Function at 0x4a7aa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x60]
cmp eax, dword [ecx + 8]
jbe 0x4a87e5
sub esp, 0xe0
mov edx, dword [esp + 0xe8]
test edx, edx
sete bl
mov ebp, dword [esp + 0xec]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4a7f97
mov ecx, dword [esp + 0xf0]
test ecx, ecx
jg 0x4a7bc4
xor ebx, ebx
sub ebx, edx
and ebx, edx
mov eax, 0xb4ca8b09
mov esi, edx
mul ebx
xor edi, edi
sub edi, esi
mov edi, 0
sbb edi, ebp
mov eax, ecx
neg ecx
and edi, ebp
imul ebx, ebx, 0x3f79d71
add edx, ebx
imul ebx, edi, 0xb4ca8b09
add edx, ebx
shr edx, 0x1a
lea ebx, [0x896f80]
movzx edx, byte [ebx + edx]
cmp edx, ecx
jl 0x4a7bc8
cmp ecx, 0x20
sbb edx, edx
add eax, 0x20
neg eax
mov dword [esp + 0xc4], eax
cmp eax, 0x20
sbb ebx, ebx
mov dword [esp + 0xc0], ebx
lea edi, [ecx - 0x20]
xchg edi, ebx
neg ebx
xchg edi, ebx
cmp edi, 0x20
sbb ebx, ebx
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov eax, ebp
shr ebp, cl
and ebp, edx
mov dword [esp + 8], ebp
shr esi, cl
and esi, edx
mov ecx, edi
mov edx, eax
shl eax, cl
and eax, ebx
or eax, esi
mov ecx, dword [esp + 0xc4]
shr edx, cl
mov ebx, dword [esp + 0xc0]
and edx, ebx
or edx, eax
mov dword [esp + 4], edx
mov dword [esp + 0x10], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], edx
mov word [esp + 0x1c], 1
call fcn.004a87f0
add esp, 0xe0
ret
mov eax, ecx
mov esi, edx
mov edx, dword [esp + 0xf4]
mov ebx, dword [edx]
lea ecx, [ebx - 0x20]
mov edi, ecx
neg ecx
cmp ecx, 0x20
sbb eax, eax
cmp edi, 0x20
sbb edx, edx
mov esi, 1
shr esi, cl
mov ecx, edi
mov edi, 1
shl edi, cl
and edi, edx
and esi, eax
or esi, edi
cmp ebp, esi
setne al
cmp ebx, 0x20
sbb edx, edx
mov ecx, ebx
mov esi, 1
shl esi, cl
and edx, esi
mov esi, dword [esp + 0xe8]
cmp esi, edx
setne dl
or edx, eax
test dl, dl
je 0x4a7c2f
mov eax, dword [esp + 0xf4]
mov edx, dword [esp + 0xf0]
jmp 0x4a7c49
mov eax, dword [esp + 0xf4]
mov edx, dword [eax + 8]
sub edx, ecx
lea ecx, [edx + 1]
mov edx, dword [esp + 0xf0]
cmp edx, ecx
jne 0x4a7caf
shl ebp, 1
mov ecx, esi
shr esi, 0x1f
or esi, ebp
mov dword [esp + 0xc4], esi
mov ebx, ecx
shl ecx, 1
mov dword [esp + 0xc0], ecx
mov ebp, ecx
add ecx, 0xffffffff
mov edi, esi
adc esi, 0xffffffff
add ebp, 1
adc edi, 0
dec edx
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 0x98], eax
mov dword [esp + 0xd0], ecx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x9c], ecx
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xd0]
jmp 0x4a7d14
shl ebp, 2
mov edi, esi
shr edi, 0x1e
or edi, ebp
mov dword [esp + 0xc4], edi
mov ecx, esi
shl ecx, 2
mov dword [esp + 0xc0], ecx
mov ebp, ecx
add ecx, 0xffffffff
mov ebx, edi
adc edi, 0xffffffff
add ebp, 2
adc ebx, 0
add edx, 0xfffffffe
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 0x98], eax
mov esi, edi
mov edi, ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 0x9c], ebx
mov ebx, dword [esp + 0xe8]
mov eax, dword [esp + 0xc8]
test edx, edx
je 0x4a7f54
mov dword [esp + 0x70], edx
mov dword [esp + 0x50], esi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebp
mov dword [esp + 0x4c], ecx
neg edx
imul edx, edx, 0x13441
sar edx, 0x12
mov dword [esp + 0x24], edx
lea ebx, [edx + 1]
mov dword [esp + 0x30], ebx
lea edx, [0x892e00]
cmp eax, edx
jne 0x4a7df5
mov dword [esp], ecx
