Function at 0x4a9900
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x6c
mov eax, dword [0x4d88f0]
xor eax, esp
mov dword [esp + 0x68], eax
mov eax, dword [0x5077d4]
push ebp
xor ebp, ebp
push 0x4c7110
push eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x34], ebp
call fcn.004b25f0
add esp, 8
mov dword [0x5077d0], eax
cmp eax, ebp
jne 0x4a995e
mov ecx, dword [0x5077d4]
push ecx
push ebp
mov ecx, 0x5062f4
call fcn.0042cb20
lea eax, [ebp + 0x12]
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
push 2
push 0xffffffffffffffff
push 0xfffe0000
push eax
call fcn.004b26a3
add esp, 0x10
test eax, eax
jne 0x4a998a
mov edx, dword [0x5077d0]
push edx
call fcn.004b2a3e
and eax, edx
add esp, 4
cmp eax, 0xffffffff
jne 0x4a99e4
mov eax, dword [0x5077d0]
push ebp
push ebp
push ebp
push eax
call fcn.004b26a3
add esp, 0x10
test eax, eax
je 0x4a99e4
mov ecx, dword [0x5077d0]
push ecx
call fcn.004b24ae
mov edx, dword [0x5077d4]
add esp, 4
push edx
push 0x204
mov dword [0x5077d0], ebp
call fcn.00465ff0
push eax
push ebp
call fcn.00499570
add esp, 0xc
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
mov eax, dword [0x5077d0]
push edi
mov edi, 0x4cd530
call fcn.004a9810
test eax, eax
jne 0x4a9a3c
mov eax, dword [0x5077d0]
push eax
call fcn.004b24ae
add esp, 4
push 0x2ad
mov dword [0x5077d0], ebp
call fcn.00465ff0
mov ecx, dword [0x5077d4]
push eax
push ecx
call fcn.00499570
add esp, 8
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
mov edx, dword [0x5077d0]
push ebx
push esi
push edx
call fcn.004b2a3e
mov esi, eax
mov eax, dword [0x5077d0]
mov ebx, edx
add esp, 4
mov edi, 0x4cd530
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ebx
call fcn.004a9810
test eax, eax
je 0x4a9a9d
lea esp, [esp]
mov eax, dword [0x5077d0]
push eax
call fcn.004b2a3e
mov esi, eax
mov eax, dword [0x5077d0]
mov ebx, edx
add esp, 4
mov edi, 0x4cd530
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ebx
call fcn.004a9810
test eax, eax
jne 0x4a9a70
mov ecx, dword [0x5077d0]
push ebp
push ebx
push esi
push ecx
call fcn.004b26a3
add esp, 0x10
test eax, eax
je 0x4a9afa
mov edx, dword [0x5077d0]
push edx
call fcn.004b24ae
mov eax, dword [0x5077d4]
add esp, 4
push eax
push 0x204
mov dword [0x5077d0], ebp
call fcn.00465ff0
push eax
push ebp
call fcn.00499570
add esp, 0xc
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
mov ecx, dword [0x5077d0]
push ecx
push 0x12
lea edx, [esp + 0x4c]
push 1
push edx
call fcn.004b241a
movzx eax, byte [esp + 0x55]
movzx edx, byte [esp + 0x54]
shl ax, 8
movzx ecx, ax
or ecx, edx
movzx edx, byte [esp + 0x57]
shl dx, 8
movzx ebp, dx
movzx edx, byte [esp + 0x63]
shl dx, 8
inc ecx
movzx ebx, dx
movzx edx, byte [esp + 0x61]
lea eax, [ecx - 1]
mov dword [0x5077e8], eax
movzx eax, byte [esp + 0x56]
or ebp, eax
movzx eax, byte [esp + 0x62]
or ebx, eax
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x60]
shl ebx, 0x10
or ebx, eax
movzx eax, byte [esp + 0x5b]
shl ax, 8
or ebx, edx
movzx edx, byte [esp + 0x5a]
or ax, dx
movzx eax, ax
cdq
mov edi, eax
movzx eax, byte [esp + 0x5f]
shl ax, 8
movzx esi, ax
movzx eax, byte [esp + 0x5d]
mov dword [esp + 0x44], edx
movzx edx, byte [esp + 0x5e]
or esi, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x5c]
shl esi, 0x10
or esi, edx
movzx edx, byte [esp + 0x64]
or esi, eax
movzx ax, byte [esp + 0x65]
shl ax, 8
add esp, 0x10
or ax, dx
mov dword [0x5077e4], ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0
