Function at 0x474b30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x13c
mov ecx, dword [ebp + 0x14]
push ebx
push esi
push edi
mov edi, eax
or eax, 0xffffffff
mov dword [esp + 0x14], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0xc]
xor ebx, ebx
test dword [ebp + 0x18], 0xe20f5a6f
lea esi, [eax + ecx]
lea edx, [esi - 1]
mov ecx, edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x38], edx
mov dword [esp + 0x18], ecx
je 0x474b93
lea eax, [ebx - 3]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, ebx
je 0x475566
cmp eax, ebx
je 0x475566
cmp dword [ebp + 0x1c], ebx
jne 0x474bb1
cmp dword [ebp + 0x20], ebx
jg 0x475566
cmp dword [ebp + 0x20], ebx
jge 0x474bc2
mov eax, 0xfffffff1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [edi + 0x18]
movzx edx, word [edi + 0x1c]
add eax, edi
mov dword [esp + 0x80], eax
movzx eax, word [edi + 0x1a]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x78], edx
mov edx, dword [edi + 0x20]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x5c], 0x989680
mov dword [esp + 0x60], 0x1770
mov dword [esp + 0xe8], ebx
mov dword [esp + 0x10], edx
cmp eax, ebx
je 0x474c51
mov edx, dword [eax]
test dl, 1
je 0x474c18
mov ebx, dword [eax + 4]
mov dword [esp + 0x1c], ebx
xor ebx, ebx
test dl, 2
je 0x474c26
mov ebx, dword [eax + 8]
mov dword [esp + 0x5c], ebx
xor ebx, ebx
test dl, 0x10
je 0x474c34
mov ebx, dword [eax + 0x14]
mov dword [esp + 0x60], ebx
xor ebx, ebx
test dl, 4
je 0x474c45
mov ebx, dword [eax + 0xc]
mov dword [esp + 0xe8], ebx
xor ebx, ebx
test dl, 8
je 0x474c51
mov eax, dword [eax + 0x10]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], ebx
jne 0x474c5f
mov dword [esp + 0x10], 0x496928
cmp dword [edi], 0x50435245
je 0x474cae
mov ebx, dword [esp + 0x1c]
lea ecx, [esp + 0xf4]
push ecx
lea eax, [esp + 0x124]
mov edx, edi
call fcn.004756d0
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
jne 0x474c98
mov eax, 0xfffffffc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [esp + 0x1c], 0
mov ecx, dword [esp + 0x18]
je 0x474cae
lea edx, [esp + 0xf4]
mov dword [esp + 0x1c], edx
mov eax, dword [ecx + 8]
mov ebx, dword [ebp + 0x18]
mov edx, eax
or edx, ebx
shr edx, 4
and edx, 1
mov dword [esp + 0x44], edx
movzx edx, word [ecx + 0xc]
shr eax, 0x12
shr edx, 3
and eax, 1
and edx, 1
mov dword [esp + 0x3c], eax
movzx eax, word [ecx + 0x1a]
mov dword [esp + 0x34], edx
movzx edx, word [ecx + 0x1c]
imul edx, eax
movzx eax, word [ecx + 0x18]
add edx, edi
add eax, edx
mov edx, dword [ebp + 0x14]
mov dword [esp + 0xb4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xb8], eax
add eax, dword [ebp + 0x10]
mov dword [esp + 0xd8], edx
mov dword [esp + 0xbc], eax
mov dword [esp + 0x20], eax
mov eax, dword [ecx + 8]
shr eax, 5
and eax, 1
mov dword [esp + 0xa0], eax
mov edx, dword [ecx + 8]
shr edx, 0x19
and edx, 1
mov dword [esp + 0x9c], edx
mov eax, ebx
shr eax, 7
and eax, 1
mov edx, ebx
shr edx, 8
and edx, 1
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], edx
mov eax, ebx
mov edx, ebx
shr eax, 0xa
shr edx, 0x1c
and eax, 1
and edx, 1
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], edx
test ebx, 0x8000000
je 0x474d81
mov eax, 2
jmp 0x474d89
mov eax, ebx
shr eax, 0xf
and eax, 1
mov edi, eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x88], eax
add eax, 0x340
xor edx, edx
mov dword [esp + 0x8c], eax
mov eax, ebx
and eax, 0x1800000
mov dword [esp + 0xcc], edi
