Function at 0x4ada50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4f0cd8
push eax
mov dword fs:[0], esp
sub esp, 0x304
push ebx
push ebp
push esi
mov esi, dword [esp + 0x324]
push edi
mov eax, dword [esi + 8]
cmp eax, 2
jl 0x4ae7dd
lea ecx, [esp + 0x6c]
call fcn.004ba030
xor ebp, ebp
lea ecx, [esp + 0x40]
mov dword [esp + 0x31c], ebp
call fcn.004ba030
lea ecx, [esp + 0x58]
mov byte [esp + 0x31c], 1
call fcn.004ba030
lea ecx, [esp + 0xa8]
mov byte [esp + 0x31c], 2
call fcn.004ba030
lea ecx, [esp + 0x80]
mov byte [esp + 0x31c], 3
call fcn.004ba030
lea ecx, [esp + 0x14]
mov byte [esp + 0x31c], 4
call fcn.004d9b70
mov eax, dword [esp + 0x324]
lea ecx, [esp + 0xbc]
push ebp
mov bl, 5
push ecx
mov ecx, esi
mov byte [esp + 0x324], bl
mov dword [esp + 0x44], eax
call fcn.00416560
mov eax, dword [esp + 0xc8]
mov byte [esp + 0x31c], 6
cmp eax, ebp
jne 0x4adbba
mov edx, dword [esi + 8]
lea eax, [esp + 0x94]
dec edx
mov ecx, esi
push edx
push eax
call fcn.00416560
mov eax, dword [esp + 0xa0]
mov byte [esp + 0x31c], 7
cmp eax, 0xa
jne 0x4adb8b
mov ecx, esi
call fcn.004272c0
sub esp, 0x14
dec eax
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
push ecx
mov ecx, esi
call fcn.00416560
lea edx, [esp + 0xe4]
lea ecx, [esp + 0xa8]
push edx
call fcn.004ba0a0
lea ecx, [esp + 0xd0]
call fcn.004ba050
mov eax, dword [esp + 0xa0]
cmp eax, 2
je 0x4adb9f
cmp eax, 4
je 0x4adb9f
cmp eax, 8
mov byte [esp + 0x19], 0x14
jne 0x4adba4
mov byte [esp + 0x19], 0x1e
lea ecx, [esp + 0x94]
mov byte [esp + 0x31c], 6
call fcn.004ba050
jmp 0x4adbbf
mov byte [esp + 0x19], 0xa
lea ecx, [esp + 0xbc]
mov byte [esp + 0x31c], bl
call fcn.004ba050
mov ebx, dword [esp + 0x32c]
mov edi, dword [ebx + 4]
cmp edi, ebp
mov dword [esp + 0x10], edi
je 0x4adc11
jmp 0x4adbec
mov edi, dword [esp + 0x10]
xor ebp, ebp
add edi, 8
mov eax, dword [edi]
push 0
mov ecx, edi
call dword [eax]
add edi, 0x2c
mov ecx, ebp
dec ebp
test ecx, ecx
jne 0x4adbef
mov edx, dword [esp + 0x10]
mov eax, dword [edx]
test eax, eax
mov dword [esp + 0x10], eax
jne 0x4adbe6
xor ebp, ebp
mov ecx, dword [ebx + 0x14]
mov dword [ebx + 0xc], ebp
mov dword [ebx + 0x10], ebp
mov dword [ebx + 8], ebp
mov dword [ebx + 4], ebp
call sub.MFC42.DLL_CPlex::FreeDataChain
mov dword [ebx + 0x14], ebp
mov eax, dword [esi + 8]
cmp eax, ebp
jle 0x4ae76e
mov edi, 0xfffffffe
sub esp, 0x14
lea eax, [edi + 2]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
push ecx
mov ecx, esi
call fcn.00416560
lea edx, [esp + 0xe4]
lea ecx, [esp + 0x80]
push edx
call fcn.004ba0a0
lea ecx, [esp + 0xd0]
call fcn.004ba050
mov eax, dword [esp + 0x78]
dec eax
cmp eax, 0xc
ja case.0x4adc7b.5
jmp dword [eax*4 + 0x4ae7f8]
sub esp, 0x14
lea ecx, [edi + 1]
mov edx, esp
mov dword [esp + 0x24], esp
push ecx
push edx
mov ecx, esi
call fcn.00416560
lea eax, [esp + 0xd0]
lea ecx, [esp + 0x54]
push eax
call fcn.004ba0a0
lea ecx, [esp + 0xbc]
call fcn.004ba050
cmp dword [esp + 0x4c], 0xa
jne 0x4adcea
sub esp, 0x14
mov ecx, esp
mov dword [esp + 0x24], esp
push edi
push ecx
mov ecx, esi
