Function at 0x4ba398
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xfffffea8
mov ebx, eax
mov dword [esp], edx
mov al, byte [ebx + 0xe5]
mov byte [esp + 0x14], al
movzx esi, byte [ebx + 0x1b9]
mov eax, dword [esp]
mov edx, dword [esp]
movzx eax, byte [eax + 0xb]
add eax, 7
mov ebp, dword [edx + 4]
test eax, eax
jns 0x4ba3cf
add eax, 7
sar eax, 3
mov edx, dword [ebx + 0xa8]
mov dword [esp + 4], edx
mov ecx, dword [ebx + 0xac]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0x10], 0x7fffffff
test byte [esp + 0x14], 8
je 0x4ba52f
mov dl, byte [esp + 0x14]
cmp dl, 8
je 0x4ba52f
xor edx, edx
xor ecx, ecx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0xc]
inc edx
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0x20]
cmp ebp, ecx
jbe 0x4ba464
mov edx, dword [esp + 0x18]
xor ecx, ecx
mov cl, byte [edx]
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x24]
cmp edx, 0x80
jge 0x4ba445
mov ecx, dword [esp + 0x24]
jmp 0x4ba450
mov ecx, pe_nt_image_headers32
mov edx, dword [esp + 0x24]
sub ecx, edx
add dword [esp + 0x1c], ecx
inc dword [esp + 0x20]
inc dword [esp + 0x18]
mov edx, dword [esp + 0x20]
cmp ebp, edx
ja 0x4ba427
mov cl, byte [ebx + 0x1b8]
cmp cl, 2
jne 0x4ba527
mov edx, dword [esp + 0x1c]
and edx, 0xffff
mov dword [esp + 0x2c], edx
xor edx, edx
mov ecx, dword [esp + 0x1c]
shr ecx, 0xa
and ecx, 0x3fffc0
cmp esi, edx
mov dword [esp + 0x28], ecx
jle 0x4ba4d6
mov ecx, dword [ebx + 0x1bc]
mov cl, byte [ecx + edx]
test cl, cl
jne 0x4ba4d1
mov ecx, dword [ebx + 0x1c0]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0x2c]
shr ecx, 8
mov dword [esp + 0x2c], ecx
mov ecx, dword [ebx + 0x1c0]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0x28]
shr ecx, 8
mov dword [esp + 0x28], ecx
inc edx
cmp esi, edx
jg 0x4ba498
mov edx, dword [ebx + 0x1c8]
movzx edx, word [edx]
imul edx, dword [esp + 0x2c]
shr edx, 3
mov dword [esp + 0x2c], edx
mov ecx, dword [ebx + 0x1c8]
movzx edx, word [ecx]
imul edx, dword [esp + 0x28]
shr edx, 3
mov dword [esp + 0x28], edx
mov ecx, dword [esp + 0x28]
cmp ecx, 0x3fffc0
jbe 0x4ba516
mov dword [esp + 0x1c], 0x7fffffff
jmp 0x4ba527
mov edx, dword [esp + 0x28]
shl edx, 0xa
mov ecx, dword [esp + 0x2c]
add edx, ecx
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x10], edx
mov cl, byte [esp + 0x14]
cmp cl, 0x10
jne 0x4ba5cd
xor edx, edx
mov dword [esp + 0x3c], edx
mov ecx, dword [esp + 0xc]
inc ecx
mov dword [esp + 0x30], ecx
mov edx, dword [ebx + 0xb0]
inc edx
mov dword [esp + 0x38], edx
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jbe 0x4ba57e
mov edx, dword [esp + 0x30]
mov cl, byte [edx]
mov edx, dword [esp + 0x38]
mov byte [edx], cl
inc dword [esp + 0x3c]
inc dword [esp + 0x30]
inc dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
ja 0x4ba55e
mov edx, dword [esp + 0xc]
inc edx
mov dword [esp + 0x34], edx
mov ecx, dword [esp + 0x3c]
cmp ebp, ecx
jbe 0x4ba5be
mov edx, dword [esp + 0x30]
mov cl, byte [edx]
mov edx, dword [esp + 0x34]
mov dl, byte [edx]
sub cl, dl
mov edx, dword [esp + 0x38]
and cl, 0xff
