Function at 0x4aa190
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x6c
mov eax, dword [0x4d98f0]
xor eax, esp
mov dword [esp + 0x68], eax
mov eax, dword [0x5087d4]
push ebp
xor ebp, ebp
push 0x4c8110
push eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x34], ebp
call fcn.004b2eb0
add esp, 8
mov dword [0x5087d0], eax
cmp eax, ebp
jne 0x4aa1ee
mov ecx, dword [0x5087d4]
push ecx
push ebp
mov ecx, 0x5072f4
call fcn.0042d280
lea eax, [ebp + 0x12]
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
push 2
push 0xffffffffffffffff
push 0xfffe0000
push eax
call fcn.004b2f63
add esp, 0x10
test eax, eax
jne 0x4aa21a
mov edx, dword [0x5087d0]
push edx
call fcn.004b32fe
and eax, edx
add esp, 4
cmp eax, 0xffffffff
jne 0x4aa274
mov eax, dword [0x5087d0]
push ebp
push ebp
push ebp
push eax
call fcn.004b2f63
add esp, 0x10
test eax, eax
je 0x4aa274
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
mov edx, dword [0x5087d4]
add esp, 4
push edx
push 0x204
mov dword [0x5087d0], ebp
call fcn.00466860
push eax
push ebp
call fcn.00499dd0
add esp, 0xc
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov eax, dword [0x5087d0]
push edi
mov edi, 0x4ce530
call fcn.004aa090
test eax, eax
jne 0x4aa2cc
mov eax, dword [0x5087d0]
push eax
call fcn.004b2d6e
add esp, 4
push 0x2ad
mov dword [0x5087d0], ebp
call fcn.00466860
mov ecx, dword [0x5087d4]
push eax
push ecx
call fcn.00499dd0
add esp, 8
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov edx, dword [0x5087d0]
push ebx
push esi
push edx
call fcn.004b32fe
mov esi, eax
mov eax, dword [0x5087d0]
mov ebx, edx
add esp, 4
mov edi, 0x4ce530
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ebx
call fcn.004aa090
test eax, eax
je 0x4aa32d
lea esp, [esp]
mov eax, dword [0x5087d0]
push eax
call fcn.004b32fe
mov esi, eax
mov eax, dword [0x5087d0]
mov ebx, edx
add esp, 4
mov edi, 0x4ce530
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ebx
call fcn.004aa090
test eax, eax
jne 0x4aa300
mov ecx, dword [0x5087d0]
push ebp
push ebx
push esi
push ecx
call fcn.004b2f63
add esp, 0x10
test eax, eax
je 0x4aa38a
mov edx, dword [0x5087d0]
push edx
call fcn.004b2d6e
mov eax, dword [0x5087d4]
add esp, 4
push eax
push 0x204
mov dword [0x5087d0], ebp
call fcn.00466860
push eax
push ebp
call fcn.00499dd0
add esp, 0xc
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov ecx, dword [0x5087d0]
push ecx
push 0x12
lea edx, [esp + 0x4c]
push 1
push edx
call fcn.004b2cda
movzx eax, byte [esp + 0x55]
movzx edx, byte [esp + 0x54]
shl ax, 8
movzx ecx, ax
or ecx, edx
movzx edx, byte [esp + 0x57]
shl dx, 8
movzx ebp, dx
movzx edx, byte [esp + 0x63]
shl dx, 8
inc ecx
movzx ebx, dx
movzx edx, byte [esp + 0x61]
lea eax, [ecx - 1]
mov dword [0x5087e8], eax
movzx eax, byte [esp + 0x56]
or ebp, eax
movzx eax, byte [esp + 0x62]
or ebx, eax
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x60]
shl ebx, 0x10
or ebx, eax
movzx eax, byte [esp + 0x5b]
shl ax, 8
or ebx, edx
movzx edx, byte [esp + 0x5a]
or ax, dx
movzx eax, ax
cdq
mov edi, eax
movzx eax, byte [esp + 0x5f]
shl ax, 8
movzx esi, ax
movzx eax, byte [esp + 0x5d]
mov dword [esp + 0x44], edx
movzx edx, byte [esp + 0x5e]
or esi, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x5c]
shl esi, 0x10
or esi, edx
movzx edx, byte [esp + 0x64]
or esi, eax
movzx ax, byte [esp + 0x65]
shl ax, 8
add esp, 0x10
or ax, dx
mov dword [0x5087e4], ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0
mov dword [esp + 0x30], edi
