Function at 0x4b9eb8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0x98
mov eax, 0x5e8d03
call fcn.005affb6
mov ebx, ecx
mov dword [ebp - 0x20], ebx
xor edi, edi
cmp dword [ebx + 0x15c], edi
jne 0x4baa87
cmp dword [ebx + 0x160], edi
jne 0x4baa87
cmp dword [ebx + 0x64], edi
jne 0x4b9f0c
cmp dword [ebx + 0x9c], edi
jne 0x4b9f0c
cmp dword [ebx + 0x80], edi
jne 0x4b9f0c
cmp dword [ebx + 0xb8], edi
jne 0x4b9f0c
cmp dword [ebx + 0x2c], edi
je 0x4baa87
xor eax, eax
lea ecx, [ebp - 0xa4]
inc eax
push 0xa
mov dword [0x66c068], eax
mov dword [0x66c070], eax
call fcn.0050db22
mov eax, dword [ebx + 0x40]
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4b9f8d
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebx + 0x3c]
call fcn.00468c09
push dword [eax]
push 0x60a2bc
call fcn.0048474d
pop ecx
pop ecx
test eax, eax
je 0x4b9f87
mov ecx, eax
call fcn.0052e83c
push eax
push 0x66277c
call fcn.0048474d
pop ecx
pop ecx
test eax, eax
je 0x4b9f87
mov ecx, dword [eax + 0x330]
test ecx, ecx
je 0x4b9f87
cmp dword [ecx + 0x114], edi
je 0x4b9f87
push eax
lea ecx, [ebp - 0xa4]
call fcn.0050430e
cmp dword [ebp - 0x10], 0
jne 0x4b9f33
mov eax, dword [ebp - 0xa0]
test eax, eax
je 0x4b9fdd
test eax, eax
je 0x4baa8d
push dword [eax + 8]
mov ebx, dword [eax]
push 0x66277c
mov dword [ebp - 0x10], ebx
call fcn.0048474d
pop ecx
pop ecx
mov edi, eax
push 1
push 0
push 0xf000
mov ecx, dword [edi]
push 0
mov esi, dword [ecx + 0x368]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
mov eax, ebx
test ebx, ebx
jne 0x4b9f97
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx + 0x5c]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4ba018
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebx + 0x58]
call fcn.00468c09
push dword [eax]
push 0x66277c
call fcn.0048474d
pop ecx
pop ecx
test eax, eax
je 0x4ba012
push dword [eax + 0x354]
mov ecx, eax
call fcn.004f8f34
cmp dword [ebp - 0x10], 0
jne 0x4b9fe7
push 0xa
lea ecx, [ebp - 0x88]
call fcn.0050db22
lea eax, [ebx + 0x90]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x88]
call fcn.0050dbf0
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x4ba093
test eax, eax
je 0x4baa8d
push dword [eax + 8]
mov ebx, dword [eax]
push 0x6625b0
mov dword [ebp - 0x10], ebx
call fcn.0048474d
pop ecx
pop ecx
push 0x37
mov edi, eax
xor eax, eax
push eax
push eax
push eax
push eax
push eax
mov ecx, edi
call fcn.0047f7d4
mov ecx, dword [edi]
push dword [ebp - 0x20]
mov esi, dword [ecx + 0x1dc]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
mov eax, ebx
test ebx, ebx
jne 0x4ba045
mov ebx, dword [ebp - 0x20]
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0050db22
mov eax, dword [ebx + 0x24]
mov byte [ebp - 4], 2
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4ba1c1
lea eax, [ebx + 0x20]
mov dword [ebp - 0x14], eax
mov ebx, eax
lea eax, [ebp - 0x10]
mov ecx, ebx
push eax
call fcn.00468c09
push 0x600c18
mov edi, dword [eax]
mov ecx, edi
mov dword [ebp - 0x14], edi
call fcn.004847ec
test eax, eax
je 0x4ba0f7
push edi
push 0x600c18
call fcn.0048474d
pop ecx
pop ecx
add eax, 0x110
lea ecx, [ebp - 0x50]
push eax
call fcn.0050dbf0
jmp 0x4ba1b4
push 0x5fd474
mov ecx, edi
call fcn.004847ec
test eax, eax
je 0x4ba1b4
mov eax, dword [edi]
mov esi, dword [eax + 0x1cc]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
test eax, eax
je 0x4ba131
push edi
lea ecx, [ebp - 0x50]
call fcn.0050430e
jmp 0x4ba1b4
mov eax, dword [edi]
