Function at 0x446870
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xd1dd94]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4470bb
sub esp, 0x70
mov eax, dword [0xd1dcd0]
test eax, eax
jl 0x4470a4
mov ecx, dword [esp + 0x74]
test ecx, ecx
jle 0x4470a4
mov dword [esp + 0x30], eax
movzx edx, byte [0xcfe850]
test dl, dl
jne 0x4468b6
xor edx, edx
xor ebx, ebx
jmp 0x4468ce
call fcn.0045fbb0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x74]
test edx, edx
je 0x4468fe
mov dword [esp + 0x54], ebx
mov dword [esp + 0x28], edx
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0045fd30
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.0045fce0
nop
call fcn.004765b0
mov eax, dword [0xd003f8]
mov ecx, dword [0xd003fc]
mov edx, dword [esp]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 4]
test eax, eax
xchg ebp, ebx
setne bl
xchg ebp, ebx
test ecx, ecx
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x446986
mov ebp, dword [0xd00400]
mov esi, dword [0xd00404]
mov dword [esp + 0x4c], esi
mov edi, dword [esp + 0x30]
sar edi, 0x1f
sub edx, eax
mov dword [esp + 0x48], edx
mov eax, ebx
sbb ebx, ecx
mov ecx, eax
mov eax, dword [esp + 0x30]
mul edx
mov esi, dword [esp + 0x48]
imul edi, esi
add edx, edi
mov esi, dword [esp + 0x30]
imul ebx, esi
add edx, ebx
add ebp, eax
mov dword [0xd00400], ebp
mov ebx, dword [esp + 0x4c]
adc ebx, edx
mov dword [0xd00404], ebx
jmp 0x44698c
mov ecx, ebx
mov esi, dword [esp + 0x30]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x2c]
mov dword [0xd003f8], edx
mov dword [0xd003fc], ecx
mov ebx, dword [esp + 0x74]
lea ebp, [ebx + 0x1f]
sar ebp, 0x1f
shr ebp, 0x1b
lea ebp, [ebp + ebx + 0x1f]
sar ebp, 5
mov dword [esp + 0x34], ebp
cmp dword [0xcfba44], ebx
jge 0x446b85
nop
nop
lea eax, [0xd1dcdc]
mov dword [esp], eax
call fcn.0040a690
mov eax, dword [esp + 0x74]
lea ecx, [0xcfba40]
cmp dword [ecx + 8], eax
jl 0x4469ee
mov dword [0xcfba44], eax
jmp 0x446a7a
lea ecx, [0x8cee80]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.00470280
mov eax, dword [esp + 0xc]
mov dword [esp + 0x6c], eax
mov ecx, dword [0xcfba40]
mov edx, dword [0xcfba48]
lea ebx, [0x8cee80]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x74]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.0046cd60
mov eax, dword [esp + 0x74]
mov dword [0xcfba44], eax
mov dword [0xcfba48], eax
mov ecx, dword [0xd1e0e8]
test ecx, ecx
jne 0x446a5a
mov ebx, dword [esp + 0x6c]
jmp 0x446a6e
call fcn.004757f0
mov ebx, dword [esp + 0x6c]
mov dword [edi], ebx
mov ebp, dword [0xcfba40]
mov dword [edi + 4], ebp
mov dword [0xcfba40], ebx
lea ecx, [0xcfba40]
mov edx, dword [0xcfba58]
mov ebx, dword [esp + 0x34]
cmp edx, ebx
jl 0x446aad
jb 0x44709d
mov dword [0xcfba54], ebx
mov edx, dword [0xcfba68]
cmp edx, ebx
jb 0x447096
mov dword [0xcfba64], ebx
jmp 0x446b61
mov eax, dword [0xcfba50]
mov ecx, dword [0xcfba54]
lea edx, [0x8a7700]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00450250
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
mov dword [0xcfba54], ecx
mov dword [0xcfba58], ecx
mov edx, dword [0xd1e0e8]
test edx, edx
je 0x446b01
call fcn.004757f0
mov dword [edi], eax
mov edx, dword [0xcfba50]
mov dword [edi + 4], edx
mov dword [0xcfba50], eax
mov eax, dword [0xcfba60]
mov edx, dword [0xcfba64]
lea ebx, [0x8a7700]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.00450250
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
