Function at 0x475250
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6d0e30]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x475ae4
sub esp, 0x70
mov edx, dword [esp + 0x88]
test edx, edx
sete bl
mov ebp, dword [esp + 0x8c]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x47528f
xor eax, eax
jmp 0x475296
mov eax, dword [esp + 0x90]
mov ebx, dword [esp + 0x94]
mov ebx, dword [ebx]
lea ecx, [ebx - 0x3c]
neg ecx
mov ebx, edx
shl edx, cl
mov dword [esp + 0x60], edx
shl ebp, cl
lea esi, [ecx - 0x20]
mov edi, ecx
mov ecx, esi
shl ebx, cl
neg ecx
mov edx, dword [esp + 0x88]
shr edx, cl
cmp esi, 0x20
sbb esi, esi
and ebx, esi
cmp ecx, 0x20
sbb esi, esi
and edx, esi
cmp edi, 0x20
sbb esi, esi
and ebp, esi
or ebp, edx
mov edx, dword [esp + 0x60]
and edx, esi
or ebp, ebx
jmp 0x4752ef
shl ebp, 1
mov ebx, edx
shr ebx, 0x1f
or ebp, ebx
shl edx, 1
dec eax
test ebp, ebp
setne bl
test edx, edx
xchg esi, ebx
setne bl
xchg esi, ebx
or ebx, esi
test bl, bl
je 0x475313
test ebp, 0x10000000
sete bl
and ebx, 1
test bl, bl
jne 0x4752e3
mov ecx, dword [esp + 0x80]
cmp ecx, 0xf
jae 0x475488
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], eax
mov ebx, ecx
shl ebx, 2
mov ecx, ebx
mov edi, edx
shl edx, cl
mov dword [esp + 0x60], edx
shl ebp, cl
mov dword [esp + 0x50], ebp
lea esi, [ecx - 0x20]
mov ecx, esi
shl edi, cl
neg ecx
mov dword [esp + 0x4c], ecx
mov ebp, dword [esp + 0x58]
shr ebp, cl
mov dword [esp + 0x48], ebp
lea eax, [ebx - 0x3c]
neg eax
mov ecx, eax
mov ebp, dword [esp + 0x58]
shr ebp, cl
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x5c]
shr ebp, cl
mov dword [esp + 0x44], ebp
lea ebp, [eax - 0x20]
mov dword [esp + 0x40], ebp
mov ecx, ebp
mov edx, dword [esp + 0x5c]
shr edx, cl
mov dword [esp + 0x3c], edx
neg ecx
mov edx, dword [esp + 0x5c]
shl edx, cl
cmp esi, 0x20
sbb esi, esi
and edi, esi
cmp ebx, 0x20
sbb ebx, ebx
mov esi, dword [esp + 0x60]
and esi, ebx
mov dword [esp + 0x60], esi
mov esi, dword [esp + 0x50]
and esi, ebx
mov ebx, dword [esp + 0x4c]
cmp ebx, 0x20
sbb ebx, ebx
mov ebp, dword [esp + 0x48]
and ebp, ebx
or esi, ebp
or esi, edi
and esi, 0xfffffff
cmp ecx, 0x20
sbb ebx, ebx
mov dword [esp + 0x5c], ebx
and edx, ebx
cmp eax, 0x20
sbb ebp, ebp
mov dword [esp + 0x50], ebp
mov edi, dword [esp + 0x58]
and edi, ebp
or edx, edi
mov edi, dword [esp + 0x44]
and edi, ebp
mov ebx, dword [esp + 0x40]
cmp ebx, 0x20
sbb ebx, ebx
mov dword [esp + 0x58], ebx
mov ebp, dword [esp + 0x3c]
and ebp, ebx
or edx, ebp
mov ebp, edx
and edx, 1
mov ebx, dword [esp + 0x60]
or edx, ebx
test edx, edx
seta dl
cmp esi, 0x8000000
seta bl
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, edx
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x47542d
add ebp, 1
adc edi, 0
mov edx, ecx
mov ecx, eax
shl edi, cl
mov ebx, dword [esp + 0x50]
and edi, ebx
mov ecx, edx
mov esi, ebp
shr ebp, cl
mov edx, dword [esp + 0x5c]
and ebp, edx
or ebp, edi
mov ecx, eax
mov edx, esi
shl esi, cl
mov ecx, dword [esp + 0x40]
shl edx, cl
mov edi, dword [esp + 0x58]
and edx, edi
or edx, ebp
and esi, ebx
test edx, 0x20000000
je 0x475479
shr esi, 1
mov ecx, edx
shl ecx, 0x1f
or esi, ecx
shr edx, 1
mov ecx, dword [esp + 0x54]
lea eax, [ecx + 1]
jmp 0x47547d
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x80]
mov ebp, edx
mov edx, esi
movzx ebx, byte [esp + 0x84]
cmp bl, 0x58
jne 0x47549d
lea esi, [0x57e799]
jmp 0x4754a3
lea esi, [0x57e6f9]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], edx
mov dword [esp + 0x64], esi
mov dword [esp + 0x54], eax
movzx edi, byte [esp + 0x85]
xchg edi, eax
test al, al
xchg edi, eax
je 0x47553e
mov edi, dword [esp + 0x78]
inc edi
mov esi, dword [esp + 0x7c]
cmp esi, edi
jb 0x4754e0
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x28]