mov byte [edx], cl
inc dword [esp + 0x3c]
inc dword [esp + 0x30]
inc dword [esp + 0x34]
inc dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
cmp ebp, ecx
ja 0x4ba58f
mov edx, dword [ebx + 0xb0]
mov dword [esp + 8], edx
jmp 0x4ba850
test byte [esp + 0x14], 0x10
je 0x4ba850
xor edx, edx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4c], ecx
mov cl, byte [ebx + 0x1b8]
cmp cl, 2
jne 0x4ba6c3
mov ecx, dword [esp + 0x4c]
and ecx, 0xffff
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x4c]
shr ecx, 0xa
and ecx, 0x3fffc0
mov dword [esp + 0x58], ecx
xor ecx, ecx
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x54]
cmp esi, ecx
jle 0x4ba670
mov ecx, dword [ebx + 0x1bc]
mov edi, dword [esp + 0x54]
mov cl, byte [ecx + edi]
cmp cl, 1
jne 0x4ba664
mov ecx, dword [ebx + 0x1c4]
mov edi, dword [esp + 0x54]
movzx ecx, word [ecx + edi*2]
imul ecx, dword [esp + 0x5c]
shr ecx, 8
mov dword [esp + 0x5c], ecx
mov ecx, dword [ebx + 0x1c4]
mov edi, dword [esp + 0x54]
movzx ecx, word [ecx + edi*2]
imul ecx, dword [esp + 0x58]
shr ecx, 8
mov dword [esp + 0x58], ecx
inc dword [esp + 0x54]
mov ecx, dword [esp + 0x54]
cmp esi, ecx
jg 0x4ba61e
mov ecx, dword [ebx + 0x1cc]
movzx ecx, word [ecx + 2]
imul ecx, dword [esp + 0x5c]
shr ecx, 3
mov dword [esp + 0x5c], ecx
mov ecx, dword [ebx + 0x1cc]
movzx ecx, word [ecx + 2]
imul ecx, dword [esp + 0x58]
shr ecx, 3
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x58]
cmp ecx, 0x3fffc0
jbe 0x4ba6b2
mov dword [esp + 0x4c], 0x7fffffff
jmp 0x4ba6c3
mov ecx, dword [esp + 0x58]
shl ecx, 0xa
mov edi, dword [esp + 0x5c]
add ecx, edi
mov dword [esp + 0x4c], ecx
xor ecx, ecx
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0xc]
inc ecx
mov dword [esp + 0x40], ecx
mov ecx, dword [ebx + 0xb0]
inc ecx
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x50]
cmp eax, ecx
jbe 0x4ba720
mov ecx, dword [esp + 0x40]
mov edi, dword [esp + 0x44]
mov cl, byte [ecx]
mov byte [edi], cl
and ecx, 0xff
cmp ecx, 0x80
jge 0x4ba703
mov edi, ecx
jmp 0x4ba70a
mov edi, pe_nt_image_headers32
sub edi, ecx
add edx, edi
inc dword [esp + 0x50]
inc dword [esp + 0x40]
inc dword [esp + 0x44]
mov ecx, dword [esp + 0x50]
cmp eax, ecx
ja 0x4ba6e5
mov ecx, dword [esp + 0xc]
inc ecx
mov dword [esp + 0x48], ecx
jmp 0x4ba773
mov ecx, dword [esp + 0x40]
mov edi, dword [esp + 0x48]
mov cl, byte [ecx]
sub cl, byte [edi]
mov edi, dword [esp + 0x44]
and cl, 0xff
mov byte [edi], cl
and ecx, 0xff
cmp ecx, 0x80
jge 0x4ba752
mov edi, ecx
jmp 0x4ba759
mov edi, pe_nt_image_headers32
sub edi, ecx
add edx, edi
mov ecx, dword [esp + 0x4c]
cmp edx, ecx
ja 0x4ba781
inc dword [esp + 0x50]
inc dword [esp + 0x40]
inc dword [esp + 0x48]
inc dword [esp + 0x44]
mov ecx, dword [esp]
mov ecx, dword [ecx + 4]
mov edi, dword [esp + 0x50]
cmp ecx, edi
ja 0x4ba72b
mov cl, byte [ebx + 0x1b8]
cmp cl, 2
jne 0x4ba83a
mov ecx, edx
shr edx, 0xa
and ecx, 0xffff
and edx, 0x3fffc0
mov dword [esp + 0x64], ecx
mov dword [esp + 0x60], edx
xor edx, edx
cmp esi, edx
jle 0x4ba7ee
mov ecx, dword [ebx + 0x1bc]
mov cl, byte [ecx + edx]
