Function at 0x476890
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x5e90f0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x47707b
add esp, 0xffffff80
mov ebx, dword [esp + 0x84]
movzx ebp, byte [ebx + 0x3d]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4768be
mov byte [ebx + 0x3c], 1
jmp 0x4768ca
mov byte [esp + 0x88], 0
sub esp, 0xffffff80
ret
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ebx + 0x28]
cmp eax, ecx
jl 0x4768df
mov ebp, dword [ebx + 0x30]
test ebp, ebp
je 0x476adb
mov edx, dword [ebx + 0x24]
cmp edx, ecx
jb 0x477075
cmp eax, ecx
ja 0x477070
mov ebp, dword [ebx + 8]
mov esi, dword [ebp]
mov edi, dword [ebx + 0x1c]
sub edx, eax
mov dword [esp + 0x58], edx
sub ecx, eax
neg edx
sar edx, 0x1f
and eax, edx
add eax, edi
mov edi, dword [ebx + 0x30]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
test edi, edi
setne al
mov byte [esp + 0xc], al
mov edx, ebp
call esi
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x28], ebx
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x2c], ebp
test eax, eax
jne 0x476e9e
mov esi, dword [esp + 0x10]
mov dword [esp + 0x54], esi
test esi, esi
jge 0x4769f6
mov edi, dword [esp + 0x84]
mov eax, dword [edi + 0x30]
mov edx, dword [0x5a67f4]
mov esi, dword [0x5a67f0]
test eax, eax
je 0x4769ca
cmp dword [0x5a68d0], eax
je 0x476985
xor eax, eax
jmp 0x4769c6
mov dword [esp + 0x74], edx
mov dword [esp + 0x4c], esi
mov ecx, dword [edi + 0x34]
mov edx, dword [0x5a68d4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00404a10
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x84]
test al, al
je 0x4769eb
mov dword [edi + 0x30], esi
mov esi, dword [0x5e91b8]
test esi, esi
je 0x4769e8
mov eax, edi
call fcn.004691c0
mov dword [edi], edx
mov esi, dword [eax + 0x34]
mov dword [edi + 4], esi
mov edi, eax
mov dword [edi + 0x34], edx
mov esi, dword [esp + 0x54]
xor eax, eax
jmp 0x476aa5
mov edi, dword [esp + 0x84]
mov eax, dword [edi + 0x2c]
mov edx, dword [edi + 0x28]
sub eax, edx
cmp esi, eax
jle 0x476a9a
mov eax, dword [edi + 0x30]
mov edx, dword [0x5a67fc]
mov esi, dword [0x5a67f8]
test eax, eax
je 0x476a71
cmp dword [0x5a68d0], eax
je 0x476a2c
xor eax, eax
jmp 0x476a6d
mov dword [esp + 0x48], esi
mov dword [esp + 0x70], edx
mov ecx, dword [edi + 0x34]
mov edx, dword [0x5a68d4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00404a10
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x84]
test al, al
je 0x476a92
mov dword [edi + 0x30], esi
mov esi, dword [0x5e91b8]
test esi, esi
je 0x476a8f
mov eax, edi
call fcn.004691c0
mov dword [edi], edx
mov esi, dword [eax + 0x34]
mov dword [edi + 4], esi
mov edi, eax
mov dword [edi + 0x34], edx
mov esi, dword [esp + 0x54]
xor eax, eax
jmp 0x476aa5
lea eax, [esi + edx]
mov dword [edi + 0x28], eax
mov eax, 1
test al, al
je 0x476e92
mov dword [edi + 0x14], ebx
mov dword [edi + 0x18], ebp
mov ebx, dword [0x5e91b8]
test ebx, ebx
je 0x476ace
mov eax, edi
call fcn.004691c0
mov dword [edi], ecx
mov ebx, dword [eax + 0x10]
mov dword [edi + 4], ebx
mov edi, eax
mov dword [edi + 0x10], ecx
test ecx, ecx
jne 0x476e63
mov ebx, edi
mov ebp, dword [ebx + 0x30]
test ebp, ebp
jne 0x476e49
mov eax, dword [ebx + 0x28]
test eax, eax
jle 0x476b56
mov ecx, dword [ebx + 0x2c]
mov ebp, dword [ebx + 0x20]
cmp ebp, ecx
je 0x476b01
mov esi, ebp
shr ebp, 1
cmp eax, ebp
jle 0x476b56
mov ebp, esi
mov edx, dword [ebx + 0x24]
cmp edx, ecx
jb 0x47706b
cmp ecx, eax
jb 0x477066
mov esi, dword [ebx + 0x1c]
sub ecx, eax
sub edx, eax
neg edx
sar edx, 0x1f
and eax, edx
lea edx, [esi + eax]
cmp ebp, ecx
jg 0x476b2b
mov ecx, ebp
test eax, eax
je 0x476b46
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00469a70
