Function at 0x4aa740
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x5c]
cmp eax, dword [ecx + 8]
jbe 0x4ab477
sub esp, 0xdc
mov edx, dword [esp + 0xe4]
test edx, edx
sete bl
mov ebp, dword [esp + 0xe8]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4aac1e
mov ecx, dword [esp + 0xec]
test ecx, ecx
jg 0x4aa866
xor ebx, ebx
sub ebx, edx
and ebx, edx
mov eax, 0xb4ca8b09
mov esi, edx
mul ebx
xor edi, edi
sub edi, esi
mov edi, 0
sbb edi, ebp
mov eax, ecx
neg ecx
and edi, ebp
imul ebx, ebx, 0x3f79d71
add edx, ebx
imul ebx, edi, 0xb4ca8b09
add edx, ebx
shr edx, 0x1a
lea ebx, [0x954900]
movzx edx, byte [ebx + edx]
cmp edx, ecx
jl 0x4aa86a
mov edx, dword [esp + 0xe0]
mov dword [esp], edx
cmp ecx, 0x20
sbb edx, edx
mov ebx, ebp
shr ebp, cl
and ebp, edx
mov dword [esp + 0xb4], ebp
mov dword [esp + 8], ebp
add eax, 0x20
neg eax
cmp eax, 0x20
sbb edi, edi
mov dword [esp + 0xb0], edi
lea ebp, [ecx - 0x20]
xchg ebp, ebx
neg ebx
xchg ebp, ebx
cmp ebp, 0x20
sbb edi, edi
shr esi, cl
and esi, edx
mov ecx, ebp
mov edx, ebx
shl ebx, cl
and ebx, edi
or ebx, esi
mov ecx, eax
shr edx, cl
mov eax, dword [esp + 0xb0]
and edx, eax
or edx, ebx
mov dword [esp + 4], edx
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], edx
mov word [esp + 0x1c], 1
call fcn.004ab490
add esp, 0xdc
ret
mov eax, ecx
mov esi, edx
mov edx, dword [esp + 0xf0]
mov ebx, dword [edx]
lea ecx, [ebx - 0x20]
mov edi, ecx
neg ecx
cmp ecx, 0x20
sbb eax, eax
cmp edi, 0x20
sbb edx, edx
mov esi, 1
shr esi, cl
mov ecx, edi
mov edi, 1
shl edi, cl
and edi, edx
and esi, eax
or esi, edi
cmp ebp, esi
setne al
cmp ebx, 0x20
sbb edx, edx
mov ecx, ebx
mov esi, 1
shl esi, cl
and edx, esi
mov esi, dword [esp + 0xe4]
cmp esi, edx
setne dl
or edx, eax
test dl, dl
je 0x4aa8d1
mov eax, dword [esp + 0xf0]
mov edx, dword [esp + 0xec]
jmp 0x4aa8eb
mov eax, dword [esp + 0xf0]
mov edx, dword [eax + 8]
sub edx, ecx
lea ecx, [edx + 1]
mov edx, dword [esp + 0xec]
cmp edx, ecx
jne 0x4aa938
mov ecx, esi
shl esi, 1
mov dword [esp + 0xb4], esi
mov ebx, esi
add esi, 0xffffffff
mov edi, ebx
add ebx, 1
shl ebp, 1
shr ecx, 0x1f
or ecx, ebp
mov ebp, edi
add edi, 0xffffffff
mov edi, ecx
adc ecx, 0xffffffff
add ebp, 1
mov ebp, edi
adc edi, 0
dec edx
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xd4]
jmp 0x4aa99d
mov ebx, esi
shl ebx, 2
mov dword [esp + 0xb4], ebx
mov ecx, ebx
add ebx, 0xffffffff
mov edi, ecx
add ecx, 2
shl ebp, 2
shr esi, 0x1e
or esi, ebp
mov ebp, edi
add edi, 0xffffffff
mov edi, esi
adc esi, 0xffffffff
add ebp, 2
mov ebp, edi
adc edi, 0
add edx, 0xfffffffe
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0xc4], eax
mov eax, ebx
mov ebx, ecx
mov ecx, esi
mov esi, eax
mov eax, dword [esp + 0xcc]
test edx, edx
je 0x4aabe2
mov dword [esp + 0x70], edx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x4c], esi
neg edx
imul edx, edx, 0x13441
sar edx, 0x12
mov dword [esp + 0x24], edx
inc edx
mov dword [esp + 0x30], edx
lea edi, [0x950310]
cmp eax, edi
jne 0x4aaa83
mov dword [esp], esi
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004ab990
mov eax, dword [esp + 0xc]
mov dword [esp + 0x80], eax
movzx ecx, byte [esp + 0x14]
mov byte [esp + 0x21], cl
mov edx, dword [esp + 0x98]
mov dword [esp], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x30]
