Function at 0x4a417d
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
push eax
xor eax, 0x37a7
sub eax, 0xbeff
xor eax, 0x17195
pop eax
cmp dword [ebp - 0x1518], 0
jne 0x4a3c55
mov dword [ebp - 0x710], 0
jmp 0x4a3efc
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push eax
and eax, 0x4573
jmp 0x4a3c74
and eax, 0x4872
xor eax, 0x11525
pop eax
push edx
push esi
add esp, 4
xor edx, 0xb389
or edx, 0xb7a2
sub edx, 0x15c0f
pop edx
cmp dword [ebp - 0xc58], 0
jne 0x4a3cb1
mov dword [ebp - 0x710], 0
jmp 0x4a3efc
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push ecx
call 0x4a3ccb
add byte [0x4f434546], bh
cmp eax, 0x4c4833c
sub ecx, 0x52e4
sub ecx, 0xc18
pop ecx
push ecx
sub ecx, 0xf567
or ecx, 0x17412
add ecx, 0x80a0
pop ecx
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edi
sub edi, 0x12d9
call 0x4a3d2f
add byte [esi], bh
inc ebx
aaa
xor bh, byte ds:[ecx]
dec ecx
inc ecx
xor eax, 0x8104c483
iretd
push edi
xor edi, 0x6397
or edi, 0x4664
or edi, 0x2a79
pop edi
push edx
push eax
add esp, 4
or edx, 0xa82b
or edx, 0x78ef
sub edx, 0x5e59
add edx, 0x15f0a
pop edx
cmp dword [ebp - 0x710], 0
jne 0x4a3f78
push edx
push ebx
add esp, 4
sub edx, 0xb474
pop edx
push edi
add edi, 0x155f0
pop edi
push edx
push ecx
add esp, 4
or edx, 0x4098
or edx, 0x6c2d
and edx, 0x11533
or edx, 0x95d3
pop edx
mov dword [ebp - 0xa58], 0
jmp 0x4a4aa0
push esi
push eax
add esp, 4
xor esi, 0xecfc
add esi, 0x70bc
xor esi, 0x12182
pop esi
push esi
sub esi, 0x50f4
and esi, 0xd768
sub esi, 0x14bee
and esi, 0xdf96
pop esi
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x4a3fe9
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x4a42da
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x4a4011
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x4a42da
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x4a4043
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x4a42da
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x4a4068
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x4a42da
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x4a40c2
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x4a42ce
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x4a4132
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4a41e4
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x4a41e4
push ebx
push ebx
add esp, 4
or ebx, 0xe74d
pop ebx
push edx
push ebx
add esp, 4
call 0x4a417d
add byte [ecx], bh
dec esp
cmp eax, 0x41483b40
add esp, 4
pop edx
push eax
sub eax, 0x16bd1
pop eax
push eax
sub eax, 0xbd5a
pop eax
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x4a41d6
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x4a41dd
jmp 0x4a4123
jmp 0x4a41e4
push edx
push ebx
add esp, 4
call 0x4a41f8
add byte [esi + 0x43], al
dec esi
dec ecx
dec ebp
inc eax
xor bh, byte [ebx]
add esp, 4
jmp 0x4a4203
and edx, 0x1576f
pop edx
push ecx
push edi
add esp, 4
add ecx, 0xfb7b
pop ecx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x4a4243
mov dword [ebp - 0xc5c], 0
jmp 0x4a42b2
push edi
push edi
add esp, 4
and edi, 0x16830
pop edi
push eax
push esi
add esp, 4
and eax, 0x1070a
add eax, 0xb713
or eax, 0x6322
pop eax
push ecx
and ecx, 0x75b9
or ecx, 0x154df
pop ecx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
or ecx, 0x20
cmp edx, ecx
jge 0x4a42a8
mov dword [ebp - 0xc5c], 0xffffffff
jmp 0x4a42b2
mov dword [ebp - 0xc5c], 1
cmp dword [ebp - 0xc5c], 0
jne 0x4a42c9
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x4a42da
jmp 0x4a40b3
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x4a43b5
push eax
push edi
add esp, 4
jmp 0x4a42f1
pop eax
push esi
push ecx
add esp, 4
and esi, 0x61bb
jmp 0x4a4306
call 0x4a4315
add byte [eax + 0x4b], al
cmp byte [ebp + 0x3b], al
cmp byte [ebp + 0x3b], cl
inc ebp
add esp, 4
pop esi
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push ecx