jmp 0x475533
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x5575c0]
mov dword [esp + 0x10], eax
call fcn.0044b6b0
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x5c]
movzx ebx, byte [esp + 0x84]
mov ebp, dword [esp + 0x60]
mov dword [esp + 0x6c], eax
mov esi, ecx
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x80]
mov ecx, dword [esp + 0x6c]
mov byte [edi + ecx - 1], 0x2d
jmp 0x47554a
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0x78]
mov ecx, dword [esp + 0x74]
add edi, 3
cmp esi, edi
jae 0x475593
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 3
lea eax, [0x5575c0]
mov dword [esp + 0x10], eax
call fcn.0044b6b0
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x5c]
movzx ebx, byte [esp + 0x84]
mov ebp, dword [esp + 0x60]
mov byte [edi + ecx - 3], 0x30
mov byte [edi + ecx - 2], bl
shr ebp, 0x1c
and ebp, 1
add ebp, 0x30
xchg ebp, eax
mov byte [edi + ecx - 1], al
xchg ebp, eax
mov ebp, dword [esp + 0x60]
shl ebp, 4
shr edx, 0x1c
or edx, ebp
mov dword [esp + 0x60], edx
mov ebp, dword [esp + 0x5c]
shl ebp, 4
mov dword [esp + 0x5c], ebp
mov ebx, dword [esp + 0x80]
test ebx, ebx
jge 0x475636
test edx, edx
setne al
test ebp, ebp
setne dl
or edx, eax
test dl, dl
je 0x47562c
lea edx, [edi + 1]
cmp esi, edx
jae 0x47561a
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x5575c0]
mov dword [esp + 0x10], eax
call fcn.0044b6b0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebp, dword [esp + 0x5c]
mov byte [edx + ecx - 1], 0x2e
mov ebx, dword [esp + 0x64]
mov edi, dword [esp + 0x60]
jmp 0x475a64
test ebx, ebx
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x60]
jle 0x475688
inc edi
cmp esi, edi
jae 0x47567e
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x5575c0]
mov dword [esp + 0x10], eax
call fcn.0044b6b0
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x5c]
mov byte [edi + ecx - 1], 0x2e
jmp 0x4759dc
movzx edx, byte [esp + 0x84]
mov ebx, edx
or edx, 0x20
cmp bl, dl
jne 0x4756a0
mov edx, 0x70
jmp 0x4756a5
mov edx, 0x50
lea ebx, [edi + 1]
cmp esi, ebx
jae 0x4756e7
mov byte [esp + 0x21], dl
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x5575c0]
mov dword [esp + 0x10], eax
call fcn.0044b6b0
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
movzx edx, byte [esp + 0x21]
mov byte [ebx + ecx - 1], dl
test eax, eax
jge 0x4756f8
neg eax
mov edx, 0x2d
jmp 0x4756fd
mov edx, 0x2b
mov dword [esp + 0x54], eax
inc ebx
cmp esi, ebx
jae 0x475741
mov byte [esp + 0x21], dl
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x5575c0]
mov dword [esp + 0x10], eax
call fcn.0044b6b0
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
movzx edx, byte [esp + 0x21]
mov byte [ebx + ecx - 1], dl
cmp eax, 0x64
jge 0x4757c2
lea edx, [ebx + 2]
mov ebx, eax
mov eax, 0xcccccccd
mov ebp, edx
imul ebx
add edx, ebx
sar edx, 3
mov edi, ebx
sar ebx, 0x1f
sub edx, ebx
lea ebx, [edx + edx*4]
shl ebx, 1
sub edi, ebx
cmp esi, ebp
jae 0x4757af
mov dword [esp + 0x54], edx
mov dword [esp + 0x38], edi
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x5575c0]
mov dword [esp + 0x10], eax
call fcn.0044b6b0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x38]
mov ebp, edx
mov edx, dword [esp + 0x54]
lea eax, [edx + 0x30]
mov byte [ebp + ecx - 2], al
lea eax, [edi + 0x30]
mov byte [ebp + ecx - 1], al
jmp 0x4759a1
mov dword [esp + 0x68], ecx
cmp eax, 0x3e8
jge 0x47589b
lea edx, [ebx + 3]
mov dword [esp + 0x54], edx
mov ebx, eax
mov eax, 0xcccccccd
imul ebx
add edx, ebx
mov edi, edx
sar edx, 3
mov dword [esp + 0x38], edx
mov eax, 0xcccccccd
imul edx
sar edi, 0x1f
mov ecx, dword [esp + 0x38]
add edx, ecx
sar edx, 3
sub edx, edi
lea edx, [edx + edx*4]
shl edx, 1
mov dword [esp + 0x38], edx
lea edi, [ecx + ecx*4]