mov dword [esp + 8], ebp
call fcn.004ab990
mov eax, dword [esp + 0xc]
mov dword [esp + 0x8c], eax
movzx ecx, byte [esp + 0x14]
mov byte [esp + 0x22], cl
mov edx, dword [esp + 0x28]
mov dword [esp], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 8], ebx
call fcn.004ab990
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
movzx edx, byte [esp + 0x14]
xor ebx, ebx
mov ebp, dword [esp + 0x80]
xor esi, esi
mov edi, dword [esp + 0x8c]
xor ebx, ebx
mov dword [esp + 0x7c], ebx
jmp 0x4aab58
mov dword [esp + 4], ecx
mov dword [esp], esi
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
call fcn.004abaa0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0x21], al
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x88], edx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x98]
mov dword [esp], ebp
mov esi, dword [esp + 0x70]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x30]
mov dword [esp + 0xc], edi
call fcn.004abaa0
movzx eax, byte [esp + 0x1c]
mov byte [esp + 0x22], al
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x94], edx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x28]
mov dword [esp], ebp
mov esi, dword [esp + 0x70]
mov dword [esp + 8], esi
mov esi, dword [esp + 0x30]
mov dword [esp + 0xc], esi
call fcn.004abaa0
mov ecx, dword [esp + 0x18]
movzx edx, byte [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x94]
mov edi, dword [esp + 0x90]
mov dword [esp + 0x7c], ebx
mov ebx, dword [esp + 0x88]
test ecx, ecx
jge 0x4ab45e
mov dword [esp + 0x90], edi
mov edi, dword [esp + 0x30]
cmp edi, 0x37
jle 0x4aab80
xor edx, edx
xor edx, edx
mov byte [esp + 0x22], dl
xor edx, edx
mov byte [esp + 0x21], dl
xor edx, edx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x78], eax
mov dword [esp + 0x94], esi
mov dword [esp + 0x84], ebp
mov esi, dword [esp + 0x24]
add esi, 0x19
cmp esi, 0x18
jae 0x4aabd6
mov byte [esp + 0x20], dl
mov esi, dword [esp + 0x4c]
test esi, esi
sete dl
mov ebp, dword [esp + 0x50]
test ebp, ebp
sete bl
xchg edi, ebx
neg ebx
xchg edi, ebx
mov dword [esp + 0x54], edi
and ebx, edx
test bl, bl
jne 0x4ab1b7
xor edx, edx
jmp 0x4ab0d3
movzx esi, byte [esp + 0x22]
movzx edi, byte [esp + 0x21]
jmp 0x4aac3a
mov eax, dword [esp + 0xe0]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp + 0x10], ebp
mov eax, dword [esp + 0x98]
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], ebx
mov word [esp + 0x1c], 1
call fcn.004ab490
add esp, 0xdc
ret
mov eax, dword [esp + 0xe0]
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
add esp, 0xdc
ret
mov dword [esp + 0x74], ecx
mov byte [esp + 0x20], dl
xchg edi, eax
mov byte [esp + 0x21], al
xchg edi, eax
xchg esi, eax
mov byte [esp + 0x22], al
xchg esi, eax
neg ecx
mov dword [esp + 0xac], ecx
cmp ecx, 0x20
sbb edi, edi
mov dword [esp + 0xb4], edi
mov esi, 1
shl esi, cl
and esi, edi
mov dword [esp + 0xb0], esi
add esi, 0xffffffff
mov dword [esp + 0x6c], esi
mov edx, dword [esp + 0x74]
add edx, 0x20
neg edx
mov dword [esp + 0xa8], edx
cmp edx, 0x20
sbb eax, eax
mov dword [esp + 0xa4], eax
lea esi, [ecx - 0x20]
xchg esi, ebx
neg ebx
xchg esi, ebx
cmp esi, 0x20
sbb edi, edi
mov dword [esp + 0xa0], edi
mov ecx, esi
mov ebp, 1
shr ebp, cl
and ebp, edi
mov ecx, edx
mov edi, 1
shl edi, cl
