Function at 0x476cf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4b916c
mov eax, dword fs:[0]
push eax
sub esp, 0x70
push ebx
push esi
push edi
mov eax, dword [0x4e9028]
xor eax, esp
push eax
lea eax, [esp + 0x80]
mov dword fs:[0], eax
lea ecx, [esp + 0x40]
call dword [0x4c4ca0]
xor esi, esi
lea ecx, [esp + 0x3c]
mov dword [esp + 0x88], esi
call dword [0x4c4ca0]
lea ecx, [esp + 0x38]
call dword [0x4c4ca0]
lea ecx, [esp + 0x34]
call dword [0x4c4ca0]
mov byte [esp + 0x88], 3
call dword [0x4c4c38]
cmp eax, esi
je 0x476d71
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x7c]
call eax
mov dword [esp + 0x1c], eax
jmp 0x476d75
mov dword [esp + 0x1c], esi
mov ecx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov edi, dword [0x4c4ab8]
push ecx
push 3
add esi, 0x150
push 0x66
push esi
call edi
push 2
push 3
push 0x16
push esi
call edi
add esp, 0x20
lea edx, [esp + 0x2c]
push edx
push esi
call fcn.00401870
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x8c], 4
call dword [0x4c4acc]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x88], 3
call dword [0x4c4c98]
push 3
push 3
push 0x16
push esi
call edi
add esp, 0x10
lea eax, [esp + 0x2c]
push eax
push esi
call fcn.00401870
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x8c], 5
call dword [0x4c4acc]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x88], 3
call dword [0x4c4c98]
push 4
push 3
push 0x16
push esi
call edi
add esp, 0x10
lea ecx, [esp + 0x2c]
push ecx
push esi
call fcn.00401870
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x8c], 6
call dword [0x4c4acc]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x88], 3
call dword [0x4c4c98]
push 6
push 3
push 0x16
push esi
call edi
add esp, 0x10
lea edx, [esp + 0x2c]
push edx
push esi
call fcn.004019b0
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x8c], 7
call dword [0x4c4acc]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x88], 3
call dword [0x4c4c98]
mov eax, dword [esp + 0x40]
mov esi, dword [0x4c4140]
push eax
call esi
mov ecx, dword [esp + 0x40]
add esp, 4
push ecx
mov ebx, eax
call esi
mov edx, dword [esp + 0x3c]
add esp, 4
push edx
mov dword [esp + 0x30], eax
call esi
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call dword [0x4c4ac8]
call fcn.00476350
movzx esi, byte [eax + 0x4e9d80]
lea ecx, [esp + 0x68]
call dword [0x4c4960]
mov byte [esp + 0x88], 8
mov ecx, dword [esp + 0x70]
mov edi, dword [0x4c4958]
push 0xff
push ecx
lea ecx, [esp + 0x70]
call edi
mov edx, dword [esp + 0x70]
push 0xff
push edx
lea ecx, [esp + 0x70]
call edi
mov eax, dword [esp + 0x70]
push 0xff
push eax
lea ecx, [esp + 0x70]
call edi
mov ecx, dword [esp + 0x70]
push 0x51
push ecx
lea ecx, [esp + 0x70]
call edi
mov edx, dword [esp + 0x70]
push 0xb2
push edx
lea ecx, [esp + 0x70]
call edi
mov eax, dword [esp + 0x70]
push 0
push eax
lea ecx, [esp + 0x70]
call edi
mov ecx, dword [esp + 0x70]
push 0x6e
push ecx
lea ecx, [esp + 0x70]
call edi
mov edx, dword [esp + 0x70]
push ebx
push edx
lea ecx, [esp + 0x70]
call edi
mov eax, dword [esp + 0x70]
push 3
push eax
lea ecx, [esp + 0x70]
call edi
mov ebx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x70]
push ebx
push ecx
lea ecx, [esp + 0x70]
call edi
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x70]
push edx
push eax
lea ecx, [esp + 0x70]
call edi
mov ecx, dword [esp + 0x70]
push esi
push ecx
lea ecx, [esp + 0x70]
call edi
lea eax, [esp + 0x2c]
xor edx, edx
push eax
lea esi, [esp + 0x6c]
mov byte [esp + 0x30], 0
mov word [esp + 0x31], dx
call fcn.004aab20
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x74]
add esp, 4
push ecx
push edx
mov ecx, esi
call edi
mov eax, dword [esp + 0x2d]
mov ecx, dword [esp + 0x70]
push eax
push ecx
mov ecx, esi
call edi
call fcn.00466bb0
test eax, eax
je 0x4770c2
mov edi, dword [esp + 0x70]
lea ecx, [esp + 0x20]
call dword [0x4c4ca0]
xor esi, esi
mov byte [esp + 0x88], 9
test edi, edi
jle 0x477056
lea ecx, [ecx]
lea ecx, [esp + 0x24]