mov dword [esp + 0x30], edi
mov word [0x50633c], ax
je 0x4a9c71
movzx eax, ax
inc eax
push eax
call fcn.004af837
add esp, 4
mov dword [0x507870], eax
test eax, eax
je 0x4aa6f3
mov ecx, dword [0x5077d0]
movzx edx, word [0x50633c]
push ecx
push 1
push edx
push eax
call fcn.004b241a
add esp, 0x10
cmp eax, 1
mov eax, dword [0x507870]
je 0x4a9c60
push eax
call fcn.004af901
mov ecx, dword [0x5077d0]
push ecx
mov dword [0x507870], 0
call fcn.004b1f62
add esp, 8
neg eax
pop esi
sbb eax, eax
pop ebx
and eax, 9
pop edi
add eax, 2
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
movzx edx, word [0x50633c]
mov byte [edx + eax], 0
mov ecx, dword [0x5077e4]
or edi, dword [esp + 0x34]
jne 0x4a9ca1
mov ecx, dword [0x5077d0]
push ecx
call fcn.004b24ae
add esp, 4
mov dword [0x5077d0], edi
pop esi
pop ebx
pop edi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
cmp ecx, 1
je 0x4a9dce
cmp dword [0x507770], 0
jne 0x4aaf3b
mov edx, dword [0x506344]
push 0x4c5acc
push edx
call fcn.00455b40
test al, al
jne 0x4a9cfc
mov eax, dword [0x5077d0]
push eax
call fcn.004b24ae
add esp, 4
pop esi
pop ebx
pop edi
mov dword [0x5077d0], 0
mov eax, 0x10
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
mov ecx, dword [0x5077e4]
cmp ecx, 1
je 0x4a9dce
mov edx, dword [0x5077dc]
mov eax, dword [0x5077d4]
mov di, word [eax]
cmp di, word [edx]
jne 0x4a9d3c
test di, di
je 0x4a9d38
mov di, word [eax + 2]
cmp di, word [edx + 2]
jne 0x4a9d3c
add eax, 4
add edx, 4
test di, di
jne 0x4a9d16
xor eax, eax
jmp 0x4a9d41
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4a9dce
mov ecx, dword [0x5077d0]
push ecx
call fcn.004b24ae
add esp, 4
cmp byte [0x527c61], 0x53
mov dword [0x5077d0], 0
jne 0x4a9d9d
push 0x5fa
call fcn.00465ff0
mov edx, dword [0x5077d4]
push eax
push edx
call fcn.00499570
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 0xc
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
push 0x2c8
call fcn.00465ff0
push eax
mov eax, dword [0x5077d4]
push eax
call fcn.00499570
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 0xc
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
cmp dword [0x507768], 1
jne 0x4a9ddc
cmp ecx, 1
je 0x4a9ded
cmp dword [0x507770], 0
je 0x4aa13b
mov ebx, dword [esp + 0x24]
cmp ebx, 0xffffffff
jne 0x4a9df9
cmp dword [esp + 0x28], 0
je 0x4a9e6c
cmp esi, 0xffffffff
jne 0x4a9e02
xor eax, eax
je 0x4a9e6c
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
sub ecx, esi
mov eax, 0
sbb edx, eax
sub ecx, 0x50
push 0
sbb edx, eax
mov eax, dword [0x5077d0]
push edx
push ecx
push eax
call fcn.004b26a3
add esp, 0x10
test eax, eax
jne 0x4aa4af
mov eax, dword [0x5077d0]
mov edi, 0x4cd528
call fcn.004a9810
test eax, eax
je 0x4aa4c8
mov eax, dword [0x5077d0]
push eax
call fcn.004b2a3e
add esp, 4
mov ecx, 0xfffffffc
sub ecx, ebx
mov esi, 0xffffffff
sbb esi, dword [esp + 0x28]
jmp 0x4aa12f
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [0x5077d0]
sub eax, 0x18
push 0
sbb ecx, 0
push ecx
push eax
push edx
call fcn.004b26a3
add esp, 0x10
test eax, eax
mov eax, dword [0x5077d0]
je 0x4a9edb
push eax
call fcn.004b24ae
add esp, 4
push 0x2ad
mov dword [0x5077d0], 0
call fcn.00465ff0
mov ecx, dword [0x5077d4]
push eax
push ecx
call fcn.00499570
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
push 0x4cd520
call fcn.004a98b0
test eax, eax
je 0x4aa13b
mov edx, dword [0x5077d0]
push edx
call fcn.004b2a3e
mov esi, eax
mov eax, dword [0x5077d0]
push eax
push 1
lea ecx, [esp + 0x50]