mov word [0x50733c], ax
je 0x4aa501
movzx eax, ax
inc eax
push eax
call fcn.004b00f7
add esp, 4
mov dword [0x508870], eax
test eax, eax
je 0x4aaf9d
mov ecx, dword [0x5087d0]
movzx edx, word [0x50733c]
push ecx
push 1
push edx
push eax
call fcn.004b2cda
add esp, 0x10
cmp eax, 1
mov eax, dword [0x508870]
je 0x4aa4f0
push eax
call fcn.004b01c1
mov ecx, dword [0x5087d0]
push ecx
mov dword [0x508870], 0
call fcn.004b2822
add esp, 8
neg eax
pop esi
sbb eax, eax
pop ebx
and eax, 9
pop edi
add eax, 2
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
movzx edx, word [0x50733c]
mov byte [edx + eax], 0
mov ecx, dword [0x5087e4]
or edi, dword [esp + 0x34]
jne 0x4aa531
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
add esp, 4
mov dword [0x5087d0], edi
pop esi
pop ebx
pop edi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
cmp ecx, 1
je 0x4aa65e
cmp dword [0x508770], 0
jne 0x4ab7e9
mov edx, dword [0x507344]
push 0x4c6acc
push edx
call fcn.00456290
test al, al
jne 0x4aa58c
mov eax, dword [0x5087d0]
push eax
call fcn.004b2d6e
add esp, 4
pop esi
pop ebx
pop edi
mov dword [0x5087d0], 0
mov eax, 0x10
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov ecx, dword [0x5087e4]
cmp ecx, 1
je 0x4aa65e
mov edx, dword [0x5087dc]
mov eax, dword [0x5087d4]
mov di, word [eax]
cmp di, word [edx]
jne 0x4aa5cc
test di, di
je 0x4aa5c8
mov di, word [eax + 2]
cmp di, word [edx + 2]
jne 0x4aa5cc
add eax, 4
add edx, 4
test di, di
jne 0x4aa5a6
xor eax, eax
jmp 0x4aa5d1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4aa65e
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
add esp, 4
cmp byte [0x528c62], 0x53
mov dword [0x5087d0], 0
jne 0x4aa62d
push 0x5fa
call fcn.00466860
mov edx, dword [0x5087d4]
push eax
push edx
call fcn.00499dd0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 0xc
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
push 0x2c8
call fcn.00466860
push eax
mov eax, dword [0x5087d4]
push eax
call fcn.00499dd0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 0xc
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
xor edx, edx
cmp dword [0x508768], 1
mov dword [0x508840], edx
mov dword [0x508848], edx
mov dword [0x50884c], edx
jne 0x4aa680
cmp ecx, 1
je 0x4aa692
cmp dword [0x508770], edx
je 0x4aa9e1
mov ebx, dword [esp + 0x24]
xor edx, edx
cmp ebx, 0xffffffff
jne 0x4aa69d
cmp dword [esp + 0x28], edx
je 0x4aa712
cmp esi, 0xffffffff
jne 0x4aa6a8
xor eax, eax
cmp eax, edx
je 0x4aa712
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
sub ecx, esi
mov eax, 0
sbb edx, eax
sub ecx, 0x50
push 0
sbb edx, eax
mov eax, dword [0x5087d0]
push edx
push ecx
push eax
call fcn.004b2f63
add esp, 0x10
test eax, eax
jne 0x4aad53
mov eax, dword [0x5087d0]
mov edi, 0x4ce528
call fcn.004aa090
test eax, eax
je 0x4aad6c
mov eax, dword [0x5087d0]
push eax
call fcn.004b32fe
add esp, 4
mov ecx, 0xfffffffc
sub ecx, ebx
mov esi, 0xffffffff
sbb esi, dword [esp + 0x28]
jmp 0x4aa9d5
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [0x5087d0]
sub eax, 0x18
push 0
sbb ecx, 0
push ecx
push eax
push edx
call fcn.004b2f63
add esp, 0x10
test eax, eax
mov eax, dword [0x5087d0]
je 0x4aa781
push eax
call fcn.004b2d6e
add esp, 4
push 0x2ad
mov dword [0x5087d0], 0
call fcn.00466860
mov ecx, dword [0x5087d4]
push eax
push ecx
call fcn.00499dd0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
push 0x4ce520
call fcn.004aa130
test eax, eax
je 0x4aa9e1
mov edx, dword [0x5087d0]
push edx
call fcn.004b32fe
mov esi, eax
