Function at 0x475760
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5df5f8
mov eax, dword fs:[0]
push eax
sub esp, 0x60
push ebx
push esi
push edi
mov eax, dword [0x65f810]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
cmp dword [esi + 0x10f4], ebx
je 0x4757b0
or eax, 0xffffffff
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp + 8]
mov dword [esp + 0x14], ebx
cmp eax, 4
ja case.0x4757c0.1
jmp dword [eax*4 + 0x475c34]
mov edi, dword [ebp + 0xc]
mov eax, dword [edi + 4]
push eax
lea ecx, [esi + 0x5c]
call fcn.00454020
cmp dword [esi + 0x34], ebx
je case.0x4757c0.1
lea ecx, [esp + 0x40]
call fcn.004544e0
mov ecx, dword [edi + 4]
mov eax, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov dword [esp + 0x30], ecx
push eax
lea ecx, [esp + 0x44]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x38], edx
call fcn.00454020
mov cx, word [edi + 0x1e]
mov dx, word [edi + 0x20]
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0x1100]
mov word [esp + 0x3c], cx
push eax
lea ecx, [esp + 0x34]
mov word [esp + 0x42], dx
mov edx, dword [esi + 0x34]
push ecx
call edx
mov eax, dword [esp + 0x48]
push eax
call fcn.00579478
add esp, 0xc
jmp case.0x4757c0.1
mov edi, dword [ebp + 0xc]
mov eax, dword [edi + 0x24]
cmp eax, ebx
je 0x475869
mov dword [esi + 0x10e4], eax
mov dword [esi + 0x10e8], ebx
mov dword [esi + 0x10ec], ebx
mov dword [esp + 0x14], 0xffffffff
jmp case.0x4757c0.1
cmp dword [esi + 0x38], ebx
je case.0x4757c0.1
lea ecx, [esp + 0x40]
call fcn.004544e0
mov ecx, dword [edi + 4]
mov eax, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov dword [esp + 0x30], ecx
push eax
lea ecx, [esp + 0x44]
mov dword [esp + 0x7c], 1
mov dword [esp + 0x38], edx
call fcn.00454020
mov cx, word [edi + 0x1e]
mov dx, word [edi + 0x20]
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0x1100]
push eax
mov eax, dword [esi + 0x38]
mov word [esp + 0x40], cx
mov ecx, dword [edi + 0x24]
mov word [esp + 0x42], dx
push ecx
lea edx, [esp + 0x38]
push edx
call eax
mov ecx, dword [esp + 0x4c]
push ecx
call fcn.00579478
add esp, 0x10
jmp case.0x4757c0.1
lea ecx, [esp + 0x30]
call fcn.004544e0
lea ecx, [esp + 0x28]
mov dword [esp + 0x78], 2
call fcn.004544e0
lea ecx, [esp + 0x20]
mov byte [esp + 0x78], 3
call fcn.004544e0
lea ecx, [esp + 0x18]
mov byte [esp + 0x78], 4
call fcn.004544e0
lea ecx, [esp + 0x40]
mov byte [esp + 0x78], 5
call fcn.004544e0
mov edi, dword [ebp + 0xc]
test byte [edi + 0x1c], 0x80
mov byte [esp + 0x78], 6
lea ecx, [esp + 0x20]
je 0x47593c
mov edx, dword [edi + 4]
push edx
call fcn.00454020
jmp 0x475945
mov eax, dword [edi + 4]
push eax
call fcn.00473690
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x28]
push eax
call fcn.00473800
add esp, 0xc
lea ecx, [esi + 0x54]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00453e50
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x1c]
call fcn.00453f50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x44]
call fcn.00453e50
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x44]
call fcn.00453f50
cmp dword [esi + 0x28], ebx
mov ebx, dword [esp + 0x40]
je 0x4759fc
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x4c], eax
mov eax, dword [edi]
mov dword [esp + 0x50], ecx
mov cx, word [edi + 0x1c]
mov dword [esp + 0x54], edx
mov dword [esp + 0x5c], eax
