Function at 0x473fd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x7c]
cmp eax, dword [ecx + 8]
jbe 0x474950
sub esp, 0xfc
nop
mov eax, dword [esp + 0x100]
movzx ecx, byte [eax + 0xf]
and ecx, 0x1f
cmp ecx, 0x13
jne 0x474936
mov ecx, dword [esp + 0x104]
test ecx, ecx
je 0x474024
nop
movzx edx, byte [ecx + 0xf]
and edx, 0x1f
cmp edx, 0x14
je 0x4748d4
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
lea edx, [0xb7e0b0]
mov dword [esp], edx
lea ebx, [0x7d0a20]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xb0]
mov dword [esp + 8], ebp
call fcn.00462370
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
movzx ecx, byte [esp + 0x14]
test cl, cl
jne 0x4747f1
lea eax, [0x7d0660]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x104]
test ecx, ecx
je 0x4747ea
nop
movzx edx, byte [ecx + 0xf]
test dl, 0x20
jne 0x47474b
nop
mov edx, dword [eax]
test edx, 7
jne 0x4740d7
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
lea esi, [ebx + 1]
cmp esi, ebp
ja 0x4746e9
lea ebp, [ebx + 1]
mov dword [eax + 8], ebp
mov byte [edx + ebx], 0
mov edx, dword [eax + 4]
mov ebx, dword [eax]
mov ebp, ebx
shr ebx, 3
cmp dword [eax + 8], ebx
jbe 0x4748b5
movzx esi, byte [edx + ebx]
and ebp, 7
mov ecx, ebp
mov edi, 1
shl edi, cl
or edi, esi
xchg edi, eax
mov byte [edx + ebx], al
xchg edi, eax
inc dword [eax]
mov ecx, 4
nop
mov edx, dword [esp + 0x100]
movzx ebx, byte [edx + 0xc]
test bl, 1
je 0x4746df
mov ebx, 0x34
movzx ebp, word [edx + 0x20]
test bp, bp
jne 0x4746c0
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0xac], ebx
mov dword [esp + 0x34], ebp
xor esi, esi
jmp 0x4741a6
mov dword [esp + 0x54], esi
mov edx, dword [ebx + esi*4]
mov dword [esp + 0xa4], edx
movzx ebp, byte [edx + 0xd]
mov dword [esp], eax
mov edi, ecx
neg ecx
dec ebp
xchg ebp, eax
movzx eax, al
xchg ebp, eax
and ebp, ecx
lea ecx, [edi + ebp]
mov dword [esp + 0x3c], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00474960
mov eax, dword [esp + 0x54]
lea esi, [eax + 1]
mov eax, dword [esp + 0xa4]
mov eax, dword [eax]
mov ecx, dword [esp + 0x3c]
add ecx, eax
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0x34]
cmp esi, ebp
jl 0x474142
mov ebx, ecx
neg ecx
and ecx, 3
add ecx, ebx
nop
movzx ebp, byte [edx + 0xc]
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x4746b6
mov ebp, 0x34
mov dword [esp + 0x50], ebx
movzx esi, word [edx + 0x22]
and esi, 0x7fff
test si, si
jne 0x474640
xor ebp, ebp
xor esi, esi
mov dword [esp + 0x38], ebp
mov dword [esp + 0xac], esi
mov dword [esp + 0x3c], ecx
mov edi, ecx
xor ecx, ecx
mov dword [esp + 0x54], ecx
mov ecx, edi
jmp 0x474267
mov edx, dword [esi + edi*4]
mov dword [esp + 0x9c], edx
movzx ebx, byte [edx + 0xd]
mov dword [esp], eax
mov ebp, ecx
neg ecx
dec ebx
movzx ebx, bl
and ebx, ecx
lea ecx, [ebp + ebx]
mov dword [esp + 0x4c], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00474960
mov eax, dword [esp + 0x54]
inc eax
mov ecx, dword [esp + 0x9c]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x4c]
add ecx, edx
mov edx, dword [esp + 0x100]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xa0]
mov edi, dword [esp + 0x54]
cmp edi, ebp
jl 0x4741fe
mov dword [esp + 0x4c], ecx
lea eax, [0x7fb160]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov byte [eax + 0xd], 4
mov ecx, dword [esp + 0x4c]
mov edx, ecx
neg ecx
and ecx, 3
add ecx, edx
mov dword [eax], ecx
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx]
shl edx, 2