push ebx
add esp, 4
sub ecx, 0x11ba4
add ecx, 0x3d1
sub ecx, 0xc730
pop ecx
push eax
call 0x4a434b
add byte [ebx], dh
cmp al, 0x41
aas
cmp byte ds:[ebx + eax*4], dh
les eax, [ebx + ebp*8]
push es
aaa
inc esi
xor al, 0x35
aaa
xor al, 0x58
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x4a43b5
push edx
and edx, 0x8149
xor edx, 0x1306c
jmp 0x4a4388
pop edx
push ecx
call 0x4a439a
add byte [ebx + 0x40], cl
dec eax
aaa
aaa
dec ecx
cmp al, 0x33
aaa
cmp al, 0x83
les eax, [ecx + ebx*2]
push esi
and esi, 0x251e
pop esi
mov dword [ebp - 0xa58], 0
jmp 0x4a4aa0
push eax
and eax, 0x1407d
pop eax
push ebx
push ebx
add esp, 4
or ebx, 0x8980
xor ebx, 0xecfd
and ebx, 0x771b
call 0x4a43e3
add byte [ebx], bh
xor eax, 0x3e38323d
inc ebp
inc edx
aas
add esp, 4
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push ecx
push edx
add esp, 4
xor ecx, 0x15e95
jmp 0x4a441f
and ecx, 0xd61c
xor ecx, 0x3da
pop ecx
push edx
and edx, 0x64dd
jmp 0x4a443a
sub edx, 0x409d
pop edx
cmp dword [ebp - 0x1574], 0
jne 0x4a4459
mov dword [ebp - 0x2a8], 0
jmp 0x4a4700
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push esi
push eax
add esp, 4
xor esi, 0x4920
pop esi
push eax
xor eax, 0x13316
add eax, 0x53a9
add eax, 0xc90f
call 0x4a4499
add byte [edx], bh
dec eax
inc esp
inc ebp
inc ecx
dec edx
dec ebp
inc ebx
cmp dword [ebx - 0x7ca7fb3c], eax
mov ebp, 0xfffff398
add byte [ebp + 0xf], dh
mov dword [ebp - 0x2a8], 0
jmp 0x4a4700
push ecx
push edi
add esp, 4
jmp 0x4a470b
xor ecx, 0x56be
pop ecx
push edx
push esi
add esp, 4
sub edx, 0x15bf0
pop edx
push eax
or eax, 0x2094
xor eax, 0xac8d
sub eax, 0x90a4
pop eax
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x304], edx
push ebx
jmp 0x4a4747
sub ebx, 0x14ae7
xor ebx, 0x2084
sub ebx, 0x2848
pop ebx
push eax
push edx
add esp, 4
jmp 0x4a4766
and eax, 0x82bb
or eax, 0xe636
pop eax
mov dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x1580], eax
cmp dword [ebp - 0x1580], 0
jne 0x4a47a3
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x4a4a94
mov edx, dword [ebp - 0x1580]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1584], eax
jne 0x4a47cb
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x4a4a94
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1584]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1588], edx
cmp dword [ebp - 0x1588], 0
jne 0x4a47fd
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
jmp 0x4a4a94
mov ecx, dword [ebp - 0x304]
add ecx, dword [ebp - 0x1588]
mov dword [ebp - 0x724], ecx
jne 0x4a4822
mov edx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], edx
jmp 0x4a4a94
mov eax, dword [ebp - 0x724]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1900], ecx
mov edx, dword [ebp - 0x724]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1904], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1908], edx
mov dword [ebp - 0x728], 0
jmp 0x4a487c
mov eax, dword [ebp - 0x728]
add eax, 1
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x728]
cmp edx, dword [ecx + 0x18]
jae 0x4a4a88
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1900]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x72c], edx
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1904]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1908]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x190c], ecx
mov dword [ebp - 0x18c], 0
jmp 0x4a48ec
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4a499e
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
test eax, eax
je 0x4a499e
push ebx
push edi
add esp, 4
or ebx, 0xb654
pop ebx
push edx
and edx, 0xb75c
and edx, 0xacf1
jmp 0x4a4937
pop edx
push edi
push edi
add esp, 4
xor edi, 0x2fb1
jmp 0x4a494a
pop edi
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
cmp edx, ecx
je 0x4a4990
mov edx, dword [ebp - 0x72c]
