Function at 0x4aa0d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4aa9a9
sub esp, 0x7c
mov eax, 0
lea edi, [esp + 0x54]
call fcn.0044b776
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x80]
mov ebx, dword [edx + 0xc]
lea ebp, [ebx + ecx]
mov dword [esp + 0x38], ebp
mov esi, dword [eax]
mov edi, dword [eax + 8]
mov edx, dword [edx + 8]
cmp ebp, edi
ja 0x4aa93f
cmp ebp, edi
ja 0x4aa9a2
mov dword [esp + 0x34], edi
mov dword [esp + 0x3c], esi
lea eax, [esi + ecx]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0044be80
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x84]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x34]
mov dword [edi + 8], eax
mov eax, dword [0x7db370]
test eax, eax
jne 0x4aa931
mov ecx, dword [esp + 0x3c]
mov dword [edi], ecx
mov ecx, dword [esp + 0x80]
mov edx, dword [ecx + 0x10]
test edx, 7
je 0x4aa92a
test edx, 0x20
je 0x4aa228
lea edi, [esp + 0x68]
lea esi, [esp + 0x88]
call fcn.0044bc5e
lea edi, [esp + 0x40]
xor eax, eax
call fcn.0044b77b
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov ebx, edx
shr edx, 0x1f
shl edx, 0x1f
test edx, edx
je 0x4aa203
mov eax, ecx
shr ecx, 0x1f
shl ebx, 1
or ebx, ecx
mov ecx, ebx
shl ebx, 1
shl eax, 1
shr eax, 0x1f
or eax, ebx
mov edx, eax
add eax, 0xd7b17f80
mov dword [esp + 0x70], eax
shr ecx, 0x1f
add edx, 0xd7b17f80
adc ecx, 0xd
mov dword [esp + 0x74], ecx
mov eax, dword [esp + 0x68]
and eax, 0x3fffffff
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], 0
mov dword [esp + 0x78], 0
lea edi, [esp + 0x40]
lea esi, [esp + 0x68]
call fcn.0044bc5e
lea edi, [esp + 0x88]
lea esi, [esp + 0x40]
call fcn.0044bc5e
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 0x10]
test ecx, 1
jne 0x4aa756
mov ecx, dword [eax + 0x10]
test ecx, 6
jne 0x4aa4aa
mov eax, dword [eax + 0x10]
test eax, 0x18
je 0x4aa38d
test eax, 0x10
je 0x4aa497
mov eax, dword [esp + 0xa0]
lea ecx, [eax - 1]
mov edx, dword [esp + 0x9c]
jmp 0x4aa27a
dec ecx
test ecx, ecx
jle 0x4aa48e
cmp ecx, eax
jae 0x4aa99b
movzx ebx, byte [edx + ecx]
cmp bl, 0x2f
jne 0x4aa279
inc ecx
sub eax, ecx
mov ebx, eax
neg eax
sar eax, 0x1f
and eax, ecx
add eax, edx
mov dword [esp + 0xa0], ebx
mov ecx, dword [esp + 0x84]
mov edx, dword [ecx + 4]
mov dword [esp + 0x38], edx
lea ebp, [ebx + edx]
mov dword [esp + 0x34], ebp
mov esi, dword [ecx + 8]
mov edi, dword [ecx]
cmp ebp, esi
ja 0x4aa43f
cmp ebp, esi
ja 0x4aa994
mov dword [esp + 0x3c], edi
mov dword [esp + 0x30], esi
lea ecx, [edi + edx]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0044be80
mov eax, dword [esp + 0x34]
mov edi, dword [esp + 0x84]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x30]
mov dword [edi + 8], ecx
mov edx, dword [0x7db370]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x38]
lea ebx, [ebp + ebx + 1]
test edx, edx
jne 0x4aa429
mov edx, dword [esp + 0x3c]
mov dword [edi], edx
cmp ebx, ecx
jg 0x4aa3d9
lea ecx, [eax + 1]
mov dword [edi + 4], ecx
mov byte [edx + eax], 0x3a
mov dword [esp], edi
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xffffffff
call fcn.004a9f50
mov edi, dword [esp + 0x84]
mov eax, dword [edi + 4]
lea ecx, [eax + 2]
mov edx, dword [edi + 8]
mov ebx, dword [edi]
cmp ecx, edx
ja 0x4aa39a
cmp ecx, edx
ja 0x4aa98d
movzx ebp, word [0x61c1f4]
mov word [ebx + eax], bp
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov ecx, dword [0x7db370]
test ecx, ecx
jne 0x4aa391
mov dword [edi], ebx
add esp, 0x7c
ret
mov eax, ebx
call fcn.0044b680
jmp 0x4aa38d
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ecx
lea ebp, [0x5dfee0]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00437c50
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x84]
jmp 0x4aa368
lea ebp, [0x5dfee0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call fcn.00437c50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x7db370]
test edx, edx
jne 0x4aa422
mov dword [edi], eax
mov edx, eax
mov eax, ecx
jmp 0x4aa32d
call fcn.0044b680
jmp 0x4aa419
mov edx, eax
mov eax, dword [esp + 0x3c]
call fcn.0044b680
mov eax, edx
mov edx, dword [esp + 0x3c]
jmp 0x4aa325
mov dword [esp + 0x9c], eax
lea eax, [0x5dfee0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00437c50
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x34]
jmp 0x4aa2ca
mov ebx, eax
mov eax, edx
jmp 0x4aa2a1
mov ebx, dword [esp + 0xa0]
mov eax, dword [esp + 0x9c]
jmp 0x4aa2a1
mov edi, esp
lea esi, [esp + 0x88]
call fcn.0044bc5e
call fcn.00471010
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
call fcn.004a9f50
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
