Function at 0x447870
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x20]
cmp eax, dword [ecx + 8]
jbe 0x448506
sub esp, 0xa0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x9c], ecx
lea edx, [0x749220]
mov dword [esp], edx
mov ebx, dword [esp + 0xac]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x98]
mov dword [esp + 8], ebp
call fcn.004066c0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x44845c
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x94], ecx
lea edx, [0x749220]
mov dword [esp], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 4], edx
lea ebx, [esp + 0x90]
mov dword [esp + 8], ebx
call fcn.00406a60
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
cmp eax, ecx
je 0x44844d
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
movzx ebp, byte [ecx + 0xf]
and ebp, 0x1f
xchg ebp, eax
cmp dl, al
xchg ebp, eax
jne 0x44843e
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], dl
mov dword [esp], eax
call fcn.00446640
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call fcn.00446640
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
je 0x4479a0
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044d600
movzx eax, byte [esp + 0xc]
test al, al
je 0x447991
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.004466d0
mov eax, dword [esp + 4]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
call fcn.004466d0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x54]
test ecx, ecx
jne 0x448397
test eax, eax
jne 0x448395
movzx eax, byte [esp + 0x16]
lea ecx, [eax - 1]
cmp cl, 0xf
jbe 0x448386
cmp al, 0x15
ja 0x44807b
cmp al, 0x12
jbe 0x447fc2
cmp al, 0x13
jne 0x447cac
mov eax, dword [esp + 0xa4]
movzx ecx, word [eax + 0x22]
mov edx, dword [esp + 0xa8]
movzx ebx, word [edx + 0x22]
cmp cx, bx
jne 0x447c9d
movzx ecx, word [eax + 0x20]
movzx ebx, word [edx + 0x20]
cmp bx, cx
jne 0x447c9d
movzx ebp, byte [eax + 0xc]
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x447c93
mov ebp, 0x34
mov esi, eax
add eax, ebp
test byte [eax], al
movzx ecx, cx
cmp ecx, 0x100000
ja 0x4484aa
movzx ebp, byte [edx + 0xc]
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x447c89
mov ebp, 0x34
mov edi, edx
add edx, ebp
test byte [edx], al
movzx ebx, bx
cmp ebx, 0x100000
ja 0x4484a3
mov dword [esp + 0x88], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x84], edx
mov dword [esp + 0x1c], ebx
xor ebp, ebp
jmp 0x447aed
mov eax, dword [esp + 0x2c]
lea ebp, [eax + 1]
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0xa8]
cmp ebp, ecx
jge 0x447b38
jae 0x44849c
mov edi, dword [eax + ebp*4]
cmp ebp, ebx
jae 0x44849c
mov dword [esp + 0x2c], ebp
mov eax, dword [edx + ebp*4]
mov dword [esp + 4], eax
mov dword [esp], edi
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00447870
movzx eax, byte [esp + 0xc]
test al, al
jne 0x447ac2
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
movzx eax, byte [esi + 0xc]
test al, 1
je 0x447c7f
mov eax, 0x34
mov ecx, esi
add eax, esi
test byte [eax], al
movzx edx, word [ecx + 0x22]
and edx, 0x7fff
movzx ecx, word [ecx + 0x20]
movzx ebx, cx
add ecx, edx
movzx ecx, cx
cmp ebx, ecx
ja 0x448495
cmp ecx, 0x100000
ja 0x448495
sub ecx, ebx
lea edx, [ebx - 0x100000]
neg edx
shl ebx, 2
neg edx
sar edx, 0x1f
and edx, ebx
add eax, edx
movzx edx, byte [edi + 0xc]
test dl, 1
je 0x447c75
mov edx, 0x34
mov ebx, edi
add edx, edi
test byte [edx], al
movzx ebp, word [ebx + 0x22]
and ebp, 0x7fff
movzx ebx, word [ebx + 0x20]
movzx esi, bx
add ebx, ebp
movzx ebx, bx
cmp esi, ebx
ja 0x44848e
cmp ebx, 0x100000
ja 0x44848e
mov dword [esp + 0x20], ecx
mov dword [esp + 0x58], eax
sub ebx, esi
mov dword [esp + 0x18], ebx
lea ebp, [esi - 0x100000]
xchg ebp, ebx
neg ebx
xchg ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl esi, 2
sar ebp, 0x1f
and ebp, esi
add edx, ebp
mov dword [esp + 0x48], edx
xor ebp, ebp
jmp 0x447c1b
mov esi, dword [esp + 0x34]
lea ebp, [esi + 1]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x18]
cmp ebp, ecx
jge 0x447c66
jae 0x448487
mov esi, dword [eax + ebp*4]
cmp ebp, ebx
jae 0x448487
mov dword [esp + 0x34], ebp
mov eax, dword [edx + ebp*4]
mov dword [esp + 4], eax
mov dword [esp], esi
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00447870
movzx eax, byte [esp + 0xc]
test al, al
jne 0x447c04
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov edx, 0x24
jmp 0x447ba2
mov eax, 0x24
jmp 0x447b4a
mov ebp, 0x24
jmp 0x447a93
mov ebp, 0x24
jmp 0x447a6a
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
cmp al, 0x14
jne 0x447f4c
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov dword [esp], ecx
call fcn.00447150
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.00447150
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
je 0x447d07
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044d600
movzx eax, byte [esp + 0xc]
test al, al
je 0x447cf8
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x28]
cmp ecx, ebx
jne 0x447f3d
mov dword [esp + 0x44], ecx
xor ebx, ebx
jmp 0x447d60
mov ebp, dword [esp + 0x30]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xa8]
cmp ebx, ecx
jge 0x447f2e
mov ebp, dword [eax + 0x28]
mov esi, dword [eax + 0x24]
cmp ebx, ebp
jae 0x448480
lea ebp, [esi + ebx*8]
mov edi, dword [edx + 0x28]
mov edx, dword [edx + 0x24]
cmp ebx, edi
jae 0x448479
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], esi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x5c], ebp
lea eax, [esi + ebx*8]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.004467f0
mov eax, dword [esp + 8]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x80]
lea ebx, [edx + ecx*8]
mov ebx, dword [ebx]
mov dword [esp + 4], ebx
lea ebx, [edx + ecx*8]
mov dword [esp + 0x4c], ebx
mov dword [esp], ebx
call fcn.004467f0
mov eax, dword [esp + 8]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
call fcn.00447150
