Function at 0x463d70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73bf03
mov eax, dword fs:[0]
push eax
sub esp, 0xfc
mov eax, dword [0x8312b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0xb8], ebx
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
push eax
push edx
push edi
call fcn.00461710
cmp dword [0x83ce70], 0
jne 0x463df1
push 0x7e6ccc
push 0x7e6cdc
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [0x83ce70], esi
test esi, esi
je 0x463df1
push 0x83ce6c
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
cmp dword [0x83ce6c], 1
lea ecx, [ebp - 0xa8]
sete byte [ebp - 0xa9]
sub esp, 0xc
call fcn.00466820
push edi
lea ecx, [ebp - 0xa8]
mov dword [ebp - 4], 0
call fcn.00466cc0
cmp dword [ebp - 0x78], 0
jne 0x464501
push 0x7e6e38
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xa8]
call fcn.004669a0
mov ecx, dword [ebp - 0xa8]
shl ecx, 5
add ecx, dword [ebp - 0xa0]
cmp dword [eax], ecx
je 0x464501
push str.directx
lea ecx, [ebp - 0xa8]
call fcn.00466ab0
mov dword [ebp - 0xcc], eax
cmp word [eax + 0xe], 4
jne 0x464501
mov esi, dword [eax]
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xc4], 0
test esi, esi
je 0x4644e9
mov ecx, dword [ebp - 0xb0]
xor esi, esi
mov dword [ebp - 0xb4], 0x2711
mov ebx, 0x1000
mov dword [ebp - 0xc8], esi
mov eax, dword [eax + 8]
add esi, eax
movzx eax, word [esi + 0xe]
test ax, ax
je 0x4644b8
cmp eax, 3
jne 0x4644b8
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
mov dword [ebp - 0xbc], eax
mov ecx, esi
push 0x7e6e48
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 2
push eax
call fcn.004669a0
mov ecx, dword [esi]
shl ecx, 5
add ecx, dword [esi + 8]
cmp dword [eax], ecx
jne 0x463f2f
lea ecx, [ebp - 0x58]
call fcn.0044bf40
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.0044bf40
jmp 0x4644b2
push 0x7e6e50
mov ecx, esi
call fcn.00466ab0
mov dword [ebp - 0xc0], eax
mov cx, word [eax + 0xe]
shr cx, 0xa
test cl, 1
jne 0x463f67
lea ecx, [ebp - 0x58]
call fcn.0044bf40
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.0044bf40
jmp 0x4644b2
push 0x7e6e58
lea eax, [ebp - 0xe4]
mov ecx, esi
push eax
call fcn.004669a0
mov ecx, dword [esi]
shl ecx, 5
add ecx, dword [esi + 8]
cmp dword [eax], ecx
je 0x46407e
push 0x7e6e5c
mov ecx, esi
call fcn.00466ab0
mov ax, word [eax + 0xe]
shr ax, 0xa
test al, 1
je 0x46407e
push 0x7e6e60
mov ecx, esi
call fcn.00466ab0
test word [eax + 0xe], bx
jne 0x463fbb
mov eax, dword [eax + 8]
push eax
lea ecx, [ebp - 0x28]
call fcn.0046f0b0
cmp dword [ebp - 0x18], 0
mov ebx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x28]
je 0x46404b
mov eax, dword [ebp - 0xb8]
add eax, 0x3c
mov edx, dword [eax + 0x10]
test edx, edx
je 0x46404b
cmp dword [eax + 0x14], 0x10
jb 0x463fe8
mov eax, dword [eax]
push edx
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp ebx, 0x10
push eax
cmovae ecx, edi
push ecx
call fcn.0046edc0
add esp, 0xc
cmp eax, 0xffffffff
je 0x46404b
cmp ebx, 0x10
jb 0x464034
lea ecx, [ebx + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x46402a
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46452e
push ecx
push edi
call fcn.006f4f2f
add esp, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
jmp 0x464499