shl edi, 1
mov eax, ebx
mov ebp, 0x51eb851f
imul ebp
mov ebp, dword [esp + 0x38]
sub ecx, ebp
sub ebx, edi
mov ebp, dword [esp + 0x54]
cmp esi, ebp
jb 0x47582e
mov eax, dword [esp + 0x68]
jmp 0x47587c
mov dword [esp + 0x54], edx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 3
lea eax, [0x5575c0]
mov dword [esp + 0x10], eax
call fcn.0044b6b0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x38]
mov ebp, edx
mov eax, ecx
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x54]
sar edx, 5
add edx, 0x30
mov byte [ebp + eax - 3], dl
lea edx, [ecx + 0x30]
mov byte [ebp + eax - 2], dl
lea edx, [ebx + 0x30]
mov byte [ebp + eax - 1], dl
mov ecx, eax
jmp 0x4759a1
lea edx, [ebx + 4]
mov dword [esp + 0x38], edx
mov ebx, 0x51eb851f
imul ebx
sar edx, 5
mov dword [esp + 0x34], edx
movzx ebx, dl
imul ebx, ebx, 0x19a
shr ebx, 0xc
lea ebx, [ebx + ebx*4]
shl ebx, 1
mov eax, 0xcccccccd
mov edi, dword [esp + 0x54]
imul edi
add edx, edi
mov eax, edx
sar edx, 0x1f
mov dword [esp + 0x54], edx
sar eax, 3
mov dword [esp + 0x30], eax
mov eax, 0xcccccccd
mov ecx, dword [esp + 0x30]
imul ecx
add edx, ecx
sar edx, 3
mov ebp, dword [esp + 0x54]
sub edx, ebp
lea edx, [edx + edx*4]
shl edx, 1
mov dword [esp + 0x54], edx
lea ebp, [ecx + ecx*4]
shl ebp, 1
mov eax, 0x4189374c
imul edi
mov eax, edx
mov edx, dword [esp + 0x34]
sub edx, ebx
mov ebx, dword [esp + 0x54]
sub ecx, ebx
sub edi, ebp
mov ebx, dword [esp + 0x38]
cmp esi, ebx
jb 0x475927
mov ebp, dword [esp + 0x68]
jmp 0x47597e
mov dword [esp + 0x54], edi
mov byte [esp + 0x23], dl
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 4
lea eax, [0x5575c0]
mov dword [esp + 0x10], eax
call fcn.0044b6b0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x54]
mov ebx, edx
mov ebp, ecx
mov ecx, dword [esp + 0x34]
movzx edx, byte [esp + 0x23]
sar eax, 8
add eax, 0x30
mov byte [ebx + ebp - 4], al
lea eax, [edx + 0x30]
mov byte [ebx + ebp - 3], al
lea eax, [ecx + 0x30]
mov byte [ebx + ebp - 2], al
lea eax, [edi + 0x30]
mov byte [ebx + ebp - 1], al
mov ecx, ebp
mov ebp, ebx
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], ebp
mov dword [esp + 0xa0], esi
add esp, 0x70
ret
mov byte [edi + ecx - 1], dl
mov edx, dword [esp + 0x60]
shl edx, 4
shr ebp, 0x1c
mov eax, dword [esp + 0x24]
dec eax
or edx, ebp
mov ebp, dword [esp + 0x5c]
shl ebp, 4
mov ebx, eax
mov eax, dword [esp + 0x54]
test ebx, ebx
jle 0x475688
mov dword [esp + 0x24], ebx
mov dword [esp + 0x60], edx
mov dword [esp + 0x5c], ebp
inc edi
shr edx, 0x1c
and edx, 0xf
mov ebx, dword [esp + 0x64]
movzx edx, byte [ebx + edx]
cmp esi, edi
jae 0x4759ba
mov byte [esp + 0x22], dl
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x5575c0]
mov dword [esp + 0x10], eax
call fcn.0044b6b0
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
movzx edx, byte [esp + 0x22]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x5c]
jmp 0x4759ba
xchg edi, eax
mov byte [edx + ecx - 1], al
xchg edi, eax
shl ebp, 4
mov edi, dword [esp + 0x60]
mov eax, edi
shr eax, 0x1c
or ebp, eax
shl edi, 4
mov eax, edi
mov edi, ebp
mov ebp, eax
mov dword [esp + 0x60], ebp
test ebp, ebp
setne al
test edi, edi
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, eax
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x475ad9
inc edx
mov ebp, edi
shr edi, 0x1c
and edi, 0xf
movzx edi, byte [ebx + edi]
cmp esi, edx
jae 0x475a47
xchg edi, eax
mov byte [esp + 0x22], al
xchg edi, eax
mov dword [esp + 0x5c], ebp
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x5575c0]
mov dword [esp + 0x10], eax
call fcn.0044b6b0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x5c]
movzx edi, byte [esp + 0x22]
jmp 0x475a47
mov eax, dword [esp + 0x54]
mov edi, edx
jmp 0x475688
call fcn.004636f0
jmp fcn.00475250