mov edi, edx
push 0x10
sub esi, 4
mov ebx, 0
push ecx
sbb edi, ebx
call fcn.004b241a
add esp, 0x14
cmp eax, 1
je 0x4a9f61
mov edx, dword [0x5077d0]
push edx
call fcn.004b24ae
mov eax, dword [0x5077d4]
add esp, 4
push eax
push ebx
push eax
push ebx
mov ecx, 0x5062f4
mov dword [0x5077d0], ebx
call fcn.0042c930
pop esi
lea eax, [ebx + 0xb]
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
mov eax, dword [0x5077d0]
push 0x4cd530
call fcn.004a98b0
test eax, eax
jne 0x4a9fb3
mov eax, dword [0x5077d0]
push eax
call fcn.004b24ae
mov eax, dword [0x5077d4]
add esp, 4
push eax
push ebx
push eax
push ebx
mov ecx, 0x5062f4
mov dword [0x5077d0], ebx
call fcn.0042c930
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
movzx ecx, byte [esp + 0x4f]
movzx edx, byte [esp + 0x4e]
shl cx, 8
movzx eax, cx
movzx ecx, byte [esp + 0x4d]
or eax, edx
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x4c]
shl eax, 0x10
or eax, edx
movzx edx, byte [esp + 0x4b]
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x4a]
or ecx, edx
movzx edx, byte [esp + 0x49]
shl dx, 8
movzx edx, dx
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x48]
or ecx, edx
xor edx, edx
or eax, edx
movzx edx, byte [esp + 0x51]
mov dword [esp + 0x40], eax
movzx ax, byte [esp + 0x53]
shl ax, 8
xor ebx, ebx
or ebx, ecx
movzx ecx, byte [esp + 0x52]
movzx eax, ax
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x50]
shl eax, 0x10
or eax, ecx
or eax, edx
mov dword [0x5077e4], eax
cmp eax, 1
jne 0x4aaf3b
mov eax, dword [esp + 0x40]
mov ecx, dword [0x5077d0]
push 0
push eax
push ebx
push ecx
call fcn.004b26a3
add esp, 0x10
test eax, eax
jne 0x4aa09c
mov eax, dword [0x5077d0]
push 0x4cd518
call fcn.004a98b0
test eax, eax
jne 0x4aa13b
mov ecx, dword [0x5077d0]
push eax
sub esi, 0x50
sbb edi, eax
push edi
push esi
push ecx
call fcn.004b26a3
add esp, 0x10
test eax, eax
je 0x4aa0e6
mov edx, dword [0x5077d0]
push edx
call fcn.004b24ae
add esp, 4
push 0x2ad
mov dword [0x5077d0], 0
call fcn.00465ff0
push eax
mov eax, dword [0x5077d4]
push eax
call fcn.00499570
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
mov esi, dword [0x5077d0]
call fcn.004a9750
test eax, eax
je 0x4aa4c8
mov ecx, 0x4cd518
mov edx, 0x5496c4
call fcn.004a9880
test eax, eax
je 0x4aa4c8
mov ecx, dword [0x5077d0]
push ecx
call fcn.004b2a3e
add esp, 4
mov ecx, 0xfffffffc
sub ecx, ebx
mov esi, 0xffffffff
sbb esi, dword [esp + 0x40]
add eax, ecx
adc edx, esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub eax, 0x18
push 0
sbb ecx, 0
push ecx
push eax
mov eax, dword [0x5077d0]
push eax
call fcn.004b26a3
add esp, 0x10
test eax, eax
jne 0x4aa4af
mov eax, dword [0x5077d0]
push 0x4cd520
call fcn.004a98b0
test eax, eax
je 0x4aa668
mov eax, dword [0x5077d0]
push eax
call fcn.004b2a3e
mov ecx, dword [0x5077d0]
sub eax, 4
push ecx
mov esi, 0
sbb edx, esi
push 1
mov dword [esp + 0x24], edx
lea edx, [esp + 0x50]
push 0x10
push edx
mov dword [esp + 0x28], eax
call fcn.004b241a
add esp, 0x14
cmp eax, 1
mov eax, dword [0x5077d0]
je 0x4aa1f1
push eax
call fcn.004b24ae
mov eax, dword [0x5077d4]
add esp, 4
push eax
push esi
push eax
push esi
mov ecx, 0x5062f4
mov dword [0x5077d0], esi
call fcn.0042c930
lea eax, [esi + 0xb]
pop esi
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
push 0x4cd530
call fcn.004a98b0
test eax, eax
jne 0x4aa23f
mov ecx, dword [0x5077d0]
push ecx
call fcn.004b24ae
mov eax, dword [0x5077d4]
add esp, 4
push eax
push esi
push eax
push esi
