Function at 0x473f90
Capabilities:
Inspect section memory permissions

Disassembly:
sub esp, 0x1b8
push ebx
push ebp
push esi
push edi
xor ebp, ebp
push 0x80
lea eax, [esp + 0x4c]
push ebp
push eax
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x34], ebp
call fcn.0048e830
mov ecx, dword [esp + 0x1dc]
mov al, byte [ecx]
add esp, 0xc
test al, al
mov dword [esp + 0x20], ebp
je 0x474a79
mov edx, dword [esp + 0x1d0]
mov al, byte [edx + ebp]
inc ebp
cmp al, 0x25
mov dword [esp + 0x1c], ebp
jne 0x474a68
mov ecx, edx
cmp byte [ecx + ebp], 0x25
jne 0x473ff9
inc ebp
jmp 0x474a68
mov esi, dword [esp + 0x1d0]
xor ebx, ebx
lea edi, [esp + 0x1c]
mov dword [esp + 0x2c], ebx
call fcn.00473f00
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov dword [esp + 0x10], eax
cmp ecx, ebx
mov dword [esp + 0x38], ecx
jne 0x47402b
mov eax, dword [esp + 0x20]
mov dword [esp + 0x10], eax
cmp eax, 0x40
jge 0x474aaa
cmp eax, dword [esp + 0x14]
jle 0x47403e
mov dword [esp + 0x14], eax
mov ebp, dword [esp + 0x1c]
mov edx, dword [esp + 0x1d0]
mov cl, byte [edx + ebp]
or eax, 0xffffffff
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x34], eax
mov al, cl
mov dword [esp + 0x30], 0
call fcn.00473e30
test eax, eax
je 0x4741ac
movsx eax, cl
inc ebp
add eax, 0xffffffe0
cmp eax, 0x5a
mov dword [esp + 0x1c], ebp
ja case.0x4742ba.61
movzx edx, byte [eax + 0x474d58]
jmp dword [edx*4 + 0x474cf8]
or ebx, 2
jmp case.0x47408d.90
or ebx, 4
jmp case.0x47408d.90
and ebx, 0xffffdfff
or ebx, 8
jmp case.0x47408d.90
or ebx, 0x10
jmp case.0x47408d.90
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x4742c1
mov eax, dword [esp + 0x1d0]
lea edx, [eax + ebp]
mov al, byte [edx]
cmp al, 0x2e
mov dword [esp + 0x2c], 1
je case.0x47408d.90
or ebx, 0x40000
cmp al, 0x2a
je 0x47410f
cmp al, 0x40
je 0x47410f
mov eax, 0xa
lea ecx, [esp + 0x3c]
call fcn.00473ce0
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x24], eax
sub ebp, dword [esp + 0x1d0]
jmp case.0x47408d.90
mov esi, dword [esp + 0x1d0]
inc ebp
lea edi, [esp + 0x1c]
mov dword [esp + 0x1c], ebp
or ebx, 0x80000
call fcn.00473f00
mov dword [esp + 0x24], eax
cmp eax, 0xffffffff
mov eax, dword [esp + 0x38]
jne 0x474159
mov ecx, dword [esp + 0x20]
inc ecx
test eax, eax
mov dword [esp + 0x20], ecx
je 0x47414a
mov dword [esp + 0x24], ecx
jmp 0x474178
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], eax
inc eax
mov dword [esp + 0x10], eax
jmp 0x474178
test eax, eax
jne 0x474166
mov edx, dword [esp + 0x24]
inc edx
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x30]
cmp eax, dword [esp + 0x14]
jle 0x474178
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
cmp eax, edx
jle 0x474188
mov dword [esp + 0x14], eax
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1d0]
mov cl, byte [ecx + ebp]
mov al, cl
call fcn.00473e30
test eax, eax
jne 0x474072
