Function at 0x474be6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xf4
mov edx, dword [ebp + 8]
xor eax, eax
push ebx
mov ebx, dword [ebp + 0x14]
push esi
mov esi, 0x400c
mov word [esp + 0x98], ax
mov word [esp + 0xa8], ax
movzx eax, word [edx]
mov byte [esp + 0xb8], 0
mov dword [esp + 0xc0], 0x4009
lea ecx, [esi - 4]
push edi
mov edi, dword [ebp + 0x18]
cmp eax, 8
jne 0x474c4d
mov eax, dword [edx + 8]
mov dword [esp + 0x98], eax
mov dword [esp + 0xbd], 0
jmp 0x474db3
cmp ax, cx
jne 0x474c6e
mov eax, dword [edx + 8]
mov eax, dword [eax]
mov dword [esp + 0x98], eax
mov dword [esp + 0xbd], 0
jmp 0x474db3
mov dword [esp + 0x98], 0
cmp eax, 0xa
jne 0x474c9f
cmp dword [edx + 8], 0x80020004
jne 0x474c9f
mov byte [esp + 0xbc], 1
mov dword [esp + 0xbd], 0x80020005
jmp 0x474db3
cmp eax, 9
je 0x474cb4
mov ecx, eax
cmp ax, word [esp + 0xc4]
jne 0x474d46
mov ecx, dword [edx + 8]
test eax, 0x4000
je 0x474cc0
mov ecx, dword [ecx]
test ecx, ecx
je 0x4753b6
push 0
push 0
lea edx, [esp + 0xa4]
xor eax, eax
push edx
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], eax
push edx
push 3
push 0
push 0x4cd4e0
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x18]
mov esi, eax
mov dword [esp + 0xbd], esi
test esi, esi
js 0x474d9c
movzx ecx, word [esp + 0x9c]
lea edx, [esp + 0x9c]
mov esi, 0x4008
mov eax, ecx
cmp cx, si
jne 0x474d33
mov eax, dword [esp + 0xa4]
mov eax, dword [eax]
jmp 0x474d8c
cmp eax, 8
jne 0x474d41
mov eax, dword [esp + 0xa4]
jmp 0x474d8c
mov esi, 0x400c
cmp cx, 1
jne 0x474d53
mov esi, 0x800a005e
jmp 0x474d95
cmp cx, si
jne 0x474d60
mov edx, dword [edx + 8]
cmp word [edx], si
je 0x474d58
push 8
push 2
push 0x400
push edx
lea eax, [esp + 0xbc]
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
mov esi, eax
mov dword [esp + 0xbd], esi
test esi, esi
js 0x474d9c
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x98], eax
xor esi, esi
mov dword [esp + 0xbd], esi
cmp byte [esp + 0xbc], 0
jne 0x474dae
test esi, esi
js 0x4753c2
mov ecx, 0x4008
mov edx, dword [ebp + 0x10]
xor eax, eax
mov word [esp + 0x70], ax
mov word [esp + 0x80], ax
mov byte [esp + 0x90], 0
movzx eax, word [edx]
cmp eax, 8
jne 0x474dec
mov eax, dword [edx + 8]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x91], 0
jmp 0x474f31
cmp ax, cx
jne 0x474e0a
mov eax, dword [edx + 8]
mov eax, dword [eax]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x91], 0
jmp 0x474f31
mov dword [esp + 0x6c], 0
cmp eax, 0xa
jne 0x474e38
cmp dword [edx + 8], 0x80020004
jne 0x474e38
mov byte [esp + 0x90], 1
mov dword [esp + 0x91], 0x80020005
jmp 0x474f31
cmp eax, 9
je 0x474e49
mov esi, 0x4009
mov ecx, eax
cmp ax, si
jne 0x474ec7
mov ecx, dword [edx + 8]
test eax, 0x4000
je 0x474e55
mov ecx, dword [ecx]
test ecx, ecx
je 0x47537e
push 0
push 0
lea edx, [esp + 0x78]
xor eax, eax
push edx
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], eax
push edx
push 3
push 0
push 0x4cd4e0
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x18]
mov esi, eax
mov dword [esp + 0x91], esi
test esi, esi
js 0x474f1f
movzx ecx, word [esp + 0x70]
lea edx, [esp + 0x70]
mov esi, 0x4008
mov eax, ecx
cmp cx, si
jne 0x474ebc
mov eax, dword [esp + 0x78]
mov eax, dword [eax]
jmp 0x474f12
cmp eax, 8
jne 0x474ec7
mov eax, dword [esp + 0x78]