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x74]
mov dword [esp], edx
call fcn.00447150
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jne 0x447f1f
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044d600
movzx eax, byte [esp + 0xc]
test al, al
je 0x447f1f
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.00447250
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x74]
mov dword [esp], edx
call fcn.00447250
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jne 0x447f10
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044d600
movzx eax, byte [esp + 0xc]
test al, al
je 0x447f10
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x7c]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp], ecx
call fcn.00446ad0
mov eax, dword [esp + 8]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x80]
lea edx, [edx + ecx*8 + 4]
mov edx, dword [edx]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x4c]
mov dword [esp], edx
call fcn.00446ad0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x60]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00447870
movzx eax, byte [esp + 0xc]
test al, al
jne 0x447d47
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
call fcn.00447870
movzx eax, byte [esp + 0xc]
test al, al
jne 0x447f90
xor eax, eax
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x24]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00447870
movzx eax, byte [esp + 0xc]
jmp 0x447f82
cmp al, 0x11
je 0x44801c
cmp al, 0x12
jne 0x4484b1
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x24]
cmp ecx, ebx
je 0x447ff8
xor eax, eax
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov eax, dword [eax + 0x20]
mov ecx, dword [edx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00447870
movzx eax, byte [esp + 0xc]
jmp 0x447fea
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
call fcn.00447870
movzx eax, byte [esp + 0xc]
test al, al
je 0x448077
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x28]
cmp eax, ecx
sete al
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
xor eax, eax
jmp 0x448069
cmp al, 0x17
ja 0x448105
cmp al, 0x16
jne 0x4480c7
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00447870
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00447870
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
cmp al, 0x18
jne 0x448119
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
cmp al, 0x19
jne 0x448378
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x28]
cmp ecx, ebx
jne 0x448369
mov ecx, dword [eax + 0x20]
mov dword [esp], ecx
call fcn.00447150
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.00447150
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
je 0x448189
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044d600
movzx eax, byte [esp + 0xc]
test al, al
je 0x44817a
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x44], ecx
xor edx, edx
jmp 0x4481c9
mov ebx, dword [esp + 0x38]
lea edx, [ebx + 1]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x44]
cmp edx, ecx
jge 0x44835a
mov ebx, dword [eax + 0x28]
mov ebp, dword [eax + 0x24]
cmp edx, ebx
jae 0x448472
lea ebx, [edx + edx*2]
mov esi, dword [esp + 0xa8]
mov edi, dword [esi + 0x24]
mov esi, dword [esi + 0x28]
cmp edx, esi
jae 0x44846b
mov dword [esp + 0x40], ebx
mov dword [esp + 0x6c], edi
mov dword [esp + 0x38], edx
mov dword [esp + 0x68], ebp
mov eax, dword [ebp + ebx*4]
mov dword [esp], eax
call fcn.00447150
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.00447150
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jne 0x44834b
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044d600
movzx eax, byte [esp + 0xc]
test al, al
je 0x44834b
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + eax*4 + 4]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx + eax*4 + 4]
mov dword [esp + 4], ebp
mov dword [esp], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
call fcn.00447870
movzx eax, byte [esp + 0xc]
test al, al
je 0x44833c
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.004471d0
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.004471d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jne 0x44832d
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044d600
movzx eax, byte [esp + 0xc]
test al, al
je 0x44832d
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x68]
mov ecx, dword [ecx + eax*4 + 8]
mov edx, dword [esp + 0x6c]
mov eax, dword [edx + eax*4 + 8]
cmp ecx, eax
je 0x4481b7
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
cmp al, 0x1a
je 0x44810a
jmp 0x4484b1
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
test ecx, ecx
je 0x44839d
test eax, eax
jne 0x4483ac
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov dword [esp + 0x50], eax
mov eax, dword [ecx]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.00446a90
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00447150
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0x50]
mov edx, dword [edx]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call fcn.00446a90
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00447150
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x28]
cmp eax, ecx
jne 0x44842f
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044d600
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4479fa
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.004269c0
ud2
call fcn.004269c0
ud2
call fcn.00426960
ud2
call fcn.004269c0
ud2
call fcn.004269c0
ud2
call fcn.00428680
lea eax, [0x7c1a36]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.00428f10
movzx eax, byte [esp + 0x17]
and eax, 0x1f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428c30
call fcn.004288a0
call fcn.004286f0
lea eax, [0x7c10d8]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00427ec0
ud2
call fcn.0044be50
jmp fcn.00447870