Function at 0x470730
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc4]
cmp eax, dword [ecx + 8]
jbe 0x4712fd
sub esp, 0x144
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
mov eax, dword [esp + 0x14c]
test eax, eax
je 0x470b40
mov ecx, dword [esp + 0x15c]
test ecx, ecx
jne 0x47079f
lea ecx, [0x98a8c0]
mov edx, dword [ecx + 0x20]
test edx, edx
jne 0x4707ac
lea edx, [0x98a900]
mov ebx, dword [ecx + 0x18]
cmp ebx, 3
jg 0x470b04
jl 0x470ac8
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xcc], edx
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx]
test ebx, ebx
jne 0x4707de
mov ebx, dword [esp + 0x148]
jmp 0x470817
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x148]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004702f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x470a98
mov eax, ebp
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00471510
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test ecx, ecx
je 0x47083b
xor edx, edx
jmp 0x470847
test ebx, ebx
jbe 0x4712f3
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
test ecx, ecx
jne 0x470a76
mov dword [esp + 0xc8], edx
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax + 8]
mov ebx, dword [eax + 4]
test ecx, ecx
jne 0x4708b0
mov eax, dword [esp + 0x150]
mov dword [esp], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 8], eax
call fcn.0046fc50
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xcc]
mov edx, dword [esp + 0xc8]
test ecx, ecx
jne 0x4708b8
xor ecx, ecx
jmp 0x47090e
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00471510
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test eax, eax
je 0x4708dc
xor edx, edx
jmp 0x4708e8
test ebx, ebx
jbe 0x4712ea
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test eax, eax
jne 0x470a54
mov eax, dword [esp + 0xcc]
mov ecx, edx
mov edx, dword [esp + 0xc8]
mov dword [esp + 0xd8], ecx
mov ebx, dword [esp + 0xe4]
mov ebp, dword [ebx + 4]
mov esi, dword [ebx]
test ebp, ebp
jne 0x470929
xor ebp, ebp
jmp 0x470971
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00471510
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test ecx, ecx
je 0x47094d
xor edx, edx
jmp 0x470959
test ebx, ebx
jbe 0x4712e1
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
test ecx, ecx
jne 0x470a32
mov ebp, edx
mov dword [esp + 0xd4], ebp
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x58], 0
lea eax, [esp + 0x44]
mov dword [esp], eax
lea eax, [esp + 0x40]
mov dword [esp + 4], eax
lea eax, [esp + 0x58]
mov dword [esp + 8], eax
call fcn.00476fa0
mov eax, dword [esp + 0x44]
cmp eax, 6
jae 0x4709bc
mov eax, 1
jmp 0x4709ca
jne 0x4709c8
cmp dword [esp + 0x40], 1
setbe al
jmp 0x4709ca
xor eax, eax
mov byte [esp + 0x37], al
call fcn.00475300
mov eax, dword [esp]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xcc]
mov edx, dword [ecx + 0x2c]
test edx, edx
jne 0x4709ea
mov edx, eax
mov dword [esp + 0x38], edx
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x54], ecx
lea ebx, [0x6cd5a0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044b8f0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 0xe4]
mov edx, dword [ecx + 0x18]
mov dword [esp + 0x64], edx
xor ebx, ebx
jmp 0x470b7d
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.004364e0
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.004364e0
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.004364e0
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
call fcn.004364e0
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x79dd44]
mov dword [esp + 0x168], eax
lea eax, [0x79c7e4]
mov dword [esp + 0x16c], eax
call fcn.004364e0
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x79dd44]
