Function at 0x4a8500
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x64]
cmp eax, dword [ecx + 8]
jbe 0x4a9a75
sub esp, 0xe4
mov edi, esp
lea esi, [esp + 0xe8]
call fcn.0045a12e
call fcn.004af010
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x70], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x74], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x54], ebx
mov ebp, dword [esp + 0x14]
mov dword [esp + 0xc0], ebp
mov esi, dword [esp + 0x108]
mov edi, dword [esp + 0x10c]
mov esi, 0xffffffff
mov dword [esp + 0x30], esi
mov edi, 0xffffffff
mov dword [esp + 0x64], edi
xor edi, edi
mov dword [esp + 0x58], edi
xor esi, esi
mov dword [esp + 0x68], esi
xor esi, esi
mov dword [esp + 0x34], esi
xor esi, esi
mov dword [esp + 0x5c], esi
xor esi, esi
mov dword [esp + 0x48], esi
mov esi, dword [esp + 0x108]
mov edi, dword [esp + 0x10c]
jmp 0x4a85ea
mov edx, dword [esp + 0x74]
mov esi, dword [esp + 0xb4]
mov esi, dword [esp + 0x38]
mov dword [esp + 0x30], esi
mov dword [esp + 0x104], ebx
mov dword [esp + 0x100], ecx
mov dword [esp + 0xfc], ebp
mov ecx, dword [esp + 0x70]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0xb4]
test edi, edi
je 0x4a9a46
mov dword [esp], esi
mov dword [esp + 4], edi
call fcn.004a6bd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xb4], edx
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
test ebx, ebx
jne 0x4a998a
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
test eax, eax
je 0x4a996e
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xcc], ebp
mov dword [esp + 0xac], esi
mov edi, ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
jge 0x4a8670
test eax, 0x100
jne 0x4a990f
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x64]
test ecx, ecx
jge 0x4a8687
test eax, 0x200
jne 0x4a987b
mov dword [esp + 0x64], ecx
and eax, 0xffff
cmp eax, 0x109
jg 0x4a927e
cmp eax, 0x103
jg 0x4a8ed7
cmp eax, 0x23
jg 0x4a8cf6
cmp eax, 0x17
je 0x4a8ad3
lea ecx, [eax - 0x18]
cmp ecx, 9
ja 0x4a8a4f
mov ecx, dword [esp + 0x6c]
test ecx, ecx
jne 0x4a8a44
mov eax, ecx
mov ecx, dword [esp + 0x40]
cmp ecx, 0x18
jne 0x4a8731
lea ecx, [esi + 1]
cmp ecx, ebx
ja 0x4a86ec
mov byte [ebp + esi], 0x5a
jmp 0x4a85ac
lea eax, [0x726bc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00443780
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x4a86e2
cmp ecx, 0x1b
je 0x4a86db
cmp ecx, 0x19
je 0x4a86db
cmp ecx, 0x1a
je 0x4a86db
cmp ecx, 0x1c
je 0x4a86db
mov eax, 0x88888889
mov edx, dword [esp + 0x6c]
imul edx
mov eax, edi
mov edi, dword [esp + 0x6c]
add edx, edi
sar edi, 0x1f
sar edx, 5
mov dword [esp + 0xa8], edx
sub edx, edi
test edx, edx
jge 0x4a89d9
lea edx, [esi + 1]
cmp edx, ebx
ja 0x4a898a
mov byte [ebp + esi], 0x2d
mov esi, dword [esp + 0xa8]
sub edi, esi
mov esi, dword [esp + 0x6c]
xchg esi, ebx
neg ebx
xchg esi, ebx
mov dword [esp + 0x28], edi
mov dword [esp + 0xa8], esi
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov eax, 0x88888889
imul edi
lea ecx, [edi + edx]
sar edi, 0x1f
sar ecx, 5
sub ecx, edi
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.004a7bb0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x40]
cmp ebp, 0x1b
jne 0x4a8968
lea esi, [edx + 1]
cmp esi, ecx
ja 0x4a8924
mov byte [ebx + edx], 0x3a
cmp ebp, 0x1f
je 0x4a8808
cmp ebp, 0x1a
jne 0x4a88e3
cmp ebp, 0x19
je 0x4a8836
cmp ebp, 0x1e
je 0x4a8836
cmp ebp, 0x21
je 0x4a8836
cmp ebp, 0x1c
je 0x4a8836
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
mov ebp, ebx
mov ebx, ecx
mov ecx, esi
jmp 0x4a85ac
cmp ebp, 0x21