mov esi, dword [eax + 0x1b0]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
test eax, eax
je 0x4ba1b4
lea esi, [edi + 0x298]
lea edi, [ebp - 0x34]
movsd dword es:[edi], dword [esi]
push 0
push 0x34
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x30]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 0x238]
mov ecx, esi
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x34]
push eax
push dword [ebp - 0x30]
push dword [ebp - 0x34]
push 0
call dword [0x5f5a78]
mov ecx, edi
call esi
mov eax, dword [edi]
mov esi, dword [eax + 0x1ac]
mov ecx, esi
mov edi, dword [eax + 0x224]
call dword [0x5f5a78]
mov ecx, dword [ebp - 0x14]
call esi
push 0
push 1
push eax
mov ecx, edi
call dword [0x5f5a78]
mov ecx, dword [ebp - 0x14]
call edi
cmp dword [ebp - 0x10], 0
jne 0x4ba0b7
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx + 0xcc]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4ba22f
lea eax, [ebx + 0xc8]
mov dword [ebp - 0x14], eax
mov ebx, eax
lea eax, [ebp - 0x10]
mov ecx, ebx
push eax
call fcn.00468c09
push dword [eax]
push 0x6625b0
call fcn.0048474d
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x4ba226
mov ecx, dword [edi]
mov esi, dword [ecx + 0x1a8]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
push eax
push 0x5fda00
call fcn.0048474d
pop ecx
pop ecx
test eax, eax
je 0x4ba226
push eax
lea ecx, [ebp - 0x50]
call fcn.0050430e
cmp dword [ebp - 0x10], 0
jne 0x4ba1d9
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x4ba313
test eax, eax
je 0x4baa8d
mov edi, dword [eax + 8]
mov ebx, dword [eax]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x10], ebx
mov eax, dword [edi]
mov dword [ebp - 0x14], edi
mov esi, dword [eax + 0x1b0]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
test eax, eax
je 0x4ba2a3
push 0x60dd8c
mov ecx, edi
call fcn.004847ec
test eax, eax
jne 0x4ba2a3
mov eax, dword [edi]
lea esi, [edi + 0x1e8]
push 0
push 3
sub esp, 0x10
mov ebx, dword [eax + 0x1fc]
mov edi, esp
mov ecx, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x5f5a78]
mov ecx, dword [ebp - 0x14]
call ebx
mov ebx, dword [ebp - 0x18]
mov eax, ebx
test ebx, ebx
jne 0x4ba23a
mov eax, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x20]
test eax, eax
je 0x4ba313
test eax, eax
je 0x4baa8d
mov edi, dword [eax + 8]
mov ecx, dword [eax]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], ecx
mov eax, dword [edi]
mov esi, dword [eax + 0x1b0]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
test eax, eax
je 0x4ba30a
push 0x66277c
mov ecx, edi
call fcn.004847ec
test eax, eax
jne 0x4ba30a
mov eax, dword [edi]
push ebx
mov esi, dword [eax + 0x2b8]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
mov ecx, edi
call fcn.004d0f5e
mov ecx, dword [ebp - 0x14]
mov eax, ecx
test ecx, ecx
jne 0x4ba2b3
mov eax, dword [ebx + 0x5c]
lea ecx, [ebx + 0x58]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4ba6b6
lea eax, [ebp - 0x10]
push eax
call fcn.00468c09
mov edi, dword [eax]
lea eax, [edi + 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [edi]
mov esi, dword [eax + 0x16c]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
test eax, eax
je 0x4ba3da
mov esi, dword [ebp - 0x18]
push dword [esi]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.00479ec7
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.00479ec7
mov ecx, dword [ebx + 0xe4]
mov dword [ebp - 0x14], eax
test ecx, ecx
je 0x4ba381
