Function at 0x4b6470
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x40]
cmp eax, dword [ecx + 8]
jbe 0x4b6bf7
sub esp, 0xc0
mov eax, 0
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], eax
mov byte [esp + 0x43], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov eax, dword [esp + 0xc8]
test eax, eax
je 0x4b6bd2
call fcn.0047cfd0
lea edi, [esp + 0xa4]
lea esi, [esp]
call fcn.00465a5e
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
mov ecx, dword [esp + 0xc8]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xcc]
mov dword [esp + 8], edx
lea edi, [esp + 0xc]
lea esi, [esp + 0xa4]
call fcn.00465a5e
call fcn.004b4f60
lea edi, [esp + 0x7c]
lea esi, [esp + 0x20]
call fcn.00465a5e
lea edi, [esp]
lea esi, [esp + 0x7c]
call fcn.00465a5e
call fcn.0047b810
movzx eax, byte [esp + 0x14]
test al, al
je 0x4b6568
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0xcc]
xor eax, eax
jmp 0x4b6641
lea edi, [esp + 0xa4]
xor eax, eax
call fcn.0046557b
mov ecx, dword [esp + 0xc8]
mov edx, dword [ecx + 0x10]
mov ebx, dword [esp + 0xcc]
mov dword [esp], ebx
call edx
movzx ecx, byte [esp + 0x18]
mov byte [esp + 0x41], cl
lea edi, [esp + 0xa4]
lea esi, [esp + 4]
call fcn.00465a5e
lea edi, [esp + 0x90]
lea esi, [esp + 0xa4]
call fcn.00465a5e
movzx ecx, byte [esp + 0x41]
test cl, cl
je 0x4b65eb
lea edi, [esp]
lea esi, [esp + 0x7c]
call fcn.00465a5e
lea edi, [esp + 0x14]
lea esi, [esp + 0x90]
call fcn.00465a5e
call fcn.0047b470
movzx eax, byte [esp + 0x28]
test al, al
je 0x4b6631
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
lea edi, [esp + 8]
lea esi, [esp + 0x7c]
call fcn.00465a5e
call fcn.004ac0e0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov dword [esp + 0xbc], eax
mov byte [esp + 0x43], 1
mov eax, 1
jmp 0x4b6641
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0xcc]
xor eax, eax
mov ebx, dword [esp + 0xc4]
mov ebp, dword [ebx + 0x3c]
test ebp, ebp
je 0x4b6731
mov dword [esp + 0x68], ebp
mov byte [esp + 0x42], al
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.004ab260
mov eax, dword [esp + 0x10]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 8]
mov dword [esp + 0x44], ebx
mov dword [esp + 0xb8], eax
movzx ebp, byte [esp + 0x42]
or ebp, 2
xchg ebp, eax
mov byte [esp + 0x42], al
xchg ebp, eax
xchg ebp, eax
mov byte [esp + 0x43], al
xchg ebp, eax
lea esi, [0x4f3ce0]
mov dword [esp], esi
call fcn.0040cb10
mov eax, dword [esp + 4]
lea ecx, [0x4b6c10]
mov dword [eax], ecx
mov ecx, dword [0x60b520]
test ecx, ecx
jne 0x4b66d6
mov ecx, dword [esp + 0x68]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [eax + 8], ecx
jmp 0x4b66f2
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x68]
call fcn.00465480
lea edi, [ecx + 8]
mov eax, dword [esp + 0x70]
call fcn.00465480
mov eax, ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x60b520]
test ecx, ecx
jne 0x4b670c
mov ecx, dword [esp + 0x5c]
mov dword [eax + 0x10], ecx
jmp 0x4b671c
lea edi, [eax + 0x10]
mov ecx, eax
mov eax, dword [esp + 0x5c]
call fcn.00465480
mov eax, ecx
mov dword [esp], eax
call fcn.004437f0
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x5c]
movzx eax, byte [esp + 0x42]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x64], edx
mov byte [esp + 0x42], al
mov ebx, dword [ecx + 0x1c]
mov dword [esp], edx
lea ebp, [0x4ed6a0]
mov dword [esp + 4], ebp
lea esi, [0x60b388]
mov dword [esp + 8], esi
call ebx
mov eax, dword [esp + 0x10]
lea ecx, [0x4e5a20]
cmp dword [esp + 0xc], ecx
je 0x4b676b
xor eax, eax
test eax, eax
jne 0x4b677c
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x64]
jmp 0x4b6835
mov dword [esp + 0x58], eax
lea eax, [0x4f6b80]
mov dword [esp], eax
call fcn.0040cb10
mov edi, dword [esp + 4]
mov eax, dword [0x60b520]
mov ecx, dword [esp + 0x58]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
test eax, eax
jne 0x4b67ac
mov dword [edi], edx
mov dword [edi + 4], ecx
jmp 0x4b67c3
mov eax, edx
call fcn.00465480
lea edx, [edi + 4]
mov eax, ecx
mov ecx, edi
mov edi, edx
call fcn.00465480
mov edi, ecx
mov ecx, dword [0x60b520]
test ecx, ecx
jne 0x4b67dd
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
jmp 0x4b67f7
lea ecx, [edi + 8]
xor eax, eax
mov edx, edi
mov edi, ecx
call fcn.00465480
lea edi, [edx + 0xc]
xor eax, eax
call fcn.00465480
mov edi, edx
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], ecx
lea edx, [0x4ed6a0]
mov dword [esp + 8], edx
lea edx, [0x60b388]
mov dword [esp + 0xc], edx
lea edx, [0x4e5a20]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], edi