mov ebx, dword [esp + 0x84]
mov edx, dword [ebx + 0x2c]
sub edx, dword [ebx + 0x28]
mov dword [ebx + 0x2c], edx
mov dword [ebx + 0x28], 0
mov edx, dword [ebx + 0x20]
cmp dword [ebx + 0x2c], edx
jne 0x476c3d
mov eax, dword [ebx + 0xc]
cmp eax, edx
jle 0x476dc8
cmp edx, 0x3fffffff
jg 0x476dc8
shl edx, 1
test edx, edx
jne 0x476b84
mov edx, 0x1000
cmp edx, eax
jg 0x476b8a
mov eax, edx
mov dword [esp + 0x30], eax
lea ecx, [0x4d6860]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.0044ece0
mov eax, dword [esp + 0x84]
mov edx, dword [eax + 0x24]
mov ecx, dword [eax + 0x2c]
cmp edx, ecx
jb 0x477061
mov ebx, dword [eax + 0x28]
cmp ecx, ebx
jb 0x47705a
mov ebp, dword [eax + 0x1c]
sub ecx, ebx
sub edx, ebx
neg edx
sar edx, 0x1f
and ebx, edx
lea edx, [ebp + ebx]
mov ebx, dword [esp + 0x30]
cmp ebx, ecx
jg 0x476be0
mov ecx, ebx
mov ebp, dword [esp + 0xc]
cmp ebp, edx
je 0x476c0b
mov dword [esp + 0x7c], ebp
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00469a70
mov eax, dword [esp + 0x84]
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x7c]
mov dword [eax + 0x20], ebx
mov dword [eax + 0x24], ebx
mov edx, dword [0x5e91b8]
test edx, edx
je 0x476c28
call fcn.004691c0
mov dword [edi], ebp
mov edx, dword [eax + 0x1c]
mov dword [edi + 4], edx
mov dword [eax + 0x1c], ebp
mov edx, dword [eax + 0x2c]
sub edx, dword [eax + 0x28]
mov dword [eax + 0x2c], edx
mov dword [eax + 0x28], 0
jmp 0x476c3f
mov eax, ebx
xor ecx, ecx
jmp 0x476fb9
mov ebp, dword [ebx + 0x30]
mov esi, dword [0x5a68dc]
mov edi, dword [0x5a68d8]
test ebp, ebp
je 0x476ca2
cmp dword [0x5a68d0], ebp
je 0x476c65
xor eax, eax
jmp 0x476c9a
mov dword [esp + 0x60], esi
mov dword [esp + 0x38], edi
mov eax, dword [ebx + 0x34]
mov ecx, dword [0x5a68d4]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00404a10
movzx eax, byte [esp + 0xc]
mov ebx, dword [esp + 0x84]
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x38]
test al, al
je 0x4768ca
mov dword [ebx + 0x30], edi
mov ebp, dword [0x5e91b8]
test ebp, ebp
je 0x476cbc
call fcn.004691c0
mov dword [edi], esi
mov ebp, dword [ebx + 0x34]
mov dword [edi + 4], ebp
mov dword [ebx + 0x34], esi
jmp 0x4768ca
mov dword [ebx + 0x38], 0
jmp 0x4768ca
mov esi, dword [ebx + 0x30]
nop
test esi, esi
je 0x476d21
cmp dword [0x5a68d0], esi
je 0x476ce4
xor eax, eax
jmp 0x476d19
mov dword [esp + 0x40], ebp
mov dword [esp + 0x68], ecx
mov eax, dword [ebx + 0x34]
mov ecx, dword [0x5a68d4]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00404a10
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x68]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x40]
test al, al
je 0x4768ca
mov dword [ebx + 0x30], ebp
mov ebp, dword [0x5e91b8]
test ebp, ebp
je 0x476d3b
call fcn.004691c0
mov dword [edi], ecx
mov ebp, dword [ebx + 0x34]
mov dword [edi + 4], ebp
mov dword [ebx + 0x34], ecx
jmp 0x4768ca
mov ebx, dword [esp + 0x84]
mov ebp, dword [ebx + 0x30]
mov esi, dword [0x5a6804]
mov edi, dword [0x5a6800]
test ebp, ebp
je 0x476da6
cmp dword [0x5a68d0], ebp
je 0x476d69
xor eax, eax
jmp 0x476d9e
mov dword [esp + 0x64], esi
mov dword [esp + 0x3c], edi
mov eax, dword [ebx + 0x34]
mov ecx, dword [0x5a68d4]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00404a10
movzx eax, byte [esp + 0xc]
mov ebx, dword [esp + 0x84]
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x3c]
test al, al
je 0x4768ca
mov dword [ebx + 0x30], edi
mov ebp, dword [0x5e91b8]
test ebp, ebp
je 0x476dc0
call fcn.004691c0
mov dword [edi], esi
mov ebp, dword [ebx + 0x34]
mov dword [edi + 4], ebp
mov dword [ebx + 0x34], esi
jmp 0x4768ca
mov eax, dword [ebx + 0x30]
mov ecx, dword [0x5a67ec]
