Function at 0x476820
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x5b96c8]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4770e0
add esp, 0xffffff80
mov edx, dword [esp + 0x98]
test edx, edx
sete bl
mov ebp, dword [esp + 0x9c]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x47685f
xor eax, eax
jmp 0x476866
mov eax, dword [esp + 0xa0]
mov ebx, dword [esp + 0xa4]
mov ebx, dword [ebx]
lea ecx, [ebx - 0x3c]
neg ecx
shl ebp, cl
mov ebx, edx
shl edx, cl
lea esi, [ecx - 0x20]
mov edi, ecx
mov ecx, esi
shl ebx, cl
mov dword [esp + 0x60], ebx
neg ecx
mov ebx, dword [esp + 0x98]
shr ebx, cl
cmp edi, 0x20
sbb edi, edi
and ebp, edi
and edx, edi
cmp esi, 0x20
sbb esi, esi
mov edi, dword [esp + 0x60]
and edi, esi
cmp ecx, 0x20
sbb esi, esi
and ebx, esi
or ebp, ebx
or ebp, edi
jmp 0x4768bf
shl ebp, 1
mov ebx, edx
shr ebx, 0x1f
or ebp, ebx
shl edx, 1
dec eax
test edx, edx
setne bl
test ebp, ebp
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x4768e5
test ebp, 0x10000000
sete bl
and ebx, 1
test bl, bl
jne 0x4768b3
mov ecx, dword [esp + 0x90]
cmp ecx, 0xf
jae 0x476a54
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], ebp
mov dword [esp + 0x54], edx
mov ebx, ecx
shl ebx, 2
mov ecx, ebx
mov edi, ebp
shl ebp, cl
shl edx, cl
mov dword [esp + 0x60], edx
lea esi, [ecx - 0x20]
mov dword [esp + 0x50], esi
mov ecx, esi
mov edx, dword [esp + 0x54]
shl edx, cl
mov dword [esp + 0x4c], edx
neg ecx
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0x54]
shr edx, cl
lea eax, [ebx - 0x3c]
neg eax
mov dword [esp + 0x44], eax
mov ecx, eax
mov esi, dword [esp + 0x54]
shr esi, cl
mov dword [esp + 0x54], esi
shr edi, cl
mov dword [esp + 0x40], edi
lea edi, [eax - 0x20]
mov dword [esp + 0x3c], edi
mov ecx, edi
mov esi, dword [esp + 0x58]
shr esi, cl
mov dword [esp + 0x38], esi
neg ecx
mov dword [esp + 0x34], ecx
mov esi, dword [esp + 0x58]
shl esi, cl
mov dword [esp + 0x58], esi
cmp ebx, 0x20
sbb ebx, ebx
and ebp, ebx
mov esi, dword [esp + 0x60]
and esi, ebx
mov ebx, dword [esp + 0x48]
cmp ebx, 0x20
sbb ebx, ebx
and edx, ebx
or ebp, edx
mov edx, dword [esp + 0x50]
cmp edx, 0x20
sbb edx, edx
mov ebx, dword [esp + 0x4c]
and edx, ebx
or ebp, edx
and ebp, 0xfffffff
cmp edi, 0x20
sbb edx, edx
mov dword [esp + 0x60], edx
mov ebx, dword [esp + 0x38]
and ebx, edx
cmp ecx, 0x20
sbb ecx, ecx
mov edx, dword [esp + 0x58]
and edx, ecx
cmp eax, 0x20
sbb eax, eax
mov edi, dword [esp + 0x54]
and edi, eax
or edx, edi
or edx, ebx
mov ebx, edx
and edx, 1
or edx, esi
mov esi, dword [esp + 0x40]
and esi, eax
test edx, edx
seta dl
cmp ebp, 0x8000000
xchg ebp, ebx
seta bl
xchg ebp, ebx
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, edx
or edi, ebp
xchg edi, eax
test al, al
xchg edi, eax
je 0x4769ff
add ebx, 1
adc esi, 0
mov edx, ecx
mov ecx, dword [esp + 0x3c]
mov ebp, ebx
shl ebx, cl
mov edi, dword [esp + 0x60]
and ebx, edi
mov ecx, dword [esp + 0x34]
mov edi, ebp
shr ebp, cl
and ebp, edx
mov ecx, dword [esp + 0x44]
shl edi, cl
shl esi, cl
and esi, eax
or ebp, esi
or ebx, ebp
and edi, eax
test ebx, 0x20000000
je 0x476a45
shr edi, 1
mov ecx, ebx
shl ecx, 0x1f
or edi, ecx
shr ebx, 1
mov ecx, dword [esp + 0x5c]
lea eax, [ecx + 1]
jmp 0x476a49
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x90]
mov ebp, ebx
mov edx, edi
movzx ebx, byte [esp + 0x94]
cmp bl, 0x58
jne 0x476a69
lea esi, [0x4e1503]
jmp 0x476a6f
lea esi, [0x4e14d3]
mov dword [esp + 0x74], esi
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ebp
mov dword [esp + 0x58], edx
movzx edi, byte [esp + 0x95]
xchg edi, eax
test al, al
xchg edi, eax
je 0x476b1a
mov edi, dword [esp + 0x88]
inc edi
mov esi, dword [esp + 0x8c]
