Function at 0x4aa1a0
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x6c
mov eax, dword [0x4d98f0]
xor eax, esp
mov dword [esp + 0x68], eax
mov eax, dword [0x5087d4]
push ebp
xor ebp, ebp
push 0x4c8110
push eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x34], ebp
call fcn.004b2eb0
add esp, 8
mov dword [0x5087d0], eax
cmp eax, ebp
jne 0x4aa1fe
mov ecx, dword [0x5087d4]
push ecx
push ebp
mov ecx, 0x5072f4
call fcn.0042d280
lea eax, [ebp + 0x12]
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
push 2
push 0xffffffffffffffff
push 0xfffe0000
push eax
call fcn.004b2f63
add esp, 0x10
test eax, eax
jne 0x4aa22a
mov edx, dword [0x5087d0]
push edx
call fcn.004b32fe
and eax, edx
add esp, 4
cmp eax, 0xffffffff
jne 0x4aa284
mov eax, dword [0x5087d0]
push ebp
push ebp
push ebp
push eax
call fcn.004b2f63
add esp, 0x10
test eax, eax
je 0x4aa284
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
mov edx, dword [0x5087d4]
add esp, 4
push edx
push 0x204
mov dword [0x5087d0], ebp
call fcn.00466860
push eax
push ebp
call fcn.00499df0
add esp, 0xc
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov eax, dword [0x5087d0]
push edi
mov edi, 0x4ce530
call fcn.004aa0b0
test eax, eax
jne 0x4aa2dc
mov eax, dword [0x5087d0]
push eax
call fcn.004b2d6e
add esp, 4
push 0x2ad
mov dword [0x5087d0], ebp
call fcn.00466860
mov ecx, dword [0x5087d4]
push eax
push ecx
call fcn.00499df0
add esp, 8
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov edx, dword [0x5087d0]
push ebx
push esi
push edx
call fcn.004b32fe
mov esi, eax
mov eax, dword [0x5087d0]
mov ebx, edx
add esp, 4
mov edi, 0x4ce530
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ebx
call fcn.004aa0b0
test eax, eax
je 0x4aa33d
lea esp, [esp]
mov eax, dword [0x5087d0]
push eax
call fcn.004b32fe
mov esi, eax
mov eax, dword [0x5087d0]
mov ebx, edx
add esp, 4
mov edi, 0x4ce530
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ebx
call fcn.004aa0b0
test eax, eax
jne 0x4aa310
mov ecx, dword [0x5087d0]
push ebp
push ebx
push esi
push ecx
call fcn.004b2f63
add esp, 0x10
test eax, eax
je 0x4aa39a
mov edx, dword [0x5087d0]
push edx
call fcn.004b2d6e
mov eax, dword [0x5087d4]
add esp, 4
push eax
push 0x204
mov dword [0x5087d0], ebp
call fcn.00466860
push eax
push ebp
call fcn.00499df0
add esp, 0xc
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov ecx, dword [0x5087d0]
push ecx
push 0x12
lea edx, [esp + 0x4c]
push 1
push edx
call fcn.004b2cda
movzx eax, byte [esp + 0x55]
movzx edx, byte [esp + 0x54]
shl ax, 8
movzx ecx, ax
or ecx, edx
movzx edx, byte [esp + 0x57]
shl dx, 8
movzx ebp, dx
movzx edx, byte [esp + 0x63]
shl dx, 8
inc ecx
movzx ebx, dx
movzx edx, byte [esp + 0x61]
lea eax, [ecx - 1]
mov dword [0x5087e8], eax
movzx eax, byte [esp + 0x56]
or ebp, eax
movzx eax, byte [esp + 0x62]
or ebx, eax
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x60]
shl ebx, 0x10
or ebx, eax
movzx eax, byte [esp + 0x5b]
shl ax, 8
or ebx, edx
movzx edx, byte [esp + 0x5a]
or ax, dx
movzx eax, ax
cdq
mov edi, eax
movzx eax, byte [esp + 0x5f]
shl ax, 8
movzx esi, ax
movzx eax, byte [esp + 0x5d]
mov dword [esp + 0x44], edx
movzx edx, byte [esp + 0x5e]
or esi, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x5c]
shl esi, 0x10
or esi, edx
movzx edx, byte [esp + 0x64]
or esi, eax
movzx ax, byte [esp + 0x65]
shl ax, 8
add esp, 0x10
or ax, dx
mov dword [0x5087e4], ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0
mov dword [esp + 0x30], edi
