Function at 0x4ba7c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x5f91cc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4bb18d
sub esp, 0x5c
mov edx, dword [esp + 0x60]
mov ebx, dword [edx + 8]
mov ecx, dword [ebx + 4]
movzx ebp, byte [edx + 0x50]
nop
mov eax, dword [esp + 0x70]
cmp eax, ecx
jae 0x4bb187
xchg ebp, eax
mov byte [esp + 0x22], al
xchg ebp, eax
mov ebx, dword [ebx]
lea esi, [eax + eax*2]
lea ebx, [ebx + esi*8]
cmp byte [ebx], 5
je 0x4ba855
mov ebx, dword [esp + 0x64]
mov esi, dword [ebx]
inc esi
imul esi, eax
mov edi, dword [esp + 0x74]
lea ecx, [edi + esi]
mov dword [esp + 0x48], ecx
mov esi, dword [ebx + 0x2c]
shr ecx, 5
cmp esi, ecx
jbe 0x4bb17e
mov dword [esp + 0x44], ecx
mov esi, dword [ebx + 0x28]
mov ebp, dword [esi + ecx*4]
mov ecx, dword [esp + 0x48]
mov edx, 1
shl edx, cl
mov ecx, edx
and edx, ebp
test edx, edx
jne 0x4ba850
or ecx, ebp
mov ebp, dword [esp + 0x44]
mov dword [esi + ebp*4], ecx
test edx, edx
sete dl
jmp 0x4ba85f
mov ebx, dword [esp + 0x64]
mov edi, dword [esp + 0x74]
xor edx, edx
test dl, dl
je 0x4ba8e7
mov edx, dword [ebx + 0x24]
mov ebp, dword [ebx + 0x20]
inc ebp
mov esi, dword [ebx + 0x1c]
cmp edx, ebp
jae 0x4ba8d0
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x4e69a0]
mov dword [esp + 0x10], eax
call fcn.0044a840
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x24], eax
mov eax, dword [0x5f9270]
test eax, eax
je 0x4ba8c1
call fcn.004630b0
mov dword [edi], ecx
mov ebp, dword [ebx + 0x1c]
mov dword [edi + 4], ebp
mov dword [ebx + 0x1c], ecx
mov eax, dword [esp + 0x70]
mov edi, dword [esp + 0x74]
mov ebp, edx
mov esi, ecx
mov dword [ebx + 0x20], ebp
lea edx, [ebp + ebp*2]
mov dword [esi + edx*4 - 0xc], eax
lea ebp, [esi + edx*4 - 0xc]
mov byte [ebp + 4], 0
mov dword [esi + edx*4 - 4], edi
mov edx, dword [esp + 0x60]
mov ebp, dword [esp + 0x6c]
mov esi, dword [esp + 0x68]
jmp 0x4ba903
mov edx, dword [esp + 0x60]
mov ebp, dword [esp + 0x6c]
mov edi, dword [esp + 0x68]
mov esi, edi
mov edi, dword [ebx + 0x20]
test edi, edi
je 0x4baa34
mov eax, dword [ebx + 0x1c]
lea ecx, [edi - 1]
lea edi, [edi + edi*2]
lea ebp, [eax + edi*4 - 8]
mov esi, dword [eax + edi*4 - 0xc]
mov edi, dword [eax + edi*4 - 4]
movzx ebp, byte [ebp]
mov dword [ebx + 0x20], ecx
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x68]
jmp 0x4baa72
mov ecx, dword [ebx + 8]
lea edx, [edx + esi*8 + 8]
mov eax, dword [edx]
cmp ecx, eax
jbe 0x4bb147
mov edx, dword [ebx + 4]
mov dword [edx + eax*4], edi
movzx esi, byte [esp + 0x22]
jmp 0x4ba8f5
mov ebx, dword [esp + 0x64]
movzx esi, byte [esp + 0x22]
jmp 0x4ba8f5
mov edx, dword [ebx + 8]
test edx, edx
je 0x4bb0f2
cmp edx, 1
jle 0x4ba976
mov edx, dword [ebx + 4]
mov dword [edx + 4], edi
mov ecx, dword [ebx + 0x14]
cmp ecx, 1
jbe 0x4bb13d
mov edx, dword [ebx + 0x10]
mov ebp, dword [edx + 4]
cmp ebp, 0xffffffff
jne 0x4ba994
