Function at 0x476760
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5c
push ebx
mov ebx, ecx
xor eax, eax
push ebp
push esi
xor edx, edx
mov dword [esp + 0x24], ebx
or esi, 0xffffffff
mov dword [esp + 0xc], edx
push edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], eax
cmp dword [ebx + 0x4528], eax
jbe 0x476a34
lea ebp, [ebx + 0x452c]
lea edi, [ebx + 0x52c]
jmp 0x4767a0
mov dword [esp + 0x18], ebp
cmp esi, 0xffffffff
je 0x476816
mov ecx, dword [edi]
sub ecx, eax
mov dword [esp + 0x24], ecx
test ecx, ecx
jle 0x476816
lea eax, [ecx + esi]
mov dword [esp + 0x1c], eax
cmp dword [ebx + 0x145c8], eax
jae 0x4767f5
push eax
push dword [ebx + 0x145c4]
call fcn.004fe8c9
add esp, 8
mov dword [ebx + 0x145c4], eax
test eax, eax
jne 0x4767e7
mov ecx, 0x57f41c
call fcn.00466710
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
mov dword [ebx + 0x145c8], eax
mov eax, dword [esp + 0x70]
push ecx
mov eax, dword [eax]
add eax, dword [esp + 0x18]
push eax
mov eax, dword [ebx + 0x145c4]
add eax, esi
push eax
call fcn.004fa2e0
mov esi, dword [esp + 0x28]
add esp, 0xc
push 0x40
push 0
push ebp
call fcn.004fa860
mov ecx, dword [esp + 0x7c]
add esp, 0xc
mov eax, dword [edi]
mov edx, dword [edi - 4]
mov ecx, dword [ecx]
add ecx, eax
add eax, dword [esp + 0x78]
and eax, dword [ebx + 0x504]
mov dword [esp + 0x14], ecx
cmp edx, 6
ja case.0x476843.3
jmp dword [edx*4 + 0x476e40]
cmp edx, 2
sete al
movzx eax, al
push eax
mov eax, dword [ebx + 0x16608]
add eax, dword [edi]
push eax
push ebp
push dword [edi + 4]
push ecx
mov ecx, ebx
call fcn.00478570
jmp 0x4768b3
push eax
push dword [edi + 8]
push ebp
push dword [edi + 4]
push ecx
mov ecx, ebx
call fcn.00478170
jmp 0x4768b3
push eax
push ebp
push dword [edi + 4]
push ecx
mov ecx, ebx
call fcn.00478860
jmp 0x4768b3
push eax
push dword [edi + 8]
push ebp
push dword [edi + 4]
push ecx
mov ecx, ebx
call fcn.00478480
jmp 0x4768b3
mov eax, dword [ebx + 0x16608]
add eax, dword [edi]
push eax
push ebp
push dword [edi + 4]
push ecx
mov ecx, ebx
call fcn.00478660
mov ecx, dword [esp + 0x14]
cmp esi, 0xffffffff
je 0x4768c1
add dword [ebp + 0x34], esi
jmp 0x4768c6
mov eax, dword [edi]
add dword [ebp + 0x34], eax
mov edx, dword [esp + 0x18]
add ebp, 0x40
inc dword [esp + 0x10]
cmp dword [edx + 0x3c], ecx
jne 0x4768e1
cmp esi, 0xffffffff
je 0x476999
jmp 0x476939
cmp esi, 0xffffffff
jne 0x476939
mov esi, dword [edi]
test esi, esi
je 0x476937
cmp dword [ebx + 0x145c8], esi
jae 0x47691d
push esi
push dword [ebx + 0x145c4]
call fcn.004fe8c9
add esp, 8
mov dword [ebx + 0x145c4], eax
test eax, eax
jne 0x476917
mov ecx, 0x57f41c
call fcn.00466710
mov dword [ebx + 0x145c8], esi
mov eax, dword [esp + 0x70]
push dword [edi]
push dword [eax]
push dword [ebx + 0x145c4]
call fcn.004fa2e0
mov edx, dword [esp + 0x24]
add esp, 0xc
mov esi, dword [edi]
mov eax, dword [edx + 0x38]
add eax, esi
mov dword [esp + 0x24], eax
cmp dword [ebx + 0x145c8], eax
jae 0x47697b
push eax
push dword [ebx + 0x145c4]
call fcn.004fe8c9
add esp, 8
mov dword [ebx + 0x145c4], eax
test eax, eax
jne 0x47696d
mov ecx, 0x57f41c
call fcn.00466710
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x18]
mov dword [ebx + 0x145c8], eax
push dword [edx + 0x38]
mov eax, dword [ebx + 0x145c4]
push dword [edx + 0x3c]
add eax, esi
push eax
call fcn.004fa2e0
mov ecx, dword [esp + 0x24]
