Function at 0x4aac60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ecx, 0x11
push edi
push esi
mov esi, eax
push ebx
sub esp, 0x4c
mov dword [esp + 0x18], edx
add edx, 0x48
mov edi, edx
mov dword [esp + 0x1c], eax
xor eax, eax
rep stosd dword es:[edi], eax
mov dword [esi + 0x68], 0
mov dword [esi + 0x50], 0
mov edx, dword [esi + 0x4c]
test edx, edx
je 0x4ab031
mov esi, dword [esp + 0x1c]
lea eax, [esi + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esi + 0x60]
mov dword [esp + 0x20], eax
shr eax, 0x1f
lea eax, [edx + eax - 1]
mov dword [esp], eax
call fcn.004ad710
test eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
je 0x4aaff0
mov eax, dword [eax + 0x5c]
mov esi, dword [esp + 0x18]
mov dword [esi + 0x70], eax
mov esi, dword [esp + 0x20]
lea eax, [esi + 4]
sub eax, dword [esi + 4]
lea edi, [eax + 9]
mov esi, eax
mov dword [esp + 0x28], eax
mov dword [esp], edi
mov dword [esp + 0x24], edi
call sub.msvcrt.dll_strlen
cmp byte [esi + 9], 0x65
lea eax, [edi + eax + 1]
je 0x4aaf30
mov esi, dword [esp + 0x28]
movzx edx, byte [eax]
movzx ecx, byte [esi + 8]
mov byte [esp + 0x2f], cl
cmp cl, 3
ja 0x4ab0e8
xor esi, esi
xor ecx, ecx
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or esi, edx
test bl, bl
js 0x4aad20
mov ebx, dword [esp + 0x18]
xor ecx, ecx
mov dword [ebx + 0x7c], esi
xor ebx, ebx
lea esi, [esi]
mov ebp, eax
movzx edx, byte [eax]
add eax, 1
mov edi, edx
and edi, 0x7f
shl edi, cl
add ecx, 7
or ebx, edi
test dl, dl
js 0x4aad48
mov edi, ebp
mov ebp, edx
mov edx, edi
cmp ecx, 0x1f
ja 0x4aad79
and ebp, 0x40
je 0x4aad79
mov edi, 0xffffffff
shl edi, cl
or ebx, edi
mov ecx, dword [esp + 0x18]
xor edi, edi
mov ebp, ebx
mov dword [ecx + 0x78], ebx
xor ecx, ecx
cmp byte [esp + 0x2f], 1
je 0x4aaf60
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or edi, edx
test bl, bl
js 0x4aad98
mov ebx, ebp
mov ecx, dword [esp + 0x18]
xor ebp, ebp
mov dword [ecx + 0x80], edi
mov edi, dword [esp + 0x24]
mov byte [ecx + 0x85], 0xff
movzx edx, byte [edi]
cmp dl, 0x7a
je 0x4ab040
test dl, dl
je 0x4ab2b0
mov edi, dword [esp + 0x24]
add edi, 1
sub edx, 0x42
cmp dl, 0x11
ja case.0x4aaded.1
movzx edx, dl
jmp dword [edx*4 + 0x4cdd40]
movzx edx, byte [eax]
mov ecx, dword [esp + 0x18]
add eax, 1
mov byte [ecx + 0x85], dl
movzx edx, byte [edi]
add edi, 1
test dl, dl
jne 0x4aade2
test ebp, ebp
jne 0x4aae28
mov ebp, eax
lea esi, [esi]
nop
test ebp, ebp
je 0x4ab0ed
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
lea edx, [ecx + eax + 4]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp], eax