jmp 0x474f12
cmp cx, 1
jne 0x474ed4
mov esi, 0x800a005e
jmp 0x474f18
mov eax, 0x400c
cmp cx, ax
jne 0x474ee6
mov edx, dword [edx + 8]
cmp word [edx], ax
je 0x474ede
push 8
push 2
push 0x400
push edx
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
mov esi, eax
mov dword [esp + 0x91], esi
test esi, esi
js 0x474f1f
mov eax, dword [esp + 0x88]
mov dword [esp + 0x6c], eax
xor esi, esi
mov dword [esp + 0x91], esi
cmp byte [esp + 0x90], 0
jne 0x474f31
test esi, esi
js 0x47538a
xor eax, eax
mov byte [esp + 0x64], 0
mov word [esp + 0x44], ax
mov word [esp + 0x54], ax
movzx eax, word [ebx]
cmp eax, 8
jne 0x474f5e
mov eax, dword [ebx + 8]
mov dword [esp + 0x40], eax
mov dword [esp + 0x65], 0
jmp 0x47508a
mov ecx, 0x4008
cmp ax, cx
jne 0x474f7e
mov eax, dword [ebx + 8]
mov eax, dword [eax]
mov dword [esp + 0x40], eax
mov dword [esp + 0x65], 0
jmp 0x47508a
mov dword [esp + 0x40], 0
cmp eax, 0xa
jne 0x474fa6
cmp dword [ebx + 8], 0x80020004
jne 0x474fa6
mov byte [esp + 0x64], 1
mov dword [esp + 0x65], 0x80020005
jmp 0x47508a
cmp eax, 9
je 0x474fb7
mov edx, 0x4009
mov ecx, eax
cmp ax, dx
jne 0x47502e
mov ecx, dword [ebx + 8]
test eax, 0x4000
je 0x474fc3
mov ecx, dword [ecx]
test ecx, ecx
je 0x47534f
push 0
push 0
lea edx, [esp + 0x4c]
xor eax, eax
push edx
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], eax
push edx
push 3
push 0
push 0x4cd4e0
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x18]
mov esi, eax
mov dword [esp + 0x65], esi
test esi, esi
js 0x47507b
movzx ecx, word [esp + 0x44]
lea ebx, [esp + 0x44]
mov esi, 0x4008
mov eax, ecx
cmp cx, si
jne 0x475023
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
jmp 0x475071
cmp eax, 8
jne 0x47502e
mov eax, dword [esp + 0x4c]
jmp 0x475071
cmp cx, 1
jne 0x47503b
mov esi, 0x800a005e
jmp 0x475077
mov eax, 0x400c
cmp cx, ax
jne 0x47504e
nop
mov ebx, dword [ebx + 8]
cmp word [ebx], ax
je 0x475046
push 8
push 2
push 0x400
push ebx
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
mov esi, eax
mov dword [esp + 0x65], esi
test esi, esi
js 0x47507b
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x40], eax
xor esi, esi
mov dword [esp + 0x65], esi
cmp byte [esp + 0x64], 0
jne 0x47508a
test esi, esi
js 0x475358
xor eax, eax
mov byte [esp + 0x38], 0
mov word [esp + 0x28], ax
movzx eax, word [edi]
mov ecx, eax
cmp eax, 3
jne 0x4750b4
mov eax, dword [edi + 8]
mov dword [esp + 0x24], eax
mov dword [esp + 0x39], 0
jmp 0x4751e1
mov edx, 0x4003
cmp ax, dx
jne 0x4750d4
mov eax, dword [edi + 8]
mov eax, dword [eax]
mov dword [esp + 0x24], eax
mov dword [esp + 0x39], 0
jmp 0x4751e1
mov dword [esp + 0x24], 0
cmp eax, 0xa
jne 0x4750fc
cmp dword [edi + 8], 0x80020004
jne 0x4750fc
mov byte [esp + 0x38], 1
mov dword [esp + 0x39], 0x80020005
jmp 0x4751e1
cmp eax, 9
je 0x47510b
mov edx, 0x4009
cmp ax, dx
jne 0x475172
mov ecx, dword [edi + 8]
test eax, 0x4000
je 0x475117
mov ecx, dword [ecx]
test ecx, ecx
je 0x47532f
push 0
push 0
lea edx, [esp + 0x30]
xor eax, eax
push edx
lea edx, [esp + 0xd4]
mov dword [esp + 0xd4], eax
push edx
push 3
push 0
push 0x4cd4e0
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], eax
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x18]
mov esi, eax
mov dword [esp + 0x39], esi
