]
jmp 0x474a05
lea ebp, [eax + 1]
cmp ecx, ebp
jbe 0x474d66
mov ebp, dword [ebx + eax*4 + 4]
mov ecx, ebp
mov ebp, dword [esp + 0xbc]
mov ebx, ebp
mov ebp, dword [esp + 0xb4]
cmp ecx, ebx
ja 0x474d5f
cmp ecx, esi
jb 0x474d58
sub ecx, esi
sub ebx, esi
mov edi, ecx
lea ecx, [esi + esi*2]
neg ebx
shl ecx, 3
sar ebx, 0x1f
and ebx, ecx
lea ecx, [ebp + ebx]
test edi, edi
je 0x474d0f
mov dword [esp + 0x44], edi
xor ebx, ebx
jmp 0x474d28
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
call fcn.00476470
mov eax, dword [esp + 0x38]
jmp 0x47494e
nop
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0x34], ecx
nop
lea edi, [esp + 0x90]
mov ebx, eax
xor eax, eax
call fcn.00459397
mov ecx, dword [esp + 0x34]
lea ebp, [ecx + 3]
and ebp, 0xfffffffc
mov dword [esp + 0xa8], ebp
mov edi, ecx
movzx ecx, byte [esi + 0xc]
test cl, 1
je 0x474abb
mov ecx, 0x34
jmp 0x474ac0
mov ecx, 0x24
mov dword [esp + 0x30], ebp
movzx ebp, word [esi + 0x22]
and ebp, 0x7fff
test bp, bp
jne 0x474ad9
xor esi, esi
xor ecx, ecx
jmp 0x474b2f
mov word [esp + 0x20], bp
movzx ebp, word [esi + 0x20]
mov word [esp + 0x22], bp
movzx ebx, word [esp + 0x20]
add ebp, ebx
movzx ebp, bp
mov ebx, ebp
lea ebp, [ecx + esi]
cmp ebx, 0x100000
ja 0x474d03
movzx edx, word [esp + 0x22]
movzx edx, dx
cmp edx, ebx
ja 0x474cfa
sub ebx, edx
mov esi, ebx
neg ebx
shl edx, 2
sar ebx, 0x1f
and edx, ebx
add edx, ebp
mov ebx, dword [esp + 0x80]
mov ecx, edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x28], esi
mov dword [esp + 0x78], ecx
xor ebp, ebp
jmp 0x474b5b
mov eax, dword [esp + 0x3c]
lea ebp, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x80]
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x34]
cmp ebp, esi
jge 0x474c3f
mov dword [esp + 0x3c], ebp
mov eax, dword [ecx + ebp*4]
mov dword [esp + 0x84], eax
lea edx, [esp + 0x90]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00473a80
mov eax, dword [esp + 8]
test eax, eax
jne 0x474c19
mov ecx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x9c]
mov eax, dword [esp + 0x3c]
cmp eax, ecx
jae 0x474cf5
mov ebp, dword [ebx + eax*4]
mov edx, ebp
lea ebp, [ecx - 1]
cmp eax, ebp
jne 0x474bbf
mov ebx, dword [esp + 0x94]
jmp 0x474bce
lea ebp, [eax + 1]
cmp ecx, ebp
jbe 0x474cee
mov ebx, dword [ebx + eax*4 + 4]
mov ebp, dword [esp + 0x98]
mov ecx, ebx
mov ebx, dword [esp + 0x90]
cmp ecx, ebp
ja 0x474ce7
cmp ecx, edx
jb 0x474ce0
sub ecx, edx
sub ebp, edx
lea edx, [edx + edx*2]
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl edx, 3
sar ebp, 0x1f
and ebp, edx
lea edx, [ebx + ebp]
test ecx, ecx
je 0x474b3b
mov dword [esp + 0x24], ecx
xor ebx, ebx
jmp 0x474cb4
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 8], eax
call fcn.00476470
jmp 0x474b3b
mov ecx, dword [esp + 0x30]
sub dword [esp + 0xa8], ecx
mov ebp, edi
lea edi, [esp + 0xe4]
call fcn.00459389
lea edi, [esp + 0xe4]
lea esi, [esp + 0xb4]
call fcn.00459856
lea edi, [esp + 0x108]
lea esi, [esp + 0x90]
call fcn.00459856
mov dword [esp + 0x12c], ebp
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x130], ecx
lea ecx, [edx + 3]
and ecx, 0xfffffffc
mov dword [esp + 0x134], ecx
mov dword [esp + 0x138], ebx
add esp, 0xd8
ret
add edx, 0x18
mov ebx, ecx
mov ecx, dword [esp + 0x24]
lea edi, [esp + 0x48]
mov esi, edx
call fcn.00459874
cmp dword [esp + 0x48], 3
je 0x474cd6
lea ecx, [ebx + 1]
mov ebx, dword [esp + 0x24]
cmp ebx, ecx
jg 0x474cab
jmp 0x474b3b
nop
xor eax, eax
mov ecx, eax
call fcn.00459250
mov eax, edx
call fcn.004592b0
mov edx, ebp
call fcn.00459290
mov eax, ebp
call fcn.00459250
call fcn.00459250
mov eax, edx
mov ecx, ebx
call fcn.004592f0
mov edx, ebx
mov ebx, 0x100000
call fcn.004592d0
mov eax, edx
jmp 0x47494e
mov ebx, ebp
mov ebp, dword [esp + 0x8c]
add ebp, 0x18
mov edi, ebx
mov ebx, ecx
mov ecx, ebp
mov dword [esp + 0x8c], ecx
mov esi, ecx
lea edi, [esp + 0x60]
call fcn.00459874
cmp dword [esp + 0x60], 3
je 0x474d4e
lea ecx, [ebx + 1]
mov ebp, dword [esp + 0x44]
cmp ebp, ecx
jg 0x474d16
jmp 0x474d0f
nop
xor eax, eax
mov ecx, eax
call fcn.00459250
mov eax, esi
call fcn.004592b0
mov edx, ebx
call fcn.00459290
mov eax, ebp
call fcn.00459250
call fcn.00459250
mov edx, ecx
mov ebx, 0x100000
call fcn.004592d0
mov eax, ebp
call fcn.00459260
mov eax, ebp
call fcn.00459260
nop
call fcn.00457dc0
jmp fcn.00474700