Function at 0x475b90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4fa6e4
mov eax, dword fs:[0]
push eax
mov eax, 0x3098
call fcn.004e3510
mov eax, dword [0x514bc0]
xor eax, esp
mov dword [esp + 0x3094], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x514bc0]
xor eax, esp
push eax
lea eax, [esp + 0x30ac]
mov dword fs:[0], eax
mov esi, dword [esp + 0x30bc]
cmp byte [esi + 0xc20e], 0
mov eax, dword [esp + 0x30c0]
mov ecx, dword [esp + 0x30c4]
mov ebx, dword [esp + 0x30c8]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
jne 0x476460
mov edi, dword [esi + 0x6574]
mov byte [esi + 0xc20e], 1
test eax, eax
je 0x475cdd
test ecx, ecx
je 0x475cdd
test ebx, ebx
je 0x475cdd
mov ecx, dword [eax + 0x1054]
cmp ecx, dword [ebx + 0x2214]
jg 0x475c4a
jl 0x475c43
mov edx, dword [eax + 0x1050]
cmp edx, dword [ebx + 0x2210]
jae 0x475c4a
mov byte [eax + 0x108a], 1
cmp byte [eax + 0x1089], 0
mov ecx, dword [ebx + 0x2218]
mov dword [eax + 0x1048], ecx
mov edx, dword [ebx + 0x221c]
mov dword [eax + 0x104c], edx
je 0x475c72
mov byte [eax + 0x1088], 1
mov ebp, eax
mov byte [ebp + 0x1089], 1
add ebp, 0x1060
lea ecx, [ebx + 0x2258]
push ebp
mov dword [esp + 0x24], ecx
call fcn.004464d0
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 4]
mov edx, dword [esi]
mov eax, dword [eax]
mov edx, dword [edx + 0xc]
push 0
push ecx
push eax
mov ecx, esi
call edx
mov eax, dword [esp + 0x24]
push 0
push 0
push eax
mov eax, dword [eax + 4]
push eax
mov ecx, esi
call fcn.0042c7d0
xor eax, eax
mov dword [ebx + 0x2218], eax
mov dword [ebx + 0x221c], eax
mov ecx, dword [edi + 0x83b0]
mov edx, dword [ebp]
push ecx
mov ecx, dword [esp + 0x24]
push edx
call fcn.004462a0
xor eax, eax
mov byte [esp + 0x17], 0
mov word [esp + 0x20a8], ax
cmp byte [esi + 0xc1ed], al
jne 0x475de1
mov byte [esi + 0xc1ed], 1
mov byte [esi + 0xc1f1], 1
cmp byte [edi + 0x619c], al
je 0x475d35
mov byte [esi + 0xc1f2], al
lea eax, [esi + 0x1e]
mov ecx, esi
sub ecx, eax
lea edx, [ecx + 0xc232]
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x475d21
jmp 0x475de8
mov byte [esi + 0xc1f2], 1
mov edx, dword [edi + 0x6160]
mov ecx, dword [edi + 0x6164]
xor ebp, ebp
mov dword [esp + 0x18], edx
cmp dword [edi + 0x616c], ebp
jbe 0x475d83
mov eax, dword [edi + 0x6168]
lea esp, [esp]
mov edx, dword [eax + 4]
cmp ecx, edx
mov ebx, dword [eax]
jl 0x475d77
jg 0x475d71
cmp dword [esp + 0x18], ebx
jbe 0x475d77
mov dword [esp + 0x18], ebx
mov ecx, edx
inc ebp
add eax, 8
cmp ebp, dword [edi + 0x616c]
jb 0x475d60
mov eax, dword [esi + 0xc228]
add eax, dword [esi + 0xc220]
mov edx, dword [esi + 0xc22c]
adc edx, dword [esi + 0xc224]
lea ebx, [esi + 0x1e]
push edx
push eax
mov eax, dword [esp + 0x20]