add edx, dword [ebp - 0x18c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x18c]
movsx edx, byte [ebp + ecx - 0x960]
cmp eax, edx
jne 0x4a4997
jmp 0x4a48dd
jmp 0x4a499e
push edi
xor edi, 0x12672
pop edi
push edx
push esi
add esp, 4
add edx, 0xad04
sub edx, 0xd46c
call 0x4a49c4
add byte [edi + 0x3c], al
dec edi
cmp byte [ebx + 0x38], cl
add esp, 4
pop edx
push edx
or edx, 0xae95
pop edx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
cmp ecx, eax
jne 0x4a49fd
mov dword [ebp - 0xc6c], 0
jmp 0x4a4a6c
push esi
and esi, 0x373c
xor esi, 0x15e3f
pop esi
push eax
add eax, 0x1793
jmp 0x4a4a1b
call 0x4a4a2b
add byte [ecx + 0x3f], cl
xor edi, dword [ecx]
dec eax
dec edx
aas
dec ebx
dec edi
add esp, 4
pop eax
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
or ecx, 0x20
cmp edx, ecx
jge 0x4a4a62
mov dword [ebp - 0xc6c], 0xffffffff
jmp 0x4a4a6c
mov dword [ebp - 0xc6c], 1
cmp dword [ebp - 0xc6c], 0
jne 0x4a4a83
mov edx, dword [ebp - 0x190c]
mov dword [ebp - 0x4f0], edx
jmp 0x4a4a94
jmp 0x4a486d
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0xa58], ecx
push ecx
push ecx
add esp, 4
call 0x4a4ab3
add byte [edx + 0x42], cl
dec edx
cmp dword [ebx], esi
aas
aaa
inc eax
add esp, 4
pop ecx
push ecx
xor ecx, 0x4b44
pop ecx
push ebx
push ebx
add esp, 4
sub ebx, 0x124d2
jmp 0x4a4ad1
pop ebx
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x1910], edx
lea eax, [ebp - 0xc70]
push eax
push 0x40
mov ecx, dword [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x3cc]
push edx
call dword [ebp - 0x1910]
test eax, eax
jne 0x4a4b45
push esi
xor esi, 0xdc46
or esi, 0xf352
pop esi
push eax
push edx
add esp, 4
or eax, 0x1358a
add eax, 0xf695
call 0x4a4b2d
add byte [0x4c424436], dh
dec ebx
dec eax
xor al, 0x4a
add esp, 4
pop eax
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1914], eax
push 0
call dword [ebp - 0x1914]
mov ecx, dword [ebp - 0x1918]
mov dword [ebp - 0x734], ecx
jmp 0x4a4b62
mov edx, dword [ebp - 0x734]
add edx, 1
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0xa5c]
jae 0x4a4bbe
push ebx
push ebx
add esp, 4
add ebx, 0x11892
pop ebx
push edi
push eax
add esp, 4
call 0x4a4b8f
add byte [edi + 0x34], al
xor esi, dword [ebx]
cmp eax, dword [eax + 0x4b]
cmp eax, 0x8104c483
mov dword [edx], 0xeb000157
pop es
xor eax, 0x4647484a
dec edi
dec esp
pop edi
movzx ecx, byte [ebp - 0x381]
mov edx, dword [ebp - 0x734]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x734]
mov byte [ecx], al
jmp 0x4a4b53
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x191c], edx
lea eax, [ebp - 0xc70]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
mov edx, dword [ebp - 0x158c]
push edx
mov eax, dword [ebp - 0x3cc]
push eax
call dword [ebp - 0x191c]
test eax, eax
jne 0x4a4c36
push esi
push ecx
add esp, 4
sub esi, 0x15fd8
add esi, 0x17de3
xor esi, 0x8b5d
and esi, 0x83c
pop esi
push eax
jmp 0x4a4c15
pop eax
push eax
push ecx
add esp, 4
add eax, 0x8fe8
pop eax
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x1920], ecx
push 0
call dword [ebp - 0x1920]
push ebx
add ebx, 0xfaca
sub ebx, 0x586d
pop ebx
push edx
push eax
add esp, 4
add edx, 0x2bbe
and edx, 0x12ae3
pop edx
push eax
push edi
add esp, 4
add eax, 0x12e7e
or eax, 0xa684
pop eax
push edx
mov ecx, 0x10101010
pop edx
push ecx
adc byte [edx + 0x51], bl
mov ecx, 0xffff03ff
pop ecx
push esi
push ebx
xchg bh, al
pop es
test dh, ch
jnp 0x4a4c83
add eax, dword [esi + ebp*8 + 0x303e8e3]
jecxz 0x4a4c6d
add eax, dword [ebx]
pop esi
pop ecx
pop ecx
xchg bh, al
pop es
test cl, ch
in al, dx
add al, 3
popal
pop ecx
jmp 0x4a4ca4
xchg bh, al
pop es
popal
mov ebp, 0x303036e
imul ecx, dword [eax + ebx*4 + 0x202ecbf], 0x30368bb
add ebp, dword [ecx - 0x74]
mov cl, al
in al, dx
add al, byte [edx]
mov esp, 0x3030375
imul ecx, dword [eax + edx*4 + 0x202ecc3], 0x30371bd
add ebp, dword [ecx - 0x74]
cwde
invalid