Function at 0x449a80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x870
mov edx, dword [esp + 0x874]
mov eax, ecx
mov dword [esp + 8], eax
test edx, edx
je 0x44a284
cmp dword [esp + 0x878], 0xf0
jbe 0x44a284
push esi
push edi
mov ecx, 0x18
lea edi, [esp + 0x78]
mov esi, edx
rep movsd dword es:[edi], dword [esi]
cmp dword [esp + 0xa4], 0x4d524353
je 0x449ad5
pop edi
xor eax, eax
pop esi
add esp, 0x870
ret 8
push ebp
push 0x1e00
lea edi, [eax + 0xe99c]
mov dword [eax + 0xe920], 2
push 0
push edi
mov ebp, 0x60
call fcn.004210fa
movzx eax, byte [esp + 0xb9]
lea esi, [esp + 0x88]
mov ecx, 7
add esp, 0xc
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x14]
mov dword [edi + 0xe900], eax
cmp eax, 1
jae 0x449b2a
mov dword [edi + 0xe900], 6
cmp dword [edi + 0xe900], 0x1f
jbe 0x449b3d
mov dword [edi + 0xe900], 0x1f
movzx eax, byte [esp + 0xae]
mov dword [edi + 0xe904], eax
cmp eax, 0x28
jae 0x449b5a
mov dword [edi + 0xe904], 0x28
cmp dword [edi + 0xe904], 0xf0
jbe 0x449b70
mov dword [edi + 0xe904], 0xf0
movzx eax, byte [esp + 0xac]
shl eax, 2
mov dword [edi + 0xe908], eax
test eax, eax
je 0x449b8c
cmp eax, 0x100
jbe 0x449b96
mov dword [edi + 0xe908], 0x100
movzx eax, byte [esp + 0xaf]
lea ecx, [edi + 0xc1c0]
and eax, 0x7f
mov dword [edi + 0xe910], 4
mov dword [edi + 0xe964], eax
xor edx, edx
push ebx
lea ebx, [ebx]
mov bl, byte [esp + edx + 0xc0]
mov dword [ecx], pe_nt_image_headers32
mov dword [ecx + 4], 0x40
mov dword [ecx + 8], 0x100
cmp bl, 0xff
je 0x449bfe
lea eax, [edx + 1]
mov dword [edi + 0xe910], eax
movzx eax, bl
and eax, 8
mov dword [ecx + 8], 0
or eax, 4
shl eax, 4
mov dword [ecx], eax
inc edx
add ecx, 0x24
cmp edx, 0x20
jb 0x449bc0
cmp dword [edi + 0xe910], 4
jae 0x449c1a
mov dword [edi + 0xe910], 4
mov eax, 0x1320
cmp word [esp + 0xa8], ax
jb 0x449c33
test byte [esp + 0xa6], 0x40
je 0x449c3a
or dword [edi + 0xe90c], 2
movzx ebx, word [esp + 0xa0]
cmp ebx, 1
jae 0x449c4e
mov ebx, 1
jmp 0x449c61
cmp ebx, 0x100
jbe 0x449c5d
mov ebx, 0x100
jmp 0x449c61
test ebx, ebx
je 0x449c81
mov esi, dword [esp + 0x884]
push ebx
lea eax, [esi + 0x60]
push eax
lea eax, [edi + 0xd060]
push eax
call fcn.004216c9
add esp, 0xc
lea ebp, [ebx + 0x60]
jmp 0x449c88
mov esi, dword [esp + 0x884]
test bl, 1
je 0x449c94
cmp byte [esi + ebp], 0xff
jne 0x449c94
inc ebp
movzx ebx, word [esp + 0xa2]
mov dword [esp + 0x14], ebx
mov eax, ebx
cmp ebx, 0xf0
jb 0x449cb3
mov eax, 0xef
mov dword [esp + 0x14], eax
movzx esi, word [esp + 0xa4]
mov dword [edi + 0xe924], eax
mov dword [esp + 0x10], esi
cmp esi, 0xf0
jbe 0x449cd5
mov dword [esp + 0x10], 0xf0
push 0x200
lea eax, [esp + 0x2c4]
push 0
push eax
call fcn.004210fa
add esi, ebx
add esp, 0xc
cmp esi, 0x100
jbe 0x449d05
pop ebx
pop ebp
pop edi
xor eax, eax
pop esi
add esp, 0x870
ret 8
test esi, esi
je 0x449db2
mov eax, dword [esp + 0x884]
add esi, esi
add eax, ebp
push esi
push eax
lea eax, [esp + 0x2c8]
push eax
call fcn.004216c9
add esp, 0xc
add ebp, esi
cmp byte [esp + 0xb5], 0xfc
jne 0x449db2
mov eax, dword [esp + 0x884]
lea edx, [edi + 0xc208]
mov esi, 8
lea ecx, [eax + 1]
add ecx, ebp
lea ecx, [ecx]
mov al, byte [ecx - 1]
test al, 0x20
je 0x449d66
movzx eax, al
and eax, 0xf
shl eax, 4
add eax, 8
mov dword [edx - 0x48], eax
mov al, byte [ecx]
test al, 0x20
je 0x449d7b
movzx eax, al