mov eax, dword [0x5087d0]
push eax
push 1
lea ecx, [esp + 0x50]
mov edi, edx
push 0x10
sub esi, 4
mov ebx, 0
push ecx
sbb edi, ebx
call fcn.004b2cda
add esp, 0x14
cmp eax, 1
je 0x4aa807
mov edx, dword [0x5087d0]
push edx
call fcn.004b2d6e
mov eax, dword [0x5087d4]
add esp, 4
push eax
push ebx
push eax
push ebx
mov ecx, 0x5072f4
mov dword [0x5087d0], ebx
call fcn.0042d090
pop esi
lea eax, [ebx + 0xb]
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov eax, dword [0x5087d0]
push 0x4ce530
call fcn.004aa130
test eax, eax
jne 0x4aa859
mov eax, dword [0x5087d0]
push eax
call fcn.004b2d6e
mov eax, dword [0x5087d4]
add esp, 4
push eax
push ebx
push eax
push ebx
mov ecx, 0x5072f4
mov dword [0x5087d0], ebx
call fcn.0042d090
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
movzx ecx, byte [esp + 0x4f]
movzx edx, byte [esp + 0x4e]
shl cx, 8
movzx eax, cx
movzx ecx, byte [esp + 0x4d]
or eax, edx
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x4c]
shl eax, 0x10
or eax, edx
movzx edx, byte [esp + 0x4b]
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x4a]
or ecx, edx
movzx edx, byte [esp + 0x49]
shl dx, 8
movzx edx, dx
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x48]
or ecx, edx
xor edx, edx
or eax, edx
movzx edx, byte [esp + 0x51]
mov dword [esp + 0x40], eax
movzx ax, byte [esp + 0x53]
shl ax, 8
xor ebx, ebx
or ebx, ecx
movzx ecx, byte [esp + 0x52]
movzx eax, ax
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x50]
shl eax, 0x10
or eax, ecx
or eax, edx
mov dword [0x5087e4], eax
cmp eax, 1
jne 0x4ab7e9
mov eax, dword [esp + 0x40]
mov ecx, dword [0x5087d0]
push 0
push eax
push ebx
push ecx
call fcn.004b2f63
add esp, 0x10
test eax, eax
jne 0x4aa942
mov eax, dword [0x5087d0]
push 0x4ce518
call fcn.004aa130
test eax, eax
jne 0x4aa9e1
mov ecx, dword [0x5087d0]
push eax
sub esi, 0x50
sbb edi, eax
push edi
push esi
push ecx
call fcn.004b2f63
add esp, 0x10
test eax, eax
je 0x4aa98c
mov edx, dword [0x5087d0]
push edx
call fcn.004b2d6e
add esp, 4
push 0x2ad
mov dword [0x5087d0], 0
call fcn.00466860
push eax
mov eax, dword [0x5087d4]
push eax
call fcn.00499dd0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov esi, dword [0x5087d0]
call fcn.004a9fd0
test eax, eax
je 0x4aad6c
mov ecx, 0x4ce518
mov edx, 0x54a6c4
call fcn.004aa100
test eax, eax
je 0x4aad6c
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b32fe
add esp, 4
mov ecx, 0xfffffffc
sub ecx, ebx
mov esi, 0xffffffff
sbb esi, dword [esp + 0x40]
add eax, ecx
adc edx, esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
sub eax, 0x18
push 0
sbb ecx, 0
push ecx
push eax
mov eax, dword [0x5087d0]
push eax
call fcn.004b2f63
add esp, 0x10
test eax, eax
jne 0x4aad53
mov eax, dword [0x5087d0]
push 0x4ce520
call fcn.004aa130
test eax, eax
je 0x4aaf0c
mov eax, dword [0x5087d0]
push eax
call fcn.004b32fe
mov ecx, dword [0x5087d0]
sub eax, 4
push ecx
mov esi, 0
sbb edx, esi
push 1
mov dword [esp + 0x24], edx
lea edx, [esp + 0x50]
push 0x10
push edx
mov dword [esp + 0x28], eax
call fcn.004b2cda
add esp, 0x14
cmp eax, 1
mov eax, dword [0x5087d0]
je 0x4aaa97
push eax
call fcn.004b2d6e
mov eax, dword [0x5087d4]
add esp, 4
push eax
push esi
push eax
push esi
mov ecx, 0x5072f4
mov dword [0x5087d0], esi
call fcn.0042d090
lea eax, [esi + 0xb]
pop esi
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
push 0x4ce530
call fcn.004aa130
test eax, eax
jne 0x4aaae5
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
mov eax, dword [0x5087d4]
add esp, 4
