Function at 0x477ad0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5b8229
mov eax, dword fs:[0]
push eax
sub esp, 0x148
mov eax, dword [0x6b06f8]
xor eax, esp
mov dword [esp + 0x140], eax
push ebx
push esi
push edi
mov eax, dword [0x6b06f8]
xor eax, esp
push eax
lea eax, [esp + 0x158]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x70], eax
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [esp + 0x24]
push ecx
xor edi, edi
mov byte [esp + 0x23], 0
call fcn.004839a0
add esp, 8
mov dword [esp + 0x160], edi
mov eax, dword [esp + 0x20]
cmp dword [eax], edi
je 0x4784c4
cmp dword [eax + 4], edi
je 0x4784c4
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push ecx
mov esi, 0xf
push eax
lea ecx, [esp + 0x13c]
mov dword [esp + 0x154], esi
mov dword [esp + 0x150], edi
mov byte [esp + 0x140], 0
call fcn.0040af71
mov byte [esp + 0x160], 1
push 1
push 1
lea edx, [esp + 0x13c]
push edx
lea eax, [esp + 0x98]
push eax
call fcn.00478850
mov byte [esp + 0x160], 2
mov dword [esp + 0x130], esi
mov dword [esp + 0x12c], edi
mov byte [esp + 0x11c], 0
mov byte [esp + 0x160], 3
lea ecx, [esp + 0x118]
push ecx
lea esi, [esp + 0x90]
call fcn.00478e50
mov edx, dword [eax]
mov ecx, dword [edx + 4]
add ecx, eax
mov eax, dword [ecx + 8]
and al, 6
movsx edx, al
add esp, 4
neg edx
sbb edx, edx
not edx
test ecx, edx
je 0x478438
cmp dword [esp + 0x130], 0x10
mov eax, dword [esp + 0x11c]
jae 0x477c0c
lea eax, [esp + 0x11c]
push eax
lea eax, [esp + 0x18]
push eax
call fcn.00408420
mov byte [esp + 0x160], 4
push 0x67f5a8
lea eax, [esp + 0x18]
call fcn.0042f16b
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00575e7d
add esp, 4
lea edx, [esp + 0x3c]
push edx
mov esi, eax
call fcn.004137bf
mov byte [esp + 0x160], 5
push esi
lea ecx, [esp + 0x40]
call fcn.00478a90
cmp esi, edi
jbe 0x477d09
mov ebx, esi
jmp 0x477c70
lea eax, [esp + 0x118]
push eax
lea esi, [esp + 0x90]
call fcn.00478e50
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + eax + 8]
add ecx, eax
and dl, 6
movsx eax, dl
add esp, 4
neg eax
sbb eax, eax
not eax
test ecx, eax
je 0x477d00
cmp dword [esp + 0x130], 0x10
jb 0x477cbd
mov eax, dword [esp + 0x11c]
mov esi, eax
cmp eax, edi
jne 0x477cc4
xor eax, eax
jmp 0x477cd9
lea esi, [esp + 0x11c]
mov eax, esi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x477cd0
sub eax, edx
push eax
push esi
lea eax, [esp + 0x1c]
call fcn.0040b232
push 0x67f5a8
lea eax, [esp + 0x18]
call fcn.0042f16b
lea ecx, [esp + 0x14]
push ecx
lea eax, [esp + 0x40]
call fcn.00426d53
sub ebx, 1
jne 0x477c70
lea edx, [esp + 0x74]
push edx
call fcn.00482d80
mov byte [esp + 0x160], 6
lea eax, [esp + 0x118]
push eax
lea esi, [esp + 0x90]
call fcn.00478e50
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + eax + 8]
add ecx, eax
and dl, 6
movsx eax, dl
add esp, 4
neg eax
sbb eax, eax
not eax
test ecx, eax
je 0x478374
cmp dword [esp + 0x130], 0x10
jb 0x477db5
mov ebx, dword [esp + 0x11c]
test ebx, ebx
je 0x477d7b
mov esi, ebx
lea ecx, [esi + 1]
jmp 0x477d70
mov al, byte [esi]
inc esi
test al, al
jne 0x477d70
sub esi, ecx
jne 0x477de6
mov edx, dword [esp + 0x14]
cmp dword [edx - 0xc], 0
mov esi, dword [edx - 0x10]
lea eax, [edx - 0x10]
je 0x477e56
cmp dword [eax + 0xc], 0
lea ecx, [eax + 0xc]
jge 0x477dbe
cmp dword [edx - 8], 0
jl 0x47852f
mov dword [edx - 0xc], 0
mov ecx, dword [esp + 0x14]
mov byte [ecx], 0
jmp 0x477e56
lea ebx, [esp + 0x11c]
jmp 0x477d66
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477dd4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0xc]
mov ecx, esi
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
jmp 0x477e56
mov eax, dword [esp + 0x14]
mov ecx, dword [eax - 0xc]
mov dword [esp + 0x28], ecx
mov ecx, dword [eax - 8]
mov edx, 1
sub edx, dword [eax - 4]
mov edi, ebx
sub ecx, esi
sub edi, eax
or ecx, edx
jge 0x477e15
mov eax, esi
lea ecx, [esp + 0x14]
call fcn.0040d918
mov eax, dword [esp + 0x14]
mov ecx, dword [eax - 8]
push esi
cmp edi, dword [esp + 0x2c]
ja 0x477e2b
add edi, eax
push edi
push ecx
push eax
call fcn.0057380c
jmp 0x477e33
push ebx
push ecx
push eax
call fcn.005745c0
add esp, 0x10
test esi, esi
jl 0x47852f
mov eax, dword [esp + 0x14]
cmp esi, dword [eax - 8]
jg 0x47852f
mov dword [eax - 0xc], esi
