Function at 0x446880
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x20]
cmp eax, dword [ecx + 8]
jbe 0x447516
sub esp, 0xa0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x9c], ecx
lea edx, [0x6cd680]
mov dword [esp], edx
mov ebx, dword [esp + 0xac]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x98]
mov dword [esp + 8], ebp
call fcn.00406220
movzx eax, byte [esp + 0x10]
test al, al
jne 0x44746c
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x94], ecx
lea edx, [0x6cd680]
mov dword [esp], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 4], edx
lea ebx, [esp + 0x90]
mov dword [esp + 8], ebx
call fcn.004065c0
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
cmp eax, ecx
je 0x44745d
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
movzx ebp, byte [ecx + 0xf]
and ebp, 0x1f
xchg ebp, eax
cmp dl, al
xchg ebp, eax
jne 0x44744e
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], dl
mov dword [esp], eax
call fcn.00445650
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call fcn.00445650
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
je 0x4469b0
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4469a1
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.004456e0
mov eax, dword [esp + 4]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
call fcn.004456e0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x54]
test ecx, ecx
jne 0x4473a7
test eax, eax
jne 0x4473a5
movzx eax, byte [esp + 0x16]
lea ecx, [eax - 1]
cmp cl, 0xf
jbe 0x447396
cmp al, 0x15
ja 0x44708b
cmp al, 0x12
jbe 0x446fd2
cmp al, 0x13
jne 0x446cbc
mov eax, dword [esp + 0xa4]
movzx ecx, word [eax + 0x22]
mov edx, dword [esp + 0xa8]
movzx ebx, word [edx + 0x22]
cmp cx, bx
jne 0x446cad
movzx ecx, word [eax + 0x20]
movzx ebx, word [edx + 0x20]
cmp bx, cx
jne 0x446cad
movzx ebp, byte [eax + 0xc]
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x446ca3
mov ebp, 0x34
mov esi, eax
add eax, ebp
test byte [eax], al
movzx ecx, cx
cmp ecx, 0x100000
ja 0x4474ba
movzx ebp, byte [edx + 0xc]
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x446c99
mov ebp, 0x34
mov edi, edx
add edx, ebp
test byte [edx], al
movzx ebx, bx
cmp ebx, 0x100000
ja 0x4474b3
mov dword [esp + 0x88], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x84], edx
mov dword [esp + 0x1c], ebx
xor ebp, ebp
jmp 0x446afd
mov eax, dword [esp + 0x2c]
lea ebp, [eax + 1]
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0xa4]
mov edi, dword [esp + 0xa8]
cmp ebp, ecx
jge 0x446b48
jae 0x4474ac
mov edi, dword [eax + ebp*4]
cmp ebp, ebx
jae 0x4474ac
mov dword [esp + 0x2c], ebp
mov eax, dword [edx + ebp*4]
mov dword [esp + 4], eax
mov dword [esp], edi
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00446880
movzx eax, byte [esp + 0xc]
test al, al
jne 0x446ad2
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
movzx eax, byte [esi + 0xc]
test al, 1
je 0x446c8f
mov eax, 0x34
mov ecx, esi
add eax, esi
test byte [eax], al
movzx edx, word [ecx + 0x22]
and edx, 0x7fff
movzx ecx, word [ecx + 0x20]
movzx ebx, cx
add ecx, edx
movzx ecx, cx
cmp ebx, ecx
ja 0x4474a5
cmp ecx, 0x100000
ja 0x4474a5
sub ecx, ebx
lea edx, [ebx - 0x100000]
neg edx
shl ebx, 2
neg edx
sar edx, 0x1f
and edx, ebx
add eax, edx
movzx edx, byte [edi + 0xc]
test dl, 1
je 0x446c85
mov edx, 0x34
mov ebx, edi
add edx, edi
test byte [edx], al
movzx ebp, word [ebx + 0x22]
and ebp, 0x7fff
movzx ebx, word [ebx + 0x20]
movzx esi, bx
add ebx, ebp
movzx ebx, bx
cmp esi, ebx
ja 0x44749e
cmp ebx, 0x100000
ja 0x44749e
mov dword [esp + 0x20], ecx
mov dword [esp + 0x58], eax
sub ebx, esi
mov dword [esp + 0x18], ebx
lea ebp, [esi - 0x100000]
xchg ebp, ebx
neg ebx
xchg ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl esi, 2
sar ebp, 0x1f
and ebp, esi
add edx, ebp
mov dword [esp + 0x48], edx
xor ebp, ebp
jmp 0x446c2b
mov esi, dword [esp + 0x34]
lea ebp, [esi + 1]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x18]
cmp ebp, ecx
jge 0x446c76
jae 0x447497
mov esi, dword [eax + ebp*4]
cmp ebp, ebx
jae 0x447497
mov dword [esp + 0x34], ebp
mov eax, dword [edx + ebp*4]
mov dword [esp + 4], eax
mov dword [esp], esi
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00446880
movzx eax, byte [esp + 0xc]
test al, al
jne 0x446c14
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov edx, 0x24
jmp 0x446bb2
mov eax, 0x24
jmp 0x446b5a
mov ebp, 0x24
jmp 0x446aa3
mov ebp, 0x24
jmp 0x446a7a
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
cmp al, 0x14
jne 0x446f5c
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov dword [esp], ecx
call fcn.00446160
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.00446160
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
je 0x446d17
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x446d08
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x28]
cmp ecx, ebx
jne 0x446f4d
mov dword [esp + 0x44], ecx
xor ebx, ebx
jmp 0x446d70
mov ebp, dword [esp + 0x30]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xa8]
cmp ebx, ecx
jge 0x446f3e
mov ebp, dword [eax + 0x28]
mov esi, dword [eax + 0x24]
cmp ebx, ebp
jae 0x447490
lea ebp, [esi + ebx*8]
mov edi, dword [edx + 0x28]
mov edx, dword [edx + 0x24]
cmp ebx, edi
jae 0x447489
mov dword [esp + 0x80], edx
mov dword [esp + 0x7c], esi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x5c], ebp
lea eax, [esi + ebx*8]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00445800
mov eax, dword [esp + 8]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x80]
lea ebx, [edx + ecx*8]
mov ebx, dword [ebx]
mov dword [esp + 4], ebx
lea ebx, [edx + ecx*8]
mov dword [esp + 0x4c], ebx
mov dword [esp], ebx
