Function at 0x4ba250
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xac]
cmp eax, dword [ecx + 8]
jbe 0x4baee6
sub esp, 0x12c
mov byte [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
nop
mov eax, dword [esp + 0x13c]
lea ecx, [esp + 0x11c]
cmp eax, ecx
je 0x4ba326
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
test edx, edx
jg 0x4bae44
mov ebx, edx
xor ebp, ebp
xor esi, esi
cmp edx, ebx
jle 0x4bae3d
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x34], edx
mov dword [esp + 0xa8], esi
cmp esi, ecx
je 0x4ba2f1
mov dword [esp], esi
mov dword [esp + 4], ecx
shl ebx, 2
mov dword [esp + 8], ebx
call fcn.00456550
mov eax, dword [esp + 0x34]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x13c]
movzx ecx, byte [eax]
mov byte [esp + 0x11c], cl
mov byte [esp + 0x11c], 0
mov byte [esp + 0x10c], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
nop
mov ecx, dword [esp + 0x140]
lea edx, [esp + 0x10c]
cmp ecx, edx
je 0x4bae36
mov edx, dword [ecx + 8]
mov ebx, dword [ecx + 4]
test edx, edx
jg 0x4bad97
mov ebp, edx
xor esi, esi
xor edi, edi
cmp edx, ebp
jle 0x4bad90
mov dword [esp + 0x38], edx
mov dword [esp + 0xa8], esi
mov dword [esp + 0x40], edi
cmp esi, ebx
je 0x4ba3b0
mov dword [esp], esi
mov dword [esp + 4], ebx
shl ebp, 2
mov dword [esp + 8], ebp
call fcn.00456550
mov eax, dword [esp + 0x38]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x140]
movzx ecx, byte [eax]
mov byte [esp + 0x10c], cl
mov byte [esp + 0x10c], 0
mov ecx, dword [esp + 0x134]
test ecx, ecx
je 0x4bad7f
mov edx, 1
mov byte [esp + 0x2d], dl
test dl, dl
jne 0x4bacfe
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x94], ebp
mov dword [esp + 0xa4], ebx
mov byte [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
mov byte [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov byte [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
mov byte [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x120]
mov edx, dword [esp + 0x124]
mov esi, dword [esp + 0x118]
mov edi, dword [esp + 0x110]
mov ebx, dword [esp + 0x114]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], esi
call fcn.004bcd50
mov eax, dword [esp + 0x18]
test eax, eax
jge 0x4bacdd
lea eax, [esp + 0x11c]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xa4]
lea ebx, [esp + 0x10c]
mov dword [esp + 0x98], edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x94], ecx
mov dword [esp + 0x84], eax
jmp 0x4ba56b
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [eax + 8]
cmp ebp, 1
jle 0x4ba70b
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004b9970
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
movzx ebp, byte [esp + 0x18]
test edx, edx
je 0x4ba69a
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], ecx
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], ebx
xchg ebp, eax
mov byte [esp + 0x2e], al
xchg ebp, eax
mov esi, dword [esp + 0xa0]
mov dword [esp], esi
mov edi, dword [esp + 0x84]
mov dword [esp + 4], edi
lea esi, [esp + 0xdc]
mov dword [esp + 8], esi
lea esi, [esp + 0xcc]
mov dword [esp + 0xc], esi
lea esi, [esp + 0xbc]
mov dword [esp + 0x10], esi
lea esi, [esp + 0xac]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], ebx
xchg ebp, eax
mov byte [esp + 0x28], al
xchg ebp, eax
call fcn.004b9b90
movzx eax, byte [esp + 0x2d]
test al, al
je 0x4ba54f
