Function at 0x4a6ec0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2c]
cmp eax, dword [ecx + 8]
jbe 0x4a871e
sub esp, 0xac
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x4a8055
mov ecx, dword [esp + 0xc4]
test ecx, ecx
je 0x4a8051
test eax, 0x200
jne 0x4a6f14
lea edx, [0x669338]
mov ebx, dword [esp + 0xb0]
jmp 0x4a6f4c
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov ebx, ecx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xc4]
test ecx, 0x200
jne 0x4a6f63
lea ebp, [0x669338]
mov esi, dword [esp + 0xbc]
jmp 0x4a6fab
mov dword [esp + 0x74], ebx
mov dword [esp + 0x34], edx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x74]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xc4]
cmp edx, ebp
jne 0x4a6fc8
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.00403790
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4a6fd7
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov eax, dword [0x620974]
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xb8]
mov dword [esp + 8], ebp
mov esi, dword [esp + 0xbc]
mov dword [esp + 0xc], esi
mov edi, dword [esp + 0xc0]
mov dword [esp + 0x10], edi
mov esi, dword [esp + 0xc4]
mov dword [esp + 0x14], esi
lea edx, [0x620974]
call eax
movzx eax, byte [esp + 0x18]
test al, al
je 0x4a7219
nop
mov eax, dword [esp + 0xb8]
mov ecx, eax
and eax, 0x1f
add eax, 0xffffffeb
nop
cmp eax, 1
ja 0x4a7082
mov eax, dword [esp + 0xb0]
cmp dword [eax], 4
jne 0x4a8705
mov edx, dword [eax + 4]
test edx, edx
je 0x4a8705
test ecx, 0x80
je 0x4a7077
mov edx, dword [esp + 0xb4]
mov ebx, dword [edx]
jmp 0x4a7092
mov edx, dword [esp + 0xb4]
mov ebx, edx
jmp 0x4a7092
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov ebx, edx
nop
mov ebp, dword [esp + 0xc4]
mov esi, ebp
and ebp, 0x1f
add ebp, 0xffffffeb
nop
cmp ebp, 1
ja 0x4a70e2
mov ebp, dword [esp + 0xbc]
cmp dword [ebp], 4
jne 0x4a86ed
mov edi, dword [ebp + 4]
test edi, edi
je 0x4a86ed
test esi, 0x80
je 0x4a70d7
mov edi, dword [esp + 0xc0]
mov ebp, dword [edi]
jmp 0x4a70eb
mov edi, dword [esp + 0xc0]
mov ebp, edi
jmp 0x4a70eb
mov edi, dword [esp + 0xc0]
mov ebp, edi
mov dword [esp + 0x78], ebx
mov dword [esp + 0x80], ebp
cmp ebp, ebx
jae 0x4a710d
test ecx, 0x200
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x78]
jmp 0x4a711e
test ecx, 0x200
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x80]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x7c], ebp
jne 0x4a713f
mov dword [esp + 0x60], eax
lea eax, [0x669338]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x60]
jmp 0x4a7168
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x30], eax
mov eax, ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebp
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], eax
lea edx, [0x5e6420]
mov dword [esp], edx
mov esi, dword [esp + 0xc8]
mov dword [esp + 4], esi
lea edi, [esp + 0x9c]
mov dword [esp + 8], edi
call fcn.0040c570
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
jne 0x4a8042
mov eax, dword [esp + 0x80]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0xa8], eax
lea eax, [0x5e6420]
mov dword [esp], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 4], eax
lea ecx, [esp + 0x9c]
mov dword [esp + 8], ecx
call fcn.0040cac0
mov eax, dword [esp + 0xc]
mov byte [eax], 1
nop
mov eax, dword [esp + 0xb8]
mov ecx, eax
and eax, 0x1f
cmp eax, 0x11
ja 0x4a75f0
cmp eax, 0xc
jbe 0x4a7363
cmp eax, 0xe
jbe 0x4a72f3
lea edx, [eax - 0xf]
cmp edx, 1
jbe 0x4a7259
cmp eax, 0x11
jne 0x4a7fa0
xor eax, eax
jmp 0x4a85d9
cmp eax, 0xf
jne 0x4a7278
mov eax, dword [esp + 0xb4]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
movss xmm1, dword [eax + 4]
cvtss2sd xmm1, xmm1
jmp 0x4a7288
mov eax, dword [esp + 0xb4]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
nop
mov eax, dword [esp + 0xc4]
and eax, 0x1f
cmp eax, 0xf
jne 0x4a72b2
mov eax, dword [esp + 0xc0]
movss xmm2, dword [eax]
cvtss2sd xmm2, xmm2
movss xmm3, dword [eax + 4]
cvtss2sd xmm3, xmm3
jmp 0x4a72cb
cmp eax, 0x10
jne 0x4a858d
