Function at 0x475000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x58]
cmp eax, dword [ecx + 8]
jbe 0x47568d
sub esp, 0xd8
lea edi, [esp + 0xe4]
xor eax, eax
call fcn.0045d7c9
lea ecx, [0x4ff040]
mov dword [esp], ecx
call fcn.0040b480
mov ecx, dword [esp + 4]
mov dword [esp + 0x80], ecx
lea edi, [esp + 0xb4]
xor eax, eax
call fcn.0045d7d7
mov ecx, dword [esp + 0xe0]
test ecx, ecx
jne 0x47506e
mov eax, dword [esp + 0x80]
xor ecx, ecx
jmp 0x4751fe
lea eax, [esp + 0xb4]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00474590
mov eax, dword [esp + 8]
movzx ecx, byte [esp + 0xc]
test eax, eax
je 0x4751f2
test cl, cl
je 0x475158
mov ebp, dword [esp + 0x80]
mov eax, ebp
mov ebp, dword [ebp]
test ebp, 7
jne 0x47511d
mov ebp, dword [eax + 8]
mov ecx, ebp
mov ebp, dword [eax + 4]
mov edx, ebp
mov ebp, dword [eax + 0xc]
mov ebx, ebp
lea ebp, [ecx + 1]
cmp ebx, ebp
jae 0x475113
lea eax, [0x4fa160]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x80]
mov dword [ebx + 0xc], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x475107
mov dword [ebx + 4], eax
jmp 0x47510f
lea edi, [ebx + 4]
call fcn.0045d600
mov edx, eax
mov eax, ebx
lea ebp, [ecx + 1]
mov dword [eax + 8], ebp
mov byte [edx + ecx], 0
mov ebp, dword [eax + 4]
mov ecx, dword [eax + 8]
mov edx, ebp
mov ebp, dword [eax]
mov ebx, ebp
shr ebp, 3
cmp ecx, ebp
jbe 0x475685
mov ecx, ebp
movzx ebp, byte [edx + ebp]
and ebx, 7
mov esi, ecx
mov ecx, ebx
mov edi, ebp
mov ebp, 1
shl ebp, cl
or edi, ebp
xchg edi, eax
mov byte [edx + esi], al
xchg edi, eax
inc dword [eax]
jmp 0x4751ee
nop
mov ebp, dword [esp + 0x80]
mov eax, ebp
mov ebp, dword [ebp]
test ebp, 7
jne 0x4751dc
mov ebp, dword [eax + 8]
mov ecx, ebp
mov ebp, dword [eax + 4]
mov edx, ebp
mov ebp, dword [eax + 0xc]
mov ebx, ebp
lea ebp, [ecx + 1]
cmp ebx, ebp
jae 0x4751d2
lea eax, [0x4fa160]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x80]
mov dword [ebx + 0xc], edx
mov edx, dword [0x605b20]
test edx, edx
jne 0x4751c6
mov dword [ebx + 4], eax
jmp 0x4751ce
lea edi, [ebx + 4]
call fcn.0045d600
mov edx, eax
mov eax, ebx
lea ebp, [ecx + 1]
mov dword [eax + 8], ebp
mov byte [edx + ecx], 0
mov ecx, dword [eax + 8]
mov ebp, dword [eax]
shr ebp, 3
cmp ecx, ebp
jbe 0x47567e
inc dword [eax]
xor ecx, ecx
jmp 0x4751fe
mov eax, dword [esp + 0x80]
mov ecx, 4
mov ebp, dword [esp + 0xdc]
mov edx, ecx
movzx ecx, byte [ebp + 0xc]
test cl, 1
je 0x475217
mov ecx, 0x34
jmp 0x47521c
mov ecx, 0x24
mov ebx, ecx
movzx ecx, word [ebp + 0x20]
test cx, cx
jne 0x47522f
mov esi, ebp
xor ecx, ecx
xor ebp, ebp
jmp 0x475242
movzx ecx, cx
mov esi, ebp
add ebp, ebx
cmp ecx, 0x100000