and edi, eax
or edi, ebp
mov ebp, dword [esp + 0xb0]
add ebp, 0xffffffff
adc edi, 0xffffffff
mov dword [esp + 0xc0], edi
mov ebp, ebx
shr ebx, cl
and ebx, eax
mov ecx, esi
shl ebp, cl
mov edi, dword [esp + 0xa0]
and ebp, edi
mov ecx, dword [esp + 0xac]
mov eax, dword [esp + 0x84]
shr eax, cl
mov edx, dword [esp + 0xb4]
and eax, edx
or eax, ebp
or ebx, eax
mov dword [esp + 0xb4], ebx
mov eax, dword [esp + 0x88]
shr eax, cl
and eax, edx
mov dword [esp + 0xb0], eax
mov ecx, esi
mov eax, dword [esp + 0x94]
shl eax, cl
and eax, edi
mov ecx, dword [esp + 0xac]
mov ebx, dword [esp + 0x90]
shr ebx, cl
and ebx, edx
mov ecx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x94]
shr ebp, cl
mov edi, dword [esp + 0xa4]
and ebp, edi
or ebx, eax
or ebp, ebx
mov dword [esp + 0xa8], ebp
mov eax, ecx
mov ecx, dword [esp + 0xac]
mov ebx, dword [esp + 0x94]
shr ebx, cl
and ebx, edx
mov dword [esp + 0xa4], ebx
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0x94]
and ebp, ebx
mov dword [esp + 0x68], ebp
mov ebp, dword [esp + 0x6c]
mov ebx, dword [esp + 0x90]
and ebx, ebp
mov dword [esp + 0x64], ebx
mov ecx, eax
mov ebx, dword [esp + 0x7c]
mov eax, ebx
shr ebx, cl
and ebx, edi
mov ecx, esi
mov esi, eax
shl eax, cl
mov edi, dword [esp + 0xa0]
and eax, edi
mov ecx, dword [esp + 0xac]
mov edi, dword [esp + 0x78]
shr edi, cl
and edi, edx
or edi, eax
or ebx, edi
mov eax, esi
shr esi, cl
and esi, edx
mov edx, dword [esp + 0x78]
and edx, ebp
mov edi, dword [esp + 0xc0]
and eax, edi
mov ecx, ebp
movzx ebp, byte [esp + 0x20]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4aae37
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xb8], esi
test eax, eax
xchg edi, ebx
seta bl
xchg edi, ebx
xchg esi, ebx
sete bl
xchg esi, ebx
test edx, edx
seta bl
and esi, ebx
or esi, edi
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0xc0]
mov ebp, esi
mov esi, dword [esp + 0xb8]
jmp 0x4aae3c
mov ebp, 1
je 0x4aae66
test eax, eax
sete al
test edx, edx
sete dl
and edx, eax
test dl, dl
je 0x4aae66
mov eax, dword [esp + 0xe4]
test eax, 1
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, 1
jmp 0x4aae6d
mov eax, dword [esp + 0xe4]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4aae79
add ebx, 0xffffffff
adc esi, 0xffffffff
mov dword [esp + 0x7c], esi
mov dword [esp + 0x78], ebx
movzx edx, byte [esp + 0x22]
test dl, dl
je 0x4aaf39
mov ebp, dword [esp + 0x74]
inc ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
lea ebx, [ebp - 0x20]
mov dword [esp + 0xa0], ebx
cmp ebx, 0x20
sbb esi, esi
neg ebx
cmp ebx, 0x20
sbb eax, eax
mov ecx, dword [esp + 0xa0]
mov edx, 1
shl edx, cl
mov ecx, ebx
mov ebx, 1
shr ebx, cl
and ebx, eax
and edx, esi
or edx, ebx
mov eax, dword [esp + 0x68]
cmp edx, eax
sete dl
setb bl
cmp ebp, 0x20
sbb esi, esi
mov ecx, ebp
mov ebp, 1
shl ebp, cl
and ebp, esi
mov esi, dword [esp + 0x64]
cmp ebp, esi
mov ecx, eax
setb al
and eax, edx
or eax, ebx
test al, al
je 0x4aaf0c
mov eax, dword [esp + 0xa8]
mov edx, 1
jmp 0x4aafca
cmp ebp, esi
sete al
and eax, edx
test al, al
je 0x4aaf2b
mov eax, dword [esp + 0xa8]
test eax, 1
setne dl
jmp 0x4aafca
mov eax, dword [esp + 0xa8]
xor edx, edx
jmp 0x4aafca
mov ebp, dword [esp + 0x74]
inc ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
cmp ebp, 0x20