cmp cl, 1
jne 0x4ba7e9
mov ecx, dword [ebx + 0x1c4]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0x64]
shr ecx, 8
mov dword [esp + 0x64], ecx
mov ecx, dword [ebx + 0x1c4]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0x60]
shr ecx, 8
mov dword [esp + 0x60], ecx
inc edx
cmp esi, edx
jg 0x4ba7af
mov edx, dword [ebx + 0x1cc]
movzx edx, word [edx + 2]
imul edx, dword [esp + 0x64]
shr edx, 3
mov dword [esp + 0x64], edx
mov ecx, dword [ebx + 0x1cc]
movzx edx, word [ecx + 2]
imul edx, dword [esp + 0x60]
shr edx, 3
mov dword [esp + 0x60], edx
mov ecx, dword [esp + 0x60]
cmp ecx, 0x3fffc0
jbe 0x4ba82d
mov edx, 0x7fffffff
jmp 0x4ba83a
mov edx, dword [esp + 0x60]
shl edx, 0xa
mov ecx, dword [esp + 0x64]
add edx, ecx
mov ecx, dword [esp + 0x10]
cmp edx, ecx
jae 0x4ba850
mov dword [esp + 0x10], edx
mov edx, dword [ebx + 0xb0]
mov dword [esp + 8], edx
mov dl, byte [esp + 0x14]
cmp dl, 0x20
jne 0x4ba8c2
xor ecx, ecx
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0xc]
inc edx
mov dword [esp + 0x68], edx
mov ecx, dword [ebx + 0xb4]
inc ecx
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 4]
inc edx
mov dword [esp + 0x70], edx
mov ecx, dword [esp + 0x74]
cmp ebp, ecx
jbe 0x4ba8b3
mov edx, dword [esp + 0x68]
mov cl, byte [edx]
mov edx, dword [esp + 0x70]
mov dl, byte [edx]
sub cl, dl
mov edx, dword [esp + 0x6c]
and cl, 0xff
mov byte [edx], cl
inc dword [esp + 0x74]
inc dword [esp + 0x68]
inc dword [esp + 0x70]
inc dword [esp + 0x6c]
mov ecx, dword [esp + 0x74]
cmp ebp, ecx
ja 0x4ba884
mov edx, dword [ebx + 0xb4]
mov dword [esp + 8], edx
jmp 0x4babba
test byte [esp + 0x14], 0x20
je 0x4babba
xor ecx, ecx
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x88], edx
mov cl, byte [ebx + 0x1b8]
cmp cl, 2
jne 0x4ba9da
mov edx, dword [esp + 0x88]
and edx, 0xffff
mov dword [esp + 0x98], edx
xor edx, edx
mov ecx, dword [esp + 0x88]
shr ecx, 0xa
and ecx, 0x3fffc0
cmp esi, edx
mov dword [esp + 0x94], ecx
jle 0x4ba96c
mov ecx, dword [ebx + 0x1bc]
mov cl, byte [ecx + edx]
cmp cl, 2
jne 0x4ba967
mov ecx, dword [ebx + 0x1c4]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0x98]
shr ecx, 8
mov dword [esp + 0x98], ecx
mov ecx, dword [ebx + 0x1c4]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0x94]
shr ecx, 8
mov dword [esp + 0x94], ecx
inc edx
cmp esi, edx
jg 0x4ba921
mov edx, dword [ebx + 0x1cc]
movzx edx, word [edx + 4]
imul edx, dword [esp + 0x98]
shr edx, 3
mov dword [esp + 0x98], edx
mov ecx, dword [ebx + 0x1cc]
movzx edx, word [ecx + 4]
imul edx, dword [esp + 0x94]
shr edx, 3
mov dword [esp + 0x94], edx
mov ecx, dword [esp + 0x94]
cmp ecx, 0x3fffc0
jbe 0x4ba9c0
mov dword [esp + 0x88], 0x7fffffff
jmp 0x4ba9da
mov edx, dword [esp + 0x94]
shl edx, 0xa
mov ecx, dword [esp + 0x98]
add edx, ecx
mov dword [esp + 0x88], edx
xor edx, edx
mov dword [esp + 0x8c], edx
mov ecx, dword [esp + 0xc]
inc ecx
mov dword [esp + 0x78], ecx
mov edx, dword [ebx + 0xb4]
inc edx
mov dword [esp + 0x7c], edx
mov ecx, dword [esp + 4]
inc ecx
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x8c]
