Function at 0x4700f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc4]
cmp eax, dword [ecx + 8]
jbe 0x470cbd
sub esp, 0x144
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
mov eax, dword [esp + 0x14c]
test eax, eax
je 0x470500
mov ecx, dword [esp + 0x15c]
test ecx, ecx
jne 0x47015f
lea ecx, [0x8f8520]
mov edx, dword [ecx + 0x20]
test edx, edx
jne 0x47016c
lea edx, [0x8f8560]
mov ebx, dword [ecx + 0x18]
cmp ebx, 3
jg 0x4704c4
jl 0x470488
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xcc], edx
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx]
test ebx, ebx
jne 0x47019e
mov ebx, dword [esp + 0x148]
jmp 0x4701d7
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x148]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0046fcb0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
jne 0x470458
mov eax, ebp
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00470ed0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test ecx, ecx
je 0x4701fb
xor edx, edx
jmp 0x470207
test ebx, ebx
jbe 0x470cb3
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
test ecx, ecx
jne 0x470436
mov dword [esp + 0xc8], edx
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax + 8]
mov ebx, dword [eax + 4]
test ecx, ecx
jne 0x470270
mov eax, dword [esp + 0x150]
mov dword [esp], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 8], eax
call fcn.0046f610
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xcc]
mov edx, dword [esp + 0xc8]
test ecx, ecx
jne 0x470278
xor ecx, ecx
jmp 0x4702ce
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00470ed0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test eax, eax
je 0x47029c
xor edx, edx
jmp 0x4702a8
test ebx, ebx
jbe 0x470caa
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test eax, eax
jne 0x470414
mov eax, dword [esp + 0xcc]
mov ecx, edx
mov edx, dword [esp + 0xc8]
mov dword [esp + 0xd8], ecx
mov ebx, dword [esp + 0xe4]
mov ebp, dword [ebx + 4]
mov esi, dword [ebx]
test ebp, ebp
jne 0x4702e9
xor ebp, ebp
jmp 0x470331
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.00470ed0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test ecx, ecx
je 0x47030d
xor edx, edx
jmp 0x470319
test ebx, ebx
jbe 0x470ca1
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
test ecx, ecx
jne 0x4703f2
mov ebp, edx
mov dword [esp + 0xd4], ebp
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x58], 0
lea eax, [esp + 0x44]
mov dword [esp], eax
lea eax, [esp + 0x40]
mov dword [esp + 4], eax
lea eax, [esp + 0x58]
mov dword [esp + 8], eax
call fcn.00476720
mov eax, dword [esp + 0x44]
cmp eax, 6
jae 0x47037c
mov eax, 1
jmp 0x47038a
jne 0x470388
cmp dword [esp + 0x40], 1
setbe al
jmp 0x47038a
xor eax, eax
mov byte [esp + 0x37], al
call fcn.00474aa0
mov eax, dword [esp]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xcc]
mov edx, dword [ecx + 0x2c]
test edx, edx
jne 0x4703aa
mov edx, eax
mov dword [esp + 0x38], edx
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x54], ecx
lea ebx, [0x68d840]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044b3e0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xe0], eax
mov ecx, dword [esp + 0xe4]
mov edx, dword [ecx + 0x18]
mov dword [esp + 0x64], edx
xor ebx, ebx
jmp 0x47053d
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436170
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436170
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436170
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
call fcn.00436170
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x73de6c]
mov dword [esp + 0x168], eax
lea eax, [0x73cdd0]
mov dword [esp + 0x16c], eax
call fcn.00436170
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x73de6c]
mov dword [esp + 0x168], eax