mov ecx, dword [ecx + 0x20]
push ecx
push dword [esi]
call dword [sym.imp.USER32.dll_SetParent]
push eax
call fcn.00479ec7
mov ecx, dword [ebp - 0x14]
push edi
mov eax, dword [ecx]
mov esi, dword [eax + 0x3c0]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, dword [ebp - 0x14]
call esi
push 0x66277c
mov ecx, edi
call fcn.004847ec
test eax, eax
je 0x4ba3cf
mov eax, dword [edi]
push 1
mov esi, dword [eax + 0x1f0]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
push 5
mov ecx, edi
call fcn.0047f885
jmp 0x4ba3e0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [edi]
push 0
mov esi, dword [eax + 0x228]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
mov dword [ebp - 0x14], eax
test eax, eax
je 0x4ba417
mov ecx, dword [eax]
push 0
push 0
push edi
mov esi, dword [ecx + 0x17c]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, dword [ebp - 0x14]
call esi
mov eax, dword [ebx + 0xe4]
test eax, eax
je 0x4ba424
mov eax, dword [eax + 0x20]
push eax
mov eax, dword [ebp - 0x18]
push dword [eax]
call dword [sym.imp.USER32.dll_SetParent]
push eax
call fcn.00479ec7
mov esi, 0x66277c
mov ecx, edi
push esi
call fcn.004847ec
test eax, eax
je 0x4ba6a6
push edi
push esi
call fcn.0048474d
lea edi, [ebp - 0x34]
mov dword [ebp - 0x18], eax
pop ecx
pop ecx
lea esi, [eax + 0x298]
movsd dword es:[edi], dword [esi]
push 0
push 0x34
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x34]
mov ecx, dword [edi]
mov esi, dword [ecx + 0x238]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x30]
push ecx
push eax
push dword [ebp - 0x30]
mov ecx, esi
push dword [ebp - 0x34]
push 0
call dword [0x5f5a78]
mov ecx, edi
call esi
mov eax, dword [edi]
mov esi, dword [eax + 0x1ac]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
xor ecx, ecx
mov dword [ebp - 0x24], eax
test eax, eax
setne cl
push ecx
mov ecx, edi
call fcn.0047f885
mov ecx, edi
call fcn.004f635b
mov esi, eax
mov dword [ebp - 0x14], esi
test esi, esi
je 0x4ba517
mov ecx, dword [edi]
mov edi, dword [ecx + 0x1e0]
mov ecx, dword [esi]
mov esi, dword [ecx + 0x194]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, dword [ebp - 0x14]
call esi
push eax
mov ecx, edi
call dword [0x5f5a78]
mov ecx, dword [ebp - 0x18]
call edi
mov ecx, dword [ebp - 0x14]
push dword [ebp - 0x24]
mov edi, dword [ebp - 0x18]
push edi
mov eax, dword [ecx]
mov esi, dword [eax + 0x294]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, dword [ebp - 0x14]
call esi
mov esi, dword [ebp - 0x14]
push 0x60dd8c
mov ecx, edi
call fcn.004847ec
test eax, eax
je 0x4ba6a6
and dword [ebp - 0x24], 0
test esi, esi
je 0x4ba6a6
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
push edi
call fcn.0052e7f8
push edi
mov ecx, eax
call fcn.0054fd46
test eax, eax
je 0x4ba664
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x4ba664
lea eax, [ecx]
mov ecx, dword [ecx]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [eax + 8]
mov eax, dword [ebx]
push 1
push ecx
mov esi, dword [eax + 0x24]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, ebx
call esi
push eax
push 0x66277c
call fcn.0048474d
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x4ba656
mov ecx, dword [edi]
mov esi, dword [ecx + 0x16c]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
test eax, eax
je 0x4ba603
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.00479ec7
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.00479ec7
mov ecx, dword [ebx + 0xe4]