call dword [0x4c4ca0]
mov byte [esp + 0x88], 0xa
test esi, esi
js 0x477271
cmp esi, dword [esp + 0x70]
jge 0x477271
mov edx, dword [esp + 0x6c]
movzx eax, byte [edx + esi]
push eax
lea ecx, [esp + 0x28]
push str._02X
push ecx
call dword [0x4c49e4]
add esp, 0xc
lea edx, [esp + 0x24]
push edx
lea ecx, [esp + 0x24]
call dword [0x4c49dc]
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 9
call dword [0x4c4c98]
inc esi
cmp esi, edi
jl 0x476ff0
push 0x4ccf54
lea ecx, [esp + 0x30]
call dword [0x4c49f0]
push ecx
mov byte [esp + 0x8c], 0xb
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call dword [0x4c4ac8]
push ecx
mov byte [esp + 0x90], 0xc
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call dword [0x4c4ac8]
mov byte [esp + 0x90], 0xb
call fcn.00466c50
lea ecx, [esp + 0x2c]
call dword [0x4c4c98]
lea ecx, [esp + 0x20]
mov byte [esp + 0x88], 8
call dword [0x4c4c98]
mov esi, dword [esp + 0x1c]
mov edi, dword [0x4c4ac0]
push 0
lea eax, [esp + 0x58]
push eax
push 0xc
push 2
add esi, 0x2dac
push 0x1a
push esi
call edi
push 0
push 0x4e926c
push 0
push 0
push 4
push 0xc
push esi
call edi
add esp, 0x34
push 0
push 0x4e9274
push 0
push 0
push 4
push 0x12
push esi
call edi
xor ecx, ecx
add esp, 0x1c
lea edx, [esp + 0x68]
mov word [esp + 0x44], cx
push edx
lea ecx, [esp + 0x48]
call dword [0x4c4954]
mov byte [esp + 0x88], 0xd
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x58], ecx
lea ecx, [esp + 0x54]
push ecx
push 0x4e9284
push 0
push 0
push 4
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x64]
push 0x19
push esi
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], eax
call edi
add esp, 0x1c
lea edx, [esp + 0x44]
push edx
call dword [0x4c4214]
mov edi, dword [ebp + 8]
test byte [edi + 0x3f0], 0xc
je 0x477306
lea ecx, [esp + 0x24]
call dword [0x4c4ca0]
lea ecx, [esp + 0x2c]
call dword [0x4c4ca0]
lea ecx, [esp + 0x20]
call dword [0x4c4ca0]
lea ecx, [esp + 0x1c]
call dword [0x4c4ca0]
lea ecx, [esp + 0x18]
call dword [0x4c4ca0]
lea ecx, [esp + 0x14]
call dword [0x4c4ca0]
lea ecx, [esp + 0x10]
call dword [0x4c4ca0]
push 0xc8
lea ecx, [esp + 0x28]
mov byte [esp + 0x8c], 0x14
call dword [0x4c4c24]
push 0xd7
lea ecx, [esp + 0x30]
call dword [0x4c4c24]
push 0xd9
lea ecx, [esp + 0x24]
call dword [0x4c4c24]
push 0xd8
lea ecx, [esp + 0x20]
call dword [0x4c4c24]
push 0x8a
lea ecx, [esp + 0x1c]
call dword [0x4c4c24]
push 0x8b
lea ecx, [esp + 0x18]
call dword [0x4c4c24]
cmp dword [0x4ea9c4], 3
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x20]
push ecx
mov ecx, dword [edi + 0x43c]
push edx
mov edx, dword [esp + 0x2c]
push ebx
push eax
jne 0x477277
mov eax, dword [edi + 0x438]
push ecx
mov ecx, dword [esp + 0x3c]
push edx
inc eax
push eax
push ecx
lea edx, [esp + 0x34]
push str._s__d__s__d___s__d_s_d_s
push edx
call dword [0x4c49e4]
add esp, 0x2c
jmp 0x47729f
call dword [0x4c49fc]
mov eax, dword [esp + 0x40]
push eax
push ecx
mov ecx, dword [esp + 0x40]
push edx
push eax
mov eax, dword [edi + 0x438]
inc eax
push eax
push ecx
lea edx, [esp + 0x3c]
push str._s_d_s_s_d_s___s__d_s_d_s
push edx
call dword [0x4c49e4]
add esp, 0x34
mov eax, dword [esp + 0x10]
mov esi, dword [edi + 0x14c]
push eax
call fcn.004af8a0
mov ecx, dword [edi + 0x14c]
add esp, 4
push 1
call dword [0x4c4978]
lea ecx, [esp + 0x10]
call dword [0x4c4c98]
lea ecx, [esp + 0x14]
call dword [0x4c4c98]
lea ecx, [esp + 0x18]
call dword [0x4c4c98]
lea ecx, [esp + 0x1c]
call dword [0x4c4c98]
lea ecx, [esp + 0x20]
call dword [0x4c4c98]
lea ecx, [esp + 0x2c]
call dword [0x4c4c98]
lea ecx, [esp + 0x24]
call dword [0x4c4c98]
mov ecx, dword [edi + 0xec]
push ecx
call dword [0x4c40f8]
lea ecx, [esp + 0x68]
mov byte [esp + 0x88], 3
call dword [0x4c495c]
lea ecx, [esp + 0x34]
call dword [0x4c4c98]
lea ecx, [esp + 0x38]
call dword [0x4c4c98]
lea ecx, [esp + 0x3c]
call dword [0x4c4c98]
lea ecx, [esp + 0x40]
call dword [0x4c4c98]
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8