Function at 0x46ff40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc4]
cmp eax, dword [ecx + 8]
jbe 0x470b0d
sub esp, 0x144
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
mov eax, dword [esp + 0x14c]
test eax, eax
je 0x470350
mov ecx, dword [esp + 0x15c]
test ecx, ecx
jne 0x46ffaf
lea ecx, [0x11091c0]
mov edx, dword [ecx + 0x20]
test edx, edx
jne 0x46ffbc
lea edx, [0x1109200]
mov ebx, dword [ecx + 0x18]
cmp ebx, 3
jg 0x470314
jl 0x4702d8
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xcc], edx
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx]
test ebx, ebx
jne 0x46ffee
mov ebx, dword [esp + 0x148]
jmp 0x470027
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x148]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0046fb00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x4702a8
mov eax, ebp
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00470d20
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test ecx, ecx
je 0x47004b
xor edx, edx
jmp 0x470057
test ebx, ebx
jbe 0x470b03
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
test ecx, ecx
jne 0x470286
mov dword [esp + 0xc8], edx
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax + 8]
mov ebx, dword [eax + 4]
test ecx, ecx
jne 0x4700c0
mov eax, dword [esp + 0x150]
mov dword [esp], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 8], eax
call fcn.0046f460
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xcc]
mov edx, dword [esp + 0xc8]
test ecx, ecx
jne 0x4700c8
xor ecx, ecx
jmp 0x47011e
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00470d20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test eax, eax
je 0x4700ec
xor edx, edx
jmp 0x4700f8
test ebx, ebx
jbe 0x470afa
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test eax, eax
jne 0x470264
mov eax, dword [esp + 0xcc]
mov ecx, edx
mov edx, dword [esp + 0xc8]
mov dword [esp + 0xd8], ecx
mov ebx, dword [esp + 0xe4]
mov ebp, dword [ebx + 4]
mov esi, dword [ebx]
test ebp, ebp
jne 0x470139
xor ebp, ebp
jmp 0x470181
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00470d20
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test ecx, ecx
je 0x47015d
xor edx, edx
jmp 0x470169
test ebx, ebx
jbe 0x470af1
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
test ecx, ecx
jne 0x470242
mov ebp, edx
mov dword [esp + 0xd4], ebp
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x58], 0
lea eax, [esp + 0x44]
mov dword [esp], eax
lea eax, [esp + 0x40]
mov dword [esp + 4], eax
lea eax, [esp + 0x58]
mov dword [esp + 8], eax
call fcn.00476230
mov eax, dword [esp + 0x44]
cmp eax, 6
jae 0x4701cc
mov eax, 1
jmp 0x4701da
jne 0x4701d8
cmp dword [esp + 0x40], 1
setbe al
jmp 0x4701da
xor eax, eax
mov byte [esp + 0x37], al
call fcn.00474800
mov eax, dword [esp]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xcc]
mov edx, dword [ecx + 0x2c]
test edx, edx
jne 0x4701fa
mov edx, eax
mov dword [esp + 0x38], edx
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x54], ecx
lea ebx, [0x678260]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044b6a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 0xe4]
mov edx, dword [ecx + 0x18]
mov dword [esp + 0x64], edx
xor ebx, ebx
jmp 0x47038d
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436430
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436430
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436430
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
call fcn.00436430
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x72a884]
mov dword [esp + 0x168], eax
lea eax, [0x7297e8]
mov dword [esp + 0x16c], eax
call fcn.00436430
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x72a884]
mov dword [esp + 0x168], eax
