Function at 0x4a36a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x10]
cmp eax, dword [ecx + 8]
jbe 0x4a46da
sub esp, 0x90
xor eax, eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x94]
mov byte [eax + 0x7c], 0
xor ecx, ecx
mov edx, ecx
jmp 0x4a37f2
inc ecx
cmp ecx, ebx
jge 0x4a36fb
jae 0x4a46d3
movzx edi, byte [ebp + ecx]
xchg edi, eax
cmp al, 0x25
xchg edi, eax
jne 0x4a36e4
mov dword [esp + 0x38], edx
cmp ecx, esi
jg 0x4a4530
cmp ecx, ebx
jge 0x4a4527
lea esi, [eax + 0x20]
test byte [esi], al
mov dword [eax + 0x24], 0
mov dword [eax + 0x25], 0
mov dword [eax + 0x29], 0
inc ecx
jmp 0x4a372d
inc ecx
cmp ecx, ebx
jge 0x4a451b
jae 0x4a46be
movzx esi, byte [ebp + ecx]
xchg esi, eax
cmp al, 0x23
xchg esi, eax
ja 0x4a44d9
xchg esi, eax
cmp al, 0x20
xchg esi, eax
jne 0x4a3758
mov byte [eax + 0x29], 1
jmp 0x4a372c
xchg esi, eax
cmp al, 0x23
xchg esi, eax
jne 0x4a3765
mov byte [eax + 0x28], 1
jmp 0x4a372c
lea edi, [esi - 0x61]
xchg edi, eax
cmp al, 0x19
xchg edi, eax
ja 0x4a44cd
mov edi, dword [esp + 0xa4]
cmp edx, edi
jge 0x4a3817
xchg esi, eax
cmp al, 0x76
xchg esi, eax
jne 0x4a3813
movzx ebp, byte [eax + 0x28]
xchg ebp, ebx
mov byte [eax + 0x2c], bl
xchg ebp, ebx
mov byte [eax + 0x28], 0
movzx ebp, byte [eax + 0x27]
xchg ebp, ebx
mov byte [eax + 0x2b], bl
xchg ebp, ebx
mov byte [eax + 0x27], 0
cmp edx, edi
jae 0x4a46b7
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0xa0]
lea ebx, [ecx + edx*8]
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp], eax
xchg esi, eax
movzx ebx, al
xchg esi, eax
mov dword [esp + 0xc], ebx
call fcn.0049ffe0
mov eax, dword [esp + 0x38]
inc eax
mov ecx, dword [esp + 0x30]
inc ecx
mov edx, eax
mov eax, dword [esp + 0x94]
mov ebx, dword [esp + 0x9c]
cmp ecx, ebx
jge 0x4a4653
mov byte [eax + 0x7d], 1
mov ebp, dword [esp + 0x98]
mov esi, ecx
jmp 0x4a36e5
cmp edx, edi
jmp 0x4a37ad
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edi
call fcn.004a3240
mov eax, dword [esp + 0x18]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x1c]
movzx edx, byte [esp + 0x20]
mov byte [esp + 0x27], dl
mov ebx, dword [esp + 0x9c]
cmp ecx, ebx
jge 0x4a44c1
jae 0x4a46b0
mov ebp, dword [esp + 0x98]
movzx esi, byte [ebp + ecx]
xchg esi, eax
cmp al, 0x2a
xchg esi, eax
je 0x4a4384
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call fcn.0049d710
mov eax, dword [esp + 0x10]
movzx ecx, byte [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [ebx + 0x30], eax
mov byte [ebx + 0x24], cl
movzx eax, byte [esp + 0x27]
test al, al
je 0x4a38b3
test cl, cl
je 0x4a38b3
mov byte [ebx + 0x7d], 0
mov ecx, dword [esp + 0x54]
lea ebp, [edx + 1]
mov esi, dword [esp + 0x9c]
cmp ebp, esi
jge 0x4a399a
cmp edx, esi
jae 0x4a46a2
mov dword [esp + 0x54], ebp
mov edi, dword [esp + 0x98]
movzx ebp, byte [edi + edx]
xchg ebp, eax
cmp al, 0x2e
xchg ebp, eax
jne 0x4a399a
test al, al
je 0x4a38f3
mov byte [ebx + 0x7d], 0
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0x54]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x14], eax
call fcn.004a3240
mov eax, dword [esp + 0x18]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x1c]
movzx edx, byte [esp + 0x20]
mov byte [esp + 0x27], dl
mov ebx, dword [esp + 0x9c]
cmp ecx, ebx
jge 0x4a4378
jae 0x4a469b
mov ebp, dword [esp + 0x98]
movzx esi, byte [ebp + ecx]
xchg esi, eax
cmp al, 0x2a
xchg esi, eax
je 0x4a423c
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
call fcn.0049d710
mov eax, dword [esp + 0x10]
movzx ecx, byte [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [ebx + 0x34], eax
mov byte [ebx + 0x25], cl
test cl, cl
je 0x4a422c
movzx eax, byte [esp + 0x27]