mov dword [esp + 0xac], edx
mov dword [esp + 0xec], edx
mov dword [esp + 0xe4], edx
je 0x474df0
cmp eax, 0x800000
je 0x474de3
cmp eax, 0x1000000
je 0x474e09
mov eax, 0xffffffe9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esp + 0xb0], 1
jmp 0x474e10
mov eax, dword [ecx + 8]
test eax, 0x1800000
je 0x474e09
shr eax, 0x17
and eax, 1
mov dword [esp + 0xb0], eax
jmp 0x474e10
mov dword [esp + 0xb0], edx
test ebx, 0x700000
jne 0x474e1d
mov eax, dword [ecx + 8]
jmp 0x474e1f
mov eax, ebx
and eax, 0x700000
cmp eax, 0x300000
ja 0x474e7c
je 0x474e75
cmp eax, edx
je 0x474e75
cmp eax, 0x100000
je 0x474e6e
cmp eax, 0x200000
jne 0x474dd7
mov eax, 0xa
mov dword [esp + 0x70], edx
cmp eax, 0xff
jle 0x474ea2
mov edx, eax
sar edx, 8
mov byte [esp + 0x84], dl
mov dword [esp + 0x74], 2
mov byte [esp + 0x85], al
xor edx, edx
jmp 0x474eb1
mov eax, 0xd
jmp 0x474e44
mov eax, 0xd0a
jmp 0x474e44
cmp eax, 0x400000
je 0x474e98
cmp eax, 0x500000
jne 0x474dd7
mov dword [esp + 0x70], 2
jmp 0x474eb1
mov dword [esp + 0x70], 1
jmp 0x474eb1
mov dword [esp + 0x74], 1
mov byte [esp + 0x84], al
cmp edi, edx
je 0x474ec7
test byte [ecx + 0xc], 1
je 0x474ec7
mov eax, 0xfffffff3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx + 8]
and eax, 7
mov dword [esp + 0xf0], eax
mov eax, 0x55555556
imul dword [ebp + 0x20]
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edi, [eax + eax*2]
movzx eax, word [ecx + 0x12]
test ax, ax
je 0x474f36
mov ecx, eax
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x474f36
lea edi, [ecx + ecx*2 + 3]
lea ecx, [edi*4]
push ecx
call dword [0x49d2d0]
add esp, 4
mov dword [esp + 0x64], eax
test eax, eax
jne 0x474f2c
mov eax, 0xfffffffa
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esp + 0x30], 1
jmp 0x474f3d
mov edx, dword [ebp + 0x1c]
mov dword [esp + 0x64], edx
lea ecx, [edi + edi]
mov eax, 0x55555556
imul ecx
mov ecx, dword [esp + 0x18]
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], edi
mov dword [esp + 0x90], 0
mov dword [esp + 0xd4], 0xffffffff
movzx eax, word [ecx + 0x10]
lea eax, [eax + eax + 2]
mov dword [esp + 0x2c], eax
cmp eax, dword [ebp + 0x20]
jle 0x474f85
mov dword [esp + 0x2c], edi
cmp dword [esp + 0x64], 0
je 0x474fbd
mov edx, dword [esp + 0x64]
mov eax, dword [esp + 0x2c]
lea ecx, [edx + edi*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 1
sub edx, eax
lea eax, [ecx + edx*4]
sub ecx, 4
cmp ecx, eax
jb 0x474fbd
lea ecx, [ecx]
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, eax
jae 0x474fb0
cmp dword [esp + 0x44], 0
mov edi, dword [esp + 0x64]
mov edx, dword [esp + 0x18]
jne 0x47501d
test byte [edx + 0xc], 2
je 0x475001
movzx eax, word [edx + 0x14]
mov ecx, eax
and ecx, 0xff
shr eax, 8
and eax, 1
mov dword [esp + 0x14], ecx
mov dword [esp + 0x54], eax
je 0x47501d
mov eax, ecx
mov ecx, dword [esp + 0x88]
movzx eax, byte [ecx + eax]
mov dword [esp + 0x14], eax
jmp 0x47501d
cmp dword [esp + 0x34], 0
jne 0x47501d
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x47501d
test byte [eax + 4], 1
je 0x47501d
add eax, 8
mov dword [esp + 0x24], eax
test byte [edx + 0xc], 4
je 0x47504d
movzx eax, word [edx + 0x16]
mov edx, dword [esp + 0x10]
mov ecx, eax
and ecx, 0xff
shr eax, 8
and eax, 1
mov dword [esp + 0x48], eax
movzx eax, byte [edx + ecx + 0x100]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], eax
and ebx, 0x4000000
mov dword [esp + 0x40], ebx
jmp fcn.00475060
mov eax, 0xfffffffe