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov ecx, dword [esp + 0x94]
mov dword [esp + 4], ecx
lea edx, [esp + 0xdc]
mov dword [esp + 8], edx
lea ebx, [esp + 0xcc]
mov dword [esp + 0xc], ebx
lea ebp, [esp + 0xbc]
mov dword [esp + 0x10], ebp
lea esi, [esp + 0xac]
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x64]
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x60]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x58]
mov dword [esp + 0x20], edi
mov edi, dword [esp + 0x54]
mov dword [esp + 0x24], edi
movzx edi, byte [esp + 0x2e]
xchg edi, eax
mov byte [esp + 0x28], al
xchg edi, eax
call fcn.004b9b90
movzx eax, byte [esp + 0x2d]
jmp 0x4ba54f
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x98]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x94]
mov dword [esp + 0xc], ebx
lea ebp, [esp + 0xdc]
mov dword [esp + 0x10], ebp
lea esi, [esp + 0xcc]
mov dword [esp + 0x14], esi
lea edi, [esp + 0xbc]
mov dword [esp + 0x18], edi
lea edi, [esp + 0xac]
mov dword [esp + 0x1c], edi
movzx edi, byte [esp + 0x2d]
xchg edi, eax
mov byte [esp + 0x20], al
xchg edi, eax
call fcn.004b9e80
movzx eax, byte [esp + 0x2d]
jmp 0x4ba54f
test ebp, ebp
jle 0x4bacd6
cmp dword [ebx + 8], 1
jg 0x4bac6a
mov ebp, dword [eax + 4]
mov esi, dword [eax + 8]
test esi, esi
jle 0x4bac63
mov esi, dword [ebx + 8]
mov edi, edx
mov edx, dword [ebx + 4]
mov ebp, dword [ebp]
test esi, esi
jbe 0x4baedc
mov edx, dword [edx]
movzx esi, byte [esp + 0x2d]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4bac58
mov esi, 1
xor esi, esi
mov dword [esp + 0x5c], esi
mov esi, 1
mov dword [esp + 0x50], esi
xor esi, esi
mov dword [esp + 0x48], esi
mov esi, 1
xchg esi, eax
mov byte [esp + 0x2f], al
xchg esi, eax
mov esi, 1
jmp 0x4ba7eb
mov eax, edx
xor edx, edx
div ebp
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x6c]
xor edx, edx
div ebp
mov eax, edx
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x68]
imul edx, ebx
add edx, esi
mov esi, edx
mov edx, dword [esp + 0x50]
imul ebx, edx
mov edx, dword [esp + 0x48]
add edx, ebx
mov ebx, edx
movzx edx, byte [esp + 0x2f]
xor edx, 1
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x48], eax
mov byte [esp + 0x2f], dl
mov eax, dword [esp + 0x84]
mov edx, ebp
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x7c]
mov ebp, esi
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x5c], ebp
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x6c], edx
test ebp, ebp
jne 0x4ba77b
mov ebp, dword [esp + 0xb8]
mov eax, dword [esp + 0xb0]
test esi, esi
jne 0x4babed
xor esi, esi
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb8], ebp
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xc8]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0x48]
test esi, esi
jne 0x4bab95
xor esi, esi
mov dword [esp + 0xc4], esi
mov dword [esp + 0xc8], eax
mov dword [esp + 0xc0], ebp
movzx eax, byte [esp + 0x2f]
mov ecx, eax
xor eax, 1
mov byte [esp + 0xac], al
mov byte [esp + 0xbc], cl
lea eax, [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], eax
call fcn.004b8aa0
lea eax, [esp + 0xbc]
mov dword [esp], eax
mov ecx, dword [esp + 0x94]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004b8aa0
mov eax, dword [esp + 0x98]
mov dword [esp], eax
lea ecx, [esp + 0xac]
mov dword [esp + 4], ecx
lea ecx, [esp + 0xbc]