call fcn.00445800
mov eax, dword [esp + 8]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
call fcn.00446160
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x74]
mov dword [esp], edx
call fcn.00446160
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jne 0x446f2f
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x446f2f
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.00446260
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x74]
mov dword [esp], edx
call fcn.00446260
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jne 0x446f20
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x446f20
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x7c]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp], ecx
call fcn.00445ae0
mov eax, dword [esp + 8]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x80]
lea edx, [edx + ecx*8 + 4]
mov edx, dword [edx]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x4c]
mov dword [esp], edx
call fcn.00445ae0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x60]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00446880
movzx eax, byte [esp + 0xc]
test al, al
jne 0x446d57
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
call fcn.00446880
movzx eax, byte [esp + 0xc]
test al, al
jne 0x446fa0
xor eax, eax
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x24]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00446880
movzx eax, byte [esp + 0xc]
jmp 0x446f92
cmp al, 0x11
je 0x44702c
cmp al, 0x12
jne 0x4474c1
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x24]
cmp ecx, ebx
je 0x447008
xor eax, eax
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov eax, dword [eax + 0x20]
mov ecx, dword [edx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00446880
movzx eax, byte [esp + 0xc]
jmp 0x446ffa
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
call fcn.00446880
movzx eax, byte [esp + 0xc]
test al, al
je 0x447087
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x28]
cmp eax, ecx
sete al
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
xor eax, eax
jmp 0x447079
cmp al, 0x17
ja 0x447115
cmp al, 0x16
jne 0x4470d7
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00446880
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00446880
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
cmp al, 0x18
jne 0x447129
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
cmp al, 0x19
jne 0x447388
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x28]
cmp ecx, ebx
jne 0x447379
mov ecx, dword [eax + 0x20]
mov dword [esp], ecx
call fcn.00446160
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.00446160
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
je 0x447199
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x44718a
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x44], ecx
xor edx, edx
jmp 0x4471d9
mov ebx, dword [esp + 0x38]
lea edx, [ebx + 1]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x44]
cmp edx, ecx
jge 0x44736a
mov ebx, dword [eax + 0x28]
mov ebp, dword [eax + 0x24]
cmp edx, ebx
jae 0x447482
lea ebx, [edx + edx*2]
mov esi, dword [esp + 0xa8]
mov edi, dword [esi + 0x24]
mov esi, dword [esi + 0x28]
cmp edx, esi
jae 0x44747b
mov dword [esp + 0x40], ebx
mov dword [esp + 0x6c], edi
mov dword [esp + 0x38], edx
mov dword [esp + 0x68], ebp
mov eax, dword [ebp + ebx*4]
mov dword [esp], eax
call fcn.00446160
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.00446160
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jne 0x44735b
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x44735b
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + eax*4 + 4]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx + eax*4 + 4]
mov dword [esp + 4], ebp
mov dword [esp], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
call fcn.00446880
movzx eax, byte [esp + 0xc]
test al, al
je 0x44734c
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.004461e0
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.004461e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jne 0x44733d
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x44733d
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x68]
mov ecx, dword [ecx + eax*4 + 8]
mov edx, dword [esp + 0x6c]
mov eax, dword [edx + eax*4 + 8]
cmp ecx, eax
je 0x4471c7
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
cmp al, 0x1a
je 0x44711a
jmp 0x4474c1
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
test ecx, ecx
je 0x4473ad
test eax, eax
jne 0x4473bc
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov dword [esp + 0x50], eax
mov eax, dword [ecx]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.00445aa0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00446160
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0x50]
mov edx, dword [edx]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call fcn.00445aa0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00446160
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x28]
cmp eax, ecx
jne 0x44743f
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x446a0a
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.00426060
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.00426060
ud2
call fcn.004260c0
ud2
call fcn.004260c0
ud2
call fcn.00427d80
lea eax, [0x72c149]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.00428610
movzx eax, byte [esp + 0x17]
and eax, 0x1f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428330
call fcn.00427fa0
call fcn.00427df0
lea eax, [0x72b788]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.004275c0
ud2
call fcn.0044ae20
jmp fcn.00446880