Function at 0x470940
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffff80
mov ebx, dword [esp + 0x94]
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0x80000000
mov dword [esp + 0x20], 0
mov eax, ecx
mov eax, dword [eax + 0xf0]
mov esi, dword [eax + 0x74]
test esi, esi
je 0x4709c1
mov edx, dword [ebx]
test edx, edx
je 0x470980
mov eax, dword [edx + 0xc]
jmp 0x470982
xor eax, eax
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x470990
mov ebp, dword [ecx + 0xc]
jmp 0x470992
xor ebp, ebp
push eax
mov ecx, ebx
call fcn.0040bbb0
push eax
push ebp
lea ecx, [esi + 4]
call fcn.0040bbb0
push eax
call fcn.0040cb30
add esp, 0x10
test eax, eax
jne 0x4709b5
mov al, 1
jmp 0x4709b7
xor al, al
test al, al
jne 0x4709c1
mov esi, dword [esi]
test esi, esi
jne 0x470971
test esi, esi
jne 0x4709e1
cmp dword [esp + 0x20], 0
je 0x4709d5
mov ecx, dword [esp + 0x20]
call fcn.0040b9e0
xor eax, eax
sub esp, 0xffffff80
pop ebp
pop edi
pop esi
pop ebx
ret 4
mov dword [esp + 0x28], 0
push 0x4cc1fa
call fcn.0040ca30
pop ecx
push eax
push 0x4cc1fa
lea ecx, [esp + 0x30]
call fcn.0040bb00
cmp dword [esp + 0x28], 0
je 0x470a16
mov ecx, dword [esp + 0x28]
mov eax, dword [0x4bf2dc]
mov dword [ecx + 0x10], eax
lea eax, [esp + 0x28]
push eax
lea ebp, [esi + 4]
push ebp
lea eax, [esp + 0x34]
push eax
call fcn.0040c300
add esp, 0xc
mov edx, dword [esi + 8]
push edx
lea eax, [esp + 0x34]
push eax
call fcn.0040cc60
pop ecx
pop ecx
lea eax, [esp + 0x30]
push eax
lea ebx, [esp + 0x30]
push ebx
lea eax, [esp + 0x3c]
push eax
call fcn.0040c300
add esp, 0xc
lea eax, [esp + 0x34]
push eax
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xf0]
mov eax, dword [ecx + 0x70]
push eax
call fcn.004179b0
pop ecx
pop ecx
mov dword [esp + 0x14], eax
cmp dword [esp + 0x34], 0
je 0x470a81
mov ecx, dword [esp + 0x34]
call fcn.0040b9e0
cmp dword [esp + 0x30], 0
je 0x470a91
mov ecx, dword [esp + 0x30]
call fcn.0040b9e0
cmp dword [esp + 0x2c], 0
je 0x470aa1
mov ecx, dword [esp + 0x2c]
call fcn.0040b9e0
cmp dword [esp + 0x28], 0
je 0x470ab1
mov ecx, dword [esp + 0x28]
call fcn.0040b9e0
mov eax, dword [esi + 0xc]
push eax
call fcn.00445430
pop ecx
mov dword [esp + 4], eax
push 0x4f1d68
push eax
call fcn.0046f740
pop ecx
pop ecx
mov byte [esp + 0x18], al
cmp byte [esp + 0x18], 0
je 0x470b36
mov eax, dword [esp + 4]
mov byte [eax + 0x30], 1
mov eax, dword [esp + 4]
mov byte [eax + 0x31], 1
mov eax, dword [esp + 4]
mov byte [eax + 0x2f], 0
mov eax, dword [esp + 4]
mov dword [eax + 0x1c], 0
mov eax, dword [esp + 4]
mov dword [eax + 0x18], 0
mov ecx, dword [esp + 8]
mov eax, dword [esp + 4]
mov dword [eax + 0x40], ecx
mov eax, dword [esp + 8]
mov edx, dword [eax + 0xf0]
mov eax, dword [esp + 4]
mov dword [eax + 0x44], edx
cmp dword [esp + 0x14], 0
je 0x470b36
mov eax, dword [esp + 0x14]
mov ebx, dword [eax + 0x58]
mov eax, dword [esp + 4]
mov dword [eax + 0x58], ebx
cmp dword [esi + 8], 0x80000000
je 0x470d04
mov dword [esp + 0x10], 0
mov dword [esp + 0x38], 0
push 0x4cc1fa
call fcn.0040ca30
pop ecx
push eax
push 0x4cc1fa
lea ecx, [esp + 0x40]
call fcn.0040bb00
