Function at 0x4b98d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6b21fc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x30]
cmp eax, dword [ecx + 8]
jbe 0x4ba134
sub esp, 0xb0
mov ebx, dword [esp + 0xb4]
test byte [ebx], al
cmp dword [ebx + 0x2000c], 0x7ffe0001
jl 0x4b991b
mov ebp, dword [ebx + 0x20004]
test ebp, ebp
jne 0x4b9914
xor eax, eax
jmp 0x4ba11e
xor eax, eax
jmp 0x4ba0d4
mov edx, dword [esp + 0xc8]
cmp edx, 0x11
jge 0x4b995e
add dword [ebx + 0x2000c], 0xffff
mov dword [ebx + 0x20004], 0
mov eax, dword [esp + 0xc4]
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0xc0]
xor esi, esi
jmp 0x4ba059
mov ebp, dword [esp + 0xc4]
mov esi, dword [ebp]
imul edi, esi, 0x1e35a7bd
lea eax, [edx - 0xf]
mov dword [esp + 0x6c], eax
nop
nop
shr edi, 0x12
xor ecx, ecx
xor ecx, ecx
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0xc0]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x88], edx
mov edx, dword [esp + 0xb8]
mov dword [esp + 0xa0], edx
xor ecx, ecx
mov eax, dword [esp + 0x90]
mov edx, dword [esp + 0x88]
jmp 0x4b9a2e
mov esi, dword [esp + 0x68]
shl esi, 0x10
shr edx, 0x10
or esi, edx
imul edi, esi, 0x1e35a7bd
nop
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x24]
lea ecx, [edx + ecx + 5]
shr edi, 0x12
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0xb4]
mov ebp, dword [esp + 0xc4]
mov edx, dword [esp + 0x54]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x60]
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0xa0], edx
mov edx, dword [esp + 0xc8]
mov dword [esp + 0x80], eax
mov eax, 0x20
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x80]
jmp 0x4b9ae4
mov edx, dword [esp + 0xcc]
cmp edx, edi
jb 0x4ba03d
mov ebx, dword [esp + 0x2c]
cmp ebx, edi
ja 0x4ba034
mov ebp, edx
sub edx, ebx
neg edx
sar edx, 0x1f
and edx, ebx
mov esi, edi
sub edi, ebx
mov dword [esp + 0x34], edi
mov ebx, dword [esp + 0xc4]
add edx, ebx
mov dword [esp + 0x9c], edx
mov dword [esp + 0x70], eax
xor eax, eax
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x70]
jmp 0x4b9d25
mov edx, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
mov edi, dword [esp + 0xa0]
jmp 0x4b9db9
imul edi, edx, 0x1e35a7bd
shr edi, 0x12
mov ebp, dword [esp + 0xc4]
mov ecx, dword [esp + 0xc8]
mov ebx, dword [esp + 0x6c]
mov esi, dword [esp + 0x20]
mov eax, ebx
mov ebx, dword [esp + 0xb4]
mov ecx, dword [esp + 0x28]
mov esi, edx
mov edx, dword [esp + 0xc8]
mov dword [esp + 0x44], esi
mov esi, dword [esp + 0x20]
sar esi, 5
lea ebp, [ecx + esi]
mov ebx, dword [esp + 0x20]
add ebx, esi
cmp eax, ebp
jl 0x4b9b9f
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ecx
and edi, 0x3fff
mov ebx, dword [esp + 0xb4]
lea eax, [ebx + edi*8]
lea esi, [ecx + esi + 4]
mov ecx, dword [eax]
mov dword [esp + 0x68], ecx
lea ecx, [ebx + edi*8]
lea edi, [ebx + edi*8 + 4]
nop
cmp edx, esi
jb 0x4ba04d
cmp esi, ebp
jb 0x4ba044
mov dword [esp + 0x28], ebp
mov esi, dword [eax + 4]
mov dword [esp + 0x64], esi
mov eax, dword [ebx + 0x2000c]
mov esi, dword [esp + 0x24]
add eax, esi
sub edx, ebp
neg edx
sar edx, 0x1f
and edx, ebp
mov ebp, dword [esp + 0xc4]
mov edx, dword [ebp + edx]
mov ebp, dword [esp + 0x44]
mov dword [ecx], ebp
mov dword [edi], eax
mov edi, dword [ebx + 0x2000c]
mov eax, ebx
mov ebx, dword [esp + 0x64]
mov ecx, ebx
sub ebx, edi
mov edi, esi
sub esi, ebx
nop
cmp esi, 0x8000
jg 0x4b9aaf
mov ebx, dword [esp + 0x68]
cmp ebp, ebx
jne 0x4b9aaf
jmp 0x4b9a4a
