Function at 0x4490f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x90
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x94]
push ebx
push esi
movsx eax, word [ecx]
push edi
mov edi, dword [edx + 0x108]
lea esi, [eax + eax*2]
mov eax, dword [ecx + 4]
mov dword [esp + 0x80], 0x100
mov dword [esp + 0x84], 0x200
lea ebx, [eax + eax*8]
mov dword [esp + 0x88], 0x400
shl ebx, 3
sub ebx, eax
mov eax, dword [edi + esi*8 + 0x14]
xor edi, edi
lea esi, [eax + ebx*4]
mov al, byte [edx + 8]
test al, 1
je 0x44915e
mov al, byte [esp + 0xb0]
mov dword [esp + 0x28], edi
test al, al
jns 0x449166
mov dword [esp + 0x28], 1
mov edx, dword [esp + 0xa8]
mov eax, dword [edx + 4]
mov word [ecx + 8], di
mov dword [esp + 0x3c], eax
cmp word [esi + 0x114], di
mov dword [esp + 0x50], eax
jle 0x449ac2
push ebp
mov eax, dword [esp + 0xa8]
mov ebp, dword [esi + 0x118]
mov ebx, dword [esp + 0xa4]
lea ecx, [esp + 0x34]
movsx eax, word [eax + 8]
shl eax, 4
add eax, ebp
push eax
push esi
push ecx
push ebx
mov dword [esp + 0x58], eax
call fcn.00448820
lea edx, [esp + 0x44]
push edx
push ebx
call fcn.004489b0
mov ebp, dword [esp + 0x44]
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0xc4]
add esp, 0x18
test ebp, ebp
je 0x449216
mov ecx, dword [esp + 0x54]
cmp ecx, eax
jge 0x449216
push eax
mov eax, dword [edi + 8]
push eax
push ecx
mov ecx, dword [edi]
lea edx, [esp + 0x9c]
push ecx
push edx
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [esp + 0xb0]
mov edx, dword [ebx + 0x38]
lea ecx, [esp + 0x90]
push eax
push ecx
push edx
call dword [sym.imp.USER32.dll_FillRect]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x54], ecx
sub ecx, eax
mov dword [esp + 0x7c], ecx
mov ecx, dword [edi + 4]
cmp eax, ecx
jge 0x449231
lea eax, [esp + 0x34]
jmp 0x449237
mov eax, edi
lea edi, [esp + 0x34]
mov ecx, dword [eax + 0xc]
mov edx, dword [edi + 4]
cmp ecx, edx
jg 0x449259
push 0
push 0
push 0
lea eax, [esp + 0x74]
push 0
push eax
call dword [sym.imp.USER32.dll_SetRect]
jmp 0x449aa5
mov dword [esp + 0x6c], edx
mov edx, dword [edi + 0xc]
cmp ecx, edx
mov dword [esp + 0x74], ecx
jl 0x44926c
mov dword [esp + 0x74], edx
mov ecx, dword [eax]
mov edx, dword [edi]
cmp ecx, edx
mov dword [esp + 0x68], ecx
jl 0x44927c
mov dword [esp + 0x68], edx
mov eax, dword [eax + 8]
mov edi, dword [edi + 8]
cmp eax, edi
mov dword [esp + 0x70], eax
jg 0x44928e
mov dword [esp + 0x70], edi
test ebp, ebp
je 0x4492a9
mov ecx, dword [esp + 0xb0]
mov eax, dword [ebx + 0x38]
lea edx, [esp + 0x68]
push ecx
push edx
push eax
call dword [sym.imp.USER32.dll_FillRect]
mov dword [esp + 0x30], 0
movsx ecx, word [esp + 0x30]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + ecx*4 + 0x84]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x4c], edx
mov dx, word [eax + 0xc]
mov word [ecx + 0xa], dx
movsx edx, word [eax + 0xe]
movsx eax, word [eax + 0xc]
movsx ecx, word [ecx + 0xa]
add edx, eax
cmp ecx, edx
jge 0x449a92
mov edx, dword [esp + 0xa8]
mov ecx, dword [esi + 0x110]
movsx eax, word [edx + 0xa]
mov edx, dword [esp + 0xa4]
lea eax, [eax + eax*2]
mov edi, dword [edx + 0x24]
movsx ebp, word [ecx + eax*4]
lea ebx, [ecx + eax*4]
mov eax, 0x88888889
lea ecx, [ebp + 7]
mov dword [esp + 0x1c], ebx
imul ecx
add edx, ecx
sar edx, 3
cmp edi, 0x64
je 0x44933b
mov ecx, edx
mov eax, 0x51eb851f
shr ecx, 0x1f
add edx, ecx
imul edx, edi
imul edx
sar edx, 5
mov ecx, dword [esp + 0x34]
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x88888889
