Function at 0x4ade00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2c]
cmp eax, dword [ecx + 8]
jbe 0x4af65e
sub esp, 0xac
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x4aef95
mov ecx, dword [esp + 0xc4]
test ecx, ecx
je 0x4aef91
test eax, 0x200
jne 0x4ade54
lea edx, [0x6c4d98]
mov ebx, dword [esp + 0xb0]
jmp 0x4ade8c
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004b77c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, eax
mov ebx, ecx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xc4]
test ecx, 0x200
jne 0x4adea3
lea ebp, [0x6c4d98]
mov esi, dword [esp + 0xbc]
jmp 0x4adeeb
mov dword [esp + 0x74], ebx
mov dword [esp + 0x34], edx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b77c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x74]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xc4]
cmp edx, ebp
jne 0x4adf08
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
call fcn.00403790
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4adf17
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov eax, dword [0x6752b0]
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xb8]
mov dword [esp + 8], ebp
mov esi, dword [esp + 0xbc]
mov dword [esp + 0xc], esi
mov edi, dword [esp + 0xc0]
mov dword [esp + 0x10], edi
mov esi, dword [esp + 0xc4]
mov dword [esp + 0x14], esi
lea edx, [0x6752b0]
call eax
movzx eax, byte [esp + 0x18]
test al, al
je 0x4ae159
nop
mov eax, dword [esp + 0xb8]
mov ecx, eax
and eax, 0x1f
add eax, 0xffffffeb
nop
cmp eax, 1
ja 0x4adfc2
mov eax, dword [esp + 0xb0]
cmp dword [eax], 4
jne 0x4af645
mov edx, dword [eax + 4]
test edx, edx
je 0x4af645
test ecx, 0x80
je 0x4adfb7
mov edx, dword [esp + 0xb4]
mov ebx, dword [edx]
jmp 0x4adfd2
mov edx, dword [esp + 0xb4]
mov ebx, edx
jmp 0x4adfd2
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov ebx, edx
nop
mov ebp, dword [esp + 0xc4]
mov esi, ebp
and ebp, 0x1f
add ebp, 0xffffffeb
nop
cmp ebp, 1
ja 0x4ae022
mov ebp, dword [esp + 0xbc]
cmp dword [ebp], 4
jne 0x4af62d
mov edi, dword [ebp + 4]
test edi, edi
je 0x4af62d
test esi, 0x80
je 0x4ae017
mov edi, dword [esp + 0xc0]
mov ebp, dword [edi]
jmp 0x4ae02b
mov edi, dword [esp + 0xc0]
mov ebp, edi
jmp 0x4ae02b
mov edi, dword [esp + 0xc0]
mov ebp, edi
mov dword [esp + 0x78], ebx
mov dword [esp + 0x80], ebp
cmp ebp, ebx
jae 0x4ae04d
test ecx, 0x200
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x78]
jmp 0x4ae05e
test ecx, 0x200
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x80]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x7c], ebp
jne 0x4ae07f
mov dword [esp + 0x60], eax
lea eax, [0x6c4d98]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x60]
jmp 0x4ae0a8
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b77c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x30], eax
mov eax, ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebp
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], eax
lea edx, [0x62a500]
mov dword [esp], edx
mov esi, dword [esp + 0xc8]
mov dword [esp + 4], esi
lea edi, [esp + 0x9c]
mov dword [esp + 8], edi
call fcn.0040c670
mov eax, dword [esp + 0xc]
movzx eax, byte [eax]
test al, al
jne 0x4aef82
mov eax, dword [esp + 0x80]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0xa8], eax
lea eax, [0x62a500]
mov dword [esp], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 4], eax
lea ecx, [esp + 0x9c]
mov dword [esp + 8], ecx
call fcn.0040cbc0
mov eax, dword [esp + 0xc]
mov byte [eax], 1
nop
mov eax, dword [esp + 0xb8]
mov ecx, eax
and eax, 0x1f
cmp eax, 0x11
ja 0x4ae530
cmp eax, 0xc
jbe 0x4ae2a3
cmp eax, 0xe
jbe 0x4ae233
lea edx, [eax - 0xf]
cmp edx, 1
jbe 0x4ae199
cmp eax, 0x11
jne 0x4aeee0
xor eax, eax
jmp 0x4af519
cmp eax, 0xf
jne 0x4ae1b8
mov eax, dword [esp + 0xb4]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
movss xmm1, dword [eax + 4]
cvtss2sd xmm1, xmm1
jmp 0x4ae1c8
mov eax, dword [esp + 0xb4]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
nop
mov eax, dword [esp + 0xc4]
and eax, 0x1f
cmp eax, 0xf
jne 0x4ae1f2
mov eax, dword [esp + 0xc0]
movss xmm2, dword [eax]
cvtss2sd xmm2, xmm2
movss xmm3, dword [eax + 4]
cvtss2sd xmm3, xmm3
jmp 0x4ae20b
cmp eax, 0x10
jne 0x4af4cd
mov eax, dword [esp + 0xc0]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm2
sete cl
setnp al
and ecx, eax
ucomisd xmm1, xmm3
sete dl
setnp al
and edx, eax
and ecx, edx