push eax
push esi
push eax
push esi
mov ecx, 0x5072f4
mov dword [0x5087d0], esi
call fcn.0042d090
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
movzx edx, byte [esp + 0x47]
movzx ecx, byte [esp + 0x45]
movzx eax, byte [esp + 0x46]
shl dx, 8
shl cx, 8
movzx esi, dx
or esi, eax
movzx eax, byte [esp + 0x44]
movzx edx, cx
movzx ecx, byte [esp + 0x4f]
shl esi, 0x10
or esi, edx
movzx edx, byte [esp + 0x4e]
or esi, eax
movzx eax, byte [esp + 0x4d]
shl ax, 8
shl cx, 8
movzx ebx, cx
movzx ecx, ax
movzx eax, byte [esp + 0x4b]
or ebx, edx
movzx edx, byte [esp + 0x4c]
mov edi, dword [esp + 0x1c]
shl ax, 8
shl ebx, 0x10
or ebx, ecx
movzx ecx, ax
movzx eax, byte [esp + 0x49]
or ebx, edx
movzx edx, byte [esp + 0x4a]
shl ax, 8
or ecx, edx
movzx edx, ax
movzx eax, byte [esp + 0x48]
shl ecx, 0x10
or ecx, edx
or ecx, eax
movzx eax, byte [esp + 0x53]
xor edx, edx
xor ebp, ebp
or ebx, edx
movzx edx, byte [esp + 0x51]
or ebp, ecx
movzx ecx, byte [esp + 0x52]
add ebp, edi
adc ebx, dword [esp + 0x20]
shl ax, 8
movzx eax, ax
or eax, ecx
shl dx, 8
shl eax, 0x10
movzx ecx, dx
movzx edx, byte [esp + 0x50]
or eax, ecx
or eax, edx
mov dword [0x5087e4], eax
dec eax
mov dword [0x5087e8], eax
cmp esi, eax
je 0x4aac3e
mov eax, dword [0x5087d0]
push eax
call fcn.004b2d6e
mov ecx, dword [0x5087d4]
add esp, 4
push esi
push ecx
mov dword [0x5087d0], 0
call fcn.004380b0
mov edi, eax
push 0x4c8110
push edi
call fcn.004b2eb0
add esp, 8
mov dword [0x5087d0], eax
test eax, eax
jne 0x4aac31
push esi
call fcn.00438a00
test eax, eax
jne 0x4ab811
push edi
call fcn.004b01c1
mov edx, dword [0x5087d4]
add esp, 4
push esi
push edx
call fcn.004380b0
mov edi, eax
push 0x4c8110
push edi
call fcn.004b2eb0
add esp, 8
mov dword [0x5087d0], eax
test eax, eax
je 0x4aabf4
push edi
call fcn.004b01c1
mov edi, dword [esp + 0x20]
add esp, 4
mov eax, dword [0x5087d0]
push 0
push ebx
push ebp
push eax
mov dword [0x5087e8], esi
call fcn.004b2f63
add esp, 0x10
test eax, eax
jne 0x4aad53
mov eax, dword [0x5087d0]
push 0x4ce518
call fcn.004aa130
test eax, eax
jne 0x4aacec
mov ecx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x18]
sub eax, 0x50
sbb ecx, 0
push ecx
push eax
mov eax, dword [0x5087d0]
push eax
call fcn.004b2f63
add esp, 0x10
test eax, eax
jne 0x4aad53
mov esi, dword [0x5087d0]
call fcn.004a9fd0
test eax, eax
je 0x4aad53
mov ecx, 0x4ce518
mov edx, 0x54a6c4
call fcn.004aa100
test eax, eax
je 0x4aad53
mov eax, dword [0x5087d0]
push eax
call fcn.004b32fe
add esp, 4
mov edi, eax
mov ecx, 0xfffffffc
sub ecx, ebp
mov eax, 0xffffffff
sbb eax, ebx
add edi, ecx
adc edx, eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edx
mov eax, dword [0x5087d0]
push eax
push 0x34
lea ecx, [esp + 0x4c]
push 1
push ecx
call fcn.004b2cda
add esp, 0x10
cmp eax, 0x34
jae 0x4aad9e
push 0x2ad
call fcn.00466860
mov edx, dword [0x5087d4]
push eax
push edx
call fcn.00499dd0
mov eax, dword [0x5087d0]
push eax
call fcn.004b2d6e
add esp, 0xc
pop esi
pop ebx
pop edi
mov dword [0x5087d0], 0
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
add esp, 4
mov dword [0x5087d0], 0
push 0x2ad
call fcn.00466860
mov edx, dword [0x5087d4]
push eax
push edx
call fcn.00499dd0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
movzx ecx, byte [esp + 0x57]
movzx eax, byte [esp + 0x55]
movzx edx, byte [esp + 0x56]
shl cx, 8
shl ax, 8
movzx ebp, cx
or ebp, edx
movzx edx, byte [esp + 0x54]
movzx ecx, ax
movzx eax, byte [esp + 0x67]
shl ax, 8
movzx esi, byte [esp + 0x62]
