Function at 0x4ba3d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x64]
cmp eax, dword [ecx + 8]
jbe 0x4bad1c
sub esp, 0xe4
mov eax, dword [esp + 0x100]
test eax, eax
jne 0x4ba4d6
mov eax, dword [0x9daa18]
mov eax, dword [eax + 0x10]
mov ecx, dword [0x9daa1c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x40], ecx
lea edx, [0x64f9e0]
mov dword [esp], edx
call fcn.00409c30
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x40]
mov dword [edi + 4], eax
mov eax, dword [0x9ec0a0]
test eax, eax
jne 0x4ba4c5
mov ecx, dword [esp + 0x88]
mov dword [edi], ecx
mov ecx, dword [esp + 0x100]
mov dword [edi + 0xc], ecx
mov ecx, dword [0x9ec0a0]
test ecx, ecx
jne 0x4ba4ac
mov eax, dword [esp + 0xfc]
mov dword [edi + 8], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
lea eax, [0x6dbe10]
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], edi
add esp, 0xe4
ret
lea ecx, [edi + 8]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xfc]
call fcn.0044c8c0
mov edi, edx
jmp 0x4ba470
mov eax, dword [esp + 0x88]
call fcn.0044c8c0
jmp 0x4ba452
mov ecx, dword [esp + 0xfc]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004b6dd0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
test ebp, ebp
je 0x4ba5bc
mov dword [esp + 0x24], eax
mov dword [esp + 0x54], ecx
mov dword [esp + 0x30], edx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x68], ebp
lea eax, [0x622e20]
mov dword [esp], eax
call fcn.00409c30
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x2c]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x30]
mov dword [edi + 8], eax
mov eax, dword [0x9ec0a0]
test eax, eax
jne 0x4ba5b1
mov ecx, dword [esp + 0x68]
mov dword [edi], ecx
mov ecx, dword [esp + 0x24]
mov dword [edi + 0x10], ecx
mov ecx, dword [0x9ec0a0]
test ecx, ecx
jne 0x4ba59b
mov eax, dword [esp + 0x54]
mov dword [edi + 0xc], eax
mov dword [esp + 0x104], edi
mov dword [esp + 0x108], 1
mov dword [esp + 0x10c], 1
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
add esp, 0xe4
ret
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x54]
call fcn.0044c8c0
mov edi, edx
jmp 0x4ba561
mov eax, dword [esp + 0x68]
call fcn.0044c8c0
jmp 0x4ba549
mov eax, dword [esp + 0xec]
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 0xf0]
mov dword [esp], edx
lea ebx, [0x62f520]
mov dword [esp + 4], ebx
lea ebx, [0x9ebe7c]
mov dword [esp + 8], ebx
call ecx
mov eax, dword [esp + 0x10]
lea ecx, [0x6143c0]
cmp dword [esp + 0xc], ecx
jne 0x4bacfb
mov dword [esp + 0x58], eax
test eax, eax
je 0x4ba60c
mov edx, dword [eax]
test edx, edx
jne 0x4bacdd
lea eax, [0x634a80]
mov dword [esp], eax
call fcn.00409c30
mov eax, dword [esp + 4]
mov dword [esp + 0x84], eax
lea ecx, [0x4c5680]
mov dword [eax], ecx
mov ecx, dword [0x9ec0a0]
test ecx, ecx
jne 0x4bacc9
mov ecx, dword [esp + 0xe8]
mov dword [eax + 4], ecx
mov eax, dword [esp + 0xec]
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 0xf0]
mov dword [esp], edx
lea ebx, [0x62f4e0]
mov dword [esp + 4], ebx
lea ebx, [0x9ebe7c]
mov dword [esp + 8], ebx
call ecx
mov eax, dword [esp + 0x10]
lea ecx, [0x62e0e0]
cmp dword [esp + 0xc], ecx
jne 0x4bacc2
test eax, eax
je 0x4bacb6
mov dword [esp + 0x5c], eax
nop
nop
mov ecx, dword [0x9da1dc]
mov dword [esp + 0x80], ecx
lea edx, [0x652fe0]
mov dword [esp], edx
call fcn.00409c30
mov eax, dword [esp + 4]
lea ecx, [0x6de940]
mov dword [eax], ecx
mov ecx, dword [0x9ec0a0]
test ecx, ecx
jne 0x4bac9e
mov ecx, dword [esp + 0x80]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0xec]
mov dword [eax + 8], ecx
mov edx, dword [0x9ec0a0]