cmp ebx, 0x10
jb 0x464079
inc ebx
mov eax, edi
cmp ebx, 0x1000
jb 0x46406f
mov edi, dword [edi - 4]
add ebx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46452e
push ebx
push edi
call fcn.006f4f2f
add esp, 8
mov ebx, 0x1000
push 0x7e6e64
lea eax, [ebp - 0xe8]
mov ecx, esi
push eax
call fcn.004669a0
mov ecx, dword [esi]
shl ecx, 5
add ecx, dword [esi + 8]
cmp dword [eax], ecx
je 0x46414d
push 0x7e6e68
mov ecx, esi
call fcn.00466ab0
mov ax, word [eax + 0xe]
shr ax, 0xa
test al, 1
je 0x46414d
push 0x7e6e6c
mov ecx, esi
call fcn.00466ab0
test word [eax + 0xe], bx
jne 0x4640d2
mov eax, dword [eax + 8]
push eax
lea ecx, [ebp - 0x28]
call fcn.0046f0b0
cmp dword [ebp - 0x18], 0
mov ebx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x28]
je 0x46411f
mov eax, dword [ebp - 0xb8]
add eax, 0x54
mov edx, dword [eax + 0x10]
test edx, edx
je 0x46411f
cmp dword [eax + 0x14], 0x10
jb 0x4640ff
mov eax, dword [eax]
push edx
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmp ebx, 0x10
push eax
cmovae ecx, edi
push ecx
call fcn.0046edc0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x464004
cmp ebx, 0x10
jb 0x46414d
inc ebx
mov eax, edi
cmp ebx, 0x1000
jb 0x464143
mov edi, dword [edi - 4]
add ebx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46452e
push ebx
push edi
call fcn.006f4f2f
add esp, 8
push 0x7e6e70
lea eax, [ebp - 0xec]
mov ecx, esi
push eax
call fcn.004669a0
mov ecx, dword [esi]
shl ecx, 5
add ecx, dword [esi + 8]
cmp dword [eax], ecx
je 0x46418b
push 0x7e6e74
mov ecx, esi
call fcn.00466ab0
mov cl, byte [eax + 0xe]
shr cl, 5
test cl, 1
je 0x46418b
mov eax, dword [eax]
mov dword [ebp - 0xbc], eax
push 0x7e6e78
lea eax, [ebp - 0xf0]
mov ecx, esi
push eax
call fcn.004669a0
mov ecx, dword [esi]
shl ecx, 5
add ecx, dword [esi + 8]
cmp dword [eax], ecx
je 0x4641ea
push str.md5x86
mov ecx, esi
call fcn.00466ab0
movzx edx, word [eax + 0xe]
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x4641ea
test edx, 0x1000
jne 0x4641cf
mov eax, dword [eax + 8]
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00463140
push eax
lea ecx, [ebp - 0x40]
call fcn.004608a0
lea ecx, [ebp - 0x28]
call fcn.0044bf40
push 0x7e6e88
lea eax, [ebp - 0xf4]
mov ecx, esi
push eax
call fcn.004669a0
mov ecx, dword [esi]
shl ecx, 5
add ecx, dword [esi + 8]
cmp dword [eax], ecx
je 0x464249
push str.guid
mov ecx, esi
call fcn.00466ab0
movzx edx, word [eax + 0xe]
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x464249
test edx, 0x1000
jne 0x46422e
mov eax, dword [eax + 8]
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00463140
push eax
lea ecx, [ebp - 0x58]
call fcn.004608a0
lea ecx, [ebp - 0x28]
call fcn.0044bf40
mov eax, dword [ebp - 0xc0]
mov ecx, 0x1000
test word [eax + 0xe], cx
jne 0x46425d
mov eax, dword [eax + 8]
mov edx, eax
lea ecx, [ebp - 0x70]
call fcn.00463140
mov byte [ebp - 4], 3
cmp dword [ebp - 0x60], 0
je 0x464341
cmp dword [ebp - 0x30], 0
je 0x464341
push 0x50
call fcn.006f4f3d
mov edx, eax
add esp, 4
mov dword [edx + 0x18], 0
lea ecx, [edx + 8]
mov dword [ecx + 0x14], 7
lea ebx, [edx + 0x20]
xor eax, eax
mov dword [ebp - 0xc0], edx
mov word [ecx], ax
lea edi, [edx + 0x38]
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], 7