mov dword [0xcfba64], ecx
mov dword [0xcfba68], ecx
mov edx, dword [0xd1e0e8]
test edx, edx
je 0x446b5b
call fcn.004757f0
mov dword [edi], eax
mov edx, dword [0xcfba60]
mov dword [edi + 4], edx
mov dword [0xcfba60], eax
nop
nop
lea eax, [0xd1dcdc]
mov dword [esp], eax
call fcn.0040a8b0
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
mov eax, esi
jmp 0x446bc1
mov ecx, dword [0xcfba40]
lea ecx, [ecx + eax*4]
mov dword [esp], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 4], ecx
call fcn.00404c40
mov eax, dword [esp + 0x40]
lea esi, [eax + 1]
mov eax, dword [esp + 0x74]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x34]
cmp ebx, esi
jle 0x446c21
mov edi, dword [0xcfba44]
cmp esi, edi
jae 0x44708d
mov dword [esp + 0x40], esi
mov edi, dword [0xcfba40]
mov edi, dword [edi + esi*4]
test edi, edi
jne 0x446bfa
lea eax, [0x92a2c0]
mov dword [esp], eax
call fcn.0040bf60
mov edi, dword [esp + 4]
mov esi, dword [esp + 0x40]
mov dword [esp + 0x60], edi
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.00446390
mov ecx, dword [0xcfba44]
mov eax, dword [esp + 0x40]
cmp eax, ecx
jb 0x446b89
jmp 0x447088
mov esi, dword [0xd1dd94]
mov esi, dword fs:[esi]
mov esi, dword [esi]
mov dword [esp + 0x64], esi
mov edi, dword [esi + 0x18]
mov edi, dword [edi + 0x58]
test edi, edi
je 0x446d2e
mov dword [esp + 0x44], edi
cmp dword [edi], ebx
jl 0x446d14
mov edi, dword [esp + 0x44]
test edi, edi
je 0x446d2e
movzx edi, byte [0xcfe850]
xchg edi, eax
test al, al
xchg edi, eax
jne 0x446c6f
xor edi, edi
xor edi, edi
mov dword [esp + 0x50], edi
xor edi, edi
jmp 0x446c99
call fcn.0045fbb0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x64]
mov edi, ecx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x4c]
test edi, edi
je 0x446d05
mov dword [esp + 0x24], edi
nop
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov dword [esp + 4], edi
mov byte [esp + 8], 1
call fcn.00460b20
mov eax, dword [esp + 0x64]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x58]
mov edx, dword [esp + 0x50]
mov dword [esp], edx
mov ebx, dword [esp + 0x24]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0045ff00
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
call fcn.0045fce0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x64]
mov edi, dword [esi + 0x18]
mov edi, dword [edi + 0x58]
mov dword [edi + 0x2c], 0
jmp 0x446d2e
mov dword [edi + 4], 1
mov eax, dword [esi + 0x18]
mov eax, dword [eax + 0x58]
mov eax, dword [eax + 0x30]
mov dword [esp], eax
call fcn.00411550
jmp 0x446dad
mov edi, dword [esi + 0x18]
mov dword [edi + 0x58], 0
mov edi, dword [0xcfba44]
test edi, edi
jbe 0x44707f
mov eax, dword [0xcfba40]
mov eax, dword [eax]
mov dword [eax + 0x2c], 0
mov dword [eax + 4], 0
mov dword [esp], eax
call fcn.004470d0
movzx eax, byte [0xcfe850]
test al, al
jne 0x446d75
xor ecx, ecx
xor eax, eax
jmp 0x446d81
call fcn.0045fbb0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x446dad
mov dword [esp + 0x20], ecx
mov dword [esp + 0x58], eax
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00460900
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 4], eax
call fcn.0045fce0
mov dword [0xd1dcac], 0
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x74]
mov eax, ebx
jmp 0x446deb
mov dword [esp + 0x3c], ebx
mov eax, dword [0xcfba40]
mov eax, dword [eax + ebx*4]
mov dword [esp], eax
call fcn.00446510