cmp ebp, edx
jbe 0x4baa9d
mov ecx, dword [esp + 0x78]
mov dl, byte [ecx]
mov ecx, dword [esp + 0x80]
mov cl, byte [ecx]
sub dl, cl
mov ecx, dword [esp + 0x7c]
and dl, 0xff
mov byte [ecx], dl
and edx, 0xff
mov dword [esp + 0x90], edx
inc dword [esp + 0x80]
inc dword [esp + 0x78]
inc dword [esp + 0x7c]
mov ecx, dword [esp + 0x90]
cmp ecx, 0x80
jge 0x4baa60
mov edx, dword [esp + 0x90]
jmp 0x4baa6e
mov edx, pe_nt_image_headers32
mov ecx, dword [esp + 0x90]
sub edx, ecx
add dword [esp + 0x84], edx
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x88]
cmp edx, ecx
ja 0x4baa9d
inc dword [esp + 0x8c]
mov edx, dword [esp + 0x8c]
cmp ebp, edx
ja 0x4baa12
mov cl, byte [ebx + 0x1b8]
cmp cl, 2
jne 0x4bab96
mov edx, dword [esp + 0x84]
and edx, 0xffff
mov dword [esp + 0xa0], edx
xor edx, edx
mov ecx, dword [esp + 0x84]
shr ecx, 0xa
and ecx, 0x3fffc0
cmp esi, edx
mov dword [esp + 0x9c], ecx
jle 0x4bab28
mov ecx, dword [ebx + 0x1bc]
mov cl, byte [ecx + edx]
cmp cl, 2
jne 0x4bab23
mov ecx, dword [ebx + 0x1c0]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0xa0]
shr ecx, 8
mov dword [esp + 0xa0], ecx
mov ecx, dword [ebx + 0x1c0]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0x9c]
shr ecx, 8
mov dword [esp + 0x9c], ecx
inc edx
cmp esi, edx
jg 0x4baadd
mov edx, dword [ebx + 0x1c8]
movzx edx, word [edx + 4]
imul edx, dword [esp + 0xa0]
shr edx, 3
mov dword [esp + 0xa0], edx
mov ecx, dword [ebx + 0x1c8]
movzx edx, word [ecx + 4]
imul edx, dword [esp + 0x9c]
shr edx, 3
mov dword [esp + 0x9c], edx
mov ecx, dword [esp + 0x9c]
cmp ecx, 0x3fffc0
jbe 0x4bab7c
mov dword [esp + 0x84], 0x7fffffff
jmp 0x4bab96
mov edx, dword [esp + 0x9c]
shl edx, 0xa
mov ecx, dword [esp + 0xa0]
add edx, ecx
mov dword [esp + 0x84], edx
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x10]
cmp edx, ecx
jae 0x4babba
mov edx, dword [esp + 0x84]
mov dword [esp + 0x10], edx
mov ecx, dword [ebx + 0xb4]
mov dword [esp + 8], ecx
mov dl, byte [esp + 0x14]
cmp dl, 0x40
jne 0x4bacda
xor ecx, ecx
mov dword [esp + 0xb4], ecx
mov edx, dword [esp + 0xc]
inc edx
mov dword [esp + 0xa4], edx
mov ecx, dword [ebx + 0xb8]
inc ecx
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 4]
inc edx
mov dword [esp + 0xac], edx
mov ecx, dword [esp + 0xb4]
cmp eax, ecx
jbe 0x4bac51
mov edx, dword [esp + 0xac]
xor ecx, ecx
mov cl, byte [edx]
sar ecx, 1
jns 0x4bac13
adc ecx, 0
mov edx, dword [esp + 0xa4]
mov dl, byte [edx]
sub dl, cl
mov ecx, dword [esp + 0xa8]
and dl, 0xff
mov byte [ecx], dl
inc dword [esp + 0xac]
inc dword [esp + 0xa4]
inc dword [esp + 0xa8]
inc dword [esp + 0xb4]
mov edx, dword [esp + 0xb4]
cmp eax, edx
ja 0x4bac01
mov ecx, dword [esp + 0xc]
inc ecx
mov dword [esp + 0xb0], ecx
mov edx, dword [esp + 0xb4]
cmp ebp, edx
jbe 0x4baccb
mov ecx, dword [esp + 0xac]
xor edx, edx
mov dl, byte [ecx]
mov ecx, dword [esp + 0xb0]
movzx ecx, byte [ecx]
add edx, ecx
sar edx, 1
jns 0x4bac86
adc edx, 0
mov ecx, dword [esp + 0xa4]
mov cl, byte [ecx]
sub cl, dl
mov edx, dword [esp + 0xa8]
and cl, 0xff
mov byte [edx], cl