mov dword [esp + 8], ecx
call fcn.004b8600
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xa0]
mov ecx, dword [edx + 8]
mov ebx, dword [edx + 4]
test ecx, ecx
jbe 0x4baed5
mov dword [ebx], eax
mov ecx, dword [esp + 0x13c]
movzx ebx, byte [ecx]
mov byte [esp + 0x2c], bl
mov ebp, dword [esp + 0x138]
test ebp, ebp
je 0x4bab87
mov esi, dword [esp + 0x140]
cmp ebp, esi
jne 0x4bab80
nop
mov eax, edx
mov edx, dword [esp + 0x84]
cmp esi, edx
je 0x4ba9a1
mov edi, ebx
mov ebx, dword [edx + 4]
mov ecx, dword [edx + 0xc]
mov ebp, dword [esi + 8]
mov dword [esp + 0x30], ebp
mov esi, dword [esi + 4]
cmp ebp, ecx
jg 0x4baae1
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x30]
cmp ebp, ecx
jle 0x4baada
mov dword [esp + 0x78], ebp
mov dword [esp + 0xa8], ebx
cmp ebx, esi
je 0x4ba968
mov dword [esp], ebx
mov dword [esp + 4], esi
shl ecx, 2
mov dword [esp + 8], ecx
call fcn.00456550
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x84]
mov dword [edx + 8], ecx
mov ecx, dword [esp + 0x44]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x67bf10]
test ecx, ecx
jne 0x4baac6
mov eax, dword [esp + 0xa8]
mov dword [edx + 4], eax
mov eax, dword [esp + 0x140]
movzx eax, byte [eax]
mov byte [edx], al
mov dword [esp + 0x9c], edx
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov ecx, dword [esp + 0x13c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 8], ecx
call fcn.004b8aa0
movzx eax, byte [esp + 0x2c]
test al, al
je 0x4baaba
mov ecx, dword [esp + 0x138]
movzx edx, byte [ecx]
xor edx, 1
mov byte [ecx], dl
mov dword [esp], ecx
mov eax, dword [esp + 0xa0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004b8850
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 8], eax
call fcn.004b8d40
mov eax, dword [esp + 0x134]
test eax, eax
je 0x4baa62
mov ecx, dword [esp + 0x98]
mov edx, dword [ecx + 0xc]
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 4]
movzx ecx, byte [ecx]
mov byte [eax], cl
mov dword [eax + 8], ebx
mov dword [eax + 0xc], edx
mov ecx, dword [0x67bf10]
test ecx, ecx
jne 0x4baaaa
mov dword [eax + 4], ebp
movzx ecx, byte [esp + 0x2c]
test cl, cl
je 0x4baa62
movzx ecx, byte [eax]
xor ecx, 1
mov byte [eax], cl
mov ecx, dword [esp + 0xa0]
mov edx, dword [ecx + 0xc]
mov eax, dword [ecx + 4]
movzx ebx, byte [ecx]
mov ecx, dword [ecx + 8]
mov ebp, dword [esp + 0x130]
mov byte [ebp], bl
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], edx
mov ecx, dword [0x67bf10]
test ecx, ecx
jne 0x4baaa0
mov dword [ebp + 4], eax
mov dword [esp + 0x144], ebp
add esp, 0x12c
ret
lea edi, [ebp + 4]
call fcn.00455bf0
jmp 0x4baa92
lea edi, [eax + 4]
mov ecx, eax
mov eax, ebp
call fcn.00455bf0
mov eax, ecx
jmp 0x4baa51
mov ecx, dword [esp + 0x138]
jmp 0x4ba9e9
lea edi, [edx + 4]
mov eax, dword [esp + 0xa8]
call fcn.00455bf0
jmp 0x4ba995
mov ecx, ebp
jmp 0x4ba946
mov dword [esp + 0x8c], esi
cmp ebp, 1
jne 0x4bab38
lea eax, [0x53ad80]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00440360
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0x8c]
movzx edi, byte [esp + 0x2c]
mov ecx, 1
mov ebp, 1
jmp 0x4ba936
lea eax, [0x53ad80]
mov dword [esp], eax
mov dword [esp + 4], ebp
lea eax, [ebp + 4]
mov dword [esp + 0x44], eax
mov dword [esp + 8], eax
call fcn.00440360
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0x8c]
movzx edi, byte [esp + 0x2c]