mov eax, dword [esp + 0xc0]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm2
sete cl
setnp al
and ecx, eax
ucomisd xmm1, xmm3
sete dl
setnp al
and edx, eax
and ecx, edx
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 0xd
jne 0x4a7309
mov eax, dword [esp + 0xb4]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x4a7314
mov eax, dword [esp + 0xb4]
movsd xmm0, qword [eax]
nop
mov eax, dword [esp + 0xc4]
and eax, 0x1f
cmp eax, 0xd
jne 0x4a7335
mov eax, dword [esp + 0xc0]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x4a7349
cmp eax, 0xe
jne 0x4a854f
mov eax, dword [esp + 0xc0]
movsd xmm1, qword [eax]
ucomisd xmm1, xmm0
sete cl
setnp al
and ecx, eax
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 1
jne 0x4a73c4
mov eax, dword [esp + 0xb4]
movzx eax, byte [eax]
mov ecx, dword [esp + 0xc4]
mov edx, ecx
and ecx, 0x1f
cmp ecx, 1
je 0x4a73aa
mov byte [esp + 0x27], al
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004ad730
movzx eax, byte [esp + 0x27]
mov ecx, dword [esp + 0xc0]
cmp byte [ecx], al
sete al
mov byte [esp + 0xcc], al
add esp, 0xac
ret
lea edx, [eax - 2]
cmp edx, 4
ja 0x4a74db
cmp eax, 3
ja 0x4a73fb
cmp eax, 2
jne 0x4a73ea
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x4a7438
mov ecx, dword [esp + 0xb4]
movsx eax, byte [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4a7438
cmp eax, 4
jne 0x4a7411
mov ecx, dword [esp + 0xb4]
movsx eax, word [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4a7438
cmp eax, 5
jne 0x4a7426
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4a7438
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
nop
mov edx, dword [esp + 0xc4]
and edx, 0x1f
mov dword [esp + 0x5c], edx
cmp edx, 3
ja 0x4a747b
cmp edx, 2
jne 0x4a7461
mov edx, dword [esp + 0xc0]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4a74c1
cmp edx, 3
jne 0x4a8515
mov ebx, dword [esp + 0xc0]
movsx edx, byte [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4a74c1
cmp edx, 4
jne 0x4a7491
mov ebx, dword [esp + 0xc0]
movsx edx, word [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4a74c1
cmp edx, 5
jne 0x4a74a6
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4a74c1
cmp edx, 6
jne 0x4a8515
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
cmp eax, edx
sete al
cmp ecx, ebx
sete cl
and ecx, eax
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 7
jb 0x4a7fa0
cmp eax, 9
ja 0x4a751c
cmp eax, 7
jne 0x4a74fb
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x4a754c
cmp eax, 8
jne 0x4a750e
mov ecx, dword [esp + 0xb4]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x4a754c
mov ecx, dword [esp + 0xb4]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x4a754c
cmp eax, 0xa
jne 0x4a752e
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x4a754c
cmp eax, 0xb
jne 0x4a7541
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x4a754c
mov edx, dword [esp + 0xb4]
mov eax, dword [edx]
xor ecx, ecx
nop
mov edx, dword [esp + 0xc4]
and edx, 0x1f
mov dword [esp + 0x5c], edx
cmp edx, 9
ja 0x4a759c
cmp edx, 7
jne 0x4a7572
mov edx, dword [esp + 0xc0]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x4a75d6
cmp edx, 8
jne 0x4a7585
mov ebx, dword [esp + 0xc0]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x4a75d6
cmp edx, 9
jne 0x4a84db
mov ebx, dword [esp + 0xc0]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x4a75d6
cmp edx, 0xa
jne 0x4a75ae
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x4a75d6
cmp edx, 0xb
jne 0x4a75c1
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x4a75d6
cmp edx, 0xc
jne 0x4a84db
mov ebp, dword [esp + 0xc0]
mov edx, dword [ebp]
xor ebx, ebx
cmp eax, edx
sete al
cmp ecx, ebx
sete cl
and ecx, eax
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 0x15
jbe 0x4a7aa3
cmp eax, 0x17
jbe 0x4a76c9
cmp eax, 0x18
je 0x4a763d
cmp eax, 0x19
jne 0x4a7fa0
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004afc60
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
xor ecx, ecx
jmp 0x4a83eb