mov ecx, 0x5062f4
mov dword [0x5077d0], esi
call fcn.0042c930
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
movzx edx, byte [esp + 0x47]
movzx ecx, byte [esp + 0x45]
movzx eax, byte [esp + 0x46]
shl dx, 8
shl cx, 8
movzx esi, dx
or esi, eax
movzx eax, byte [esp + 0x44]
movzx edx, cx
movzx ecx, byte [esp + 0x4f]
shl esi, 0x10
or esi, edx
movzx edx, byte [esp + 0x4e]
or esi, eax
movzx eax, byte [esp + 0x4d]
shl ax, 8
shl cx, 8
movzx ebx, cx
movzx ecx, ax
movzx eax, byte [esp + 0x4b]
or ebx, edx
movzx edx, byte [esp + 0x4c]
mov edi, dword [esp + 0x1c]
shl ax, 8
shl ebx, 0x10
or ebx, ecx
movzx ecx, ax
movzx eax, byte [esp + 0x49]
or ebx, edx
movzx edx, byte [esp + 0x4a]
shl ax, 8
or ecx, edx
movzx edx, ax
movzx eax, byte [esp + 0x48]
shl ecx, 0x10
or ecx, edx
or ecx, eax
movzx eax, byte [esp + 0x53]
xor edx, edx
xor ebp, ebp
or ebx, edx
movzx edx, byte [esp + 0x51]
or ebp, ecx
movzx ecx, byte [esp + 0x52]
add ebp, edi
adc ebx, dword [esp + 0x20]
shl ax, 8
movzx eax, ax
or eax, ecx
shl dx, 8
shl eax, 0x10
movzx ecx, dx
movzx edx, byte [esp + 0x50]
or eax, ecx
or eax, edx
mov dword [0x5077e4], eax
dec eax
mov dword [0x5077e8], eax
cmp esi, eax
je 0x4aa39a
mov eax, dword [0x5077d0]
push eax
call fcn.004b24ae
mov ecx, dword [0x5077d4]
add esp, 4
push esi
push ecx
mov dword [0x5077d0], 0
call fcn.004379b0
mov edi, eax
push 0x4c7110
push edi
call fcn.004b25f0
add esp, 8
mov dword [0x5077d0], eax
test eax, eax
jne 0x4aa38d
mov edi, edi
push esi
call fcn.00438320
test eax, eax
jne 0x4aaf63
push edi
call fcn.004af901
mov edx, dword [0x5077d4]
add esp, 4
push esi
push edx
call fcn.004379b0
mov edi, eax
push 0x4c7110
push edi
call fcn.004b25f0
add esp, 8
mov dword [0x5077d0], eax
test eax, eax
je 0x4aa350
push edi
call fcn.004af901
mov edi, dword [esp + 0x20]
add esp, 4
mov eax, dword [0x5077d0]
push 0
push ebx
push ebp
push eax
mov dword [0x5077e8], esi
call fcn.004b26a3
add esp, 0x10
test eax, eax
jne 0x4aa4af
mov eax, dword [0x5077d0]
push 0x4cd518
call fcn.004a98b0
test eax, eax
jne 0x4aa448
mov ecx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x18]
sub eax, 0x50
sbb ecx, 0
push ecx
push eax
mov eax, dword [0x5077d0]
push eax
call fcn.004b26a3
add esp, 0x10
test eax, eax
jne 0x4aa4af
mov esi, dword [0x5077d0]
call fcn.004a9750
test eax, eax
je 0x4aa4af
mov ecx, 0x4cd518
mov edx, 0x5496c4
call fcn.004a9880
test eax, eax
je 0x4aa4af
mov eax, dword [0x5077d0]
push eax
call fcn.004b2a3e
add esp, 4
mov edi, eax
mov ecx, 0xfffffffc
sub ecx, ebp
mov eax, 0xffffffff
sbb eax, ebx
add edi, ecx
adc edx, eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edx
mov eax, dword [0x5077d0]
push eax
push 0x34
lea ecx, [esp + 0x4c]
push 1
push ecx
call fcn.004b241a
add esp, 0x10
cmp eax, 0x34
jae 0x4aa4fa
push 0x2ad
call fcn.00465ff0
mov edx, dword [0x5077d4]
push eax
push edx
call fcn.00499570
mov eax, dword [0x5077d0]
push eax
call fcn.004b24ae
add esp, 0xc
pop esi
pop ebx
pop edi
mov dword [0x5077d0], 0
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
mov ecx, dword [0x5077d0]
push ecx
call fcn.004b24ae
add esp, 4
mov dword [0x5077d0], 0
push 0x2ad
call fcn.00465ff0
mov edx, dword [0x5077d4]
push eax
push edx
call fcn.00499570
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
movzx ecx, byte [esp + 0x57]
movzx eax, byte [esp + 0x55]
movzx edx, byte [esp + 0x56]
shl cx, 8
shl ax, 8
movzx ebp, cx
or ebp, edx
movzx edx, byte [esp + 0x54]
movzx ecx, ax
movzx eax, byte [esp + 0x67]
