Function at 0x448120
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4cc1d6
push eax
mov dword fs:[0], esp
sub esp, 0x24c
push ebx
mov ebx, dword [esp + 0x260]
push ebp
push esi
push edi
mov esi, ecx
push ebx
call fcn.0043c830
test al, al
je 0x448159
xor al, al
jmp 0x4487ad
mov ecx, esi
call fcn.0043f1f0
mov cx, word [esi + 0x16]
mov dword [esp + 0x30], eax
cmp cx, 8
ja 0x448179
test eax, eax
jne 0x448179
xor al, al
jmp 0x4487ad
mov eax, dword [esi + 0xc]
and ecx, 0xffff
add eax, 0x1f
mov ebp, ecx
cdq
and edx, 0x1f
mov ecx, esi
add eax, edx
sar eax, 5
shl eax, 2
mov dword [esp + 0x44], eax
imul eax, dword [esi + 0x10]
mov dword [esp + 0x3c], eax
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x18], eax
call fcn.00441cc0
test al, al
je 0x4481cb
mov eax, dword [esi + 0x28]
test eax, eax
jne 0x4481cb
mov eax, dword [esi + 0xc]
mov ebp, 0x20
imul eax, dword [esi + 0x10]
shl eax, 2
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x274]
mov ecx, 1
cmp eax, ecx
jge 0x4481dd
mov eax, ecx
mov dl, byte [esp + 0x270]
mov word [esp + 0x34], 0
test dl, dl
mov word [esp + 0x36], cx
mov word [esp + 0x38], ax
jne 0x448205
shl eax, 4
add eax, 6
mov dword [esi + 0x1c8], eax
mov edx, dword [esi + 0x28]
mov eax, dword [esp + 0x18]
push ecx
mov word [esp + 0x2a], bp
lea edi, [eax + edx*4 + 0x28]
mov dl, byte [esi + 0xc]
mov eax, dword [esp + 0x40]
mov byte [esp + 0x24], dl
mov dl, byte [esi + 0x28]
add edi, eax
mov al, byte [esi + 0x10]
mov byte [esp + 0x26], dl
mov edx, dword [esi + 0x1c8]
mov byte [esp + 0x25], al
mov dword [esp + 0x30], edx
mov edx, dword [esi + 0xc]
mov dword [esp + 0x50], edx
mov edx, dword [esi + 0x10]
mov word [esp + 0x5a], bp
mov ebp, dword [esp + 0x1c]
push ecx
xor eax, eax
shl edx, 1
mov word [esp + 0x5c], cx
push ecx
push esi
lea ecx, [esp + 0xa4]
mov byte [esp + 0x33], 0
mov word [esp + 0x34], ax
mov dword [esp + 0x38], edi
mov dword [esp + 0x58], 0x28
mov dword [esp + 0x60], edx
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
call fcn.0043da10
push 0
push 0
lea ecx, [esp + 0x80]
mov dword [esp + 0x26c], 0
call fcn.00442550
mov ecx, dword [esi + 0xc]
mov eax, 0xff
cmp ecx, eax
mov byte [esp + 0x264], 1
jg 0x4482cc
cmp dword [esi + 0x10], eax
jle 0x448301
lea ecx, [esp + 0x78]
mov byte [esp + 0x21], 0
mov byte [esp + 0x20], 0
call fcn.00442630
lea eax, [esp + 0x78]
push 4
push eax
lea ecx, [esp + 0x9c]
call fcn.0043cd30
lea ecx, [esp + 0x78]
call fcn.00442810
mov edi, eax
mov dword [esp + 0x28], edi
mov al, byte [esp + 0x270]
test al, al
jne 0x44847d
mov ecx, dword [esp + 0x36]
push ecx
mov ecx, esi
call fcn.0043c700
mov edx, dword [esp + 0x38]
mov ecx, esi
push edx
mov word [esp + 0x3a], ax
call fcn.0043c700
push 1
lea ecx, [esp + 0x38]
mov word [esp + 0x3c], ax
mov eax, dword [ebx]
push 6
push ecx
mov ecx, ebx
call dword [eax + 0xc]
mov edx, dword [esp + 0x36]
mov ecx, esi
push edx
call fcn.0043c700
mov word [esp + 0x36], ax
mov eax, dword [esp + 0x38]
push eax
mov ecx, esi
call fcn.0043c700
mov word [esp + 0x38], ax