mov edx, dword [esp + 0x1d0]
test ebx, 0x20000
mov esi, dword [esp + 0x1d4]
mov eax, dword [esp + 0x28]
je 0x4741ef
mov edi, dword [esp + 0x30]
inc word [esp + edi*2 + 0x48]
mov ecx, eax
imul ecx, ecx, 0x168
add ecx, esi
mov dword [esp + edi*4 + 0xc8], eax
mov dword [esp + 0x30], eax
inc eax
mov dword [ecx], 7
mov dword [ecx + 4], 0
mov dword [esp + 0x28], eax
test ebx, 0x80000
je 0x474227
mov edi, dword [esp + 0x24]
inc word [esp + edi*2 + 0x48]
mov ecx, eax
imul ecx, ecx, 0x168
add ecx, esi
mov dword [esp + edi*4 + 0xc8], eax
mov dword [esp + 0x24], eax
inc eax
mov dword [ecx], 7
mov dword [ecx + 4], 0
mov dword [esp + 0x28], eax
test ebx, 0x200000
je 0x47425f
mov edi, dword [esp + 0x18]
inc word [esp + edi*2 + 0x48]
mov ecx, eax
imul ecx, ecx, 0x168
add ecx, esi
mov dword [esp + edi*4 + 0xc8], eax
mov dword [esp + 0x18], eax
inc eax
mov dword [ecx], 7
mov dword [ecx + 4], 0
mov dword [esp + 0x28], eax
test ebx, 0x20000000
je 0x474297
mov edi, dword [esp + 0x34]
inc word [esp + edi*2 + 0x48]
mov ecx, eax
imul ecx, ecx, 0x168
add ecx, esi
mov dword [esp + edi*4 + 0xc8], eax
mov dword [esp + 0x34], eax
inc eax
mov dword [ecx], 7
mov dword [ecx + 4], 0
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0xc8], eax
movsx ecx, byte [edx + ebp]
sub ecx, 0x3c
inc ebp
cmp ecx, 0x3c
ja case.0x4742ba.61
movzx ecx, byte [ecx + 0x474e1c]
jmp dword [ecx*4 + 0x474db4]
cmp eax, 1
jne case.0x4742ba.61
mov esi, dword [esp + 0x1d0]
mov al, byte [esi + ebp]
lea edx, [esi + ebp]
or ebx, 0x100000
cmp al, 0x2a
mov dword [esp + 0x2c], 2
je 0x474313
cmp al, 0x40
je 0x474313
mov eax, 0xa
lea ecx, [esp + 0x3c]
call fcn.00473ce0
cmp eax, 0x24
mov dword [esp + 0x18], eax
jg case.0x4742ba.61
mov ebp, dword [esp + 0x3c]
sub ebp, esi
jmp case.0x47408d.90
mov esi, dword [esp + 0x1d0]
inc ebp
lea edi, [esp + 0x1c]
mov dword [esp + 0x1c], ebp
or ebx, 0x200000
call fcn.00473f00
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
mov eax, dword [esp + 0x38]
jne 0x47435d
mov ecx, dword [esp + 0x20]
inc ecx
test eax, eax
mov dword [esp + 0x20], ecx
je 0x47434e
mov dword [esp + 0x18], ecx
jmp 0x474376
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], eax
inc eax
mov dword [esp + 0x10], eax
jmp 0x474376
test eax, eax
mov eax, dword [esp + 0x18]
jne 0x47436c
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
cmp eax, dword [esp + 0x14]
jle 0x474376
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x14]
jle 0x474188
jmp 0x474184
mov dword [esp + 0x1cc], 1
jmp 0x4743a0
cmp dword [esp + 0x1cc], 1
jne 0x47440f
mov esi, dword [esp + 0x1d0]
lea edi, [esp + 0x1c]
or ebx, 0x30000
call fcn.00473f00
cmp eax, 0xffffffff
mov dword [esp + 0x30], eax
jne 0x4743ed
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x38]
inc ecx
test eax, eax
mov dword [esp + 0x20], ecx
je 0x4743db
mov eax, ecx