call fcn.004ac8d0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x78], edx
mov dword [esp + 0x54], ecx
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.004b50b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xc4]
mov edx, dword [ecx + 0x1c]
mov ebx, dword [ecx + 0x20]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 8], eax
lea eax, [0x503bce]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
mov ebp, dword [esp + 0xd0]
mov dword [esp + 0x14], ebp
mov esi, dword [esp + 0xd4]
mov dword [esp + 0x18], esi
mov edi, dword [esp + 0xd8]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0xdc]
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], ebx
call fcn.004b5690
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
test eax, eax
je 0x4b69ea
mov dword [esp + 0x78], edx
mov dword [esp + 0x6c], ecx
lea eax, [0x4f8a00]
mov dword [esp], eax
call fcn.0040cb10
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x503bce]
mov dword [eax], ecx
mov ecx, dword [esp + 0xd4]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x60b520]
test ecx, ecx
jne 0x4b6924
mov ecx, dword [esp + 0xd0]
mov dword [eax + 8], ecx
jmp 0x4b6937
lea edi, [eax + 8]
mov ecx, eax
mov eax, dword [esp + 0xd0]
call fcn.00465480
mov eax, ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov ecx, dword [esp + 0x78]
mov dword [eax + 0x20], ecx
mov ecx, dword [0x60b520]
test ecx, ecx
jne 0x4b696d
mov ecx, dword [esp + 0x6c]
mov dword [eax + 0x24], ecx
jmp 0x4b697d
lea edi, [eax + 0x24]
mov ecx, eax
mov eax, dword [esp + 0x6c]
call fcn.00465480
mov eax, ecx
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
lea ecx, [0x5183dc]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
movzx eax, byte [esp + 0x42]
test al, 2
je 0x4b69cc
and eax, 0xfffffffd
mov byte [esp + 0x42], al
mov byte [esp + 0x43], al
mov edx, dword [esp + 0xb8]
mov ecx, dword [edx]
call ecx
movzx eax, byte [esp + 0x42]
test al, 1
je 0x4b69e3
and eax, 0xfffffffe
mov byte [esp + 0x43], al
mov edx, dword [esp + 0xbc]
mov eax, dword [edx]
call eax
add esp, 0xc0
ret
mov dword [esp + 0x50], esi
mov dword [esp + 0x74], ebx
mov dword [esp + 0x4c], ebp
lea eax, [0x4f7000]
mov dword [esp], eax
call fcn.0040cb10
mov edi, dword [esp + 4]
mov dword [esp + 0x60], edi
mov eax, dword [0x60b520]
test eax, eax
jne 0x4b6a24
mov esi, dword [esp + 0xc4]
call fcn.004659dc
jmp 0x4b6a41
lea eax, [0x4fc560]
mov dword [esp], eax
mov dword [esp + 4], edi
mov eax, dword [esp + 0xc4]
mov dword [esp + 8], eax
call fcn.00412840
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0x60]
mov dword [edx + 0x4c], ecx
mov ebx, dword [0x60b520]
test ebx, ebx
jne 0x4b6a65
mov ebx, dword [esp + 0xd0]
mov dword [edx + 0x48], ebx
jmp 0x4b6a76
lea edi, [edx + 0x48]
mov eax, dword [esp + 0xd0]
call fcn.00465480
mov ebx, eax
mov ebp, dword [esp + 0xdc]
mov dword [edx + 0x54], ebp
mov ebp, dword [0x60b520]
test ebp, ebp
jne 0x4b6a96
mov eax, dword [esp + 0xd8]
mov dword [edx + 0x50], eax
jmp 0x4b6aa5
lea edi, [edx + 0x50]
mov eax, dword [esp + 0xd8]
call fcn.00465480
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.004b4e60
movzx eax, byte [esp + 4]
test al, al
je 0x4b6b1d
mov eax, dword [esp + 0xd4]
cmp eax, 3
jne 0x4b6b1d
mov eax, dword [esp + 0xd0]
cmp word [eax], 0x6374
jne 0x4b6b1d
cmp byte [eax + 2], 0x70
jne 0x4b6b1d
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
lea eax, [0x510624]
mov dword [esp + 0xc], eax
call fcn.004c1c50
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
jmp 0x4b6b2f
xor edx, edx
xor ecx, ecx
mov esi, dword [esp + 0x50]
mov ebp, dword [esp + 0x4c]
xor eax, eax
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x60]
mov dword [esp], edi
mov edi, dword [esp + 0x48]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x64]
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
call fcn.004b6cd0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], edx
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], ebx
movzx eax, byte [esp + 0x42]
test al, 2
je 0x4b6bb4
and eax, 0xfffffffd
mov byte [esp + 0x42], al
mov byte [esp + 0x43], al
mov edx, dword [esp + 0xb8]
mov ecx, dword [edx]
call ecx
movzx eax, byte [esp + 0x42]
test al, 1
je 0x4b6bcb
and eax, 0xfffffffe
mov byte [esp + 0x43], al
mov edx, dword [esp + 0xbc]
mov eax, dword [edx]
call eax
add esp, 0xc0
ret
lea eax, [0x4ec7e0]
mov dword [esp], eax
lea eax, [0x51800c]
mov dword [esp + 4], eax
call fcn.00438510
nop
call fcn.00437b40
add esp, 0xc0
ret
call fcn.00464070
jmp fcn.004b6470