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov edx, dword [esp + 0xc4]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x18
jne 0x4a7668
mov edx, dword [esp + 0xc0]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x4a769e
mov dword [esp + 0x68], eax
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004b07a0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x28]
cmp edx, ecx
je 0x4a76a6
xor eax, eax
jmp 0x4a76bb
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00402990
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
cmp eax, 0x16
je 0x4a7991
mov eax, dword [esp + 0xb4]
mov edx, dword [eax]
nop
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
cmp ebx, 0x14
ja 0x4a770b
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4a7701
test ebp, 0x200
jmp 0x4a7743
cmp ebx, 0x14
je 0x4a771d
jmp 0x4a83a6
cmp ebx, 0x16
ja 0x4a7718
test ebp, 0x200
jmp 0x4a7743
cmp ebx, 0x17
jne 0x4a7734
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
jmp 0x4a7778
cmp ebx, 0x1a
jne 0x4a83a6
test ebp, 0x200
je 0x4a7750
mov esi, dword [esp + 0xc0]
xor edi, edi
jmp 0x4a7778
test ebp, 0x80
je 0x4a7763
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
jmp 0x4a776c
mov esi, dword [esp + 0xc0]
mov edi, esi
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
test edx, edx
setne dl
xor edx, 1
xchg edi, eax
cmp al, dl
xchg edi, eax
jne 0x4a7982
mov edx, dword [eax + 4]
cmp ebx, 0x17
jne 0x4a7797
mov ebx, dword [esi + 4]
jmp 0x4a77d6
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.004af190
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xc0]
cmp ebx, edx
jne 0x4a7973
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004b09d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b09d0
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xc], eax
je 0x4a7964
mov eax, dword [esp + 0xb8]
test eax, 0x200
jne 0x4a7853
lea ecx, [0x669338]
mov edx, dword [esp + 0xb0]
jmp 0x4a787d
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004b0880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [ecx + 0x28]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x4a78a3
xor eax, eax
jmp 0x4a82b5
mov eax, dword [esp + 0xb0]
cmp dword [0x7bab54], eax
jne 0x4a78c0
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x4a78e6
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 8], eax
call fcn.004ad7d0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0xbc]
cmp dword [0x7bab54], edx
jne 0x4a7903
mov edx, dword [esp + 0xc0]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x4a7939
mov dword [esp + 0x2c], eax
mov dword [esp + 0x6c], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 8], eax
call fcn.004ad7d0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x6c]
cmp eax, edx
je 0x4a7941
xor eax, eax
jmp 0x4a7956
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00402990
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b09d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b09d0
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xc], eax
jne 0x4a79fb
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 8], eax
call fcn.004ae6f0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004ae6f0
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004a6ec0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
cmp eax, 0x13
jne 0x4a7b8c
test ecx, 0x200
jne 0x4a7b7d
test ecx, 0x80
je 0x4a7acb
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
jmp 0x4a7ad2
mov eax, dword [esp + 0xb4]
test eax, eax
setne al
xor eax, 1
test al, al
je 0x4a7b7d
nop
mov eax, dword [esp + 0xc4]
mov ecx, eax
and eax, 0x1f
mov dword [esp + 0x5c], eax
cmp eax, 0x14
ja 0x4a7b12
lea edx, [eax - 0x12]
cmp edx, 1
ja 0x4a7b08
test ecx, 0x200
jmp 0x4a7b46
cmp eax, 0x14
je 0x4a7b24
jmp 0x4a8274
cmp eax, 0x16
ja 0x4a7b1f
test ecx, 0x200
jmp 0x4a7b46
cmp eax, 0x17
jne 0x4a7b37
mov eax, dword [esp + 0xc0]
mov eax, dword [eax]
test eax, eax
setne al
xor eax, 1
jmp 0x4a7b6a
cmp eax, 0x1a
jne 0x4a8274
test ecx, 0x200
jne 0x4a7b7d