add esp, 0xc
add esi, dword [ecx + 0x38]
mov eax, dword [edi + 4]
mov edx, dword [esp + 0x20]
add eax, dword [edi]
inc edx
add edi, 0x10
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], edx
cmp edx, dword [ebx + 0x4528]
jb 0x4767a0
cmp esi, 0xffffffff
je 0x476a30
mov edi, dword [esp + 0x74]
mov edi, dword [edi]
sub edi, eax
test edi, edi
jle 0x476a1e
lea ebp, [edi + esi]
cmp dword [ebx + 0x145c8], ebp
jae 0x4769ff
push ebp
push dword [ebx + 0x145c4]
call fcn.004fe8c9
add esp, 8
mov dword [ebx + 0x145c4], eax
test eax, eax
jne 0x4769f9
mov ecx, 0x57f41c
call fcn.00466710
mov dword [ebx + 0x145c8], ebp
mov eax, dword [esp + 0x70]
push edi
mov eax, dword [eax]
add eax, dword [esp + 0x18]
push eax
mov eax, dword [ebx + 0x145c4]
add eax, esi
push eax
call fcn.004fa2e0
add esp, 0xc
mov esi, ebp
mov ecx, dword [esp + 0x70]
mov eax, dword [ebx + 0x145c4]
mov dword [ecx], eax
mov eax, dword [esp + 0x74]
mov dword [eax], esi
mov edx, dword [esp + 0x10]
lea ecx, [edx - 1]
xor esi, esi
mov dword [esp + 0x70], ecx
test ecx, ecx
jle 0x476af7
mov eax, ecx
lea ecx, [esi + 1]
mov edi, esi
cmp ecx, edx
jge 0x476aee
mov ebp, esi
lea edx, [ebx + 0x4564]
shl ebp, 6
mov eax, ecx
add ebp, 0x452c
shl eax, 6
add ebp, ebx
add edx, eax
mov ebx, dword [ebp + 0x34]
cmp dword [edx - 4], ebx
jne 0x476a89
mov eax, dword [edx]
cmp eax, dword [ebp + 0x38]
jne 0x476a89
mov edi, ecx
add edx, 0x40
inc ecx
cmp ecx, dword [esp + 0x10]
jl 0x476a71
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x74], edi
cmp edi, esi
je 0x476ae6
mov eax, edi
sub eax, esi
inc eax
cdq
sub eax, edx
sar eax, 1
test eax, eax
jle 0x476ae4
mov ecx, edi
lea edx, [ebx + 0x452c]
shl ecx, 6
add edx, ecx
mov esi, ebp
lea edi, [esp + 0x2c]
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
mov esi, edx
mov edi, ebp
mov ecx, 0x10
add ebp, 0x40
rep movsd dword es:[edi], dword [esi]
mov edi, edx
lea esi, [esp + 0x2c]
mov ecx, 0x10
sub edx, 0x40
rep movsd dword es:[edi], dword [esi]
sub eax, 1
jne 0x476ab0
mov edi, dword [esp + 0x74]
mov esi, edi
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x70]
inc esi
cmp esi, eax
jl 0x476a47
test edx, edx
jle 0x476e34
lea ebp, [ebx + 0x145cc]
lea esi, [ebx + 0x452c]
jmp 0x476b10
mov edi, dword [ebx + 0x145ac]
xor eax, eax
mov byte [esp + 0x74], 1
test edi, edi
jle 0x476b45
mov edx, dword [esi]
lea ecx, [ebx + 0x1452c]
lea esp, [esp]
cmp dword [ecx], edx
je 0x476b3e
inc eax
add ecx, 4
cmp eax, edi
jl 0x476b30
jmp 0x476b45
mov edi, eax
mov byte [esp + 0x74], 0
mov ecx, ebp
call fcn.0047f8f0
xor al, al
mov byte [esp + 0x70], al
cmp byte [ebx + 0x145b4], al
je 0x476b99
push 0
push 2
mov ecx, ebp
mov byte [esp + 0x78], 0x80
call fcn.0047fb20
push 0
push 4
mov ecx, ebp
call fcn.0047fb20
mov byte [esp + 0x74], 1
xor edi, edi
mov dword [ebx + 0x145ac], 0
mov dword [ebx + 0x145b0], 0
mov byte [ebx + 0x145b4], 0
jmp 0x476ba0
cmp byte [esp + 0x74], 0
je 0x476bb9
mov ecx, dword [ebx + 0x145ac]
mov eax, dword [esi]
mov dword [ebx + ecx*4 + 0x1452c], eax
inc dword [ebx + 0x145ac]
mov al, byte [esp + 0x70]
cmp edi, dword [ebx + 0x145b0]
je 0x476bd2
or al, 0x80
mov ecx, ebx
mov byte [esp + 0x70], al
lea eax, [edi + 1]
push eax
call fcn.0047b970
mov dword [ebx + 0x145b0], edi
mov eax, dword [esi + 0x34]
sub eax, dword [ebx + 0x165fc]
add eax, dword [ebx + 0x50c]
and eax, dword [ebx + 0x504]