cmp dword [esp + 0x38], 0
je 0x470b80
mov ebp, dword [esp + 0x38]
mov eax, dword [0x4bf2dc]
mov dword [ebp + 0x10], eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esi + 4]
push ecx
lea eax, [esp + 0x44]
push eax
call fcn.0040c300
add esp, 0xc
push dword [esp + 0x10]
lea eax, [esp + 0x44]
push eax
call fcn.0040cc60
pop ecx
pop ecx
lea eax, [esp + 0x40]
push eax
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x4c]
push eax
call fcn.0040c300
add esp, 0xc
lea eax, [esp + 0x44]
push eax
mov eax, dword [esp + 0xc]
mov ebx, dword [eax + 0xf0]
mov eax, dword [ebx + 0x70]
push eax
call fcn.004179b0
pop ecx
pop ecx
mov ebp, eax
cmp dword [esp + 0x44], 0
je 0x470be9
mov ecx, dword [esp + 0x44]
call fcn.0040b9e0
cmp dword [esp + 0x40], 0
je 0x470bf9
mov ecx, dword [esp + 0x40]
call fcn.0040b9e0
cmp dword [esp + 0x3c], 0
je 0x470c09
mov ecx, dword [esp + 0x3c]
call fcn.0040b9e0
cmp dword [esp + 0x38], 0
je 0x470c19
mov ecx, dword [esp + 0x38]
call fcn.0040b9e0
test ebp, ebp
je 0x470c25
mov al, 1
inc dword [esp + 0x10]
jmp 0x470c27
xor al, al
test al, al
jne 0x470b4b
mov dword [esp + 0x48], 0
push 0x4cc1fa
call fcn.0040ca30
pop ecx
push eax
push 0x4cc1fa
lea ecx, [esp + 0x50]
call fcn.0040bb00
cmp dword [esp + 0x48], 0
je 0x470c64
mov ebp, dword [esp + 0x48]
mov eax, dword [0x4bf2dc]
mov dword [ebp + 0x10], eax
lea eax, [esp + 0x48]
push eax
lea ecx, [esi + 4]
push ecx
lea eax, [esp + 0x54]
push eax
call fcn.0040c300
add esp, 0xc
push dword [esp + 0x10]
lea eax, [esp + 0x54]
push eax
call fcn.0040cc60
pop ecx
pop ecx
lea eax, [esp + 0x50]
push eax
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x5c]
push eax
call fcn.0040c300
add esp, 0xc
push dword [esp + 4]
lea eax, [esp + 0x58]
push eax
mov eax, dword [esp + 0x10]
mov ebx, dword [eax + 0xf0]
mov eax, dword [ebx + 0x70]
push eax
call fcn.00417970
add esp, 0xc
cmp dword [esp + 0x54], 0
je 0x470cd0
mov ecx, dword [esp + 0x54]
call fcn.0040b9e0
cmp dword [esp + 0x50], 0
je 0x470ce0
mov ecx, dword [esp + 0x50]
call fcn.0040b9e0
cmp dword [esp + 0x4c], 0
je 0x470cf0
mov ecx, dword [esp + 0x4c]
call fcn.0040b9e0
cmp dword [esp + 0x48], 0
je 0x470df6
mov ecx, dword [esp + 0x48]
jmp 0x470df1
mov eax, dword [esi + 4]
mov dword [esp + 0x58], eax
test eax, eax
je 0x470d16
mov ecx, eax
call fcn.0040b9a0
mov dword [esp + 0x5c], 0
push 0x4cc201
call fcn.0040ca30
pop ecx
push eax
push 0x4cc201
lea ecx, [esp + 0x64]
call fcn.0040bb00
cmp dword [esp + 0x5c], 0
je 0x470d4b
mov ebp, dword [esp + 0x5c]
mov eax, dword [0x4bf2dc]
mov dword [ebp + 0x10], eax
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x5c]
push ecx
lea eax, [esp + 0x68]
push eax
call fcn.0040c300
add esp, 0xc
mov ebx, dword [esp + 4]
push ebx
lea eax, [esp + 0x68]
push eax
call fcn.0040cc60
pop ecx
pop ecx
lea eax, [esp + 0x64]
push eax
lea edx, [esp + 0x64]
push edx
lea eax, [esp + 0x70]
push eax
call fcn.0040c300
add esp, 0xc
push ebx
lea eax, [esp + 0x6c]
push eax
mov eax, dword [esp + 0x10]
mov ebx, dword [eax + 0xf0]
mov eax, dword [ebx + 0x70]
push eax
call fcn.00417970
add esp, 0xc