test ecx, 0x80
je 0x4a7b5b
mov eax, dword [esp + 0xc0]
mov eax, dword [eax]
jmp 0x4a7b62
mov eax, dword [esp + 0xc0]
test eax, eax
setne al
xor eax, 1
test al, al
je 0x4a7b7d
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
cmp eax, 0x14
jne 0x4a7d7a
mov eax, dword [esp + 0xb4]
mov edx, dword [eax]
test edx, edx
setne dl
xor edx, 1
test dl, dl
je 0x4a7bbd
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xc4]
jmp 0x4a7c5d
nop
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
cmp ebx, 0x14
ja 0x4a7bed
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4a7be3
test ebp, 0x200
jmp 0x4a7c25
cmp ebx, 0x14
je 0x4a7bff
jmp 0x4a823a
cmp ebx, 0x16
ja 0x4a7bfa
test ebp, 0x200
jmp 0x4a7c25
cmp ebx, 0x17
jne 0x4a7c16
mov ebx, dword [esp + 0xc0]
mov esi, dword [ebx]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
jmp 0x4a7c53
cmp ebx, 0x1a
jne 0x4a823a
test ebp, 0x200
jne 0x4a7ce0
test ebp, 0x80
je 0x4a7c3e
mov ebx, dword [esp + 0xc0]
mov esi, dword [ebx]
jmp 0x4a7c47
mov ebx, dword [esp + 0xc0]
mov esi, ebx
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
je 0x4a7ce0
test byte [eax], al
nop
mov eax, ebp
and ebp, 0x1f
mov dword [esp + 0x5c], ebp
cmp ebp, 0x14
ja 0x4a7c87
lea ecx, [ebp - 0x12]
cmp ecx, 1
ja 0x4a7c7d
test eax, 0x200
jmp 0x4a7cb2
cmp ebp, 0x14
je 0x4a7c98
jmp 0x4a8200
cmp ebp, 0x16
ja 0x4a7c93
test eax, 0x200
jmp 0x4a7cb2
cmp ebp, 0x17
jne 0x4a7ca4
mov eax, dword [ebx]
test eax, eax
setne al
xor eax, 1
jmp 0x4a7ccd
cmp ebp, 0x1a
jne 0x4a8200
test eax, 0x200
je 0x4a7cb8
xor eax, eax
jmp 0x4a7ccd
test eax, 0x80
je 0x4a7cc3
mov eax, dword [ebx]
jmp 0x4a7cc5
mov eax, ebx
test eax, eax
setne al
xor eax, 1
cmp al, dl
sete al
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004ae6f0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004ae6f0
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004a6ec0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
cmp eax, 0x15
jne 0x4a7fa0
test ecx, 0x200
je 0x4a7d96
mov eax, dword [esp + 0xb4]
xor edx, edx
jmp 0x4a7dba
test ecx, 0x80
je 0x4a7da9
mov eax, dword [esp + 0xb4]
mov edx, dword [eax]
jmp 0x4a7db2
mov eax, dword [esp + 0xb4]
mov edx, eax
test edx, edx
setne dl
xor edx, 1
nop
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
cmp ebx, 0x14
ja 0x4a7dea
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4a7de0
test ebp, 0x200
jmp 0x4a7e22
cmp ebx, 0x14
je 0x4a7dfc
jmp 0x4a81c6
cmp ebx, 0x16
ja 0x4a7df7
test ebp, 0x200
jmp 0x4a7e22
cmp ebx, 0x17
jne 0x4a7e13
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
jmp 0x4a7e57
cmp ebx, 0x1a
jne 0x4a81c6
test ebp, 0x200
je 0x4a7e2f
mov esi, dword [esp + 0xc0]
xor edi, edi
jmp 0x4a7e57
test ebp, 0x80
je 0x4a7e42
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
jmp 0x4a7e4b
mov esi, dword [esp + 0xc0]
mov edi, esi
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
xchg edi, eax
cmp al, dl
xchg edi, eax
jne 0x4a7f91
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004af190
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
cmp ecx, 0x17
jne 0x4a7e91
mov ecx, dword [esp + 0xc0]
mov edx, dword [ecx + 4]
jmp 0x4a7ec9
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
call fcn.004af190
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xc0]
cmp edx, eax
jne 0x4a7f82
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.004b09d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b09d0
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xc], eax
je 0x4a7f73
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.004af5b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x4a8077
mov dword [esp + 0x58], eax
xor edx, edx
jmp 0x4a8094
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 0
call fcn.004aefa0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov byte [esp + 0xc], 0
call fcn.004aefa0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x90]
cmp dword [esp + 0x10], ecx
je 0x4a8018
xor eax, eax
jmp 0x4a8034