shl ebp, 0x10
or ebp, ecx
or ebp, edx
movzx edx, byte [esp + 0x66]
movzx ecx, ax
movzx eax, byte [esp + 0x65]
or ecx, edx
shl ax, 8
movzx edx, ax
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x63]
movzx eax, byte [esp + 0x64]
shl dx, 8
movzx edx, dx
or edx, esi
movzx esi, byte [esp + 0x61]
or ecx, eax
shl si, 8
shl edx, 0x10
movzx esi, si
or edx, esi
movzx esi, byte [esp + 0x60]
or edx, esi
xor eax, eax
or eax, edx
movzx edx, byte [esp + 0x76]
mov dword [esp + 0x30], eax
movzx eax, byte [esp + 0x77]
xor esi, esi
or ecx, esi
movzx esi, byte [esp + 0x72]
shl ax, 8
mov dword [esp + 0x34], ecx
movzx ecx, ax
movzx eax, byte [esp + 0x75]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x74]
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x73]
shl dx, 8
movzx edx, dx
or edx, esi
movzx esi, byte [esp + 0x71]
shl si, 8
movzx esi, si
or ecx, eax
shl edx, 0x10
or edx, esi
movzx esi, byte [esp + 0x70]
xor eax, eax
or edx, esi
or eax, edx
xor esi, esi
or ecx, esi
add eax, edi
adc ecx, dword [esp + 0x20]
mov dword [esp + 0x24], eax
movzx eax, byte [esp + 0x4f]
mov dword [esp + 0x28], ecx
movzx ecx, byte [esp + 0x4e]
shl ax, 8
or ax, cx
cmp ax, 0x2e
jbe 0x4aaf0c
mov edx, dword [0x5087d4]
push edx
push 0x342
call fcn.00466860
push eax
mov eax, dword [0x5087d4]
push eax
call fcn.00499dd0
mov eax, dword [0x508768]
add esp, 0xc
cmp eax, 1
je 0x4aaf0c
cmp eax, 2
je 0x4aaf0c
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
add esp, 4
mov dword [0x5087d0], esi
lea eax, [esi + 3]
pop esi
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov eax, dword [esp + 0x24]
add eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x28]
adc ecx, dword [esp + 0x20]
xor edi, edi
mov ebx, 1
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
mov dword [0x507350], eax
mov dword [0x507354], ecx
mov dword [esp + 0x3c], edi
mov dword [0x507358], edi
mov dword [0x50735c], edi
mov dword [esp + 0x2c], ebx
cmp dword [0x5087e8], ebp
je 0x4aaf67
mov edx, dword [0x5087d0]
push edx
call fcn.004b2d6e
add esp, 4
mov dword [0x5087d0], edi
mov eax, dword [0x5087e4]
mov dword [0x5087e8], ebp
cmp ebp, eax
jae 0x4ab7a4
lea ebx, [ebx]
dec eax
cmp ebp, eax
jne 0x4aafb5
mov eax, dword [0x5087d4]
push eax
call fcn.004b17b4
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
cmp esi, edi
jne 0x4aafc8
pop esi
pop ebx
pop edi
mov eax, 4
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov ecx, dword [0x5087d4]
push ebp
push ecx
call fcn.004380b0
mov dword [esp + 0x10], eax
mov esi, eax
mov eax, dword [0x5087d0]
cmp eax, edi
jne 0x4ab067
push 0x4c8110
push esi
call fcn.004b2eb0
add esp, 8
mov dword [0x5087d0], eax
cmp eax, edi
jne 0x4ab067
lea esp, [esp]
mov edx, dword [0x5087e8]
push edx
call fcn.00438a00
cmp eax, 9
je 0x4ab801
cmp eax, 3
je 0x4ab15e
mov eax, dword [0x5087e4]
lea ecx, [eax - 1]
mov eax, dword [0x5087e8]
cmp eax, ecx
jne 0x4ab03c
mov edx, dword [0x5087d4]
push edx
call fcn.004b17b4
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
je 0x4aaf9d
jmp 0x4ab04c
push eax
mov eax, dword [0x507344]
push eax
call fcn.004380b0
mov dword [esp + 0x10], eax
push 0x4c8110
push eax
call fcn.004b2eb0
add esp, 8
mov dword [0x5087d0], eax
cmp eax, edi
je 0x4aaff0
mov esi, dword [esp + 0x10]
cmp dword [esp + 0x38], edi
jne 0x4ab09c
cmp dword [esp + 0x2c], edi
je 0x4ab0a0
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push edi
push ecx
push edx
push eax
call fcn.004b2f63
add esp, 0x10
test eax, eax
mov eax, dword [0x5087d0]