inc dword [esp + 0xb0]
inc dword [esp + 0xac]
inc dword [esp + 0xa4]
inc dword [esp + 0xa8]
inc dword [esp + 0xb4]
mov edx, dword [esp + 0xb4]
cmp ebp, edx
ja 0x4bac68
mov ecx, dword [ebx + 0xb8]
mov dword [esp + 8], ecx
jmp 0x4bb05d
test byte [esp + 0x14], 0x40
je 0x4bb05d
xor edi, edi
mov edx, dword [esp + 0x10]
mov dword [esp + 0xc8], edx
mov cl, byte [ebx + 0x1b8]
cmp cl, 2
jne 0x4bae1b
mov edx, dword [esp + 0xc8]
and edx, 0xffff
mov dword [esp + 0xd8], edx
xor edx, edx
mov ecx, dword [esp + 0xc8]
shr ecx, 0xa
and ecx, 0x3fffc0
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd0], edx
mov ecx, dword [esp + 0xd0]
cmp esi, ecx
jle 0x4badad
mov edx, dword [ebx + 0x1bc]
mov ecx, dword [esp + 0xd0]
mov dl, byte [edx + ecx]
cmp dl, 3
jne 0x4bad9b
mov ecx, dword [ebx + 0x1c4]
mov edx, dword [esp + 0xd0]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0xd8]
shr ecx, 8
mov dword [esp + 0xd8], ecx
mov edx, dword [ebx + 0x1c4]
mov ecx, dword [esp + 0xd0]
movzx edx, word [edx + ecx*2]
imul edx, dword [esp + 0xd4]
shr edx, 8
mov dword [esp + 0xd4], edx
inc dword [esp + 0xd0]
mov ecx, dword [esp + 0xd0]
cmp esi, ecx
jg 0x4bad40
mov edx, dword [ebx + 0x1cc]
movzx ecx, word [edx + 6]
imul ecx, dword [esp + 0xd8]
shr ecx, 3
mov dword [esp + 0xd8], ecx
mov edx, dword [ebx + 0x1cc]
movzx ecx, word [edx + 6]
imul ecx, dword [esp + 0xd4]
shr ecx, 3
mov dword [esp + 0xd4], ecx
mov edx, dword [esp + 0xd4]
cmp edx, 0x3fffc0
jbe 0x4bae01
mov dword [esp + 0xc8], 0x7fffffff
jmp 0x4bae1b
mov ecx, dword [esp + 0xd4]
shl ecx, 0xa
mov edx, dword [esp + 0xd8]
add ecx, edx
mov dword [esp + 0xc8], ecx
xor ecx, ecx
mov dword [esp + 0xcc], ecx
mov edx, dword [esp + 0xc]
inc edx
mov dword [esp + 0xb8], edx
mov ecx, dword [ebx + 0xb8]
inc ecx
mov dword [esp + 0xbc], ecx
mov edx, dword [esp + 4]
inc edx
mov dword [esp + 0xc0], edx
mov ecx, dword [esp + 0xcc]
cmp eax, ecx
jbe 0x4baec0
mov edx, dword [esp + 0xc0]
xor ecx, ecx
mov cl, byte [edx]
sar ecx, 1
jns 0x4bae67
adc ecx, 0
mov edx, dword [esp + 0xb8]
mov dl, byte [edx]
sub dl, cl
mov ecx, dword [esp + 0xbc]
and dl, 0xff
mov byte [ecx], dl
and edx, 0xff
inc dword [esp + 0xc0]
inc dword [esp + 0xb8]
inc dword [esp + 0xbc]
cmp edx, 0x80
jge 0x4baea5
mov ecx, edx
jmp 0x4baeac
mov ecx, pe_nt_image_headers32
sub ecx, edx
add edi, ecx
inc dword [esp + 0xcc]
mov edx, dword [esp + 0xcc]
cmp eax, edx
ja 0x4bae55
mov edx, dword [esp + 0xc]
inc edx
mov dword [esp + 0xc4], edx
mov ecx, dword [esp + 0xcc]
cmp ebp, ecx
jbe 0x4baf68
mov edx, dword [esp + 0xc0]
xor ecx, ecx
mov cl, byte [edx]
mov edx, dword [esp + 0xc4]
movzx edx, byte [edx]
add ecx, edx
sar ecx, 1
jns 0x4baef9
adc ecx, 0
mov edx, dword [esp + 0xb8]
mov dl, byte [edx]
sub dl, cl
mov ecx, dword [esp + 0xbc]
and dl, 0xff
mov byte [ecx], dl
and edx, 0xff
inc dword [esp + 0xc4]
inc dword [esp + 0xc0]
inc dword [esp + 0xb8]
inc dword [esp + 0xbc]
cmp edx, 0x80
jge 0x4baf3e
mov ecx, edx
jmp 0x4baf45
mov ecx, pe_nt_image_headers32
sub ecx, edx
add edi, ecx
mov edx, dword [esp + 0xc8]
cmp edi, edx