jne 0x4a88d3
lea edx, [esi + 1]
cmp edx, ecx
ja 0x4a8893
mov byte [ebx + esi], 0x3a
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov eax, 0x88888889
mov ecx, dword [esp + 0xa8]
imul ecx
add edx, ecx
mov ebx, ecx
sar ecx, 0x1f
sar edx, 5
sub edx, ecx
imul ecx, edx, 0x3c
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.004a7bb0
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
jmp 0x4a881c
mov dword [esp + 0xa0], esi
lea eax, [0x726bc0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.00443780
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov esi, dword [esp + 0xa0]
jmp 0x4a8846
cmp ebp, 0x1c
je 0x4a883f
mov edx, esi
jmp 0x4a884a
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xa4]
imul eax, eax, 0x3c
mov ecx, dword [esp + 0x28]
sub ecx, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.004a7bb0
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x40]
jmp 0x4a8808
mov dword [esp + 0x9c], edx
lea eax, [0x726bc0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.00443780
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x40]
jmp 0x4a87f6
cmp ebp, 0x20
je 0x4a87eb
cmp ebp, 0x1c
je 0x4a87eb
cmp ebp, 0x21
je 0x4a87eb
mov esi, edx
jmp 0x4a87fa
mov dword [esp + 0xa4], edi
lea eax, [0x726bc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00443780
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0xa4]
jmp 0x4a877a
lea edi, [esi + 1]
cmp edi, ebx
ja 0x4a89f8
mov byte [ebp + esi], 0x2b
mov esi, dword [esp + 0x6c]
mov esi, edx
mov edx, edi
mov edi, esi
mov esi, dword [esp + 0x6c]
jmp 0x4a8792
mov dword [esp + 0x98], edx
lea eax, [0x726bc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edi
call fcn.00443780
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea edi, [eax + 1]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x98]
mov esi, dword [esp + 0xac]
jmp 0x4a89e0
mov eax, ecx
mov ecx, dword [esp + 0x40]
jmp 0x4a8745
lea ecx, [eax - 0x22]
cmp ecx, 1
jbe 0x4a8a62
mov eax, dword [esp + 0x6c]
mov ecx, esi
jmp 0x4a85ac
lea edi, [esp + 0xd0]
lea esi, [esp + 0xe8]
call fcn.0045a12e
nop
mov ecx, dword [esp + 0xd0]
mov dword [esp], ebp
mov edx, dword [esp + 0xac]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
and ecx, 0x3fffffff
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x40]
sar ecx, 0x10
mov dword [esp + 0x10], ecx
cmp eax, 0x23
sete al
mov byte [esp + 0x14], al
call fcn.004a7eb0
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
mov ecx, dword [esp + 0x54]
test ecx, ecx
je 0x4a8b75
lea eax, [ecx + esi]
mov dword [esp + 0x100], eax
cmp eax, ebx
ja 0x4a8b3f
mov dword [esp + 0x104], ebx
mov dword [esp + 0xfc], ebp
lea eax, [ebp + esi]
mov dword [esp], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0045a350
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x104]
mov ecx, dword [esp + 0x100]
mov ebp, dword [esp + 0xfc]
jmp 0x4a85ac
lea ecx, [0x726bc0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.00443780
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x54]
mov esi, dword [esp + 0xac]
jmp 0x4a8aed
mov eax, 0x88888889
mov ecx, dword [esp + 0x6c]
imul ecx
add edx, ecx
mov eax, ecx
sar ecx, 0x1f
sar edx, 5
mov dword [esp + 0xa8], edx
sub edx, ecx
test edx, edx
jge 0x4a8c93
lea edx, [esi + 1]
cmp edx, ebx
ja 0x4a8c44
mov byte [ebp + esi], 0x2d
mov esi, dword [esp + 0xa8]
sub ecx, esi
mov dword [esp + 0x2c], ecx
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004a7bb0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xa8]