cmp dword [esp + 0x68], 0
je 0x470db6
mov ecx, dword [esp + 0x68]
call fcn.0040b9e0
cmp dword [esp + 0x64], 0
je 0x470dc6
mov ecx, dword [esp + 0x64]
call fcn.0040b9e0
cmp dword [esp + 0x60], 0
je 0x470dd6
mov ecx, dword [esp + 0x60]
call fcn.0040b9e0
cmp dword [esp + 0x5c], 0
je 0x470de6
mov ecx, dword [esp + 0x5c]
call fcn.0040b9e0
cmp dword [esp + 0x58], 0
je 0x470df6
mov ecx, dword [esp + 0x58]
call fcn.0040b9e0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 4]
mov dword [eax + 0x14], ecx
mov esi, dword [esi + 0x10]
test esi, esi
je 0x470fef
lea eax, [eax]
push 0x4cc1f5
lea ecx, [esi + 4]
call fcn.0040bbb0
push eax
call fcn.0040ca90
pop ecx
pop ecx
test eax, eax
jne 0x470e30
mov al, 1
jmp 0x470e32
xor al, al
test al, al
je 0x470e45
lea eax, [esi + 8]
push eax
lea ecx, [esp + 0x24]
call fcn.0040bbd0
jmp 0x470e77
push 0x4cc1ef
lea ecx, [esi + 4]
call fcn.0040bbb0
push eax
call fcn.0040ca90
pop ecx
pop ecx
test eax, eax
jne 0x470e62
mov al, 1
jmp 0x470e64
xor al, al
test al, al
je 0x470e77
lea ecx, [esi + 8]
call fcn.0040bb90
push eax
call fcn.0040cc10
pop ecx
mov eax, dword [esp + 4]
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x470eed
mov edi, dword [ebx + 0x50]
test edi, edi
je 0x470ee2
lea eax, [eax]
mov edx, dword [esi + 4]
test edx, edx
je 0x470ea0
mov eax, dword [edx + 0xc]
jmp 0x470ea2
xor eax, eax
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x470eb0
mov ebp, dword [ecx + 0xc]
jmp 0x470eb2
xor ebp, ebp
push eax
lea ecx, [esi + 4]
call fcn.0040bbb0
push eax
push ebp
lea ecx, [edi + 8]
call fcn.0040bbb0
push eax
call fcn.0040cb30
add esp, 0x10
test eax, eax
jne 0x470ed6
mov al, 1
jmp 0x470ed8
xor al, al
test al, al
jne 0x470ee2
mov edi, dword [edi]
test edi, edi
jne 0x470e90
test edi, edi
jne 0x470eed
mov ebx, dword [ebx + 0x18]
test ebx, ebx
jne 0x470e82
test edi, edi
je 0x470fe5
mov ebp, dword [edi + 0xc]
mov eax, ebp
mov ecx, dword [eax]
cmp ecx, 3
jne 0x470f54
mov eax, dword [esi + 8]
mov dword [esp + 0x6c], eax
test eax, eax
je 0x470f13
mov ecx, eax
call fcn.0040b9a0
lea ecx, [esp + 0x24]
push ecx
lea eax, [esp + 0x70]
push eax
call dword [0x4d4228]
pop ecx
pop ecx
cmp dword [esp + 0x6c], 0
je 0x470f35
mov ecx, dword [esp + 0x6c]
call fcn.0040b9e0
mov eax, dword [esp + 0x24]
push eax
call fcn.00496aa0
pop ecx
push eax
mov eax, dword [edi + 0x20]
push eax
push dword [esp + 0xc]
call dword [edi + 0x1c]
add esp, 0xc
jmp 0x470fe5
test ecx, ecx
jne 0x470fe5
test edi, edi
je 0x470fe5
cmp dword [edi + 0x1c], 0
je 0x470fe5
test ebp, ebp
je 0x470fe5
cmp dword [ebp + 0xc], 0
je 0x470fe5
mov eax, dword [esi + 8]
mov dword [esp + 0x70], eax
test eax, eax
je 0x470f86
mov ecx, eax
call fcn.0040b9a0
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x74]
push eax
mov ebp, dword [edi + 0xc]
call dword [ebp + 0xc]
pop ecx
pop ecx
mov bl, al
cmp dword [esp + 0x70], 0
je 0x470faa
mov ecx, dword [esp + 0x70]
call fcn.0040b9e0
test bl, bl
je 0x470fe5
cmp dword [edi + 0xc], 0x4d4234
jne 0x470fc0
mov ecx, dword [esp + 0x1c]
push ecx
jmp 0x470fc5
mov ebp, dword [esp + 0x1c]
push ebp
