Function at 0x4b9b50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6816e0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x18]
cmp eax, dword [ecx + 8]
jbe 0x4ba42f
sub esp, 0x98
mov eax, dword [esp + 0xac]
mov ebx, dword [esp + 0xb8]
cmp eax, ebx
jl 0x4b9dd3
test eax, eax
je 0x4b9da5
test ebx, ebx
je 0x4b9da5
cmp ebx, 1
je 0x4b9d29
mov ebp, dword [esp + 0xa4]
test ebp, ebp
je 0x4b9bcf
mov esi, dword [esp + 0x9c]
lea edi, [esi + ebp*4 - 4]
mov edx, dword [esp + 0xb0]
mov ecx, eax
mov eax, dword [esp + 0xa8]
lea eax, [eax + edx*4 - 4]
cmp eax, edi
je 0x4b9c02
test ebp, ebp
jmp 0x4b9bdf
mov ecx, eax
mov edx, dword [esp + 0xb0]
mov esi, dword [esp + 0x9c]
je 0x4b9c0f
lea eax, [esi + ebp*4 - 4]
mov edi, dword [esp + 0xbc]
mov ebx, dword [esp + 0xb4]
lea ebx, [ebx + edi*4 - 4]
cmp ebx, eax
jne 0x4b9c08
mov ebx, dword [esp + 0xb8]
xor ebp, ebp
xor esi, esi
jmp 0x4b9c0f
mov ebx, dword [esp + 0xb8]
mov eax, dword [0x63549c]
cmp ebx, eax
jl 0x4b9c30
mov dword [esp + 0x84], esi
nop
mov edi, ebx
xor ebx, ebx
mov dword [esp + 0x64], ebx
mov ebx, edi
jmp 0x4b9ea5
lea eax, [ecx + ebx]
cmp ebp, eax
jl 0x4b9c42
jae 0x4b9ccd
jmp 0x4b9e8a
cmp eax, 1
jne 0x4b9c8a
lea eax, [0x544e00]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044eef0
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0xb8]
mov ebp, 1
mov eax, 1
jmp 0x4b9ccd
mov dword [esp + 0x58], eax
lea edx, [0x544e00]
mov dword [esp], edx
mov dword [esp + 4], eax
lea edx, [ebx + ecx + 4]
mov dword [esp + 0x38], edx
mov dword [esp + 8], edx
call fcn.0044eef0
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0x38]
mov eax, dword [esp + 0x58]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x30], eax
mov dword [esp + 0x80], esi
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov edi, dword [esp + 0xa8]
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], ebx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x20], ecx
call fcn.004b8cd0
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x30]
jmp 0x4b9e55
mov ecx, dword [esp + 0xb4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x9c]
mov dword [esp], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 8], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], 0
call fcn.004b8b40
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], edx
add esp, 0x98
ret
mov eax, dword [esp + 0x9c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], 0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xc8], eax
add esp, 0x98
ret
mov ecx, dword [esp + 0x9c]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x20], eax
call fcn.004b9b50
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], edx
add esp, 0x98
ret
dec ecx
test ecx, ecx
jle 0x4b9e61
mov ebx, dword [eax + ecx*4 - 4]
test ebx, ebx
je 0x4b9e54
mov edx, dword [esp + 0x38]
cmp ecx, edx
ja 0x4b9e85
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], edx
add esp, 0x98
ret
call fcn.00469440
mov ecx, eax
mov edx, ebp
call fcn.00469440
sar ebx, 1
mov esi, dword [esp + 0x64]
inc esi
mov dword [esp + 0x64], esi
mov esi, dword [esp + 0x84]
cmp ebx, eax
jg 0x4b9e93
mov eax, ecx
mov ecx, dword [esp + 0x64]
shl ebx, cl
cmp ecx, 0x20
sbb ecx, ecx
and ecx, ebx
cmp edx, ecx
jb 0x4ba429
mov ebx, dword [esp + 0xbc]
cmp ebx, ecx
jb 0x4ba422
lea ebx, [ecx + ecx*2]
mov dword [esp + 0x78], ebx
shl ebx, 1
add eax, edi
cmp ebx, eax
jge 0x4b9ee2
mov ebx, eax
jmp 0x4b9eec
mov dword [esp + 0x6c], eax
mov eax, ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x74], ebx
cmp ebp, eax
jl 0x4b9eff
jae 0x4b9f75
jmp 0x4ba419
cmp eax, 1
jne 0x4b9f3d
lea eax, [0x544e00]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.0044eef0
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0xb0]
mov ebp, 1
mov eax, 1
jmp 0x4b9f75
mov dword [esp + 0x54], eax
lea ecx, [0x544e00]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea ecx, [eax + 4]
mov dword [esp + 0x34], ecx
mov dword [esp + 8], ecx
call fcn.0044eef0
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x54]
mov dword [esp + 0x7c], esi
mov dword [esp + 0x34], ebp
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
mov edi, dword [esp + 0xbc]
mov dword [esp + 0x20], edi
call fcn.004b93b0
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x74]
cmp edx, ecx
jb 0x4ba414
mov eax, dword [esp + 0x3c]
mov ebx, eax
shl ebx, 1
cmp ebx, ecx
ja 0x4ba40d
mov ebp, ecx
sub ecx, ebx
mov esi, edx
sub esi, ebx
xchg esi, ebx
neg ebx
xchg esi, ebx
mov ebx, eax
shl eax, 3
sar esi, 0x1f
and esi, eax
mov eax, dword [esp + 0x7c]
add esi, eax