test edx, edx
jne 0x4bac86
mov edx, dword [esp + 0xf0]
mov dword [eax + 0xc], edx
lea ecx, [0x6dea20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004abfd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x60], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x28], edx
lea ebx, [0x9ebfe8]
mov dword [esp], ebx
mov dword [esp + 4], 1
call fcn.00452320
nop
mov eax, dword [esp + 0xe8]
test eax, eax
je 0x4bac76
lea ecx, [eax + 8]
mov dword [esp + 0x50], ecx
lea eax, [0x649440]
mov dword [esp], eax
call fcn.00409c30
mov eax, dword [esp + 4]
lea ecx, [0x4c28d0]
mov dword [eax], ecx
mov ecx, dword [esp + 0x28]
mov dword [eax + 4], ecx
mov ecx, dword [0x9ec0a0]
test ecx, ecx
jne 0x4bac55
mov ecx, dword [esp + 0x60]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0xf8]
mov dword [eax + 0x14], ecx
mov ecx, dword [0x9ec0a0]
test ecx, ecx
jne 0x4bac3d
mov ecx, dword [esp + 0xf4]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x100]
mov dword [eax + 0x1c], ecx
mov edx, dword [0x9ec0a0]
test edx, edx
jne 0x4bac1e
mov edx, dword [esp + 0xfc]
mov dword [eax + 0x18], edx
mov ebx, dword [esp + 0x50]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004af2c0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x70], eax
movzx ecx, byte [esp + 0x14]
test cl, cl
je 0x4bac02
mov eax, dword [esp + 0xec]
mov ecx, dword [eax + 0x14]
mov edx, dword [esp + 0xf0]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov dword [esp + 0x7c], eax
lea edi, [esp + 0xa0]
xor eax, eax
call fcn.0044c9bb
lea edi, [esp + 0xb4]
call fcn.0044c9b4
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov word [esp + 0xbc], 1
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xb4], eax
mov word [esp + 0xd4], 1
mov eax, dword [esp + 0x70]
mov dword [esp + 0xcc], eax
lea ecx, [esp + 0xa0]
mov dword [esp + 0xd0], ecx
lea edx, [esp + 0xb4]
mov dword [esp], edx
lea edx, [esp + 0x44]
mov dword [esp + 4], edx
mov dword [esp + 8], 2
call fcn.004351d0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4baa69
nop
mov eax, dword [esp + 0xe8]
test eax, eax
je 0x4baa59
add eax, 8
mov dword [esp], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 8], eax
call fcn.004af6d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4baa2e
mov edx, dword [esp + 0x64]
mov eax, dword [edx]
call eax
mov eax, dword [esp + 0xec]
mov eax, dword [eax + 0x18]
mov ecx, dword [esp + 0xf0]
mov dword [esp], ecx
call eax
nop
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x20], ecx
cmp dword [0x9da768], ecx
je 0x4ba9eb
cmp dword [0x9b41e8], ecx
je 0x4ba9a2
mov ebx, dword [esp + 0x58]
test ebx, ebx
je 0x4ba932
mov edx, dword [ebx + 4]
test edx, edx
jne 0x4ba968
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
add esp, 0xe4
ret
mov dword [esp + 0x34], ecx
mov dword [esp + 0x6c], eax
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov byte [esp + 0xc], 0
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
mov ebx, dword [edx]
call ebx
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x34]
jmp 0x4ba932
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [0x9b41ec]
mov dword [esp + 8], edx
call fcn.004031a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ba9d8
mov eax, dword [0x9b421c]
mov ecx, dword [0x9b4218]
mov ebx, dword [esp + 0x58]
test ebx, ebx
jmp 0x4ba929
mov ebx, dword [esp + 0x58]
test ebx, ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x20]
jmp 0x4ba929
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [0x9da76c]
mov dword [esp + 8], edx
call fcn.004031a0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4baa21