movzx esi, byte [esp + 0x22]
jmp 0x4ba9a7
movzx esi, byte [esp + 0x22]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4ba9d7
test edi, edi
jle 0x4ba9d7
cmp edi, ebp
jle 0x4ba9d7
mov ebp, dword [ebx + 8]
cmp ebp, ecx
jl 0x4ba9b0
mov ebp, ecx
mov eax, dword [ebx + 4]
cmp eax, edx
je 0x4ba9d7
mov dword [esp], edx
mov dword [esp + 4], eax
shl ebp, 2
mov dword [esp + 8], ebp
call fcn.00463960
mov ebx, dword [esp + 0x64]
movzx esi, byte [esp + 0x22]
mov edi, dword [esp + 0x30]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4bb0e9
cmp dword [ebx], edi
jne 0x4ba8f5
jmp 0x4bb0e0
mov ebx, dword [esp + 0x64]
movzx esi, byte [esp + 0x22]
jmp 0x4ba8f5
mov ebx, dword [esp + 0x64]
movzx esi, byte [esp + 0x22]
jmp 0x4ba8f5
mov ebx, dword [esp + 0x64]
movzx esi, byte [esp + 0x22]
jmp 0x4ba8f5
mov ebx, dword [esp + 0x64]
movzx esi, byte [esp + 0x22]
jmp 0x4ba8f5
mov ebx, dword [esp + 0x64]
movzx esi, byte [esp + 0x22]
jmp 0x4ba8f5
movzx eax, byte [esp + 0x22]
test al, al
je 0x4baa50
cmp dword [ebx + 0x14], 1
jle 0x4baa50
mov eax, dword [ebx + 0x10]
mov eax, dword [eax + 4]
test eax, eax
setge al
jmp 0x4baa52
xor eax, eax
mov byte [esp + 0x78], al
add esp, 0x5c
ret
mov ebx, dword [esp + 0x64]
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x68]
mov esi, dword [esp + 0x38]
mov ecx, ebp
mov ebp, eax
mov edx, dword [edx + 8]
mov eax, dword [edx + 4]
cmp esi, eax
jae 0x4bb175
mov dword [esp + 0x48], eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x30], edi
xchg ebp, eax
mov byte [esp + 0x23], al
xchg ebp, eax
mov edx, dword [edx]
mov dword [esp + 0x58], edx
lea esi, [esi + esi*2]
mov dword [esp + 0x40], esi
lea eax, [edx + esi*8]
mov dword [esp + 0x54], eax
movzx eax, byte [eax]
lea ecx, [edx + esi*8]
cmp al, 4
ja 0x4baf10
cmp al, 1
ja 0x4bada3
test al, al
jne 0x4bab85
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4baad9
lea edx, [edx + esi*8 + 8]
mov edx, dword [edx]
xor eax, eax
jmp 0x4bb0a0
nop
mov eax, ebp
mov ebp, dword [esp + 0x54]
cmp byte [ebp], 5
je 0x4bab7a
mov ebp, dword [ebx + 0x24]
mov ecx, dword [ebx + 0x20]
inc ecx
mov eax, dword [ebx + 0x1c]
cmp ebp, ecx
jae 0x4bab57
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x4e69a0]
mov dword [esp + 0x10], eax
call fcn.0044a840
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x24], eax
mov eax, dword [0x5f9270]
test eax, eax
je 0x4bab44
call fcn.004630b0
mov dword [edi], ecx
mov ebp, dword [ebx + 0x1c]
mov dword [edi + 4], ebp
mov dword [ebx + 0x1c], ecx
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x30]
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0x58]
mov dword [ebx + 0x20], ecx
lea ebp, [ecx + ecx*2]
mov ecx, ebx
mov ebx, dword [esp + 0x38]
mov dword [eax + ebp*4 - 0xc], ebx
lea ebx, [eax + ebp*4 - 0xc]
mov byte [ebx + 4], 1
mov dword [eax + ebp*4 - 4], edi
movzx eax, byte [esp + 0x23]
mov ebx, ecx
lea esi, [edx + esi*8 + 4]