call fcn.00416560
lea edx, [esp + 0xa8]
lea ecx, [esp + 0x54]
push edx
call fcn.004ba0a0
lea ecx, [esp + 0x94]
call fcn.004ba050
lea eax, [esp + 0x40]
lea ecx, [esp + 0x44]
neg eax
sbb eax, eax
mov byte [esp + 0x18], 0xa
and eax, ecx
lea ecx, [esp + 0x70]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x6c]
neg eax
sbb eax, eax
mov dword [esp + 0x1c], edx
and eax, ecx
sub esp, 0x2c
mov dword [esp + 0x3c], esp
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x54], eax
mov eax, esp
mov dword [esp + 0x50], edx
mov byte [eax + 4], 0xa
jmp 0x4ae0a1
sub esp, 0x14
lea eax, [edi + 1]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
push ecx
mov ecx, esi
call fcn.00416560
lea edx, [esp + 0x260]
lea ecx, [esp + 0x54]
push edx
call fcn.004ba0a0
lea ecx, [esp + 0x24c]
call fcn.004ba050
cmp dword [esp + 0x4c], 0xa
jne 0x4add9f
sub esp, 0x14
mov ecx, esi
mov eax, esp
mov dword [esp + 0x24], esp
push edi
push eax
call fcn.00416560
lea ecx, [esp + 0x314]
push ecx
lea ecx, [esp + 0x58]
call fcn.004ba0a0
lea ecx, [esp + 0x300]
call fcn.004ba050
sub esp, 0x14
mov ecx, esi
mov edx, esp
mov dword [esp + 0x24], esp
push ebp
push edx
call fcn.00416560
lea eax, [esp + 0x120]
lea ecx, [esp + 0x94]
push eax
call fcn.004ba0a0
lea ecx, [esp + 0x10c]
call fcn.004ba050
lea eax, [esp + 0x40]
lea ecx, [esp + 0x44]
neg eax
sbb eax, eax
mov byte [esp + 0x18], 0xa
and eax, ecx
lea ecx, [esp + 0x84]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x80]
neg eax
sbb eax, eax
mov dword [esp + 0x1c], edx
and eax, ecx
sub esp, 0x2c
mov dword [esp + 0x3c], esp
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x54], eax
mov eax, esp
mov dword [esp + 0x50], edx
mov byte [eax + 4], 0xa
jmp 0x4ae0a1
sub esp, 0x14
mov ecx, esi
mov eax, esp
mov dword [esp + 0x24], esp
push edi
push eax
call fcn.00416560
lea ecx, [esp + 0x2d8]
push ecx
lea ecx, [esp + 0x58]
call fcn.004ba0a0
lea ecx, [esp + 0x2c4]
call fcn.004ba050
cmp dword [esp + 0x4c], 0xa
jne 0x4ade8c
sub esp, 0x14
lea edx, [edi - 1]
mov eax, esp
mov dword [esp + 0x24], esp
push edx
push eax
mov ecx, esi
call fcn.00416560
lea ecx, [esp + 0x148]
push ecx
lea ecx, [esp + 0x58]
call fcn.004ba0a0
lea ecx, [esp + 0x134]
call fcn.004ba050
sub esp, 0x14
lea edx, [edi + 1]
mov eax, esp
mov dword [esp + 0x24], esp
push edx
push eax
mov ecx, esi
call fcn.00416560
lea ecx, [esp + 0x238]
push ecx
lea ecx, [esp + 0x70]
call fcn.004ba0a0
lea ecx, [esp + 0x224]
call fcn.004ba050
lea eax, [esp + 0x40]
lea edx, [esp + 0x44]
neg eax
sbb eax, eax
mov byte [esp + 0x18], 0x14
and eax, edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
lea eax, [esp + 0x58]
mov dword [esp + 0x1c], ecx
neg eax
sbb eax, eax
lea ecx, [esp + 0x5c]
and eax, ecx
mov dword [esp + 0x20], edx
lea ecx, [esp + 0x70]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x6c]
neg eax
sbb eax, eax
mov dword [esp + 0x24], edx
and eax, ecx
sub esp, 0x2c
mov dword [esp + 0x3c], esp
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x5c], eax
mov eax, esp
mov dword [esp + 0x58], edx