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 0xd
jne 0x4ae249
mov eax, dword [esp + 0xb4]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x4ae254
mov eax, dword [esp + 0xb4]
movsd xmm0, qword [eax]
nop
mov eax, dword [esp + 0xc4]
and eax, 0x1f
cmp eax, 0xd
jne 0x4ae275
mov eax, dword [esp + 0xc0]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x4ae289
cmp eax, 0xe
jne 0x4af48f
mov eax, dword [esp + 0xc0]
movsd xmm1, qword [eax]
ucomisd xmm1, xmm0
sete cl
setnp al
and ecx, eax
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 1
jne 0x4ae304
mov eax, dword [esp + 0xb4]
movzx eax, byte [eax]
mov ecx, dword [esp + 0xc4]
mov edx, ecx
and ecx, 0x1f
cmp ecx, 1
je 0x4ae2ea
mov byte [esp + 0x27], al
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004b4670
movzx eax, byte [esp + 0x27]
mov ecx, dword [esp + 0xc0]
cmp byte [ecx], al
sete al
mov byte [esp + 0xcc], al
add esp, 0xac
ret
lea edx, [eax - 2]
cmp edx, 4
ja 0x4ae41b
cmp eax, 3
ja 0x4ae33b
cmp eax, 2
jne 0x4ae32a
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x4ae378
mov ecx, dword [esp + 0xb4]
movsx eax, byte [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4ae378
cmp eax, 4
jne 0x4ae351
mov ecx, dword [esp + 0xb4]
movsx eax, word [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4ae378
cmp eax, 5
jne 0x4ae366
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
mov ecx, eax
sar eax, 0x1f
jmp 0x4ae378
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
nop
mov edx, dword [esp + 0xc4]
and edx, 0x1f
mov dword [esp + 0x5c], edx
cmp edx, 3
ja 0x4ae3bb
cmp edx, 2
jne 0x4ae3a1
mov edx, dword [esp + 0xc0]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4ae401
cmp edx, 3
jne 0x4af455
mov ebx, dword [esp + 0xc0]
movsx edx, byte [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4ae401
cmp edx, 4
jne 0x4ae3d1
mov ebx, dword [esp + 0xc0]
movsx edx, word [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4ae401
cmp edx, 5
jne 0x4ae3e6
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
mov ebx, edx
sar edx, 0x1f
jmp 0x4ae401
cmp edx, 6
jne 0x4af455
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
mov ebp, edx
mov edx, ebx
mov ebx, ebp
cmp eax, edx
sete al
cmp ecx, ebx
sete cl
and ecx, eax
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 7
jb 0x4aeee0
cmp eax, 9
ja 0x4ae45c
cmp eax, 7
jne 0x4ae43b
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x4ae48c
cmp eax, 8
jne 0x4ae44e
mov ecx, dword [esp + 0xb4]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x4ae48c
mov ecx, dword [esp + 0xb4]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x4ae48c
cmp eax, 0xa
jne 0x4ae46e
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x4ae48c
cmp eax, 0xb
jne 0x4ae481
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x4ae48c
mov edx, dword [esp + 0xb4]
mov eax, dword [edx]
xor ecx, ecx
nop
mov edx, dword [esp + 0xc4]
and edx, 0x1f
mov dword [esp + 0x5c], edx
cmp edx, 9
ja 0x4ae4dc
cmp edx, 7
jne 0x4ae4b2
mov edx, dword [esp + 0xc0]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x4ae516
cmp edx, 8
jne 0x4ae4c5
mov ebx, dword [esp + 0xc0]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x4ae516
cmp edx, 9
jne 0x4af41b
mov ebx, dword [esp + 0xc0]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x4ae516
cmp edx, 0xa
jne 0x4ae4ee
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x4ae516
cmp edx, 0xb
jne 0x4ae501
mov ebx, dword [esp + 0xc0]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x4ae516
cmp edx, 0xc
jne 0x4af41b
mov ebp, dword [esp + 0xc0]
mov edx, dword [ebp]
xor ebx, ebx
cmp eax, edx
sete al
cmp ecx, ebx
sete cl
and ecx, eax
mov byte [esp + 0xcc], cl
add esp, 0xac
ret
cmp eax, 0x15
jbe 0x4ae9e3
cmp eax, 0x17
jbe 0x4ae609
cmp eax, 0x18
je 0x4ae57d
cmp eax, 0x19
jne 0x4aeee0
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b6ba0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
xor ecx, ecx
jmp 0x4af32b
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov edx, dword [esp + 0xc4]
mov ebx, edx
and edx, 0x1f
cmp edx, 0x18
jne 0x4ae5a8
mov edx, dword [esp + 0xc0]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x4ae5de
mov dword [esp + 0x68], eax
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004b76e0
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x28]
cmp edx, ecx
je 0x4ae5e6
xor eax, eax
jmp 0x4ae5fb