mov dword [esp + 0x30], eax
jmp 0x474178
mov eax, dword [esp + 0x10]
mov dword [esp + 0x30], eax
inc eax
mov dword [esp + 0x10], eax
jmp 0x474178
mov ecx, dword [esp + 0x38]
test ecx, ecx
jne 0x4743fc
lea ecx, [eax + 1]
mov dword [esp + 0x10], ecx
cmp eax, dword [esp + 0x14]
jle 0x474178
mov dword [esp + 0x14], eax
jmp 0x474178
or ebx, 0x8000000
jmp case.0x47408d.90
test bl, 8
jne case.0x47408d.49
or ebx, 0x2000
mov esi, dword [esp + 0x1d0]
lea edx, [esi + ebp - 1]
mov eax, 0xa
lea ecx, [esp + 0x3c]
or ebx, 0x10000
call fcn.00473ce0
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x30], eax
sub ebp, esi
jmp case.0x47408d.90
test bl, 0x40
jne case.0x4742ba.61
test bl, 0x20
je 0x474469
or ebx, 0x40
jmp case.0x47408d.90
or ebx, 0x20
jmp case.0x47408d.90
test bh, 1
jne case.0x4742ba.61
test bl, bl
jns 0x474489
or ebx, 0x100
jmp case.0x47408d.90
or ebx, 0x80
jmp case.0x47408d.90
or ebx, 0x200
jmp case.0x47408d.90
or ebx, 0x480
jmp case.0x47408d.90
or ebx, 0x880
jmp case.0x47408d.90
or ebx, 0x1100
jmp case.0x47408d.90
test ebx, 0x40000000
jne case.0x4742ba.61
test ebx, 0x22001fe0
jne case.0x4742ba.61
mov ecx, dword [esp + 0x1d0]
mov al, byte [ecx + ebp]
cmp al, 0x36
jne 0x474503
cmp byte [ecx + ebp + 1], 0x34
jne 0x474503
add ebp, 2
mov dword [esp + 0x34], 8
or ebx, 0x40000000
jmp case.0x47408d.90
cmp al, 0x33
jne 0x474524
cmp byte [ecx + ebp + 1], 0x32
jne 0x474524
add ebp, 2
mov dword [esp + 0x34], 4
or ebx, 0x40000000
jmp case.0x47408d.90
cmp al, 0x31
jne 0x474545
cmp byte [ecx + ebp + 1], 0x36
jne 0x474545
add ebp, 2
mov dword [esp + 0x34], 2
or ebx, 0x40000000
jmp case.0x47408d.90
cmp al, 0x38
jne case.0x4742ba.61
inc ebp
mov dword [esp + 0x34], 1
or ebx, 0x40000000
jmp case.0x47408d.90
or ebx, 0x2000000
jmp case.0x47408d.90
or ebx, 0x1000000
jmp case.0x47408d.90
or ebx, 1
mov dword [esp + 0x40], 1
jmp case.0x47408d.90
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x38]
or ebx, 0x20000000
inc ecx
test eax, eax
mov dword [esp + 0x20], ecx
je 0x4745a4
mov dword [esp + 0x34], ecx
jmp 0x4745b1
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
inc eax
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x10]
cmp edx, dword [esp + 0x14]
jle case.0x47408d.90
mov eax, edx
mov dword [esp + 0x14], eax
jmp case.0x47408d.90
or ebx, 0x1000
jmp case.0x47408d.90
or ebx, 0x2000000
test bl, bl
jns 0x4745f9
mov edx, eax
or ebx, 0x2000000
imul edx, edx, 0x168
mov dword [edx + esi], 3
jmp 0x474977
test bl, 0x20
je 0x474604
and ebx, 0xfdffffff
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 3
jmp 0x474977
or ebx, 0x2000000
test bl, bl
jns 0x47463c
mov ecx, eax
or ebx, 0x2000000
imul ecx, ecx, 0x168
mov dword [ecx + esi], 4
jmp 0x474977
test bl, 0x20
je 0x474647
and ebx, 0xfdffffff
mov ecx, eax
imul ecx, ecx, 0x168
mov dword [ecx + esi], 4
jmp 0x474977