ja 0x4baf68
inc dword [esp + 0xcc]
mov edx, dword [esp + 0xcc]
cmp ebp, edx
ja 0x4baedb
mov cl, byte [ebx + 0x1b8]
cmp cl, 2
jne 0x4bb047
mov edx, edi
and edx, 0xffff
shr edi, 0xa
mov dword [esp + 0xe0], edx
and edi, 0x3fffc0
xor edx, edx
cmp esi, edx
mov dword [esp + 0xdc], edi
jle 0x4bafe6
mov ecx, dword [ebx + 0x1bc]
mov cl, byte [ecx + edx]
test cl, cl
jne 0x4bafe1
mov ecx, dword [ebx + 0x1c0]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0xe0]
shr ecx, 8
mov dword [esp + 0xe0], ecx
mov ecx, dword [ebx + 0x1c0]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0xdc]
shr ecx, 8
mov dword [esp + 0xdc], ecx
inc edx
cmp esi, edx
jg 0x4baf9c
mov edx, dword [ebx + 0x1c8]
movzx edx, word [edx + 6]
imul edx, dword [esp + 0xe0]
shr edx, 3
mov dword [esp + 0xe0], edx
mov ecx, dword [ebx + 0x1c8]
movzx edx, word [ecx + 6]
imul edx, dword [esp + 0xdc]
shr edx, 3
mov dword [esp + 0xdc], edx
mov ecx, dword [esp + 0xdc]
cmp ecx, 0x3fffc0
jbe 0x4bb034
mov edi, 0x7fffffff
jmp 0x4bb047
mov edi, dword [esp + 0xdc]
shl edi, 0xa
mov edx, dword [esp + 0xe0]
add edi, edx
mov ecx, dword [esp + 0x10]
cmp edi, ecx
jae 0x4bb05d
mov dword [esp + 0x10], edi
mov edx, dword [ebx + 0xb8]
mov dword [esp + 8], edx
mov cl, byte [esp + 0x14]
cmp cl, 0x80
jne 0x4bb241
xor edx, edx
mov dword [esp + 0xf8], edx
mov ecx, dword [esp + 0xc]
inc ecx
mov dword [esp + 0xe4], ecx
mov edx, dword [ebx + 0xbc]
inc edx
mov dword [esp + 0xe8], edx
mov ecx, dword [esp + 4]
inc ecx
mov dword [esp + 0xec], ecx
mov edx, dword [esp + 0xf8]
cmp eax, edx
jbe 0x4bb0eb
mov ecx, dword [esp + 0xe4]
mov dl, byte [ecx]
mov ecx, dword [esp + 0xec]
mov cl, byte [ecx]
sub dl, cl
mov ecx, dword [esp + 0xe8]
and dl, 0xff
mov byte [ecx], dl
inc dword [esp + 0xec]
inc dword [esp + 0xe4]
inc dword [esp + 0xe8]
inc dword [esp + 0xf8]
mov edx, dword [esp + 0xf8]
cmp eax, edx
ja 0x4bb0a4
mov eax, dword [esp + 0xc]
inc eax
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 4]
inc eax
mov dword [esp + 0xf0], eax
mov edx, dword [esp + 0xf8]
cmp ebp, edx
jbe 0x4bb232
mov ecx, dword [esp + 0xec]
xor eax, eax
mov al, byte [ecx]
mov dword [esp + 0x100], eax
inc dword [esp + 0xec]
mov edx, dword [esp + 0xf0]
xor ecx, ecx
mov cl, byte [edx]
mov dword [esp + 0x104], ecx
inc dword [esp + 0xf0]
mov eax, dword [esp + 0xf4]
xor edx, edx
mov dl, byte [eax]
mov dword [esp + 0xfc], edx
inc dword [esp + 0xf4]
mov eax, dword [esp + 0x100]
mov edx, dword [esp + 0x104]
sub eax, edx
mov edx, dword [esp + 0xfc]
mov ecx, dword [esp + 0x104]
sub edx, ecx
test eax, eax
jge 0x4bb187
mov ecx, eax
neg ecx
jmp 0x4bb189
mov ecx, eax
mov dword [esp + 0x108], ecx
test edx, edx
jge 0x4bb19a
mov ecx, edx
neg ecx
jmp 0x4bb19c
mov ecx, edx
mov dword [esp + 0x10c], ecx
lea ecx, [edx + eax]
test ecx, ecx
jge 0x4bb1b1
lea ecx, [edx + eax]
neg ecx
jmp 0x4bb1b4
lea ecx, [edx + eax]
mov edx, ecx
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x10c]
cmp eax, ecx
jg 0x4bb1dc
mov eax, dword [esp + 0x108]
cmp edx, eax
jl 0x4bb1dc
mov eax, dword [esp + 0xfc]
jmp 0x4bb1f7
