Function at 0x4a9ed0
Capabilities:
Clear windows event logs
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x1c]
cmp eax, dword [ecx + 8]
jbe 0x4ab04a
sub esp, 0x9c
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp + 8], edx
call fcn.004a8250
mov eax, dword [esp + 0xc]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x38], edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x78], ebx
mov ebp, dword [esp + 0xac]
mov dword [esp], ebp
mov esi, dword [esp + 0xb0]
mov dword [esp + 4], esi
mov edi, dword [esp + 0xb4]
mov dword [esp + 8], edi
call fcn.004a8250
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x88]
cmp dword [esp + 0xc], ecx
jne 0x4aacac
mov dword [esp], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004031f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4aacac
nop
mov eax, dword [esp + 0xa8]
mov ecx, eax
and eax, 0x1f
cmp eax, 0x11
ja 0x4aa72b
cmp eax, 0xc
ja 0x4aa31a
cmp eax, 1
je 0x4aa289
lea ecx, [eax - 2]
cmp ecx, 4
ja 0x4aa123
cmp eax, 3
ja 0x4a9ff2
cmp eax, 2
jne 0x4a9fe1
mov eax, dword [esp + 0xa4]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x4aa02f
mov ecx, dword [esp + 0xa4]
movsx eax, byte [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4aa02f
cmp eax, 4
jne 0x4aa008
mov ecx, dword [esp + 0xa4]
movsx eax, word [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4aa02f
cmp eax, 5
jne 0x4aa01d
mov ecx, dword [esp + 0xa4]
mov eax, dword [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4aa02f
mov ecx, dword [esp + 0xa4]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
nop
mov edx, dword [esp + 0xb4]
and edx, 0x1f
mov dword [esp + 0x64], edx
cmp edx, 3
ja 0x4aa072
cmp edx, 2
jne 0x4aa058
mov edx, dword [esp + 0xb0]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4aa0b8
cmp edx, 3
jne 0x4ab00f
mov ebx, dword [esp + 0xb0]
movsx edx, byte [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4aa0b8
cmp edx, 4
jne 0x4aa088
mov ebx, dword [esp + 0xb0]
movsx edx, word [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4aa0b8
cmp edx, 5
jne 0x4aa09d
mov ebx, dword [esp + 0xb0]
mov edx, dword [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4aa0b8
cmp edx, 6
jne 0x4ab00f
mov ebx, dword [esp + 0xb0]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
cmp eax, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setl bl
xchg esi, ebx
cmp ecx, ebx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4aa111
cmp ecx, ebx
seta cl
cmp eax, edx
setg al
and ecx, ebp
or eax, ecx
test al, al
je 0x4aa0ff
mov dword [esp + 0xb8], 1
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0xffffffff
add esp, 0x9c
ret
cmp eax, 7
jb 0x4aacbe
cmp eax, 9
ja 0x4aa164
cmp eax, 7
jne 0x4aa143
mov eax, dword [esp + 0xa4]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x4aa194
cmp eax, 8
jne 0x4aa156
mov ecx, dword [esp + 0xa4]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x4aa194
mov ecx, dword [esp + 0xa4]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x4aa194
cmp eax, 0xa
jne 0x4aa176
mov ecx, dword [esp + 0xa4]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x4aa194
cmp eax, 0xb
jne 0x4aa189
mov ecx, dword [esp + 0xa4]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x4aa194
mov edx, dword [esp + 0xa4]
mov eax, dword [edx]
xor ecx, ecx
nop
mov edx, dword [esp + 0xb4]
and edx, 0x1f
mov dword [esp + 0x64], edx
cmp edx, 9
ja 0x4aa1e4
cmp edx, 7
jne 0x4aa1ba
mov edx, dword [esp + 0xb0]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x4aa21e
cmp edx, 8
jne 0x4aa1cd
mov ebx, dword [esp + 0xb0]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x4aa21e
cmp edx, 9
jne 0x4aafd5
mov ebx, dword [esp + 0xb0]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x4aa21e
cmp edx, 0xa
jne 0x4aa1f6
mov ebx, dword [esp + 0xb0]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x4aa21e
cmp edx, 0xb
jne 0x4aa209
mov ebx, dword [esp + 0xb0]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x4aa21e
cmp edx, 0xc
jne 0x4aafd5
mov ebp, dword [esp + 0xb0]
mov edx, dword [ebp]
xor ebx, ebx
cmp ecx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4aa277
cmp eax, edx
seta al
cmp ecx, ebx
seta cl
and eax, ebp
or ecx, eax
test cl, cl
je 0x4aa265
mov dword [esp + 0xb8], 1
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0xffffffff
add esp, 0x9c
ret