mov dword [esp + 0x168], eax
lea eax, [0x79c7e8]
mov dword [esp + 0x16c], eax
call fcn.004364e0
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x79dd44]
mov dword [esp + 0x168], eax
lea eax, [0x79c7e8]
mov dword [esp + 0x16c], eax
call fcn.004364e0
add esp, 0x144
ret
inc ebx
cmp ebx, edx
jge 0x470cba
mov ebp, dword [ecx + 0x18]
mov esi, dword [ecx + 0x14]
cmp ebx, ebp
jae 0x4712d8
mov ebp, dword [esi + ebx*4]
test ebp, ebp
jbe 0x470b7c
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x3c]
cmp esi, edi
je 0x470bcc
movzx edx, byte [esp + 0x37]
test dl, dl
je 0x470bd1
mov dword [esp + 0x60], ebp
and ebp, 0x10000003
cmp ebp, 3
jne 0x470bc6
mov ebp, dword [esp + 0x60]
mov esi, edi
jmp 0x470bd1
mov ebp, dword [esp + 0x60]
jmp 0x470bd1
movzx edx, byte [esp + 0x37]
mov edx, dword [esp + 0x54]
cmp ebx, edx
jae 0x4712cf
mov dword [esp + 0x4c], ebx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
lea ecx, [eax + ebx*4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
mov byte [esp + 0x14], 1
mov dword [esp + 0x18], 2
call fcn.00474b20
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x470c8a
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xe0]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0x5c], edx
lea ebx, [0x6e01c0]
mov dword [esp], ebx
call fcn.0040b7f0
mov eax, dword [esp + 4]
lea ecx, [0x471390]
mov dword [eax], ecx
mov edx, dword [esp + 0x38]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0x5c]
mov dword [eax + 8], ebx
mov dword [esp], eax
call fcn.00435e10
test eax, eax
jne 0x470c7e
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xe4]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x4c]
jmp 0x470b7c
call fcn.004364e0
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
call fcn.004364e0
add esp, 0x144
ret
lea edi, [esp + 0xfc]
xor eax, eax
call fcn.0046360e
mov dword [esp], 2
call fcn.00473260
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x168], edx
mov dword [esp + 0x16c], ebx
test ebp, ebp
jne 0x470efe
mov eax, dword [esp + 0x140]
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
lea ecx, [0x471350]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
lea eax, [esp + 0xe8]
mov dword [esp + 0xb0], eax
lea eax, [esp + 0xa4]
mov dword [esp], eax
call fcn.00435ef0
test eax, eax
jne 0x470ef2
mov dword [esp + 0xfc], 0x48
mov dword [esp + 0x128], 0x100
mov edx, dword [esp + 0xcc]
movzx ebx, byte [edx]
test bl, bl
je 0x470d90
mov dword [esp + 0x128], 0x101
mov word [esp + 0x12c], 0
mov ebx, dword [edx + 0x2c]
test ebx, ebx
je 0x470dfe
mov eax, dword [esp + 0x140]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20000
lea eax, [edx + 0x2c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.004769e0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test edx, edx
jne 0x470ed0
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x54]
test ebx, ebx
jbe 0x4712c6
mov ebp, dword [esp + 0xe0]
mov esi, dword [ebp]
mov dword [esp + 0x134], esi
cmp ebx, 1
jbe 0x4712ba
mov esi, dword [ebp + 4]
mov dword [esp + 0x138], esi
cmp ebx, 2
jbe 0x4712ae
mov eax, dword [ebp + 8]
mov dword [esp + 0x13c], eax
mov eax, dword [edx + 0x24]
lea ecx, [ebx + eax]
mov dword [esp + 0x50], ecx
mov esi, dword [edx + 0x20]
cmp ebx, ecx
jb 0x470e56
mov edi, ebx
jmp 0x470e9a
mov dword [esp + 0x64], eax
mov dword [esp + 0xdc], esi
lea eax, [0x6cd5a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0x54]
mov ebp, eax
mov ebx, ecx
mov eax, dword [esp + 0x64]
mov dword [esp + 0x54], ebx
mov dword [esp + 0xd0], ebp
lea ecx, [ebp + edi*4]
mov dword [esp], ecx
mov dword [esp + 4], esi
shl eax, 2
mov dword [esp + 8], eax
call fcn.00463d10
mov eax, dword [esp + 0xd0]
movzx ecx, byte [esp + 0x37]