mov word [0x50733c], ax
je 0x4aa511
movzx eax, ax
inc eax
push eax
call fcn.004b00f7
add esp, 4
mov dword [0x508870], eax
test eax, eax
je 0x4aafad
mov ecx, dword [0x5087d0]
movzx edx, word [0x50733c]
push ecx
push 1
push edx
push eax
call fcn.004b2cda
add esp, 0x10
cmp eax, 1
mov eax, dword [0x508870]
je 0x4aa500
push eax
call fcn.004b01c1
mov ecx, dword [0x5087d0]
push ecx
mov dword [0x508870], 0
call fcn.004b2822
add esp, 8
neg eax
pop esi
sbb eax, eax
pop ebx
and eax, 9
pop edi
add eax, 2
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
movzx edx, word [0x50733c]
mov byte [edx + eax], 0
mov ecx, dword [0x5087e4]
or edi, dword [esp + 0x34]
jne 0x4aa541
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
add esp, 4
mov dword [0x5087d0], edi
pop esi
pop ebx
pop edi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
cmp ecx, 1
je 0x4aa66e
cmp dword [0x508770], 0
jne 0x4ab7f9
mov edx, dword [0x507344]
push 0x4c6acc
push edx
call fcn.00456290
test al, al
jne 0x4aa59c
mov eax, dword [0x5087d0]
push eax
call fcn.004b2d6e
add esp, 4
pop esi
pop ebx
pop edi
mov dword [0x5087d0], 0
mov eax, 0x10
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov ecx, dword [0x5087e4]
cmp ecx, 1
je 0x4aa66e
mov edx, dword [0x5087dc]
mov eax, dword [0x5087d4]
mov di, word [eax]
cmp di, word [edx]
jne 0x4aa5dc
test di, di
je 0x4aa5d8
mov di, word [eax + 2]
cmp di, word [edx + 2]
jne 0x4aa5dc
add eax, 4
add edx, 4
test di, di
jne 0x4aa5b6
xor eax, eax
jmp 0x4aa5e1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4aa66e
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
add esp, 4
cmp byte [0x528c62], 0x53
mov dword [0x5087d0], 0
jne 0x4aa63d
push 0x5fa
call fcn.00466860
mov edx, dword [0x5087d4]
push eax
push edx
call fcn.00499df0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 0xc
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
push 0x2c8
call fcn.00466860
push eax
mov eax, dword [0x5087d4]
push eax
call fcn.00499df0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 0xc
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
xor edx, edx
cmp dword [0x508768], 1
mov dword [0x508840], edx
mov dword [0x508848], edx
mov dword [0x50884c], edx
jne 0x4aa690
cmp ecx, 1
je 0x4aa6a2
cmp dword [0x508770], edx
je 0x4aa9f1
mov ebx, dword [esp + 0x24]
xor edx, edx
cmp ebx, 0xffffffff
jne 0x4aa6ad
cmp dword [esp + 0x28], edx
je 0x4aa722
cmp esi, 0xffffffff
jne 0x4aa6b8
xor eax, eax
cmp eax, edx
je 0x4aa722
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
sub ecx, esi
mov eax, 0
sbb edx, eax
sub ecx, 0x50
push 0
sbb edx, eax
mov eax, dword [0x5087d0]
push edx
push ecx
push eax
call fcn.004b2f63
add esp, 0x10
test eax, eax
jne 0x4aad63
mov eax, dword [0x5087d0]
mov edi, 0x4ce528
call fcn.004aa0b0
test eax, eax
je 0x4aad7c
mov eax, dword [0x5087d0]
push eax
call fcn.004b32fe
add esp, 4
mov ecx, 0xfffffffc
sub ecx, ebx
mov esi, 0xffffffff
sbb esi, dword [esp + 0x28]
jmp 0x4aa9e5
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [0x5087d0]
sub eax, 0x18
push 0
sbb ecx, 0
push ecx
push eax
push edx
call fcn.004b2f63
add esp, 0x10
test eax, eax
mov eax, dword [0x5087d0]
je 0x4aa791
push eax
call fcn.004b2d6e
add esp, 4
push 0x2ad
mov dword [0x5087d0], 0
call fcn.00466860
mov ecx, dword [0x5087d4]
push eax
push ecx
call fcn.00499df0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
push 0x4ce520
call fcn.004aa150
test eax, eax
je 0x4aa9f1
mov edx, dword [0x5087d0]
push edx