jne 0x4ab829
mov dword [esp + 0x14], 0x508868
mov dword [esp + 0x2c], edi
mov esi, eax
call fcn.004a9fd0
test eax, eax
je 0x4ab758
mov ebp, dword [esp + 0x14]
mov eax, dword [0x5087d0]
push eax
call fcn.004b32fe
mov dword [0x5087f4], edx
add esp, 4
mov ecx, 0x4ce530
mov edx, 0x54a6c4
mov dword [0x5087f0], eax
call fcn.004aa100
test eax, eax
jne 0x4ab758
mov ecx, 0x4ce518
mov edx, 0x54a6c4
call fcn.004aa100
test eax, eax
jne 0x4ab758
mov ecx, 0x4ce528
mov edx, 0x54a6c4
call fcn.004aa100
test eax, eax
jne 0x4ab167
cmp dword [0x508768], ebx
je 0x4ab745
mov ecx, dword [0x5087d0]
push ecx
call fcn.004b2d6e
add esp, 4
push 0x2ad
mov dword [0x5087d0], edi
call fcn.00466860
mov edx, dword [esp + 0x10]
push eax
push edx
call fcn.00499dd0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov dword [esp + 0x38], ebx
jmp 0x4ab789
mov ecx, dword [0x5087d0]
push ecx
push ebx
lea edx, [esp + 0x4c]
push 0x2a
push edx
call fcn.004b2cda
add esp, 0x10
cmp eax, ebx
je 0x4ab1d8
cmp dword [0x508768], ebx
je 0x4ab745
mov eax, dword [0x5087d0]
push eax
call fcn.004b2822
add esp, 4
mov esi, eax
neg esi
sbb esi, esi
and esi, 9
add esi, 2
cmp esi, 0xb
jne 0x4ab897
mov eax, dword [esp + 0x10]
push eax
push edi
push eax
push edi
mov ecx, 0x5072f4
call fcn.0042d090
mov eax, esi
pop esi
pop ebx
pop edi
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
push 0x80
call fcn.004b00f7
mov esi, eax
add esp, 4
cmp esi, edi
je 0x4aaf9d
movzx eax, byte [esp + 0x45]
movzx ecx, byte [esp + 0x44]
shl ax, 8
or ax, cx
mov word [esi], ax
movzx edx, byte [esp + 0x47]
movzx eax, byte [esp + 0x46]
shl dx, 8
or dx, ax
mov word [esi + 2], dx
movzx ecx, byte [esp + 0x49]
movzx edx, byte [esp + 0x48]
shl cx, 8
or cx, dx
mov word [esi + 4], cx
movzx eax, byte [esp + 0x4b]
movzx ecx, byte [esp + 0x4a]
shl ax, 8
or ax, cx
mov word [esi + 6], ax
movzx edx, byte [esp + 0x4f]
movzx ecx, byte [esp + 0x4e]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x4d]
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x4c]
shl eax, 0x10
or eax, ecx
or eax, edx
mov dword [esi + 8], eax
movzx eax, byte [esp + 0x53]
movzx edx, byte [esp + 0x52]
shl ax, 8
movzx ecx, ax
movzx eax, byte [esp + 0x51]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x50]
shl ecx, 0x10
or ecx, edx
or ecx, eax
mov dword [esi + 0xc], ecx
movzx ecx, byte [esp + 0x57]
movzx eax, byte [esp + 0x56]
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x55]
or edx, eax
shl cx, 8
shl edx, 0x10
movzx eax, cx
movzx ecx, byte [esp + 0x54]
or edx, eax
or edx, ecx
mov dword [esi + 0x10], edx
mov dword [esi + 0x14], edi
movzx edx, byte [esp + 0x5b]
movzx ecx, byte [esp + 0x5a]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x59]
or eax, ecx
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x58]
shl eax, 0x10
or eax, ecx
or eax, edx
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], edi
movzx eax, byte [esp + 0x5d]
movzx ecx, byte [esp + 0x5c]
shl ax, 8
or ax, cx
mov word [esi + 0x20], ax
movzx edx, byte [esp + 0x5f]
shl dx, 8
movzx eax, byte [esp + 0x5e]
or dx, ax
mov word [esi + 0x24], dx
movzx ecx, byte [esp + 0x61]
movzx edx, byte [esp + 0x60]
shl cx, 8
or cx, dx
mov word [esi + 0x26], cx
movzx eax, byte [esp + 0x63]
movzx edx, byte [esp + 0x62]
shl ax, 8
movzx ecx, ax
or ecx, edx
mov dword [esi + 0x28], ecx
movzx eax, byte [esp + 0x65]
movzx ecx, byte [esp + 0x64]
shl ax, 8
or ax, cx
mov word [esi + 0x2c], ax
movzx edx, byte [esp + 0x69]
