Function at 0x476f70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x5846bc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x477d97
sub esp, 0x74
mov eax, dword [esp + 0x80]
test eax, eax
je 0x476fa5
test eax, 0x200
jne 0x476fa5
lea ecx, [0x4d2180]
mov edx, dword [esp + 0x78]
jmp 0x476fd0
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00475e30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x58], edx
mov dword [esp + 0x30], ecx
mov ebx, dword [esp + 0x8c]
test ebx, ebx
je 0x476ffa
test ebx, 0x200
jne 0x476ffa
lea ebp, [0x4d2180]
mov esi, dword [esp + 0x84]
jmp 0x47703a
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00475e30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x8c]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x30]
cmp ebp, ecx
jne 0x477a38
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.00404990
movzx eax, byte [esp + 0xc]
test al, al
je 0x477a38
mov eax, dword [esp + 0x80]
mov ecx, eax
and eax, 0x1f
nop
cmp eax, 0x11
ja 0x477561
cmp eax, 0xc
ja 0x4773ad
cmp eax, 1
jne 0x477100
mov eax, dword [esp + 0x8c]
mov ecx, eax
and eax, 0x1f
nop
nop
mov edx, dword [esp + 0x7c]
movzx edx, byte [edx]
cmp eax, 1
je 0x4770c4
mov byte [esp + 0x23], dl
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00473e40
movzx edx, byte [esp + 0x23]
mov eax, dword [esp + 0x88]
cmp byte [eax], dl
je 0x4770f1
test dl, dl
je 0x4770e2
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
lea ecx, [eax - 2]
cmp ecx, 4
ja 0x477262
cmp eax, 3
ja 0x477137
cmp eax, 2
jne 0x477123
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x477177
mov ecx, dword [esp + 0x7c]
movsx eax, byte [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x477177
cmp eax, 4
jne 0x477150
mov ecx, dword [esp + 0x7c]
movsx eax, word [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x477177
cmp eax, 5
jne 0x477168
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x477177
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0x8c]
and edx, 0x1f
mov dword [esp + 0x44], edx
nop
cmp edx, 3
ja 0x4771c0
cmp edx, 2
jne 0x4771a6
mov edx, dword [esp + 0x88]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
mov ebp, ebx
mov ebx, edx
mov edx, ebp
jmp 0x477200
cmp edx, 3
jne 0x477d5c
mov ebx, dword [esp + 0x88]
movsx edx, byte [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x477200
cmp edx, 4
jne 0x4771d6
mov ebx, dword [esp + 0x88]
movsx edx, word [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x477200
cmp edx, 5
jne 0x4771eb
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x477200
cmp edx, 6
jne 0x477d5c
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
cmp eax, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setl bl
xchg esi, ebx
cmp ecx, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x477253
cmp ecx, edx
seta cl
cmp eax, ebx
setg al
and ecx, ebp
or eax, ecx
test al, al
je 0x477244
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 7
jb 0x477a47
cmp eax, 9
ja 0x47729a
cmp eax, 7
jne 0x47727f
mov eax, dword [esp + 0x7c]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x4772c1
cmp eax, 8
jne 0x47728f
mov ecx, dword [esp + 0x7c]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x4772c1
mov ecx, dword [esp + 0x7c]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x4772c1
cmp eax, 0xa
jne 0x4772a9
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x4772c1
cmp eax, 0xb
jne 0x4772b9
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x4772c1
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
xor ecx, ecx
mov edx, dword [esp + 0x8c]
and edx, 0x1f
mov dword [esp + 0x44], edx
nop
cmp edx, 9
ja 0x477311
cmp edx, 7
jne 0x4772e7
mov edx, dword [esp + 0x88]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x47734b
cmp edx, 8
jne 0x4772fa
mov ebx, dword [esp + 0x88]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x47734b
cmp edx, 9
jne 0x477d22
mov ebx, dword [esp + 0x88]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x47734b
cmp edx, 0xa
jne 0x477323
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x47734b
cmp edx, 0xb
jne 0x477336
mov ebx, dword [esp + 0x88]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x47734b
cmp edx, 0xc
jne 0x477d22
mov ebp, dword [esp + 0x88]
mov edx, dword [ebp]
xor ebx, ebx
cmp ecx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x47739e
cmp ecx, ebx
seta cl
cmp eax, edx
seta al
and eax, ebp
or ecx, eax
test cl, cl
je 0x47738f