cmp esi, edi
jb 0x476ab9
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x6c]
jmp 0x476b0f
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4cd620]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x58]
movzx ebx, byte [esp + 0x94]
mov ebp, dword [esp + 0x60]
mov dword [esp + 0x7c], eax
mov esi, ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x90]
mov ecx, dword [esp + 0x7c]
mov byte [edi + ecx - 1], 0x2d
jmp 0x476b2f
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 0x88]
mov ecx, dword [esp + 0x84]
add edi, 3
cmp esi, edi
jae 0x476b78
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 3
lea eax, [0x4cd620]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x58]
movzx ebx, byte [esp + 0x94]
mov ebp, dword [esp + 0x60]
mov byte [edi + ecx - 3], 0x30
mov byte [edi + ecx - 2], bl
shr ebp, 0x1c
and ebp, 1
add ebp, 0x30
xchg ebp, eax
mov byte [edi + ecx - 1], al
xchg ebp, eax
mov ebp, dword [esp + 0x60]
shl ebp, 4
shr edx, 0x1c
or edx, ebp
mov dword [esp + 0x60], edx
mov ebp, dword [esp + 0x58]
shl ebp, 4
mov dword [esp + 0x58], ebp
mov ebx, dword [esp + 0x90]
test ebx, ebx
jge 0x476c1b
test ebp, ebp
setne al
test edx, edx
setne dl
or eax, edx
test al, al
je 0x476c11
lea edx, [edi + 1]
cmp esi, edx
jae 0x476bff
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4cd620]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebp, dword [esp + 0x58]
mov byte [edx + ecx - 1], 0x2e
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x60]
jmp 0x477062
test ebx, ebx
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x60]
jle 0x476c7b
inc edi
cmp esi, edi
jae 0x476c63
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4cd620]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x58]
mov byte [edi + ecx - 1], 0x2e
mov dword [esp + 0x64], eax
xor eax, eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x64]
jmp 0x476fda
movzx edx, byte [esp + 0x94]
mov ebx, edx
or edx, 0x20
cmp bl, dl
jne 0x476c93
mov edx, 0x70
jmp 0x476c98
mov edx, 0x50
lea ebx, [edi + 1]
cmp esi, ebx
jae 0x476cda
mov byte [esp + 0x21], dl
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4cd620]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
movzx edx, byte [esp + 0x21]
mov byte [ebx + ecx - 1], dl
test eax, eax
jge 0x476ceb
neg eax
mov edx, 0x2d
jmp 0x476cf0
mov edx, 0x2b
mov dword [esp + 0x5c], eax
inc ebx
cmp esi, ebx
jae 0x476d34
mov byte [esp + 0x21], dl
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4cd620]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
movzx edx, byte [esp + 0x21]
mov byte [ebx + ecx - 1], dl
cmp eax, 0x64
jge 0x476db5
lea edx, [ebx + 2]
mov ebx, eax
mov eax, 0xcccccccd
mov ebp, edx
imul ebx
add edx, ebx
sar edx, 3
mov edi, ebx
sar ebx, 0x1f
sub edx, ebx
lea ebx, [edx + edx*4]
shl ebx, 1
sub edi, ebx
cmp esi, ebp
jae 0x476da2
mov dword [esp + 0x5c], edx
mov dword [esp + 0x30], edi
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x4cd620]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x30]
mov ebp, edx
mov edx, dword [esp + 0x5c]
lea eax, [edx + 0x30]
mov byte [ebp + ecx - 2], al
lea eax, [edi + 0x30]
mov byte [ebp + ecx - 1], al
jmp 0x476f94
mov dword [esp + 0x78], ecx
cmp eax, 0x3e8
jge 0x476e8e
lea edx, [ebx + 3]
mov dword [esp + 0x5c], edx
mov ebx, eax
mov eax, 0xcccccccd
imul ebx
add edx, ebx
mov edi, edx
sar edx, 3
mov dword [esp + 0x30], edx
mov eax, 0xcccccccd
imul edx
sar edi, 0x1f
mov ecx, dword [esp + 0x30]
add edx, ecx
sar edx, 3
sub edx, edi
lea edx, [edx + edx*4]
shl edx, 1
mov dword [esp + 0x30], edx
lea edi, [ecx + ecx*4]
shl edi, 1
mov eax, ebx
mov ebp, 0x51eb851f
imul ebp
mov ebp, dword [esp + 0x30]