mov ecx, dword [esp + 0x10c]
cmp edx, ecx
jl 0x4bb1f0
mov eax, dword [esp + 0x100]
jmp 0x4bb1f7
mov eax, dword [esp + 0x104]
mov edx, dword [esp + 0xe4]
mov cl, byte [edx]
sub cl, al
mov eax, dword [esp + 0xe8]
and cl, 0xff
mov byte [eax], cl
inc dword [esp + 0xe4]
inc dword [esp + 0xe8]
inc dword [esp + 0xf8]
mov edx, dword [esp + 0xf8]
cmp ebp, edx
ja 0x4bb112
mov ecx, dword [ebx + 0xbc]
mov dword [esp + 8], ecx
jmp 0x4bb682
test byte [esp + 0x14], 0x80
je 0x4bb682
xor edx, edx
mov dword [esp + 0x124], edx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x128], ecx
mov dl, byte [ebx + 0x1b8]
cmp dl, 2
jne 0x4bb359
mov ecx, dword [esp + 0x128]
and ecx, 0xffff
mov dword [esp + 0x134], ecx
mov edx, dword [esp + 0x128]
shr edx, 0xa
and edx, 0x3fffc0
mov dword [esp + 0x130], edx
xor edx, edx
cmp esi, edx
jle 0x4bb2eb
mov ecx, dword [ebx + 0x1bc]
mov cl, byte [ecx + edx]
cmp cl, 4
jne 0x4bb2e6
mov ecx, dword [ebx + 0x1c4]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0x134]
shr ecx, 8
mov dword [esp + 0x134], ecx
mov ecx, dword [ebx + 0x1c4]
movzx ecx, word [ecx + edx*2]
imul ecx, dword [esp + 0x130]
shr ecx, 8
mov dword [esp + 0x130], ecx
inc edx
cmp esi, edx
jg 0x4bb2a0
mov edx, dword [ebx + 0x1cc]
movzx edx, word [edx + 8]
imul edx, dword [esp + 0x134]
shr edx, 3
mov dword [esp + 0x134], edx
mov ecx, dword [ebx + 0x1cc]
movzx edx, word [ecx + 8]
imul edx, dword [esp + 0x130]
shr edx, 3
mov dword [esp + 0x130], edx
mov ecx, dword [esp + 0x130]
cmp ecx, 0x3fffc0
jbe 0x4bb33f
mov dword [esp + 0x128], 0x7fffffff
jmp 0x4bb359
mov edx, dword [esp + 0x130]
shl edx, 0xa
mov ecx, dword [esp + 0x134]
add edx, ecx
mov dword [esp + 0x128], edx
xor edx, edx
mov dword [esp + 0x12c], edx
mov ecx, dword [esp + 0xc]
inc ecx
mov dword [esp + 0x110], ecx
mov edx, dword [ebx + 0xbc]
inc edx
mov dword [esp + 0x114], edx
mov ecx, dword [esp + 4]
inc ecx
mov dword [esp + 0x118], ecx
mov edx, dword [esp + 0x12c]
cmp eax, edx
jbe 0x4bb3fa
mov ecx, dword [esp + 0x110]
mov dl, byte [ecx]
mov ecx, dword [esp + 0x118]
mov cl, byte [ecx]
sub dl, cl
mov ecx, dword [esp + 0x114]
and dl, 0xff
mov byte [ecx], dl
and edx, 0xff
inc dword [esp + 0x118]
inc dword [esp + 0x110]
inc dword [esp + 0x114]
cmp edx, 0x80
jge 0x4bb3da
mov ecx, edx
jmp 0x4bb3e1
mov ecx, pe_nt_image_headers32
sub ecx, edx
add dword [esp + 0x124], ecx
inc dword [esp + 0x12c]
mov edx, dword [esp + 0x12c]
cmp eax, edx
ja 0x4bb393
mov eax, dword [esp + 0xc]
inc eax
mov dword [esp + 0x120], eax
mov eax, dword [esp + 4]
inc eax
mov dword [esp + 0x11c], eax
mov edx, dword [esp + 0x12c]
cmp ebp, edx
jbe 0x4bb573
mov ecx, dword [esp + 0x118]
xor eax, eax
mov al, byte [ecx]
mov dword [esp + 0x13c], eax
inc dword [esp + 0x118]
mov edx, dword [esp + 0x11c]
xor ecx, ecx
mov cl, byte [edx]
mov dword [esp + 0x140], ecx
inc dword [esp + 0x11c]
mov eax, dword [esp + 0x120]
xor edx, edx
mov dl, byte [eax]
mov dword [esp + 0x138], edx
inc dword [esp + 0x120]
mov edi, dword [esp + 0x13c]
mov eax, dword [esp + 0x140]
sub edi, eax