mov edx, dword [esp + 0x14]
mov byte [esi + edx], 0
push 0x67f5a8
lea eax, [esp + 0x18]
call fcn.0042f16b
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], 0
jl 0x478336
push 0x67f5ac
push eax
call fcn.005757bc
add esp, 8
test eax, eax
je 0x478336
sub eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
cmp eax, 0xffffffff
je 0x478336
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, eax
call fcn.0042f21e
mov byte [esp + 0x160], 7
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x28]
push ecx
call fcn.00471230
add esp, 8
mov byte [esp + 0x160], 8
mov edx, dword [esp + 0x24]
mov eax, dword [edx]
movzx eax, word [eax]
mov ecx, dword [esp + 0x4c]
sub ecx, dword [esp + 0x48]
movzx esi, al
shr eax, 8
sar ecx, 2
mov dword [esp + 0x60], eax
cmp esi, ecx
jb 0x477ef3
call fcn.0057451a
mov edx, dword [esp + 0x48]
mov esi, dword [edx + esi*4]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
sub esi, 0x10
call edx
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x477f21
cmp eax, dword [esi]
jne 0x477f21
mov edi, esi
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x477f55
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x478539
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
inc eax
push eax
add esi, 0x10
push esi
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.005745c0
add esp, 0x10
add edi, 0x10
mov dword [esp + 0x38], edi
mov byte [esp + 0x160], 0xa
mov edx, dword [0x6c7718]
mov eax, dword [edx + 0xc]
mov ecx, 0x6c7718
call eax
lea ebx, [eax + 0x10]
mov dword [esp + 0x1c], ebx
mov byte [esp + 0x160], 0xc
mov eax, dword [esp + 0x60]
test eax, eax
jne 0x47800e
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0x58]
push edx
inc ecx
lea edx, [esp + 0x18]
call fcn.0042f1e8
mov byte [esp + 0x160], 0xd
mov ecx, dword [eax]
lea eax, [ecx - 0x10]
lea esi, [ebx - 0x10]
cmp eax, esi
je 0x477ffd
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x477feb
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x477feb
call fcn.0040b2a1
mov ebx, eax
or eax, 0xffffffff
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x477fe2
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
add ebx, 0x10
mov dword [esp + 0x1c], ebx
jmp 0x477ffd
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea eax, [esp + 0x24]
call fcn.0040b232
mov ebx, dword [esp + 0x1c]
mov byte [esp + 0x160], 0xc
mov eax, dword [esp + 0x58]
jmp 0x478197
push eax
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x7c]
call fcn.00483140
mov byte [esp + 0x160], 0xf
mov edx, dword [esp + 0x2c]
cmp dword [edx - 0xc], 0
je 0x47818b
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x64]
inc ecx
push eax
lea edx, [esp + 0x18]
call fcn.0042f1e8
mov edi, eax
mov byte [esp + 0x160], 0x10
mov ecx, dword [esp + 0x2c]
push ecx
lea edx, [esp + 0x6c]
push edx
call fcn.00470550
mov byte [esp + 0x168], 0x11
lea ecx, [esp + 0x64]
push 0x67f5ac
push ecx
mov esi, eax
call fcn.004135f4
mov byte [esp + 0x170], 0x12
lea edx, [esp + 0x64]
push edi
push edx
mov esi, eax
call fcn.004135a2
add esp, 0x18
mov byte [esp + 0x160], 0x13
mov ecx, dword [eax]
lea eax, [ecx - 0x10]
lea esi, [ebx - 0x10]
cmp eax, esi
je 0x4780eb
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x4780d9
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x4780d9
call fcn.0040b2a1
mov ebx, eax
or eax, 0xffffffff
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x4780d0
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
add ebx, 0x10
mov dword [esp + 0x1c], ebx
jmp 0x4780eb
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea eax, [esp + 0x24]
call fcn.0040b232
mov ebx, dword [esp + 0x1c]
mov byte [esp + 0x160], 0x12
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x478113
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x160], 0x11
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47813b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x160], 0x10
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x478163
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x160], 0xf
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47818b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x160], 0xc