mov byte [eax + 4], 0x14
mov cl, byte [esp + 0x45]
mov byte [eax + 5], cl
mov edx, dword [esp + 0x48]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0xc], ecx
mov edx, dword [esp + 0x50]
mov dword [eax + 0x10], edx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0x14], ecx
mov edx, dword [esp + 0x58]
mov dword [eax + 0x18], edx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 0x1c], ecx
mov edx, dword [esp + 0x60]
mov dword [eax + 0x20], edx
mov ecx, dword [esp + 0x64]
mov dword [eax + 0x24], ecx
mov edx, dword [esp + 0x68]
mov dword [eax + 0x28], edx
jmp 0x4ae44d
sub esp, 0x14
mov ecx, esi
mov eax, esp
mov dword [esp + 0x24], esp
push edi
push eax
call fcn.00416560
lea ecx, [esp + 0x170]
push ecx
lea ecx, [esp + 0x58]
call fcn.004ba0a0
lea ecx, [esp + 0x15c]
call fcn.004ba050
cmp dword [esp + 0x4c], 0xa
jne 0x4adfd4
sub esp, 0x14
lea edx, [edi - 1]
mov eax, esp
mov dword [esp + 0x24], esp
push edx
push eax
mov ecx, esi
call fcn.00416560
lea ecx, [esp + 0x2b0]
push ecx
lea ecx, [esp + 0x58]
call fcn.004ba0a0
lea ecx, [esp + 0x29c]
call fcn.004ba050
sub esp, 0x14
lea edx, [edi + 1]
mov eax, esp
mov dword [esp + 0x24], esp
push edx
push eax
mov ecx, esi
call fcn.00416560
lea ecx, [esp + 0x198]
push ecx
lea ecx, [esp + 0x70]
call fcn.004ba0a0
lea ecx, [esp + 0x184]
call fcn.004ba050
sub esp, 0x14
mov ecx, esi
mov edx, esp
mov dword [esp + 0x24], esp
push ebp
push edx
call fcn.00416560
lea eax, [esp + 0xf8]
lea ecx, [esp + 0x94]
push eax
call fcn.004ba0a0
lea ecx, [esp + 0xe4]
call fcn.004ba050
lea eax, [esp + 0x40]
lea ecx, [esp + 0x44]
neg eax
sbb eax, eax
mov byte [esp + 0x18], 0x14
and eax, ecx
lea ecx, [esp + 0x5c]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x58]
neg eax
sbb eax, eax
mov dword [esp + 0x1c], edx
and eax, ecx
lea ecx, [esp + 0x84]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x80]
neg eax
sbb eax, eax
mov dword [esp + 0x24], edx
and eax, ecx
sub esp, 0x2c
mov dword [esp + 0x3c], esp
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x5c], eax
mov eax, esp
mov dword [esp + 0x58], edx
mov byte [eax + 4], 0x14
mov cl, byte [esp + 0x45]
mov byte [eax + 5], cl
mov edx, dword [esp + 0x48]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0xc], ecx
mov edx, dword [esp + 0x50]
mov dword [eax + 0x10], edx
mov ecx, dword [esp + 0x54]
mov dword [eax + 0x14], ecx
mov edx, dword [esp + 0x58]
mov dword [eax + 0x18], edx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 0x1c], ecx
mov edx, dword [esp + 0x60]
mov dword [eax + 0x20], edx
mov ecx, dword [esp + 0x64]
mov dword [eax + 0x24], ecx
mov edx, dword [esp + 0x68]
mov dword [eax + 0x28], edx
jmp 0x4ae44d
lea eax, [esp + 0x1ac]
push edi
push eax
mov ecx, esi
call fcn.00416560
mov ecx, dword [eax + 0xc]
cmp ecx, 7
lea ecx, [esp + 0x1ac]
setne byte [esp + 0x57]
call fcn.004ba050
mov al, byte [esp + 0x57]
test al, al
je case.0x4adc7b.5
sub esp, 0x14
mov byte [esp + 0x2c], 0x3c
mov ecx, esp
mov dword [esp + 0x24], esp
push edi
push ecx
mov ecx, esi
call fcn.00416560