test ecx, ecx
je 0x4ba01b
mov dword [esp], esi
shl ecx, 2
mov dword [esp + 4], ecx
call fcn.00469af0
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0xb8]
cmp esi, ebx
jg 0x4ba035
mov edi, dword [esp + 0xac]
cmp edi, esi
je 0x4ba391
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.004bb270
nop
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xa8]
mov edx, eax
jmp 0x4ba052
dec eax
test eax, eax
jle 0x4ba05e
mov ebx, dword [ecx + eax*4 - 4]
test ebx, ebx
je 0x4ba051
mov ebx, dword [esp + 0xb0]
cmp ebx, eax
jb 0x4ba404
mov ebp, dword [esp + 0xb8]
cmp ebp, edx
jb 0x4ba3fb
mov esi, dword [esp + 4]
mov dword [esp + 0x90], esi
mov edi, dword [esi]
mov ebp, dword [esi + 4]
mov esi, dword [esi + 8]
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0xbc]
sub eax, edx
mov dword [esp + 0x44], eax
mov esi, dword [esp + 0xb8]
sub esi, edx
mov dword [esp + 0x40], esi
mov edi, eax
neg eax
shl edx, 2
sar eax, 0x1f
and eax, edx
mov edx, dword [esp + 0xb4]
add eax, edx
mov dword [esp + 0x88], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], edi
call fcn.004b9b50
mov eax, dword [esp + 0x24]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x50], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x74]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x34]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x18], edi
call fcn.004b9a40
nop
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xb4]
mov edx, eax
jmp 0x4ba149
dec eax
test eax, eax
jle 0x4ba155
mov ebx, dword [ecx + eax*4 - 4]
test ebx, ebx
je 0x4ba148
mov ebx, dword [esp + 0xbc]
cmp ebx, eax
jb 0x4ba3f2
mov dword [esp + 0x60], eax
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0xb0]
jmp 0x4ba30d
mov dword [esp + 0x8c], edi
mov dword [esp + 0x5c], esi
mov edx, dword [esp + 0x94]
mov dword [esp], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebx
call fcn.004b9b50
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x3c]
lea edx, [ecx + eax]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x94], ebx
mov ebp, dword [esp + 0x28]
mov dword [esp + 0x4c], ebp
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x50], esi
mov edi, dword [esp + 0x7c]
mov dword [esp], edi
mov ecx, dword [esp + 0x74]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x34]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], eax
call fcn.004b9a40
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x20], edx
call fcn.004b9b50
mov eax, dword [esp + 0x24]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x50], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
mov ebp, dword [esp + 0x74]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x34]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov edi, dword [esp + 0x68]
mov dword [esp + 0x18], edi
call fcn.004b9a40
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x94]
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x50]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0xb4]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0xb0]
mov edx, dword [esp + 0x68]
cmp ebp, edx
jle 0x4ba361
jb 0x4ba3e9
mov dword [esp + 0x68], edx
sub edi, edx
mov dword [esp + 0x48], edi
sub ebp, edx
xchg edi, ebx
neg ebx
xchg edi, ebx
shl edx, 2
sar edi, 0x1f
and edi, edx
add edi, esi
mov edx, esi
mov esi, dword [esp + 0x3c]
cmp esi, ebp
jge 0x4ba341
mov ebp, esi
jmp 0x4ba347
mov esi, ebp
mov ebp, dword [esp + 0x3c]
jmp 0x4ba3cf
mov edx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x48]
cmp esi, ebp
jbe 0x4ba182
jmp 0x4ba3e0
nop
lea eax, [0x642a90]
mov dword [esp], eax
lea eax, [0x5594a0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
call fcn.0046f7b0
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x34]
mov ebp, dword [esp + 0x74]
jmp 0x4ba394
dec ebp
test ebp, ebp
jle 0x4ba3a0
mov ebx, dword [eax + ebp*4 - 4]
test ebx, ebx
je 0x4ba393
cmp ebp, edx
ja 0x4ba3c0
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc8], edx
add esp, 0x98
ret
mov ecx, ebp
call fcn.00469440
dec esi
mov edx, dword [esp + 0xa8]
test esi, esi
jle 0x4ba353
mov edx, dword [edi + esi*4 - 4]
test edx, edx
je 0x4ba3c7
jmp 0x4ba34c
mov ecx, esi
mov edx, ebp
call fcn.00469440
mov eax, edx
mov ecx, ebp
call fcn.00469460
mov ecx, eax
mov edx, ebx
call fcn.00469440
mov eax, edx
mov ecx, ebp
call fcn.00469460
mov ecx, eax
mov edx, ebx
call fcn.00469440
mov eax, ebx
call fcn.00469460
call fcn.00469440
mov ecx, eax
mov edx, ebp
call fcn.00469440
mov edx, ebx
call fcn.00469440
call fcn.00469440
nop
call fcn.00467f80
jmp fcn.004b9b50