push ecx
push eax
lea ecx, [esp + 0x20b8]
push ecx
call fcn.00475380
lea eax, [esp + 0x20a8]
mov edx, esi
mov ecx, eax
sub edx, ecx
mov byte [esp + 0x17], 1
add edx, 0xc232
jmp 0x475dd0
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x475dd0
jmp 0x475de8
mov byte [esi + 0xc1f1], 0
mov eax, dword [esi + 0x7754]
add eax, dword [esi + 0x7700]
mov edx, dword [esi]
add eax, dword [esi + 0xc1f8]
mov edx, dword [edx + 0xc]
xor ebx, ebx
push ebx
push ebx
push eax
mov ecx, esi
call edx
push ebx
push ebx
push ebx
push 1
mov ecx, esi
call fcn.0042c7d0
mov ecx, esi
call fcn.00443060
push 0x2300
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
call fcn.004e4838
add esp, 4
mov dword [esp + 0x34], eax
mov dword [esp + 0x30b4], ebx
cmp eax, ebx
je 0x475e4e
mov ecx, eax
call fcn.0040d990
mov ebx, eax
mov dword [esp + 0x20], eax
jmp 0x475e52
mov dword [esp + 0x20], ebx
mov dword [esp + 0x30b4], 0xffffffff
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30b4], 1
lea ebp, [esi + 0x9ac0]
push ebp
mov ecx, ebx
call fcn.00446700
cmp byte [esp + 0x17], 0
lea eax, [esp + 0x20a8]
jne 0x475e8b
lea eax, [esi + 0x1e]
push eax
push 1
mov ecx, esi
call fcn.0042d840
push ebx
mov ecx, ebp
call fcn.00446700
cmp byte [esp + 0x17], 0
je 0x475f82
lea eax, [esp + 0x20a8]
push eax
call fcn.00443cc0
test al, al
je 0x475f18
lea ecx, [esp + 0x84]
call fcn.004426b0
mov byte [esp + 0x30b4], 2
push 0
push 0
push SysReAllocString
push SysReAllocString
lea ecx, [esp + 0x27]
push ecx
push 0x800
lea edx, [esp + 0x20c0]
push edx
lea eax, [esp + 0xa0]
push eax
push edi
call fcn.004425c0
test al, al
sete bl
mov byte [esp + 0x30b4], 1
lea ecx, [esp + 0x84]
call fcn.00442e00
test bl, bl
jne 0x475f2b
lea ecx, [esp + 0x20a8]
push ecx
mov ecx, esi
call fcn.00442a90
test al, al
jne 0x475f82
lea eax, [esi + 0x1e]
lea edx, [esp + 0x20a8]
lea ecx, [esp + 0x38]
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0xf
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], edx
mov dword [esp + 0x78], 3
call fcn.004693c0
mov ecx, 0x52c138
call fcn.0043dd70
mov ecx, esi
call fcn.00442a60
push 9
mov ecx, 0x52c138
call fcn.0043dc00
lea ebx, [esi + 0x1e]
push ebx
push 0
mov ecx, 0x52c148
call fcn.004468f0
lea ecx, [esp + 0x38]
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0x89
mov dword [esp + 0x38], ebx
mov dword [esp + 0x78], 1
call fcn.004693c0
movzx ebp, word [edi + 0x639c]
lea eax, [edi + 0x639c]
test bp, bp
je 0x475fdf
xor ecx, ecx
cmp bp, 0x40
sete cl
dec ecx
and eax, ecx
push eax
push ebx
call fcn.00467ea0
mov eax, dword [esp + 0x24]
xor ebp, ebp
cmp eax, ebp
jne 0x475fed
xor eax, eax
jmp 0x475ff2
add eax, 0x1030
push eax
mov ecx, esi
call fcn.0042a1a0
lea edx, [esp + 0x10a8]