add edx, ecx
movsx ecx, word [ebx + 2]
add ecx, 7
mov dword [esp + 0x24], edx
imul ecx
add edx, ecx
sar edx, 3
cmp edi, 0x64
je 0x449378
mov ecx, edx
mov eax, 0x51eb851f
shr ecx, 0x1f
add edx, ecx
imul edx, edi
imul edx
sar edx, 5
mov ecx, dword [esp + 0x38]
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x88888889
add edx, ecx
cmp edi, 0x64
mov dword [esp + 0x44], edx
jne 0x4493ad
xor edx, edx
mov dx, word [ebx + 4]
lea ebp, [edx + ebp + 7]
imul ebp
add edx, ebp
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
jmp 0x4493d9
xor ecx, ecx
mov cx, word [ebx + 4]
lea ebp, [ecx + ebp + 7]
imul ebp
add edx, ebp
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x51eb851f
imul edx, edi
imul edx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x38]
add ecx, eax
push ecx
mov ecx, dword [esp + 0x38]
add edx, ecx
push edx
mov edx, dword [esp + 0x2c]
push eax
lea eax, [esp + 0x64]
push edx
push eax
call dword [sym.imp.USER32.dll_SetRect]
mov bp, word [esi + 0x104]
mov di, word [ebx + 8]
xor ecx, ecx
cmp bp, cx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], ecx
jle 0x449450
movsx eax, cx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [esi + 0x108]
lea eax, [eax + edx*4]
mov dx, word [eax + 0x14]
cmp di, dx
jl 0x449448
movsx eax, word [eax + 0x16]
movsx edx, dx
add eax, edx
movsx edx, di
cmp edx, eax
jl 0x4494d4
inc ecx
cmp cx, bp
jl 0x449416
xor ecx, ecx
mov dword [esp + 0x10], ecx
cmp word [ebx + 0xa], cx
mov dword [esp + 0x28], ecx
jle 0x449a6a
mov bp, word [ebx + 8]
mov eax, dword [esp + 0x28]
xor edx, edx
cmp word [esi + 0x104], dx
lea edi, [eax + ebp]
jle 0x4494b0
movsx eax, dx
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [esi + 0x108]
lea eax, [eax + ecx*4]
mov cx, word [eax + 0x14]
cmp di, cx
jl 0x4494a6
movsx eax, word [eax + 0x16]
movsx ecx, cx
add eax, ecx
movsx ecx, di
cmp ecx, eax
jl 0x4494b2
inc edx
cmp dx, word [esi + 0x104]
jl 0x449478
xor edx, edx
cmp word [esp + 0x10], dx
mov dword [esp + 0x50], edx
jne 0x4494df
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
inc ecx
inc eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x14], eax
jmp 0x449907
mov dword [esp + 0x10], ecx
xor ecx, ecx
jmp 0x449454
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0xa4]
add ebp, edx
push 3
push ebp
push esi
push eax
call fcn.004478c0
mov di, word [ebx + 8]
add esp, 0x10
add di, word [esp + 0x18]
cmp word [esp + 0x14], 0
mov dword [esp + 0x10], 0
jle 0x4496d6
mov eax, dword [esp + 0x14]
and eax, 0xffff
mov dword [esp + 0x20], eax
mov bp, word [esi + 0x104]
xor edx, edx
test bp, bp
jle 0x449566
mov ebx, dword [esi + 0x108]
movsx eax, dx
lea ecx, [eax*8]
sub ecx, eax
lea eax, [ebx + ecx*4]
mov cx, word [ebx + ecx*4 + 0x14]
cmp di, cx
jl 0x449560
movsx eax, word [eax + 0x16]
movsx ecx, cx
add eax, ecx
movsx ecx, di
cmp ecx, eax
jl 0x449568
inc edx
cmp dx, bp
jl 0x449537
xor edx, edx
movsx eax, dx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [esi + 0x108]
cmp word [eax + edx*4 + 0x18], 0
jge 0x449596
mov ecx, dword [esp + 0xa4]
push 6
push edi
push esi
push ecx
call fcn.004478c0
add esp, 0x10
mov bp, word [esi + 0x104]
xor edx, edx
test bp, bp
jle 0x4495d9
mov ebx, dword [esi + 0x108]
movsx eax, dx
lea ecx, [eax*8]
sub ecx, eax
lea eax, [ebx + ecx*4]
mov cx, word [ebx + ecx*4 + 0x14]
cmp di, cx
jl 0x4495d3
movsx eax, word [eax + 0x16]
movsx ecx, cx
add eax, ecx
movsx ecx, di
cmp ecx, eax
jl 0x4495db
inc edx
cmp dx, bp
jl 0x4495aa
xor edx, edx