mov esi, eax
mov dword [ebp - 0x14], esi
test ecx, ecx
je 0x4ba5db
mov ecx, dword [ecx + 0x20]
push ecx
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_SetParent]
push eax
call fcn.00479ec7
mov eax, dword [esi]
push edi
mov esi, dword [eax + 0x3c0]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, dword [ebp - 0x14]
call esi
jmp 0x4ba63a
mov eax, dword [edi]
mov esi, dword [eax + 0x1dc]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
test eax, eax
je 0x4ba63a
mov eax, dword [edi]
push 1
push 0
push 0xf000
mov esi, dword [eax + 0x368]
mov ecx, esi
push 0
call dword [0x5f5a78]
mov ecx, edi
call esi
mov eax, dword [edi]
mov esi, dword [eax + 0x34c]
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x18]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
jne 0x4ba55e
mov edi, dword [ebp - 0x18]
mov eax, dword [edi]
mov esi, dword [eax + 0x3a4]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
test eax, eax
je 0x4ba6a6
mov eax, dword [edi]
push 0
mov esi, dword [eax + 0x3d4]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
mov eax, dword [edi]
mov esi, dword [eax + 0x210]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
cmp dword [ebp - 0x10], 0
lea ecx, [ebx + 0x58]
jne 0x4ba324
lea ecx, [ebx + 0x58]
push ecx
lea ecx, [ebx + 0x20]
call fcn.0050dbf0
and dword [0x66c070], 0
mov eax, dword [ebx]
push 0
mov esi, dword [eax + 0x38]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, ebx
call esi
mov eax, dword [ebx + 0xb0]
jmp 0x4ba8a9
mov ecx, eax
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx]
push 1
push dword [ecx + 8]
mov dword [ebp - 0x10], ecx
mov esi, dword [eax + 0x24]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, ebx
call esi
push eax
push 0x66277c
call fcn.0048474d
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x4ba8a6
mov ecx, dword [edi]
mov esi, dword [ecx + 0x170]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
mov esi, dword [edi]
test eax, eax
je 0x4ba740
mov esi, dword [esi + 0x200]
jmp 0x4ba804
mov esi, dword [esi + 0x1dc]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
mov esi, dword [edi]
test eax, eax
je 0x4ba77a
mov esi, dword [esi + 0x368]
mov ecx, esi
push 1
push 0
push 0xf000
push 0
call dword [0x5f5a78]
mov ecx, edi
call esi
jmp 0x4ba81f
mov esi, dword [esi + 0x16c]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
test eax, eax
je 0x4ba7fc
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.00479ec7
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.00479ec7
mov ecx, dword [ebx + 0xe4]
mov esi, eax
mov dword [ebp - 0x1c], esi
test ecx, ecx
je 0x4ba7c0
mov ecx, dword [ecx + 0x20]
push ecx
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_SetParent]
push eax
call fcn.00479ec7
mov eax, dword [esi]
push edi
mov esi, dword [eax + 0x3c0]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, dword [ebp - 0x1c]
call esi
mov eax, dword [edi]
push 1
mov esi, dword [eax + 0x1f0]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
mov eax, dword [edi]
mov esi, dword [eax + 0x200]
xor eax, eax
mov ecx, esi
push eax
push 0xffffffffffffffff
push eax
push 1
push eax
mov eax, dword [ebp - 0x10]
push dword [eax + 0xc]
call dword [0x5f5a78]
mov ecx, edi
call esi
mov edx, dword [ebp - 0x10]
mov eax, dword [edi]
push 0
push 0x14
mov ecx, dword [edx + 0x20]
mov esi, dword [eax + 0x238]
sub ecx, dword [edx + 0x18]
mov eax, dword [edx + 0x1c]
sub eax, dword [edx + 0x14]