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4781b3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [ebx - 0xc], 0
je 0x478277
mov ecx, dword [esp + 0x70]
mov eax, dword [ecx + 0x14]
mov esi, dword [eax]
mov eax, dword [ecx]
test eax, eax
jne 0x478270
call fcn.0057451a
xor eax, eax
cmp esi, dword [eax + 0x14]
jne 0x4781e1
call fcn.0057451a
mov esi, dword [esi + 8]
lea ecx, [esp + 0x30]
push ebx
push ecx
call fcn.00470690
mov edi, eax
mov byte [esp + 0x168], 0x19
mov edx, dword [esp + 0x40]
push edx
lea eax, [esp + 0x78]
push eax
call fcn.00470690
add esp, 0x10
mov byte [esp + 0x160], 0x1a
mov edx, dword [esi]
push edi
push eax
mov eax, dword [edx + 4]
mov ecx, esi
call eax
mov byte [esp + 0x160], 0x19
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x478246
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x160], 0xc
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47827f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x47827f
mov eax, dword [eax]
jmp 0x4781d7
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [esp + 0x160], 0xa
add ebx, 0xfffffff0
lea ecx, [ebx + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4782a3
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebx
call edx
mov byte [esp + 0x160], 8
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4782cb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x160], 7
mov eax, dword [esp + 0x24]
dec dword [eax + 8]
mov esi, eax
add eax, 8
xor edi, edi
cmp dword [eax], edi
jne 0x47830c
cmp dword [esi + 4], edi
je 0x4782fb
mov eax, dword [esi]
push edi
push eax
call fcn.005765a8
add esp, 8
mov dword [esi], eax
mov dword [esi + 4], edi
mov ecx, dword [esp + 0x24]
push ecx
call fcn.00573721
add esp, 4
mov dword [esp + 0x24], edi
mov byte [esp + 0x160], 6
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x47833e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x47833e
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0x118]
push ecx
lea esi, [esp + 0x90]
call fcn.00478e50
mov edx, dword [eax]
mov ecx, dword [edx + 4]
add ecx, eax
mov eax, dword [ecx + 8]
and al, 6
movsx edx, al
add esp, 4
neg edx
sbb edx, edx
not edx
test ecx, edx
jne 0x477d51
xor edi, edi
mov byte [esp + 0x1b], 1
mov byte [esp + 0x160], 5
lea eax, [esp + 0x74]
push eax
call fcn.00482450
mov bl, 0x21
mov byte [esp + 0x160], bl
mov esi, dword [esp + 0x48]
cmp esi, edi
je 0x4783ef
mov eax, dword [esp + 0x4c]
mov edi, eax
mov dword [esp + 0x30], esi
cmp esi, eax
je 0x4783e4
lea ebx, [ebx]
mov byte [esp + 0x160], bl
mov eax, dword [esi]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4783d5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add esi, 4
mov dword [esp + 0x30], esi
cmp esi, edi
jne 0x4783b0
mov esi, dword [esp + 0x48]
push esi
call fcn.00573721
add esp, 4
xor edi, edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov byte [esp + 0x160], 4
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.00573721
add esp, 4
mov byte [esp + 0x160], 3
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x478438
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x160], 2
mov ebx, 0x10
cmp dword [esp + 0x130], ebx
jb 0x47845e
mov ecx, dword [esp + 0x11c]
push ecx
call fcn.00573721
add esp, 4
mov esi, 0xf
mov dword [esp + 0x130], esi
mov dword [esp + 0x12c], edi
mov byte [esp + 0x11c], 0
mov byte [esp + 0x160], 1
lea ecx, [esp + 0x8c]
call fcn.00476f00
mov byte [esp + 0x160], 0
cmp dword [esp + 0x14c], ebx
jb 0x4784ae
mov edx, dword [esp + 0x138]
push edx
call fcn.00573721
add esp, 4
mov dword [esp + 0x14c], esi
mov dword [esp + 0x148], edi
mov byte [esp + 0x138], 0
mov dword [esp + 0x160], 0xffffffff
mov esi, dword [esp + 0x20]
dec dword [esi + 8]
cmp dword [esi + 8], edi
lea eax, [esi + 8]
jne 0x478505
cmp dword [esi + 4], edi
je 0x4784f4
mov eax, dword [esi]
push edi
push eax
call fcn.005765a8
add esp, 8
mov dword [esi], eax
mov dword [esi + 4], edi
mov eax, dword [esp + 0x20]
push eax
call fcn.00573721
add esp, 4
mov dword [esp + 0x20], edi
mov al, byte [esp + 0x1b]
mov ecx, dword [esp + 0x158]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x140]
xor ecx, esp
call fcn.0057372c
mov esp, ebp
pop ebp
ret 8
push 0x80070057
call fcn.00402d79
call fcn.0040b3d4
int3