call fcn.004b32fe
mov esi, eax
mov eax, dword [0x5087d0]
push eax
push 1
lea ecx, [esp + 0x50]
mov edi, edx
push 0x10
sub esi, 4
mov ebx, 0
push ecx
sbb edi, ebx
call fcn.004b2cda
add esp, 0x14
cmp eax, 1
je 0x4aa817
mov edx, dword [0x5087d0]
push edx
call fcn.004b2d6e
mov eax, dword [0x5087d4]
add esp, 4
push eax
push ebx
push eax
push ebx
mov ecx, 0x5072f4
mov dword [0x5087d0], ebx
call fcn.0042d090
pop esi
lea eax, [ebx + 0xb]
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov eax, dword [0x5087d0]
push 0x4ce530
call fcn.004aa150
test eax, eax
jne 0x4aa869
mov eax, dword [0x5087d0]
push eax
call fcn.004b2d6e
mov eax, dword [0x5087d4]
add esp, 4
push eax
push ebx
push eax
push ebx
mov ecx, 0x5072f4
mov dword [0x5087d0], ebx
call fcn.0042d090
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
movzx ecx, byte [esp + 0x4f]
movzx edx, byte [esp + 0x4e]
shl cx, 8
movzx eax, cx
movzx ecx, byte [esp + 0x4d]
or eax, edx
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x4c]
shl eax, 0x10
or eax, edx
movzx edx, byte [esp + 0x4b]
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x4a]
or ecx, edx
movzx edx, byte [esp + 0x49]
shl dx, 8
movzx edx, dx
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x48]
or ecx, edx
xor edx, edx
or eax, edx
movzx edx, byte [esp + 0x51]
mov dword [esp + 0x40], eax
movzx ax, byte [esp + 0x53]
shl ax, 8
xor ebx, ebx
or ebx, ecx
movzx ecx, byte [esp + 0x52]
movzx eax, ax
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x50]
shl eax, 0x10
or eax, ecx
or eax, edx
mov dword [0x5087e4], eax
cmp eax, 1
jne 0x4ab7f9
mov eax, dword [esp + 0x40]
mov ecx, dword [0x5087d0]
push 0
push eax
push ebx
push ecx
call fcn.004b2f63
add esp, 0x10
test eax, eax
jne 0x4aa952
mov eax, dword [0x5087d0]
push 0x4ce518
call fcn.004aa150
test eax, eax
jne 0x4aa9f1
mov ecx, dword [0x5087d0]
push eax
sub esi, 0x50
sbb edi, eax
push edi
push esi
push ecx
call fcn.004b2f63
add esp, 0x10
test eax, eax
je 0x4aa99c
mov edx, dword [0x5087d0]
push edx
call fcn.004b2d6e
add esp, 4
push 0x2ad
mov dword [0x5087d0], 0
call fcn.00466860
push eax
mov eax, dword [0x5087d4]
push eax
call fcn.00499df0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov esi, dword [0x5087d0]
call fcn.004a9ff0
test eax, eax
je 0x4aad7c
mov ecx, 0x4ce518
mov edx, 0x54a6c4
call fcn.004aa120
test eax, eax
je 0x4aad7c
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b32fe
add esp, 4
mov ecx, 0xfffffffc
sub ecx, ebx
mov esi, 0xffffffff
sbb esi, dword [esp + 0x40]
add eax, ecx
adc edx, esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub eax, 0x18
push 0
sbb ecx, 0
push ecx
push eax
mov eax, dword [0x5087d0]
push eax
call fcn.004b2f63
add esp, 0x10
test eax, eax
jne 0x4aad63
mov eax, dword [0x5087d0]
push 0x4ce520
call fcn.004aa150
test eax, eax
je 0x4aaf1c
mov eax, dword [0x5087d0]
push eax
call fcn.004b32fe
mov ecx, dword [0x5087d0]
sub eax, 4
push ecx
mov esi, 0
sbb edx, esi
push 1
mov dword [esp + 0x24], edx
lea edx, [esp + 0x50]
push 0x10
push edx
mov dword [esp + 0x28], eax
call fcn.004b2cda
add esp, 0x14
cmp eax, 1
mov eax, dword [0x5087d0]
je 0x4aaaa7
push eax
call fcn.004b2d6e
mov eax, dword [0x5087d4]
add esp, 4
push eax
push esi
push eax
push esi
mov ecx, 0x5072f4
mov dword [0x5087d0], esi
call fcn.0042d090
lea eax, [esi + 0xb]
pop esi
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
push 0x4ce530
call fcn.004aa150
test eax, eax
jne 0x4aaaf5
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