mov ecx, dword [esp + 0x54]
test al, al
je 0x4a41e7
mov dword [esp + 0x54], ecx
mov eax, dword [esp + 0x9c]
cmp edx, eax
jge 0x4a3b6a
ja 0x4a4686
mov dword [esp + 0x30], edx
sub eax, edx
mov ebx, eax
neg eax
sar eax, 0x1f
and eax, edx
mov ebp, dword [esp + 0x98]
add eax, ebp
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.0044f610
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x30]
add ecx, edx
mov dword [esp + 0x30], ecx
cmp eax, 0x25
jne 0x4a3aa2
mov eax, dword [esp + 0x94]
mov edx, dword [eax + 8]
mov ebx, dword [eax + 4]
mov ebp, dword [eax]
lea esi, [ebx + 1]
cmp esi, edx
jg 0x4a3a26
lea edx, [ebx + 1]
mov dword [eax + 4], edx
mov byte [ebp + ebx], 0x25
mov edx, dword [esp + 0x54]
mov eax, edx
jmp 0x4a37e9
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x94]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a3a77
mov dword [ebx], eax
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x30]
jmp 0x4a3a10
mov dword [esp + 0x84], eax
mov dword [esp + 0x50], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x50]
mov ebx, dword [esp + 0x94]
jmp 0x4a3a66
mov edx, dword [esp + 0x94]
movzx ebx, byte [edx + 0x7d]
test bl, bl
je 0x4a3b4a
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0xa4]
cmp ebx, ebp
jge 0x4a3b2a
cmp eax, 0x76
jne 0x4a3b26
movzx esi, byte [edx + 0x28]
xchg esi, eax
mov byte [edx + 0x2c], al
xchg esi, eax
mov byte [edx + 0x28], 0
movzx esi, byte [edx + 0x27]
xchg esi, eax
mov byte [edx + 0x2b], al
xchg esi, eax
mov byte [edx + 0x27], 0
cmp ebx, ebp
jae 0x4a467f
mov ecx, dword [esp + 0xa0]
lea ebp, [ecx + ebx*8]
mov esi, dword [ebp + 4]
mov ebp, dword [ebp]
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp], edx
mov dword [esp + 0xc], eax
call fcn.0049ffe0
mov eax, dword [esp + 0x54]
lea edx, [eax + 1]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x30]
jmp 0x4a3a1f
cmp ebx, ebp
jmp 0x4a3ae5
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.004a34e0
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x54]
jmp 0x4a3a1f
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.004a3320
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x54]
jmp 0x4a3a1f
mov eax, dword [ebx + 4]
lea edx, [eax + 0xa]
mov dword [esp + 0x50], edx
mov ebp, dword [ebx + 8]
mov esi, dword [ebx]
cmp edx, ebp
ja 0x4a41a5
cmp edx, ebp
ja 0x4a468d
mov dword [esp + 0x80], esi
mov dword [esp + 0x4c], ebp
add eax, esi
mov dword [esp], eax
lea eax, [0x5f7877]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.0044c4f0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x94]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x4c]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a4186
mov eax, dword [esp + 0x80]
mov dword [ecx], eax
mov eax, dword [esp + 0x54]
movzx edx, byte [ecx + 0x7c]
test dl, dl
jne 0x4a409b
mov edx, dword [esp + 0xa4]
cmp eax, edx
jge 0x4a409b
mov dword [esp + 0x38], eax
lea ebx, [ecx + 0x20]
test byte [ebx], al
mov dword [ecx + 0x24], 0
mov dword [ecx + 0x25], 0
mov dword [ecx + 0x29], 0
mov ebx, dword [ecx + 4]
lea ebp, [ebx + 9]
mov dword [esp + 0x54], ebp
mov esi, dword [ecx]
mov edi, dword [ecx + 8]
cmp ebp, edi
ja 0x4a413d
cmp ebp, edi
ja 0x4a4678
mov dword [esp + 0x50], edi
mov dword [esp + 0x80], esi
lea eax, [esi + ebx]
mov dword [esp], eax
lea eax, [0x5f756b]
mov dword [esp + 4], eax
mov dword [esp + 8], 9
call fcn.0044c4f0
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x94]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x50]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a4111
mov eax, dword [esp + 0x80]
mov dword [ecx], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0xa4]