mov dword [eax + 4], edx
mov edx, dword [ecx]
test edx, edx
jbe 0x474628
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
test edx, edx
jbe 0x474899
mov edx, dword [0xb91180]
test edx, edx
jne 0x47460a
mov dword [eax + 0x14], ebx
mov edx, dword [esp + 0x104]
test edx, edx
mov dword [esp + 0x98], eax
je 0x4745ae
mov dword [esp], edx
call fcn.0046c790
mov eax, dword [esp + 8]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0x100]
mov dword [esp], edx
call fcn.0046c790
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
lea edx, [esp + 0x78]
mov dword [esp], edx
lea edx, [0x816930]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xb
mov edx, dword [esp + 0xac]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x10], edx
lea edx, [0x8141a4]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 2
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
lea eax, [0x81414b]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 1
call fcn.0043dcf0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0
call fcn.0046c3d0
nop
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00436800
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x98]
mov dword [ecx + 0x18], eax
lea eax, [0x7e3880]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 4]
mov dword [esp + 0xa8], eax
lea ecx, [0x7c1b00]
mov dword [esp], ecx
call fcn.00409f80
mov eax, dword [esp + 4]
lea ecx, [0x47e180]
mov dword [eax], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x474583
mov ecx, dword [esp + 0x98]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0xa8]
mov dword [edx + 8], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0xbc], eax
lea edi, [esp + 0xe8]
lea esi, [0x8b5c10]
call fcn.0044f6ae
mov eax, dword [esp + 0x98]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], edx
lea eax, [0x7d0a20]
mov dword [esp], eax
lea eax, [esp + 0xb8]
mov dword [esp + 4], eax
call fcn.004077f0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x50], ecx
lea edx, [0x7e8580]
mov dword [esp], edx
lea ebx, [esp + 0xe8]
mov dword [esp + 4], ebx
call fcn.004077f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
lea edx, [0xb7e0b0]
mov dword [esp], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.00462a70
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x40], eax
lea edi, [esp + 0xe8]
xor eax, eax
call fcn.0044f1cb
mov eax, dword [esp + 0x40]
lea ecx, [0x7e8580]
cmp eax, ecx
jne 0x474881
lea edi, [esp + 0xe8]
call fcn.0044f6ae
lea edi, [esp + 0xc0]
lea esi, [esp + 0xe8]
call fcn.0044f6ae
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xd0]
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], ecx
mov dword [esp + 0x110], edx
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], ebp
add esp, 0xfc
ret
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x98]
call fcn.0044f0d0
mov edx, dword [esp + 0xa8]
lea edi, [edx + 8]
mov ebx, eax
mov eax, ecx
call fcn.0044f0d0
mov ecx, ebx
jmp 0x47440e
mov eax, dword [esp + 0x100]
mov dword [esp], eax
call fcn.0046c790
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
lea edx, [esp + 0x58]
mov dword [esp], edx
lea edx, [0x815c27]
mov dword [esp + 4], edx
mov dword [esp + 8], 9
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
lea eax, [0x81414b]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0043dc30
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
jmp 0x47437d
lea edi, [eax + 0x14]
mov edx, eax
mov eax, ebx
call fcn.0044f0d0