mov eax, dword [0x5087d4]
add esp, 4
push eax
push esi
push eax
push esi
mov ecx, 0x5072f4
mov dword [0x5087d0], esi
call fcn.0042d090
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
movzx edx, byte [esp + 0x47]
movzx ecx, byte [esp + 0x45]
movzx eax, byte [esp + 0x46]
shl dx, 8
shl cx, 8
movzx esi, dx
or esi, eax
movzx eax, byte [esp + 0x44]
movzx edx, cx
movzx ecx, byte [esp + 0x4f]
shl esi, 0x10
or esi, edx
movzx edx, byte [esp + 0x4e]
or esi, eax
movzx eax, byte [esp + 0x4d]
shl ax, 8
shl cx, 8
movzx ebx, cx
movzx ecx, ax
movzx eax, byte [esp + 0x4b]
or ebx, edx
movzx edx, byte [esp + 0x4c]
mov edi, dword [esp + 0x1c]
shl ax, 8
shl ebx, 0x10
or ebx, ecx
movzx ecx, ax
movzx eax, byte [esp + 0x49]
or ebx, edx
movzx edx, byte [esp + 0x4a]
shl ax, 8
or ecx, edx
movzx edx, ax
movzx eax, byte [esp + 0x48]
shl ecx, 0x10
or ecx, edx
or ecx, eax
movzx eax, byte [esp + 0x53]
xor edx, edx
xor ebp, ebp
or ebx, edx
movzx edx, byte [esp + 0x51]
or ebp, ecx
movzx ecx, byte [esp + 0x52]
add ebp, edi
adc ebx, dword [esp + 0x20]
shl ax, 8
movzx eax, ax
or eax, ecx
shl dx, 8
shl eax, 0x10
movzx ecx, dx
movzx edx, byte [esp + 0x50]
or eax, ecx
or eax, edx
mov dword [0x5087e4], eax
dec eax
mov dword [0x5087e8], eax
cmp esi, eax
je 0x4aac4e
mov eax, dword [0x5087d0]
push eax
call fcn.004b2d6e
mov ecx, dword [0x5087d4]
add esp, 4
push esi
push ecx
mov dword [0x5087d0], 0
call fcn.004380b0
mov edi, eax
push 0x4c8110
push edi
call fcn.004b2eb0
add esp, 8
mov dword [0x5087d0], eax
test eax, eax
jne 0x4aac41
push esi
call fcn.00438a00
test eax, eax
jne 0x4ab821
push edi
call fcn.004b01c1
mov edx, dword [0x5087d4]
add esp, 4
push esi
push edx
call fcn.004380b0
mov edi, eax
push 0x4c8110
push edi
call fcn.004b2eb0
add esp, 8
mov dword [0x5087d0], eax
test eax, eax
je 0x4aac04
push edi
call fcn.004b01c1
mov edi, dword [esp + 0x20]
add esp, 4
mov eax, dword [0x5087d0]
push 0
push ebx
push ebp
push eax
mov dword [0x5087e8], esi
call fcn.004b2f63
add esp, 0x10
test eax, eax
jne 0x4aad63
mov eax, dword [0x5087d0]
push 0x4ce518
call fcn.004aa150
test eax, eax
jne 0x4aacfc
mov ecx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x18]
sub eax, 0x50
sbb ecx, 0
push ecx
push eax
mov eax, dword [0x5087d0]
push eax
call fcn.004b2f63
add esp, 0x10
test eax, eax
jne 0x4aad63
mov esi, dword [0x5087d0]
call fcn.004a9ff0
test eax, eax
je 0x4aad63
mov ecx, 0x4ce518
mov edx, 0x54a6c4
call fcn.004aa120
test eax, eax
je 0x4aad63
mov eax, dword [0x5087d0]
push eax
call fcn.004b32fe
add esp, 4
mov edi, eax
mov ecx, 0xfffffffc
sub ecx, ebp
mov eax, 0xffffffff
sbb eax, ebx
add edi, ecx
adc edx, eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edx
mov eax, dword [0x5087d0]
push eax
push 0x34
lea ecx, [esp + 0x4c]
push 1
push ecx
call fcn.004b2cda
add esp, 0x10
cmp eax, 0x34
jae 0x4aadae
push 0x2ad
call fcn.00466860
mov edx, dword [0x5087d4]
push eax
push edx
call fcn.00499df0
mov eax, dword [0x5087d0]
push eax
call fcn.004b2d6e
add esp, 0xc
pop esi
pop ebx
pop edi
mov dword [0x5087d0], 0
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
add esp, 4
mov dword [0x5087d0], 0
push 0x2ad
call fcn.00466860
mov edx, dword [0x5087d4]
push eax
push edx
call fcn.00499df0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
movzx ecx, byte [esp + 0x57]
movzx eax, byte [esp + 0x55]
movzx edx, byte [esp + 0x56]
shl cx, 8
shl ax, 8
movzx ebp, cx
or ebp, edx
movzx edx, byte [esp + 0x54]
movzx ecx, ax
