Function at 0x470f70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc4]
cmp eax, dword [ecx + 8]
jbe 0x471b41
sub esp, 0x144
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
mov eax, dword [esp + 0x14c]
test eax, eax
je 0x471380
mov ecx, dword [esp + 0x15c]
test ecx, ecx
jne 0x470fdf
lea ecx, [0x8c9cc0]
mov edx, dword [ecx + 0x20]
test edx, edx
jne 0x470fec
lea edx, [0x8c9d80]
mov ebx, dword [ecx + 0x18]
cmp ebx, 3
jg 0x471344
jl 0x471308
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xcc], edx
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx]
test ebx, ebx
jne 0x47101e
mov ebx, dword [esp + 0x148]
jmp 0x471057
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x148]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00470b30
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x4712d8
mov eax, ebp
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00471d50
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test ecx, ecx
je 0x47107b
xor edx, edx
jmp 0x471087
test ebx, ebx
jbe 0x471b37
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
test ecx, ecx
jne 0x4712b6
mov dword [esp + 0xc8], edx
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax + 8]
mov ebx, dword [eax + 4]
test ecx, ecx
jne 0x4710f0
mov eax, dword [esp + 0x150]
mov dword [esp], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 8], eax
call fcn.004704a0
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xcc]
mov edx, dword [esp + 0xc8]
test ecx, ecx
jne 0x4710f8
xor ecx, ecx
jmp 0x47114e
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00471d50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test eax, eax
je 0x47111c
xor edx, edx
jmp 0x471128
test ebx, ebx
jbe 0x471b2e
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test eax, eax
jne 0x471294
mov eax, dword [esp + 0xcc]
mov ecx, edx
mov edx, dword [esp + 0xc8]
mov dword [esp + 0xd8], ecx
mov ebx, dword [esp + 0xe4]
mov ebp, dword [ebx + 4]
mov esi, dword [ebx]
test ebp, ebp
jne 0x471169
xor ebp, ebp
jmp 0x4711b1
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00471d50
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test ecx, ecx
je 0x47118d
xor edx, edx
jmp 0x471199
test ebx, ebx
jbe 0x471b25
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
test ecx, ecx
jne 0x471272
mov ebp, edx
mov dword [esp + 0xd4], ebp
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x58], 0
lea eax, [esp + 0x44]
mov dword [esp], eax
lea eax, [esp + 0x40]
mov dword [esp + 4], eax
lea eax, [esp + 0x58]
mov dword [esp + 8], eax
call fcn.004771d0
mov eax, dword [esp + 0x44]
cmp eax, 6
jae 0x4711fc
mov eax, 1
jmp 0x47120a
jne 0x471208
cmp dword [esp + 0x40], 1
setbe al
jmp 0x47120a
xor eax, eax
mov byte [esp + 0x37], al
call fcn.004758a0
mov eax, dword [esp]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xcc]
mov edx, dword [ecx + 0x2c]
test edx, edx
jne 0x47122a
mov edx, eax
mov dword [esp + 0x38], edx
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x54], ecx
lea ebx, [0x66c300]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044ab50
mov eax, dword [esp + 0xc]
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 0xe4]
mov edx, dword [ecx + 0x18]
mov dword [esp + 0x64], edx
xor ebx, ebx
jmp 0x4713bd
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00435410
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00435410
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00435410
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
call fcn.00435410
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x710cf0]
mov dword [esp + 0x168], eax
lea eax, [0x70fc84]
mov dword [esp + 0x16c], eax
call fcn.00435410
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x710cf0]