mov edx, dword [0x5a67e8]
test eax, eax
je 0x476e20
cmp dword [0x5a68d0], eax
je 0x476de7
xor eax, eax
jmp 0x476e1c
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x44], edx
mov ecx, dword [ebx + 0x34]
mov edx, dword [0x5a68d4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00404a10
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x84]
test al, al
je 0x476e3d
mov dword [ebx + 0x30], edx
mov eax, dword [0x5e91b8]
test eax, eax
je 0x476e3a
call fcn.004691c0
mov dword [edi], ecx
mov eax, dword [ebx + 0x34]
mov dword [edi + 4], eax
mov dword [ebx + 0x34], ecx
mov byte [esp + 0x88], 0
sub esp, 0xffffff80
ret
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0
mov byte [esp + 0x88], 0
sub esp, 0xffffff80
ret
mov eax, dword [edi + 0x30]
test eax, eax
je 0x476e7f
test esi, esi
jg 0x476e7f
mov eax, dword [edi + 0x38]
inc eax
mov dword [edi + 0x38], eax
cmp eax, 0x64
jle 0x476e86
jmp 0x476f9d
mov dword [edi + 0x38], 0
mov byte [esp + 0x88], 1
sub esp, 0xffffff80
ret
mov byte [esp + 0x88], 0
sub esp, 0xffffff80
ret
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0x24]
mov dword [esp + 0x78], edx
cmp dword [0x5a6808], eax
jne 0x476f26
mov ecx, dword [0x5a680c]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00404a10
movzx eax, byte [esp + 0xc]
test al, al
je 0x476f1e
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x84]
mov dword [ecx + 0x14], eax
mov eax, dword [esp + 0x2c]
mov dword [ecx + 0x18], eax
mov eax, dword [0x5e91b8]
test eax, eax
jne 0x476ef6
mov eax, dword [esp + 0x5c]
jmp 0x476f07
call fcn.004691c0
mov eax, dword [esp + 0x5c]
mov dword [edi], eax
mov edx, dword [ecx + 0x10]
mov dword [edi + 4], edx
mov dword [ecx + 0x10], eax
mov byte [ecx + 0x3d], 1
test eax, eax
setne al
mov byte [esp + 0x88], al
sub esp, 0xffffff80
ret
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x78]
mov ecx, dword [esp + 0x84]
mov ebx, dword [ecx + 0x30]
nop
test ebx, ebx
je 0x476f74
cmp dword [0x5a68d0], ebx
je 0x476f41
xor ebx, ebx
jmp 0x476f70
mov eax, dword [ecx + 0x34]
mov edx, dword [0x5a68d4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00404a10
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x78]
mov ebx, eax
mov eax, dword [esp + 0x50]
test bl, bl
je 0x476f91
mov dword [ecx + 0x30], eax
mov eax, dword [0x5e91b8]
test eax, eax
je 0x476f8e
call fcn.004691c0
mov dword [edi], edx
mov eax, dword [ecx + 0x34]
mov dword [edi + 4], eax
mov dword [ecx + 0x34], edx
mov byte [esp + 0x88], 0
sub esp, 0xffffff80
ret
lea eax, [0x4d67e0]
mov dword [esp], eax
lea eax, [0x514564]
mov dword [esp + 4], eax
call fcn.00438070
mov eax, ebx
mov ecx, ebp
mov edx, dword [eax + 0x2c]
mov ebx, dword [eax + 0x20]
cmp edx, ebx
ja 0x477051
mov dword [esp + 0x34], ecx
mov ecx, dword [eax]
mov ebp, dword [eax + 4]
mov ecx, dword [ecx + 0x10]
mov esi, dword [eax + 0x1c]
mov edi, dword [eax + 0x24]
mov dword [esp], ebp
sub edi, edx
sub ebx, edx
mov ebp, edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, edx
lea edx, [edi + esi]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
call ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
test eax, eax
jl 0x476d43
mov ebx, dword [esp + 0x84]
mov ebp, dword [ebx + 0x20]
mov esi, dword [ebx + 0x2c]
sub ebp, esi
cmp eax, ebp
jg 0x476d4a
mov ebp, dword [esp + 0x14]
add esi, eax
mov dword [ebx + 0x2c], esi
test ebp, ebp
jne 0x476cd0
test eax, eax
jg 0x476cc4
mov ebp, dword [esp + 0x34]
inc ebp
cmp ebp, 0x64
jle 0x476fb5
jmp 0x476c46
mov eax, edx
mov ecx, ebx
call fcn.00469290
mov eax, ebx
call fcn.00469290
call fcn.00469270
call fcn.00469290
call fcn.00469270
call fcn.00469290
call fcn.00469270
nop
call fcn.00467db0
jmp fcn.00476890