movzx eax, byte [esp + 0x67]
shl ax, 8
movzx esi, byte [esp + 0x62]
shl ebp, 0x10
or ebp, ecx
or ebp, edx
movzx edx, byte [esp + 0x66]
movzx ecx, ax
movzx eax, byte [esp + 0x65]
or ecx, edx
shl ax, 8
movzx edx, ax
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x63]
movzx eax, byte [esp + 0x64]
shl dx, 8
movzx edx, dx
or edx, esi
movzx esi, byte [esp + 0x61]
or ecx, eax
shl si, 8
shl edx, 0x10
movzx esi, si
or edx, esi
movzx esi, byte [esp + 0x60]
or edx, esi
xor eax, eax
or eax, edx
movzx edx, byte [esp + 0x76]
mov dword [esp + 0x30], eax
movzx eax, byte [esp + 0x77]
xor esi, esi
or ecx, esi
movzx esi, byte [esp + 0x72]
shl ax, 8
mov dword [esp + 0x34], ecx
movzx ecx, ax
movzx eax, byte [esp + 0x75]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x74]
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x73]
shl dx, 8
movzx edx, dx
or edx, esi
movzx esi, byte [esp + 0x71]
shl si, 8
movzx esi, si
or ecx, eax
shl edx, 0x10
or edx, esi
movzx esi, byte [esp + 0x70]
xor eax, eax
or edx, esi
or eax, edx
xor esi, esi
or ecx, esi
add eax, edi
adc ecx, dword [esp + 0x20]
mov dword [esp + 0x24], eax
movzx eax, byte [esp + 0x4f]
mov dword [esp + 0x28], ecx
movzx ecx, byte [esp + 0x4e]
shl ax, 8
or ax, cx
cmp ax, 0x2e
jbe 0x4aaf1c
mov edx, dword [0x5087d4]
push edx
push 0x342
call fcn.00466860
push eax
mov eax, dword [0x5087d4]
push eax
call fcn.00499df0
mov eax, dword [0x508768]
add esp, 0xc
cmp eax, 1
je 0x4aaf1c
cmp eax, 2
je 0x4aaf1c
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
add esp, 4
mov dword [0x5087d0], esi
lea eax, [esi + 3]
pop esi
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov eax, dword [esp + 0x24]
add eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x28]
adc ecx, dword [esp + 0x20]
xor edi, edi
mov ebx, 1
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
mov dword [0x507350], eax
mov dword [0x507354], ecx
mov dword [esp + 0x3c], edi
mov dword [0x507358], edi
mov dword [0x50735c], edi
mov dword [esp + 0x2c], ebx
cmp dword [0x5087e8], ebp
je 0x4aaf77
mov edx, dword [0x5087d0]
push edx
call fcn.004b2d6e
add esp, 4
mov dword [0x5087d0], edi
mov eax, dword [0x5087e4]
mov dword [0x5087e8], ebp
cmp ebp, eax
jae 0x4ab7b4
lea ebx, [ebx]
dec eax
cmp ebp, eax
jne 0x4aafc5
mov eax, dword [0x5087d4]
push eax
call fcn.004b17b4
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
cmp esi, edi
jne 0x4aafd8
pop esi
pop ebx
pop edi
mov eax, 4
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov ecx, dword [0x5087d4]
push ebp
push ecx
call fcn.004380b0
mov dword [esp + 0x10], eax
mov esi, eax
mov eax, dword [0x5087d0]
cmp eax, edi
jne 0x4ab077
push 0x4c8110
push esi
call fcn.004b2eb0
add esp, 8
mov dword [0x5087d0], eax
cmp eax, edi
jne 0x4ab077
lea esp, [esp]
mov edx, dword [0x5087e8]
push edx
call fcn.00438a00
cmp eax, 9
je 0x4ab811
cmp eax, 3
je 0x4ab16e
mov eax, dword [0x5087e4]
lea ecx, [eax - 1]
mov eax, dword [0x5087e8]
cmp eax, ecx
jne 0x4ab04c
mov edx, dword [0x5087d4]
push edx
call fcn.004b17b4
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
je 0x4aafad
jmp 0x4ab05c
push eax
mov eax, dword [0x507344]
push eax
call fcn.004380b0
mov dword [esp + 0x10], eax
push 0x4c8110
push eax
call fcn.004b2eb0
add esp, 8
mov dword [0x5087d0], eax
cmp eax, edi
je 0x4ab000
mov esi, dword [esp + 0x10]
cmp dword [esp + 0x38], edi
jne 0x4ab0ac
cmp dword [esp + 0x2c], edi
je 0x4ab0b0
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push edi
push ecx