cmp dword [esp + 0x1cc], 2
jne 0x474977
mov ecx, eax
imul ecx, ecx, 0x168
mov dword [ecx + esi], 8
cmp byte [edx + ebp], 0x5e
mov edi, 1
jne 0x474684
inc ebp
cmp byte [edx + ebp], 0x5d
jne 0x47468b
inc ebp
cmp byte [edx + ebp], 0x2d
jne 0x474692
inc ebp
mov cl, byte [edx + ebp]
test cl, cl
je 0x474977
lea ecx, [ecx]
cmp cl, 0x5b
jne 0x4746a8
inc edi
jmp 0x4746b2
cmp cl, 0x5d
jne 0x4746b2
dec edi
test edi, edi
jle 0x4746c0
mov cl, byte [edx + ebp + 1]
inc ebp
test cl, cl
jne 0x4746a0
jmp 0x474977
inc ebp
jmp 0x474977
mov ecx, eax
or ebx, 0x4000
imul ecx, ecx, 0x168
mov dword [ecx + esi], 1
jmp 0x474977
mov edx, eax
and ebx, 0xffdfffff
imul edx, edx, 0x168
mov dword [esp + 0x18], 0xa
mov dword [edx + esi], 1
jmp 0x474977
and ebx, 0xffdfffff
mov ecx, eax
or ebx, 0x4000
imul ecx, ecx, 0x168
mov dword [esp + 0x18], 8
mov dword [ecx + esi], 1
jmp 0x474977
or ebx, 0x8000
and ebx, 0xffdfffff
or ebx, 0x2000
mov dword [esp + 0x18], 2
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 1
jmp 0x474977
or ebx, 0x8000
and ebx, 0xffdfffff
mov ecx, eax
or ebx, 0x4000
imul ecx, ecx, 0x168
mov dword [esp + 0x18], 0x10
mov dword [ecx + esi], 1
jmp 0x474977
or ebx, 0x8000
mov edx, eax
or ebx, 0x400000
imul edx, edx, 0x168
mov dword [edx + esi], 2
jmp 0x474977
or ebx, 0x8000
mov ecx, eax
or ebx, 0x800000
imul ecx, ecx, 0x168
mov dword [ecx + esi], 2
jmp 0x474977
or ebx, 0x8000
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 2
jmp 0x474977
mov ecx, eax
or ebx, 0x80
imul ecx, ecx, 0x168
mov dword [ecx + esi], 5
jmp 0x474977
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 6
jmp 0x474977
or ebx, 0x8000
mov ecx, eax
imul ecx, ecx, 0x168
mov dword [esp + 0x18], 0x10
mov dword [ecx + esi], 2
jmp 0x474977
mov edx, eax
imul edx, edx, 0x168
mov dword [edx + esi], 9
jmp 0x474977
mov ecx, eax
imul ecx, ecx, 0x168
lea edi, [ecx + esi]
lea ecx, [edi + 0x28]
mov dword [esp + 0x44], ecx
mov byte [ecx], 0
lea ecx, [edx + ebp]
mov edx, ecx
mov dword [edi], 0xa
mov dword [esp + 0x3c], edx
mov cl, byte [ecx]
test cl, cl
mov dword [esp + 0x1c], 1
mov dword [esp + 0x2c], edi
je case.0x4742ba.61
lea ebx, [ebx]
inc ebp
cmp cl, 0x3e
je 0x4748f4
cmp cl, 0x3a
jne 0x4748d1
mov ecx, dword [esp + 0x1d0]
mov esi, ebp
sub esi, edx
add esi, ecx
cmp esi, 0x40
mov dword [esp + 0x1c], 0
jbe 0x4748aa
mov esi, 0x40
mov edi, dword [esp + 0x44]
mov ecx, edx
call fcn.00473c20
mov edx, dword [esp + 0x1d0]
mov esi, dword [esp + 0x1d4]
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x2c]
add edx, ebp
mov dword [esp + 0x3c], edx
mov ecx, dword [esp + 0x1d0]
mov cl, byte [ecx + ebp]
test cl, cl
jne 0x474880
pop edi
shl ebp, 8
mov eax, 0xfffffffe
pop esi
sub eax, ebp
pop ebp
pop ebx
add esp, 0x1b8
ret
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x474944
mov ecx, dword [esp + 0x10]
inc eax
inc word [esp + ecx*2 + 0x48]