shl ax, 8
movzx esi, byte [esp + 0x62]
shl ebp, 0x10
or ebp, ecx
or ebp, edx
movzx edx, byte [esp + 0x66]
movzx ecx, ax
movzx eax, byte [esp + 0x65]
or ecx, edx
shl ax, 8
movzx edx, ax
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x63]
movzx eax, byte [esp + 0x64]
shl dx, 8
movzx edx, dx
or edx, esi
movzx esi, byte [esp + 0x61]
or ecx, eax
shl si, 8
shl edx, 0x10
movzx esi, si
or edx, esi
movzx esi, byte [esp + 0x60]
or edx, esi
xor eax, eax
or eax, edx
movzx edx, byte [esp + 0x76]
mov dword [esp + 0x30], eax
movzx eax, byte [esp + 0x77]
xor esi, esi
or ecx, esi
movzx esi, byte [esp + 0x72]
shl ax, 8
mov dword [esp + 0x34], ecx
movzx ecx, ax
movzx eax, byte [esp + 0x75]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x74]
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x73]
shl dx, 8
movzx edx, dx
or edx, esi
movzx esi, byte [esp + 0x71]
shl si, 8
movzx esi, si
or ecx, eax
shl edx, 0x10
or edx, esi
movzx esi, byte [esp + 0x70]
xor eax, eax
or edx, esi
or eax, edx
xor esi, esi
or ecx, esi
add eax, edi
adc ecx, dword [esp + 0x20]
mov dword [esp + 0x24], eax
movzx eax, byte [esp + 0x4f]
mov dword [esp + 0x28], ecx
movzx ecx, byte [esp + 0x4e]
shl ax, 8
or ax, cx
cmp ax, 0x2e
jbe 0x4aa668
mov edx, dword [0x5077d4]
push edx
push 0x342
call fcn.00465ff0
push eax
mov eax, dword [0x5077d4]
push eax
call fcn.00499570
mov eax, dword [0x507768]
add esp, 0xc
cmp eax, 1
je 0x4aa668
cmp eax, 2
je 0x4aa668
mov ecx, dword [0x5077d0]
push ecx
call fcn.004b24ae
add esp, 4
mov dword [0x5077d0], esi
lea eax, [esi + 3]
pop esi
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
mov eax, dword [esp + 0x24]
add eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x28]
adc ecx, dword [esp + 0x20]
xor edi, edi
mov ebx, 1
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
mov dword [0x506350], eax
mov dword [0x506354], ecx
mov dword [esp + 0x3c], edi
mov dword [0x506358], edi
mov dword [0x50635c], edi
mov dword [esp + 0x2c], ebx
cmp dword [0x5077e8], ebp
je 0x4aa6c3
mov edx, dword [0x5077d0]
push edx
call fcn.004b24ae
add esp, 4
mov dword [0x5077d0], edi
mov eax, dword [0x5077e4]
mov dword [0x5077e8], ebp
cmp ebp, eax
jae 0x4aaef6
dec eax
cmp ebp, eax
jne 0x4aa70b
mov eax, dword [0x5077d4]
push eax
call fcn.004b0ef4
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
cmp esi, edi
jne 0x4aa71e
pop esi
pop ebx
pop edi
mov eax, 4
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
mov ecx, dword [0x5077d4]
push ebp
push ecx
call fcn.004379b0
mov dword [esp + 0x10], eax
mov esi, eax
mov eax, dword [0x5077d0]
cmp eax, edi
jne 0x4aa7b9
push 0x4c7110
push esi
call fcn.004b25f0
add esp, 8
mov dword [0x5077d0], eax
cmp eax, edi
jne 0x4aa7b9
mov edx, dword [0x5077e8]
push edx
call fcn.00438320
cmp eax, 9
je 0x4aaf53
cmp eax, 3
je 0x4aa8b0
mov eax, dword [0x5077e4]
lea ecx, [eax - 1]
mov eax, dword [0x5077e8]
cmp eax, ecx
jne 0x4aa78e
mov edx, dword [0x5077d4]
push edx
call fcn.004b0ef4
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
je 0x4aa6f3
jmp 0x4aa79e
push eax
mov eax, dword [0x506344]
push eax
call fcn.004379b0
mov dword [esp + 0x10], eax
push 0x4c7110
push eax
call fcn.004b25f0
add esp, 8
mov dword [0x5077d0], eax
cmp eax, edi
je 0x4aa742
mov esi, dword [esp + 0x10]
cmp dword [esp + 0x38], edi
jne 0x4aa7ee
cmp dword [esp + 0x2c], edi
je 0x4aa7f2
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push edi
push ecx
push edx
push eax
call fcn.004b26a3