mov dword [esp + 0x168], eax
lea eax, [0x70fc8c]
mov dword [esp + 0x16c], eax
call fcn.00435410
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x710cf0]
mov dword [esp + 0x168], eax
lea eax, [0x70fc8c]
mov dword [esp + 0x16c], eax
call fcn.00435410
add esp, 0x144
ret
inc ebx
cmp ebx, edx
jge 0x4714fa
mov ebp, dword [ecx + 0x18]
mov esi, dword [ecx + 0x14]
cmp ebx, ebp
jae 0x471b1c
mov ebp, dword [esi + ebx*4]
test ebp, ebp
jbe 0x4713bc
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x3c]
cmp esi, edi
je 0x47140c
movzx edx, byte [esp + 0x37]
test dl, dl
je 0x471411
mov dword [esp + 0x60], ebp
and ebp, 0x10000003
cmp ebp, 3
jne 0x471406
mov ebp, dword [esp + 0x60]
mov esi, edi
jmp 0x471411
mov ebp, dword [esp + 0x60]
jmp 0x471411
movzx edx, byte [esp + 0x37]
mov edx, dword [esp + 0x54]
cmp ebx, edx
jae 0x471b13
mov dword [esp + 0x4c], ebx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
lea ecx, [eax + ebx*4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
mov byte [esp + 0x14], 1
mov dword [esp + 0x18], 2
call fcn.004750c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x4714ca
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xe0]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0x5c], edx
lea ebx, [0x67b700]
mov dword [esp], ebx
call fcn.0040bcc0
mov eax, dword [esp + 4]
lea ecx, [0x471bd0]
mov dword [eax], ecx
mov edx, dword [esp + 0x38]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0x5c]
mov dword [eax + 8], ebx
mov dword [esp], eax
call fcn.00434d60
test eax, eax
jne 0x4714be
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xe4]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x4c]
jmp 0x4713bc
call fcn.00435410
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
call fcn.00435410
add esp, 0x144
ret
lea edi, [esp + 0xfc]
xor eax, eax
call fcn.00463d3e
mov dword [esp], 2
call fcn.00473a30
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x168], edx
mov dword [esp + 0x16c], ebx
test ebp, ebp
jne 0x471742
mov eax, dword [esp + 0x140]
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
lea ecx, [0x471b90]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
lea eax, [esp + 0xe8]
mov dword [esp + 0xb0], eax
lea eax, [esp + 0xa4]
mov dword [esp], eax
call fcn.00434e40
test eax, eax
jne 0x471736
mov dword [esp + 0xfc], 0x48
mov dword [esp + 0x128], 0x100
mov edx, dword [esp + 0xcc]
movzx ebx, byte [edx]
test bl, bl
je 0x4715d0
mov dword [esp + 0x128], 0x101
mov word [esp + 0x12c], 0
mov ebx, dword [edx + 0x2c]
test ebx, ebx
je 0x47163e
mov eax, dword [esp + 0x140]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20000
lea eax, [edx + 0x2c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00476c10
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test edx, edx
jne 0x471714
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x54]
test ebx, ebx
jbe 0x471b0a
mov ebp, dword [esp + 0xe0]
mov esi, dword [ebp]
mov dword [esp + 0x134], esi
cmp ebx, 1
jbe 0x471afe
mov esi, dword [ebp + 4]
mov dword [esp + 0x138], esi
cmp ebx, 2
jbe 0x471af2
mov eax, dword [ebp + 8]
mov dword [esp + 0x13c], eax
mov eax, dword [edx + 0x24]
lea ecx, [ebx + eax]
mov esi, dword [edx + 0x20]
cmp ebx, ecx
jb 0x471692
mov edi, ebx
jmp 0x4716da
mov dword [esp + 0x64], eax
mov dword [esp + 0xdc], esi
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
lea ecx, [0x66c300]
mov dword [esp + 0x10], ecx
call fcn.0044acd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0x54]
mov ebp, eax
mov ebx, edx
mov eax, dword [esp + 0x64]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x50], ecx
mov dword [esp + 0xd0], ebp
lea edx, [ebp + edi*4]
mov dword [esp], edx
mov dword [esp + 4], esi
shl eax, 2
mov dword [esp + 8], eax
call fcn.00464440