mov word [ebx], ax
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 7
mov word [edi], ax
mov eax, dword [ebp - 0xb4]
inc dword [ebp - 0xb4]
mov dword [edx], eax
lea eax, [ebp - 0x70]
push eax
mov byte [edx + 4], 0
call fcn.00460810
lea eax, [ebp - 0x40]
mov ecx, ebx
push eax
call fcn.00460810
lea eax, [ebp - 0x58]
mov ecx, edi
push eax
call fcn.00460810
mov ecx, dword [ebp - 0xc0]
mov al, byte [ebp - 0xbc]
mov edi, dword [ebp - 0xb8]
and al, 1
mov dword [ebp - 0xd0], ecx
mov byte [ecx + 5], al
mov eax, dword [ecx]
mov dword [ebp - 0xd4], eax
lea ecx, [edi + 0x74]
lea eax, [ebp - 0xd4]
push eax
call fcn.00467140
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0x100]
push eax
lea ecx, [edi + 0x74]
call fcn.00467160
cmp byte [ebp - 0xa9], 0
je 0x464491
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
cmovae eax, dword [ebp - 0x40]
xor ecx, ecx
push 0x7e6e98
mov word [eax], cx
lea eax, [ebp - 0xf8]
push eax
mov ecx, esi
call fcn.004669a0
mov ecx, dword [esi]
shl ecx, 5
add ecx, dword [esi + 8]
cmp dword [eax], ecx
je 0x4643c4
push str.md5x64
mov ecx, esi
call fcn.00466ab0
movzx edx, word [eax + 0xe]
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x4643c4
test edx, 0x1000
jne 0x4643a9
mov eax, dword [eax + 8]
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00463140
push eax
lea ecx, [ebp - 0x40]
call fcn.004608a0
lea ecx, [ebp - 0x28]
call fcn.0044bf40
cmp dword [ebp - 0x60], 0
je 0x464491
cmp dword [ebp - 0x30], 0
je 0x464491
push 0x50
call fcn.006f4f3d
mov edx, dword [ebp - 0xb4]
mov ebx, eax
mov dword [ebx + 0x18], 0
lea ecx, [ebx + 8]
mov dword [ecx + 0x14], 7
xor eax, eax
mov word [ecx], ax
add esp, 4
mov dword [ebx + 0x30], eax
mov dword [ebx + 0x34], 7
mov word [ebx + 0x20], ax
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x4c], 7
mov word [ebx + 0x38], ax
mov eax, edx
mov dword [ebx], eax
inc edx
lea eax, [ebp - 0x70]
mov dword [ebp - 0xb4], edx
push eax
mov byte [ebx + 4], 1
call fcn.00460810
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebx + 0x20]
call fcn.00460810
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebx + 0x38]
call fcn.00460810
mov eax, dword [ebp - 0xbc]
mov esi, dword [ebp - 0xb8]
shr al, 1
and al, 1
mov dword [ebp - 0xd8], ebx
mov byte [ebx + 5], al
mov eax, dword [ebx]
lea ecx, [esi + 0x74]
mov dword [ebp - 0xdc], eax
lea eax, [ebp - 0xdc]
push eax
call fcn.00467140
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0x108]
push eax
lea ecx, [esi + 0x74]
call fcn.00467160
lea ecx, [ebp - 0x70]
call fcn.0044bf40
lea ecx, [ebp - 0x58]
call fcn.0044bf40
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.0044bf40
mov ebx, 0x1000
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xc4]
mov esi, dword [ebp - 0xc8]
inc eax
add esi, 0x10
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc8], esi
cmp eax, ecx
jae 0x4644e3
mov eax, dword [ebp - 0xcc]
jmp 0x463eb0
mov ebx, dword [ebp - 0xb8]
call fcn.0045b8d0
push ecx
push 0xe
mov ecx, eax
call fcn.004e15d0
cmp dword [ebx + 0x78], 0
setne bl
jmp 0x464503
xor bl, bl
lea ecx, [ebp - 0xa8]
call fcn.004667b0
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006f4f1e
mov esp, ebp
pop ebp
ret 0xc
call fcn.00710a9c
int3