lea eax, [0x73cdd4]
mov dword [esp + 0x16c], eax
call fcn.00436170
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea eax, [0x73de6c]
mov dword [esp + 0x168], eax
lea eax, [0x73cdd4]
mov dword [esp + 0x16c], eax
call fcn.00436170
add esp, 0x144
ret
inc ebx
cmp ebx, edx
jge 0x47067a
mov ebp, dword [ecx + 0x18]
mov esi, dword [ecx + 0x14]
cmp ebx, ebp
jae 0x470c98
mov ebp, dword [esi + ebx*4]
test ebp, ebp
jbe 0x47053c
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x3c]
cmp esi, edi
je 0x47058c
movzx edx, byte [esp + 0x37]
test dl, dl
je 0x470591
mov dword [esp + 0x60], ebp
and ebp, 0x10000003
cmp ebp, 3
jne 0x470586
mov ebp, dword [esp + 0x60]
mov esi, edi
jmp 0x470591
mov ebp, dword [esp + 0x60]
jmp 0x470591
movzx edx, byte [esp + 0x37]
mov edx, dword [esp + 0x54]
cmp ebx, edx
jae 0x470c8f
mov dword [esp + 0x4c], ebx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
lea ecx, [eax + ebx*4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
mov byte [esp + 0x14], 1
mov dword [esp + 0x18], 2
call fcn.004741d0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x47064a
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xe0]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0x5c], edx
lea ebx, [0x69c940]
mov dword [esp], ebx
call fcn.0040b7c0
mov eax, dword [esp + 4]
lea ecx, [0x470d50]
mov dword [eax], ecx
mov edx, dword [esp + 0x38]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0x5c]
mov dword [eax + 8], ebx
mov dword [esp], eax
call fcn.00435aa0
test eax, eax
jne 0x47063e
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xe4]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x4c]
jmp 0x47053c
call fcn.00436170
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
call fcn.00436170
add esp, 0x144
ret
lea edi, [esp + 0xfc]
xor eax, eax
call fcn.0046313e
mov dword [esp], 2
call fcn.00472b60
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x168], edx
mov dword [esp + 0x16c], ebx
test ebp, ebp
jne 0x4708be
mov eax, dword [esp + 0x140]
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
lea ecx, [0x470d10]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
lea eax, [esp + 0xe8]
mov dword [esp + 0xb0], eax
lea eax, [esp + 0xa4]
mov dword [esp], eax
call fcn.00435b80
test eax, eax
jne 0x4708b2
mov dword [esp + 0xfc], 0x48
mov dword [esp + 0x128], 0x100
mov edx, dword [esp + 0xcc]
movzx ebx, byte [edx]
test bl, bl
je 0x470750
mov dword [esp + 0x128], 0x101
mov word [esp + 0x12c], 0
mov ebx, dword [edx + 0x2c]
test ebx, ebx
je 0x4707be
mov eax, dword [esp + 0x140]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20000
lea eax, [edx + 0x2c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00476160
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test edx, edx
jne 0x470890
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x54]
test ebx, ebx
jbe 0x470c86
mov ebp, dword [esp + 0xe0]
mov esi, dword [ebp]
mov dword [esp + 0x134], esi
cmp ebx, 1
jbe 0x470c7a
mov esi, dword [ebp + 4]
mov dword [esp + 0x138], esi
cmp ebx, 2
jbe 0x470c6e
mov eax, dword [ebp + 8]
mov dword [esp + 0x13c], eax
mov eax, dword [edx + 0x24]
lea ecx, [ebx + eax]
mov dword [esp + 0x50], ecx
mov esi, dword [edx + 0x20]
cmp ebx, ecx
jb 0x470816
mov edi, ebx
jmp 0x47085a
mov dword [esp + 0x64], eax
mov dword [esp + 0xdc], esi
lea eax, [0x68d840]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0044b5e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0xdc]
mov edi, dword [esp + 0x54]
mov ebp, eax
mov ebx, ecx
mov eax, dword [esp + 0x64]
mov dword [esp + 0x54], ebx
mov dword [esp + 0xd0], ebp
lea ecx, [ebp + edi*4]
mov dword [esp], ecx
mov dword [esp + 4], esi
shl eax, 2
mov dword [esp + 8], eax
call fcn.00463840
mov eax, dword [esp + 0xd0]
movzx ecx, byte [esp + 0x37]