sub ecx, ebp
sub ebx, edi
mov ebp, dword [esp + 0x5c]
cmp esi, ebp
jb 0x476e21
mov eax, dword [esp + 0x78]
jmp 0x476e6f
mov dword [esp + 0x5c], edx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], ebx
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 3
lea eax, [0x4cd620]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x2c]
mov ebp, edx
mov eax, ecx
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x5c]
sar edx, 5
add edx, 0x30
mov byte [ebp + eax - 3], dl
lea edx, [ecx + 0x30]
mov byte [ebp + eax - 2], dl
lea edx, [ebx + 0x30]
mov byte [ebp + eax - 1], dl
mov ecx, eax
jmp 0x476f94
lea edx, [ebx + 4]
mov dword [esp + 0x30], edx
mov ebx, 0x51eb851f
imul ebx
sar edx, 5
mov dword [esp + 0x2c], edx
movzx ebx, dl
imul ebx, ebx, 0x19a
shr ebx, 0xc
lea ebx, [ebx + ebx*4]
shl ebx, 1
mov eax, 0xcccccccd
mov edi, dword [esp + 0x5c]
imul edi
add edx, edi
mov eax, edx
sar edx, 0x1f
mov dword [esp + 0x5c], edx
sar eax, 3
mov dword [esp + 0x28], eax
mov eax, 0xcccccccd
mov ecx, dword [esp + 0x28]
imul ecx
add edx, ecx
sar edx, 3
mov ebp, dword [esp + 0x5c]
sub edx, ebp
lea edx, [edx + edx*4]
shl edx, 1
mov dword [esp + 0x5c], edx
lea ebp, [ecx + ecx*4]
shl ebp, 1
mov eax, 0x4189374c
imul edi
mov eax, edx
mov edx, dword [esp + 0x2c]
sub edx, ebx
mov ebx, dword [esp + 0x5c]
sub ecx, ebx
sub edi, ebp
mov ebx, dword [esp + 0x30]
cmp esi, ebx
jb 0x476f1a
mov ebp, dword [esp + 0x78]
jmp 0x476f71
mov byte [esp + 0x23], dl
mov dword [esp + 0x5c], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], edi
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 4
lea eax, [0x4cd620]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
mov edi, dword [esp + 0x2c]
mov ebx, edx
mov ebp, ecx
mov ecx, dword [esp + 0x30]
movzx edx, byte [esp + 0x23]
sar eax, 8
add eax, 0x30
mov byte [ebx + ebp - 4], al
lea eax, [edx + 0x30]
mov byte [ebx + ebp - 3], al
lea eax, [ecx + 0x30]
mov byte [ebx + ebp - 2], al
lea eax, [edi + 0x30]
mov byte [ebx + ebp - 1], al
mov ecx, ebp
mov ebp, ebx
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], ebp
mov dword [esp + 0xb0], esi
sub esp, 0xffffff80
ret
mov byte [edi + ecx - 1], dl
mov edx, dword [esp + 0x58]
shl edx, 4
mov eax, dword [esp + 0x60]
shr eax, 0x1c
inc ebp
or edx, eax
mov eax, dword [esp + 0x60]
shl eax, 4
mov ebx, dword [esp + 0x90]
mov dword [esp + 0x24], ebp
mov ebp, eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x60], ebp
mov ebp, dword [esp + 0x24]
cmp ebx, ebp
jle 0x476c7b
mov dword [esp + 0x58], edx
inc edi
shr edx, 0x1c
and edx, 0xf
mov ebx, dword [esp + 0x74]
movzx edx, byte [ebx + edx]
cmp esi, edi
jae 0x476fad
mov byte [esp + 0x22], dl
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4cd620]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
movzx edx, byte [esp + 0x22]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x24]
jmp 0x476fad
xchg edi, eax
mov byte [edx + ecx - 1], al
xchg edi, eax
shl ebp, 4
mov edi, dword [esp + 0x60]
mov eax, edi
shr eax, 0x1c
or ebp, eax
shl edi, 4
mov eax, edi
mov edi, ebp
mov ebp, eax
mov dword [esp + 0x60], ebp
test edi, edi
setne al
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
or eax, ebp
test al, al
je 0x4770d5
inc edx
mov ebp, edi
shr edi, 0x1c
and edi, 0xf
movzx edi, byte [ebx + edi]
cmp esi, edx
jae 0x477045
mov dword [esp + 0x58], ebp
xchg edi, eax
mov byte [esp + 0x22], al
xchg edi, eax
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 1
lea eax, [0x4cd620]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x58]
movzx edi, byte [esp + 0x22]
jmp 0x477045
mov eax, dword [esp + 0x5c]
mov edi, edx
jmp 0x476c7b
call fcn.00465370
jmp fcn.00476820