sbb ebx, ebx
lea esi, [ebp - 0x20]
mov dword [esp + 0xa0], esi
cmp esi, 0x20
sbb eax, eax
mov dword [esp + 0xbc], eax
xchg esi, ebx
neg ebx
xchg esi, ebx
cmp esi, 0x20
sbb edi, edi
mov ecx, ebp
mov eax, dword [esp + 0x68]
shr eax, cl
test ebx, eax
sete al
mov byte [esp + 0x23], al
mov eax, dword [esp + 0x64]
mov ebp, eax
shr eax, cl
and eax, ebx
mov ecx, esi
mov ebx, dword [esp + 0x68]
mov esi, ebx
shl ebx, cl
and ebx, edi
or ebx, eax
mov ecx, dword [esp + 0xa0]
mov eax, esi
shr esi, cl
mov edi, dword [esp + 0xbc]
and esi, edi
or esi, ebx
cmp esi, 1
sete bl
movzx esi, byte [esp + 0x23]
and ebx, esi
mov ecx, eax
mov esi, ebp
mov edi, dword [esp + 0xc0]
mov edx, ebx
mov eax, dword [esp + 0xa8]
movzx ebx, byte [esp + 0x21]
test bl, bl
je 0x4ab02b
mov ebx, dword [esp + 0x88]
test edi, ebx
sete bl
mov ebp, dword [esp + 0x84]
mov edi, dword [esp + 0x6c]
test edi, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4ab02b
mov ebx, dword [esp + 0xe4]
test ebx, 1
sete bl
and ebx, 1
test bl, bl
je 0x4ab02b
movzx ebp, byte [esp + 0x22]
xchg ebp, eax
test al, al
xchg ebp, eax
mov ebx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xb0]
jmp 0x4ab048
mov ebx, dword [esp + 0xb4]
add ebx, 1
mov ebp, dword [esp + 0xb0]
adc ebp, 0
movzx edi, byte [esp + 0x22]
xchg edi, eax
test al, al
xchg edi, eax
je 0x4ab05c
test ecx, ecx
sete cl
test esi, esi
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ecx
jmp 0x4ab05e
xor esi, esi
mov ecx, dword [esp + 0xe0]
mov dword [esp], ecx
mov dword [esp + 8], ebp
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x14], eax
xchg esi, eax
mov byte [esp + 0x1c], al
xchg esi, eax
mov byte [esp + 0x1d], dl
call fcn.004ab490
mov eax, dword [esp + 0xe0]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x24]
sub ecx, edx
dec ecx
mov dword [eax + 0x10], ecx
add esp, 0xdc
ret
mov eax, ebx
mov ebx, dword [esp + 0x60]
lea edx, [ebx + 1]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0xa0]
mov ebp, eax
mov eax, dword [esp + 0x78]
cmp edx, edi
jge 0x4ab1b7
mov dword [esp + 0x60], edx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x3c], esi
mov eax, 0xcccccccd
mul ebp
shr edx, 2
mov dword [esp + 0xb4], edx
lea ebx, [edx + edx*4]
sub ebp, ebx
mov eax, 0x33333333
mul ebp
mov dword [esp + 0xb0], edx
mov dword [esp + 0xa8], eax
mov eax, 0xcccccccd
mul esi
shr edx, 2
mov eax, edx
add edx, 0
mov ebx, dword [esp + 0xa8]
add ebx, edx
lea edi, [eax + eax*4]
sub esi, edi
add ebp, esi
mov esi, eax
mov eax, 0xcccccccd
mov edi, edx
mul ebp
shr edx, 2
mov dword [esp + 0xa4], edx
mov ebp, ebx
add ebx, edx
mov dword [esp + 0xa0], ebx
mov eax, 5
mul ebx
add esi, 0
mov esi, dword [esp + 0xb4]
adc esi, 0
mov ebx, dword [esp + 0xa8]
add ebx, edi
mov ebx, dword [esp + 0xb0]
adc ebx, esi
mov esi, dword [esp + 0xa4]
add ebp, esi
adc ebx, 0
mov ebp, dword [esp + 0x3c]
cmp eax, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
lea esi, [ebx + ebx*4]
add edx, esi
mov esi, dword [esp + 0x48]
cmp esi, edx
setne dl
or edx, ebp
test dl, dl
je 0x4ab0b9
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0x54]
movzx edx, byte [esp + 0x21]
jmp 0x4ab1bc
mov edx, 1
mov byte [esp + 0x21], dl
mov ebx, dword [esp + 0x98]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x9c]
test esi, esi
sete dl