mov eax, ebp
cmp ebx, 0xfffffffc
jne 0x4aae4d
cmp esi, 1
je 0x4ab11f
call fcn.004aa460
mov eax, dword [esp + 0x18]
movzx eax, byte [eax + 0x84]
cmp al, 0xff
je 0x4ab100
and eax, 7
cmp al, 2
je 0x4ab0d8
jbe 0x4ab090
cmp al, 3
je 0x4ab098
cmp al, 4
jne 0x4b439c
mov ebx, 0x18
mov eax, dword [esp + 0x20]
add ebx, eax
mov eax, dword [esp + 0x18]
cmp byte [eax + 0x86], 0
movzx edx, byte [eax + 0x85]
je 0x4ab0a8
xor esi, esi
xor ecx, ecx
mov edi, edx
nop
movzx edx, byte [ebx]
add ebx, 1
mov eax, edx
and eax, 0x7f
shl eax, cl
add ecx, 7
or esi, eax
test dl, dl
js 0x4aaeb0
mov edx, edi
cmp dl, 0xff
je 0x4aaeeb
lea eax, [esp + 0x3c]
mov edi, dword [esp + 0x1c]
movzx edx, dl
mov ecx, ebx
mov dword [esp], eax
mov eax, edi
call fcn.004a9180
mov eax, dword [esp + 0x3c]
mov dword [edi + 0x50], eax
add ebx, esi
mov esi, dword [esp + 0x20]
mov eax, dword [esi]
lea edx, [esi + eax + 4]
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x78], 0xfffffffc
jne 0x4aaf0b
cmp dword [eax + 0x7c], 1
je 0x4ab10a
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp], eax
mov eax, ebx
call fcn.004aa460
xor eax, eax
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
cmp byte [esi + 0xa], 0x68
jne 0x4aad00
mov edx, dword [eax]
mov esi, dword [esp + 0x18]
add eax, 4
mov dword [esi + 0x88], edx
mov esi, dword [esp + 0x28]
add esi, 0xb
mov dword [esp + 0x24], esi
jmp 0x4aad00
movzx edi, byte [eax]
lea eax, [edx + 2]
jmp 0x4aadb0
movzx edx, byte [eax]
mov ecx, dword [esp + 0x18]
add eax, 1
add edi, 1
mov byte [ecx + 0x84], dl
movzx edx, byte [edi - 1]
test dl, dl
jne 0x4aade2
jmp 0x4aae12
movzx edx, byte [eax]
lea ecx, [eax + 1]
lea eax, [esp + 0x3c]
add edi, 1
mov dword [esp], eax
mov eax, dword [esp + 0x1c]
call fcn.004a9180
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x74], edx
movzx edx, byte [edi - 1]
test dl, dl
jne 0x4aade2
jmp 0x4aae12
mov ecx, dword [esp + 0x18]
add edi, 1
mov byte [ecx + 0x87], 1
movzx edx, byte [edi - 1]
test dl, dl
jne 0x4aade2
jmp 0x4aae12
mov ecx, dword [eax + 0x48]
mov eax, dword [eax + 0x4c]
cmp byte [eax - 2], 0xff
movzx edx, byte [eax - 5]
je 0x4ab251
cmp dl, 0xe8
je 0x4ab278
cmp dl, 0x8b
jne 0x4ab01c
cmp byte [eax - 4], 0x4d
je 0x4ab1a3
cmp byte [eax - 1], 0x83
jne 0x4ab031
cmp byte [eax], 9
jne 0x4ab031
cmp byte [eax + 1], 0
je 0x4ab137
add esp, 0x4c
mov eax, 5
pop ebx
pop esi
pop edi
pop ebp
ret
xor ecx, ecx
mov edi, ebx
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or ebp, edx
test bl, bl
js 0x4ab048
mov ebx, edi
mov edi, dword [esp + 0x18]
add ebp, eax
mov byte [edi + 0x86], 1