mov dword [esp], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004036b0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
test eax, eax
jmp 0x4a805c
mov ecx, dword [esp + 0xc4]
setne al
test ecx, ecx
setne cl
cmp cl, al
sete al
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov ebx, dword [esp + 0x8c]
add ebx, 0xc
mov ecx, ebx
mov edx, eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x54], edx
mov eax, dword [ecx + 4]
mov dword [esp + 0x98], eax
mov ebx, dword [ecx + 8]
mov dword [esp + 0x5c], ebx
mov ebp, dword [ecx]
mov dword [esp + 0x94], ebp
mov esi, dword [esp + 0xb0]
mov dword [esp], esi
mov edi, dword [esp + 0xb4]
mov dword [esp + 4], edi
mov edi, dword [esp + 0xb8]
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
call fcn.004af350
mov eax, dword [esp + 0x18]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x94]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x98]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x14], edi
call fcn.004af350
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x50]
test ebx, ebx
je 0x4a81b7
test ecx, ecx
je 0x4a81b7
mov ebp, dword [esp + 0x88]
mov dword [esp], ebp
mov ebp, dword [esp + 0x84]
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004a6ec0
movzx eax, byte [esp + 0x1c]
test al, al
je 0x4a81b7
mov eax, dword [esp + 0x54]
inc eax
mov ecx, dword [esp + 0x58]
cmp ecx, eax
jg 0x4a8086
jmp 0x4a8077
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x61233a]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x61233a]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x61233a]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x61233a]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
mov ecx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0xb4]
cmp dword [ecx + 4], eax
jle 0x4a8397
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004aedf0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x48]
mov dword [esp + 0xc], edi
call fcn.004aedf0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004a6ec0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4a82ae
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x61233a]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
mov edx, dword [esp + 0x44]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x40]
cmp ecx, eax
jge 0x4a84cc
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004ae8a0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x44]
mov dword [esp + 0xc], edi
call fcn.004ae8a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004a6ec0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4a83e0
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6119f0]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x61124a]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
mov dword [esp + 0x5c], eax
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x612314]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
mov dword [esp + 0x5c], eax
lea eax, [0x5f0f60]
mov dword [esp], eax
call fcn.0040b6c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x613303]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x5ea280]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00435ee0
mov edx, dword [esp + 0x4c]
lea eax, [edx + 1]
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x4c], eax
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004af190
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0xc], eax
jle 0x4a86de
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004aedf0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x4c]
mov dword [esp + 0xc], edi
call fcn.004aedf0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004a6ec0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4a85cb
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
lea eax, [0x5e4740]
mov dword [esp], eax
lea eax, [0x667dec]
mov dword [esp + 4], eax
call fcn.00435ee0
lea eax, [0x5e4740]
mov dword [esp], eax
lea eax, [0x667dec]
mov dword [esp + 4], eax
call fcn.00435ee0
nop
call fcn.0045fcc0
jmp fcn.004a6ec0