mov edx, dword [esi]
jmp 0x4bb0a0
lea eax, [edx + esi*8 + 4]
mov ecx, dword [eax]
mov ebp, dword [esp + 0x48]
cmp ecx, ebp
jae 0x4bb16c
mov dword [esp + 0x50], eax
lea eax, [ecx + ecx*2]
lea eax, [edx + eax*8]
movzx eax, byte [eax]
lea edi, [eax - 7]
xchg edi, eax
cmp al, 3
xchg edi, eax
ja 0x4bacb2
lea esi, [edx + esi*8 + 8]
mov eax, dword [esi]
cmp eax, ebp
jae 0x4bb165
mov dword [esp + 0x50], esi
lea ebp, [eax + eax*2]
lea edx, [edx + ebp*8]
cmp byte [edx], 5
je 0x4bac12
mov edx, dword [ebx]
inc edx
imul edx, eax
mov ebp, dword [esp + 0x30]
lea ecx, [ebp + edx]
mov edx, dword [ebx + 0x2c]
mov edi, ecx
shr edi, 5
cmp edx, edi
jbe 0x4bb15c
mov edx, dword [ebx + 0x28]
mov ebp, dword [edx + edi*4]
mov esi, 1
shl esi, cl
mov ecx, esi
and esi, ebp
test esi, esi
jne 0x4bac09
or ecx, ebp
mov dword [edx + edi*4], ecx
test esi, esi
sete dl
mov esi, dword [esp + 0x50]
jmp 0x4bac14
xor edx, edx
test dl, dl
je 0x4baca4
mov edx, dword [ebx + 0x24]
mov ebp, dword [ebx + 0x20]
inc ebp
mov edi, dword [ebx + 0x1c]
cmp edx, ebp
jae 0x4bac89
mov dword [esp + 0x34], eax
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x4e69a0]
mov dword [esp + 0x10], eax
call fcn.0044a840
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x24], eax
mov eax, dword [0x5f9270]
test eax, eax
je 0x4bac7a
call fcn.004630b0
mov dword [edi], ecx
mov ebp, dword [ebx + 0x1c]
mov dword [edi + 4], ebp
mov dword [ebx + 0x1c], ecx
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x50]
mov ebp, edx
mov edi, ecx
mov dword [ebx + 0x20], ebp
lea edx, [ebp + ebp*2]
mov dword [edi + edx*4 - 0xc], eax
lea ebp, [edi + edx*4 - 0xc]
mov byte [ebp + 4], 0
mov ebp, dword [esp + 0x30]
mov dword [edi + edx*4 - 4], ebp
mov edx, dword [esi]
mov edi, dword [ebx]
movzx eax, byte [esp + 0x23]
jmp 0x4bb0a0
mov dword [esp + 0x3c], ecx
mov edx, dword [ebx]
mov dword [esp + 0x2c], edx
cmp al, 5
je 0x4bad0a
lea ebp, [edx + 1]
imul ebp, ecx
lea eax, [ebp + edx]
mov ebp, dword [ebx + 0x2c]
mov esi, eax
shr esi, 5
cmp ebp, esi
jbe 0x4bb153
mov ebp, dword [ebx + 0x28]
mov edi, dword [ebp + esi*4]
mov ecx, eax
mov edx, 1
shl edx, cl
mov eax, edx
and edx, edi
test edx, edx
jne 0x4bacfb
or eax, edi
mov dword [ebp + esi*4], eax
test edx, edx
sete dl
mov ecx, dword [esp + 0x3c]
mov eax, edx
mov edx, dword [esp + 0x2c]
jmp 0x4bad0c
xor eax, eax
test al, al
je 0x4bad8f
mov ebp, dword [ebx + 0x24]
mov esi, dword [ebx + 0x20]
inc esi
mov edi, dword [ebx + 0x1c]
cmp ebp, esi
jae 0x4bad79
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x4e69a0]
mov dword [esp + 0x10], eax
call fcn.0044a840
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x24], eax
mov eax, dword [0x5f9270]
test eax, eax
je 0x4bad6a
call fcn.004630b0
mov dword [edi], ecx
mov ebp, dword [ebx + 0x1c]
mov dword [edi + 4], ebp
mov dword [ebx + 0x1c], ecx
mov esi, edx
mov edi, ecx
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x2c]