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x40]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0xa0]
cmp edx, eax
jle 0x4b9bf7
jb 0x4b9ce7
mov esi, dword [esp + 0xcc]
sub esi, eax
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, eax
mov edi, edx
sub edx, eax
mov dword [esp + 0x30], edx
mov eax, dword [esp + 0xc4]
add esi, eax
mov dword [esp + 0x98], esi
mov dword [esp + 0x78], eax
xor eax, eax
mov dword [esp + 0x6c], eax
jmp 0x4b9c88
mov eax, dword [esp + 0xb4]
add dword [eax + 0x2000c], edx
mov esi, dword [eax + 0x20008]
cmp edx, esi
ja 0x4b9c6f
mov dword [eax + 0x20004], edx
mov eax, dword [eax + 0x20000]
mov esi, dword [esp + 0xc4]
cmp esi, eax
je 0x4b9c53
mov dword [esp + 0x6c], ebx
mov dword [esp + 0xac], ebp
mov dword [esp + 0x60], ecx
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
call fcn.004691a0
mov ecx, dword [esp + 0x60]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0xac]
mov dword [esp + 0xd0], ebp
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd8], ecx
add esp, 0xb0
ret
mov ecx, edx
mov edx, esi
call fcn.00468910
mov dword [ebp + ebx*4 - 4], edi
inc eax
mov edi, dword [esp + 0xc8]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x6c]
cmp eax, edx
jge 0x4b9ce0
inc ebx
movzx edi, byte [eax + esi]
cmp ecx, ebx
jae 0x4b9c78
mov dword [esp + 0x68], edi
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x532ba0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x30]
mov esi, dword [esp + 0x98]
mov edi, dword [esp + 0x68]
jmp 0x4b9c78
mov edx, edi
jmp 0x4b9bf7
mov ecx, edx
call fcn.00468930
mov esi, dword [esp + 0xa0]
mov dword [esi + ebx*4 - 4], eax
lea eax, [ebp + 1]
mov ebp, dword [esp + 0xcc]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x60], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], ebx
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0x64]
mov ebx, dword [esp + 0xc4]
mov ebp, dword [esp + 0x60]
cmp ebp, edi
jge 0x4b9a9b
mov ebx, dword [esp + 0x3c]
inc ebx
movzx eax, byte [ebp + edx]
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jae 0x4b9cee
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x532ba0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x60]
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x34]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x68]
jmp 0x4b9cee
mov ebx, dword [esp + 0xc4]
mov esi, dword [esp + 0x54]
mov edx, dword [esp + 0x60]
mov ebp, dword [esp + 0x58]
mov edi, dword [esp + 0xa4]
mov dword [esp + 0x60], edx
mov dword [esp + 0x5c], ebp
mov dword [esp + 0xa8], edi
mov dword [esp + 0x24], esi
lea edi, [esi + 4]
sub ecx, dword [eax + 0x2000c]
mov dword [esp + 0x64], ecx
mov dword [esp], eax
mov dword [esp + 4], edi
lea edi, [ecx + 4]
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebx
mov edi, dword [esp + 0xc8]
mov dword [esp + 0x10], edi
mov ebx, dword [esp + 0xcc]
mov dword [esp + 0x14], ebx
call fcn.004ba140
mov eax, dword [esp + 0x18]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x5c]
inc ecx
lea edx, [eax + 1]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x64]
mov esi, ebx
sub ebx, ebp
shl edx, 0x16
lea edx, [ebx + edx + 0x3fffffff]
mov ebx, dword [esp + 0x60]
cmp ebx, ecx
jb 0x4b9e3d
mov edi, dword [esp + 0xa8]
jmp 0x4b9e84
mov dword [esp + 0x68], edx
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x532ba0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0x24]
mov ebx, edx
mov edx, dword [esp + 0x68]
mov dword [esp + 0x60], ebx
mov dword [edi + ecx*4 - 4], edx
lea ebp, [esi + eax + 4]