and eax, 0xf
shl eax, 4
add eax, 8
mov dword [edx - 0x24], eax
mov al, byte [ecx + 1]
test al, 0x20
je 0x449d90
movzx eax, al
and eax, 0xf
shl eax, 4
add eax, 8
mov dword [edx], eax
mov al, byte [ecx + 2]
test al, 0x20
je 0x449da6
movzx eax, al
and eax, 0xf
shl eax, 4
add eax, 8
mov dword [edx + 0x24], eax
add ecx, 4
add edx, 0x90
dec esi
jne 0x449d50
cmp dword [edi + 0xe910], 0
je 0x44a254
push 0x3c0
lea eax, [esp + 0x4c4]
push 0
push eax
call fcn.004210fa
mov ebp, 1
add esp, 0xc
lea ecx, [ebp + 0x3f]
cmp dword [esp + 0x14], ebp
jb 0x449fde
mov eax, dword [esp + 0x14]
lea edx, [edi + 0xe9d8]
lea ecx, [esp + 0x2c0]
mov dword [esp + 0x1c], edx
lea ebx, [edi + 0x8240]
mov dword [esp + 0x20], ecx
movzx ecx, word [ecx]
shl ecx, 4
test ecx, ecx
je 0x449faf
lea eax, [ecx + 0x50]
cmp eax, dword [esp + 0x888]
ja 0x449fab
mov esi, dword [esp + 0x884]
lea edi, [esp + 0x30]
add esi, ecx
mov ecx, 0x14
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x31]
lea edi, [edx - 0x1c]
mov dword [ebx + 0x2a], eax
lea esi, [esp + 0x60]
mov eax, dword [esp + 0x35]
mov dword [ebx + 0x2e], eax
mov eax, dword [esp + 0x39]
mov dword [ebx + 0x32], eax
mov eax, dword [esp + 0x4c]
mov ecx, eax
shr ecx, 0x18
mov dword [esp + 0x24], ecx
mov byte [esp + ebp + 0xdf], cl
mov ecx, 7
shr eax, 0x10
cmp byte [esp + 0x30], 1
rep movsd dword es:[edi], dword [esi]
mov byte [esp + ebp + 0x1cf], al
mov byte [edx], 0
jne 0x449fab
cmp byte [esp + 0x7e], 0x52
jne 0x449fab
cmp byte [esp + 0x7f], 0x53
jne 0x449fab
mov eax, dword [esp + 0x40]
cmp eax, 0xf42400
jbe 0x449eb0
mov edx, 0xf42400
jmp 0x449eb9
cmp eax, 4
sbb edx, edx
not edx
and edx, eax
mov eax, dword [esp + 0x44]
lea esi, [edx - 1]
mov dword [ebx], edx
cmp eax, esi
ja 0x449ecf
cmp eax, 4
sbb esi, esi
not esi
and esi, eax
mov eax, dword [esp + 0x48]
mov dword [ebx + 4], esi
cmp eax, edx
ja 0x449ee3
cmp eax, 4
sbb edx, edx
not edx
and edx, eax
mov eax, dword [esp + 0x4c]
movzx eax, al
mov dword [ebx + 8], edx
cmp eax, 0x40
jbe 0x449ef7
mov eax, 0x40
shl eax, 2
test byte [esp + 0x24], 1
mov word [ebx + 0x1e], ax
mov eax, 0x40
mov word [ebx + 0x20], ax
je 0x449f13
or word [ebx + 0x22], 2
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x449f22
mov eax, 0x20ab
jmp 0x449f2e
cmp eax, 0x400
jae 0x449f2e
mov eax, 0x400
mov ecx, dword [esp + 0x3c]
mov dword [ebx + 0x18], eax
mov eax, ecx
shr eax, 8
movzx eax, al
shl eax, 0x10
shr ecx, 0x10
add eax, ecx
shl eax, 4
mov dword [esp + ebp*4 + 0x4c0], eax
cmp eax, dword [esp + 0x888]
jbe 0x449f65
mov dword [esp + ebp*4 + 0x4c0], 0
jmp 0x449f85
test eax, eax
je 0x449f85
lea ecx, [ebp - 1]
test ecx, ecx
js 0x449f85
cmp eax, dword [esp + ecx*4 + 0x4c0]
jne 0x449f82
xor eax, eax
mov dword [esp + ebp*4 + 0x4c0], eax
dec ecx
jns 0x449f70
cmp esi, edx
jae 0x449f90
sub edx, esi
cmp edx, 8
jae 0x449f9e
mov dword [ebx + 8], 0
mov dword [ebx + 4], 0
mov edx, dword [esp + 0x1c]
mov eax, pe_nt_image_headers32
mov word [ebx + 0x1c], ax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x20]
inc ebp
add ecx, 2
add edx, 0x20
add ebx, 0x40
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], edx
cmp ebp, eax
jbe 0x449e07
mov edi, dword [esp + 0x18]
mov ecx, 0x40
movzx ebx, word [esp + 0xa2]
cmp dword [esp + 0x10], 0
jbe 0x44a1a0
mov edx, dword [esp + 0x888]
lea eax, [edi + 0xcac0]