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004a8d00
mov eax, dword [esp + 0xc]
mov dword [esp + 0x80], eax
movzx ecx, byte [esp + 0x14]
mov byte [esp + 0x21], cl
mov edx, dword [esp + 0x98]
mov dword [esp], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x30]
mov dword [esp + 8], ebp
call fcn.004a8d00
mov eax, dword [esp + 0xc]
mov dword [esp + 0x8c], eax
movzx ecx, byte [esp + 0x14]
mov byte [esp + 0x22], cl
mov edx, dword [esp + 0x28]
mov dword [esp], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
call fcn.004a8d00
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
movzx edx, byte [esp + 0x14]
xor ebx, ebx
mov ebp, dword [esp + 0x80]
xor esi, esi
mov edi, dword [esp + 0x8c]
xor ebx, ebx
mov dword [esp + 0x7c], ebx
jmp 0x4a7eca
mov dword [esp + 4], esi
mov dword [esp], ecx
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
call fcn.004a8e10
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0x21], al
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x88], edx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x98]
mov dword [esp], ebp
mov esi, dword [esp + 0x70]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x30]
mov dword [esp + 0xc], edi
call fcn.004a8e10
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0x22], al
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x94], edx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x28]
mov dword [esp], ebp
mov esi, dword [esp + 0x70]
mov dword [esp + 8], esi
mov esi, dword [esp + 0x30]
mov dword [esp + 0xc], esi
call fcn.004a8e10
mov ecx, dword [esp + 0x18]
movzx edx, byte [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x94]
mov edi, dword [esp + 0x90]
mov dword [esp + 0x7c], ebx
mov ebx, dword [esp + 0x88]
test ecx, ecx
jge 0x4a87cc
mov dword [esp + 0x90], edi
mov edi, dword [esp + 0x30]
cmp edi, 0x37
jle 0x4a7ef2
xor edx, edx
xor edx, edx
mov byte [esp + 0x22], dl
xor edx, edx
mov byte [esp + 0x21], dl
xor edx, edx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x78], eax
mov dword [esp + 0x94], esi
mov dword [esp + 0x84], ebp
mov esi, dword [esp + 0x24]
add esi, 0x19
cmp esi, 0x18
jae 0x4a7f48
mov byte [esp + 0x20], dl
mov esi, dword [esp + 0x4c]
test esi, esi
sete dl
mov ebp, dword [esp + 0x50]
test ebp, ebp
sete bl
xchg edi, ebx
neg ebx
xchg edi, ebx
mov dword [esp + 0x54], edi
and ebx, edx
test bl, bl
jne 0x4a853b
xor edx, edx
jmp 0x4a8445
movzx esi, byte [esp + 0x22]
movzx edi, byte [esp + 0x21]
jmp 0x4a7fb3
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov dword [esp + 8], esi
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], ebp
mov word [esp + 0x1c], 1
call fcn.004a87f0
add esp, 0xe0
ret
mov eax, dword [esp + 0xe4]
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
add esp, 0xe0
ret
mov dword [esp + 0x74], ecx
mov byte [esp + 0x20], dl
xchg edi, eax
mov byte [esp + 0x21], al
xchg edi, eax
xchg esi, eax
mov byte [esp + 0x22], al
xchg esi, eax
neg ecx
mov dword [esp + 0xbc], ecx
cmp ecx, 0x20
sbb edi, edi
mov esi, dword [esp + 0x74]
add esi, 0x20
xchg esi, ebx
neg ebx
xchg esi, ebx
mov dword [esp + 0xc4], esi
cmp esi, 0x20
sbb edx, edx
mov dword [esp + 0xc0], edx
lea eax, [ecx - 0x20]
neg eax
cmp eax, 0x20
sbb ebp, ebp
mov dword [esp + 0xb8], ebp
mov ecx, eax
mov ebx, 1
shr ebx, cl
and ebx, ebp
mov ecx, esi
