Function at 0x476800
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x5d8d34]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x477094
sub esp, 0x70
mov edx, dword [esp + 0x88]
test edx, edx
sete bl
mov ebp, dword [esp + 0x8c]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x47683f
xor eax, eax
jmp 0x476846
mov eax, dword [esp + 0x90]
mov ebx, dword [esp + 0x94]
mov ebx, dword [ebx]
lea ecx, [ebx - 0x3c]
neg ecx
mov ebx, edx
shl edx, cl
mov dword [esp + 0x60], edx
shl ebp, cl
lea esi, [ecx - 0x20]
mov edi, ecx
mov ecx, esi
shl ebx, cl
neg ecx
mov edx, dword [esp + 0x88]
shr edx, cl
cmp esi, 0x20
sbb esi, esi
and ebx, esi
cmp ecx, 0x20
sbb esi, esi
and edx, esi
cmp edi, 0x20
sbb esi, esi
and ebp, esi
or ebp, edx
mov edx, dword [esp + 0x60]
and edx, esi
or ebp, ebx
jmp 0x47689f
shl ebp, 1
mov ebx, edx
shr ebx, 0x1f
or ebp, ebx
shl edx, 1
dec eax
test ebp, ebp
setne bl
test edx, edx
xchg esi, ebx
setne bl
xchg esi, ebx
or ebx, esi
test bl, bl
je 0x4768c3
test ebp, 0x10000000
sete bl
and ebx, 1
test bl, bl
jne 0x476893
mov ecx, dword [esp + 0x80]
cmp ecx, 0xf
jae 0x476a38
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], eax
mov ebx, ecx
shl ebx, 2
mov ecx, ebx
mov edi, edx
shl edx, cl
mov dword [esp + 0x60], edx
shl ebp, cl
mov dword [esp + 0x50], ebp
lea esi, [ecx - 0x20]
mov ecx, esi
shl edi, cl
neg ecx
mov dword [esp + 0x4c], ecx
mov ebp, dword [esp + 0x58]
shr ebp, cl
mov dword [esp + 0x48], ebp
lea eax, [ebx - 0x3c]
neg eax
mov ecx, eax
mov ebp, dword [esp + 0x58]
shr ebp, cl
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x5c]
shr ebp, cl
mov dword [esp + 0x44], ebp
lea ebp, [eax - 0x20]
mov dword [esp + 0x40], ebp
mov ecx, ebp
mov edx, dword [esp + 0x5c]
shr edx, cl
mov dword [esp + 0x3c], edx
neg ecx
mov edx, dword [esp + 0x5c]
shl edx, cl
cmp esi, 0x20
sbb esi, esi
and edi, esi
cmp ebx, 0x20
sbb ebx, ebx
mov esi, dword [esp + 0x60]
and esi, ebx
mov dword [esp + 0x60], esi
mov esi, dword [esp + 0x50]
and esi, ebx
mov ebx, dword [esp + 0x4c]
cmp ebx, 0x20
sbb ebx, ebx
mov ebp, dword [esp + 0x48]
and ebp, ebx
or esi, ebp
or esi, edi
and esi, 0xfffffff
cmp ecx, 0x20
sbb ebx, ebx
mov dword [esp + 0x5c], ebx
and edx, ebx
cmp eax, 0x20
sbb ebp, ebp
mov dword [esp + 0x50], ebp
mov edi, dword [esp + 0x58]
and edi, ebp
or edx, edi
mov edi, dword [esp + 0x44]
and edi, ebp
mov ebx, dword [esp + 0x40]
cmp ebx, 0x20
sbb ebx, ebx
mov dword [esp + 0x58], ebx
mov ebp, dword [esp + 0x3c]
and ebp, ebx
or edx, ebp
mov ebp, edx
and edx, 1
mov ebx, dword [esp + 0x60]
or edx, ebx
test edx, edx
seta dl
cmp esi, 0x8000000
seta bl
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, edx
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x4769dd
add ebp, 1
adc edi, 0
mov edx, ecx
mov ecx, eax
shl edi, cl
mov ebx, dword [esp + 0x50]
and edi, ebx
mov ecx, edx
mov esi, ebp
shr ebp, cl
mov edx, dword [esp + 0x5c]
and ebp, edx
or ebp, edi
mov ecx, eax
mov edx, esi
shl esi, cl
mov ecx, dword [esp + 0x40]
shl edx, cl
mov edi, dword [esp + 0x58]
and edx, edi
or edx, ebp
and esi, ebx
test edx, 0x20000000
je 0x476a29
shr esi, 1
mov ecx, edx
shl ecx, 0x1f
or esi, ecx
shr edx, 1
mov ecx, dword [esp + 0x54]
lea eax, [ecx + 1]
jmp 0x476a2d
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x80]
mov ebp, edx
mov edx, esi
movzx ebx, byte [esp + 0x84]
cmp bl, 0x58
jne 0x476a4d
lea esi, [0x4edc71]
jmp 0x476a53
lea esi, [0x4ed781]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], edx
mov dword [esp + 0x64], esi
mov dword [esp + 0x54], eax
movzx edi, byte [esp + 0x85]
xchg edi, eax
test al, al
xchg edi, eax
je 0x476aee
mov edi, dword [esp + 0x78]
inc edi
mov esi, dword [esp + 0x7c]
cmp esi, edi
jb 0x476a90
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x28]