mov byte [esi + 0xc1f3], 0
mov byte [esi + 0xc1f0], 0
mov byte [esi + 0xc1f1], 0
mov dword [esi + 0xc1f8], ebp
mov dword [esi + 0x7728], ebp
mov dword [esi + 0x772c], ebp
mov dword [esi + 0x7738], ebp
mov dword [esi + 0x773c], ebp
mov eax, ebx
sub edx, ebx
jmp 0x476040
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, bp
jne 0x476040
movzx edx, byte [edi + 0x619c]
push edx
push 0x800
lea eax, [esp + 0x10b0]
push eax
call fcn.00451fc0
movzx edx, byte [esi + 0xc1ec]
push ebp
lea ecx, [esp + 0x10ac]
push ecx
push edx
push 1
call fcn.00468fc0
mov ecx, dword [edi + 0x616c]
mov eax, dword [esi + 0xc210]
cmp eax, ecx
jae 0x4760aa
mov ecx, dword [edi + 0x6168]
mov edx, dword [ecx + eax*8]
mov dword [edi + 0x6160], edx
mov eax, dword [ecx + eax*8 + 4]
mov dword [edi + 0x6164], eax
inc dword [esi + 0xc210]
lea ecx, [esp + 0x10a8]
push ecx
xor bl, bl
call fcn.004434c0
test al, al
je 0x4760f9
mov eax, SysReAllocString
cmp dword [edi + 0x6160], eax
jne 0x4760d8
cmp dword [edi + 0x6164], eax
je 0x4760f9
lea edx, [esp + 0x10a8]
push edx
call fcn.00443550
cmp edx, dword [edi + 0x6164]
jg 0x4760f9
jl 0x4760f7
cmp eax, dword [edi + 0x6160]
jae 0x4760f9
mov bl, 1
cmp byte [edi + 0x617c], 0
jne 0x476157
cmp byte [edi + 0x62da], 0
jne 0x47610f
test bl, bl
je 0x476157
lea eax, [edi + 0x6160]
push eax
lea ecx, [esp + 0x1b]
push ecx
push 0x800
lea edx, [esp + 0x10b4]
push edx
call fcn.004691c0
test al, al
jne 0x476140
push 0xff
mov ecx, 0x52c138
call fcn.0043dc00
cmp byte [esp + 0x17], 0
je 0x476157
cmp byte [edi + 0x6198], 0
jne 0x476160
mov byte [edi + 0x62da], 0
cmp byte [edi + 0x6198], 0
je 0x476170
lea eax, [esp + 0x10a8]
push eax
call fcn.004441c0
lea ecx, [ecx]
lea ecx, [esp + 0x10a8]
push ecx
call fcn.00443550
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
test edx, edx
jl 0x476200
jg 0x476192
cmp eax, 0x2710
jb 0x476200
mov ebx, dword [edi + 0x6160]
mov ebp, dword [edi + 0x6164]
cmp ebx, 0x7fffffff
jne 0x4761aa
cmp ebp, ebx
je 0x4761c3
push 0
push 0x64
push ebp
push ebx
call fcn.004e6f30
cmp edx, dword [esp + 0x1c]
jg 0x476200
jl 0x4761c3
cmp eax, dword [esp + 0x18]
ja 0x476200
cmp ebx, 0x7fffffff
jne 0x476290
cmp ebp, ebx
jne 0x476290
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
push 0
push 0x64
push edx
push eax
call fcn.004e6f30
cmp edx, dword [esp + 0x1c]
jl 0x476290
jg 0x476200
cmp eax, dword [esp + 0x18]
jbe 0x476290
push 2
call fcn.00469170
xor eax, eax
lea ecx, [esp + 0x38]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], 0x76
call fcn.004693c0
cmp byte [edi + 0x617c], 0
jne 0x476250
lea ecx, [edi + 0x6160]
push ecx
lea edx, [esp + 0x1b]
push edx
push 0x800
lea eax, [esp + 0x10b4]
push eax
call fcn.004691c0