movsx eax, dx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [esi + 0x108]
mov ecx, dword [eax + edx*4]
lea eax, [eax + edx*4]
test ch, ch
jns 0x44960b
mov ecx, dword [esp + 0xa4]
test byte [ecx + 8], 8
jne 0x44960b
xor eax, eax
jmp 0x4496bc
mov ecx, dword [esi + 0x100]
movsx edx, di
mov bl, byte [edx + ecx]
cmp bl, 9
jne 0x449660
push edi
push esi
call fcn.00444640
push eax
push esi
call fcn.00444330
movsx ebp, word [eax]
push ebp
push esi
call fcn.00447c50
mov ecx, eax
mov eax, 0x88888889
sub ecx, ebp
add esp, 0x18
lea ebp, [ecx + 7]
imul ebp
add edx, ebp
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, edx
jne 0x4496bc
test ecx, ecx
je 0x4496bc
mov eax, 1
jmp 0x4496bc
mov cx, word [eax + 0x18]
mov edx, dword [esp + 0xa4]
push ecx
push edx
call fcn.00444e60
mov dl, byte [eax + 0x58]
add eax, 0x44
mov cl, bl
add esp, 8
cmp cl, dl
mov byte [esp + 0x80], cl
jb 0x4496b9
xor ebx, ebx
mov ebp, edx
mov bx, word [eax + 0xc]
and ebp, 0xff
add ebx, ebp
mov ebp, dword [esp + 0x80]
and ebp, 0xff
cmp ebp, ebx
jge 0x4496b9
mov eax, dword [eax + 0x10]
sub cl, dl
and ecx, 0xff
mov eax, dword [eax + ecx*4]
jmp 0x4496bc
mov eax, dword [eax + 8]
mov edx, dword [esp + 0x10]
add edx, eax
mov eax, dword [esp + 0x20]
inc edi
dec eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x20], eax
jne 0x449523
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x10]
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
add edx, ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x60], edx
mov ax, word [ebp + 8]
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x14]
add ax, di
push edx
mov word [ecx + 0xc], ax
mov edx, dword [esi + 0x100]
movsx eax, ax
add eax, edx
mov edx, dword [esp + 0x48]
push ebx
lea ecx, [esp + 0x60]
push eax
mov eax, dword [esp + 0x30]
push ecx
push edx
push eax
mov eax, dword [esp + 0xbc]
lea ecx, [eax + 0xec]
push ecx
push eax
call fcn.00448060
mov bp, word [ebp + 8]
add esp, 0x20
add bp, di
mov dword [esp + 0x10], 0
test bx, bx
jle 0x4498cf
mov eax, ebx
and eax, 0xffff
mov dword [esp + 0x20], eax
mov bx, word [esi + 0x104]
xor edx, edx
test bx, bx
jle 0x4497a0
mov edi, dword [esi + 0x108]
movsx eax, dx
lea ecx, [eax*8]
sub ecx, eax
lea eax, [edi + ecx*4]
mov cx, word [edi + ecx*4 + 0x14]
cmp bp, cx
jl 0x44979a
movsx eax, word [eax + 0x16]
movsx ecx, cx
add eax, ecx
movsx ecx, bp
cmp ecx, eax
jl 0x4497a2
inc edx
cmp dx, bx
jl 0x449771
xor edx, edx
movsx eax, dx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [esi + 0x108]
cmp word [eax + edx*4 + 0x18], 0
jge 0x4497d0
mov ecx, dword [esp + 0xa4]
push 6
push ebp
push esi
push ecx
call fcn.004478c0
add esp, 0x10
push ebp
push esi
call fcn.004445e0
movsx eax, ax
add esp, 8
lea edx, [eax*8]
sub edx, eax
mov eax, dword [esi + 0x108]
mov ecx, dword [eax + edx*4]
lea eax, [eax + edx*4]
test ch, ch
jns 0x44980a
mov ecx, dword [esp + 0xa4]
test byte [ecx + 8], 8
jne 0x44980a
xor eax, eax
jmp 0x4498b5
mov ecx, dword [esi + 0x100]
movsx edx, bp
mov bl, byte [edx + ecx]
cmp bl, 9
jne 0x44985f
push ebp
push esi
call fcn.00444640
push eax
push esi
call fcn.00444330
movsx edi, word [eax]
push edi
push esi
call fcn.00447c50
mov ecx, eax
mov eax, 0x88888889
sub ecx, edi
add esp, 0x18
lea edi, [ecx + 7]
imul edi
add edx, edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, edx
jne 0x4498b5
test ecx, ecx
je 0x4498b5
mov eax, 1
jmp 0x4498b5
mov cx, word [eax + 0x18]
mov edx, dword [esp + 0xa4]
push ecx
push edx
call fcn.00444e60
