Function at 0x475930
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xac]
cmp eax, dword [ecx + 8]
jbe 0x4762cf
sub esp, 0x12c
mov eax, dword [esp + 0x130]
movzx ecx, byte [eax + 0xf]
and ecx, 0x1f
cmp ecx, 0x13
jne 0x4762b5
mov ecx, dword [esp + 0x134]
test ecx, ecx
je 0x475985
movzx edx, byte [ecx + 0xf]
and edx, 0x1f
cmp edx, 0x14
je 0x47623a
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
lea edx, [0xbb58e0]
mov dword [esp], edx
lea ebx, [0x793220]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xb0]
mov dword [esp + 8], ebp
call fcn.004502f0
movzx eax, byte [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
test al, al
jne 0x476157
lea eax, [0x792ec0]
mov dword [esp], eax
call fcn.00409dc0
mov eax, dword [esp + 4]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x134]
test ecx, ecx
je 0x476150
movzx edx, byte [ecx + 0xf]
test dl, 0x20
jne 0x4760a8
mov edx, dword [eax]
test edx, 7
jne 0x475a28
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 4]
mov ebp, dword [eax + 8]
lea esi, [ebp + 1]
cmp esi, edx
jg 0x476046
lea edx, [ebp + 1]
mov dword [eax + 8], edx
mov byte [ebx + ebp], 0
mov edx, dword [eax + 8]
mov ebx, dword [eax + 4]
mov ebp, dword [eax]
mov esi, ebp
shr ebp, 3
cmp ebp, edx
jae 0x47621b
movzx edx, byte [ebx + ebp]
and esi, 7
mov ecx, esi
mov edi, 1
shl edi, cl
or edi, edx
xchg edi, eax
mov byte [ebx + ebp], al
xchg edi, eax
mov edx, dword [eax]
inc edx
mov dword [eax], edx
mov ecx, 4
mov edx, dword [esp + 0x130]
movzx ebx, byte [edx + 0xc]
test bl, 1
je 0x47603c
mov ebx, 0x34
movzx ebp, word [edx + 0x20]
test bp, bp
jne 0x476016
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x34], ebx
mov dword [esp + 0xac], ebp
xor esi, esi
jmp 0x475afa
mov dword [esp + 0x54], esi
mov edx, dword [ebp + esi*4]
mov dword [esp + 0xa4], edx
movzx ebx, byte [edx + 0xd]
mov dword [esp], eax
mov edi, ecx
neg ecx
dec ebx
movzx ebx, bl
and ebx, ecx
lea ecx, [edi + ebx]
mov dword [esp + 0x3c], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004762e0
mov eax, dword [esp + 0x54]
lea esi, [eax + 1]
mov eax, dword [esp + 0xa4]
mov eax, dword [eax]
mov ecx, dword [esp + 0x3c]
add ecx, eax
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0x130]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0xac]
cmp esi, ebx
jl 0x475a97
mov ebx, ecx
neg ecx
and ecx, 3
add ecx, ebx
movzx ebp, byte [edx + 0xc]
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x47600c
mov ebp, 0x34
mov dword [esp + 0x50], ebx
movzx esi, word [edx + 0x22]
test si, 0x7fff
jne 0x475f8e
xor ebp, ebp
xor esi, esi
mov dword [esp + 0x38], ebp
mov dword [esp + 0xac], esi
mov dword [esp + 0x3c], ecx
mov edi, ecx
xor ecx, ecx
mov dword [esp + 0x54], ecx
mov ecx, edi
jmp 0x475bb6
mov edx, dword [esi + edi*4]
mov dword [esp + 0x9c], edx
movzx ebx, byte [edx + 0xd]
mov dword [esp], eax
mov ebp, ecx
neg ecx
dec ebx
movzx ebx, bl
and ebx, ecx
lea ecx, [ebp + ebx]
mov dword [esp + 0x4c], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004762e0
mov eax, dword [esp + 0x54]
inc eax
mov ecx, dword [esp + 0x9c]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x4c]
add ecx, edx
mov edx, dword [esp + 0x130]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xa0]
mov edi, dword [esp + 0x54]
cmp edi, ebp
jl 0x475b4d
mov dword [esp + 0x4c], ecx
lea eax, [0x7be580]
mov dword [esp], eax
call fcn.00409dc0
mov eax, dword [esp + 4]
mov byte [eax + 0xd], 4
mov ecx, dword [esp + 0x4c]
mov edx, ecx
neg ecx
and ecx, 3
add ecx, edx
mov dword [eax], ecx
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx]
shl edx, 2
mov dword [eax + 4], edx