movzx eax, word [edi + 0x1a]
lea edx, [esp + 0x60]
mov word [esp + 0x68], cx
movzx ecx, word [edi + 0x18]
push edx
push eax
push ecx
mov dword [esp + 0x64], ebx
call dword [sym.imp.KERNEL32.DLL_DosDateTimeToFileTime]
mov edx, dword [esi + 0x1100]
mov ecx, dword [esi + 0x28]
push edx
lea eax, [esp + 0x4c]
push eax
call ecx
add esp, 8
test eax, eax
je 0x475a70
cmp dword [esi + 0x10f8], 0
je 0x475a3d
mov eax, dword [edi]
push eax
lea ecx, [esi + 0x10c0]
call fcn.004737a0
mov edi, 0xff000000
add esi, 0x44
push edi
mov ecx, esi
call fcn.00475370
test eax, eax
je 0x475a34
inc edi
push edi
mov ecx, esi
call fcn.00475370
test eax, eax
jne 0x475a27
mov dword [esp + 0x14], edi
jmp 0x475b13
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004545b0
add esp, 4
test eax, eax
je 0x475aa6
mov dword [esi + 0x10e4], 8
mov dword [esi + 0x10e8], eax
mov dword [esi + 0x10ec], 0
mov dword [esp + 0x14], 0xffffffff
push ebx
call fcn.00579478
mov edx, dword [esp + 0x1c]
push edx
call fcn.00579478
mov eax, dword [esp + 0x28]
push eax
call fcn.00579478
mov ecx, dword [esp + 0x34]
push ecx
call fcn.00579478
mov edx, dword [esp + 0x40]
push edx
call fcn.00579478
add esp, 0x14
jmp case.0x4757c0.1
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push 0x180
push 0x8321
push ebx
mov ecx, esi
call edx
lea ecx, [esi + 8]
mov dword [esp + 0x14], eax
call fcn.00474030
mov eax, dword [esp + 0x14]
xor ecx, ecx
cmp eax, ecx
jle 0x475afd
lea ecx, [esp + 0x40]
mov dword [esi + 8], eax
mov eax, dword [edi]
push ecx
lea ecx, [esi + 0x14]
mov dword [esi + 0x1c], eax
call fcn.00453e50
lea edx, [esp + 0x20]
push edx
lea ecx, [esi + 0xc]
call fcn.00453e50
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [esi + 0x24], eax
jmp 0x475b13
mov dword [esi + 0x10e4], 8
mov dword [esi + 0x10e8], ecx
mov dword [esi + 0x10ec], ecx
push ebx
call fcn.00579478
mov eax, dword [esp + 0x1c]
push eax
call fcn.00579478
mov ecx, dword [esp + 0x28]
push ecx
call fcn.00579478
mov edx, dword [esp + 0x34]
push edx
call fcn.00579478
mov eax, dword [esp + 0x40]
push eax
call fcn.00579478
add esp, 0x14
jmp case.0x4757c0.1
lea ecx, [esp + 0x30]
call fcn.004544e0
lea ecx, [esp + 0x40]
mov dword [esp + 0x78], 7
call fcn.004544e0
mov edi, dword [ebp + 0xc]
test byte [edi + 0x1c], 0x80
mov byte [esp + 0x78], 8
je 0x475b80
mov ecx, dword [edi + 4]
push ecx
lea ecx, [esp + 0x44]
call fcn.00454020
jmp 0x475b8d
mov edx, dword [edi + 4]
push edx
lea ecx, [esp + 0x44]
call fcn.00473690
lea eax, [esi + 0x54]
push eax
lea ecx, [esp + 0x34]
call fcn.00453e50
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0x34]
call fcn.00453f50
cmp dword [esi + 0x10f8], ebx
mov ebx, dword [esp + 0x30]
jne 0x475bd6
mov edx, dword [edi + 0x14]
push edx
mov ecx, esi
call fcn.004756a0
movzx eax, word [edi + 0x1c]
movzx ecx, word [edi + 0x1a]
movzx edx, word [edi + 0x18]
push eax
push ecx
push edx
push ebx
mov ecx, esi
call fcn.00474190
mov ecx, dword [esi + 0x2c]
test ecx, ecx
je 0x475bfe
cmp dword [esi + 0x10f8], 0
je 0x475bee
lea eax, [esi + 0x10c0]
jmp 0x475bf0
xor eax, eax
mov edx, dword [esi + 0x1100]
push edx
push eax
push ebx
call ecx
add esp, 0xc
mov eax, dword [esp + 0x40]
push eax
mov dword [esp + 0x18], 1
call fcn.00579478
push ebx
call fcn.00579478
add esp, 8
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8