mov eax, dword [esp + 0xd0]
movzx ecx, byte [esp + 0x37]
mov edx, dword [esp + 0x50]
xor ebx, ebx
jmp 0x471765
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00435410
add esp, 0x144
ret
call fcn.00435410
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00435410
add esp, 0x144
ret
inc ebx
cmp ebx, edx
jge 0x47178a
jae 0x471ae9
mov ebp, dword [eax + ebx*4]
test cl, cl
je 0x471764
and ebp, 0x10000003
cmp ebp, 3
jne 0x471764
mov dword [eax + ebx*4], 0
jmp 0x471764
xor ecx, ecx
xor ebx, ebx
jmp 0x471791
inc ecx
cmp ecx, edx
jge 0x4717b0
jae 0x471ae0
mov ebp, dword [eax + ecx*4]
test ebp, ebp
je 0x471790
cmp ebx, edx
jae 0x471ad7
mov dword [eax + ebx*4], ebp
inc ebx
jmp 0x471790
mov edx, dword [esp + 0x54]
cmp ebx, edx
ja 0x471ad0
test ebx, ebx
je 0x4717d0
mov ebp, dword [esp + 0xcc]
movzx esi, byte [ebp + 0x1c]
xor esi, 1
jmp 0x4717d9
mov ebp, dword [esp + 0xcc]
xor esi, esi
xchg esi, eax
mov byte [esp + 0x36], al
xchg esi, eax
mov dword [esp + 0x48], ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x47186f
mov edi, dword [esp + 0x140]
test ebx, ebx
jbe 0x471ac7
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20002
mov dword [esp + 0xc], eax
shl ebx, 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00476c10
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test edx, edx
je 0x47186f
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00435410
add esp, 0x144
ret
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00470590
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
test ebx, ebx
jne 0x471aa5
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov ecx, dword [esp + 0xcc]
mov edx, dword [ecx + 0xc]
or edx, 0x80400
mov ebx, dword [ecx + 0x10]
test ebx, ebx
je 0x47195f
mov ebp, dword [ecx + 0x14]
mov esi, dword [ecx + 0x18]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
movzx ebx, byte [esp + 0x36]
mov byte [esp + 0x14], bl
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x20], eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x28], eax
call fcn.00473bc0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
jmp 0x4719cc
mov ebx, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x18]
mov esi, dword [esp + 0xc8]
mov dword [esp], esi
mov esi, dword [esp + 0xd8]
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
movzx ebx, byte [esp + 0x36]
mov byte [esp + 0x10], bl
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x24], eax
call fcn.00474e80
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
mov eax, dword [esp + 0x168]
test eax, eax
jne 0x471a83
mov eax, dword [esp + 0x74]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
lea ecx, [0x471b50]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x68]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00434e40
test eax, eax
jne 0x471a77
mov eax, dword [esp + 0xd0]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], ecx
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
call fcn.00435410
add esp, 0x144
ret
call fcn.00435410
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00435410
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00435410
add esp, 0x144
ret
xor eax, eax
mov ecx, eax
call fcn.00463b30
mov ecx, ebx
call fcn.00463b70
mov eax, ebx
mov ecx, edx
call fcn.00463b30
mov eax, ecx
mov ecx, edx
call fcn.00463b30
mov eax, ebx
mov ecx, edx
call fcn.00463b30
mov eax, 2
mov ecx, eax
call fcn.00463b30
mov eax, 1
mov ecx, eax
call fcn.00463b30
xor eax, eax
mov ecx, eax
call fcn.00463b30
mov eax, ebx
mov ecx, edx
call fcn.00463b30
mov eax, ebx
mov ecx, ebp
call fcn.00463b30
xor eax, eax
mov ecx, eax
call fcn.00463b30
xor eax, eax
mov ecx, eax
call fcn.00463b30
xor eax, eax
mov ecx, eax
call fcn.00463b30
nop
call fcn.004626a0
jmp fcn.00470f70