Function at 0x4a9e00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x24]
cmp eax, dword [ecx + 8]
jbe 0x4aa7bd
sub esp, 0xa4
mov eax, dword [esp + 0xc4]
mov ecx, dword [esp + 0xd0]
sub eax, ecx
mov ebx, dword [esp + 0xb0]
test ebx, ebx
jle 0x4aa71c
mov ebp, dword [esp + 0xbc]
test ebp, ebp
jle 0x4aa70e
lea esi, [ebx - 1]
cmp esi, ebx
jae 0x4aa7b6
mov esi, dword [esp + 0xa8]
lea edi, [esi + ebx*4 - 4]
lea edx, [ebp - 1]
cmp edx, ebp
jae 0x4aa7b6
mov edx, dword [esp + 0xb4]
lea edx, [edx + ebp*4 - 4]
cmp edx, edi
sete dl
test dl, dl
je 0x4aa63f
xor edx, edx
xor ebx, ebx
mov dword [esp + 0x64], eax
lea esi, [eax + 1]
cmp esi, ebx
jg 0x4aa60e
ja 0x4aa7a1
mov dword [esp + 0x30], ebx
mov dword [esp + 0xa0], edx
mov dword [esp + 0x2c], esi
lea eax, [ecx + 1]
mov dword [esp], eax
call fcn.004a9cc0
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ecx, dword [eax]
mov dword [esp + 0x90], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x54], edx
mov ebx, dword [eax + 8]
mov ebp, dword [esp + 0xbc]
test ebp, ebp
jle 0x4aa5f2
mov esi, dword [esp + 0xc8]
test esi, esi
jle 0x4aa5dd
lea edi, [ebp - 1]
cmp edi, ebp
jae 0x4aa79a
mov edi, dword [esp + 0xb4]
lea edx, [edi + ebp*4 - 4]
lea eax, [esi - 1]
cmp eax, esi
jae 0x4aa79a
mov eax, dword [esp + 0xc0]
lea ecx, [eax + esi*4 - 4]
cmp ecx, edx
sete cl
mov dword [esp + 0x58], ebx
test cl, cl
je 0x4aa55f
xor ecx, ecx
xor edx, edx
mov ebp, dword [esp + 0xc4]
lea edi, [ebp + 1]
cmp edi, edx
jg 0x4aa535
ja 0x4aa78c
mov dword [esp + 0x28], edi
mov dword [esp + 0x34], edx
mov dword [esp + 0x9c], ecx
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], edx
call fcn.004a7340
mov eax, dword [esp + 0xd0]
lea ecx, [eax - 1]
cmp ecx, eax
jae 0x4aa785
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0xcc]
mov edx, dword [ecx + eax*4 - 4]
mov dword [esp], edx
call fcn.004a0e10
mov eax, dword [esp + 4]
mov dword [esp + 0x4c], eax
test eax, eax
ja 0x4aa4ac
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0xd4]
xor ebp, ebp
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0x34]
cmp esi, edi
ja 0x4aa77e
mov dword [esp + 0x74], ecx
mov dword [esp + 0x98], edx
mov dword [esp + 0xd4], ebx
mov dword [esp + 0x84], ebp
mov ecx, dword [esp + 0x9c]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov edx, dword [esp + 0xc0]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
mov edx, dword [esp + 0xc8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
call fcn.004af5c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0x28]
cmp ecx, edx
jae 0x4aa777
mov ebx, dword [esp + 0x9c]
mov dword [ebx + ecx*4], eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x74]
cmp eax, ecx
jae 0x4aa770
mov eax, dword [esp + 0xd0]
mov ebp, dword [esp + 0x98]
mov esi, dword [ebp + eax*4 - 4]
mov dword [esp + 0x40], esi
mov edi, dword [esp + 0x64]
jmp 0x4aa22c
mov dword [esp + 0x70], eax
mov dword [esp + 0x50], edi
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
call fcn.004af4a0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x9c]
mov edx, dword [esp + 0x50]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0xd0]
mov esi, dword [esp + 0x60]
cmp eax, esi
jbe 0x4aa386
mov eax, 1
test al, al
je 0x4aa379
mov eax, dword [esp + 0x5c]
dec eax
mov ecx, dword [esp + 0x40]
lea edi, [ecx + esi]
cmp edi, esi
jae 0x4aa06f
mov ebp, dword [esp + 0x58]
cmp edx, ebp
ja 0x4aa74d
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov ebx, dword [esp + 0x98]
mov dword [esp + 0xc], ebx
mov esi, dword [esp + 0x74]
mov dword [esp + 0x10], esi