mov dword [ebx + 0x20], esi
lea ebp, [esi + esi*2]
mov dword [edi + ebp*4 - 0xc], ecx
lea esi, [edi + ebp*4 - 0xc]
mov byte [esi + 4], 0
mov dword [edi + ebp*4 - 4], edx
mov esi, dword [esp + 0x50]
mov edx, dword [esi]
mov edi, dword [esp + 0x30]
movzx eax, byte [esp + 0x23]
jmp 0x4bb0a0
cmp al, 2
jne 0x4bae9d
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4ba937
lea eax, [edx + esi*8 + 8]
mov ecx, dword [eax]
cmp dword [ebx + 8], ecx
jbe 0x4bae90
mov ebp, dword [ebx + 4]
mov ebp, dword [ebp + ecx*4]
mov ecx, edx
mov edx, dword [esp + 0x54]
cmp byte [edx], 5
je 0x4bae76
mov edx, dword [ebx + 0x24]
mov ecx, dword [ebx + 0x20]
inc ecx
mov esi, dword [ebx + 0x1c]
cmp edx, ecx
jae 0x4bae50
mov dword [esp + 0x50], eax
mov dword [esp + 0x28], ebp
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x4e69a0]
mov dword [esp + 0x10], eax
call fcn.0044a840
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x64]
mov dword [ebx + 0x24], eax
mov eax, dword [0x5f9270]
test eax, eax
je 0x4bae3d
call fcn.004630b0
mov dword [edi], ecx
mov ebp, dword [ebx + 0x1c]
mov dword [edi + 4], ebp
mov dword [ebx + 0x1c], ecx
mov eax, dword [esp + 0x50]
mov ebp, dword [esp + 0x28]
mov edi, dword [esp + 0x30]
mov esi, ecx
mov ecx, edx
mov dword [ebx + 0x20], ecx
lea edx, [ecx + ecx*2]
mov edi, dword [esp + 0x38]
mov dword [esi + edx*4 - 0xc], edi
lea edi, [esi + edx*4 - 0xc]
mov byte [edi + 4], 1
mov dword [esi + edx*4 - 4], ebp
mov ecx, dword [esp + 0x58]
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x30]
mov edx, dword [ebx + 8]
mov eax, dword [eax]
cmp eax, edx
jae 0x4bb14c
mov edx, dword [ebx + 4]
mov dword [edx + eax*4], edi
mov edx, ecx
movzx ebp, byte [esp + 0x23]
lea esi, [edx + esi*8 + 4]
mov edx, dword [esi]
mov eax, ebp
jmp 0x4bb0a0
cmp al, 3
jne 0x4ba960
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x14]
mov edx, dword [esp + 0x6c]
mov dword [esp], edx
mov dword [esp + 4], edi
call ecx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x58]
lea ebp, [ebx + edx*8 + 8]
mov ebp, dword [ebp]
mov dword [esp], eax
mov dword [esp + 4], ecx
xchg ebp, eax
mov byte [esp + 8], al
xchg ebp, eax
call fcn.004bb560
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ba955
mov ebx, dword [esp + 0x40]
mov esi, dword [esp + 0x58]
lea ebx, [esi + ebx*8 + 4]
mov edx, dword [ebx]
mov ebx, dword [esp + 0x64]
mov edi, dword [esp + 0x30]
movzx eax, byte [esp + 0x23]
jmp 0x4bb0a0
mov dword [esp + 0x4c], ecx
cmp al, 7
ja 0x4baf98
cmp al, 5
je 0x4bb125
cmp al, 6
jne 0x4baf34
lea esi, [edx + esi*8 + 4]
mov edx, dword [esi]
mov eax, ebp
jmp 0x4bb0a0
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0x6c]
mov dword [esp], edx
mov dword [esp + 4], edi
call ecx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.004b6840
cmp dword [esp + 8], 0xffffffff
je 0x4ba9ee
mov ebx, dword [esp + 0x40]