lea edx, [eax + esi]
mov ebx, dword [esp + 0x6c]
cmp ebp, ebx
jge 0x4ba00e
lea ebx, [esi + eax + 0xb]
lea eax, [esi + eax + 3]
mov esi, dword [esp + 0xc8]
cmp esi, ebx
jb 0x4ba02b
cmp ebx, eax
jb 0x4ba024
mov dword [esp + 0xa4], edi
mov dword [esp + 0x58], ecx
mov dword [esp + 0x54], ebp
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0xb4]
mov ecx, dword [ebx + 0x2000c]
lea ecx, [ecx + edx + 3]
mov dword [esp + 0x50], ecx
sub esi, edx
add esi, 0xfffffffd
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, eax
mov ebp, dword [esp + 0xc4]
movzx eax, byte [esi + ebp]
movzx edi, byte [ebp + esi + 1]
mov dword [esp + 0x68], edi
shl edi, 8
or edi, eax
mov eax, ebx
mov ebx, dword [esp + 0x68]
shr ebx, 0x18
movzx edx, byte [ebp + esi + 2]
mov dword [esp + 0x68], edx
shl edx, 0x10
or edi, edx
mov edx, edi
mov edi, dword [esp + 0x68]
shr edi, 0x10
or ebx, edi
movzx edi, byte [ebp + esi + 3]
mov dword [esp + 0x68], edi
shr edi, 8
or ebx, edi
mov edi, dword [esp + 0x68]
shl edi, 0x18
or edi, edx
mov edx, edi
shr edi, 8
movzx ecx, byte [ebp + esi + 4]
or ecx, ebx
movzx ebx, byte [ebp + esi + 5]
shl ebx, 8
or ecx, ebx
movzx ebx, byte [ebp + esi + 6]
shl ebx, 0x10
or ecx, ebx
movzx ebx, byte [ebp + esi + 7]
shl ebx, 0x18
or ebx, ecx
mov dword [esp + 0x68], ebx
shl ebx, 0x18
or ebx, edi
mov dword [esp + 0x4c], ebx
imul edi, edx, 0x1e35a7bd
shr edi, 0x12
and edi, 0x3fff
lea ecx, [eax + edi*8]
lea edi, [eax + edi*8 + 4]
imul esi, ebx, 0x1e35a7bd
shr esi, 0x12
and esi, 0x3fff
lea ebp, [eax + esi*8]
lea ebx, [eax + esi*8 + 4]
lea esi, [eax + esi*8]
nop
mov dword [ecx], edx
mov ecx, ebx
mov ebx, dword [esp + 0x50]
mov dword [edi], ebx
mov ebx, dword [esi + 4]
mov dword [esp + 0x50], ebx
mov edi, dword [eax + 0x2000c]
mov ebx, dword [esp + 0x64]
lea edi, [edi + ebx + 4]
nop
mov esi, dword [esi]
mov dword [esp + 0x48], esi
mov esi, dword [esp + 0x4c]
mov dword [ebp], esi
mov dword [ecx], edi
mov ebp, dword [eax + 0x2000c]
mov edi, dword [esp + 0x50]
mov ecx, edi
sub edi, ebp
sub ebx, edi
add ebx, 4
cmp ebx, 0x8000
jg 0x4b99c6
mov ebx, dword [esp + 0x48]
cmp ebx, esi
je 0x4b9d9f
jmp 0x4b99c6
mov edx, dword [esp + 0xc8]
mov eax, ebp
mov ebx, ecx
mov ebp, edi
mov ecx, dword [esp + 0x60]
jmp 0x4b9bb2
mov ecx, ebx
call fcn.00468990
mov ecx, ebx
mov edx, esi
call fcn.00468980
mov eax, ebx
mov ecx, edi
call fcn.00468930
mov ecx, edi
call fcn.00468910
mov eax, ebp
mov ecx, esi
call fcn.00468990
mov ecx, esi
call fcn.00468980
mov dword [ebx + ecx*4 - 4], edi
inc esi
cmp edx, esi
jle 0x4ba0b4
inc ecx
movzx edi, byte [esi + eax]
cmp ebp, ecx
jae 0x4ba054
mov dword [esp + 0x6c], esi
mov dword [esp + 0x68], edi
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x532ba0]
mov dword [esp + 0x10], eax
call fcn.0044f350
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0xc4]
mov edx, dword [esp + 0xc8]
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x68]
jmp 0x4ba054
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], ebp
add esp, 0xb0
ret
mov dword [esi + 4], ebp
inc eax
cmp eax, 0x4000
jge 0x4ba0f9
lea ebp, [ebx + eax*8 + 4]
mov ebp, dword [ebp]
sub ebp, dword [ebx + 0x2000c]
add ebp, 0x8001
lea esi, [ebx + eax*8]
test ebp, ebp
jge 0x4ba0d0
xor ebp, ebp
jmp 0x4ba0d0
mov dword [ebx + 0x2000c], 0x8001
jmp 0x4b991b
lea ebp, [ebx + eax*8]
mov dword [ebp], 0
lea ebp, [ebx + eax*8 + 4]
mov dword [ebp], 0
inc eax
cmp eax, 0x4000
jl 0x4ba108
mov dword [ebx + 0x2000c], 0x8001
jmp 0x4b991b
call fcn.00467460
jmp fcn.004b98d0