jmp 0x476ae3
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4d3800]
mov dword [esp + 0x10], eax
call fcn.00467eb0
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x5c]
movzx ebx, byte [esp + 0x84]
mov ebp, dword [esp + 0x60]
mov dword [esp + 0x6c], eax
mov esi, ecx
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x80]
mov ecx, dword [esp + 0x6c]
mov byte [edi + ecx - 1], 0x2d
jmp 0x476afa
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0x78]
mov ecx, dword [esp + 0x74]
add edi, 3
cmp esi, edi
jae 0x476b43
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 3
lea eax, [0x4d3800]
mov dword [esp + 0x10], eax
call fcn.00467eb0
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x5c]
movzx ebx, byte [esp + 0x84]
mov ebp, dword [esp + 0x60]
mov byte [edi + ecx - 3], 0x30
mov byte [edi + ecx - 2], bl
shr ebp, 0x1c
and ebp, 1
add ebp, 0x30
xchg ebp, eax
mov byte [edi + ecx - 1], al
xchg ebp, eax
mov ebp, dword [esp + 0x60]
shl ebp, 4
shr edx, 0x1c
or edx, ebp
mov dword [esp + 0x60], edx
mov ebp, dword [esp + 0x5c]
shl ebp, 4
mov dword [esp + 0x5c], ebp
mov ebx, dword [esp + 0x80]
test ebx, ebx
jge 0x476be6
test edx, edx
setne al
test ebp, ebp
setne dl
or edx, eax
test dl, dl
je 0x476bdc
lea edx, [edi + 1]
cmp esi, edx
jae 0x476bca
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4d3800]
mov dword [esp + 0x10], eax
call fcn.00467eb0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebp, dword [esp + 0x5c]
mov byte [edx + ecx - 1], 0x2e
mov ebx, dword [esp + 0x64]
mov edi, dword [esp + 0x60]
jmp 0x477014
test ebx, ebx
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x60]
jle 0x476c38
inc edi
cmp esi, edi
jae 0x476c2e
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4d3800]
mov dword [esp + 0x10], eax
call fcn.00467eb0
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x5c]
mov byte [edi + ecx - 1], 0x2e
jmp 0x476f8c
movzx edx, byte [esp + 0x84]
mov ebx, edx
or edx, 0x20
cmp bl, dl
jne 0x476c50
mov edx, 0x70
jmp 0x476c55
mov edx, 0x50
lea ebx, [edi + 1]
cmp esi, ebx
jae 0x476c97
mov byte [esp + 0x22], dl
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4d3800]
mov dword [esp + 0x10], eax
call fcn.00467eb0
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
movzx edx, byte [esp + 0x22]
mov byte [ebx + ecx - 1], dl
test eax, eax
jge 0x476ca8
neg eax
mov edx, 0x2d
jmp 0x476cad
mov edx, 0x2b
mov dword [esp + 0x54], eax
inc ebx
cmp esi, ebx
jae 0x476cf1
mov byte [esp + 0x22], dl
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4d3800]
mov dword [esp + 0x10], eax
call fcn.00467eb0
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
movzx edx, byte [esp + 0x22]
mov byte [ebx + ecx - 1], dl
cmp eax, 0x64
jge 0x476d72
lea edx, [ebx + 2]
mov ebx, eax
mov eax, 0xcccccccd
mov ebp, edx
imul ebx
add edx, ebx
sar edx, 3
mov edi, ebx
sar ebx, 0x1f
sub edx, ebx
lea ebx, [edx + edx*4]
shl ebx, 1
sub edi, ebx
cmp esi, ebp
jae 0x476d5f
mov dword [esp + 0x54], edx
mov dword [esp + 0x38], edi
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x4d3800]
mov dword [esp + 0x10], eax
call fcn.00467eb0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x38]
mov ebp, edx
mov edx, dword [esp + 0x54]
lea eax, [edx + 0x30]
mov byte [ebp + ecx - 2], al
lea eax, [edi + 0x30]
mov byte [ebp + ecx - 1], al
jmp 0x476f51
mov dword [esp + 0x68], ecx
cmp eax, 0x3e8
jge 0x476e4b
lea edx, [ebx + 3]
mov dword [esp + 0x54], edx
mov ebx, eax
mov eax, 0xcccccccd
imul ebx
add edx, ebx
mov edi, edx
sar edx, 3
mov dword [esp + 0x38], edx
mov eax, 0xcccccccd
imul edx
sar edi, 0x1f
mov ecx, dword [esp + 0x38]
add edx, ecx
sar edx, 3
sub edx, edi
lea edx, [edx + edx*4]
shl edx, 1
mov dword [esp + 0x38], edx
lea edi, [ecx + ecx*4]