cmp eax, edx
ja 0x4a4671
sub edx, eax
mov dword [esp + 0x54], edx
mov ebx, dword [esp + 0xa8]
sub ebx, eax
shl eax, 3
neg ebx
sar ebx, 0x1f
and eax, ebx
mov ebx, dword [esp + 0xa0]
add eax, ebx
xor ebx, ebx
jmp 0x4a3cde
mov ebp, dword [esp + 0x7c]
lea eax, [ebp + 8]
mov ebp, dword [esp + 0x34]
lea ebx, [ebp + 1]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x54]
cmp ebx, edx
jge 0x4a4082
mov dword [esp + 0x34], ebx
mov dword [esp + 0x7c], eax
mov ebp, dword [eax + 4]
mov dword [esp + 0x64], ebp
mov esi, dword [eax]
mov dword [esp + 0x60], esi
test ebx, ebx
jle 0x4a3d72
mov edi, dword [ecx + 4]
lea edx, [edi + 2]
mov dword [esp + 0x50], edx
mov ebx, dword [ecx + 8]
mov eax, dword [ecx]
cmp edx, ebx
ja 0x4a403c
cmp edx, ebx
ja 0x4a466a
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x80], eax
lea ecx, [eax + edi]
mov dword [esp], ecx
lea ecx, [0x5f65c6]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
call fcn.0044c4f0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x94]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x4c]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a401d
mov eax, dword [esp + 0x80]
mov dword [ecx], eax
mov eax, dword [esp + 0x60]
test eax, eax
je 0x4a3f51
mov dword [esp + 0x88], eax
mov edx, dword [esp + 0x64]
mov dword [esp + 0x8c], edx
mov ebx, dword [esp + 0x88]
test ebx, ebx
je 0x4a3f48
lea ebp, [0x6ea6a0]
mov eax, dword [ebp + 0x84]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x94]
mov ebx, dword [edx + 4]
lea ebp, [ebx + ecx]
mov dword [esp + 0x50], ebp
mov esi, dword [edx]
mov edi, dword [edx + 8]
cmp ebp, edi
ja 0x4a3efa
cmp ebp, edi
ja 0x4a465c
mov dword [esp + 0x4c], edi
mov dword [esp + 0x80], esi
lea edx, [esi + ebx]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044c4f0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x94]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x4c]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a3ed4
mov eax, dword [esp + 0x80]
mov dword [ecx], eax
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
lea ebp, [ebx + 1]
cmp ebp, edx
jg 0x4a3e64
lea edx, [ebx + 1]
mov dword [ecx + 4], edx
mov byte [eax + ebx], 0x3d
mov dword [esp], ecx
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x76
call fcn.0049ffe0
jmp 0x4a3cc5
lea ecx, [0x5be360]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x94]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a3eaf
mov dword [ebx], eax
mov ebx, ecx
mov ecx, dword [esp + 0x94]
jmp 0x4a3e35
mov dword [esp + 0x78], eax
mov dword [esp + 0x48], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x94]
jmp 0x4a3ea4
mov dword [esp], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x94]
jmp 0x4a3e28
mov dword [esp + 0x5c], eax
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x28], ecx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00438700
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x50]
jmp 0x4a3dd6
xor ebx, ebx
xor ebp, ebp
jmp 0x4a3da5
mov eax, dword [ecx + 4]
lea edx, [eax + 5]
mov dword [esp + 0x50], edx
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx]
cmp edx, ebx
ja 0x4a3fdf
cmp edx, ebx
ja 0x4a4663
mov dword [esp + 0x80], ebp
mov dword [esp + 0x4c], ebx
add eax, ebp
mov dword [esp], eax
lea eax, [0x5f6b16]
mov dword [esp + 4], eax
mov dword [esp + 8], 5
call fcn.0044c4f0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x94]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x4c]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a3fc0
mov eax, dword [esp + 0x80]
mov dword [ecx], eax
jmp 0x4a3cc5
