Function at 0x4766d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5c
cmp dword [esp + 0x68], 0xffffffff
push ebx
push ebp
mov ebp, dword [esp + 0x6c]
push esi
push edi
mov dword [esp + 0x20], ecx
mov dword [esp + 0x18], 0
jne 0x476706
mov eax, ebp
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4766f3
sub eax, edx
sar eax, 1
mov dword [esp + 0x78], eax
mov ebx, dword [esp + 0x7c]
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
mov edi, dword [esp + 0x70]
mov edx, dword [edi]
mov edx, dword [edx + 0x58]
mov dword [esp + 0x34], eax
lea eax, [esp + 0x3c]
push eax
push 1
mov dword [esp + 0x40], ecx
push 0x5d6828
mov ecx, edi
call edx
mov eax, dword [esp + 0x40]
mov ecx, dword [ebx + 8]
mov dword [esp + 0x1c], eax
mov eax, dword [ebx]
mov dword [esp + 0x28], ecx
sub ecx, eax
cmp dword [esp + 0x78], 0
mov dword [ebx + 8], eax
mov eax, ebp
mov dword [esp + 0x30], ecx
mov esi, ebp
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], 0
jle 0x4769d6
jmp 0x476770
mov ecx, dword [esp + 0x20]
cmp dword [ecx + 0x180], 0
push ebp
setne byte [esp + 0x14]
call dword [sym.imp.USER32.dll_CharNextW]
cmp byte [esp + 0x10], 0
mov edi, eax
je 0x4767a8
mov eax, ebp
call fcn.00476120
cmp eax, ebp
ja 0x4767a6
mov eax, ebp
call fcn.00476180
cmp eax, ebp
jbe 0x4767a8
mov edi, eax
movzx eax, word [ebp]
cmp ax, 0xa
jne 0x476830
test edi, edi
je 0x476830
cmp dword [esp + 0x14], esi
jbe 0x476811
mov edx, dword [esp + 0x80]
test edx, 0x400
jne 0x476811
mov eax, dword [ebx]
mov ecx, dword [esp + 0x28]
push edx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x20]
add ecx, eax
lea edx, [esp + 0x50]
push edx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x7c]
sub edx, esi
sub esi, eax
sar edx, 1
sar esi, 1
push edx
lea eax, [eax + esi*2]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x7c]
push eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x54]
call edx
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x184]
add ecx, dword [esp + 0x1c]
mov edx, dword [ebx]
add dword [esp + 0x38], ecx
mov dword [esp + 0x34], edx
mov esi, edi
jmp 0x4769aa
mov ecx, dword [esp + 0x20]
cmp dword [ecx + 0x180], 0
je 0x476860
cmp ax, 0x20
jne 0x476860
mov edx, dword [esp + 0x34]
cmp edx, dword [ebx]
jne 0x476860
mov eax, dword [esp + 0x24]
test eax, eax
je 0x476859
cmp word [eax], 0x20
je 0x476860
mov esi, edi
jmp 0x4769a2
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx]
mov edx, dword [edx + 0x58]
lea eax, [esp + 0x3c]
push eax
mov eax, edi
sub eax, ebp
sar eax, 1
push eax
push ebp
call edx
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x3c]
lea edx, [eax + ecx]
mov ecx, dword [esp + 0x28]
cmp edx, ecx
jle 0x476983
cmp dword [esp + 0x14], esi
jbe 0x47691b
test dword [esp + 0x80], 0x400
mov edi, dword [esp + 0x38]
jne 0x4768f1
mov eax, dword [ebx]
push dword [esp + 0x80]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
push eax
mov eax, dword [esp + 0x1c]
sub eax, esi
sar eax, 1
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x80]
add ecx, edi
sub esi, eax
mov dword [esp + 0x74], ecx
mov ecx, dword [esp + 0x7c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x54]
sar esi, 1
lea eax, [eax + esi*2]
push eax
mov dword [esp + 0x70], edi
call edx
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x184]
add ecx, dword [esp + 0x1c]
add edi, ecx
cmp edi, dword [ebx + 0xc]
jg 0x4769c6
mov edx, dword [ebx]
mov esi, ebp
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], edx
jmp 0x4769b6
xor eax, eax
mov ebx, ebp
mov dword [esp + 0x3c], eax
cmp ebp, edi
jae 0x47697f
push ebx
call dword [sym.imp.USER32.dll_CharNextW]
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx]
mov edx, dword [edx + 0x58]
mov dword [esp + 0x24], eax
lea ecx, [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x74]
sub eax, ebx
sar eax, 1
push eax
push ebx
call edx
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x3c]
lea ecx, [edx + eax]
cmp ecx, dword [esp + 0x30]
jg 0x47696d
mov ebx, dword [esp + 0x24]
mov eax, ecx
mov dword [esp + 0x3c], eax
cmp ebx, edi
jb 0x476927
jmp 0x47697f
cmp ebx, ebp
jne 0x47697d
mov edi, dword [esp + 0x24]
mov eax, edx
mov dword [esp + 0x3c], eax
jmp 0x47697f
mov edi, ebx
mov ebx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x34]
add ecx, eax
cmp ecx, dword [ebx + 8]
mov dword [esp + 0x34], ecx
jle 0x4769a2
test dword [esp + 0x80], 0x400
je 0x4769a2
mov dword [ebx + 8], ecx
mov dword [esp + 0x14], edi
mov dword [esp + 0x24], ebp
mov eax, edi
sub eax, ebp
sar eax, 1
add dword [esp + 0x18], eax
mov ebp, edi
mov ecx, dword [esp + 0x18]
cmp ecx, dword [esp + 0x78]
jl 0x476770
jmp 0x4769ca
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x74]
mov edi, dword [esp + 0x70]
mov edx, dword [esp + 0x80]
test edx, 0x400
je 0x476a01
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x1c]
add eax, edx
cmp dword [ebx + 0xc], eax
jle 0x476a42
pop edi
pop esi
pop ebp
mov dword [ebx + 0xc], eax
pop ebx
add esp, 0x5c
ret 0x14
cmp eax, esi
jbe 0x476a42
mov ecx, dword [ebx]
mov ebx, dword [esp + 0x28]
push edx
mov dword [esp + 0x68], ebx
mov ebx, dword [esp + 0x20]
sub eax, esi
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x3c]
add ebx, ecx
lea edx, [esp + 0x60]
push edx
sar eax, 1
sub esi, ebp
push eax
sar esi, 1
mov dword [esp + 0x74], ebx
mov ebx, dword [edi]
mov edx, dword [ebx + 0x54]
lea eax, [ebp + esi*2]
mov dword [esp + 0x6c], ecx
push eax
mov ecx, edi
call edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret 0x14