mov dl, byte [eax + 0x58]
add eax, 0x44
mov cl, bl
add esp, 8
cmp cl, dl
mov byte [esp + 0x78], cl
jb 0x4498b2
xor edi, edi
mov ebx, edx
mov di, word [eax + 0xc]
and ebx, 0xff
add edi, ebx
mov ebx, dword [esp + 0x78]
and ebx, 0xff
cmp ebx, edi
jge 0x4498b2
mov eax, dword [eax + 0x10]
sub cl, dl
and ecx, 0xff
mov eax, dword [eax + ecx*4]
jmp 0x4498b5
mov eax, dword [eax + 8]
mov edx, dword [esp + 0x10]
add edx, eax
mov eax, dword [esp + 0x20]
inc ebp
dec eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x20], eax
jne 0x44975d
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x14]
add edx, ecx
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
add ecx, eax
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 0
mov dword [esp + 0x58], ecx
mov dx, word [esp + 0x28]
cmp dx, word [ebx + 0xa]
jl 0x449462
cmp word [esp + 0x14], 0
je 0x449a6a
mov ax, word [ebx + 8]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0xa4]
add ax, bp
push 3
push eax
push esi
push ecx
call fcn.004478c0
mov di, word [ebx + 8]
add esp, 0x10
add di, bp
cmp word [esp + 0x14], 0
mov dword [esp + 0x10], 0
jle 0x449a0a
mov eax, dword [esp + 0x14]
and eax, 0xffff
mov dword [esp + 0x1c], eax
xor edx, edx
cmp word [esi + 0x104], dx
jle 0x4499ae
mov ebp, dword [esi + 0x108]
movsx eax, dx
lea ecx, [eax*8]
sub ecx, eax
lea eax, [ebp + ecx*4]
mov cx, word [ebp + ecx*4 + 0x14]
cmp di, cx
jl 0x4499a4
movsx eax, word [eax + 0x16]
movsx ecx, cx
add eax, ecx
movsx ecx, di
cmp ecx, eax
jl 0x4499b0
inc edx
cmp dx, word [esi + 0x104]
jl 0x44997a
xor edx, edx
movsx eax, dx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [esi + 0x108]
cmp word [eax + edx*4 + 0x18], 0
jge 0x4499de
mov ecx, dword [esp + 0xa4]
push 6
push edi
push esi
push ecx
call fcn.004478c0
add esp, 0x10
mov edx, dword [esp + 0xa4]
push edi
push esi
push edx
call fcn.00447ad0
mov edx, dword [esp + 0x1c]
add esp, 0xc
add edx, eax
mov eax, dword [esp + 0x1c]
inc edi
dec eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x1c], eax
jne 0x449969
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x4c]
mov edi, dword [esp + 0xa8]
add ecx, eax
push edx
mov dword [esp + 0x64], ecx
mov ax, word [ebx + 8]
add ax, word [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x4c]
movsx edx, ax
mov word [edi + 0xc], ax
mov ebp, dword [esi + 0x100]
add edx, ebp
lea eax, [esp + 0x60]
push edx
mov edx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0xb4]
push ecx
push edx
lea ecx, [eax + 0xec]
push ecx
push eax
call fcn.00448060
add esp, 0x20
jmp 0x449a71
mov edi, dword [esp + 0xa8]
mov eax, dword [esp + 0x48]
inc word [edi + 0xa]
mov di, word [edi + 0xa]
movsx edx, word [eax + 0xe]
movsx eax, word [eax + 0xc]
movsx ecx, di
add edx, eax
cmp ecx, edx
jl 0x4492ea
mov eax, dword [esp + 0x30]
inc eax
cmp ax, 3
mov dword [esp + 0x30], eax
jl 0x4492b1
mov eax, dword [esp + 0xa8]
inc word [eax + 8]
mov ax, word [eax + 8]
cmp ax, word [esi + 0x114]
jl 0x44918a
pop ebp
mov eax, dword [esp + 0x28]
pop edi
pop esi
pop ebx
test eax, eax
je 0x449b17
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x30]
mov eax, dword [ecx + 0xc]
cmp edx, eax
jge 0x449b17
push eax
mov eax, dword [ecx + 8]
mov ecx, dword [ecx]
push eax
push edx
lea edx, [esp + 0x8c]
push ecx
push edx
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0x94]
push eax
lea ecx, [esp + 0x84]
mov eax, dword [edx + 0x38]
push ecx
push eax
call dword [sym.imp.USER32.dll_FillRect]
add esp, 0x90
ret