ja 0x475672
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x78], ebp
xor ebx, ebx
jmp 0x47526d
mov ecx, dword [esp + 0x40]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x78]
mov esi, dword [esp + 0xdc]
mov edx, eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x38], edx
cmp ecx, ebx
jle 0x47537b
mov dword [esp + 0x40], ebx
mov eax, dword [ebp + ebx*4]
mov dword [esp + 0x88], eax
lea ecx, [esp + 0xb4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00474380
mov eax, dword [esp + 8]
test eax, eax
jne 0x475351
mov ebp, dword [esp + 0x88]
mov eax, ebp
movzx ebp, byte [ebp + 0xd]
mov ecx, dword [esp + 0x38]
mov edx, ebp
lea ebp, [ecx + ebp - 1]
neg edx
and edx, ebp
add edx, dword [eax]
mov ecx, dword [esp + 0xc4]
mov ebp, dword [esp + 0xc0]
mov eax, dword [esp + 0x40]
cmp eax, ecx
jae 0x47566d
mov ebx, ebp
mov ebp, dword [ebp + eax*4]
mov esi, ebp
lea ebp, [ecx - 1]
cmp eax, ebp
jne 0x4752f6
mov ebp, dword [esp + 0xb8]
jmp 0x475305
lea ebp, [eax + 1]
cmp ecx, ebp
jbe 0x475666
mov ebp, dword [ebx + eax*4 + 4]
mov ecx, ebp
mov ebp, dword [esp + 0xbc]
mov ebx, ebp
mov ebp, dword [esp + 0xb4]
cmp ecx, ebx
ja 0x47565f
cmp ecx, esi
jb 0x475658
sub ecx, esi
sub ebx, esi
mov edi, ecx
lea ecx, [esi + esi*2]
neg ebx
shl ecx, 3
sar ebx, 0x1f
and ebx, ecx
lea ecx, [ebp + ebx]
test edi, edi
jle 0x47560f
mov dword [esp + 0x44], edi
xor ebx, ebx
jmp 0x475628
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
call fcn.004772b0
mov eax, dword [esp + 0x38]
jmp 0x47524e
nop
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0x34], ecx
nop
lea edi, [esp + 0x90]
mov ebx, eax
xor eax, eax
call fcn.0045d7d7
mov ecx, dword [esp + 0x34]
lea ebp, [ecx + 3]
and ebp, 0xfffffffc
mov dword [esp + 0xa8], ebp
mov edi, ecx
movzx ecx, byte [esi + 0xc]
test cl, 1
je 0x4753bb
mov ecx, 0x34
jmp 0x4753c0
mov ecx, 0x24
mov dword [esp + 0x30], ebp
movzx ebp, word [esi + 0x22]
and ebp, 0x7fff
test bp, bp
jne 0x4753d9
xor esi, esi
xor ecx, ecx
jmp 0x47542f
mov word [esp + 0x20], bp
movzx ebp, word [esi + 0x20]
mov word [esp + 0x22], bp
movzx ebx, word [esp + 0x20]
add ebp, ebx
movzx ebp, bp
mov ebx, ebp
lea ebp, [ecx + esi]
cmp ebx, 0x100000
ja 0x475603
movzx edx, word [esp + 0x22]
movzx edx, dx
cmp edx, ebx
ja 0x4755fa
sub ebx, edx
mov esi, ebx
neg ebx
shl edx, 2
sar ebx, 0x1f
and edx, ebx
add edx, ebp
mov ebx, dword [esp + 0x80]
mov ecx, edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x28], esi
mov dword [esp + 0x7c], ecx
xor ebp, ebp
jmp 0x47545b
mov eax, dword [esp + 0x3c]
lea ebp, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x80]
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x34]