cmp eax, 0x102
jb 0x476bfe
or byte [esp + 0x70], 0x40
sub eax, 0x102
push eax
mov ecx, ebx
call fcn.0047b970
cmp byte [esp + 0x74], 0
jne 0x476c19
mov eax, dword [ebx + edi*4 + 0x1456c]
cmp eax, dword [esi + 0x38]
je 0x476c28
push dword [esi + 0x38]
or byte [esp + 0x74], 0x20
mov ecx, ebx
call fcn.0047b970
mov eax, dword [esi + 0x38]
mov dword [ebx + edi*4 + 0x1456c], eax
mov al, byte [esi + 4]
test al, al
je 0x476c86
or byte [esp + 0x70], 0x10
mov ecx, ebp
movzx eax, al
push eax
push 7
call fcn.0047fb20
mov eax, 1
lea edi, [esi + 8]
rol eax, 0
mov ebp, 7
mov dword [esp + 0x78], eax
nop
test byte [esi + 4], al
je 0x476c72
push dword [edi]
mov ecx, ebx
call fcn.0047b970
mov eax, dword [esp + 0x78]
rol eax, 1
add edi, 4
mov dword [esp + 0x78], eax
sub ebp, 1
jne 0x476c60
lea ebp, [ebx + 0x145cc]
cmp byte [esp + 0x74], 0
je 0x476cb7
push dword [esi + 0x28]
mov ecx, ebx
call fcn.0047b970
xor edi, edi
cmp dword [esi + 0x28], edi
jle 0x476cb7
mov edi, edi
mov eax, dword [esi + 0x24]
mov ecx, ebp
movzx eax, byte [eax + edi]
push eax
push 8
call fcn.0047fb20
inc edi
cmp edi, dword [esi + 0x28]
jl 0x476ca0
mov eax, dword [esi + 0x30]
test eax, eax
je 0x476ce9
or byte [esp + 0x70], 8
mov ecx, ebx
push eax
call fcn.0047b970
xor edi, edi
cmp dword [esi + 0x30], edi
jle 0x476ce9
mov eax, dword [esi + 0x2c]
mov ecx, ebp
movzx eax, byte [eax + edi]
push eax
push 8
call fcn.0047fb20
inc edi
cmp edi, dword [esi + 0x30]
jl 0x476cd2
mov ecx, ebp
call fcn.0047f840
mov eax, dword [ebx + 0x145e0]
mov dword [esp + 0x74], eax
cmp eax, 6
ja 0x476d04
lea ecx, [eax - 1]
jmp 0x476d0f
cmp eax, 0x106
seta cl
add cl, 6
or cl, byte [esp + 0x70]
cmp dword [ebx + 0x51c], 2
mov byte [esp + 0x70], cl
jne 0x476dab
push dword [ebx + 0x1b208]
lea ebp, [ebx + 0x16614]
mov ecx, ebp
call fcn.00499b30
push 3
mov ecx, ebp
call fcn.00499b30
movzx eax, byte [esp + 0x70]
mov ecx, ebp
push eax
call fcn.00499b30
mov eax, dword [esp + 0x74]
cmp eax, 6
jbe 0x476d80
mov ecx, ebp
cmp eax, 0x106
ja 0x476d64
add eax, 0xfffffff9
jmp 0x476d76
shr eax, 8
push eax
call fcn.00499b30
mov edx, dword [esp + 0x74]
mov ecx, ebp
movzx eax, dl
push eax
call fcn.00499b30
mov eax, dword [esp + 0x74]
xor edi, edi
test eax, eax
je 0x476e20
lea ebx, [ebx]
mov eax, dword [ebx + 0x145dc]
mov ecx, ebp
movzx eax, byte [eax + edi]
push eax
call fcn.00499b30
inc edi
cmp edi, dword [esp + 0x74]
jb 0x476d90
jmp 0x476e20
add eax, 0x14
lea edi, [ebx + 0x1b2bc]
push eax
mov ecx, edi
call fcn.0045ce90
mov ecx, dword [edi + 0x10]
mov eax, dword [edi + 8]
mov dl, byte [esp + 0x70]
mov byte [eax + ecx*8 + 1], dl
mov edx, dword [esp + 0x74]
mov byte [eax + ecx*8], 7
mov dword [eax + ecx*8 + 4], edx
inc dword [edi + 0x10]
mov eax, dword [edi + 0x10]
cmp eax, dword [edi + 0xc]
jb 0x476de8
mov ecx, edi
call fcn.0045cad0
xor ebp, ebp
cmp dword [esp + 0x74], ebp
jbe 0x476e20
mov eax, dword [ebx + 0x145dc]
mov ecx, dword [edi + 0x10]
mov dl, byte [eax + ebp]
mov eax, dword [edi + 8]
mov byte [eax + ecx*8], 8
mov byte [eax + ecx*8 + 4], dl
inc dword [edi + 0x10]
mov eax, dword [edi + 0x10]
cmp eax, dword [edi + 0xc]
jb 0x476e19
mov ecx, edi
call fcn.0045cad0
inc ebp
cmp ebp, dword [esp + 0x74]
jb 0x476df0
add esi, 0x40
lea ebp, [ebx + 0x145cc]
sub dword [esp + 0x10], 1
jne 0x476b10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret 0xc