shl edi, 1
mov eax, ebx
mov ebp, 0x51eb851f
imul ebp
mov ebp, dword [esp + 0x38]
sub ecx, ebp
sub ebx, edi
mov ebp, dword [esp + 0x54]
cmp esi, ebp
jb 0x476dde
mov eax, dword [esp + 0x68]
jmp 0x476e2c
mov dword [esp + 0x54], edx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 3
lea eax, [0x4d3800]
mov dword [esp + 0x10], eax
call fcn.00467eb0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x38]
mov ebp, edx
mov eax, ecx
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x54]
sar edx, 5
add edx, 0x30
mov byte [ebp + eax - 3], dl
lea edx, [ecx + 0x30]
mov byte [ebp + eax - 2], dl
lea edx, [ebx + 0x30]
mov byte [ebp + eax - 1], dl
mov ecx, eax
jmp 0x476f51
lea edx, [ebx + 4]
mov dword [esp + 0x38], edx
mov ebx, 0x51eb851f
imul ebx
sar edx, 5
mov dword [esp + 0x34], edx
movzx ebx, dl
imul ebx, ebx, 0x19a
shr ebx, 0xc
lea ebx, [ebx + ebx*4]
shl ebx, 1
mov eax, 0xcccccccd
mov edi, dword [esp + 0x54]
imul edi
add edx, edi
mov eax, edx
sar edx, 0x1f
mov dword [esp + 0x54], edx
sar eax, 3
mov dword [esp + 0x30], eax
mov eax, 0xcccccccd
mov ecx, dword [esp + 0x30]
imul ecx
add edx, ecx
sar edx, 3
mov ebp, dword [esp + 0x54]
sub edx, ebp
lea edx, [edx + edx*4]
shl edx, 1
mov dword [esp + 0x54], edx
lea ebp, [ecx + ecx*4]
shl ebp, 1
mov eax, 0x4189374c
imul edi
mov eax, edx
mov edx, dword [esp + 0x34]
sub edx, ebx
mov ebx, dword [esp + 0x54]
sub ecx, ebx
sub edi, ebp
mov ebx, dword [esp + 0x38]
cmp esi, ebx
jb 0x476ed7
mov ebp, dword [esp + 0x68]
jmp 0x476f2e
mov dword [esp + 0x54], edi
mov byte [esp + 0x23], dl
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 4
lea eax, [0x4d3800]
mov dword [esp + 0x10], eax
call fcn.00467eb0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x54]
mov ebx, edx
mov ebp, ecx
mov ecx, dword [esp + 0x34]
movzx edx, byte [esp + 0x23]
sar eax, 8
add eax, 0x30
mov byte [ebx + ebp - 4], al
lea eax, [edx + 0x30]
mov byte [ebx + ebp - 3], al
lea eax, [ecx + 0x30]
mov byte [ebx + ebp - 2], al
lea eax, [edi + 0x30]
mov byte [ebx + ebp - 1], al
mov ecx, ebp
mov ebp, ebx
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], ebp
mov dword [esp + 0xa0], esi
add esp, 0x70
ret
mov byte [edi + ecx - 1], dl
mov edx, dword [esp + 0x60]
shl edx, 4
shr ebp, 0x1c
mov eax, dword [esp + 0x24]
dec eax
or edx, ebp
mov ebp, dword [esp + 0x5c]
shl ebp, 4
mov ebx, eax
mov eax, dword [esp + 0x54]
test ebx, ebx
jle 0x476c38
mov dword [esp + 0x24], ebx
mov dword [esp + 0x60], edx
mov dword [esp + 0x5c], ebp
inc edi
shr edx, 0x1c
and edx, 0xf
mov ebx, dword [esp + 0x64]
movzx edx, byte [ebx + edx]
cmp esi, edi
jae 0x476f6a
mov byte [esp + 0x23], dl
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4d3800]
mov dword [esp + 0x10], eax
call fcn.00467eb0
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
movzx edx, byte [esp + 0x23]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x5c]
jmp 0x476f6a
xchg edi, eax
mov byte [edx + ecx - 1], al
xchg edi, eax
shl ebp, 4
mov edi, dword [esp + 0x60]
mov eax, edi
shr eax, 0x1c
or ebp, eax
shl edi, 4
mov eax, edi
mov edi, ebp
mov ebp, eax
mov dword [esp + 0x60], ebp
test ebp, ebp
setne al
test edi, edi
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, eax
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x477089
inc edx
mov ebp, edi
shr edi, 0x1c
and edi, 0xf
movzx edi, byte [ebx + edi]
cmp esi, edx
jae 0x476ff7
xchg edi, eax
mov byte [esp + 0x23], al
xchg edi, eax
mov dword [esp + 0x5c], ebp
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4d3800]
mov dword [esp + 0x10], eax
call fcn.00467eb0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x5c]
movzx edi, byte [esp + 0x23]
jmp 0x476ff7
mov eax, dword [esp + 0x54]
mov edi, edx
jmp 0x476c38
call fcn.0046b730
jmp fcn.00476800