mov eax, dword [0x9da9f4]
mov ecx, dword [0x9da9f0]
mov ebx, dword [esp + 0x58]
test ebx, ebx
jmp 0x4ba929
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x20]
jmp 0x4ba91b
mov dword [esp], 8
lea eax, [0x695744]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc], eax
call fcn.0042fb60
jmp 0x4ba8e8
mov ecx, dword [0x9b3e24]
test byte [ecx], al
lea eax, [ecx + 8]
jmp 0x4ba8b5
cmp eax, 1
jne 0x4bad1a
lea edi, [esp + 0x8c]
lea esi, [esp + 0xa0]
call fcn.0044ce9e
mov edx, dword [esp + 0x64]
mov eax, dword [edx]
call eax
mov eax, dword [esp + 0x58]
test eax, eax
je 0x4bab12
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x4bab12
mov ecx, dword [esp + 0x90]
lea edx, [0x61cea0]
cmp dword [esp + 0x8c], edx
jne 0x4babf7
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 4]
mov ecx, dword [ecx]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.004bad30
mov eax, dword [esp + 0x58]
mov edx, dword [eax + 4]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
movzx eax, byte [esp + 0x9c]
mov byte [esp + 0xc], al
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
mov eax, dword [edx]
call eax
nop
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x98]
movzx ebp, byte [esp + 0x9c]
test edx, edx
je 0x4bab6b
xor eax, eax
xor ecx, ecx
xor ebp, ebp
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], ecx
mov dword [esp + 0x10c], ebp
mov dword [esp + 0x110], edx
mov dword [esp + 0x114], ebx
add esp, 0xe4
ret
lea edx, [0x61cea0]
cmp ecx, edx
jne 0x4bad02
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov eax, dword [eax]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4bab8f
xor ebx, ebx
mov ebp, edx
xor edx, edx
jmp 0x4bab41
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x74], eax
lea eax, [0x63e6c0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.00438a60
mov eax, dword [esp + 0xc]
mov dword [esp + 0x78], eax
lea ecx, [0x63e6c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x38]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x74]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x18], edx
call fcn.0040f7f0
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x78]
mov edx, ecx
jmp 0x4bab87
xor ebp, ebp
xor ecx, ecx
xor ebx, ebx
jmp 0x4baabe
nop
lea eax, [0x9ebfe8]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call fcn.00452320
jmp 0x4ba7f7
lea edi, [eax + 0x18]
mov edx, eax
mov eax, dword [esp + 0xfc]
call fcn.0044c8c0
mov eax, edx
mov edx, dword [esp + 0xfc]
jmp 0x4ba7ca
lea edi, [eax + 0x10]
mov ecx, eax
mov eax, dword [esp + 0xf4]
call fcn.0044c8c0
mov eax, ecx
jmp 0x4ba7a8
lea edi, [eax + 8]
mov ecx, eax
mov eax, dword [esp + 0x60]
call fcn.0044c8c0
lea edi, [ecx + 0xc]
mov eax, dword [esp + 0x5c]
call fcn.0044c8c0
mov eax, ecx
jmp 0x4ba786
mov edx, dword [0x9b3e24]
test byte [edx], al
lea ecx, [edx + 8]
jmp 0x4ba745
lea edi, [eax + 0xc]
mov edx, eax
mov eax, dword [esp + 0xf0]
call fcn.0044c8c0
mov eax, edx
jmp 0x4ba6f2
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x80]
call fcn.0044c8c0
mov eax, ecx
jmp 0x4ba6d0
mov eax, dword [esp + 0x84]
jmp 0x4ba68b
xor eax, eax
jmp 0x4ba683
lea edi, [eax + 4]
mov eax, dword [esp + 0xe8]
call fcn.0044c8c0
jmp 0x4ba645
mov eax, dword [esp + 0xfc]
mov dword [esp], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 4], ecx
mov ebx, dword [edx]
call ebx
jmp 0x4ba60c
xor eax, eax
jmp 0x4ba5fa
mov dword [esp], ecx
mov dword [esp + 4], edx
lea eax, [0x62afa0]
mov dword [esp + 8], eax
call fcn.004072e0
ud2
ud2
call fcn.0044b170
jmp fcn.004ba3d0