Function at 0x448670
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x85d3cc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xa8]
cmp eax, dword [ecx + 8]
jbe 0x448c9c
sub esp, 0x128
mov ecx, dword [esp + 0x12c]
mov ebx, dword [ecx]
cmp ebx, 1
je 0x448c85
cmp ebx, 2
je 0x44871a
mov dword [ecx], 1
lea edi, [esp + 0x60]
xor eax, eax
call fcn.00468279
movzx ecx, byte [0x85d760]
test cl, cl
jne 0x4486ca
xor ecx, ecx
xor edx, edx
jmp 0x4486f2
nop
call fcn.00468dd0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x34], ecx
lea edi, [esp + 0x60]
lea esi, [0x85d760]
call fcn.0046874a
mov ecx, dword [esp + 0x34]
mov edx, eax
xor eax, eax
mov ebx, dword [esp + 0x12c]
mov ebp, dword [ebx + 4]
test ebp, ebp
je 0x448c6f
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], ecx
lea ebp, [ebx + 8]
mov dword [esp + 0x120], ebp
xor ebp, ebp
jmp 0x448759
add esp, 0x128
ret
mov eax, dword [esp + 0x120]
lea eax, [eax + ebp*4]
lea ecx, [ebp + 1]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x11c], eax
mov edx, dword [esp + 0x11c]
mov eax, dword [edx]
call eax
xor eax, eax
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x12c]
mov ebp, dword [esp + 0x3c]
cmp dword [ebx + 4], ebp
ja 0x448721
movzx ebp, byte [0x85d760]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x44898a
nop
call fcn.00468dd0
mov eax, dword [esp]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x24], ecx
lea edi, [esp + 0x7c]
lea esi, [0x85d760]
call fcn.0046874a
mov ecx, dword [esp + 0x120]
mov ecx, dword [ecx]
mov dword [esp], ecx
call fcn.00453d60
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00454440
mov eax, dword [esp + 8]
mov dword [esp + 0x118], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x38], ecx
lea edi, [esp + 0x48]
xor eax, eax
call fcn.0046827a
call fcn.0043a130
lea eax, [0x69129d]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0043a9b0
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.0043a9b0
lea eax, [0x690de7]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0043a9b0
call fcn.0043a190
mov eax, dword [0x85d420]
mov ecx, dword [0x85d424]
lea edx, [esp + 0x48]
mov dword [esp], edx
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
mov ebx, dword [esp + 0x30]
sub ebx, eax
mov eax, dword [esp + 0x34]
sbb eax, ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
call fcn.0041a8b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0xf8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451510
mov eax, dword [esp + 0xc]
mov dword [esp + 0x124], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], ecx
call fcn.0043a130
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.0043a9b0
lea eax, [0x6912a2]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0043a9b0
call fcn.0043a190
lea eax, [esp + 0x48]
mov dword [esp], eax
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x30]
sub eax, ecx
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x34]
sbb ecx, edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
call fcn.0041a8b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0xd8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451510
mov eax, dword [esp + 0xc]
mov dword [esp + 0x124], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], ecx
call fcn.0043a130
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.0043a9b0
lea eax, [0x6925b1]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.0043a9b0
call fcn.0043a190
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x78]
sub eax, edx
sbb ecx, ebx
mov edx, 0x17
jmp 0x4489a9
mov dword [ebx], 2
add esp, 0x128
ret
mov byte [esp + ebp + 0x48], dl