jg 0x4aa706
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x3a
mov dword [esp], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.004a9f50
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp edx, ebp
jg 0x4aa6b6
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x3a
mov dword [esp], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.004a9f50
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 0x10]
test ecx, 4
jne 0x4aa5f3
mov ecx, dword [esp + 0x84]
mov edx, dword [ecx + 4]
lea ebx, [edx + 1]
mov ebp, dword [ecx]
mov esi, dword [ecx + 8]
cmp ebx, esi
jg 0x4aa59d
lea ebx, [edx + 1]
mov dword [ecx + 4], ebx
mov byte [ebp + edx], 0x20
jmp 0x4aa24d
lea eax, [0x5dfee0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00437c50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x7db370]
test edx, edx
jne 0x4aa5ec
mov dword [edi], eax
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x80]
mov ecx, edi
jmp 0x4aa58d
call fcn.0044b680
jmp 0x4aa5dd
mov ecx, dword [esp + 0x84]
mov edx, dword [ecx + 4]
lea ebx, [edx + 1]
mov ebp, dword [ecx + 8]
mov esi, ecx
mov ecx, dword [ecx]
cmp ebx, ebp
jg 0x4aa664
lea ebx, [edx + 1]
mov dword [esi + 4], ebx
mov byte [ecx + edx], 0x2e
lea edi, [esp + 0x54]
mov eax, esi
lea esi, [esp + 0x88]
call fcn.0044bc5e
mov ecx, dword [esp + 0x54]
and ecx, 0x3fffffff
mov edx, eax
mov eax, 0x4189374c
mov ebx, edx
imul ecx
sar edx, 8
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 4], edx
mov dword [esp], ebx
mov dword [esp + 8], 6
call fcn.004a9f50
mov eax, dword [esp + 0x80]
jmp 0x4aa577
lea eax, [0x5dfee0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00437c50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x7db370]
test edx, edx
jne 0x4aa6af
mov dword [edi], eax
mov esi, edi
mov edx, ecx
mov ecx, eax
jmp 0x4aa60b
call fcn.0044b680
jmp 0x4aa6a4
lea eax, [0x5dfee0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00437c50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x7db370]
test edx, edx
jne 0x4aa6ff
mov dword [edi], eax
mov ebx, eax
mov eax, edi
jmp 0x4aa543
call fcn.0044b680
jmp 0x4aa6f6
lea eax, [0x5dfee0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00437c50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x7db370]
test edx, edx
jne 0x4aa74f
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x4aa506
call fcn.0044b680
jmp 0x4aa746
mov edi, esp
lea esi, [esp + 0x88]
call fcn.0044bc5e
call fcn.00470f00
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x84]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 4
call fcn.004a9f50
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp edx, ebp
jg 0x4aa8da
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x2f
mov dword [esp], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.004a9f50
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax + 8]
mov ebp, dword [eax]
cmp edx, ebx
jg 0x4aa88a
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ecx], 0x2f
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.004a9f50
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 4]
lea edx, [ecx + 1]
mov ebx, dword [eax]
mov ebp, dword [eax + 8]
cmp edx, ebp
jg 0x4aa83d
lea edx, [ecx + 1]
mov dword [eax + 4], edx
mov byte [ebx + ecx], 0x20
mov eax, dword [esp + 0x80]
jmp 0x4aa23e
lea eax, [0x5dfee0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00437c50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x7db370]
test edx, edx
jne 0x4aa883
mov dword [edi], eax
mov ebx, eax
mov eax, edi
jmp 0x4aa827
call fcn.0044b680
jmp 0x4aa87d
lea eax, [0x5dfee0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00437c50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x7db370]
test edx, edx
jne 0x4aa8d3
mov dword [edi], eax
mov ebp, eax
mov eax, edi
jmp 0x4aa7ee
call fcn.0044b680
jmp 0x4aa8ca
lea eax, [0x5dfee0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00437c50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [edi + 8], edx
mov edx, dword [0x7db370]
test edx, edx
jne 0x4aa923
mov dword [edi], eax
mov ebx, eax
mov eax, edi
jmp 0x4aa7b2
call fcn.0044b680
jmp 0x4aa91a
mov eax, ecx
jmp 0x4aa24d
mov eax, dword [esp + 0x3c]
call fcn.0044b680
jmp 0x4aa16e
mov dword [esp + 0x34], ebx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x30], ecx
lea eax, [0x5dfee0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00437c50
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x38]
jmp 0x4aa122
call fcn.004259a0
ud2
call fcn.004259a0
ud2
call fcn.004258a0
ud2
call fcn.004259a0
ud2
call fcn.00449f20
jmp fcn.004aa0d0