lea edx, [esp + 0x300]
lea ecx, [esp + 0x54]
push edx
call fcn.004ba0a0
lea ecx, [esp + 0x2ec]
call fcn.004ba050
lea eax, [esp + 0x40]
lea ecx, [esp + 0x44]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [edi + 1]
push ecx
mov ecx, esi
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x20], edx
lea edx, [esp + 0x1d8]
push edx
mov dword [esp + 0x28], eax
call fcn.00416560
cmp eax, ebp
je 0x4ae18a
add eax, 4
jmp 0x4ae18c
xor eax, eax
mov ecx, dword [eax]
mov dword [esp + 0x24], ecx
mov edx, dword [eax + 4]
lea ecx, [esp + 0x1d4]
mov dword [esp + 0x28], edx
call fcn.004ba050
lea eax, [esp + 0x6c]
lea ecx, [esp + 0x70]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [edi + 3]
push ecx
mov ecx, esi
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x30], edx
lea edx, [esp + 0x278]
push edx
mov dword [esp + 0x38], eax
call fcn.00416560
cmp eax, ebp
je 0x4ae1dc
add eax, 4
jmp 0x4ae1de
xor eax, eax
mov ecx, dword [eax]
mov dword [esp + 0x34], ecx
mov edx, dword [eax + 4]
lea ecx, [esp + 0x274]
mov dword [esp + 0x38], edx
call fcn.004ba050
sub esp, 0x2c
mov dword [esp + 0x3c], esp
jmp 0x4ae3fe
sub esp, 0x14
mov ecx, esi
mov edx, esp
mov dword [esp + 0x24], esp
push edi
push edx
mov byte [esp + 0x34], 0x3c
call fcn.00416560
lea eax, [esp + 0x210]
lea ecx, [esp + 0x54]
push eax
call fcn.004ba0a0
lea ecx, [esp + 0x1fc]
call fcn.004ba050
lea eax, [esp + 0x40]
lea ecx, [esp + 0x44]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [edi + 1]
push ecx
mov ecx, esi
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x20], edx
lea edx, [esp + 0xfc]
push edx
mov dword [esp + 0x28], eax
call fcn.00416560
cmp eax, ebp
je 0x4ae26e
add eax, 4
jmp 0x4ae270
xor eax, eax
mov ecx, dword [eax]
mov dword [esp + 0x24], ecx
mov edx, dword [eax + 4]
lea ecx, [esp + 0xf8]
mov dword [esp + 0x28], edx
call fcn.004ba050
lea eax, [esp + 0x6c]
lea ecx, [esp + 0x70]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [edi + 3]
push ecx
mov ecx, esi
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x30], edx
lea edx, [esp + 0x124]
push edx
mov dword [esp + 0x38], eax
call fcn.00416560
cmp eax, ebp
je 0x4ae2c0
add eax, 4
jmp 0x4ae2c2
xor eax, eax
mov ecx, dword [eax]
mov dword [esp + 0x34], ecx
mov edx, dword [eax + 4]
lea ecx, [esp + 0x120]
mov dword [esp + 0x38], edx
call fcn.004ba050
sub esp, 0x2c
mov dword [esp + 0x3c], esp
jmp 0x4ae3fe
sub esp, 0x14
mov ecx, esi
mov edx, esp
mov dword [esp + 0x24], esp
push edi
push edx
mov byte [esp + 0x34], 0x3c
call fcn.00416560
lea eax, [esp + 0x15c]
lea ecx, [esp + 0x54]
push eax
call fcn.004ba0a0
lea ecx, [esp + 0x148]
call fcn.004ba050
sub esp, 0x14
mov ecx, esp
mov dword [esp + 0x24], esp
push ebp
push ecx
mov ecx, esi
call fcn.00416560
lea edx, [esp + 0x184]
lea ecx, [esp + 0x94]
push edx
call fcn.004ba0a0
lea ecx, [esp + 0x170]
call fcn.004ba050
lea eax, [esp + 0x40]
lea ecx, [esp + 0x44]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [edi + 1]
push ecx
mov ecx, esi
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x20], edx