and edx, ebp
test dl, dl
jne 0x4ab2ff
xor edx, edx
jmp 0x4ab1fd
mov eax, ebp
mov ebp, dword [esp + 0x5c]
lea edx, [ebp + 1]
mov edi, dword [esp + 0x54]
mov esi, eax
mov eax, dword [esp + 0x78]
cmp edx, edi
jge 0x4ab2ff
mov dword [esp + 0x5c], edx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x44], esi
mov eax, 0xcccccccd
mul ebx
shr edx, 2
mov dword [esp + 0xb4], edx
add edx, 0
mov dword [esp + 0xb0], edx
mov eax, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xa8], edx
lea ebp, [edx + edx*4]
sub esi, ebp
mov eax, 0x33333333
mul esi
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa0], eax
mov ebp, dword [esp + 0xb0]
add eax, ebp
mov dword [esp + 0xb0], eax
mov edi, dword [esp + 0xb4]
lea edx, [edi + edi*4]
sub ebx, edx
lea edx, [ebx + esi]
mov ebx, eax
mov eax, edx
mov esi, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xb4], edx
add ebx, edx
mov eax, ebx
mov esi, 5
mul esi
add edi, 0
mov edi, dword [esp + 0xa8]
adc edi, 0
mov esi, dword [esp + 0xa0]
add esi, ebp
mov ebp, dword [esp + 0xa4]
adc ebp, edi
mov esi, dword [esp + 0xb0]
mov edi, dword [esp + 0xb4]
add esi, edi
adc ebp, 0
lea esi, [ebp + ebp*4]
add edx, esi
mov esi, dword [esp + 0x44]
cmp esi, edx
setne dl
mov esi, dword [esp + 0x38]
cmp eax, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x4ab1ea
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 0x54]
movzx edx, byte [esp + 0x22]
jmp 0x4ab304
mov edx, 1
mov byte [esp + 0x22], dl
mov ebx, dword [esp + 0x2c]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x28]
test esi, esi
sete dl
and ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4ab32a
xor edx, edx
jmp 0x4ab361
mov edx, 1
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x84]
movzx esi, byte [esp + 0x22]
movzx edi, byte [esp + 0x21]
jmp 0x4aac3a
mov eax, ebp
mov ebp, dword [esp + 0x58]
lea edx, [ebp + 1]
mov edi, dword [esp + 0x54]
mov esi, ebx
mov ebx, eax
mov eax, dword [esp + 0x78]
cmp edx, edi
jge 0x4ab32a
mov dword [esp + 0x58], edx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x34], esi
mov eax, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xb4], edx
add edx, 0
mov dword [esp + 0xb0], edx
mov eax, 0xcccccccd
mul ebx
shr edx, 2
mov dword [esp + 0xa8], edx
lea ebp, [edx + edx*4]
sub ebx, ebp
mov eax, 0x33333333
mul ebx
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa0], eax
mov ebp, dword [esp + 0xb0]
add eax, ebp
mov dword [esp + 0xb0], eax
mov edi, dword [esp + 0xb4]
lea edx, [edi + edi*4]
sub esi, edx
lea edx, [esi + ebx]
mov ebx, eax
mov eax, edx
mov esi, 0xcccccccd
mul esi
shr edx, 2
mov dword [esp + 0xb4], edx
add ebx, edx
mov eax, ebx
mov esi, 5
mul esi
add edi, 0
mov edi, dword [esp + 0xa8]
adc edi, 0
mov esi, dword [esp + 0xa0]
add esi, ebp
mov ebp, dword [esp + 0xa4]
adc ebp, edi
mov esi, dword [esp + 0xb0]
mov edi, dword [esp + 0xb4]
add esi, edi
adc ebp, 0
lea esi, [ebp + ebp*4]
add edx, esi
mov esi, dword [esp + 0x40]
cmp esi, edx
setne dl
mov esi, dword [esp + 0x34]
cmp eax, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x4ab34c
mov eax, dword [esp + 0x78]
movzx edx, byte [esp + 0x20]
jmp 0x4ab32f
lea eax, [0x6cd520]
mov dword [esp], eax
lea eax, [0x79d0e4]
mov dword [esp + 4], eax
call fcn.00437060
nop
call fcn.00461f40
jmp fcn.004aa740