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004a5e00
movzx eax, byte [esp + 0xc]
mov byte [esp + 0x23], al
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 8], ecx
call fcn.004a5e00
movzx eax, byte [esp + 0x23]
cmp byte [esp + 0xc], al
je 0x4aa308
test al, al
je 0x4aa2f6
mov dword [esp + 0xb8], 1
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0xffffffff
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0
add esp, 0x9c
ret
cmp eax, 0xe
ja 0x4aa472
cmp eax, 0xd
je 0x4aa336
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x4aa34f
mov eax, dword [esp + 0xa4]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.00448ff0
mov ecx, dword [esp + 4]
mov eax, dword [esp + 8]
mov dword [esp + 0x60], eax
mov dword [esp + 0x5c], ecx
nop
mov edx, dword [esp + 0xb4]
and edx, 0x1f
cmp edx, 0xd
je 0x4aa37e
cmp edx, 0xe
jne 0x4aaf97
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x4aa39f
mov eax, dword [esp + 0xb0]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.00448ff0
mov ebx, dword [esp + 4]
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], ebx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.00449c20
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4aa3ce
mov eax, 0xffffffff
jmp 0x4aa464
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x54]
mov dword [esp], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.00449c20
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4aa3fa
mov eax, 1
jmp 0x4aa464
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x54]
mov dword [esp], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 0xc], edx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
call fcn.00449c80
movzx eax, byte [esp + 0x10]
test al, al
je 0x4aa42e
mov eax, 0xffffffff
jmp 0x4aa464
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
call fcn.00449c80
movzx eax, byte [esp + 0x10]
test al, al
je 0x4aa462
mov eax, 1
jmp 0x4aa464
xor eax, eax
mov dword [esp + 0xb8], eax
add esp, 0x9c
ret
lea edx, [eax - 0xf]
cmp edx, 1
ja 0x4aa71b
cmp eax, 0xf
je 0x4aa497
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov eax, dword [eax + 0xc]
jmp 0x4aa4db
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x60], eax
mov dword [esp], ecx
call fcn.00448ff0
mov eax, dword [esp + 4]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x60]
mov dword [esp], edx
call fcn.00448ff0
mov ebx, dword [esp + 4]
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x60], edx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 0x54], ebx
nop
mov ebp, dword [esp + 0xb4]
and ebp, 0x1f
cmp ebp, 0xf
je 0x4aa519
cmp ebp, 0x10
jne 0x4aaf59
mov ebp, dword [esp + 0xb0]
mov esi, dword [ebp]
mov edi, dword [ebp + 4]
mov ebx, dword [ebp + 8]
mov ebp, dword [ebp + 0xc]
jmp 0x4aa565
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x50], eax
mov dword [esp], ecx
call fcn.00448ff0
mov eax, dword [esp + 4]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0x50]
mov dword [esp], edx
call fcn.00448ff0
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 8]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x60]
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebp
mov dword [esp + 0x44], ebx
mov dword [esp + 4], edx
mov dword [esp], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
call fcn.00449c20
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4aa59c
mov eax, 0xffffffff
jmp 0x4aa632
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.00449c20
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4aa5c8
mov eax, 1
jmp 0x4aa632
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 0xc], edx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
call fcn.00449c80
movzx eax, byte [esp + 0x10]
test al, al
je 0x4aa5fc
mov eax, 0xffffffff
jmp 0x4aa632
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 8], eax
call fcn.00449c80
movzx eax, byte [esp + 0x10]
test al, al
je 0x4aa630
mov eax, 1
jmp 0x4aa632
xor eax, eax
test eax, eax
jne 0x4aa70d
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x54]
mov dword [esp], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.00449c20
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4aa669
mov eax, 0xffffffff
jmp 0x4aa6ff
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x44]
mov dword [esp], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.00449c20