lea edx, [esp + 0x19c]
push edx
mov dword [esp + 0x28], eax
call fcn.00416560
cmp eax, ebp
je 0x4ae384
add eax, 4
jmp 0x4ae386
xor eax, eax
mov ecx, dword [eax]
mov dword [esp + 0x24], ecx
mov edx, dword [eax + 4]
lea ecx, [esp + 0x198]
mov dword [esp + 0x28], edx
call fcn.004ba050
lea eax, [esp + 0x80]
lea ecx, [esp + 0x84]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [edi + 3]
push ecx
mov ecx, esi
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x30], edx
lea edx, [esp + 0x1c4]
push edx
mov dword [esp + 0x38], eax
call fcn.00416560
cmp eax, ebp
je 0x4ae3dc
add eax, 4
jmp 0x4ae3de
xor eax, eax
mov ecx, dword [eax]
mov dword [esp + 0x34], ecx
mov edx, dword [eax + 4]
lea ecx, [esp + 0x1c0]
mov dword [esp + 0x38], edx
call fcn.004ba050
sub esp, 0x2c
mov dword [esp + 0x3c], esp
mov cl, byte [esp + 0x44]
mov eax, esp
mov byte [eax + 4], cl
mov dl, byte [esp + 0x45]
mov byte [eax + 5], dl
mov ecx, dword [esp + 0x48]
mov dword [eax + 8], ecx
mov edx, dword [esp + 0x4c]
mov dword [eax + 0xc], edx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x10], ecx
mov edx, dword [esp + 0x54]
mov dword [eax + 0x14], edx
mov ecx, dword [esp + 0x58]
mov dword [eax + 0x18], ecx
mov edx, dword [esp + 0x5c]
mov dword [eax + 0x1c], edx
mov ecx, dword [esp + 0x60]
mov dword [eax + 0x20], ecx
mov edx, dword [esp + 0x64]
mov dword [eax + 0x24], edx
mov ecx, dword [esp + 0x68]
mov dword [eax + 0x28], ecx
mov ecx, ebx
mov dword [eax], 0x4f67d4
call fcn.0042ed70
mov eax, dword [esi + 8]
inc edi
lea edx, [edi + 2]
cmp edx, eax
jge 0x4ae76e
jmp 0x4adc38
sub esp, 0x14
mov ecx, esi
mov eax, esp
mov dword [esp + 0x24], esp
push 1
push eax
mov byte [esp + 0x34], 0x1e
call fcn.00416560
lea ecx, [esp + 0x1fc]
push ecx
lea ecx, [esp + 0x58]
call fcn.004ba0a0
lea ecx, [esp + 0x1e8]
call fcn.004ba050
lea eax, [esp + 0x6c]
lea edx, [esp + 0x70]
neg eax
sbb eax, eax
and eax, edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
lea eax, [esp + 0x40]
mov dword [esp + 0x1c], ecx
neg eax
sbb eax, eax
lea ecx, [esp + 0x44]
and eax, ecx
mov dword [esp + 0x20], edx
sub esp, 0x2c
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
mov dword [esp + 0x3c], esp
jmp 0x4ae712
sub esp, 0x14
mov ecx, esi
mov edx, esp
mov dword [esp + 0x24], esp
push ebp
push edx
mov byte [esp + 0x34], 0x28
call fcn.00416560
lea eax, [esp + 0x224]
lea ecx, [esp + 0x54]
push eax
call fcn.004ba0a0
lea ecx, [esp + 0x210]
call fcn.004ba050
sub esp, 0x14
mov ecx, esp
mov dword [esp + 0x24], esp
push 1
push ecx
mov ecx, esi
call fcn.00416560
lea edx, [esp + 0x24c]
lea ecx, [esp + 0x6c]
push edx
call fcn.004ba0a0
lea ecx, [esp + 0x238]
call fcn.004ba050
sub esp, 0x14
mov ecx, esi
mov eax, esp
mov dword [esp + 0x24], esp
push 2
push eax
call fcn.00416560
lea ecx, [esp + 0x274]
push ecx
lea ecx, [esp + 0x98]
call fcn.004ba0a0
lea ecx, [esp + 0x260]
call fcn.004ba050
lea eax, [esp + 0x40]
lea edx, [esp + 0x44]
neg eax
sbb eax, eax
and eax, edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
lea eax, [esp + 0x58]