mov ebp, 1
shl ebp, cl
and ebp, edx
or ebp, ebx
mov ecx, dword [esp + 0xbc]
mov ebx, 1
shl ebx, cl
and ebx, edi
add ebx, 0xffffffff
mov dword [esp + 0x6c], ebx
adc ebp, 0xffffffff
mov dword [esp + 0xb4], ebp
mov ecx, esi
mov ebx, dword [esp + 0x88]
shr ebx, cl
and ebx, edx
mov ecx, eax
mov ebp, dword [esp + 0x88]
shl ebp, cl
mov edx, dword [esp + 0xb8]
and ebp, edx
mov ecx, dword [esp + 0xbc]
mov esi, dword [esp + 0x84]
shr esi, cl
and esi, edi
or esi, ebp
or ebx, esi
mov dword [esp + 0xb0], ebx
mov ebp, dword [esp + 0x88]
shr ebp, cl
and ebp, edi
mov dword [esp + 0xac], ebp
mov ecx, eax
mov ebp, dword [esp + 0x94]
shl ebp, cl
and ebp, edx
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x90]
shr ebx, cl
and ebx, edi
mov ecx, dword [esp + 0xc4]
mov esi, dword [esp + 0x94]
shr esi, cl
mov edx, dword [esp + 0xc0]
and esi, edx
or ebx, ebp
or esi, ebx
mov dword [esp + 0xc4], esi
mov ebx, ecx
mov ecx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x94]
shr ebp, cl
and ebp, edi
mov dword [esp + 0xc0], ebp
mov ebp, dword [esp + 0xb4]
mov esi, dword [esp + 0x94]
and esi, ebp
mov dword [esp + 0x68], esi
mov esi, dword [esp + 0x6c]
mov ebp, dword [esp + 0x90]
and ebp, esi
mov dword [esp + 0x64], ebp
mov ecx, ebx
mov ebp, dword [esp + 0x7c]
mov ebx, ebp
shr ebp, cl
and ebp, edx
mov ecx, eax
mov eax, ebx
shl ebx, cl
mov edx, dword [esp + 0xb8]
and ebx, edx
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0x78]
shr edx, cl
and edx, edi
or edx, ebx
or ebp, edx
mov edx, eax
shr eax, cl
and eax, edi
mov ebx, dword [esp + 0x78]
and ebx, esi
mov edi, dword [esp + 0xb4]
and edx, edi
mov ecx, esi
movzx esi, byte [esp + 0x20]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4a81a6
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xa4], eax
test edx, edx
xchg edi, ebx
seta bl
xchg edi, ebx
sete al
test ebx, ebx
xchg ebp, ebx
seta bl
xchg ebp, ebx
and eax, ebp
or eax, edi
xchg esi, eax
test al, al
xchg esi, eax
mov ebp, dword [esp + 0xa8]
mov edi, dword [esp + 0xb4]
mov esi, eax
mov eax, dword [esp + 0xa4]
jmp 0x4a81ab
mov esi, 1
je 0x4a81d6
test edx, edx
sete dl
test ebx, ebx
sete bl
and ebx, edx
test bl, bl
je 0x4a81d6
mov edx, dword [esp + 0xe8]
test edx, 1
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, 1
jmp 0x4a81dd
mov edx, dword [esp + 0xe8]
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4a81e9
add ebp, 0xffffffff
adc eax, 0xffffffff
mov dword [esp + 0x7c], eax
mov dword [esp + 0x78], ebp
movzx ebx, byte [esp + 0x22]
test bl, bl
je 0x4a82b4
mov esi, dword [esp + 0x74]
inc esi
xchg esi, ebx
neg ebx
xchg esi, ebx
lea ebp, [esi - 0x20]
mov dword [esp + 0xb8], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
cmp ebp, 0x20
sbb eax, eax
mov edx, dword [esp + 0xb8]
cmp edx, 0x20
sbb ebx, ebx
mov ecx, ebp
mov edi, 1
shr edi, cl
mov ecx, edx
mov edx, 1
shl edx, cl
and edi, eax
and edx, ebx
or edx, edi
mov eax, dword [esp + 0x68]
cmp edx, eax
sete dl
setb bl
cmp esi, 0x20
sbb ebp, ebp
mov ecx, esi
mov esi, 1
shl esi, cl
and esi, ebp
mov ebp, dword [esp + 0x64]
cmp esi, ebp
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, edx
or edi, ebx
xchg edi, eax
test al, al
xchg edi, eax
je 0x4a8286
mov ecx, dword [esp + 0xc4]
mov edx, 1
jmp 0x4a833a
cmp esi, ebp
sete cl
and ecx, edx
test cl, cl