push edx
push eax
call fcn.004b2f63
add esp, 0x10
test eax, eax
mov eax, dword [0x5087d0]
jne 0x4ab839
mov dword [esp + 0x14], 0x508868
mov dword [esp + 0x2c], edi
mov esi, eax
call fcn.004a9ff0
test eax, eax
je 0x4ab768
mov ebp, dword [esp + 0x14]
mov eax, dword [0x5087d0]
push eax
call fcn.004b32fe
mov dword [0x5087f4], edx
add esp, 4
mov ecx, 0x4ce530
mov edx, 0x54a6c4
mov dword [0x5087f0], eax
call fcn.004aa120
test eax, eax
jne 0x4ab768
mov ecx, 0x4ce518
mov edx, 0x54a6c4
call fcn.004aa120
test eax, eax
jne 0x4ab768
mov ecx, 0x4ce528
mov edx, 0x54a6c4
call fcn.004aa120
test eax, eax
jne 0x4ab177
cmp dword [0x508768], ebx
je 0x4ab755
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
add esp, 4
push 0x2ad
mov dword [0x5087d0], edi
call fcn.00466860
mov edx, dword [esp + 0x10]
push eax
push edx
call fcn.00499df0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov dword [esp + 0x38], ebx
jmp 0x4ab799
mov ecx, dword [0x5087d0]
push ecx
push ebx
lea edx, [esp + 0x4c]
push 0x2a
push edx
call fcn.004b2cda
add esp, 0x10
cmp eax, ebx
je 0x4ab1e8
cmp dword [0x508768], ebx
je 0x4ab755
mov eax, dword [0x5087d0]
push eax
call fcn.004b2822
add esp, 4
mov esi, eax
neg esi
sbb esi, esi
and esi, 9
add esi, 2
cmp esi, 0xb
jne 0x4ab8a7
mov eax, dword [esp + 0x10]
push eax
push edi
push eax
push edi
mov ecx, 0x5072f4
call fcn.0042d090
mov eax, esi
pop esi
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
push 0x80
call fcn.004b00f7
mov esi, eax
add esp, 4
cmp esi, edi
je 0x4aafad
movzx eax, byte [esp + 0x45]
movzx ecx, byte [esp + 0x44]
shl ax, 8
or ax, cx
mov word [esi], ax
movzx edx, byte [esp + 0x47]
movzx eax, byte [esp + 0x46]
shl dx, 8
or dx, ax
mov word [esi + 2], dx
movzx ecx, byte [esp + 0x49]
movzx edx, byte [esp + 0x48]
shl cx, 8
or cx, dx
mov word [esi + 4], cx
movzx eax, byte [esp + 0x4b]
movzx ecx, byte [esp + 0x4a]
shl ax, 8
or ax, cx
mov word [esi + 6], ax
movzx edx, byte [esp + 0x4f]
movzx ecx, byte [esp + 0x4e]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x4d]
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x4c]
shl eax, 0x10
or eax, ecx
or eax, edx
mov dword [esi + 8], eax
movzx eax, byte [esp + 0x53]
movzx edx, byte [esp + 0x52]
shl ax, 8
movzx ecx, ax
movzx eax, byte [esp + 0x51]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x50]
shl ecx, 0x10
or ecx, edx
or ecx, eax
mov dword [esi + 0xc], ecx
movzx ecx, byte [esp + 0x57]
movzx eax, byte [esp + 0x56]
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x55]
or edx, eax
shl cx, 8
shl edx, 0x10
movzx eax, cx
movzx ecx, byte [esp + 0x54]
or edx, eax
or edx, ecx
mov dword [esi + 0x10], edx
mov dword [esi + 0x14], edi
movzx edx, byte [esp + 0x5b]
movzx ecx, byte [esp + 0x5a]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x59]
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x58]
shl eax, 0x10
or eax, ecx
or eax, edx
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], edi
movzx eax, byte [esp + 0x5d]
movzx ecx, byte [esp + 0x5c]
shl ax, 8
or ax, cx
mov word [esi + 0x20], ax
movzx edx, byte [esp + 0x5f]
shl dx, 8
movzx eax, byte [esp + 0x5e]
or dx, ax
mov word [esi + 0x24], dx
movzx ecx, byte [esp + 0x61]
movzx edx, byte [esp + 0x60]
shl cx, 8
or cx, dx
mov word [esi + 0x26], cx
movzx eax, byte [esp + 0x63]
movzx edx, byte [esp + 0x62]
shl ax, 8
movzx ecx, ax
or ecx, edx
mov dword [esi + 0x28], ecx
movzx eax, byte [esp + 0x65]
movzx ecx, byte [esp + 0x64]
shl ax, 8
or ax, cx
mov word [esi + 0x2c], ax