mov edi, dword [esp + 0xd4]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], 0
call fcn.004af660
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0x54]
cmp ecx, edx
jae 0x4aa746
mov ebx, dword [esp + 0x90]
mov dword [ebx + ecx*4], eax
mov eax, dword [esp + 0x64]
lea ebp, [eax + edx]
cmp eax, ebp
ja 0x4aa73f
mov esi, dword [esp + 0x34]
cmp ebp, esi
ja 0x4aa73f
sub esi, eax
mov edi, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
shl eax, 2
sar esi, 0x1f
and esi, eax
mov eax, dword [esp + 0x9c]
add esi, eax
mov ebp, dword [esp + 0x64]
mov eax, dword [esp + 0x28]
cmp ebp, eax
ja 0x4aa73f
mov dword [esp + 0x6c], edi
mov dword [esp + 0x94], esi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
sub eax, ebp
mov dword [esp + 0x68], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x20], edx
call fcn.004af520
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x4aa2f8
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x2c]
cmp ecx, edx
jae 0x4aa731
mov ebx, dword [esp + 0xa0]
mov dword [ebx + ecx*4], eax
lea edi, [ecx - 1]
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0x40]
test edi, edi
jl 0x4aa3a9
lea ecx, [eax + edi]
cmp ecx, edx
jae 0x4aa769
mov dword [esp + 0x64], edi
mov dword [esp + 0x78], ecx
mov ecx, dword [ebx + ecx*4]
cmp ecx, esi
je 0x4aa399
lea edi, [edi + eax - 1]
cmp edi, edx
jae 0x4aa762
mov eax, dword [ebx + edi*4]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], esi
call fcn.004af4c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xd0]
lea ebx, [edx - 2]
mov ebp, dword [esp + 0x74]
cmp ebx, ebp
jae 0x4aa75b
mov dword [esp + 0x5c], eax
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x98]
mov ebx, dword [ecx + edx*4 - 8]
mov dword [esp + 0x3c], ebx
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.004af4a0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x64]
lea ebp, [ebx + edx - 2]
mov esi, dword [esp + 0x28]
cmp ebp, esi
jae 0x4aa754
mov edi, dword [esp + 0x9c]
mov ebp, dword [edi + ebp*4]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x7c]
jmp 0x4aa0c0
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x78]
cmp eax, ecx
ja 0x4aa738
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov ecx, dword [esp + 0xd0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x6c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x98]
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x74]
mov dword [esp + 0x1c], edx
mov ebx, dword [esp + 0xd4]
mov dword [esp + 0x20], ebx
call fcn.004af4e0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x9c]
mov ebx, dword [edx + ecx*4]
add eax, ebx
mov dword [edx + ecx*4], eax
mov eax, dword [esp + 0x5c]
dec eax
jmp 0x4aa1ee
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x5c]
jmp 0x4aa0e9
jne 0x4aa392
cmp ecx, ebp
seta al
jmp 0x4aa0d1
xor eax, eax
jmp 0x4aa0d1
mov ecx, esi
mov edx, eax
mov ebx, edi
mov eax, 0xffffffff
jmp 0x4aa0e9
mov eax, dword [esp + 0x84]
test eax, eax
jne 0x4aa49f
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.004a9dc0
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
call fcn.004a7380
mov eax, dword [esp + 0x14]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x94], edx
mov ebx, dword [esp + 0x9c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x28]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x34]
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x18], edi
call fcn.004af610
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
call fcn.004a7380
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x94]
mov dword [esp + 0xd8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xdc], ebx