mov dword [esp], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
call fcn.0040ec50
mov ecx, dword [esp + 0x94]
jmp 0x4a3cc5
mov dword [esp + 0x4c], eax
lea ecx, [0x5be360]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00438700
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x50]
jmp 0x4a3f64
mov dword [esp], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
call fcn.0040ec50
mov ecx, dword [esp + 0x94]
jmp 0x4a3d72
mov dword [esp + 0x4c], edi
lea ecx, [0x5be360]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00438700
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
jmp 0x4a3d16
mov eax, dword [ecx + 8]
mov edx, dword [ecx]
mov ebx, dword [ecx + 4]
lea ebp, [ebx + 1]
cmp ebp, eax
jg 0x4a40a2
lea eax, [ebx + 1]
mov dword [ecx + 4], eax
mov byte [edx + ebx], 0x29
add esp, 0x90
ret
lea ecx, [0x5be360]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
call fcn.00438700
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x94]
mov dword [ebx + 8], edx
mov edx, dword [0x728500]
test edx, edx
jne 0x4a40ec
mov dword [ebx], eax
mov edx, eax
mov ebp, ecx
mov ecx, ebx
mov ebx, ebp
jmp 0x4a4091
mov dword [esp + 0x74], eax
mov dword [esp + 0x44], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x94]
jmp 0x4a40e2
mov dword [esp], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0xa4]
cmp eax, edx
mov ecx, dword [esp + 0x94]
jmp 0x4a3c99
mov dword [esp + 0x50], ebx
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.00438700
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
jmp 0x4a3c30
mov dword [esp], ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
call fcn.0040ec50
mov ecx, dword [esp + 0x94]
jmp 0x4a3bdc
mov dword [esp + 0x4c], eax
lea ecx, [0x5be360]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00438700
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x94]
jmp 0x4a3b81
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x14], edx
call fcn.004a3240
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x94]
jmp 0x4a39a2
mov dword [ebx + 0x34], 0
mov byte [ebx + 0x25], 1
jmp 0x4a3991
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004a2fc0
mov eax, dword [esp + 0x10]
movzx ecx, byte [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [ebx + 0x34], eax
mov byte [ebx + 0x25], cl
mov eax, dword [ebx + 0x34]
test eax, eax
jge 0x4a4295
mov dword [ebx + 0x34], 0
mov byte [ebx + 0x25], 0
movzx eax, byte [ebx + 0x25]
test al, al
je 0x4a42ad
mov ebp, dword [esp + 0x30]
inc ebp
xor eax, eax
mov ecx, edx
mov edx, ebp
jmp 0x4a399a
mov dword [esp + 0x4c], edx
mov eax, dword [ebx + 4]
lea ecx, [eax + 0xb]
mov dword [esp + 0x54], ecx
mov ebp, dword [ebx + 8]
mov esi, dword [ebx]
cmp ecx, ebp
ja 0x4a4336
cmp ecx, ebp
ja 0x4a4694
mov dword [esp + 0x40], ebp
mov dword [esp + 0x70], esi
add eax, esi
mov dword [esp], eax
lea eax, [0x5f7c27]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
call fcn.0044c4f0
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x94]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x40]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a431d
mov eax, dword [esp + 0x70]
mov dword [ecx], eax
mov edx, dword [esp + 0x4c]
mov ebx, ecx
jmp 0x4a429d
mov dword [esp], ecx
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
call fcn.0040ec50
mov ecx, dword [esp + 0x94]
jmp 0x4a4315
mov dword [esp + 0x40], eax
lea edx, [0x5be360]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00438700
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x94]
jmp 0x4a42c4
mov ebp, dword [esp + 0x98]
jmp 0x4a395b
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004a2fc0