movzx edx, byte [esp + 0x69]
movzx ecx, byte [esp + 0x68]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x67]
or eax, ecx
shl eax, 0x10
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x66]
or eax, ecx
or eax, edx
mov dword [esi + 0x38], eax
movzx eax, byte [esp + 0x6d]
movzx edx, byte [esp + 0x6c]
shl ax, 8
movzx ecx, ax
movzx eax, byte [esp + 0x6b]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x6a]
shl ecx, 0x10
or ecx, edx
or ecx, eax
movzx eax, word [esi + 0x20]
mov dword [esi + 0x30], ecx
mov dword [esi + 0x34], edi
mov dword [esi + 0x48], edi
mov dword [esi + 0x44], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x50], edi
mov dword [esi + 0x54], edi
mov dword [esi + 0x5c], edi
mov dword [esi + 0x58], edi
cmp ax, di
jne 0x4ab439
cmp dword [0x508768], ebx
je 0x4ab755
push 0x2ad
call fcn.00466860
mov ecx, dword [esp + 0x10]
push eax
push ecx
call fcn.00499df0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
movzx ecx, ax
add ecx, ebx
push ecx
call fcn.004b00f7
add esp, 4
mov dword [esi + 0x4c], eax
cmp eax, edi
je 0x4aafad
movzx eax, word [esi + 0x24]
cmp ax, di
je 0x4ab472
movzx edx, ax
push edx
call fcn.004b00f7
add esp, 4
mov dword [esi + 0x44], eax
cmp eax, edi
je 0x4aafad
movzx eax, word [esi + 0x26]
cmp ax, di
je 0x4ab492
movzx eax, ax
push eax
call fcn.004b00f7
add esp, 4
mov dword [esi + 0x48], eax
cmp eax, edi
je 0x4aafad
mov ecx, dword [0x5087d0]
movzx edx, word [esi + 0x20]
mov eax, dword [esi + 0x4c]
push ecx
push ebx
push edx
push eax
call fcn.004b2cda
add esp, 0x10
cmp eax, ebx
jne 0x4ab749
movzx eax, word [esi + 0x24]
cmp ax, di
je 0x4ab4dc
mov ecx, dword [0x5087d0]
push ecx
movzx edx, ax
mov eax, dword [esi + 0x44]
push ebx
push edx
push eax
call fcn.004b2cda
add esp, 0x10
cmp eax, ebx
jne 0x4ab749
movzx eax, word [esi + 0x26]
cmp ax, di
je 0x4ab505
mov ecx, dword [0x5087d0]
push ecx
movzx edx, ax
mov eax, dword [esi + 0x48]
push ebx
push edx
push eax
call fcn.004b2cda
add esp, 0x10
cmp eax, ebx
jne 0x4ab749
movzx ecx, word [esi + 0x20]
mov edx, dword [esi + 0x4c]
mov eax, 0x800
mov byte [ecx + edx], 0
test word [esi + 4], ax
jne 0x4ab541
push esi
call fcn.004a90d0
cmp dword [esi + 0x58], edi
jne 0x4ab541
movzx ecx, byte [esi + 1]
mov edx, dword [esi + 0x4c]
push ecx
push edx
call fcn.004a8bd0
test al, al
je 0x4ab541
mov eax, 0x800
or word [esi + 4], ax
mov ecx, 0x800
test word [esi + 4], cx
je 0x4ab57e
mov edx, dword [esi + 0x4c]
push edx
call fcn.004c1387
add esp, 4
mov dword [esi + 0x58], eax
test eax, eax
je 0x4aafad
push eax
call fcn.00438760
mov edi, eax
test edi, edi
je 0x4ab57e
mov eax, dword [esi + 0x4c]
push eax
call fcn.004b01c1
add esp, 4
mov dword [esi + 0x4c], edi
movzx eax, word [esi]
movzx ecx, al
shr ax, 8
xor edi, edi
cmp ax, di
jne 0x4ab5a7
test dword [esi + 0x38], 0xffff0000
je 0x4ab5b8
cmp ecx, 0x19
je 0x4ab5a7
cmp ecx, 0x1a
je 0x4ab5a7
cmp ecx, 0x28
jne 0x4ab5b8
cmp ax, 6
je 0x4ab5b8
cmp ax, 0xb
jne 0x4ab5c3
cmp ecx, 0x32
jne 0x4ab5c3
mov eax, dword [esi + 0x4c]
push eax
push eax
call dword [sym.imp.USER32.dll_OemToCharA]
movzx eax, word [esi]
movzx ecx, al
shr ax, 8
cmp ax, di
jne 0x4ab5ea
test dword [esi + 0x38], 0xffff0000
je 0x4ab5fb
cmp ecx, 0x19
je 0x4ab5ea
cmp ecx, 0x1a
je 0x4ab5ea
cmp ecx, 0x28
jne 0x4ab5fb
cmp ax, 6
je 0x4ab5fb
cmp ax, 0xb
jne 0x4ab606
cmp ecx, 0x32
jne 0x4ab606
mov eax, dword [esi + 0x48]
push eax
push eax
call dword [sym.imp.USER32.dll_OemToCharA]
call fcn.004a9310