mov eax, dword [esp + 0x274]
test eax, eax
jne 0x44876c
mov edx, dword [esp + 0x24]
mov ecx, esi
push edx
call fcn.0043c700
mov word [esp + 0x24], ax
mov eax, dword [esp + 0x26]
push eax
mov ecx, esi
call fcn.0043c700
mov ecx, dword [esp + 0x28]
mov word [esp + 0x26], ax
push ecx
mov ecx, esi
call fcn.0043c730
mov edx, dword [esp + 0x2c]
mov ecx, esi
push edx
mov dword [esp + 0x2c], eax
call fcn.0043c730
push 1
lea ecx, [esp + 0x24]
mov dword [esp + 0x30], eax
mov eax, dword [ebx]
push 0x10
push ecx
mov ecx, ebx
call dword [eax + 0xc]
mov edx, dword [esp + 0x24]
mov ecx, esi
push edx
call fcn.0043c700
mov word [esp + 0x24], ax
mov eax, dword [esp + 0x26]
push eax
mov ecx, esi
call fcn.0043c700
mov ecx, dword [esp + 0x28]
mov word [esp + 0x26], ax
push ecx
mov ecx, esi
call fcn.0043c730
mov edx, dword [esp + 0x2c]
mov ecx, esi
push edx
mov dword [esp + 0x2c], eax
call fcn.0043c730
mov ecx, dword [esi + 0x1c8]
mov dword [esp + 0x2c], eax
mov al, byte [esp + 0x270]
add ecx, edi
test al, al
mov dword [esi + 0x1c8], ecx
je 0x448440
mov eax, dword [esp + 0x274]
mov ecx, dword [esi + 0x160]
cmp eax, ecx
jl 0x44844f
mov al, byte [esp + 0x270]
test al, al
jne 0x44876c
mov eax, dword [esp + 0x274]
test eax, eax
jne 0x44876c
mov al, byte [esp + 0x20]
test al, al
jne 0x448494
mov al, byte [esp + 0x21]
test al, al
jne 0x448494
mov esi, dword [ebx]
push 1
push edi
push 0
lea ecx, [esp + 0x84]
call fcn.00442670
push eax
mov ecx, ebx
call dword [esi + 0xc]
jmp 0x44876c
mov ecx, dword [esp + 0x274]
mov eax, dword [esi + 0x160]
cmp ecx, eax
je 0x448373
jmp 0x448420
lea ecx, [esp + 0x48]
push ecx
mov ecx, esi
call fcn.0043c770
mov edx, dword [ebx]
push 1
lea eax, [esp + 0x4c]
push 0x28
push eax
mov ecx, ebx
call dword [edx + 0xc]
lea ecx, [esp + 0x48]
push ecx
mov ecx, esi
call fcn.0043c770
mov edx, dword [esi + 0x14c]
mov ecx, esi
test edx, edx
lea edx, [esp + 0x40]
push edx
setge byte [esp + 0x17]
call fcn.0043c380
mov edi, dword [esp + 0x30]
test edi, edi
je 0x448527
mov al, byte [esp + 0x13]
test al, al
je 0x4484fb
mov al, byte [esi + 0x14c]
push 0
push 0
push 0
push 0
push eax
mov ecx, esi
call fcn.0043f150
mov eax, dword [esi + 0x28]
mov edx, dword [ebx]
shl eax, 2
push 1
push eax
push edi
mov ecx, ebx
call dword [edx + 0xc]
mov al, byte [esp + 0x13]
test al, al
je 0x448527
mov ecx, dword [esp + 0x40]
mov dl, byte [esi + 0x14c]
push ecx
push edx
mov ecx, esi
call fcn.0043f1a0
mov ecx, esi
call fcn.00441cc0
test al, al
je 0x4485d8
mov eax, dword [esi + 0x28]
test eax, eax
jne 0x4485d8
push ebp
call fcn.0049752d
mov edi, eax
mov eax, dword [esi + 0x10]
add esp, 4
mov dword [esp + 0x30], edi
test eax, eax
mov dword [esp + 0x14], 0
jle 0x4485c2
mov eax, dword [esp + 0x14]
mov ecx, esi
push eax
call fcn.0043dd90
mov ebp, eax
mov eax, dword [esi + 0xc]
xor ebx, ebx
test eax, eax
jle 0x4485a3
mov cl, byte [ebp]
mov byte [edi], cl
mov dl, byte [ebp + 1]
inc edi
inc ebp
mov ecx, dword [esp + 0x14]
mov byte [edi], dl
mov al, byte [ebp + 1]
inc edi