add esp, 0x10
test eax, eax
mov eax, dword [0x5077d0]
jne 0x4aaf7b
mov dword [esp + 0x14], 0x507868
mov dword [esp + 0x2c], edi
mov esi, eax
call fcn.004a9750
test eax, eax
je 0x4aaeaa
mov ebp, dword [esp + 0x14]
mov eax, dword [0x5077d0]
push eax
call fcn.004b2a3e
mov dword [0x5077f4], edx
add esp, 4
mov ecx, 0x4cd530
mov edx, 0x5496c4
mov dword [0x5077f0], eax
call fcn.004a9880
test eax, eax
jne 0x4aaeaa
mov ecx, 0x4cd518
mov edx, 0x5496c4
call fcn.004a9880
test eax, eax
jne 0x4aaeaa
mov ecx, 0x4cd528
mov edx, 0x5496c4
call fcn.004a9880
test eax, eax
jne 0x4aa8b9
cmp dword [0x507768], ebx
je 0x4aae97
mov ecx, dword [0x5077d0]
push ecx
call fcn.004b24ae
add esp, 4
push 0x2ad
mov dword [0x5077d0], edi
call fcn.00465ff0
mov edx, dword [esp + 0x10]
push eax
push edx
call fcn.00499570
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
mov dword [esp + 0x38], ebx
jmp 0x4aaedb
mov ecx, dword [0x5077d0]
push ecx
push ebx
lea edx, [esp + 0x4c]
push 0x2a
push edx
call fcn.004b241a
add esp, 0x10
cmp eax, ebx
je 0x4aa92a
cmp dword [0x507768], ebx
je 0x4aae97
mov eax, dword [0x5077d0]
push eax
call fcn.004b1f62
add esp, 4
mov esi, eax
neg esi
sbb esi, esi
and esi, 9
add esi, 2
cmp esi, 0xb
jne 0x4aafe9
mov eax, dword [esp + 0x10]
push eax
push edi
push eax
push edi
mov ecx, 0x5062f4
call fcn.0042c930
mov eax, esi
pop esi
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
push 0x80
call fcn.004af837
mov esi, eax
add esp, 4
cmp esi, edi
je 0x4aa6f3
movzx eax, byte [esp + 0x45]
movzx ecx, byte [esp + 0x44]
shl ax, 8
or ax, cx
mov word [esi], ax
movzx edx, byte [esp + 0x47]
movzx eax, byte [esp + 0x46]
shl dx, 8
or dx, ax
mov word [esi + 2], dx
movzx ecx, byte [esp + 0x49]
movzx edx, byte [esp + 0x48]
shl cx, 8
or cx, dx
mov word [esi + 4], cx
movzx eax, byte [esp + 0x4b]
movzx ecx, byte [esp + 0x4a]
shl ax, 8
or ax, cx
mov word [esi + 6], ax
movzx edx, byte [esp + 0x4f]
movzx ecx, byte [esp + 0x4e]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x4d]
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x4c]
shl eax, 0x10
or eax, ecx
or eax, edx
mov dword [esi + 8], eax
movzx eax, byte [esp + 0x53]
movzx edx, byte [esp + 0x52]
shl ax, 8
movzx ecx, ax
movzx eax, byte [esp + 0x51]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x50]
shl ecx, 0x10
or ecx, edx
or ecx, eax
mov dword [esi + 0xc], ecx
movzx ecx, byte [esp + 0x57]
movzx eax, byte [esp + 0x56]
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x55]
or edx, eax
shl cx, 8
shl edx, 0x10
movzx eax, cx
movzx ecx, byte [esp + 0x54]
or edx, eax
or edx, ecx
mov dword [esi + 0x10], edx
mov dword [esi + 0x14], edi
movzx edx, byte [esp + 0x5b]
movzx ecx, byte [esp + 0x5a]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x59]
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x58]
shl eax, 0x10
or eax, ecx
or eax, edx
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], edi
movzx eax, byte [esp + 0x5d]
movzx ecx, byte [esp + 0x5c]
shl ax, 8
or ax, cx
mov word [esi + 0x20], ax
movzx edx, byte [esp + 0x5f]
shl dx, 8
movzx eax, byte [esp + 0x5e]
or dx, ax
mov word [esi + 0x24], dx
movzx ecx, byte [esp + 0x61]
movzx edx, byte [esp + 0x60]
shl cx, 8
or cx, dx
mov word [esi + 0x26], cx
movzx eax, byte [esp + 0x63]
movzx edx, byte [esp + 0x62]
shl ax, 8
movzx ecx, ax
or ecx, edx
mov dword [esi + 0x28], ecx
movzx eax, byte [esp + 0x65]
movzx ecx, byte [esp + 0x64]
shl ax, 8
or ax, cx
mov word [esi + 0x2c], ax