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 0xe
ja 0x47744b
cmp eax, 0xd
jne 0x4773c9
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x4773d1
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
mov eax, dword [esp + 0x8c]
and eax, 0x1f
nop
cmp eax, 0xd
jne 0x4773f2
mov eax, dword [esp + 0x88]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x477406
cmp eax, 0xe
jne 0x477ce4
mov eax, dword [esp + 0x88]
movsd xmm1, qword [eax]
ucomisd xmm0, xmm0
jne 0x47740e
jnp 0x477415
mov eax, 0xffffffff
jmp 0x477440
ucomisd xmm1, xmm1
jne 0x47741d
jnp 0x477424
mov eax, 1
jmp 0x477440
ucomisd xmm1, xmm0
jbe 0x477431
mov eax, 0xffffffff
jmp 0x477440
ucomisd xmm0, xmm1
jbe 0x47743e
mov eax, 1
jmp 0x477440
xor eax, eax
mov dword [esp + 0x90], eax
add esp, 0x74
ret
lea edx, [eax - 0xf]
cmp edx, 1
ja 0x477551
cmp eax, 0xf
jne 0x477473
mov eax, dword [esp + 0x7c]
movss xmm0, dword [eax]
movss xmm1, dword [eax + 4]
cvtss2sd xmm0, xmm0
cvtss2sd xmm1, xmm1
jmp 0x477480
mov eax, dword [esp + 0x7c]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
mov eax, dword [esp + 0x8c]
and eax, 0x1f
nop
cmp eax, 0xf
jne 0x4774aa
mov eax, dword [esp + 0x88]
movss xmm2, dword [eax]
movss xmm3, dword [eax + 4]
cvtss2sd xmm2, xmm2
cvtss2sd xmm3, xmm3
jmp 0x4774c3
cmp eax, 0x10
jne 0x477ca6
mov eax, dword [esp + 0x88]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm0
jne 0x4774cb
jnp 0x4774d2
mov eax, 0xffffffff
jmp 0x4774fd
ucomisd xmm2, xmm2
jne 0x4774da
jnp 0x4774e1
mov eax, 1
jmp 0x4774fd
ucomisd xmm2, xmm0
jbe 0x4774ee
mov eax, 0xffffffff
jmp 0x4774fd
ucomisd xmm0, xmm2
jbe 0x4774fb
mov eax, 1
jmp 0x4774fd
xor eax, eax
test eax, eax
jne 0x477546
ucomisd xmm1, xmm1
jne 0x477509
jnp 0x477510
mov eax, 0xffffffff
jmp 0x47753b
ucomisd xmm3, xmm3
jne 0x477518
jnp 0x47751f
mov eax, 1
jmp 0x47753b
ucomisd xmm3, xmm1
jbe 0x47752c
mov eax, 0xffffffff
jmp 0x47753b
ucomisd xmm1, xmm3
jbe 0x477539
mov eax, 1
jmp 0x47753b
xor eax, eax
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], eax
add esp, 0x74
ret
cmp eax, 0x11
jne 0x477a47
xor eax, eax
jmp 0x477bba
cmp eax, 0x16
ja 0x4778bf
cmp eax, 0x12
je 0x4777e3
cmp eax, 0x14
je 0x477586
cmp eax, 0x16
je 0x4779b8
jmp 0x477a47
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.00477db0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4777d4
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x80]
mov dword [esp + 8], edx
call fcn.00474da0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x477606
test eax, 0x200
jne 0x477606
lea eax, [0x4d2180]
jmp 0x477622
mov edx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00475e30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x477629
mov eax, dword [eax + 4]
test eax, eax
je 0x477660
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ecx
mov eax, dword [esp + 0x64]
test eax, eax
je 0x477658
movzx ecx, byte [eax + 0xf]
nop
mov edx, ecx
and ecx, 0x1f
test dl, 0x20
jne 0x477652
or ecx, 0x80
mov edx, dword [esp + 0x68]
jmp 0x477666
xor ecx, ecx
xor eax, eax
xor edx, edx
jmp 0x477666
xor ecx, ecx
xor eax, eax
xor edx, edx
mov dword [esp + 0x48], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x4c], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
call fcn.00474da0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x4776b2
test eax, 0x200
jne 0x4776b2
lea eax, [0x4d2180]
jmp 0x4776ce
mov edx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00475e30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4776d5
mov eax, dword [eax + 4]
test eax, eax
je 0x47770c
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ecx
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x477704
movzx ecx, byte [eax + 0xf]
nop
mov edx, ecx
and ecx, 0x1f
test dl, 0x20
jne 0x4776fe
or ecx, 0x80
mov edx, dword [esp + 0x60]
jmp 0x477712
xor ecx, ecx
xor eax, eax
xor edx, edx
jmp 0x477712
xor ecx, ecx
xor eax, eax
xor edx, edx
mov ebx, dword [esp + 0x48]
mov dword [esp], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.00476f70
mov eax, dword [esp + 0x18]
test eax, eax
je 0x47774d
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.00474da0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x8c]
mov dword [esp + 8], ebx
call fcn.00474da0
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
call fcn.00476f70
mov eax, dword [esp + 0x18]
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov eax, dword [esp + 0x18]