mov edx, dword [ecx]
test edx, edx
jbe 0x475f76
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
test edx, edx
jbe 0x4761ff
mov edx, dword [0xbc7270]
test edx, edx
jne 0x475f58
mov dword [eax + 0x14], ebx
mov edx, dword [esp + 0x134]
test edx, edx
mov dword [esp + 0x98], eax
je 0x475efc
mov dword [esp], edx
call fcn.00470200
mov eax, dword [esp + 8]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0x130]
mov dword [esp], edx
call fcn.00470200
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
lea edx, [esp + 0x78]
mov dword [esp], edx
lea edx, [0x7de99b]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xb
mov edx, dword [esp + 0xac]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x10], edx
lea edx, [0x7dc257]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 2
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
lea eax, [0x7dc1fb]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 1
call fcn.0043c040
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0
call fcn.0046fd10
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00470040
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x98]
mov dword [ecx + 0x18], eax
lea eax, [0x7a70c0]
mov dword [esp], eax
call fcn.00409dc0
mov eax, dword [esp + 4]
mov dword [esp + 0xa8], eax
lea ecx, [0x786360]
mov dword [esp], ecx
call fcn.00409dc0
mov eax, dword [esp + 4]
lea ecx, [0x47f490]
mov dword [eax], ecx
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x475ed1
mov ecx, dword [esp + 0x98]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0xa8]
mov dword [edx + 8], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0xbc], eax
lea edi, [esp + 0x104]
lea esi, [0x8f9dd0]
call fcn.0044d1fe
mov eax, dword [esp + 0x98]
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], edx
lea eax, [0x793220]
mov dword [esp], eax
lea eax, [esp + 0xb8]
mov dword [esp + 4], eax
call fcn.00407470
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xac], ecx
lea edx, [0x7abb80]
mov dword [esp], edx
lea ebx, [esp + 0x104]
mov dword [esp + 4], ebx
call fcn.00407470
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
lea eax, [0xbb58e0]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00450a20
mov eax, dword [esp + 0x14]
mov dword [esp + 0x40], eax
mov esi, dword [esp + 0x18]
lea edi, [esp + 0xf0]
xor eax, eax
call fcn.0044cd1b
mov eax, dword [esp + 0x40]
lea ecx, [0x7abb80]
cmp eax, ecx
jne 0x4761e7
lea edi, [esp + 0xf0]
call fcn.0044d1fe
lea edi, [esp + 0xc8]
lea esi, [esp + 0xf0]
call fcn.0044d1fe
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0xd4]
mov ebp, dword [esp + 0xd8]
mov dword [esp + 0x138], eax
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], edx
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebp
add esp, 0x12c
ret
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x98]
call fcn.0044cc20
mov edx, dword [esp + 0xa8]
lea edi, [edx + 8]
mov ebx, eax
mov eax, ecx
call fcn.0044cc20
mov ecx, ebx
jmp 0x475d5c
mov eax, dword [esp + 0x130]
mov dword [esp], eax
call fcn.00470200
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
lea edx, [esp + 0x58]
mov dword [esp], edx
lea edx, [0x7ddd47]
mov dword [esp + 4], edx
mov dword [esp + 8], 9
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
lea eax, [0x7dc1fb]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.0043bf80
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
jmp 0x475ccc
lea edi, [eax + 0x14]
mov edx, eax
mov eax, ebx
call fcn.0044cc20
mov ebx, dword [esp + 0x134]
test ebx, ebx
mov eax, edx
mov edx, ebx
jmp 0x475c28
movzx ebx, byte [eax + 0xf]