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0x2c]
sub edx, ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
mov dword [esp + 0xa4], ecx
lea eax, [0x726bc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00443780
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0xa4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x4a8ba6
lea ecx, [esi + 1]
cmp ecx, ebx
ja 0x4a8caa
mov byte [ebp + esi], 0x2b
mov esi, edx
mov edx, ecx
mov ecx, esi
jmp 0x4a8bb4
mov dword [esp + 0x94], edx
lea eax, [0x726bc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00443780
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x94]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x4a8c9a
cmp eax, 0x101
je 0x4a8e08
cmp eax, 0x102
je 0x4a8d53
cmp eax, 0x103
jne 0x4a8a57
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.004aebb0
mov edx, dword [esp + 8]
mov eax, dword [esp + 4]
cmp edx, 3
jb 0x4a9a6a
mov ecx, dword [esp + 0xac]
lea edx, [ecx + 3]
mov ebx, dword [esp + 0xb0]
cmp edx, ebx
ja 0x4a8db6
mov ebp, dword [esp + 0xcc]
movzx esi, word [eax]
mov edi, esi
movzx esi, byte [eax + 2]
mov word [ebp + ecx], di
xchg esi, eax
mov byte [ebp + ecx + 2], al
xchg esi, eax
mov eax, dword [esp + 0x6c]
mov edi, dword [esp + 0x3c]
mov ecx, edx
mov edx, dword [esp + 0xb4]
jmp 0x4a85ac
mov dword [esp + 0x90], edx
mov dword [esp + 0xc8], eax
lea eax, [0x726bc0]
mov dword [esp], eax
mov ebp, dword [esp + 0xcc]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00443780
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x90]
jmp 0x4a8d8c
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.004aebb0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xac]
lea ebx, [edx + eax]
mov dword [esp + 0x100], ebx
mov ebp, dword [esp + 0xb0]
cmp ebx, ebp
ja 0x4a8e88
mov esi, dword [esp + 0xcc]
mov dword [esp + 0x104], ebp
mov dword [esp + 0xfc], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0045a350
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x104]
mov ecx, dword [esp + 0x100]
mov ebp, dword [esp + 0xfc]
jmp 0x4a85ac
mov dword [esp + 0x60], eax
mov dword [esp + 0xc4], ecx
lea eax, [0x726bc0]
mov dword [esp], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00443780
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xac]
jmp 0x4a8e3f
cmp eax, 0x106
jg 0x4a9144
cmp eax, 0x104
je 0x4a9104
cmp eax, 0x105
jne 0x4a9008
mov eax, dword [esp + 0x70]
add eax, 0x15180
mov dword [esp], eax
mov eax, dword [esp + 0x74]
adc eax, 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x93a80
mov dword [esp + 0xc], 0
call fcn.00454730
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
mov eax, ecx
sar ecx, 0x1f
add eax, edx
sar eax, 0x10
sub eax, ecx
mov dword [esp], eax
call fcn.004aecb0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xac]
lea ebx, [edx + eax]
mov dword [esp + 0x100], ebx
mov ebp, dword [esp + 0xb0]
cmp ebx, ebp
ja 0x4a8fb9
mov esi, dword [esp + 0xcc]
mov dword [esp + 0x104], ebp
mov dword [esp + 0xfc], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0045a350
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x104]
mov ecx, dword [esp + 0x100]
mov ebp, dword [esp + 0xfc]
jmp 0x4a85ac
mov dword [esp + 0x4c], eax
mov dword [esp + 0xb8], ecx
lea eax, [0x726bc0]
mov dword [esp], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00443780
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xac]
jmp 0x4a8f70
mov eax, dword [esp + 0x70]
add eax, 0x15180
mov dword [esp], eax
mov eax, dword [esp + 0x74]
adc eax, 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x93a80