je 0x4a82a6
mov ecx, dword [esp + 0xc4]
test ecx, 1
setne dl
jmp 0x4a833a
mov ecx, dword [esp + 0xc4]
xor edx, edx
jmp 0x4a833a
mov esi, dword [esp + 0x74]
inc esi
xchg esi, ebx
neg ebx
xchg esi, ebx
cmp esi, 0x20
sbb ebp, ebp
lea eax, [esi - 0x20]
mov dword [esp + 0xb8], eax
cmp eax, 0x20
sbb ebx, ebx
mov dword [esp + 0xa8], ebx
neg eax
cmp eax, 0x20
sbb edi, edi
mov ecx, esi
mov ebx, dword [esp + 0x68]
shr ebx, cl
test ebp, ebx
sete bl
mov byte [esp + 0x23], bl
mov ebx, dword [esp + 0x64]
mov esi, ebx
shr ebx, cl
and ebx, ebp
mov ecx, eax
mov eax, dword [esp + 0x68]
mov ebp, eax
shl eax, cl
and eax, edi
or eax, ebx
mov ecx, dword [esp + 0xb8]
mov ebx, ebp
shr ebp, cl
mov edi, dword [esp + 0xa8]
and ebp, edi
or ebp, eax
cmp ebp, 1
sete al
movzx ebp, byte [esp + 0x23]
and eax, ebp
mov ecx, dword [esp + 0xc4]
mov ebp, esi
mov edx, eax
mov eax, ebx
movzx ebx, byte [esp + 0x21]
test bl, bl
je 0x4a83a2
mov ebx, dword [esp + 0x88]
mov esi, dword [esp + 0xb4]
test esi, ebx
sete bl
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0x6c]
test edi, esi
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x4a83a2
mov ebx, dword [esp + 0xe8]
test ebx, 1
sete bl
and ebx, 1
test bl, bl
je 0x4a83a2
movzx esi, byte [esp + 0x22]
xchg esi, eax
test al, al
xchg esi, eax
mov ebx, dword [esp + 0xb0]
mov esi, dword [esp + 0xac]
jmp 0x4a83bf
mov ebx, dword [esp + 0xb0]
add ebx, 1
mov esi, dword [esp + 0xac]
adc esi, 0
movzx edi, byte [esp + 0x22]
xchg edi, eax
test al, al
xchg edi, eax
je 0x4a83d3
test eax, eax
sete al
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, eax
jmp 0x4a83d5
xor ebp, ebp
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x14], ecx
xchg ebp, eax
mov byte [esp + 0x1c], al
xchg ebp, eax
mov byte [esp + 0x1d], dl
call fcn.004a87f0
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x24]
sub ecx, edx
dec ecx
mov dword [eax + 0x10], ecx
add esp, 0xe0
ret
mov eax, ebx
mov ebx, dword [esp + 0x60]
lea edx, [ebx + 1]
mov edi, dword [esp + 0x54]
mov ebp, esi
mov esi, eax
mov eax, dword [esp + 0x78]
cmp edx, edi
jge 0x4a853b
mov dword [esp + 0x60], edx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x3c], esi
mov eax, 0xcccccccd
mul ebp
shr edx, 2
mov dword [esp + 0xc4], edx
lea ebx, [edx + edx*4]
sub ebp, ebx
mov eax, 0x33333333
mul ebp
mov dword [esp + 0xc0], edx
mov dword [esp + 0xb8], eax
mov eax, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xb0], edx
lea ebx, [edx + edx*4]
sub esi, ebx
lea ebx, [esi + ebp]
mov eax, 0xcccccccd
mov esi, edx
mul ebx
shr edx, 2
mov dword [esp + 0xac], edx
add esi, 0
mov ebx, dword [esp + 0xb8]
add ebx, esi
mov dword [esp + 0xa0], ebx
add ebx, edx
mov eax, ebx
mov ebp, 5
mul ebp
mov ebp, dword [esp + 0xb0]
add ebp, 0
mov ebp, dword [esp + 0xc4]
adc ebp, 0
mov edi, dword [esp + 0xb8]
add edi, esi
mov esi, dword [esp + 0xc0]
adc esi, ebp
mov ebp, dword [esp + 0xa0]
mov edi, dword [esp + 0xac]
add ebp, edi
adc esi, 0
mov ebp, dword [esp + 0x3c]
cmp eax, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
lea edi, [esi + esi*4]
add edx, edi
mov edi, dword [esp + 0x48]
cmp edi, edx
setne dl
or edx, ebp
test dl, dl
je 0x4a8430
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0x54]
movzx edx, byte [esp + 0x21]
jmp 0x4a8540
mov edx, 1
mov byte [esp + 0x21], dl