movzx edx, byte [esp + 0x69]
movzx ecx, byte [esp + 0x68]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x67]
or eax, ecx
shl eax, 0x10
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x66]
or eax, ecx
or eax, edx
mov dword [esi + 0x38], eax
movzx eax, byte [esp + 0x6d]
movzx edx, byte [esp + 0x6c]
shl ax, 8
movzx ecx, ax
movzx eax, byte [esp + 0x6b]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x6a]
shl ecx, 0x10
or ecx, edx
or ecx, eax
movzx eax, word [esi + 0x20]
mov dword [esi + 0x30], ecx
mov dword [esi + 0x34], edi
mov dword [esi + 0x48], edi
mov dword [esi + 0x44], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x50], edi
mov dword [esi + 0x54], edi
mov dword [esi + 0x5c], edi
mov dword [esi + 0x58], edi
cmp ax, di
jne 0x4aab7b
cmp dword [0x507768], ebx
je 0x4aae97
push 0x2ad
call fcn.00465ff0
mov ecx, dword [esp + 0x10]
push eax
push ecx
call fcn.00499570
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
movzx ecx, ax
add ecx, ebx
push ecx
call fcn.004af837
add esp, 4
mov dword [esi + 0x4c], eax
cmp eax, edi
je 0x4aa6f3
movzx eax, word [esi + 0x24]
cmp ax, di
je 0x4aabb4
movzx edx, ax
push edx
call fcn.004af837
add esp, 4
mov dword [esi + 0x44], eax
cmp eax, edi
je 0x4aa6f3
movzx eax, word [esi + 0x26]
cmp ax, di
je 0x4aabd4
movzx eax, ax
push eax
call fcn.004af837
add esp, 4
mov dword [esi + 0x48], eax
cmp eax, edi
je 0x4aa6f3
mov ecx, dword [0x5077d0]
movzx edx, word [esi + 0x20]
mov eax, dword [esi + 0x4c]
push ecx
push ebx
push edx
push eax
call fcn.004b241a
add esp, 0x10
cmp eax, ebx
jne 0x4aae8b
movzx eax, word [esi + 0x24]
cmp ax, di
je 0x4aac1e
mov ecx, dword [0x5077d0]
push ecx
movzx edx, ax
mov eax, dword [esi + 0x44]
push ebx
push edx
push eax
call fcn.004b241a
add esp, 0x10
cmp eax, ebx
jne 0x4aae8b
movzx eax, word [esi + 0x26]
cmp ax, di
je 0x4aac47
mov ecx, dword [0x5077d0]
push ecx
movzx edx, ax
mov eax, dword [esi + 0x48]
push ebx
push edx
push eax
call fcn.004b241a
add esp, 0x10
cmp eax, ebx
jne 0x4aae8b
movzx ecx, word [esi + 0x20]
mov edx, dword [esi + 0x4c]
mov eax, 0x800
mov byte [ecx + edx], 0
test word [esi + 4], ax
jne 0x4aac83
push esi
call fcn.004a8830
cmp dword [esi + 0x58], edi
jne 0x4aac83
movzx ecx, byte [esi + 1]
mov edx, dword [esi + 0x4c]
push ecx
push edx
call fcn.004a8330
test al, al
je 0x4aac83
mov eax, 0x800
or word [esi + 4], ax
mov ecx, 0x800
test word [esi + 4], cx
je 0x4aacc0
mov edx, dword [esi + 0x4c]
push edx
call fcn.004c0ac7
add esp, 4
mov dword [esi + 0x58], eax
test eax, eax
je 0x4aa6f3
push eax
call fcn.00438080
mov edi, eax
test edi, edi
je 0x4aacc0
mov eax, dword [esi + 0x4c]
push eax
call fcn.004af901
add esp, 4
mov dword [esi + 0x4c], edi
movzx eax, word [esi]
movzx ecx, al
shr ax, 8
xor edi, edi
cmp ax, di
jne 0x4aace9
test dword [esi + 0x38], 0xffff0000
je 0x4aacfa
cmp ecx, 0x19
je 0x4aace9
cmp ecx, 0x1a
je 0x4aace9
cmp ecx, 0x28
jne 0x4aacfa
cmp ax, 6
je 0x4aacfa
cmp ax, 0xb
jne 0x4aad05
cmp ecx, 0x32
jne 0x4aad05
mov eax, dword [esi + 0x4c]
push eax
push eax
call dword [sym.imp.USER32.dll_OemToCharA]
movzx eax, word [esi]
movzx ecx, al
shr ax, 8
cmp ax, di
jne 0x4aad2c
test dword [esi + 0x38], 0xffff0000
je 0x4aad3d
cmp ecx, 0x19
je 0x4aad2c
cmp ecx, 0x1a
je 0x4aad2c
cmp ecx, 0x28
jne 0x4aad3d
cmp ax, 6
je 0x4aad3d
cmp ax, 0xb
jne 0x4aad48
cmp ecx, 0x32
jne 0x4aad48
mov eax, dword [esi + 0x48]
push eax
push eax
call dword [sym.imp.USER32.dll_OemToCharA]
call fcn.004a8a70
mov edx, 1