mov dword [edi], 7
mov dword [edi + 0x18], ebp
mov dword [edi + 4], 0x8000000
mov edi, eax
imul edi, edi, 0x168
add esi, edi
inc ecx
mov dword [esp + 0x28], eax
mov dword [esp + ecx*4 + 0xc8], eax
cmp ecx, dword [esp + 0x14]
mov dword [esp + 0x2c], esi
mov dword [esi], 0xa
mov dword [esp + 0x10], ecx
jle 0x474944
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x1d0]
mov esi, ebp
sub esi, edx
add esi, ecx
cmp esi, 0x100
jbe 0x47495e
mov esi, 0x100
mov edi, dword [esp + 0x2c]
add edi, 0x68
mov ecx, edx
call fcn.00473c20
mov esi, dword [esp + 0x1d4]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
inc word [esp + ecx*2 + 0x48]
lea ecx, [esp + ecx*2 + 0x48]
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x474a20
test bl, 1
jne 0x474a20
lea ecx, [eax - 1]
test ecx, ecx
jl 0x474a20
mov edx, ecx
imul edx, edx, 0x168
add edx, esi
mov dword [esp + 0x2c], edx
mov edi, dword [edx]
cmp edi, 7
je 0x4749d0
test byte [edx + 4], 1
je 0x4749d0
mov edx, eax
imul edx, edx, 0x168
cmp edi, dword [edx + esi]
je 0x4749e1
mov edx, dword [esp + 0x2c]
dec ecx
sub edx, 0x168
test ecx, ecx
mov dword [esp + 0x2c], edx
jge 0x4749b2
jmp 0x474a20
imul ecx, ecx, 0x168
mov edx, dword [ecx + esi + 4]
add ecx, esi
and edx, 0xfffffffe
or ebx, edx
mov edx, dword [esp + 0x30]
test edx, edx
jne 0x474a01
mov edx, dword [ecx + 8]
mov dword [esp + 0x30], edx
mov edi, dword [esp + 0x24]
or edx, 0xffffffff
cmp edi, edx
jne 0x474a13
mov edi, dword [ecx + 0xc]
mov dword [esp + 0x24], edi
cmp dword [esp + 0x18], edx
jne 0x474a20
mov ecx, dword [ecx + 0x10]
mov dword [esp + 0x18], ecx
mov edx, eax
imul edx, edx, 0x168
lea ecx, [edx + esi]
mov edx, dword [esp + 0x30]
mov dword [ecx + 8], edx
mov edx, dword [esp + 0x24]
mov dword [ecx + 0xc], edx
mov edx, dword [esp + 0x18]
cmp edx, 0xffffffff
mov dword [ecx + 0x18], ebp
mov dword [ecx + 4], ebx
jne 0x474a4d
mov edx, 0xa
inc eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
test eax, eax
mov dword [ecx + 0x10], edx
mov edx, dword [esp + 0x34]
mov dword [ecx + 0x14], edx
jne 0x474a68
inc dword [esp + 0x20]
mov eax, dword [esp + 0x1d0]
cmp byte [eax + ebp], 0
jne 0x473fd4
mov eax, dword [esp + 0x14]
xor edx, edx
test eax, eax
mov dword [esp + 0x40], edx
jl 0x474cb7
mov ebp, dword [esp + 0x1dc]
mov ecx, dword [esp + 0x1d8]
lea eax, [esp + 0xc8]
sub eax, ebp
mov ebx, ebp
mov dword [esp + 0x44], eax
jmp 0x474ad0
mov ecx, dword [esp + 0x1c]
pop edi
pop esi
shl ecx, 8
mov eax, 0xfffffffd
pop ebp
sub eax, ecx
pop ebx
add esp, 0x1b8
ret
mov eax, dword [esp + 0x44]
jmp 0x474ad0
cmp word [esp + edx*2 + 0x48], 1
jne 0x474cc4
mov eax, dword [eax + ebx]
mov edx, dword [esp + 0x1d4]
imul eax, eax, 0x168
mov edi, dword [eax + edx]
cmp edi, 7
lea esi, [eax + edx]
je 0x474b04
test dword [esi + 4], 0x8000000
jne case.0x474b14.2
cmp edi, 0xa