test al, al
jne 0x47625f
push 0xff
mov ecx, 0x52c138
call fcn.0043dc00
cmp byte [esp + 0x17], 0
je 0x476276
cmp byte [edi + 0x6198], 0
jne 0x476283
mov byte [edi + 0x62da], 0
cmp byte [edi + 0x6198], 0
je 0x476170
lea ecx, [esp + 0x10a8]
push ecx
jmp 0x476168
xor ebp, ebp
push ebp
push ebp
push SysReAllocString
push SysReAllocString
push ebp
push 0x800
lea edx, [esp + 0x10c0]
push edx
push esi
push edi
call fcn.004425c0
test al, al
jne 0x476370
mov ebx, 0x77
lea eax, [esi + 0x1e]
lea ecx, [esp + 0x38]
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x80], ebx
mov dword [esp + 0x38], eax
mov dword [esp + 0x78], 1
call fcn.004693c0
cmp byte [edi + 0x617c], 0
jne 0x47630e
lea eax, [edi + 0x6160]
push eax
lea eax, [esp + 0x1b]
push eax
push 0x800
lea ecx, [esp + 0x10b4]
push ecx
call fcn.004691c0
test al, al
jne 0x47631a
push 9
mov ecx, 0x52c138
call fcn.0043dc00
cmp byte [esp + 0x17], 0
je 0x476331
cmp byte [edi + 0x6198], 0
jne 0x47633a
mov byte [edi + 0x62da], 0
cmp byte [edi + 0x6198], 0
je 0x476347
lea edx, [esp + 0x10a8]
push edx
call fcn.004441c0
push ebp
push ebp
push SysReAllocString
push SysReAllocString
push ebp
push 0x800
lea eax, [esp + 0x10c0]
push eax
push esi
push edi
call fcn.004425c0
test al, al
je 0x4762c0
push ebp
push ebp
push ebp
push ebp
mov ecx, esi
call fcn.0042c7d0
cmp byte [esi + 0xc1f4], 0
je 0x476399
cmp dword [esi + 0xc1e8], 3
jne 0x476399
push ebp
push ebp
push ebp
push 4
mov ecx, esi
call fcn.0042c7d0
push ebp
push ebp
push ebp
push 1
mov ecx, esi
call fcn.0042c7d0
mov ecx, dword [edi + 0x6164]
mov edx, dword [edi + 0x6160]
push ecx
push edx
push esi
call fcn.004755b0
mov ebx, dword [esp + 0x28]
cmp ebx, ebp
je 0x4763cf
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov ecx, esi
call edx
mov dword [ebx], eax
mov dword [ebx + 4], edx
mov ebx, dword [esp + 0x24]
cmp ebx, ebp
je 0x476436
mov eax, dword [ebx + 0xc]
push eax
mov ecx, esi
mov dword [ebx + 0x1048], ebp
mov dword [ebx + 0x104c], ebp
mov byte [ebx + 0x1089], 0
mov byte [ebx + 0x1088], 1
call fcn.0042a2c0
cmp byte [esi + 0x7726], 0
je 0x476427
cmp dword [edi + 0x2010], ebp
je 0x476427
mov ecx, dword [ebx + 0xc]
push ecx
mov ecx, esi
call fcn.00429c70
add eax, 0x10
sub dword [esi + 0xc218], eax
sbb dword [esi + 0xc21c], ebp
mov edx, dword [ebx + 4]
push 1
push ebp
push ebx
push edx
mov ecx, esi
call fcn.0042c7d0
mov byte [esi + 0xc20e], 0
mov dword [esp + 0x30b4], 0xffffffff
mov esi, dword [esp + 0x20]
cmp esi, ebp
je 0x476460
mov ecx, esi
call fcn.0040d8a0
push esi
call fcn.004e3756
add esp, 4
mov ecx, dword [esp + 0x30ac]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x3094]
xor ecx, esp
call fcn.004e34f4
add esp, 0x30a4
ret 0x10