mov ebx, dword [esp + 0x9c]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x98]
test esi, esi
sete dl
and edx, ebp
test dl, dl
jne 0x4a8678
xor edx, edx
jmp 0x4a8581
mov eax, ebp
mov ebp, dword [esp + 0x5c]
lea edx, [ebp + 1]
mov edi, dword [esp + 0x54]
mov esi, eax
mov eax, dword [esp + 0x78]
cmp edx, edi
jge 0x4a8678
mov dword [esp + 0x5c], edx
mov dword [esp + 0x38], esi
mov dword [esp + 0x44], ebx
mov eax, 0xcccccccd
mul ebx
shr edx, 2
mov dword [esp + 0xc4], edx
lea ebp, [edx + edx*4]
sub ebx, ebp
mov eax, 0x33333333
mul ebx
mov dword [esp + 0xc0], edx
mov dword [esp + 0xb8], eax
mov eax, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xb0], edx
lea ebp, [edx + edx*4]
sub esi, ebp
add ebx, esi
mov eax, ebx
mov esi, 0xcccccccd
mov ebx, edx
mul esi
shr edx, 2
mov dword [esp + 0xac], edx
add ebx, 0
mov ebp, dword [esp + 0xb8]
add ebp, ebx
mov dword [esp + 0xa0], ebp
add ebp, edx
mov eax, ebp
mov esi, 5
mul esi
mov esi, dword [esp + 0xb0]
add esi, 0
mov esi, dword [esp + 0xc4]
adc esi, 0
mov edi, dword [esp + 0xb8]
add edi, ebx
mov ebx, dword [esp + 0xc0]
adc ebx, esi
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0xac]
add esi, edi
adc ebx, 0
mov esi, dword [esp + 0x38]
cmp eax, esi
xchg esi, ebx
setne bl
xchg esi, ebx
lea edi, [ebx + ebx*4]
add edx, edi
mov edi, dword [esp + 0x44]
cmp edi, edx
setne dl
or edx, esi
test dl, dl
je 0x4a856e
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0x54]
movzx edx, byte [esp + 0x22]
jmp 0x4a867d
mov edx, 1
mov byte [esp + 0x22], dl
mov ebx, dword [esp + 0x2c]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x28]
test esi, esi
sete dl
and ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4a86a3
xor edx, edx
jmp 0x4a86d8
mov edx, 1
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x84]
movzx esi, byte [esp + 0x22]
movzx edi, byte [esp + 0x21]
jmp 0x4a7fb3
mov eax, ebp
mov ebp, dword [esp + 0x58]
lea edx, [ebp + 1]
mov edi, dword [esp + 0x54]
mov esi, eax
mov eax, dword [esp + 0x78]
cmp edx, edi
jge 0x4a86a3
mov dword [esp + 0x58], edx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x34], esi
mov eax, 0xcccccccd
mul ebx
shr edx, 2
mov dword [esp + 0xc4], edx
lea ebp, [edx + edx*4]
sub ebx, ebp
mov eax, 0x33333333
mul ebx
mov dword [esp + 0xc0], edx
mov dword [esp + 0xb8], eax
mov eax, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xb0], edx
lea ebp, [edx + edx*4]
sub esi, ebp
add ebx, esi
mov eax, ebx
mov esi, 0xcccccccd
mov ebx, edx
mul esi
shr edx, 2
mov dword [esp + 0xac], edx
add ebx, 0
mov ebp, dword [esp + 0xb8]
add ebp, ebx
mov dword [esp + 0xa0], ebp
add ebp, edx
mov eax, ebp
mov esi, 5
mul esi
mov esi, dword [esp + 0xb0]
add esi, 0
mov esi, dword [esp + 0xc4]
adc esi, 0
mov edi, dword [esp + 0xb8]
add edi, ebx
mov ebx, dword [esp + 0xc0]
adc ebx, esi
mov esi, dword [esp + 0xa0]
mov edi, dword [esp + 0xac]
add esi, edi
adc ebx, 0
lea esi, [ebx + ebx*4]
add edx, esi
mov esi, dword [esp + 0x40]
cmp esi, edx
setne dl
mov esi, dword [esp + 0x34]
cmp eax, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x4a86c5
mov eax, dword [esp + 0x78]
movzx edx, byte [esp + 0x20]
jmp 0x4a86a8
lea eax, [0x66c280]
mov dword [esp], eax
lea eax, [0x7103f8]
mov dword [esp + 4], eax
call fcn.00435e60
nop
call fcn.004626a0
jmp fcn.004a7aa0