or ebx, 0xffffff80
mov byte [eax + 0xf], bl
mov edx, dword [esp + 0x134]
test edx, edx
jmp 0x475c28
add ebp, edx
test byte [ebp], al
and esi, 0x7fff
movzx edi, word [edx + 0x20]
add esi, edi
movzx esi, si
test esi, esi
jl 0x476206
movzx edi, di
cmp edi, esi
ja 0x476206
cmp esi, 0x100000
ja 0x476206
mov dword [esp + 0x54], edi
sub esi, edi
add edi, 0xfff00000
xchg edi, ebx
neg ebx
xchg edi, ebx
xchg edi, ebx
neg ebx
xchg edi, ebx
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0x54]
shl edi, 2
mov dword [esp + 0x54], edi
mov edi, dword [esp + 0x48]
sar edi, 0x1f
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0x54]
mov ebx, dword [esp + 0x48]
and edi, ebx
add edi, ebp
mov ebx, dword [esp + 0x50]
mov ebp, esi
mov esi, edi
jmp 0x475b32
mov ebp, 0x24
jmp 0x475b1b
add ebx, edx
test byte [ebx], al
movzx ebp, bp
test ebp, ebp
jl 0x47620d
cmp ebp, 0x100000
ja 0x47620d
mov esi, ebx
mov ebx, ebp
mov ebp, esi
jmp 0x475a88
mov ebx, 0x24
jmp 0x475a77
lea eax, [0x7720a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa0]
mov dword [ebx + 0xc], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x47609e
mov dword [ebx + 4], eax
mov ebp, ecx
mov ebx, eax
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x134]
jmp 0x475a1e
lea edi, [ebx + 4]
call fcn.0044cc20
jmp 0x476087
test dl, 0x80
je 0x475a00
mov edx, dword [eax]
test edx, 7
jne 0x4760d5
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
lea esi, [ebx + 1]
cmp esi, ebp
jg 0x4760f1
lea ebp, [ebx + 1]
mov dword [eax + 8], ebp
mov byte [edx + ebx], 0
mov edx, dword [eax + 8]
mov ebx, dword [eax]
mov ebp, ebx
shr ebx, 3
cmp ebx, edx
jae 0x476214
lea edx, [ebp + 1]
mov dword [eax], edx
jmp 0x475a59
lea eax, [0x7720a0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00438d80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xa0]
mov dword [ebx + 0xc], edx
mov edx, dword [0xbc7270]
test edx, edx
jne 0x476146
mov dword [ebx + 4], eax
mov ebx, ecx
mov edx, eax
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x134]
jmp 0x4760cb
lea edi, [ebx + 4]
call fcn.0044cc20
jmp 0x476132
xor ecx, ecx
jmp 0x475a5e
mov dword [esp + 0x44], ecx
lea edi, [esp + 0x118]
xor eax, eax
call fcn.0044cd1b
mov ecx, dword [esp + 0x44]
lea edx, [0x7abb80]
cmp ecx, edx
jne 0x476222
lea edi, [esp + 0x118]
call fcn.0044d1fe
lea edi, [esp + 0xdc]
lea esi, [esp + 0x118]
call fcn.0044d1fe
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0xe4]
mov ebx, dword [esp + 0xe8]
mov ebp, dword [esp + 0xec]
mov dword [esp + 0x138], eax
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], edx
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebp
add esp, 0x12c
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x7715a0]
mov dword [esp + 8], eax
call fcn.00407230
ud2
call fcn.00426630
ud2
call fcn.00426730
ud2
call fcn.00426730
ud2
call fcn.00426630
ud2
call fcn.00426630
ud2
mov dword [esp], ecx
mov dword [esp + 4], edx
lea eax, [0x7715a0]
mov dword [esp + 8], eax
call fcn.00407230
ud2
mov dword [esp], ecx
call fcn.00470200
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov dword [esp], 0
lea edx, [0x7eef2c]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x2c
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.0043bf20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
lea eax, [0x771de0]
mov dword [esp], eax
lea eax, [esp + 0xc0]
mov dword [esp + 4], eax
call fcn.00407630
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00427510
ud2
lea eax, [0x771de0]
mov dword [esp], eax
lea eax, [0x8f76d8]
mov dword [esp + 4], eax
call fcn.00427510
ud2
call fcn.0044b4c0
jmp fcn.00475930