mov dword [esp + 0xc], 0
call fcn.00454730
mov eax, dword [esp + 0x10]
mov dword [esp + 0x44], eax
mov ecx, 0xc22e4507
imul ecx
mov eax, dword [esp + 0x44]
mov ebx, eax
sar eax, 0x1f
add edx, ebx
sar edx, 0x10
sub edx, eax
mov dword [esp], edx
call fcn.004aecb0
mov edx, dword [esp + 8]
mov eax, dword [esp + 4]
cmp edx, 3
jb 0x4a9a60
mov ecx, dword [esp + 0xac]
lea edx, [ecx + 3]
mov ebx, dword [esp + 0xb0]
cmp edx, ebx
ja 0x4a90b2
mov ebp, dword [esp + 0xcc]
movzx esi, byte [eax + 2]
mov edi, esi
movzx esi, word [eax]
mov word [ebp + ecx], si
xchg edi, eax
mov byte [ebp + ecx + 2], al
xchg edi, eax
mov eax, dword [esp + 0x6c]
mov edi, dword [esp + 0x3c]
mov ecx, edx
mov edx, dword [esp + 0xb4]
jmp 0x4a85ac
mov dword [esp + 0x8c], edx
mov dword [esp + 0xc8], eax
lea eax, [0x726bc0]
mov dword [esp], eax
mov ebp, dword [esp + 0xcc]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.00443780
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x8c]
jmp 0x4a9088
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
cmp eax, 0x107
je 0x4a923e
cmp eax, 0x108
jne 0x4a91fe
mov eax, dword [esp + 0x68]
cmp eax, 0xa
jge 0x4a91f7
lea ecx, [esi + 1]
cmp ecx, ebx
ja 0x4a91af
mov byte [ebp + esi], 0x20
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
lea eax, [0x726bc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00443780
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x4a916e
mov ecx, esi
jmp 0x4a9173
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
cmp eax, 0x20d
jg 0x4a954e
cmp eax, 0x113
jg 0x4a9439
cmp eax, 0x10a
je 0x4a9331
cmp eax, 0x10b
je 0x4a92f1
cmp eax, 0x113
jne 0x4a8a57
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x38]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
mov eax, dword [esp + 0x34]
cmp eax, 0x64
jge 0x4a935f
lea ecx, [esi + 1]
cmp ecx, ebx
ja 0x4a93f1
mov byte [ebp + esi], 0x20
cmp eax, 0xa
jge 0x4a93ea
lea esi, [ecx + 1]
cmp esi, ebx
ja 0x4a939b
mov byte [ebp + ecx], 0x20
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
mov dword [esp + 0x88], ecx
lea eax, [0x726bc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.00443780
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a935a
mov esi, ecx
jmp 0x4a935f
lea eax, [0x726bc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00443780
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x4a9345
cmp eax, 0x114
je 0x4a94f2
cmp eax, 0x20c
je 0x4a94b6
cmp eax, 0x20d
jne 0x4a8a57
mov eax, 0xaaaaaaab
imul ecx
add edx, ecx
mov eax, ecx
sar ecx, 0x1f
sar edx, 3
sub edx, ecx
lea ecx, [edx + edx*2]
shl ecx, 2
sub eax, ecx
test eax, eax
jne 0x4a947a
mov eax, 0xc
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a7bb0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
mov ecx, dword [esp + 0x38]
test ecx, ecx
jge 0x4a94fc
neg ecx
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, 0x51eb851f
imul ecx
mov ebx, ecx
sar ecx, 0x1f
sar edx, 5
sub edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
cmp eax, 0x210
jle 0x4a978d
cmp eax, 0x212
jle 0x4a9706
cmp eax, 0x215
jne 0x4a963b
cmp ecx, 0xc
jl 0x4a95dc
lea eax, [esi + 2]
cmp eax, ebx
ja 0x4a9590
mov ecx, 0x4d50
mov word [ebp + esi], cx
mov ecx, eax
mov eax, dword [esp + 0x6c]
jmp 0x4a85ac
mov dword [esp + 0x84], eax
lea ecx, [0x726bc0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.00443780
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x4a957b
lea eax, [esi + 2]
cmp eax, ebx
ja 0x4a95ef
mov ecx, 0x4d41
mov word [ebp + esi], cx