push ecx
push eax
push dword [edx + 0x18]
mov ecx, esi
push dword [edx + 0x14]
push 0
call dword [0x5f5a78]
mov ecx, edi
call esi
mov eax, dword [edi]
push 0
push 0
mov esi, dword [eax + 0x368]
mov ecx, esi
mov eax, dword [ebp - 0x10]
push dword [eax + 0xc]
push 1
call dword [0x5f5a78]
mov ecx, edi
call esi
mov edx, eax
test edx, edx
je 0x4ba8a6
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x48]
mov dword [edx + 0x11c], ecx
mov ecx, dword [eax + 0x40]
mov dword [edx + 0x114], ecx
mov ecx, dword [eax + 0x44]
mov dword [edx + 0x118], ecx
mov dword [eax + 0x4c], edi
mov ecx, dword [edi + 0x330]
mov eax, dword [eax + 0x10]
mov dword [ecx + 0x84], eax
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x4ba6e4
mov eax, dword [ebx + 0xb0]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x4ba915
mov ebx, eax
mov eax, dword [ebx + 0x4c]
mov edi, dword [ebx]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x4ba90c
mov eax, dword [eax]
mov esi, dword [eax + 0x36c]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, dword [ebp - 0x1c]
call esi
test eax, eax
je 0x4ba90c
mov edi, dword [ebx + 0x4c]
push 0
push 0
push dword [ebx + 0x10]
mov eax, dword [edi]
mov esi, dword [eax + 0x224]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
mov edi, dword [ebp - 0x24]
mov ebx, edi
test edi, edi
jne 0x4ba8c0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx + 0x78]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4ba965
lea eax, [ebx + 0x74]
mov dword [ebp - 0x1c], eax
mov ebx, eax
lea eax, [ebp - 0x10]
mov ecx, ebx
push eax
call fcn.00468c09
push dword [eax]
push 0x60dd8c
call fcn.0048474d
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x4ba95c
mov ecx, dword [edi]
push 1
mov esi, dword [ecx + 0x3d4]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
cmp dword [ebp - 0x10], 0
jne 0x4ba927
mov ebx, dword [ebp - 0x20]
push 0xa
lea ecx, [ebp - 0x6c]
call fcn.0050db22
lea eax, [ebx + 0x20]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x6c]
call fcn.0050dbf0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4baa2c
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0047f17e
mov esi, dword [eax]
push esi
push 0x60a2bc
call fcn.0048474d
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x4ba9b8
mov ecx, dword [edi]
mov esi, dword [ecx + 0x2a0]
jmp 0x4baa16
push esi
push 0x60dd8c
call fcn.0048474d
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x4baa22
mov ecx, dword [edi]
mov esi, dword [ecx + 0x3a4]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
test eax, eax
jne 0x4baa22
mov eax, dword [edi]
mov esi, dword [eax + 0x1cc]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
test eax, eax
je 0x4baa22
mov eax, dword [edi]
push 1
mov esi, dword [eax + 0x240]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
mov eax, dword [edi]
mov esi, dword [eax + 0x60]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, edi
call esi
cmp dword [ebp - 0x10], 0
jne 0x4ba98d
mov eax, dword [ebx]
push 1
mov esi, dword [eax + 0x34]
mov ecx, esi
call dword [0x5f5a78]
mov ecx, ebx
call esi
lea ecx, [ebx + 0x58]
call fcn.00468e72
lea ecx, [ebx + 0x90]
call fcn.00468e72
lea ecx, [ebx + 0x74]
call fcn.00468e72
and dword [0x66c068], 0
lea ecx, [ebp - 0x6c]
call fcn.0050db48
lea ecx, [ebp - 0x50]
call fcn.0050db48
lea ecx, [ebp - 0x88]
call fcn.0050db48
lea ecx, [ebp - 0xa4]
call fcn.0050db48
call fcn.005aff84
ret
call fcn.004665cc
int3