mov esi, dword [esp + 0x58]
lea ebx, [esi + ebx*8 + 4]
mov esi, dword [esp + 0x24]
mov eax, ebx
mov ebx, dword [esp + 0x30]
lea edi, [ebx + esi]
mov edx, dword [eax]
mov ebx, dword [esp + 0x64]
movzx eax, byte [esp + 0x23]
jmp 0x4bb0a0
cmp al, 8
je 0x4bb047
cmp al, 9
je 0x4bb002
cmp al, 0xa
jne 0x4bb10d
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0x6c]
mov dword [esp], edx
mov dword [esp + 4], edi
call ecx
mov eax, dword [esp + 8]
cmp eax, 0xa
je 0x4ba9fc
cmp eax, 0xffffffff
je 0x4ba9fc
mov ebx, dword [esp + 0xc]
mov esi, dword [esp + 0x40]
mov eax, ebx
mov ebx, dword [esp + 0x58]
lea ebx, [ebx + esi*8 + 4]
mov esi, dword [esp + 0x30]
lea edi, [esi + eax]
mov edx, dword [ebx]
mov ebx, dword [esp + 0x64]
movzx eax, byte [esp + 0x23]
jmp 0x4bb0a0
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0x6c]
mov dword [esp], edx
mov dword [esp + 4], edi
call ecx
cmp dword [esp + 8], 0xffffffff
je 0x4baa0a
mov ebx, dword [esp + 0xc]
mov esi, dword [esp + 0x40]
mov eax, ebx
mov ebx, dword [esp + 0x58]
lea ebx, [ebx + esi*8 + 4]
mov esi, dword [esp + 0x30]
lea edi, [esi + eax]
mov edx, dword [ebx]
mov ebx, dword [esp + 0x64]
movzx eax, byte [esp + 0x23]
jmp 0x4bb0a0
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0x6c]
mov dword [esp], edx
mov dword [esp + 4], edi
call ecx
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x58]
lea ebx, [edx + ecx*8 + 0xc]
test eax, eax
jbe 0x4bb104
mov ebp, dword [esp + 8]
mov ebx, dword [ebx]
cmp dword [ebx], ebp
jne 0x4baa26
mov ebx, dword [esp + 0xc]
lea esi, [edx + ecx*8 + 4]
mov eax, esi
mov esi, dword [esp + 0x30]
lea edi, [esi + ebx]
mov edx, dword [eax]
mov ebx, dword [esp + 0x64]
movzx eax, byte [esp + 0x23]
mov ebp, dword [ebx]
inc ebp
imul ebp, edx
lea ecx, [edi + ebp]
mov ebp, dword [ebx + 0x2c]
mov esi, ecx
shr esi, 5
cmp ebp, esi
jbe 0x4bb0fb
mov dword [esp + 0x38], edx
mov ebp, dword [ebx + 0x28]
mov ebx, dword [ebp + esi*4]
mov edx, 1
shl edx, cl
test edx, ebx
jne 0x4bb0d5
mov ecx, edx
or edx, ebx
mov dword [ebp + esi*4], edx
test ecx, ebx
je 0x4baa5a
jmp 0x4baa18
mov byte [esp + 0x78], 1
add esp, 0x5c
ret
mov byte [esp + 0x78], 1
add esp, 0x5c
ret
mov byte [esp + 0x78], 1
add esp, 0x5c
ret
mov eax, esi
mov ecx, ebp
call fcn.00463130
xor eax, eax
mov ecx, eax
call fcn.00463120
lea eax, [0x4e0140]
mov dword [esp], eax
lea eax, [0x51c530]
mov dword [esp + 4], eax
call fcn.00435290
lea eax, [0x4e0140]
mov dword [esp], eax
lea eax, [0x51c538]
mov dword [esp + 4], eax
call fcn.00435290
mov eax, 1
call fcn.00463120
call fcn.00463130
mov ecx, edx
call fcn.00463130
mov eax, esi
mov ecx, ebp
call fcn.00463130
mov eax, edi
mov ecx, edx
call fcn.00463130
mov ecx, ebp
call fcn.00463130
mov eax, ecx
mov ecx, ebp
call fcn.00463130
mov ecx, eax
mov eax, esi
call fcn.00463130
mov eax, ecx
mov ecx, esi
call fcn.00463130
call fcn.00463130
nop
call fcn.00461ca0
jmp fcn.004ba7c0