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00402990
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
cmp eax, 0x16
je 0x4ae8d1
mov eax, dword [esp + 0xb4]
mov edx, dword [eax]
nop
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
cmp ebx, 0x14
ja 0x4ae64b
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4ae641
test ebp, 0x200
jmp 0x4ae683
cmp ebx, 0x14
je 0x4ae65d
jmp 0x4af2e6
cmp ebx, 0x16
ja 0x4ae658
test ebp, 0x200
jmp 0x4ae683
cmp ebx, 0x17
jne 0x4ae674
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
jmp 0x4ae6b8
cmp ebx, 0x1a
jne 0x4af2e6
test ebp, 0x200
je 0x4ae690
mov esi, dword [esp + 0xc0]
xor edi, edi
jmp 0x4ae6b8
test ebp, 0x80
je 0x4ae6a3
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
jmp 0x4ae6ac
mov esi, dword [esp + 0xc0]
mov edi, esi
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
test edx, edx
setne dl
xor edx, 1
xchg edi, eax
cmp al, dl
xchg edi, eax
jne 0x4ae8c2
mov edx, dword [eax + 4]
cmp ebx, 0x17
jne 0x4ae6d7
mov ebx, dword [esi + 4]
jmp 0x4ae716
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.004b60d0
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xc0]
cmp ebx, edx
jne 0x4ae8b3
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004b7910
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b7910
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xc], eax
je 0x4ae8a4
mov eax, dword [esp + 0xb8]
test eax, 0x200
jne 0x4ae793
lea ecx, [0x6c4d98]
mov edx, dword [esp + 0xb0]
jmp 0x4ae7bd
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004b77c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [ecx + 0x28]
mov dword [esp], edx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x4ae7e3
xor eax, eax
jmp 0x4af1f5
mov eax, dword [esp + 0xb0]
cmp dword [0x8545d4], eax
jne 0x4ae800
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x4ae826
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 8], eax
call fcn.004b4710
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0xbc]
cmp dword [0x8545d4], edx
jne 0x4ae843
mov edx, dword [esp + 0xc0]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
jmp 0x4ae879
mov dword [esp + 0x2c], eax
mov dword [esp + 0x6c], ecx
mov dword [esp], edx
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 8], eax
call fcn.004b4710
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x6c]
cmp eax, edx
je 0x4ae881
xor eax, eax
jmp 0x4ae896
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.00402990
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004b7910
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b7910
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xc], eax
jne 0x4ae93b
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 8], eax
call fcn.004b5630
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b5630
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004ade00
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
cmp eax, 0x13
jne 0x4aeacc
test ecx, 0x200
jne 0x4aeabd
test ecx, 0x80
je 0x4aea0b
mov eax, dword [esp + 0xb4]
mov eax, dword [eax]
jmp 0x4aea12
mov eax, dword [esp + 0xb4]
test eax, eax
setne al
xor eax, 1
test al, al
je 0x4aeabd
nop
mov eax, dword [esp + 0xc4]
mov ecx, eax
and eax, 0x1f
mov dword [esp + 0x5c], eax
cmp eax, 0x14
ja 0x4aea52
lea edx, [eax - 0x12]
cmp edx, 1
ja 0x4aea48
test ecx, 0x200
jmp 0x4aea86
cmp eax, 0x14
je 0x4aea64
jmp 0x4af1b4
cmp eax, 0x16
ja 0x4aea5f
test ecx, 0x200
jmp 0x4aea86
cmp eax, 0x17
jne 0x4aea77
mov eax, dword [esp + 0xc0]
mov eax, dword [eax]
test eax, eax
setne al
xor eax, 1
jmp 0x4aeaaa
cmp eax, 0x1a
jne 0x4af1b4
test ecx, 0x200
jne 0x4aeabd
test ecx, 0x80
je 0x4aea9b
mov eax, dword [esp + 0xc0]
mov eax, dword [eax]
jmp 0x4aeaa2
mov eax, dword [esp + 0xc0]
test eax, eax
setne al
xor eax, 1
test al, al
je 0x4aeabd
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
cmp eax, 0x14
jne 0x4aecba
mov eax, dword [esp + 0xb4]
mov edx, dword [eax]
test edx, edx
setne dl
xor edx, 1
test dl, dl
je 0x4aeafd
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xc4]
jmp 0x4aeb9d
nop
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
cmp ebx, 0x14
ja 0x4aeb2d
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4aeb23
test ebp, 0x200
jmp 0x4aeb65
cmp ebx, 0x14
je 0x4aeb3f
jmp 0x4af17a
cmp ebx, 0x16
ja 0x4aeb3a
test ebp, 0x200
jmp 0x4aeb65
cmp ebx, 0x17
jne 0x4aeb56
mov ebx, dword [esp + 0xc0]