mov dword [esp + 0x1c], ecx
neg eax
sbb eax, eax
lea ecx, [esp + 0x5c]
and eax, ecx
mov dword [esp + 0x20], edx
lea ecx, [esp + 0x84]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x80]
neg eax
sbb eax, eax
mov dword [esp + 0x24], edx
and eax, ecx
sub esp, 0x2c
mov dword [esp + 0x3c], esp
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], eax
jmp 0x4ae712
sub esp, 0x14
mov ecx, esi
mov edx, esp
mov dword [esp + 0x24], esp
push ebp
push edx
mov byte [esp + 0x34], 0x32
call fcn.00416560
lea eax, [esp + 0x29c]
lea ecx, [esp + 0x6c]
push eax
call fcn.004ba0a0
lea ecx, [esp + 0x288]
call fcn.004ba050
sub esp, 0x14
mov ecx, esp
mov dword [esp + 0x24], esp
push 1
push ecx
mov ecx, esi
call fcn.00416560
lea edx, [esp + 0x2c4]
lea ecx, [esp + 0xbc]
push edx
call fcn.004ba0a0
lea ecx, [esp + 0x2b0]
call fcn.004ba050
sub esp, 0x14
mov ecx, esi
mov eax, esp
mov dword [esp + 0x24], esp
push 2
push eax
call fcn.00416560
lea ecx, [esp + 0x2ec]
push ecx
lea ecx, [esp + 0x58]
call fcn.004ba0a0
lea ecx, [esp + 0x2d8]
call fcn.004ba050
lea ecx, [esp + 0x40]
lea edx, [esp + 0x44]
neg ecx
sbb ecx, ecx
lea eax, [esp + 0xac]
and ecx, edx
lea edx, [esp + 0xa8]
neg edx
sbb edx, edx
lea esi, [esp + 0x5c]
and edx, eax
lea eax, [esp + 0x58]
neg eax
sbb eax, eax
push ecx
and eax, esi
push edx
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
call fcn.00432f90
lea eax, [esp + 0x68]
lea ecx, [esp + 0x6c]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [esp + 0xbc]
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x30], eax
lea eax, [esp + 0xb8]
neg eax
sbb eax, eax
mov dword [esp + 0x2c], edx
and eax, ecx
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], edx
lea eax, [esp + 0x50]
neg eax
sbb eax, eax
lea ecx, [esp + 0x54]
and eax, ecx
sub esp, 0x1c
mov dword [esp + 0x3c], esp
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], eax
mov cl, byte [esp + 0x44]
mov eax, esp
mov byte [eax + 4], cl
mov dl, byte [esp + 0x45]
mov byte [eax + 5], dl
mov ecx, dword [esp + 0x48]
mov dword [eax + 8], ecx
mov edx, dword [esp + 0x4c]
mov dword [eax + 0xc], edx
mov ecx, dword [esp + 0x50]
mov dword [eax + 0x10], ecx
mov edx, dword [esp + 0x54]
mov dword [eax + 0x14], edx
mov ecx, dword [esp + 0x58]
mov dword [eax + 0x18], ecx
mov edx, dword [esp + 0x5c]
mov dword [eax + 0x1c], edx
mov ecx, dword [esp + 0x60]
mov dword [eax + 0x20], ecx
mov edx, dword [esp + 0x64]
mov dword [eax + 0x24], edx
mov ecx, dword [esp + 0x68]
mov dword [eax + 0x28], ecx
mov ecx, ebx
mov dword [eax], 0x4f67d4
call fcn.0042ed70
lea ecx, [esp + 0x14]
mov byte [esp + 0x31c], 4
call fcn.004d9ba0
lea ecx, [esp + 0x80]
mov byte [esp + 0x31c], 3
call fcn.004ba050
lea ecx, [esp + 0xa8]
mov byte [esp + 0x31c], 2
call fcn.004ba050
lea ecx, [esp + 0x58]
mov byte [esp + 0x31c], 1
call fcn.004ba050
lea ecx, [esp + 0x40]
mov byte [esp + 0x31c], 0
call fcn.004ba050
lea ecx, [esp + 0x6c]
mov dword [esp + 0x31c], 0xffffffff
call fcn.004ba050
mov ecx, dword [esp + 0x314]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x310
ret