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4aa695
mov eax, 1
jmp 0x4aa6ff
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x44]
mov dword [esp], ecx
mov edx, dword [esp + 0x58]
mov dword [esp + 0xc], edx
mov ebx, dword [esp + 0x54]
mov dword [esp + 8], ebx
call fcn.00449c80
movzx eax, byte [esp + 0x10]
test al, al
je 0x4aa6c9
mov eax, 0xffffffff
jmp 0x4aa6ff
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
call fcn.00449c80
movzx eax, byte [esp + 0x10]
test al, al
je 0x4aa6fd
mov eax, 1
jmp 0x4aa6ff
xor eax, eax
mov dword [esp + 0xb8], eax
add esp, 0x9c
ret
mov dword [esp + 0xb8], eax
add esp, 0x9c
ret
cmp eax, 0x11
jne 0x4aacbe
xor eax, eax
jmp 0x4aae4f
cmp eax, 0x16
ja 0x4aab16
cmp eax, 0x12
je 0x4aaa22
cmp eax, 0x14
je 0x4aa750
cmp eax, 0x16
je 0x4aab34
jmp 0x4aacbe
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0xac]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0xb0]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0xb4]
mov dword [esp + 0x14], esi
call fcn.004ab060
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x4aaa14
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp + 8], edx
call fcn.004a6d30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004a8250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4aa7f0
mov eax, dword [eax + 4]
test eax, eax
je 0x4aa861
nop
movzx edx, byte [0x657eb0]
test dl, dl
je 0x4aa829
mov dword [0x657eb4], eax
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4aa818
mov dword [0x657eb8], ecx
jmp 0x4aa829
lea edi, [0x657eb8]
mov edx, eax
mov eax, ecx
call fcn.0045f450
mov eax, edx
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], ecx
mov eax, dword [esp + 0x94]
test eax, eax
je 0x4aa859
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4aa867
or edx, 0x80
jmp 0x4aa867
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x4aa867
xor edx, edx
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], eax
mov dword [esp + 0x24], edx
mov ebx, dword [esp + 0xac]
mov dword [esp], ebx
mov ebp, dword [esp + 0xb0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xb4]
mov dword [esp + 8], esi
call fcn.004a6d30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004a8250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x4aa8c3
mov eax, dword [eax + 4]
test eax, eax
je 0x4aa934
nop
movzx edx, byte [0x657eb0]
test dl, dl
je 0x4aa8fc
mov dword [0x657eb4], eax
mov edx, dword [0x67e2d0]
test edx, edx
jne 0x4aa8eb
mov dword [0x657eb8], ecx
jmp 0x4aa8fc
lea edi, [0x657eb8]
mov edx, eax
mov eax, ecx
call fcn.0045f450
mov eax, edx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], ecx
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x4aa92c
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4aa93a
or edx, 0x80
jmp 0x4aa93a
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x4aa93a
xor edx, edx
xor eax, eax
xor ecx, ecx
mov ebx, dword [esp + 0x68]
mov dword [esp], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004a9ed0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4aa978
mov dword [esp + 0xb8], eax
add esp, 0x9c
ret
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.004a6d30
mov eax, dword [esp + 0xc]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0xac]
mov dword [esp], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 8], ebx
call fcn.004a6d30
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 8], eax
call fcn.004a9ed0
mov eax, dword [esp + 0x18]
mov dword [esp + 0xb8], eax
add esp, 0x9c
ret
mov dword [esp + 0xb8], ecx
add esp, 0x9c
ret
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0xac]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0xb0]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0xb4]
mov dword [esp + 0x14], esi
call fcn.004ab060
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test al, al
jne 0x4aab08
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.004a79d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 8], ecx
call fcn.004a79d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x34]
cmp eax, ecx
ja 0x4aaaf6
jae 0x4aaae4
mov dword [esp + 0xb8], 1
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0xffffffff
add esp, 0x9c
ret
mov dword [esp + 0xb8], ecx
add esp, 0x9c
ret
cmp eax, 0x18
je 0x4aabc3
cmp eax, 0x19
jne 0x4aab2b
xor eax, eax
jmp 0x4aad37
cmp eax, 0x1a
jne 0x4aacbe