mov dword [esp + 0x20], eax
lea ebp, [edi + 0xce80]
lea eax, [esp + 0x2c0]
mov dword [esp + 0x1c], ebp
lea eax, [eax + ebx*2]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x24], eax
movzx esi, word [eax]
shl esi, 4
lea eax, [esi + 0x40]
cmp eax, edx
ja 0x44a179
mov ebx, dword [esp + 0x884]
movzx eax, word [esi + ebx]
add esi, 2
mov word [ebp], cx
test ax, ax
je 0x44a175
lea ecx, [eax + esi]
mov dword [esp + 0x2c], eax
lea eax, [edx - 6]
cmp ecx, eax
ja 0x44a175
push dword [edi + 0xe910]
push 0x40
call fcn.0043fb80
mov edx, eax
add esp, 8
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], edx
mov dword [eax], edx
test edx, edx
je 0x44a16e
mov eax, dword [esp + 0x2c]
lea edi, [esi + ebx]
xor ebp, ebp
xor esi, esi
test eax, eax
je 0x44a166
jmp 0x44a090
mov bl, byte [esi + edi]
inc esi
test bl, bl
jne 0x44a0a7
inc ebp
cmp ebp, 0x40
jae 0x44a166
jmp 0x44a15e
mov eax, dword [esp + 0x18]
movzx ecx, bl
and ecx, 0x1f
mov eax, dword [eax + 0xe910]
cmp ecx, eax
jae 0x44a266
imul eax, ebp
add eax, ecx
lea eax, [eax + eax*2]
lea edx, [edx + eax*2]
test bl, 0x20
je 0x44a105
mov al, byte [esi + edi]
mov ah, al
mov byte [edx], al
cmp ah, 0xf0
jae 0x44a0f3
shr al, 4
and ah, 0xf
mov cl, al
add al, al
add cl, al
shl cl, 2
add cl, 0xd
add cl, ah
mov byte [edx], cl
jmp 0x44a0fb
cmp ah, 0xff
jne 0x44a0fb
mov byte [edx], 0
mov al, byte [esi + edi + 1]
add esi, 2
mov byte [edx + 1], al
test bl, 0x40
je 0x44a130
movzx eax, byte [esi + edi]
inc esi
lea ecx, [eax - 0x80]
cmp ecx, 0x40
ja 0x44a11f
mov eax, ecx
mov byte [edx + 2], 2
jmp 0x44a12d
cmp eax, 0x40
jbe 0x44a129
mov eax, 0x40
mov byte [edx + 2], 1
mov byte [edx + 4], al
test bl, bl
jns 0x44a156
mov al, byte [esi + edi]
mov byte [edx + 3], al
mov al, byte [esi + edi + 1]
add esi, 2
cmp byte [edx + 3], 0
mov byte [edx + 5], al
je 0x44a156
mov ecx, dword [esp + 0x18]
push 0
push edx
call fcn.0044a290
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
cmp esi, eax
jb 0x44a090
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov edx, dword [esp + 0x888]
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
add ebp, 2
add dword [esp + 0x20], 4
add eax, 2
dec ebx
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], ebp
mov ecx, 0x40
mov dword [esp + 0x10], ebx
jne 0x44a016
mov ebp, dword [esp + 0x14]
mov esi, 1
cmp ebp, esi
jb 0x44a228
mov bx, word [esp + 0xaa]
add edi, 0x8240
jmp 0x44a1c0
cmp dword [edi], 0
je 0x44a220
mov edx, dword [esp + esi*4 + 0x4c0]
test edx, edx
je 0x44a220
mov al, byte [esp + esi + 0xdf]
xor ecx, ecx
cmp bx, 1
setne cl
test al, 4
je 0x44a1e7
add ecx, 5
test al, 2
je 0x44a1ee
or ecx, 8
cmp byte [esp + esi + 0x1cf], 4
jne 0x44a1fd
mov ecx, 3
mov eax, dword [esp + 0x888]
cmp edx, eax
jae 0x44a220
sub eax, edx
push eax
mov eax, dword [esp + 0x888]
add eax, edx
push eax
push ecx
mov ecx, dword [esp + 0x24]
push edi
call fcn.00440910
inc esi
add edi, 0x40
cmp esi, ebp
jbe 0x44a1c0
test byte [esp + 0xa6], 0x10
mov eax, dword [esp + 0x18]
mov dword [eax + 0xe974], 0x40
mov dword [eax + 0xe978], 0x7fff
je 0x44a254
or dword [eax + 0xe90c], 0x10000
pop ebx
pop ebp
pop edi
mov eax, 1
pop esi
add esp, 0x870
ret 8
test bl, 0x20
je 0x44a26e
add esi, 2
test bl, 0x40
je 0x44a274
inc esi
test bl, bl
jns 0x44a15a
add esi, 2
jmp 0x44a15a
xor eax, eax
add esp, 0x870
ret 8