movzx ecx, byte [esp + 0x68]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x67]
or eax, ecx
shl eax, 0x10
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x66]
or eax, ecx
or eax, edx
mov dword [esi + 0x38], eax
movzx eax, byte [esp + 0x6d]
movzx edx, byte [esp + 0x6c]
shl ax, 8
movzx ecx, ax
movzx eax, byte [esp + 0x6b]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x6a]
shl ecx, 0x10
or ecx, edx
or ecx, eax
movzx eax, word [esi + 0x20]
mov dword [esi + 0x30], ecx
mov dword [esi + 0x34], edi
mov dword [esi + 0x48], edi
mov dword [esi + 0x44], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x4c], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x50], edi
mov dword [esi + 0x54], edi
mov dword [esi + 0x5c], edi
mov dword [esi + 0x58], edi
cmp ax, di
jne 0x4ab429
cmp dword [0x508768], ebx
je 0x4ab745
push 0x2ad
call fcn.00466860
mov ecx, dword [esp + 0x10]
push eax
push ecx
call fcn.00499dd0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
movzx ecx, ax
add ecx, ebx
push ecx
call fcn.004b00f7
add esp, 4
mov dword [esi + 0x4c], eax
cmp eax, edi
je 0x4aaf9d
movzx eax, word [esi + 0x24]
cmp ax, di
je 0x4ab462
movzx edx, ax
push edx
call fcn.004b00f7
add esp, 4
mov dword [esi + 0x44], eax
cmp eax, edi
je 0x4aaf9d
movzx eax, word [esi + 0x26]
cmp ax, di
je 0x4ab482
movzx eax, ax
push eax
call fcn.004b00f7
add esp, 4
mov dword [esi + 0x48], eax
cmp eax, edi
je 0x4aaf9d
mov ecx, dword [0x5087d0]
movzx edx, word [esi + 0x20]
mov eax, dword [esi + 0x4c]
push ecx
push ebx
push edx
push eax
call fcn.004b2cda
add esp, 0x10
cmp eax, ebx
jne 0x4ab739
movzx eax, word [esi + 0x24]
cmp ax, di
je 0x4ab4cc
mov ecx, dword [0x5087d0]
push ecx
movzx edx, ax
mov eax, dword [esi + 0x44]
push ebx
push edx
push eax
call fcn.004b2cda
add esp, 0x10
cmp eax, ebx
jne 0x4ab739
movzx eax, word [esi + 0x26]
cmp ax, di
je 0x4ab4f5
mov ecx, dword [0x5087d0]
push ecx
movzx edx, ax
mov eax, dword [esi + 0x48]
push ebx
push edx
push eax
call fcn.004b2cda
add esp, 0x10
cmp eax, ebx
jne 0x4ab739
movzx ecx, word [esi + 0x20]
mov edx, dword [esi + 0x4c]
mov eax, 0x800
mov byte [ecx + edx], 0
test word [esi + 4], ax
jne 0x4ab531
push esi
call fcn.004a90b0
cmp dword [esi + 0x58], edi
jne 0x4ab531
movzx ecx, byte [esi + 1]
mov edx, dword [esi + 0x4c]
push ecx
push edx
call fcn.004a8bb0
test al, al
je 0x4ab531
mov eax, 0x800
or word [esi + 4], ax
mov ecx, 0x800
test word [esi + 4], cx
je 0x4ab56e
mov edx, dword [esi + 0x4c]
push edx
call fcn.004c1387
add esp, 4
mov dword [esi + 0x58], eax
test eax, eax
je 0x4aaf9d
push eax
call fcn.00438760
mov edi, eax
test edi, edi
je 0x4ab56e
mov eax, dword [esi + 0x4c]
push eax
call fcn.004b01c1
add esp, 4
mov dword [esi + 0x4c], edi
movzx eax, word [esi]
movzx ecx, al
shr ax, 8
xor edi, edi
cmp ax, di
jne 0x4ab597
test dword [esi + 0x38], 0xffff0000
je 0x4ab5a8
cmp ecx, 0x19
je 0x4ab597
cmp ecx, 0x1a
je 0x4ab597
cmp ecx, 0x28
jne 0x4ab5a8
cmp ax, 6
je 0x4ab5a8
cmp ax, 0xb
jne 0x4ab5b3
cmp ecx, 0x32
jne 0x4ab5b3
mov eax, dword [esi + 0x4c]
push eax
push eax
call dword [sym.imp.USER32.dll_OemToCharA]
movzx eax, word [esi]
movzx ecx, al
shr ax, 8
cmp ax, di
jne 0x4ab5da
test dword [esi + 0x38], 0xffff0000
je 0x4ab5eb
cmp ecx, 0x19
je 0x4ab5da
cmp ecx, 0x1a
je 0x4ab5da
cmp ecx, 0x28
jne 0x4ab5eb
cmp ax, 6
je 0x4ab5eb
cmp ax, 0xb
jne 0x4ab5f6
cmp ecx, 0x32
jne 0x4ab5f6
mov eax, dword [esi + 0x48]
push eax
push eax
call dword [sym.imp.USER32.dll_OemToCharA]
call fcn.004a92f0
mov edx, 1
cmp dword [0x508768], edx