mov esi, dword [ebx]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
jmp 0x4aeb93
cmp ebx, 0x1a
jne 0x4af17a
test ebp, 0x200
jne 0x4aec20
test ebp, 0x80
je 0x4aeb7e
mov ebx, dword [esp + 0xc0]
mov esi, dword [ebx]
jmp 0x4aeb87
mov ebx, dword [esp + 0xc0]
mov esi, ebx
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
xor esi, 1
xchg esi, eax
test al, al
xchg esi, eax
je 0x4aec20
test byte [eax], al
nop
mov eax, ebp
and ebp, 0x1f
mov dword [esp + 0x5c], ebp
cmp ebp, 0x14
ja 0x4aebc7
lea ecx, [ebp - 0x12]
cmp ecx, 1
ja 0x4aebbd
test eax, 0x200
jmp 0x4aebf2
cmp ebp, 0x14
je 0x4aebd8
jmp 0x4af140
cmp ebp, 0x16
ja 0x4aebd3
test eax, 0x200
jmp 0x4aebf2
cmp ebp, 0x17
jne 0x4aebe4
mov eax, dword [ebx]
test eax, eax
setne al
xor eax, 1
jmp 0x4aec0d
cmp ebp, 0x1a
jne 0x4af140
test eax, 0x200
je 0x4aebf8
xor eax, eax
jmp 0x4aec0d
test eax, 0x80
je 0x4aec03
mov eax, dword [ebx]
jmp 0x4aec05
mov eax, ebx
test eax, eax
setne al
xor eax, 1
cmp al, dl
sete al
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004b5630
mov eax, dword [esp + 0xc]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b5630
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004ade00
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
cmp eax, 0x15
jne 0x4aeee0
test ecx, 0x200
je 0x4aecd6
mov eax, dword [esp + 0xb4]
xor edx, edx
jmp 0x4aecfa
test ecx, 0x80
je 0x4aece9
mov eax, dword [esp + 0xb4]
mov edx, dword [eax]
jmp 0x4aecf2
mov eax, dword [esp + 0xb4]
mov edx, eax
test edx, edx
setne dl
xor edx, 1
nop
mov ebx, dword [esp + 0xc4]
mov ebp, ebx
and ebx, 0x1f
mov dword [esp + 0x5c], ebx
cmp ebx, 0x14
ja 0x4aed2a
lea esi, [ebx - 0x12]
cmp esi, 1
ja 0x4aed20
test ebp, 0x200
jmp 0x4aed62
cmp ebx, 0x14
je 0x4aed3c
jmp 0x4af106
cmp ebx, 0x16
ja 0x4aed37
test ebp, 0x200
jmp 0x4aed62
cmp ebx, 0x17
jne 0x4aed53
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
jmp 0x4aed97
cmp ebx, 0x1a
jne 0x4af106
test ebp, 0x200
je 0x4aed6f
mov esi, dword [esp + 0xc0]
xor edi, edi
jmp 0x4aed97
test ebp, 0x80
je 0x4aed82
mov esi, dword [esp + 0xc0]
mov edi, dword [esi]
jmp 0x4aed8b
mov esi, dword [esp + 0xc0]
mov edi, esi
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
xor edi, 1
xchg edi, eax
cmp al, dl
xchg edi, eax
jne 0x4aeed1
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004b60d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
cmp ecx, 0x17
jne 0x4aedd1
mov ecx, dword [esp + 0xc0]
mov edx, dword [ecx + 4]
jmp 0x4aee09
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
call fcn.004b60d0
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xc0]
cmp edx, eax
jne 0x4aeec2
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.004b7910
mov eax, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xbc]
mov dword [esp], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
call fcn.004b7910
mov eax, dword [esp + 0x98]
cmp dword [esp + 0xc], eax
je 0x4aeeb3
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 8], edx
call fcn.004b64f0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x4aefb7
mov dword [esp + 0x58], eax
xor edx, edx
jmp 0x4aefd4
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 0
call fcn.004b5ee0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
mov edx, dword [esp + 0xc0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov byte [esp + 0xc], 0
call fcn.004b5ee0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x90]
cmp dword [esp + 0x10], ecx
je 0x4aef58
xor eax, eax
jmp 0x4aef74
mov dword [esp], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004036b0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
test eax, eax
jmp 0x4aef9c
mov ecx, dword [esp + 0xc4]
setne al
test ecx, ecx
setne cl
cmp cl, al
sete al
mov byte [esp + 0xcc], al
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
mov ebx, dword [esp + 0x8c]
add ebx, 0xc
mov ecx, ebx
mov edx, eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x54], edx
mov eax, dword [ecx + 4]
mov dword [esp + 0x98], eax
mov ebx, dword [ecx + 8]
mov dword [esp + 0x5c], ebx
mov ebp, dword [ecx]
mov dword [esp + 0x94], ebp
mov esi, dword [esp + 0xb0]
mov dword [esp], esi
mov edi, dword [esp + 0xb4]
mov dword [esp + 4], edi
mov edi, dword [esp + 0xb8]
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
call fcn.004b6290
mov eax, dword [esp + 0x18]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x94]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x98]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x14], edi