mov ecx, dword [esp + 0x44]
mov ebp, dword [esp + 0x30]
jmp 0x4ba936
mov edx, esi
jmp 0x4ba9a1
mov eax, dword [esp + 0x134]
test eax, eax
jmp 0x4baa27
cmp eax, 1
jl 0x4baba7
mov dword [ebp], esi
mov esi, 1
jmp 0x4ba83c
lea eax, [0x53ad80]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00440360
mov ebp, dword [esp + 0xc]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xa0]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x98]
mov eax, 1
jmp 0x4bab9a
cmp ebp, 1
jl 0x4babfe
mov dword [eax], esi
mov esi, 1
jmp 0x4ba80b
mov dword [esp + 0x4c], esi
lea eax, [0x53ad80]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00440360
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xa0]
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x98]
mov ebp, 1
jmp 0x4babf2
mov ecx, eax
mov eax, edx
xor edx, edx
div ebp
mov eax, ecx
mov esi, ebp
mov ebp, edx
mov edx, esi
test ebp, ebp
jne 0x4bac48
mov eax, edx
jmp 0x4ba8c7
mov edx, ebx
jmp 0x4ba8de
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
lea ebp, [esp + 0xdc]
mov dword [esp + 0x10], ebp
lea ebp, [esp + 0xcc]
mov dword [esp + 0x14], ebp
lea ebp, [esp + 0xbc]
mov dword [esp + 0x18], ebp
lea esi, [esp + 0xac]
mov dword [esp + 0x1c], esi
movzx edi, byte [esp + 0x2d]
xchg edi, eax
mov byte [esp + 0x20], al
xchg edi, eax
call fcn.004b9e80
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0xa0]
jmp 0x4ba71d
mov edx, ebx
jmp 0x4ba8de
lea eax, [esp + 0x10c]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0x94]
lea ebx, [esp + 0x11c]
jmp 0x4ba531
mov byte [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
lea eax, [esp + 0xfc]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 0
call fcn.004b8450
mov ebp, dword [esp + 0xc]
mov byte [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
lea ebx, [esp + 0xec]
jmp 0x4ba411
mov ebx, dword [esp + 0x138]
test ebx, ebx
setne dl
jmp 0x4ba401
mov ebp, edx
jmp 0x4ba38a
mov dword [esp + 0x74], edx
mov dword [esp + 0x88], ebx
cmp edx, 1
jne 0x4badf1
lea eax, [0x53ad80]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00440360
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x140]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x74]
mov edx, 1
mov edi, 1
jmp 0x4ba382
lea eax, [0x53ad80]
mov dword [esp], eax
mov dword [esp + 4], edx
lea ecx, [edx + 4]
mov dword [esp + 0x40], ecx
mov dword [esp + 8], ecx
call fcn.00440360
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x140]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x74]
mov edx, ebp
mov edi, dword [esp + 0x40]
jmp 0x4ba382
mov eax, ecx
jmp 0x4ba3e5
mov ebx, edx
jmp 0x4ba2cb
mov dword [esp + 0x90], ecx
mov dword [esp + 0x70], edx
cmp edx, 1
jne 0x4bae97
lea eax, [0x53ad80]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00440360
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x90]
mov ebx, dword [esp + 0x70]
mov ebp, 1
mov edx, 1
jmp 0x4ba2c3
lea eax, [0x53ad80]
mov dword [esp], eax
mov dword [esp + 4], edx
lea ecx, [edx + 4]
mov dword [esp + 0x3c], ecx
mov dword [esp + 8], ecx
call fcn.00440360
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x90]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x3c]
mov edx, ebx
jmp 0x4ba2c3
xor eax, eax
call fcn.00455c70
xor eax, eax
mov ecx, esi
call fcn.00455c70
nop
call fcn.004543b0
jmp fcn.004ba250