lea eax, [0x7297ec]
mov dword [esp + 0x16c], eax
call fcn.00436430
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x72a884]
mov dword [esp + 0x168], eax
lea eax, [0x7297ec]
mov dword [esp + 0x16c], eax
call fcn.00436430
add esp, 0x144
ret
inc ebx
cmp ebx, edx
jge 0x4704ca
mov ebp, dword [ecx + 0x18]
mov esi, dword [ecx + 0x14]
cmp ebx, ebp
jae 0x470ae8
mov ebp, dword [esi + ebx*4]
test ebp, ebp
jbe 0x47038c
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x3c]
cmp esi, edi
je 0x4703dc
movzx edx, byte [esp + 0x37]
test dl, dl
je 0x4703e1
mov dword [esp + 0x60], ebp
and ebp, 0x10000003
cmp ebp, 3
jne 0x4703d6
mov ebp, dword [esp + 0x60]
mov esi, edi
jmp 0x4703e1
mov ebp, dword [esp + 0x60]
jmp 0x4703e1
movzx edx, byte [esp + 0x37]
mov edx, dword [esp + 0x54]
cmp ebx, edx
jae 0x470adf
mov dword [esp + 0x4c], ebx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
lea ecx, [eax + ebx*4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
mov byte [esp + 0x14], 1
mov dword [esp + 0x18], 2
call fcn.00474020
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x47049a
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xe0]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0x5c], edx
lea ebx, [0x686a00]
mov dword [esp], ebx
call fcn.0040b7f0
mov eax, dword [esp + 4]
lea ecx, [0x470ba0]
mov dword [eax], ecx
mov edx, dword [esp + 0x38]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0x5c]
mov dword [eax + 8], ebx
mov dword [esp], eax
call fcn.00435d60
test eax, eax
jne 0x47048e
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xe4]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x4c]
jmp 0x47038c
call fcn.00436430
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
call fcn.00436430
add esp, 0x144
ret
lea edi, [esp + 0xfc]
xor eax, eax
call fcn.004630de
mov dword [esp], 2
call fcn.004729b0
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x168], edx
mov dword [esp + 0x16c], ebx
test ebp, ebp
jne 0x47070e
mov eax, dword [esp + 0x140]
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
lea ecx, [0x470b60]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
lea eax, [esp + 0xe8]
mov dword [esp + 0xb0], eax
lea eax, [esp + 0xa4]
mov dword [esp], eax
call fcn.00435e40
test eax, eax
jne 0x470702
mov dword [esp + 0xfc], 0x48
mov dword [esp + 0x128], 0x100
mov edx, dword [esp + 0xcc]
movzx ebx, byte [edx]
test bl, bl
je 0x4705a0
mov dword [esp + 0x128], 0x101
mov word [esp + 0x12c], 0
mov ebx, dword [edx + 0x2c]
test ebx, ebx
je 0x47060e
mov eax, dword [esp + 0x140]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20000
lea eax, [edx + 0x2c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00475c70
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test edx, edx
jne 0x4706e0
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x54]
test ebx, ebx
jbe 0x470ad6
mov ebp, dword [esp + 0xe0]
mov esi, dword [ebp]
mov dword [esp + 0x134], esi
cmp ebx, 1
jbe 0x470aca
mov esi, dword [ebp + 4]
mov dword [esp + 0x138], esi
cmp ebx, 2
jbe 0x470abe
mov eax, dword [ebp + 8]
mov dword [esp + 0x13c], eax
mov eax, dword [edx + 0x24]
lea ecx, [ebx + eax]
mov dword [esp + 0x50], ecx
mov esi, dword [edx + 0x20]
cmp ebx, ecx
jb 0x470666
mov edi, ebx
jmp 0x4706aa
mov dword [esp + 0x64], eax
mov dword [esp + 0xdc], esi
lea eax, [0x678260]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0044b8a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0x54]
mov ebp, eax
mov ebx, ecx
mov eax, dword [esp + 0x64]
mov dword [esp + 0x54], ebx
mov dword [esp + 0xd0], ebp
lea ecx, [ebp + edi*4]
mov dword [esp], ecx
mov dword [esp + 4], esi
shl eax, 2
mov dword [esp + 8], eax
call fcn.004637e0
mov eax, dword [esp + 0xd0]
