Function at 0x47ace0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5a95ff
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6b06f8]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x1c], esi
mov dword [esi], vtable.IMdbScanner.0
mov dword [esp + 0x2c], 0x20
lea edi, [esi + 0xc4]
mov dword [esp + 0x20], edi
mov byte [esp + 0x2c], 0x22
mov eax, dword [edi + 0xc]
xor ebx, ebx
cmp eax, ebx
je 0x47ad81
mov ecx, dword [edi + 0x10]
mov ebp, eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], ebp
cmp eax, ecx
je 0x47ad75
mov byte [esp + 0x2c], 0x22
mov eax, dword [ebp]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47ad68
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add ebp, 4
mov dword [esp + 0x14], ebp
cmp ebp, dword [esp + 0x18]
jne 0x47ad44
mov eax, dword [edi + 0xc]
push eax
call fcn.00573721
add esp, 4
mov dword [edi + 0xc], ebx
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov byte [esp + 0x2c], 0x20
mov edi, dword [edi]
push edi
call fcn.00573721
add esp, 4
mov byte [esp + 0x2c], 0x1f
lea edi, [esi + 0xac]
mov dword [esp + 0x20], edi
mov byte [esp + 0x2c], 0x25
mov eax, dword [edi + 0xc]
cmp eax, ebx
je 0x47ae0d
mov ecx, dword [edi + 0x10]
mov ebp, eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], ebp
cmp eax, ecx
je 0x47ae01
jmp 0x47add0
mov byte [esp + 0x2c], 0x25
mov eax, dword [ebp]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47adf4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add ebp, 4
mov dword [esp + 0x18], ebp
cmp ebp, dword [esp + 0x14]
jne 0x47add0
mov eax, dword [edi + 0xc]
push eax
call fcn.00573721
add esp, 4
mov dword [edi + 0xc], ebx
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov byte [esp + 0x2c], 0x1f
mov edi, dword [edi]
push edi
call fcn.00573721
mov cl, 0x1e
add esp, 4
mov byte [esp + 0x2c], cl
lea eax, [esi + 0xa8]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47ae58
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2c], 0x1d
lea edi, [esi + 0x90]
mov dword [esp + 0x20], edi
mov byte [esp + 0x2c], 0x29
mov ebp, dword [edi + 0xc]
cmp ebp, ebx
je 0x47aebf
mov eax, dword [edi + 0x10]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebp
cmp ebp, eax
je 0x47aeb3
mov byte [esp + 0x2c], 0x29
mov eax, dword [ebp]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47aea6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add ebp, 4
mov dword [esp + 0x18], ebp
cmp ebp, dword [esp + 0x14]
jne 0x47ae82
mov eax, dword [edi + 0xc]
push eax
call fcn.00573721
add esp, 4
mov dword [edi + 0xc], ebx
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov byte [esp + 0x2c], 0x1d
mov edi, dword [edi]
push edi
call fcn.00573721
add esp, 4
mov byte [esp + 0x2c], 0x1c
lea edi, [esi + 0x78]
mov dword [esp + 0x20], edi
mov byte [esp + 0x2c], 0x2c
mov eax, dword [edi + 0xc]
cmp eax, ebx
je 0x47af3d
mov ebx, dword [edi + 0x10]
mov ebp, eax
mov dword [esp + 0x18], ebp
cmp eax, ebx
je 0x47af2f
lea ecx, [ecx]
mov byte [esp + 0x2c], 0x2c
mov eax, dword [ebp]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47af24
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add ebp, 4
mov dword [esp + 0x18], ebp
cmp ebp, ebx
jne 0x47af00
mov eax, dword [edi + 0xc]
push eax
call fcn.00573721
add esp, 4
xor ebx, ebx
mov dword [edi + 0xc], ebx
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov byte [esp + 0x2c], 0x1c
mov edi, dword [edi]
push edi
call fcn.00573721
mov cl, 0x1b
add esp, 4
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x74]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
or edi, 0xffffffff
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47af87
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0x1a
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x70]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47afb5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0x19
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x6c]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47afe3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0x18
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x68]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b011
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0x17
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x64]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b03f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0x16
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x60]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b06d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0x15
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x5c]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b09b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0x14
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x58]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b0c9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0x13
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x54]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b0f7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0x12
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x50]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b125
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0x11
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x4c]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b153
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2c], 0x10
lea eax, [esi + 0x48]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], 0x10
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b181
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0xf
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x44]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b1af
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0xe
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x40]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b1dd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0xd
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x3c]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b20b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0xc
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x38]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b239
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0xb
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x34]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b267
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 0xa
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x30]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b295
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 9
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x2c]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b2c3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 8
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x28]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b2f1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 7
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x24]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b31f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 6
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x20]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b34d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 5
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x1c]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b37b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2c], 4
lea eax, [esi + 0x18]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], 4
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b3a9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 3
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x14]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b3d7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 2
mov byte [esp + 0x2c], cl
lea eax, [esi + 0x10]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b405
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov cl, 1
mov byte [esp + 0x2c], cl
lea eax, [esi + 0xc]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], cl
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b433
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2c], 0
lea eax, [esi + 8]
mov dword [esp + 0x20], eax
mov byte [esp + 0x2c], 0
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47b461
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x2c], edi
lea eax, [esi + 4]
mov dword [esp + 0x20], eax
mov dword [esp + 0x2c], edi
mov eax, dword [eax]
sub eax, 0x10
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edi
dec edi
test edi, edi
jg 0x47b48b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret