Function at 0x447166
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x130
mov ecx, dword [esp + 0x138]
mov edx, dword [esp + 0x14c]
or eax, 0xffffffff
push ebx
mov ebx, dword [esp + 0x148]
push ebp
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x148]
push esi
mov esi, dword [esp + 0x140]
lea ebp, [ecx + eax]
push edi
xor edi, edi
lea eax, [ebp - 1]
mov dword [esp + 0x28], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x38], eax
test ebx, 0xe20f5a6f
je 0x4471d4
lea eax, [edi - 3]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
cmp esi, edi
je 0x447cac
cmp ecx, edi
je 0x447cac
cmp dword [esp + 0x158], edi
jne 0x4471f5
cmp edx, edi
jg 0x447cac
cmp edx, edi
jge 0x447209
mov eax, 0xfffffff1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
movzx eax, word [esi + 0x1a]
movzx ecx, word [esi + 0x18]
movzx edx, word [esi + 0x1c]
mov dword [esp + 0x6c], eax
mov eax, 0x989680
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov eax, dword [esi + 0x20]
add ecx, esi
mov dword [esp + 0x70], ecx
mov dword [esp + 0x68], edx
mov dword [esp + 0xdc], edi
mov dword [esp + 0x10], eax
cmp eax, edi
jne 0x44724a
mov dword [esp + 0x10], 0x486098
cmp dword [esi], 0x50435245
je 0x447282
lea ecx, [esp + 0x114]
push ecx
push edi
lea edx, [esp + 0xf4]
push edx
push esi
call fcn.0043a17c
mov esi, eax
add esp, 0x10
cmp esi, edi
jne 0x447282
mov eax, 0xfffffffc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
mov eax, dword [esi + 8]
movzx edx, word [esi + 0x1c]
movzx ecx, al
shr eax, 0x12
and eax, 1
mov dword [esp + 0x30], eax
movzx eax, word [esi + 0x1a]
imul edx, eax
movzx eax, word [esi + 0x18]
add edx, dword [esp + 0x144]
movzx edi, bl
add eax, edx
mov edx, dword [esp + 0x14c]
or edi, ecx
movzx ecx, byte [esi + 0xc]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x148]
mov dword [esp + 0xac], eax
add eax, edx
mov dword [esp + 0xb0], eax
mov dword [esp + 0x44], eax
shr ecx, 3
and ecx, 1
mov dword [esp + 0xe0], ecx
mov ecx, dword [esp + 0x150]
mov dword [esp + 0xcc], ecx
movzx eax, byte [esi + 8]
shr eax, 5
and eax, 1
mov dword [esp + 0x94], eax
mov ecx, dword [esi + 8]
shr ecx, 0xb
and ecx, 1
mov dword [esp + 0x8c], ecx
mov eax, dword [esi + 8]
shr eax, 0x19
and eax, 1
mov dword [esp + 0x90], eax
shr edi, 4
and edi, 1
mov eax, 0
test bl, 0x80
setne al
mov dword [esp + 0xe8], edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x84], eax
mov eax, ebx
shr eax, 8
and eax, 1
mov dword [esp + 0x88], eax
mov eax, ebx
shr eax, 0xa
and eax, 1
mov dword [esp + 0x98], eax
mov eax, ebx
shr eax, 0x1c
and eax, 1
mov dword [esp + 0x9c], eax
test ebx, 0x8000000
je 0x447387
mov eax, 2
jmp 0x44738f
mov eax, ebx
shr eax, 0xf
and eax, 1
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x78], eax
add eax, 0x340
mov dword [esp + 0x7c], eax
xor edx, edx
mov eax, ebx
and eax, 0x1800000
mov dword [esp + 0xa0], edx
mov dword [esp + 0xd8], edx
je 0x4473eb
cmp eax, 0x800000
je 0x4473de
cmp eax, 0x1000000
je 0x447404
mov eax, 0xffffffe9
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
mov dword [esp + 0xa4], 1
jmp 0x44740b
mov eax, dword [esi + 8]
test eax, 0x1800000
je 0x447404
shr eax, 0x17
and eax, 1
mov dword [esp + 0xa4], eax
jmp 0x44740b
mov dword [esp + 0xa4], edx
test ebx, 0x700000
jne 0x447418
mov eax, dword [esi + 8]
jmp 0x44741a
mov eax, ebx
and eax, 0x700000
cmp eax, 0x300000
ja 0x447471
je 0x44746a
cmp eax, edx
je 0x44743a
cmp eax, 0x100000
je 0x447463
cmp eax, 0x200000
jne 0x4473ce
mov eax, 0xa
cmp eax, 0xff
mov dword [esp + 0x60], edx
jle 0x447497
mov edx, eax
sar edx, 8
mov byte [esp + 0x74], dl
mov dword [esp + 0x64], 2
mov byte [esp + 0x75], al
xor edx, edx
jmp 0x4474a3
mov eax, 0xd
jmp 0x44743f
mov eax, 0xd0a
jmp 0x44743f
cmp eax, 0x400000
je 0x44748d
cmp eax, 0x500000
jne 0x4473ce
mov dword [esp + 0x60], 2
jmp 0x4474a3
mov dword [esp + 0x60], 1
jmp 0x4474a3
mov dword [esp + 0x64], 1
mov byte [esp + 0x74], al
cmp dword [esp + 0xc0], edx
je 0x4474c2
test byte [esi + 0xc], 1
je 0x4474c2
mov eax, 0xfffffff3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
cmp ecx, edx
je 0x447535
test ebx, 0x2000
jne 0x447535
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x148]
push eax
push ecx
call fcn.00432982
add esp, 8
test eax, eax
jl 0x4474fa
mov eax, 0xfffffff6
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
mov eax, dword [esp + 0x150]
test eax, eax
jle 0x447535
cmp eax, dword [esp + 0x14c]
jge 0x447535
movzx eax, byte [ebp]
cmp eax, 0x7f
jle 0x447535
and eax, 0xc0
je 0x447535
cmp eax, 0xc0
je 0x447535
mov eax, 0xfffffff5
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
mov eax, dword [esi + 8]
and eax, 7
mov dword [esp + 0xe4], eax
mov eax, 0x55555556
imul dword [esp + 0x15c]
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
movzx eax, word [esi + 0x12]
mov dword [esp + 0x18], edx
test ax, ax
jbe 0x4475b5
movzx ecx, ax
mov eax, 0x55555556
imul edx
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x4475b5
lea eax, [ecx + ecx*2 + 3]
lea ecx, [eax*4]
push ecx
mov dword [esp + 0x1c], eax
call dword [str.GetStartupInfoW]
add esp, 4
mov dword [esp + 0x54], eax
test eax, eax
jne 0x4475ab
mov eax, 0xfffffffa
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
mov dword [esp + 0x28], 1
jmp 0x4475c0
mov edx, dword [esp + 0x158]
mov dword [esp + 0x54], edx
mov ecx, dword [esp + 0x18]
lea edx, [ecx + ecx]
mov eax, 0x55555556
imul edx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], ecx
mov dword [esp + 0x80], 0
mov dword [esp + 0xc8], 0xffffffff
movzx eax, word [esi + 0x10]
lea eax, [eax + eax + 2]
cmp eax, dword [esp + 0x15c]
mov dword [esp + 0x18], eax
jle 0x44760e
mov eax, ecx
mov dword [esp + 0x18], ecx
mov edx, dword [esp + 0x54]
test edx, edx
je 0x447643
lea ecx, [edx + ecx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 1
sub edx, eax
lea eax, [ecx + edx*4]
sub ecx, 4
cmp ecx, eax
jb 0x447643
lea esp, [esp]
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, eax
jae 0x447636
test edi, edi
jne 0x447677
test byte [esi + 0xc], 2
je 0x447677
movzx eax, word [esi + 0x14]
movzx ecx, al
mov dword [esp + 0x1c], ecx
test eax, 0x100
je 0x447736
mov eax, dword [esp + 0x78]
movzx ecx, byte [eax + ecx]
mov dword [esp + 0x20], 1
mov dword [esp + 0x1c], ecx
test byte [esi + 0xc], 4
je 0x4476a2
movzx eax, word [esi + 0x16]
mov edx, dword [esp + 0x10]
movzx ecx, al
shr eax, 8
and eax, 1
mov dword [esp + 0x3c], eax
movzx eax, byte [edx + ecx + 0x100]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x34], eax
and ebx, 0x4000000
mov dword [esp + 0x40], ebx
jmp 0x4476b6
mov edi, dword [esp + 0x54]
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x10], ebx
test edi, edi
je 0x4476dd
mov ecx, dword [esp + 0x18]
lea ecx, [edi + ecx*4]
cmp edi, ecx
jae 0x4476dd
sub ecx, edi
dec ecx
shr ecx, 2
inc ecx
or eax, 0xffffffff
rep stosd dword es:[edi], eax
cmp dword [esp + 0x30], 0
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0x64]
je 0x4477d6
cmp dword [esp + 0x14], 0
mov edi, ebp
je 0x44777b
cmp ebp, eax
jae 0x4477d4
mov edx, dword [esp + 0x60]
test edx, edx
je 0x447743
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x68]
push ecx
push eax
push edx
push edi
call fcn.00432c0a
mov ecx, dword [esp + 0x78]
add esp, 0x14
test eax, eax
jne 0x4477d4
mov eax, dword [esp + 0xb0]
jmp 0x447761
mov dword [esp + 0x20], 0
jmp 0x447677
mov edx, eax
sub edx, ecx
cmp edi, edx
ja 0x447761
mov dl, byte [edi]
cmp dl, byte [esp + 0x74]
jne 0x447761
cmp ecx, 1
je 0x4477d4
mov dl, byte [edi + 1]
cmp dl, byte [esp + 0x75]
je 0x4477d4
inc edi
cmp edi, ebx
jae 0x447775
mov dl, byte [edi]
and dl, 0xc0
cmp dl, 0x80
jne 0x447775
inc edi
cmp edi, ebx
jb 0x447766
cmp edi, eax
jb 0x447704
jmp 0x4477d4
cmp ebp, eax
jae 0x4477d4
lea esp, [esp]
mov edx, dword [esp + 0x60]
test edx, edx
je 0x4477b1
push 0
lea ecx, [esp + 0x68]
push ecx
push eax
push edx
push edi
call fcn.00432c0a
mov ecx, dword [esp + 0x78]
add esp, 0x14
test eax, eax
jne 0x4477d4
mov eax, dword [esp + 0xb0]
jmp 0x4477cf
mov edx, eax
sub edx, ecx
cmp edi, edx
ja 0x4477cf
mov dl, byte [esp + 0x74]
cmp byte [edi], dl
jne 0x4477cf
cmp ecx, 1
je 0x4477d4
mov dl, byte [esp + 0x75]
cmp byte [edi + 1], dl
je 0x4477d4
inc edi
cmp edi, eax
jb 0x447786
mov ebx, edi
cmp dword [esp + 0x40], 0
mov edi, dword [esp + 0x1c]
jne 0x447976
test edi, edi
jl 0x44783c
cmp dword [esp + 0x20], 0
je 0x447816
cmp ebp, ebx
jae 0x447976
movzx eax, byte [ebp]
mov ecx, dword [esp + 0x78]
movzx edx, byte [eax + ecx]
cmp edx, edi
je 0x447976
inc ebp
cmp ebp, ebx
jb 0x4477f8
jmp 0x447976
cmp ebp, ebx
jae 0x447976
jmp 0x447826
movzx eax, byte [ebp]
cmp eax, edi
je 0x447976
inc ebp
cmp ebp, ebx
jb 0x447826
jmp 0x447976
cmp dword [esp + 0xe0], 0
je 0x447976
mov edx, dword [esp + 0x150]
mov eax, dword [esp + 0xac]
add edx, eax
cmp ebp, edx
jbe 0x447976
cmp dword [esp + 0x14], 0
je 0x4478ed
cmp ebp, ebx
jae 0x44794b
jmp 0x44787e
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0x60]
test edx, edx
je 0x4478ad
cmp ebp, eax
jbe 0x4478d2
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x68]
push ecx
push eax
push edx
push ebp
call fcn.00432ab9
add esp, 0x14
test eax, eax
jne 0x44794b
mov ecx, dword [esp + 0x64]
jmp 0x4478d2
lea edx, [ecx + eax]
cmp ebp, edx
jb 0x4478d2
mov eax, ebp
sub eax, ecx
mov dl, byte [eax]
cmp dl, byte [esp + 0x74]
jne 0x4478d2
cmp ecx, 1
je 0x44794b
mov dl, byte [esp + 0x75]
cmp byte [eax + 1], dl
je 0x44794b
inc ebp
cmp ebp, ebx
jae 0x44794b
mov al, byte [ebp]
and al, 0xc0
cmp al, 0x80
jne 0x4478e7
inc ebp
cmp ebp, ebx
jb 0x4478d7
jmp 0x44794b
cmp ebp, ebx
jb 0x447877
jmp 0x44794b
cmp ebp, ebx
jae 0x44794b
jmp 0x4478fd
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0x60]
test edx, edx
je 0x447925
cmp ebp, eax
jbe 0x447946
push 0
lea ecx, [esp + 0x68]
push ecx
push eax
push edx
push ebp
call fcn.00432ab9
add esp, 0x14
test eax, eax
jne 0x44794b
mov ecx, dword [esp + 0x64]
jmp 0x447946
lea edx, [ecx + eax]
cmp ebp, edx
jb 0x447946
mov eax, ebp
sub eax, ecx
mov dl, byte [eax]
cmp dl, byte [esp + 0x74]
jne 0x447946
cmp ecx, 1
je 0x44794b
mov dl, byte [esp + 0x75]
cmp byte [eax + 1], dl
je 0x44794b
inc ebp
cmp ebp, ebx
jb 0x4478f6
cmp byte [ebp - 1], 0xd
jne 0x447976
mov eax, dword [esp + 0x60]
cmp eax, 1
je 0x44795f
cmp eax, 2
jne 0x447976
cmp ebp, ebx
jae 0x447976
cmp byte [ebp], 0xa
jne 0x447976
inc ebp
jmp 0x447976
cmp dword [esp + 0x40], 0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x44], eax
jne 0x447a2e
cmp dword [esp + 0xc0], 0
jne 0x447a2e
mov edx, dword [esp + 0x2c]
test edx, edx
jl 0x447a2e
mov ebx, eax
sub eax, ebp
cmp eax, 0x3e8
jge 0x447a2e
xor eax, eax
test edi, edi
setge al
add eax, ebp
cmp eax, dword [esp + 0x38]
jbe 0x447a2e
cmp dword [esp + 0x3c], 0
je 0x447a13
cmp eax, ebx
jae 0x4479de
movzx ecx, byte [eax]
inc eax
cmp ecx, edx
je 0x447a25
cmp ecx, dword [esp + 0x34]
je 0x447a25
cmp eax, ebx
jb 0x4479cc
xor ebx, ebx
cmp dword [esp + 0x28], 0
je 0x4479f5
mov edx, dword [esp + 0x54]
push edx
call dword [0x491674]
add esp, 4
test ebx, ebx
je 0x447c61
cmp ebx, 0xfffffff4
je 0x447c61
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
cmp eax, ebx
jae 0x4479de
movzx ecx, byte [eax]
inc eax
cmp ecx, edx
je 0x447a25
cmp eax, ebx
jb 0x447a17
jmp 0x4479de
dec eax
cmp eax, ebx
jae 0x4479de
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0xe4]
mov ecx, dword [esp + 0xa8]
push 0
push 0
push 0
push edx
lea eax, [esp + 0x58]
push eax
push 2
push ebp
push ecx
push ebp
mov dword [esp + 0xd8], ebp
mov dword [esp + 0xe0], ebp
mov dword [esp + 0x6c], 0
call fcn.0043a299
add esp, 0x24
cmp dword [esp + 0xa0], 0
mov ebx, eax
je 0x447a89
cmp dword [esp + 0x24], 0
jne 0x447a89
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x24], edx
test ebx, ebx
jg 0x447ba4
je 0x447ab2
lea eax, [ebx + 0x3e7]
cmp eax, 3
ja 0x447ba4
jmp dword [eax*4 + 0x4470be]
cmp dword [esp + 0x14], 0
lea edi, [ebp + 1]
je 0x447ad5
mov eax, dword [esp + 0x10]
cmp edi, eax
jae 0x447ad5
mov edi, edi
mov cl, byte [edi]
and cl, 0xc0
cmp cl, 0x80
jne 0x447ad5
inc edi
cmp edi, eax
jb 0x447ac6
mov ecx, dword [esp + 0x60]
xor ebx, ebx
cmp dword [esp + 0x30], ebx
je 0x447b43
test ecx, ecx
je 0x447b13
mov eax, dword [esp + 0xb0]
cmp ebp, eax
jae 0x447b43
mov edx, dword [esp + 0x14]
push edx
lea edx, [esp + 0x68]
push edx
push eax
push ecx
push ebp
call fcn.00432c0a
add esp, 0x14
test eax, eax
jne 0x4479e0
mov ecx, dword [esp + 0x60]
jmp 0x447b43
mov edx, dword [esp + 0xb0]
mov eax, dword [esp + 0x64]
sub edx, eax
cmp ebp, edx
ja 0x447b43
mov dl, byte [esp + 0x74]
cmp byte [ebp], dl
jne 0x447b43
cmp eax, 1
je 0x4479e0
mov al, byte [esp + 0x75]
cmp byte [ebp + 1], al
je 0x4479e0
cmp dword [esp + 0xe8], 0
mov ebp, edi
jne 0x4479e0
mov eax, dword [esp + 0x10]
cmp edi, eax
ja 0x4479e0
cmp byte [edi - 1], 0xd
jne 0x4476b6
cmp edi, eax
jae 0x4476b6
cmp byte [edi], 0xa
jne 0x4476b6
test byte [esi + 0xc], 0x20
jne 0x4476b6
cmp ecx, 1
je 0x447b9c
mov eax, 2
cmp ecx, eax
je 0x447b9c
cmp dword [esp + 0x64], eax
jne 0x4476b6
lea ebp, [edi + 1]
jmp 0x4476b6
cmp ebx, 1
jne 0x4479e0
cmp dword [esp + 0x28], 0
mov esi, dword [esp + 0x15c]
je 0x447c05
cmp esi, 4
jl 0x447be3
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x158]
lea ecx, [esi*4 - 8]
push ecx
add edx, 8
push edx
add eax, 8
push eax
call fcn.00411b70
add esp, 0xc
cmp dword [esp + 0xc4], esi
jle 0x447bf7
mov dword [esp + 0x80], 1
mov ecx, dword [esp + 0x54]
push ecx
call dword [0x491674]
add esp, 4
cmp dword [esp + 0x80], 0
je 0x447c13
xor eax, eax
jmp 0x447c1f
mov eax, dword [esp + 0xc4]
cdq
sub eax, edx
sar eax, 1
cmp esi, 2
jge 0x447c31
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
mov ecx, dword [esp + 0xac]
mov esi, dword [esp + 0xb4]
mov edx, dword [esp + 0x158]
sub esi, ecx
mov dword [edx], esi
mov esi, dword [esp + 0xb8]
sub esi, ecx
mov dword [edx + 4], esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
mov eax, dword [esp + 0x24]
test eax, eax
je 0x447c9e
cmp dword [esp + 0x15c], 1
jle 0x447c8e
mov edx, dword [esp + 0x148]
mov ecx, dword [esp + 0x158]
sub eax, edx
mov dword [ecx], eax
mov eax, dword [esp + 0x10]
sub eax, edx
mov dword [ecx + 4], eax
mov eax, 0xfffffff4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x130
ret
pop edi
pop esi
pop ebp
mov eax, 0xfffffffe
pop ebx
add esp, 0x130
ret