cmp dword [0x507768], edx
jne 0x4aad62
cmp dword [0x5077e4], edx
je 0x4aad6a
cmp dword [0x507770], edi
je 0x4aad78
mov ecx, dword [esp + 0x1c]
add dword [esi + 0x30], ecx
mov eax, dword [esp + 0x20]
adc dword [esi + 0x34], eax
cmp dword [esi + 0x28], edi
jne 0x4aadbe
cmp dword [esp + 0x3c], edi
je 0x4aad9b
mov ecx, dword [esi + 0x34]
cmp ecx, dword [0x50635c]
ja 0x4aadbe
jb 0x4aad9b
mov eax, dword [esi + 0x30]
cmp eax, dword [0x506358]
jae 0x4aadbe
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x30]
cmp eax, dword [esp + 0x28]
ja 0x4aadbe
jb 0x4aadaf
cmp ecx, dword [esp + 0x24]
jae 0x4aadbe
mov dword [0x506358], ecx
mov dword [0x50635c], eax
mov dword [esp + 0x3c], edx
add dword [0x506340], edx
mov ecx, dword [esi + 0x4c]
push ecx
mov dword [esi + 0x6c], edi
mov dword [esi + 0x70], edi
call fcn.00481510
mov dword [esi + 0x50], eax
cmp eax, edi
je 0x4aa6f3
push eax
call fcn.004c0ac7
add esp, 4
mov dword [esi + 0x3c], eax
cmp eax, edi
je 0x4aa6f3
mov edx, dword [esi + 0x4c]
push edx
call fcn.004c0ac7
add esp, 4
mov dword [esi + 0x54], eax
cmp eax, edi
jne 0x4aae0c
push 4
call fcn.004a6030
mov eax, dword [esi + 0x58]
mov dword [esi + 0x60], edi
mov dword [esi + 0x64], edi
mov dword [esi + 0x68], edi
cmp eax, edi
je 0x4aae59
push eax
call fcn.00438080
cmp eax, edi
jne 0x4aae3a
mov eax, dword [esi + 0x4c]
push eax
call fcn.004c0ac7
add esp, 4
cmp eax, edi
je 0x4aa6f3
push eax
call fcn.004c0ac7
add esp, 4
mov dword [esi + 0x5c], eax
cmp eax, edi
je 0x4aa6f3
mov ecx, dword [esi + 0x58]
push ecx
call fcn.00481200
jmp 0x4aae62
mov edx, dword [esi + 0x4c]
push edx
call fcn.00481190
push eax
mov dword [esi + 0x64], eax
call fcn.00481560
mov dword [esi + 0x68], eax
cmp eax, edi
je 0x4aa6f3
lea eax, [esi + 0x78]
mov dword [ebp], esi
mov dword [eax], edi
mov ebp, eax
xor edi, edi
mov dword [esp + 0x14], ebp
lea ebx, [edi + 1]
jmp 0x4aae97
cmp dword [0x507768], ebx
jne 0x4aafb7
mov esi, dword [0x5077d0]
call fcn.004a9750
test eax, eax
jne 0x4aa805
mov eax, dword [0x5077d0]
push eax
call fcn.004b24ae
mov ecx, dword [esp + 0x14]
push ecx
mov dword [0x5077d0], edi
call fcn.004af901
add esp, 8
mov ecx, 0x4cd528
mov edx, 0x5496c4
call fcn.004a9880
test eax, eax
je 0x4aaef6
mov ebp, dword [0x5077e8]
mov eax, dword [0x5077e4]
add ebp, ebx
mov dword [0x5077e8], ebp
cmp ebp, eax
jb 0x4aa6d6
mov eax, dword [0x506340]
mov ecx, dword [esp + 0x30]
xor edx, edx
cmp eax, ecx
jne 0x4aaf0f
cmp edx, dword [esp + 0x34]
je 0x4a9c8c
movzx eax, ax
xor edx, edx
cmp eax, ecx
jne 0x4aaf22
cmp edx, dword [esp + 0x34]
je 0x4a9c8c
push 0x2ad
call fcn.00465ff0
push eax
mov eax, dword [0x506344]
push eax
call fcn.00499570
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
mov edx, dword [esp + 0x10]
push edx
push edi
mov ecx, 0x5062f4
call fcn.0042cb20
pop esi
pop ebx
pop edi
mov eax, 9
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
push eax
call fcn.004b24ae
add esp, 4
push esi
push 0x204
mov dword [0x5077d0], edi
call fcn.00465ff0
push eax
push edi
call fcn.00499570
add esp, 0xc
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret
mov edx, dword [0x5077d0]
push edx
call fcn.004b1f62
add esp, 4
mov esi, eax
neg esi
sbb esi, esi
and esi, 9
add esi, 2
cmp esi, 0xb
jne 0x4aafe9
mov eax, dword [esp + 0x10]
push eax
push edi
push eax
push edi
mov ecx, 0x5062f4
call fcn.0042c930
mov ecx, dword [esp + 0x78]
mov eax, esi
pop esi
pop ebx
pop edi
pop ebp
xor ecx, esp
call fcn.004af72c
add esp, 0x6c
ret