jmp 0x4a9585
mov dword [esp + 0x80], eax
lea ecx, [0x726bc0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.00443780
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x4a95e3
cmp eax, 0x216
jne 0x4a8a57
cmp ecx, 0xc
jl 0x4a96ad
lea eax, [esi + 2]
cmp eax, ebx
ja 0x4a9667
mov ecx, 0x6d70
mov word [ebp + esi], cx
mov ecx, eax
mov eax, dword [esp + 0x6c]
jmp 0x4a85ac
mov dword [esp + 0x7c], eax
lea ecx, [0x726bc0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.00443780
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x4a9652
lea eax, [esi + 2]
cmp eax, ebx
ja 0x4a96c0
mov ecx, 0x6d61
mov word [ebp + esi], cx
jmp 0x4a965c
mov dword [esp + 0x78], eax
lea ecx, [0x726bc0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call fcn.00443780
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xb4]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
jmp 0x4a96b4
cmp eax, 0x211
jne 0x4a974d
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
cmp eax, 0x20e
jne 0x4a97f4
mov eax, 0xaaaaaaab
imul ecx
add edx, ecx
mov eax, ecx
sar ecx, 0x1f
sar edx, 3
sub edx, ecx
lea ecx, [edx + edx*2]
shl ecx, 2
sub eax, ecx
test eax, eax
jne 0x4a97b8
mov eax, 0xc
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
cmp eax, 0x20f
jne 0x4a983b
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.004a7bb0
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.004a7bb0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xb4]
mov edi, dword [esp + 0x3c]
jmp 0x4a85ac
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x15180
mov dword [esp + 0xc], 0
call fcn.00454730
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0x91a2b3c5
imul ecx
lea eax, [ecx + edx]
sar eax, 0xb
mov edx, ecx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0xe10
sub edx, ecx
mov ecx, eax
mov eax, 0x88888889
mov ebx, edx
imul edx
lea eax, [ebx + edx]
mov edx, ebx
sar ebx, 0x1f
sar eax, 5
sub eax, ebx
imul ebx, eax, 0x3c
sub edx, ebx
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0xcc]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x48], edx
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0xb4]
jmp 0x4a8687
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 4], ecx
mov byte [esp + 8], 1
call fcn.004b0d70
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
inc ebx
mov ebp, dword [esp + 0xcc]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x58], eax
mov dword [esp + 0x68], edx
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp + 0xb0]
jmp 0x4a8670
mov dword [esp + 0x110], ebp
mov dword [esp + 0x114], esi
mov dword [esp + 0x118], ebx
add esp, 0xe4
ret
mov esi, dword [esp + 0x100]
lea edi, [ebx + esi]
mov dword [esp + 0xa8], edi
mov ecx, dword [esp + 0x104]
cmp edi, ecx
ja 0x4a99f0
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0xfc]
lea edx, [eax + esi]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.0045a350
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x104]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xa8]
jmp 0x4a863e
mov dword [esp + 0x50], ebx
mov dword [esp + 0xbc], ebp
lea eax, [0x726bc0]
mov dword [esp], eax
mov edx, dword [esp + 0xfc]
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edi
call fcn.00443780
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0x100]
mov dword [esp + 0xfc], eax
jmp 0x4a99a6
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0x100]
mov ebx, dword [esp + 0x104]
jmp 0x4a996e
mov ecx, 3
call fcn.00459a50
mov ecx, 3
call fcn.00459a50
nop
call fcn.00458170
jmp fcn.004a8500