inc ebp
push ecx
push ebx
mov byte [edi], al
inc edi
mov ecx, esi
inc ebp
call fcn.00441f60
mov byte [edi], al
mov eax, dword [esi + 0xc]
inc edi
inc ebx
cmp ebx, eax
jl 0x448576
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x10]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x44855f
mov ebx, dword [esp + 0x26c]
mov edi, dword [esp + 0x30]
mov ebp, dword [esp + 0x18]
mov edx, dword [ebx]
push 1
push ebp
push edi
mov ecx, ebx
call dword [edx + 0xc]
push edi
call fcn.00497667
add esp, 4
jmp 0x4485e6
mov ecx, dword [esi + 0x34]
mov eax, dword [ebx]
push 1
push ebp
push ecx
mov ecx, ebx
call dword [eax + 0xc]
mov edx, dword [esp + 0x3c]
push 1
push edx
call fcn.00499d72
mov ebp, eax
add esp, 8
test ebp, ebp
mov dword [esp + 0x30], ebp
jne 0x448644
lea ecx, [esp + 0x78]
mov byte [esp + 0x264], al
call fcn.004425a0
lea ecx, [esp + 0x94]
mov dword [esp + 0x264], 0xffffffff
mov dword [esp + 0x94], 0x4d2c90
call fcn.0043d960
lea ecx, [esp + 0x94]
call fcn.0043d8b0
xor al, al
jmp 0x4487ad
mov ecx, esi
call fcn.00442010
mov ecx, esi
mov byte [esp + 0x1e], al
call fcn.00441cc0
mov byte [esp + 0x1f], al
mov eax, dword [esi + 0x10]
xor edi, edi
test eax, eax
mov dword [esp + 0x18], edi
jle 0x448754
mov dword [esp + 0x14], edi
mov eax, dword [esi + 0xc]
xor ebp, ebp
test eax, eax
jle 0x448732
mov al, byte [esp + 0x1f]
xor ebx, ebx
test al, al
je 0x448698
push edi
push ebp
mov ecx, esi
call fcn.00441f60
test al, al
jne 0x448698
mov ebx, 1
mov al, byte [esp + 0x1e]
test al, al
je 0x4486bc
push 1
push edi
lea eax, [esp + 0x78]
push ebp
push eax
mov ecx, esi
call fcn.0043f560
mov cl, byte [eax + 3]
test cl, cl
jne 0x4486bc
mov ebx, 1
push 0
push edi
lea ecx, [esp + 0x7c]
push ebp
push ecx
mov ecx, esi
call fcn.0043f450
mov cl, byte [esp + 0x13]
mov eax, dword [eax]
test cl, cl
je 0x4486e1
cmp eax, dword [esp + 0x40]
jne 0x4486e1
mov ebx, 1
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x30]
mov edi, ebp
sar edi, 3
add edi, edx
mov edx, ebp
add edi, ecx
and edx, 0x80000007
jns 0x448701
dec edx
or edx, 0xfffffff8
inc edx
mov ecx, 7
mov al, 1
sub ecx, edx
mov dl, byte [edi]
shl al, cl
and bl, 1
shl bl, cl
not al
and al, dl
or al, bl
inc ebp
mov byte [edi], al
mov eax, dword [esi + 0xc]
mov edi, dword [esp + 0x18]
cmp ebp, eax
jl 0x44867c
mov ebx, dword [esp + 0x26c]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x14]
mov eax, dword [esi + 0x10]
inc edi
add edx, ecx
cmp edi, eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], edx
jl 0x44866f
mov ebp, dword [esp + 0x30]
mov eax, dword [esp + 0x3c]
mov edx, dword [ebx]
push 1
push eax
push ebp
mov ecx, ebx
call dword [edx + 0xc]
push ebp
call fcn.00497667
add esp, 4
lea ecx, [esp + 0x78]
mov byte [esp + 0x264], 0
call fcn.004425a0
lea ecx, [esp + 0x94]
mov dword [esp + 0x264], 0xffffffff
mov dword [esp + 0x94], 0x4d2c90
call fcn.0043d960
lea ecx, [esp + 0x94]
call fcn.0043d8b0
mov al, 1
mov ecx, dword [esp + 0x25c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x258
ret 0xc