mov eax, dword [esp + 0x10]
movzx ecx, byte [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [ebx + 0x30], eax
mov byte [ebx + 0x24], cl
test cl, cl
je 0x4a43f3
mov eax, dword [ebx + 0x30]
test eax, eax
jge 0x4a43e3
neg eax
mov dword [ebx + 0x30], eax
mov byte [ebx + 0x26], 1
mov byte [ebx + 0x2a], 0
mov ebp, dword [esp + 0x30]
inc ebp
xor eax, eax
mov ecx, edx
mov edx, ebp
jmp 0x4a38b7
mov dword [esp + 0x3c], edx
mov eax, dword [ebx + 4]
lea ecx, [eax + 0xc]
mov dword [esp + 0x54], ecx
mov ebp, dword [ebx + 8]
mov esi, dword [ebx]
cmp ecx, ebp
ja 0x4a447f
cmp ecx, ebp
ja 0x4a46a9
mov dword [esp + 0x40], ebp
mov dword [esp + 0x6c], esi
add eax, esi
mov dword [esp], eax
lea eax, [0x5f8049]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xc
call fcn.0044c4f0
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x94]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x40]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a4466
mov eax, dword [esp + 0x6c]
mov dword [ecx], eax
mov edx, dword [esp + 0x3c]
mov ebx, ecx
jmp 0x4a43cf
mov dword [esp], ecx
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
call fcn.0040ec50
mov ecx, dword [esp + 0x94]
jmp 0x4a445b
mov dword [esp + 0x40], eax
lea edx, [0x5be360]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00438700
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x94]
jmp 0x4a440a
mov ebp, dword [esp + 0x98]
jmp 0x4a3874
mov edi, dword [esp + 0xa4]
jmp 0x4a3817
xchg esi, eax
cmp al, 0x2b
xchg esi, eax
jne 0x4a44e9
mov byte [eax + 0x27], 1
jmp 0x4a372c
xchg esi, eax
cmp al, 0x2d
xchg esi, eax
jne 0x4a44fd
mov byte [eax + 0x26], 1
mov byte [eax + 0x2a], 0
jmp 0x4a372c
xchg esi, eax
cmp al, 0x30
xchg esi, eax
jne 0x4a3765
movzx esi, byte [eax + 0x26]
xor esi, 1
xchg esi, ebx
mov byte [eax + 0x2a], bl
xchg esi, ebx
jmp 0x4a372c
mov edi, dword [esp + 0xa4]
jmp 0x4a3817
mov ecx, eax
mov eax, edx
jmp 0x4a3be0
cmp esi, ecx
ja 0x4a46cc
cmp ecx, ebx
ja 0x4a46cc
mov dword [esp + 0x30], ecx
sub ecx, esi
mov dword [esp + 0x2c], ecx
neg ecx
sar ecx, 0x1f
and ecx, esi
add ecx, ebp
mov esi, dword [eax + 4]
mov edx, dword [esp + 0x2c]
lea ebp, [edx + esi]
mov dword [esp + 0x54], ebp
mov ebx, dword [eax + 8]
mov edi, dword [eax]
cmp ebp, ebx
ja 0x4a4609
cmp ebp, ebx
ja 0x4a46c5
mov dword [esp + 0x68], edi
mov dword [esp + 0x40], ebx
lea eax, [edi + esi]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0044c4f0
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x94]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x40]
mov dword [ecx + 8], eax
mov eax, dword [0x728500]
test eax, eax
jne 0x4a45e3
mov eax, dword [esp + 0x68]
mov dword [ecx], eax
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x9c]
cmp eax, edx
mov ecx, eax
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x98]
mov eax, dword [esp + 0x94]
jmp 0x4a3709
mov dword [esp], ecx
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.0040ec50
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x9c]
cmp eax, edx
mov ecx, dword [esp + 0x94]
jmp 0x4a45c3
mov dword [esp + 0x58], ecx
mov dword [esp + 0x40], esi
lea eax, [0x5be360]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00438700
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0x40]
jmp 0x4a456e
mov ecx, eax
mov eax, edx
jmp 0x4a3be0
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425900
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425900
ud2
call fcn.00425900
ud2
call fcn.00425960
ud2
call fcn.00425900
ud2
call fcn.00425900
ud2
call fcn.00425900
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425900
ud2
call fcn.0044a1d0
jmp fcn.004a36a0