ja case.0x474b14.2
movzx eax, byte [edi + 0x474e6c]
jmp dword [eax*4 + 0x474e5c]
cmp dword [esp + 0x1cc], 2
jne 0x474b57
test ebp, ebp
jne 0x474b3b
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov edx, dword [eax - 4]
mov dword [esi + 0x20], edx
jmp case.0x474b14.2
cmp edi, 3
jne 0x474b47
mov eax, dword [ebx]
jmp 0x474c9c
test byte [esi + 4], 0x20
je 0x474b40
mov edx, dword [ebx]
mov dword [esi + 0x20], edx
jmp case.0x474b14.2
mov eax, dword [esi + 4]
test eax, 0x60000000
je 0x474ba4
test eax, 0x20000000
mov edx, dword [esi + 0x14]
je 0x474b83
mov ebp, dword [esp + 0x1d4]
imul edx, edx, 0x168
mov edx, dword [edx + ebp + 0x20]
mov ebp, dword [esp + 0x1dc]
and eax, 0xffffe27f
cmp edx, 4
mov dword [esi + 4], eax
jle 0x474ba4
cmp edx, 8
jg 0x474b9c
or eax, 0x100
jmp 0x474ba1
or eax, 0x1000
mov dword [esi + 4], eax
mov eax, dword [esi + 4]
test ah, 4
je 0x474bcc
test ebp, ebp
jne 0x474bc1
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
xor edx, edx
jmp 0x474c99
mov eax, dword [ebx]
mov eax, dword [eax]
xor edx, edx
jmp 0x474c99
test ah, 8
je 0x474be8
test ebp, ebp
jne 0x474c94
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
jmp 0x474c98
test ah, 0x10
je 0x474c09
test ebp, ebp
jne 0x474c27
mov eax, dword [ecx]
add eax, 8
mov dword [ecx], eax
mov edx, dword [eax - 8]
mov eax, dword [eax - 4]
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
jmp case.0x474b14.2
test ah, 1
je 0x474c36
test ebp, ebp
jne 0x474c27
mov eax, dword [ecx]
add eax, 8
mov dword [ecx], eax
mov edx, dword [eax - 8]
mov eax, dword [eax - 4]
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
jmp case.0x474b14.2
mov eax, dword [ebx]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
jmp case.0x474b14.2
test al, al
jns 0x474c4a
test ebp, ebp
jne 0x474c94
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
jmp 0x474c98
test ebp, ebp
jne 0x474c5a
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
jmp 0x474c98
cmp edi, 3
jne 0x474c66
mov eax, dword [ebx]
movsx eax, byte [eax]
jmp 0x474c98
test al, 0x20
je 0x474c71
mov edx, dword [ebx]
movsx eax, word [edx]
jmp 0x474c98
mov eax, dword [ebx]
mov eax, dword [eax]
jmp 0x474c98
test dword [esi + 4], 0x8000000
je 0x474c3a
test ebp, ebp
jne 0x474b40
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
jmp 0x474c9c
mov edx, dword [ebx]
mov eax, dword [edx]
cdq
mov dword [esi + 0x24], edx
mov dword [esi + 0x20], eax
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x14]
inc edx
add ebx, 4
cmp edx, eax
mov dword [esp + 0x40], edx
jle 0x474ac3
pop edi
pop esi
pop ebp
mov eax, edx
pop ebx
add esp, 0x1b8
ret
cmp word [esp + edx*2 + 0x48], 0
jne 0x474ce1
pop edi
pop esi
shl edx, 8
mov eax, 0xfffffffb
pop ebp
sub eax, edx
pop ebx
add esp, 0x1b8
ret
pop edi
pop esi
shl edx, 8
mov eax, 0xfffffffc
pop ebp
sub eax, edx
pop ebx
add esp, 0x1b8
ret