mov edi, dword [esp + 0x24]
movzx edx, byte [edi + 1]
lea ecx, [edi + 1]
test dl, dl
je 0x4aae28
mov dword [esp + 0x24], ecx
jmp 0x4aaddb
test al, al
jne 0x4ab2be
mov ebx, 0x10
jmp 0x4aae8b
cmp dl, 0xff
je 0x4aaeed
lea eax, [esp + 0x3c]
mov esi, dword [esp + 0x1c]
mov ecx, ebx
mov dword [esp], eax
mov eax, esi
call fcn.004a9180
mov ebx, eax
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x50], eax
jmp 0x4aaeed
mov ebx, 0xc
jmp 0x4aae8b
cmp dl, 4
je 0x4ab129
add esp, 0x4c
mov eax, 3
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebx, 8
jmp 0x4aae8b
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov eax, ebx
call fcn.004a9d00
xor eax, eax
jmp 0x4aaf1f
call fcn.004a9d00
jmp 0x4aae52
cmp byte [eax + 1], 0
jne 0x4ab0ed
add eax, 2
jmp 0x4aad18
cmp byte [eax + 2], 0x2d
jne 0x4ab031
cmp byte [eax + 3], 0
jne 0x4ab031
cmp byte [eax + 4], 0x10
jne 0x4ab031
cmp byte [eax + 5], 0
jne 0x4ab031
mov eax, dword [esp + 0x18]
mov byte [eax + 0x5c], 1
mov dword [eax + 0x68], 4
mov dword [eax + 0x64], 4
mov byte [eax + 0x49], 1
mov dword [eax + 4], 0xfffffffc
mov dword [eax + 0x80], 8
mov byte [eax + 0x50], 1
mov dword [eax + 0x20], 0
mov byte [eax + 0x87], 1
xor eax, eax
jmp 0x4aaf1f
cmp byte [eax], 0x64
jne 0x4ab01c
cmp byte [eax + 1], 0x8b
jne 0x4ab031
mov eax, dword [ecx + 8]
mov edx, dword [eax + 0xc4]
mov esi, dword [esp + 0x18]
mov ebx, edx
mov byte [esi + 0x5c], 1
sub ebx, ecx
lea ecx, [eax + 0xb0]
mov dword [esi + 0x68], 4
sub ecx, edx
mov dword [esi + 0x64], ebx
mov dword [esi], ecx
lea ecx, [eax + 0xa4]
sub ecx, edx
mov dword [esi + 0x48], 0x1010101
mov dword [esi + 0xc], ecx
lea ecx, [eax + 0xac]
sub ecx, edx
mov dword [esi + 0x4d], 0x1010101
mov dword [esi + 4], ecx
lea ecx, [eax + 0xa8]
sub ecx, edx
mov byte [esi + 0x87], 1
mov dword [esi + 8], ecx
lea ecx, [eax + 0xa0]
mov dword [esi + 0x80], 8
sub ecx, edx
mov dword [esi + 0x18], ecx
lea ecx, [eax + 0x9c]
sub ecx, edx
mov dword [esi + 0x1c], ecx
lea ecx, [eax + 0xb4]
add eax, 0xb8
sub eax, edx
sub ecx, edx
mov dword [esi + 0x20], eax
xor eax, eax
mov dword [esi + 0x14], ecx
jmp 0x4aaf1f
cmp byte [eax - 1], 0xd0
jne 0x4ab004
cmp byte [eax], 0x83
jne 0x4ab004
cmp byte [eax + 1], 0xf8
jne 0x4ab004
mov eax, dword [ecx]
mov eax, dword [eax + 4]
jmp 0x4ab1b9
cmp byte [eax - 4], 0x68
movzx edx, byte [eax]
je 0x4ab2b7
cmp dl, 0x83
jne 0x4ab01c
cmp byte [eax + 1], 0xc4
jne 0x4ab031
cmp byte [eax + 3], 0xb8
jne 0x4ab031
mov eax, dword [ecx + 0x38]
jmp 0x4ab1b9
mov ebp, eax
jmp 0x4aae28
cmp dl, 0xc3
jne 0x4ab281
jmp 0x4ab26e
jmp 0x4b439c