call fcn.004b6290
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x50]
test ebx, ebx
je 0x4af0f7
test ecx, ecx
je 0x4af0f7
mov ebp, dword [esp + 0x88]
mov dword [esp], ebp
mov ebp, dword [esp + 0x84]
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004ade00
movzx eax, byte [esp + 0x1c]
test al, al
je 0x4af0f7
mov eax, dword [esp + 0x54]
inc eax
mov ecx, dword [esp + 0x58]
cmp ecx, eax
jg 0x4aefc6
jmp 0x4aefb7
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
lea eax, [0x637580]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6604b8]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x62edc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004369c0
lea eax, [0x637580]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6604b8]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x62edc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004369c0
lea eax, [0x637580]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6604b8]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x62edc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004369c0
lea eax, [0x637580]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6604b8]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x62edc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004369c0
mov ecx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0xb4]
cmp dword [ecx + 4], eax
jle 0x4af2d7
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004b5d30
mov eax, dword [esp + 0x10]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x48]
mov dword [esp + 0xc], edi
call fcn.004b5d30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004ade00
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4af1ee
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
lea eax, [0x637580]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6604b8]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x62edc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004369c0
mov edx, dword [esp + 0x44]
lea ecx, [edx + 1]
mov eax, dword [esp + 0x40]
cmp ecx, eax
jge 0x4af40c
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
call fcn.004b57e0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x44]
mov dword [esp + 0xc], edi
call fcn.004b57e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004ade00
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4af320
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
lea eax, [0x637580]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x65fac4]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x62edc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004369c0
lea eax, [0x637580]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x65f26d]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x62edc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004369c0
mov dword [esp + 0x5c], eax
lea eax, [0x637580]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x660492]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x62edc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004369c0
mov dword [esp + 0x5c], eax
lea eax, [0x637580]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x6615c3]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
lea ecx, [0x62edc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004369c0
mov edx, dword [esp + 0x4c]
lea eax, [edx + 1]
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x4c], eax
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004b60d0
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0xc], eax
jle 0x4af61e
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004b5d30
mov eax, dword [esp + 0x10]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0xc4]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x4c]
mov dword [esp + 0xc], edi
call fcn.004b5d30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x18], eax
call fcn.004ade00
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x4af50b
mov byte [esp + 0xcc], 0
add esp, 0xac
ret
mov byte [esp + 0xcc], 1
add esp, 0xac
ret
lea eax, [0x6282a0]
mov dword [esp], eax
lea eax, [0x6c32f8]
mov dword [esp + 4], eax
call fcn.004369c0
lea eax, [0x6282a0]
mov dword [esp], eax
lea eax, [0x6c32f8]
mov dword [esp + 4], eax
call fcn.004369c0
nop
call fcn.004612b0
jmp fcn.004ade00