movzx ecx, byte [esp + 0x37]
mov edx, dword [esp + 0x50]
xor ebx, ebx
jmp 0x470731
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436430
add esp, 0x144
ret
call fcn.00436430
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436430
add esp, 0x144
ret
inc ebx
cmp ebx, edx
jge 0x470756
jae 0x470ab5
mov ebp, dword [eax + ebx*4]
test cl, cl
je 0x470730
and ebp, 0x10000003
cmp ebp, 3
jne 0x470730
mov dword [eax + ebx*4], 0
jmp 0x470730
xor ecx, ecx
xor ebx, ebx
jmp 0x47075d
inc ecx
cmp ecx, edx
jge 0x47077c
jae 0x470aac
mov ebp, dword [eax + ecx*4]
test ebp, ebp
je 0x47075c
cmp ebx, edx
jae 0x470aa3
mov dword [eax + ebx*4], ebp
inc ebx
jmp 0x47075c
mov edx, dword [esp + 0x54]
cmp ebx, edx
ja 0x470a9c
test ebx, ebx
je 0x47079c
mov ebp, dword [esp + 0xcc]
movzx esi, byte [ebp + 0x1c]
xor esi, 1
jmp 0x4707a5
mov ebp, dword [esp + 0xcc]
xor esi, esi
xchg esi, eax
mov byte [esp + 0x36], al
xchg esi, eax
mov dword [esp + 0x48], ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x47083b
mov edi, dword [esp + 0x140]
test ebx, ebx
jbe 0x470a93
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20002
mov dword [esp + 0xc], eax
shl ebx, 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00475c70
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test edx, edx
je 0x47083b
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436430
add esp, 0x144
ret
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0046f560
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
test ebx, ebx
jne 0x470a71
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov ecx, dword [esp + 0xcc]
mov edx, dword [ecx + 0xc]
or edx, 0x80400
mov ebx, dword [ecx + 0x10]
test ebx, ebx
je 0x47092b
mov ebp, dword [ecx + 0x14]
mov esi, dword [ecx + 0x18]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
movzx ebx, byte [esp + 0x36]
mov byte [esp + 0x14], bl
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x20], eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x28], eax
call fcn.00472b20
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
jmp 0x470998
mov ebx, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x18]
mov esi, dword [esp + 0xc8]
mov dword [esp], esi
mov esi, dword [esp + 0xd8]
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
movzx ebx, byte [esp + 0x36]
mov byte [esp + 0x10], bl
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x24], eax
call fcn.00473de0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
mov eax, dword [esp + 0x168]
test eax, eax
jne 0x470a4f
mov eax, dword [esp + 0x74]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
lea ecx, [0x470b20]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x68]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00435e40
test eax, eax
jne 0x470a43
mov eax, dword [esp + 0xd0]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], ecx
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
call fcn.00436430
add esp, 0x144
ret
call fcn.00436430
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436430
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436430
add esp, 0x144
ret
xor eax, eax
mov ecx, eax
call fcn.00462ef0
mov ecx, ebx
call fcn.00462f30
mov eax, ebx
mov ecx, edx
call fcn.00462ef0
mov eax, ecx
mov ecx, edx
call fcn.00462ef0
mov eax, ebx
mov ecx, edx
call fcn.00462ef0
mov eax, 2
mov ecx, eax
call fcn.00462ef0
mov eax, 1
mov ecx, eax
call fcn.00462ef0
xor eax, eax
mov ecx, eax
call fcn.00462ef0
mov eax, ebx
mov ecx, edx
call fcn.00462ef0
mov eax, ebx
mov ecx, ebp
call fcn.00462ef0
xor eax, eax
mov ecx, eax
call fcn.00462ef0
xor eax, eax
mov ecx, eax
call fcn.00462ef0
xor eax, eax
mov ecx, eax
call fcn.00462ef0
nop
call fcn.00461a60
jmp fcn.0046ff40