mov eax, dword [edi + 0x20]
push eax
push dword [esp + 0xc]
call dword [edi + 0x1c]
add esp, 0xc
mov eax, dword [edi + 0xc]
mov ebx, dword [eax + 0x10]
test ebx, ebx
je 0x470fe5
mov eax, dword [esp + 0x1c]
push eax
call ebx
pop ecx
mov esi, dword [esi]
test esi, esi
jne 0x470e10
cmp byte [esp + 0x18], 0
je 0x471001
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 4]
mov dword [eax + 0x24], ecx
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x10]
mov eax, dword [esp + 4]
mov dword [eax + 0x10], edx
cmp byte [esp + 0x18], 0
je 0x4711a3
mov eax, dword [0x4d2628]
push eax
push dword [esp + 8]
call fcn.004457d0
pop ecx
pop ecx
mov ebp, eax
mov byte [0x4f6060], 1
test ebp, ebp
je 0x47103f
push dword [esp + 4]
call ebp
pop ecx
mov byte [0x4f6060], 0
mov eax, dword [esp + 4]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x471185
mov esi, dword [ecx]
call dword [esi + 0x5c]
mov ebx, eax
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x1c]
push eax
mov ecx, ebx
mov edi, dword [ecx]
call dword [edi + 0x11c]
mov ecx, ebx
mov ebp, dword [ecx]
call dword [ebp + 0x5c]
test eax, eax
je 0x47108b
mov ecx, dword [esp + 4]
mov edx, dword [ecx + 0x1c]
push edx
mov ecx, eax
mov esi, dword [ecx]
call dword [esi + 0x118]
mov eax, dword [esp + 4]
cmp byte [eax + 0x2c], 0
jne 0x4710a2
push 8
mov ecx, dword [eax + 0x1c]
mov edi, dword [ecx]
call dword [edi + 0xac]
mov eax, dword [esp + 4]
cmp byte [eax + 0x2d], 0
jne 0x4710b9
push 6
mov ecx, dword [eax + 0x1c]
mov ebx, dword [ecx]
call dword [ebx + 0xac]
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x4c]
mov dword [esp + 0x74], eax
test eax, eax
je 0x4710cf
mov ecx, eax
call fcn.0040b9a0
lea eax, [esp + 0x74]
push eax
mov eax, dword [esp + 8]
mov ecx, dword [eax + 0x1c]
call fcn.004523b0
cmp dword [esp + 0x74], 0
je 0x4710f0
mov ecx, dword [esp + 0x74]
call fcn.0040b9e0
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x54]
mov dword [esp + 0x78], eax
test eax, eax
je 0x471106
mov ecx, eax
call fcn.0040b9a0
lea eax, [esp + 0x78]
push eax
mov eax, dword [esp + 8]
mov ecx, dword [eax + 0x1c]
mov ebp, dword [ecx]
call dword [ebp + 0x110]
cmp dword [esp + 0x78], 0
je 0x47112a
mov ecx, dword [esp + 0x78]
call fcn.0040b9e0
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x50]
mov dword [esp + 0x7c], eax
test eax, eax
je 0x471140
mov ecx, eax
call fcn.0040b9a0
lea eax, [esp + 0x7c]
push eax
mov eax, dword [esp + 8]
mov ecx, dword [eax + 0x1c]
call fcn.00452400
cmp dword [esp + 0x7c], 0
je 0x471161
mov ecx, dword [esp + 0x7c]
call fcn.0040b9e0
push 8
call fcn.004496d0
pop ecx
test eax, eax
je 0x471178
push dword [esp + 4]
mov ecx, eax
call fcn.00472150
push eax
mov eax, dword [esp + 8]
mov ecx, dword [eax + 0x1c]
call fcn.0040b350
mov eax, dword [0x4d2640]
push eax
push dword [esp + 8]
call fcn.004457d0
pop ecx
pop ecx
mov esi, eax
test esi, esi
je 0x4711a3
push dword [esp + 4]
call esi
pop ecx
cmp dword [esp + 0x20], 0
je 0x4711b3
mov ecx, dword [esp + 0x20]
call fcn.0040b9e0
mov eax, dword [esp + 4]
sub esp, 0xffffff80
pop ebp
pop edi
pop esi
pop ebx
ret 4