mov ebx, dword [esp + 0x78]
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], edx
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
add esp, 0xa4
ret
mov dword [esp], eax
call fcn.004a9dc0
jmp 0x4aa3b8
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004a9cc0
mov eax, dword [esp + 4]
mov dword [esp + 0x84], eax
mov ecx, dword [eax + 4]
mov dword [esp + 0x44], ecx
mov edx, dword [eax]
mov dword [esp + 0x88], edx
mov ebx, dword [eax + 8]
mov dword [esp + 0x48], ebx
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0xcc]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0xd0]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0xd4]
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x18], esi
call fcn.004af5c0
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x84]
jmp 0x4a9fbe
lea eax, [0x5cd2a0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [ebp + 5]
mov dword [esp + 8], eax
call fcn.00434f20
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
jmp 0x4a9f4f
test ebp, ebp
jle 0x4aa5cb
mov ecx, dword [esp + 0xd4]
test ecx, ecx
jle 0x4aa5c0
lea edx, [ebp - 1]
cmp edx, ebp
jae 0x4aa793
lea edx, [edi + ebp*4 - 4]
lea ebx, [ecx - 1]
cmp ebx, ecx
jae 0x4aa793
mov ebx, dword [esp + 0xcc]
lea esi, [ebx + ecx*4 - 4]
cmp esi, edx
sete dl
test dl, dl
je 0x4aa5ac
mov ebx, dword [esp + 0x58]
mov esi, dword [esp + 0xc8]
jmp 0x4a9f33
mov ebx, dword [esp + 0x58]
mov esi, dword [esp + 0xc8]
mov ecx, edi
mov edx, ebp
jmp 0x4a9f37
mov ebx, dword [esp + 0xcc]
xor edx, edx
jmp 0x4aa598
mov ecx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xcc]
xor edx, edx
jmp 0x4aa598
mov eax, dword [esp + 0xc0]
mov edi, dword [esp + 0xb4]
xor ecx, ecx
jmp 0x4a9f27
mov eax, dword [esp + 0xc0]
mov esi, dword [esp + 0xc8]
mov edi, dword [esp + 0xb4]
xor ecx, ecx
jmp 0x4a9f27
lea ecx, [0x5cd2a0]
mov dword [esp], ecx
mov dword [esp + 4], esi
lea edx, [eax + 5]
mov dword [esp + 8], edx
call fcn.00434f20
mov esi, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0xd0]
jmp 0x4a9ea0
test ebx, ebx
jle 0x4aa700
mov edx, dword [esp + 0xc8]
test edx, edx
jle 0x4aa6fc
lea edi, [ebx - 1]
cmp edi, ebx
jae 0x4aa7af
lea edi, [esi + ebx*4 - 4]
lea ebp, [edx - 1]
cmp ebp, edx
jae 0x4aa7af
mov ebp, dword [esp + 0xc0]
lea ebp, [ebp + edx*4 - 4]
cmp ebp, edi
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4aa696
mov ebp, dword [esp + 0xbc]
jmp 0x4a9e87
test ebx, ebx
jle 0x4aa6f1
mov ebp, dword [esp + 0xd4]
test ebp, ebp
jle 0x4aa6ed
lea edi, [ebx - 1]
cmp edi, ebx
jae 0x4aa7a8
lea edi, [esi + ebx*4 - 4]
lea edx, [ebp - 1]
cmp edx, ebp
jae 0x4aa7a8
mov edx, dword [esp + 0xcc]
lea edx, [edx + ebp*4 - 4]
cmp edx, edi
sete dl
test dl, dl
je 0x4aa6df
mov ebp, dword [esp + 0xbc]
jmp 0x4a9e87
mov ebp, dword [esp + 0xbc]
mov edx, esi
jmp 0x4a9e8b
xor edx, edx
jmp 0x4aa6cf
mov ebp, dword [esp + 0xd4]
xor edx, edx
jmp 0x4aa6cf
xor ebp, ebp
jmp 0x4aa684
mov edx, dword [esp + 0xc8]
xor ebp, ebp
jmp 0x4aa684
mov esi, dword [esp + 0xa8]
xor edx, edx
jmp 0x4a9e7f
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0xa8]
xor edx, edx
jmp 0x4a9e7f
call fcn.00424360
ud2
call fcn.004243c0
ud2
call fcn.004243c0
ud2
call fcn.00424360
ud2
call fcn.004243c0
ud2
call fcn.00424360
ud2
call fcn.00424360
ud2
call fcn.00424360
ud2
call fcn.00424360
ud2
call fcn.00424360
ud2
call fcn.00424360
ud2
call fcn.004243c0
ud2
call fcn.00424360
ud2
call fcn.004243c0
ud2
call fcn.00424360
ud2
call fcn.00424360
ud2
call fcn.004243c0
ud2
call fcn.00424360
ud2
call fcn.00424360
ud2
call fcn.00424360
ud2
call fcn.00446b60
jmp fcn.004a9e00