test esi, esi
js 0x4751d2
movzx ecx, word [esp + 0x28]
lea edi, [esp + 0x28]
movzx eax, cx
cmp eax, 1
jne 0x475181
mov esi, 0x800a005e
jmp 0x4751ce
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], ecx
mov ecx, 0x400c
cmp ax, cx
jne 0x4751a5
mov edi, dword [edi + 8]
cmp word [edi], cx
je 0x47519d
push 3
push 2
push 0x400
push edi
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
mov esi, eax
mov dword [esp + 0x39], esi
test esi, esi
js 0x4751d2
mov eax, dword [esp + 0x18]
xor esi, esi
mov dword [esp + 0x24], eax
mov dword [esp + 0x39], esi
cmp byte [esp + 0x38], 0
jne 0x4751e1
test esi, esi
js 0x475338
cmp byte [esp + 0x64], 0
jne 0x4751f9
cmp byte [esp + 0x38], 0
je 0x4751f9
mov esi, 0x80004005
jmp 0x475338
mov edi, dword [esp + 0x98]
xor ebx, ebx
test edi, edi
je 0x475225
mov eax, dword [edi - 4]
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x3ff
jbe 0x475225
push 0x3ff
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov ebx, eax
mov edi, ebx
mov ecx, dword [esp + 0x6c]
xor esi, esi
cmp byte [esp + 0x90], 0
je 0x47524e
mov ecx, dword [0x4a0144]
test ecx, ecx
jne 0x475252
push 0x4d2168
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov ecx, esi
test ecx, ecx
je 0x475271
mov eax, dword [ecx - 4]
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x3ff
jbe 0x475271
push 0x3ff
push ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov esi, eax
mov ecx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xd8], 0x28
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], edi
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0x474bae
mov dword [esp + 0xfc], 0
call fcn.0049998e
mov ecx, dword [esp + 0x40]
mov dword [eax + 0x63], ecx
mov ecx, dword [esp + 0x24]
mov dword [eax + 0x67], ecx
mov eax, dword [eax + 0x10e]
test eax, eax
je 0x475304
mov eax, dword [eax + 0x48]
test eax, eax
je 0x475304
mov eax, dword [eax + 0x3c]
mov dword [esp + 0xdc], eax
lea eax, [esp + 0xd8]
push eax
call dword [sym.imp.USER32.dll_MessageBoxIndirectW]
mov ecx, dword [ebp + 0x1c]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ecx], eax
test ebx, ebx
je 0x475324
push ebx
call edi
test esi, esi
je 0x47532b
push esi
call edi
xor esi, esi
jmp 0x475338
mov esi, 0x800a005b
mov dword [esp + 0x39], esi
cmp word [esp + 0x28], 0
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
je 0x47535e
lea eax, [esp + 0x28]
push eax
call ebx
jmp 0x47535e
mov esi, 0x800a005b
mov dword [esp + 0x65], esi
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp word [esp + 0x44], 0
je 0x47536d
lea eax, [esp + 0x44]
push eax
call ebx
cmp word [esp + 0x54], 0
je 0x47538a
lea eax, [esp + 0x54]
push eax
call ebx
jmp 0x47538a
mov esi, 0x800a005b
mov dword [esp + 0x91], esi
cmp word [esp + 0x70], 0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
je 0x47539f
lea eax, [esp + 0x70]
push eax
call edi
cmp word [esp + 0x80], 0
je 0x4753c8
lea eax, [esp + 0x80]
push eax
call edi
jmp 0x4753c8
mov esi, 0x800a005b
mov dword [esp + 0xbd], esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp word [esp + 0x9c], 0
je 0x4753dd
lea eax, [esp + 0x9c]
push eax
call edi
cmp word [esp + 0xac], 0
je 0x4753f2
lea eax, [esp + 0xac]
push eax
call edi
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18