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.00477db0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4778b0
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
call fcn.00475b00
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
call fcn.00475b00
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
ja 0x4778a1
jae 0x477892
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov eax, dword [esp + 0x18]
mov dword [esp + 0x90], eax
add esp, 0x74
ret
cmp eax, 0x18
jne 0x4779a3
mov eax, dword [esp + 0x8c]
mov ecx, eax
and eax, 0x1f
mov edx, dword [esp + 0x7c]
mov ebx, dword [edx]
mov dword [esp + 0x54], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x2c], edx
cmp eax, 0x18
jne 0x4778f8
mov eax, dword [esp + 0x88]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x477926
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00475d50
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x28], eax
mov dword [esp + 0x50], ecx
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00402ed0
mov eax, dword [esp + 0x10]
test eax, eax
jl 0x477994
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
call fcn.00402ed0
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x477985
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
cmp eax, 0x19
jne 0x4779af
xor eax, eax
jmp 0x477ac0
cmp eax, 0x1a
jne 0x477a47
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00475b00
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 8], ecx
call fcn.00475b00
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
ja 0x477a29
jae 0x477a1a
mov dword [esp + 0x90], 1
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov dword [esp + 0x90], 0xffffffff
add esp, 0x74
ret
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x80]
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x4b34a9]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x15
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044dd60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409f30
mov eax, dword [esp + 8]
lea ecx, [0x4a17c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434db0
mov edx, dword [esp + 0x38]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00475a50
mov eax, dword [esp + 0x38]
cmp dword [esp + 0xc], eax
jle 0x477b9d
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00474f50
mov eax, dword [esp + 0x10]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x38]
mov dword [esp + 0xc], edi
call fcn.00474f50
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x70]
mov dword [esp], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00476f70
mov eax, dword [esp + 0x18]
test eax, eax
je 0x477ab2
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov edx, dword [esp + 0x34]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004753e0
mov eax, dword [esp + 0x34]
cmp dword [esp + 0xc], eax
jle 0x477c97
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00475040
mov eax, dword [esp + 0x10]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebp, dword [esp + 0x88]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x34]
mov dword [esp + 0xc], edi
call fcn.00475040
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x70]
mov dword [esp], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00476f70
mov eax, dword [esp + 0x18]
test eax, eax
je 0x477bac
mov dword [esp + 0x90], eax
add esp, 0x74
ret
mov dword [esp + 0x90], 0
add esp, 0x74
ret
mov dword [esp + 0x44], eax
lea eax, [0x4a4ec0]
mov dword [esp], eax
call fcn.0040c6a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x4b3455]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x4a3120]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434db0
mov dword [esp + 0x44], eax
lea eax, [0x4a4ec0]
mov dword [esp], eax
call fcn.0040c6a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x4b2ab6]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x4a3120]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434db0
lea eax, [0x4a4ec0]
mov dword [esp], eax
call fcn.0040c6a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x4b26d7]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x4a3120]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434db0
lea eax, [0x4a4ec0]
mov dword [esp], eax
call fcn.0040c6a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x4b2373]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x4a3120]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434db0
nop
call fcn.004611e0
jmp fcn.00476f70