mov edx, dword [esp + 0x50]
xor ebx, ebx
jmp 0x4708e1
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436170
add esp, 0x144
ret
call fcn.00436170
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436170
add esp, 0x144
ret
inc ebx
cmp ebx, edx
jge 0x470906
jae 0x470c65
mov ebp, dword [eax + ebx*4]
test cl, cl
je 0x4708e0
and ebp, 0x10000003
cmp ebp, 3
jne 0x4708e0
mov dword [eax + ebx*4], 0
jmp 0x4708e0
xor ecx, ecx
xor ebx, ebx
jmp 0x47090d
inc ecx
cmp ecx, edx
jge 0x47092c
jae 0x470c5c
mov ebp, dword [eax + ecx*4]
test ebp, ebp
je 0x47090c
cmp ebx, edx
jae 0x470c53
mov dword [eax + ebx*4], ebp
inc ebx
jmp 0x47090c
mov edx, dword [esp + 0x54]
cmp ebx, edx
ja 0x470c4c
test ebx, ebx
je 0x47094c
mov ebp, dword [esp + 0xcc]
movzx esi, byte [ebp + 0x1c]
xor esi, 1
jmp 0x470955
mov ebp, dword [esp + 0xcc]
xor esi, esi
xchg esi, eax
mov byte [esp + 0x36], al
xchg esi, eax
mov dword [esp + 0x48], ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x4709eb
mov edi, dword [esp + 0x140]
test ebx, ebx
jbe 0x470c43
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20002
mov dword [esp + 0xc], eax
shl ebx, 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00476160
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
test edx, edx
je 0x4709eb
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436170
add esp, 0x144
ret
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0046f710
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
test ebx, ebx
jne 0x470c21
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov ecx, dword [esp + 0xcc]
mov edx, dword [ecx + 0xc]
or edx, 0x80400
mov ebx, dword [ecx + 0x10]
test ebx, ebx
je 0x470adb
mov ebp, dword [ecx + 0x14]
mov esi, dword [ecx + 0x18]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
movzx ebx, byte [esp + 0x36]
mov byte [esp + 0x14], bl
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x20], eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x28], eax
call fcn.00472cd0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
jmp 0x470b48
mov ebx, dword [ecx + 0x14]
mov ebp, dword [ecx + 0x18]
mov esi, dword [esp + 0xc8]
mov dword [esp], esi
mov esi, dword [esp + 0xd8]
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
movzx ebx, byte [esp + 0x36]
mov byte [esp + 0x10], bl
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0xfc]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x24], eax
call fcn.00473f90
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
mov eax, dword [esp + 0x168]
test eax, eax
jne 0x470bff
mov eax, dword [esp + 0x74]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
lea ecx, [0x470cd0]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x68]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00435b80
test eax, eax
jne 0x470bf3
mov eax, dword [esp + 0xd0]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], ecx
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
call fcn.00436170
add esp, 0x144
ret
call fcn.00436170
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436170
add esp, 0x144
ret
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
call fcn.00436170
add esp, 0x144
ret
xor eax, eax
mov ecx, eax
call fcn.00462f50
mov ecx, ebx
call fcn.00462f90
mov eax, ebx
mov ecx, edx
call fcn.00462f50
mov eax, ecx
mov ecx, edx
call fcn.00462f50
mov eax, ebx
mov ecx, edx
call fcn.00462f50
mov eax, 2
mov ecx, eax
call fcn.00462f50
mov eax, 1
mov ecx, eax
call fcn.00462f50
xor eax, eax
mov ecx, eax
call fcn.00462f50
mov eax, ebx
mov ecx, edx
call fcn.00462f50
mov eax, ebx
mov ecx, ebp
call fcn.00462f50
xor eax, eax
mov ecx, eax
call fcn.00462f50
xor eax, eax
mov ecx, eax
call fcn.00462f50
xor eax, eax
mov ecx, eax
call fcn.00462f50
nop
call fcn.00461ac0
jmp fcn.004700f0