mov eax, dword [esp + 0x138]
mov edx, dword [esp + 0x140]
sub eax, edx
test edi, edi
jge 0x4bb496
mov ecx, edi
neg ecx
jmp 0x4bb498
mov ecx, edi
mov dword [esp + 0x144], ecx
test eax, eax
jge 0x4bb4a9
mov edx, eax
neg edx
jmp 0x4bb4ab
mov edx, eax
mov dword [esp + 0x148], edx
lea ecx, [eax + edi]
test ecx, ecx
jge 0x4bb4c0
lea edx, [eax + edi]
neg edx
jmp 0x4bb4c3
lea edx, [eax + edi]
mov eax, edx
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x148]
cmp ecx, edx
jg 0x4bb4eb
mov ecx, dword [esp + 0x144]
cmp eax, ecx
jl 0x4bb4eb
mov edi, dword [esp + 0x138]
jmp 0x4bb506
mov edx, dword [esp + 0x148]
cmp eax, edx
jl 0x4bb4ff
mov edi, dword [esp + 0x13c]
jmp 0x4bb506
mov edi, dword [esp + 0x140]
mov edx, dword [esp + 0x110]
mov eax, edi
mov cl, byte [edx]
xor edx, edx
sub cl, al
mov eax, dword [esp + 0x114]
and cl, 0xff
mov byte [eax], cl
mov dl, cl
inc dword [esp + 0x110]
inc dword [esp + 0x114]
cmp edx, 0x80
jge 0x4bb53d
mov eax, edx
jmp 0x4bb544
mov eax, pe_nt_image_headers32
sub eax, edx
add dword [esp + 0x124], eax
mov edx, dword [esp + 0x124]
mov ecx, dword [esp + 0x128]
cmp edx, ecx
ja 0x4bb573
inc dword [esp + 0x12c]
mov eax, dword [esp + 0x12c]
cmp ebp, eax
ja 0x4bb421
mov dl, byte [ebx + 0x1b8]
cmp dl, 2
jne 0x4bb669
mov ecx, dword [esp + 0x124]
and ecx, 0xffff
mov dword [esp + 0x150], ecx
mov eax, dword [esp + 0x124]
shr eax, 0xa
and eax, 0x3fffc0
mov dword [esp + 0x14c], eax
xor eax, eax
cmp esi, eax
jle 0x4bb5fd
mov edx, dword [ebx + 0x1bc]
mov cl, byte [edx + eax]
cmp cl, 4
jne 0x4bb5f8
mov edx, dword [ebx + 0x1c0]
movzx ecx, word [edx + eax*2]
imul ecx, dword [esp + 0x150]
shr ecx, 8
mov dword [esp + 0x150], ecx
mov edx, dword [ebx + 0x1c0]
movzx ecx, word [edx + eax*2]
imul ecx, dword [esp + 0x14c]
shr ecx, 8
mov dword [esp + 0x14c], ecx
inc eax
cmp esi, eax
jg 0x4bb5b2
mov eax, dword [ebx + 0x1c8]
movzx eax, word [eax + 8]
imul dword [esp + 0x150]
shr eax, 3
mov dword [esp + 0x150], eax
mov edx, dword [ebx + 0x1c8]
movzx ecx, word [edx + 8]
imul ecx, dword [esp + 0x14c]
shr ecx, 3
mov dword [esp + 0x14c], ecx
mov eax, dword [esp + 0x14c]
cmp eax, 0x3fffc0
jbe 0x4bb64f
mov dword [esp + 0x124], 0x7fffffff
jmp 0x4bb669
mov edx, dword [esp + 0x14c]
shl edx, 0xa
mov ecx, dword [esp + 0x150]
add edx, ecx
mov dword [esp + 0x124], edx
mov eax, dword [esp + 0x124]
mov edx, dword [esp + 0x10]
cmp eax, edx
jae 0x4bb682
mov ecx, dword [ebx + 0xbc]
mov dword [esp + 8], ecx
mov edx, dword [esp + 8]
mov eax, ebx
call fcn.004bb704
mov cl, byte [ebx + 0x1b9]
test cl, cl
jbe 0x4bb6f6
mov dword [esp + 0x154], 1
mov eax, dword [esp + 0x154]
cmp esi, eax
jle 0x4bb6e0
mov edx, dword [ebx + 0x1bc]
mov ecx, dword [esp + 0x154]
mov al, byte [edx + ecx - 1]
mov edx, dword [ebx + 0x1bc]
mov ecx, dword [esp + 0x154]
mov byte [edx + ecx], al
inc dword [esp + 0x154]
mov eax, dword [esp + 0x154]
cmp esi, eax
jg 0x4bb6ad
mov edx, dword [ebx + 0x1bc]
mov ecx, dword [esp + 0x154]
mov eax, dword [esp + 8]
mov al, byte [eax]
mov byte [edx + ecx], al
add esp, 0x158
pop ebp
pop edi
pop esi
pop ebx
ret