mov ebx, dword [esp + 0x104]
test ebx, ebx
mov eax, edx
mov edx, ebx
jmp 0x4742d9
movzx ebx, byte [eax + 0xf]
or ebx, 0xffffff80
mov byte [eax + 0xf], bl
mov edx, dword [esp + 0x104]
test edx, edx
jmp 0x4742d9
nop
movzx edi, word [edx + 0x20]
add esi, edi
movzx esi, si
add ebp, edx
test esi, esi
jl 0x4748a0
movzx edi, di
cmp edi, esi
ja 0x4748a0
cmp esi, 0x100000
ja 0x4748a0
mov dword [esp + 0x54], edi
sub esi, edi
add edi, 0xfff00000
xchg edi, ebx
neg ebx
xchg edi, ebx
xchg edi, ebx
neg ebx
xchg edi, ebx
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0x54]
shl edi, 2
mov dword [esp + 0x54], edi
mov edi, dword [esp + 0x48]
sar edi, 0x1f
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0x54]
mov ebx, dword [esp + 0x48]
and edi, ebx
add edi, ebp
mov ebx, dword [esp + 0x50]
mov ebp, esi
mov esi, edi
jmp 0x4741e3
mov ebp, 0x24
jmp 0x4741c8
nop
movzx ebp, bp
add ebx, edx
test ebp, ebp
jl 0x4748a7
cmp ebp, 0x100000
jbe 0x474133
jmp 0x4748a7
mov ebx, 0x24
jmp 0x474122
lea eax, [0x7ac140]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa0]
mov dword [ebx + 0xc], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x474741
mov dword [ebx + 4], eax
mov ebx, ecx
mov edx, eax
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x104]
jmp 0x4740cd
lea edi, [ebx + 4]
call fcn.0044f0d0
jmp 0x47472a
nop
test dl, 0x80
je 0x4740ae
nop
mov edx, dword [eax]
test edx, 7
jne 0x47477b
mov edx, dword [eax + 8]
mov ebx, dword [eax + 0xc]
mov ebp, dword [eax + 4]
lea esi, [edx + 1]
cmp esi, ebx
ja 0x474790
lea ebx, [edx + 1]
mov dword [eax + 8], ebx
mov byte [ebp + edx], 0
mov edx, dword [eax]
shr edx, 3
cmp dword [eax + 8], edx
jbe 0x4748ae
inc dword [eax]
jmp 0x474103
lea eax, [0x7ac140]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0043a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa0]
mov dword [ebx + 0xc], edx
mov edx, dword [0xb91180]
test edx, edx
jne 0x4747e0
mov dword [ebx + 4], eax
mov edx, ecx
mov ebp, eax
mov eax, ebx
mov ecx, dword [esp + 0x104]
jmp 0x474770
lea edi, [ebx + 4]
call fcn.0044f0d0
jmp 0x4747d1
xor ecx, ecx
jmp 0x474108
mov dword [esp + 0x44], eax
lea edi, [esp + 0xe8]
xor eax, eax
call fcn.0044f1cb
mov ecx, dword [esp + 0x44]
lea edx, [0x7e8580]
cmp ecx, edx
jne 0x4748bc
lea edi, [esp + 0xe8]
call fcn.0044f6ae
lea edi, [esp + 0xd4]
lea esi, [esp + 0xe8]
call fcn.0044f6ae
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0xe4]
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], ecx
mov dword [esp + 0x110], edx
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], ebp
add esp, 0xfc
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x7ab440]
mov dword [esp + 8], eax
call fcn.00407650
ud2
call fcn.004287c0
ud2
call fcn.004288c0
ud2
call fcn.004288c0
ud2
call fcn.004287c0
ud2
call fcn.004287c0
ud2
mov dword [esp], ecx
mov dword [esp + 4], edx
lea eax, [0x7ab440]
mov dword [esp + 8], eax
call fcn.00407650
ud2
mov dword [esp], ecx
call fcn.0046c790
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x8294d9]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x2c
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0043dbd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00407990
mov eax, dword [esp + 8]
lea ecx, [0x7abe80]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00429580
ud2
lea eax, [0x7abe80]
mov dword [esp], eax
lea eax, [0x8adf10]
mov dword [esp + 4], eax
call fcn.00429580
ud2
call fcn.0044d880
jmp fcn.00473fd0