cmp ebp, esi
jge 0x47553f
mov dword [esp + 0x3c], ebp
mov eax, dword [ecx + ebp*4]
mov dword [esp + 0x84], eax
lea edx, [esp + 0x90]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00474380
mov eax, dword [esp + 8]
test eax, eax
jne 0x475519
mov ecx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x9c]
mov eax, dword [esp + 0x3c]
cmp eax, ecx
jae 0x4755f5
mov ebp, dword [ebx + eax*4]
mov edx, ebp
lea ebp, [ecx - 1]
cmp eax, ebp
jne 0x4754bf
mov ebx, dword [esp + 0x94]
jmp 0x4754ce
lea ebp, [eax + 1]
cmp ecx, ebp
jbe 0x4755ee
mov ebx, dword [ebx + eax*4 + 4]
mov ebp, dword [esp + 0x98]
mov ecx, ebx
mov ebx, dword [esp + 0x90]
cmp ecx, ebp
ja 0x4755e7
cmp ecx, edx
jb 0x4755e0
sub ecx, edx
sub ebp, edx
lea edx, [edx + edx*2]
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl edx, 3
sar ebp, 0x1f
and ebp, edx
lea edx, [ebx + ebp]
test ecx, ecx
jle 0x47543b
mov dword [esp + 0x24], ecx
xor ebx, ebx
jmp 0x4755b4
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 8], eax
call fcn.004772b0
jmp 0x47543b
mov ecx, dword [esp + 0x30]
sub dword [esp + 0xa8], ecx
mov ebp, edi
lea edi, [esp + 0xe4]
call fcn.0045d7c9
lea edi, [esp + 0xe4]
lea esi, [esp + 0xb4]
call fcn.0045dc96
lea edi, [esp + 0x108]
lea esi, [esp + 0x90]
call fcn.0045dc96
mov dword [esp + 0x12c], ebp
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x130], ecx
lea ecx, [edx + 3]
and ecx, 0xfffffffc
mov dword [esp + 0x134], ecx
mov dword [esp + 0x138], ebx
add esp, 0xd8
ret
add edx, 0x18
mov ebx, ecx
mov ecx, dword [esp + 0x24]
lea edi, [esp + 0x60]
mov esi, edx
call fcn.0045dcb4
cmp dword [esp + 0x60], 3
je 0x4755d6
lea ecx, [ebx + 1]
mov ebx, dword [esp + 0x24]
cmp ebx, ecx
jg 0x4755ab
jmp 0x47543b
nop
xor eax, eax
mov ecx, eax
call fcn.0045d680
mov eax, edx
call fcn.0045d6e0
mov edx, ebp
call fcn.0045d6c0
mov eax, ebp
call fcn.0045d680
call fcn.0045d680
mov eax, edx
mov ecx, ebx
call fcn.0045d730
mov edx, ebx
mov ebx, 0x100000
call fcn.0045d700
mov eax, edx
jmp 0x47524e
mov ebx, ebp
mov ebp, dword [esp + 0x8c]
add ebp, 0x18
mov edi, ebx
mov ebx, ecx
mov ecx, ebp
mov dword [esp + 0x8c], ecx
mov esi, ecx
lea edi, [esp + 0x48]
call fcn.0045dcb4
cmp dword [esp + 0x48], 3
je 0x47564e
lea ecx, [ebx + 1]
mov ebp, dword [esp + 0x44]
cmp ebp, ecx
jg 0x475616
jmp 0x47560f
nop
xor eax, eax
mov ecx, eax
call fcn.0045d680
mov eax, esi
call fcn.0045d6e0
mov edx, ebx
call fcn.0045d6c0
mov eax, ebp
call fcn.0045d680
call fcn.0045d680
mov edx, ecx
mov ebx, 0x100000
call fcn.0045d700
mov eax, ebp
call fcn.0045d690
mov eax, ebp
call fcn.0045d690
nop
call fcn.0045c1c0
jmp fcn.00475000