mov eax, dword [esp + 0x3c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x30]
cmp ebx, edx
jge 0x446dfe
mov ecx, dword [0xcfba44]
cmp ebx, ecx
jb 0x446dc3
jmp 0x447078
lea ebx, [0xcfba40]
cmp dword [ebx + 4], eax
je 0x446e75
nop
nop
lea eax, [0xd1dcdc]
mov dword [esp], eax
call fcn.0040a690
mov edx, dword [0xcfba48]
mov ecx, dword [esp + 0x74]
cmp ecx, edx
ja 0x447073
mov dword [0xcfba44], ecx
mov edx, dword [0xcfba58]
mov eax, dword [esp + 0x34]
cmp edx, eax
jb 0x44706c
mov dword [0xcfba54], eax
mov edx, dword [0xcfba68]
cmp edx, eax
jb 0x447065
mov dword [0xcfba64], eax
nop
nop
lea eax, [0xd1dcdc]
mov dword [esp], eax
call fcn.0040a8b0
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x30]
lea ebx, [eax - 1]
mov ebp, dword [esp + 0x64]
xor ecx, ecx
jmp 0x446e81
dec ebx
mov dword [esp + 0x5c], ecx
test ebx, ebx
jl 0x446f32
mov esi, dword [0xcfba44]
cmp ebx, esi
jae 0x44705c
mov esi, dword [0xcfba40]
mov esi, dword [esi + ebx*4]
mov edi, dword [ebp + 0x18]
mov edi, dword [edi + 0x58]
cmp edi, esi
je 0x446e80
mov dword [esp + 0x38], ebx
mov dword [esp + 0x68], esi
mov dword [esi + 4], 0
mov dword [esp], esi
call fcn.00449670
movzx eax, byte [esp + 4]
test al, al
jne 0x446efd
mov edx, dword [0xd0035c]
nop
test edx, edx
je 0x446eeb
mov ebx, dword [edx + 0xb4]
mov dword [0xd0035c], ebx
dec dword [0xd00360]
nop
mov ecx, dword [esp + 0x68]
mov dword [ecx + 0x2c], edx
mov edx, dword [esp + 0x5c]
nop
mov dword [ecx + 8], edx
jmp 0x446f1d
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 8], ecx
call fcn.004492b0
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x64]
jmp 0x446e80
nop
mov dword [0xcfc200], eax
mov dword [0xcfc208], 0
mov ebx, 1
jmp 0x446f4f
lea ebx, [esi + 1]
mov eax, ebp
cmp eax, ebx
jb 0x446ff7
mov ebp, eax
mov esi, ebx
jmp 0x447053
cmp ebx, 1
jne 0x446f4a
mov ebx, dword [0xcfc20c]
mov edi, dword [0xcfc208]
inc edi
mov eax, dword [0xcfc204]
cmp ebx, edi
jae 0x446fe8
mov dword [esp + 0x48], esi
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x8a7700]
mov dword [esp + 0x10], eax
call fcn.00470330
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [0xcfc20c], eax
mov eax, dword [0xd1e0e8]
test eax, eax
je 0x446fce
call fcn.004757f0
mov dword [edi], ecx
mov ebx, dword [0xcfc204]
mov dword [edi + 4], ebx
mov dword [0xcfc204], ecx
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x48]
mov edi, edx
mov eax, ecx
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x30]
mov dword [0xcfc208], edi
mov dword [eax + edi*4 - 4], esi
jmp 0x446f4a
lea ecx, [0xd1dcd0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0047a670
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x30]
cmp eax, ecx
je 0x447037
lea ecx, [0xd1e480]
mov dword [esp], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00419940
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x78], eax
add esp, 0x70
ret
mov edi, eax
mov eax, ebx
xor edx, edx
div edi
mov eax, edx
mov ebx, edi
mov edx, dword [esp + 0x30]
test eax, eax
jne 0x447043
jmp 0x446f60
mov eax, ebx
mov ecx, esi
call fcn.00475860
mov ecx, eax
call fcn.004758a0
mov ecx, eax
call fcn.004758a0
call fcn.004758a0
mov eax, ebx
call fcn.00475860
xor eax, eax
mov ecx, eax
call fcn.00475860
call fcn.00475860
mov eax, esi
mov ecx, edi
call fcn.00475860
mov ecx, ebx
call fcn.004758a0
mov ecx, ebx
call fcn.004758a0
lea eax, [0x949d46]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.0046e7f0
nop
call fcn.004743e0
jmp fcn.00446870