jne 0x4ab610
cmp dword [0x5087e4], edx
je 0x4ab618
cmp dword [0x508770], edi
je 0x4ab626
mov ecx, dword [esp + 0x1c]
add dword [esi + 0x30], ecx
mov eax, dword [esp + 0x20]
adc dword [esi + 0x34], eax
cmp dword [esi + 0x28], edi
jne 0x4ab66c
cmp dword [esp + 0x3c], edi
je 0x4ab649
mov ecx, dword [esi + 0x34]
cmp ecx, dword [0x50735c]
ja 0x4ab66c
jb 0x4ab649
mov eax, dword [esi + 0x30]
cmp eax, dword [0x507358]
jae 0x4ab66c
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x30]
cmp eax, dword [esp + 0x28]
ja 0x4ab66c
jb 0x4ab65d
cmp ecx, dword [esp + 0x24]
jae 0x4ab66c
mov dword [0x507358], ecx
mov dword [0x50735c], eax
mov dword [esp + 0x3c], edx
add dword [0x507340], edx
mov ecx, dword [esi + 0x4c]
push ecx
mov dword [esi + 0x6c], edi
mov dword [esi + 0x70], edi
call fcn.00481d90
mov dword [esi + 0x50], eax
cmp eax, edi
je 0x4aaf9d
push eax
call fcn.004c1387
add esp, 4
mov dword [esi + 0x3c], eax
cmp eax, edi
je 0x4aaf9d
mov edx, dword [esi + 0x4c]
push edx
call fcn.004c1387
add esp, 4
mov dword [esi + 0x54], eax
cmp eax, edi
jne 0x4ab6ba
push 4
call fcn.004a68a0
mov eax, dword [esi + 0x58]
mov dword [esi + 0x60], edi
mov dword [esi + 0x64], edi
mov dword [esi + 0x68], edi
cmp eax, edi
je 0x4ab707
push eax
call fcn.00438760
cmp eax, edi
jne 0x4ab6e8
mov eax, dword [esi + 0x4c]
push eax
call fcn.004c1387
add esp, 4
cmp eax, edi
je 0x4aaf9d
push eax
call fcn.004c1387
add esp, 4
mov dword [esi + 0x5c], eax
cmp eax, edi
je 0x4aaf9d
mov ecx, dword [esi + 0x58]
push ecx
call fcn.00481a80
jmp 0x4ab710
mov edx, dword [esi + 0x4c]
push edx
call fcn.00481a10
push eax
mov dword [esi + 0x64], eax
call fcn.00481de0
mov dword [esi + 0x68], eax
cmp eax, edi
je 0x4aaf9d
lea eax, [esi + 0x78]
mov dword [ebp], esi
mov dword [eax], edi
mov ebp, eax
xor edi, edi
mov dword [esp + 0x14], ebp
lea ebx, [edi + 1]
jmp 0x4ab745
cmp dword [0x508768], ebx
jne 0x4ab865
mov esi, dword [0x5087d0]
call fcn.004a9fd0
test eax, eax
jne 0x4ab0b3
mov eax, dword [0x5087d0]
push eax
call fcn.004b2d6e
mov ecx, dword [esp + 0x14]
push ecx
mov dword [0x5087d0], edi
call fcn.004b01c1
add esp, 8
mov ecx, 0x4ce528
mov edx, 0x54a6c4
call fcn.004aa100
test eax, eax
je 0x4ab7a4
mov ebp, dword [0x5087e8]
mov eax, dword [0x5087e4]
add ebp, ebx
mov dword [0x5087e8], ebp
cmp ebp, eax
jb 0x4aaf80
mov eax, dword [0x507340]
mov ecx, dword [esp + 0x30]
xor edx, edx
cmp eax, ecx
jne 0x4ab7bd
cmp edx, dword [esp + 0x34]
je 0x4aa51c
movzx eax, ax
xor edx, edx
cmp eax, ecx
jne 0x4ab7d0
cmp edx, dword [esp + 0x34]
je 0x4aa51c
push 0x2ad
call fcn.00466860
push eax
mov eax, dword [0x507344]
push eax
call fcn.00499dd0
add esp, 8
pop esi
pop ebx
pop edi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov edx, dword [esp + 0x10]
push edx
push edi
mov ecx, 0x5072f4
call fcn.0042d280
pop esi
pop ebx
pop edi
mov eax, 9
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
push eax
call fcn.004b2d6e
add esp, 4
push esi
push 0x204
mov dword [0x5087d0], edi
call fcn.00466860
push eax
push edi
call fcn.00499dd0
add esp, 0xc
pop esi
pop ebx
pop edi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret
mov edx, dword [0x5087d0]
push edx
call fcn.004b2822
add esp, 4
mov esi, eax
neg esi
sbb esi, esi
and esi, 9
add esi, 2
cmp esi, 0xb
jne 0x4ab897
mov eax, dword [esp + 0x10]
push eax
push edi
push eax
push edi
mov ecx, 0x5072f4
call fcn.0042d090
mov ecx, dword [esp + 0x78]
mov eax, esi
pop esi
pop ebx
pop edi
pop ebp
xor ecx, esp
call fcn.004affec
add esp, 0x6c
ret