add ebx, ecx
adc edi, 0
lea edx, [ebp - 1]
mov eax, dword [esp + 0x40]
mov ecx, edi
test ecx, ecx
sete bl
xchg ebp, ebx
seta bl
xchg ebp, ebx
cmp eax, 0xa
xchg esi, ebx
setae bl
xchg esi, ebx
and esi, ebx
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x448a50
mov dword [esp + 0x2c], eax
mov ebx, eax
mov eax, 0xcccccccd
mov ebp, edx
mul ecx
mov eax, 0xcccccccd
mov esi, edx
mul ebx
shr esi, 3
lea edi, [esi + esi*4]
shr edx, 3
mov dword [esp + 0x40], edx
lea eax, [edx + edx*4]
shl edi, 1
sub ecx, edi
mov edi, eax
mov eax, 0x19999999
mul ecx
lea ecx, [ecx + ecx*2]
shl edi, 1
sub ebx, edi
lea ebx, [ebx + ecx*2]
mov ecx, eax
mov eax, 0xcccccccd
mov edi, edx
mul ebx
shr edx, 3
mov eax, dword [esp + 0x40]
add eax, 0
adc esi, 0
add eax, ecx
adc edi, esi
mov ebx, eax
add eax, edx
mov dword [esp + 0x40], eax
mov esi, 0xa
mov ecx, edx
mul esi
mov edx, dword [esp + 0x2c]
sub edx, eax
add edx, 0x30
cmp ebp, 0x18
jb 0x448997
jmp 0x448c63
add eax, 0x30
cmp edx, 0x18
jae 0x448c57
mov byte [esp + edx + 0x48], al
lea eax, [esp + 0xb8]
mov dword [esp], eax
lea eax, [edx - 0x18]
neg eax
mov ecx, eax
neg eax
sar eax, 0x1f
and edx, eax
lea eax, [esp + edx + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451510
mov eax, dword [esp + 0xc]
mov dword [esp + 0x124], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], ecx
call fcn.0043a130
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.0043a9b0
lea eax, [0x691a8d]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.0043a9b0
call fcn.0043a190
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x70]
sub eax, edx
sbb ecx, ebx
mov edx, 0x17
jmp 0x448b04
mov byte [esp + ebp + 0x48], dl
add ebx, esi
adc edi, 0
lea edx, [ebp - 1]
mov eax, ecx
mov ecx, edi
test ecx, ecx
sete bl
xchg ebp, ebx
seta bl
xchg ebp, ebx
cmp eax, 0xa
xchg esi, ebx
setae bl
xchg esi, ebx
and ebx, esi
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x448ba1
mov dword [esp + 0x28], eax
mov ebx, eax
mov eax, 0xcccccccd
mov ebp, edx
mul ecx
mov eax, 0xcccccccd
mov esi, edx
mul ebx
shr edx, 3
mov dword [esp + 0x40], edx
lea edi, [edx + edx*4]
shr esi, 3
lea eax, [esi + esi*4]
shl eax, 1
sub ecx, eax
mov eax, 0x19999999
mul ecx
lea ecx, [ecx + ecx*2]
shl edi, 1
sub ebx, edi
lea ebx, [ebx + ecx*2]
mov ecx, eax
mov eax, 0xcccccccd
mov edi, edx
mul ebx
shr edx, 3
mov ebx, dword [esp + 0x40]
add ebx, 0
adc esi, 0
add ecx, ebx
adc edi, esi
mov ebx, ecx
add ecx, edx
mov eax, 0xa
mov esi, edx
mul ecx
mov edx, dword [esp + 0x28]
sub edx, eax
add edx, 0x30
cmp ebp, 0x18
jb 0x448af4
jmp 0x448c4b
add eax, 0x30
cmp edx, 0x18
jae 0x448c3f
mov byte [esp + edx + 0x48], al
lea eax, [esp + 0x98]
mov dword [esp], eax
lea eax, [edx - 0x18]
neg eax
mov ecx, eax
neg eax
sar eax, 0x1f
and edx, eax
lea eax, [esp + edx + 0x48]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00451510
mov eax, dword [esp + 0xc]
mov dword [esp + 0x124], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], ecx
call fcn.0043a130
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.0043a9b0
lea eax, [0x691708]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043a9b0
call fcn.0043a190
call fcn.0043a130
call fcn.0043a340
call fcn.0043a190
mov ebx, dword [esp + 0x12c]
jmp 0x44898a
mov eax, edx
mov ecx, 0x18
call fcn.00468090
mov eax, ebp
mov ecx, 0x18
call fcn.00468090
mov eax, edx
mov ecx, 0x18
call fcn.00468090
mov eax, ebp
mov ecx, 0x18
call fcn.00468090
lea eax, [0x698387]
mov dword [esp], eax
mov dword [esp + 4], 0x1a
call fcn.00438580
lea eax, [0x6a1941]
mov dword [esp], eax
mov dword [esp + 4], 0x32
call fcn.00438580
nop
call fcn.00466c30
jmp fcn.00448670