mov edx, dword [esp + 0x50]
xor ebx, ebx
jmp 0x470f21
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.004364e0
add esp, 0x144
ret
call fcn.004364e0
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.004364e0
add esp, 0x144
ret
inc ebx
cmp ebx, edx
jge 0x470f46
jae 0x4712a5
mov ebp, dword [eax + ebx*4]
test cl, cl
je 0x470f20
and ebp, 0x10000003
cmp ebp, 3
jne 0x470f20
mov dword [eax + ebx*4], 0
jmp 0x470f20
xor ecx, ecx
xor ebx, ebx
jmp 0x470f4d
inc ecx
cmp ecx, edx
jge 0x470f6c
jae 0x47129c
mov ebp, dword [eax + ecx*4]
test ebp, ebp
je 0x470f4c
cmp ebx, edx
jae 0x471293
mov dword [eax + ebx*4], ebp
inc ebx
jmp 0x470f4c
mov edx, dword [esp + 0x54]
cmp ebx, edx
ja 0x47128c
test ebx, ebx
je 0x470f8c
mov ebp, dword [esp + 0xcc]
movzx esi, byte [ebp + 0x1c]
xor esi, 1
jmp 0x470f95
mov ebp, dword [esp + 0xcc]
xor esi, esi
xchg esi, eax
mov byte [esp + 0x36], al
xchg esi, eax
mov dword [esp + 0x48], ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x47102b
mov edi, dword [esp + 0x140]
test ebx, ebx
jbe 0x471283
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20002
mov dword [esp + 0xc], eax
shl ebx, 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.004769e0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test edx, edx
je 0x47102b
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.004364e0
add esp, 0x144
ret
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0046fd50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
test ebx, ebx
jne 0x471261
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov ecx, dword [esp + 0xcc]
mov edx, dword [ecx + 0xc]
or edx, 0x80400
mov ebx, dword [ecx + 0x10]
test ebx, ebx
je 0x47111b
mov ebp, dword [ecx + 0x14]
mov esi, dword [ecx + 0x18]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
movzx ebx, byte [esp + 0x36]
mov byte [esp + 0x14], bl
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x20], eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x28], eax
call fcn.004733d0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
jmp 0x471188
mov ebx, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x18]
mov esi, dword [esp + 0xc8]
mov dword [esp], esi
mov esi, dword [esp + 0xd8]
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
movzx ebx, byte [esp + 0x36]
mov byte [esp + 0x10], bl
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x24], eax
call fcn.004747a0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
mov eax, dword [esp + 0x168]
test eax, eax
jne 0x47123f
mov eax, dword [esp + 0x74]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
lea ecx, [0x471310]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x68]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00435ef0
test eax, eax
jne 0x471233
mov eax, dword [esp + 0xd0]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], ecx
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
call fcn.004364e0
add esp, 0x144
ret
call fcn.004364e0
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.004364e0
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.004364e0
add esp, 0x144
ret
xor eax, eax
mov ecx, eax
call fcn.004633d0
mov ecx, ebx
call fcn.00463410
mov eax, ebx
mov ecx, edx
call fcn.004633d0
mov eax, ecx
mov ecx, edx
call fcn.004633d0
mov eax, ebx
mov ecx, edx
call fcn.004633d0
mov eax, 2
mov ecx, eax
call fcn.004633d0
mov eax, 1
mov ecx, eax
call fcn.004633d0
xor eax, eax
mov ecx, eax
call fcn.004633d0
mov eax, ebx
mov ecx, edx
call fcn.004633d0
mov eax, ebx
mov ecx, ebp
call fcn.004633d0
xor eax, eax
mov ecx, eax
call fcn.004633d0
xor eax, eax
mov ecx, eax
call fcn.004633d0
xor eax, eax
mov ecx, eax
call fcn.004633d0
nop
call fcn.00461f40
jmp fcn.00470730