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004a79d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 8], ecx
call fcn.004a79d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
ja 0x4aabb1
jae 0x4aab9f
mov dword [esp + 0xb8], 1
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0xffffffff
add esp, 0x9c
ret
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004a8160
mov eax, dword [esp + 0xc]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 8], edx
call fcn.004a8160
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00402250
mov eax, dword [esp + 0x10]
test eax, eax
jl 0x4aac9a
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], eax
call fcn.00402250
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x4aac88
mov dword [esp + 0xb8], 1
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0xffffffff
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0xffffffff
add esp, 0x9c
ret
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x80]
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x5609ff]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x15
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044cea0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408be0
mov eax, dword [esp + 8]
lea ecx, [0x5474c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00433350
mov edx, dword [esp + 0x2c]
lea eax, [edx + 1]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0xa0]
mov dword [esp], edx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004a7920
mov eax, dword [esp + 0x2c]
cmp dword [esp + 0xc], eax
jle 0x4aae2f
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004a6ee0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0xac]
mov dword [esp], ebx
mov ebp, dword [esp + 0xb0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xb4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x2c]
mov dword [esp + 0xc], edi
call fcn.004a6ee0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebx, dword [esp + 0x80]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004a9ed0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4aad29
mov dword [esp + 0xb8], eax
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0
add esp, 0x9c
ret
mov edx, dword [esp + 0x28]
lea eax, [edx + 1]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x28], eax
mov edx, dword [esp + 0xa0]
mov dword [esp], edx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004a7310
mov eax, dword [esp + 0x28]
cmp dword [esp + 0xc], eax
jle 0x4aaf47
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004a6fd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0xac]
mov dword [esp], ebx
mov ebp, dword [esp + 0xb0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xb4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x28]
mov dword [esp + 0xc], edi
call fcn.004a6fd0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov ebx, dword [esp + 0x80]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004a9ed0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4aae41
mov dword [esp + 0xb8], eax
add esp, 0x9c
ret
mov dword [esp + 0xb8], 0
add esp, 0x9c
ret
mov dword [esp + 0x64], ebp
lea eax, [0x54c480]
mov dword [esp], eax
call fcn.0040b170
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x560b4f]
mov dword [eax], ecx
mov ecx, dword [esp + 0x64]
mov dword [eax + 8], ecx
lea ecx, [0x548f60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00433350
mov dword [esp + 0x64], edx
lea eax, [0x54c480]
mov dword [esp], eax
call fcn.0040b170
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x560078]
mov dword [eax], ecx
mov ecx, dword [esp + 0x64]
mov dword [eax + 8], ecx
lea ecx, [0x548f60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00433350
lea eax, [0x54c480]
mov dword [esp], eax
call fcn.0040b170
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x55fa13]
mov dword [eax], ecx
mov ecx, dword [esp + 0x64]
mov dword [eax + 8], ecx
lea ecx, [0x548f60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00433350
lea eax, [0x54c480]
mov dword [esp], eax
call fcn.0040b170
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x55f519]
mov dword [eax], ecx
mov ecx, dword [esp + 0x64]
mov dword [eax + 8], ecx
lea ecx, [0x548f60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00433350
nop
call fcn.0045e080
jmp fcn.004a9ed0