mov edx, 1
cmp dword [0x508768], edx
jne 0x4ab620
cmp dword [0x5087e4], edx
je 0x4ab628
cmp dword [0x508770], edi
je 0x4ab636
mov ecx, dword [esp + 0x1c]
add dword [esi + 0x30], ecx
mov eax, dword [esp + 0x20]
adc dword [esi + 0x34], eax
cmp dword [esi + 0x28], edi
jne 0x4ab67c
cmp dword [esp + 0x3c], edi
je 0x4ab659
mov ecx, dword [esi + 0x34]
cmp ecx, dword [0x50735c]
ja 0x4ab67c
jb 0x4ab659
mov eax, dword [esi + 0x30]
cmp eax, dword [0x507358]
jae 0x4ab67c
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x30]
cmp eax, dword [esp + 0x28]
ja 0x4ab67c
jb 0x4ab66d
cmp ecx, dword [esp + 0x24]
jae 0x4ab67c
mov dword [0x507358], ecx
mov dword [0x50735c], eax
mov dword [esp + 0x3c], edx
add dword [0x507340], edx
mov ecx, dword [esi + 0x4c]
push ecx
mov dword [esi + 0x6c], edi
mov dword [esi + 0x70], edi
call fcn.00481d90
mov dword [esi + 0x50], eax
cmp eax, edi
je 0x4aafad
push eax
call fcn.004c1387
add esp, 4
mov dword [esi + 0x3c], eax
cmp eax, edi
je 0x4aafad
mov edx, dword [esi + 0x4c]
push edx
call fcn.004c1387
add esp, 4
mov dword [esi + 0x54], eax
cmp eax, edi
jne 0x4ab6ca
push 4
call fcn.004a68d0
mov eax, dword [esi + 0x58]
mov dword [esi + 0x60], edi
mov dword [esi + 0x64], edi
mov dword [esi + 0x68], edi
cmp eax, edi
je 0x4ab717
push eax
call fcn.00438760
cmp eax, edi
jne 0x4ab6f8
mov eax, dword [esi + 0x4c]
push eax
call fcn.004c1387
add esp, 4
cmp eax, edi
je 0x4aafad
push eax
call fcn.004c1387
add esp, 4
mov dword [esi + 0x5c], eax
cmp eax, edi
je 0x4aafad
mov ecx, dword [esi + 0x58]
push ecx
call fcn.00481a80
jmp 0x4ab720
mov edx, dword [esi + 0x4c]
push edx
call fcn.00481a10
push eax
mov dword [esi + 0x64], eax
call fcn.00481de0
mov dword [esi + 0x68], eax
cmp eax, edi
je 0x4aafad
lea eax, [esi + 0x78]
mov dword [ebp], esi
mov dword [eax], edi
mov ebp, eax
xor edi, edi
mov dword [esp + 0x14], ebp
lea ebx, [edi + 1]
jmp 0x4ab755
cmp dword [0x508768], ebx
jne 0x4ab875
mov esi, dword [0x5087d0]
call fcn.004a9ff0
test eax, eax
jne 0x4ab0c3
mov eax, dword [0x5087d0]
push eax
call fcn.004b2d6e
mov ecx, dword [esp + 0x14]
push ecx
mov dword [0x5087d0], edi
call fcn.004b01c1
add esp, 8
mov ecx, 0x4ce528
mov edx, 0x54a6c4
call fcn.004aa120
test eax, eax
je 0x4ab7b4
mov ebp, dword [0x5087e8]
mov eax, dword [0x5087e4]
add ebp, ebx
mov dword [0x5087e8], ebp
cmp ebp, eax
jb 0x4aaf90
mov eax, dword [0x507340]
mov ecx, dword [esp + 0x30]
xor edx, edx
cmp eax, ecx
jne 0x4ab7cd
cmp edx, dword [esp + 0x34]
je 0x4aa52c
movzx eax, ax
xor edx, edx
cmp eax, ecx
jne 0x4ab7e0
cmp edx, dword [esp + 0x34]
je 0x4aa52c
push 0x2ad
call fcn.00466860
push eax
mov eax, dword [0x507344]
push eax
call fcn.00499df0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov edx, dword [esp + 0x10]
push edx
push edi
mov ecx, 0x5072f4
call fcn.0042d280
pop esi
pop ebx
pop edi
mov eax, 9
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
push eax
call fcn.004b2d6e
add esp, 4
push esi
push 0x204
mov dword [0x5087d0], edi
call fcn.00466860
push eax
push edi
call fcn.00499df0
add esp, 0xc
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov edx, dword [0x5087d0]
push edx
call fcn.004b2822
add esp, 4
mov esi, eax
neg esi
sbb esi, esi
and esi, 9
add esi, 2
cmp esi, 0xb
jne 0x4ab8a7
mov eax, dword [esp + 0x10]
push eax
push edi
push eax
push edi
mov ecx, 0x5072f4
call fcn.0042d090
mov ecx, dword [esp + 0x78]
mov eax, esi
pop esi
pop ebx
pop edi
pop ebp
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret