Function at 0x4b1510
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x136c
call fcn.00477910
mov eax, edx
mov dword [esp + 0x14], ecx
push ebx
push esi
mov dword [esp + 0x20], eax
mov ebx, dword [eax + 0x504]
mov ecx, dword [eax + 0x510]
mov edx, dword [eax + 0x508]
xor eax, eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
lea esi, [ebx*4]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x30], esi
push edi
test ebx, ebx
jle 0x4b15b4
mov ecx, esi
lea edi, [esp + 0x50]
shr ecx, 2
mov eax, 0xffffff38
rep stosd dword es:[edi], eax
test ebx, ebx
jle 0x4b15b4
mov ecx, esi
lea edi, [esp + 0x158]
shr ecx, 2
rep stosd dword es:[edi], eax
xor eax, eax
lea edi, [esp + 0x368]
mov ecx, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
lea edi, [esp + 0x260]
shr ecx, 2
mov eax, 1
rep stosd dword es:[edi], eax
mov ecx, esi
lea edi, [esp + 0x470]
shr ecx, 2
or eax, 0xffffffff
rep stosd dword es:[edi], eax
test ebx, ebx
jne 0x4b15d7
mov esi, dword [esp + 0x18]
lea eax, [esp + 0x578]
mov ecx, dword [ebp + 0xc]
push esi
push edx
push eax
push edx
mov edx, dword [ebp + 8]
push 0
call fcn.004afff0
add esp, 0x14
jmp 0x4b1630
lea eax, [ebx - 1]
xor esi, esi
mov dword [esp + 0xc], eax
test eax, eax
jle 0x4b1ad2
lea edi, [esp + 0x578]
xor ebx, ebx
push dword [esp + 0x18]
mov eax, dword [esp + 0x28]
mov ecx, dword [ebp + 0xc]
push edx
mov edx, dword [ebp + 8]
push edi
push dword [eax + esi*4 + 4]
push dword [eax + esi*4]
call fcn.004afff0
mov edx, dword [esp + 0x30]
inc esi
add esp, 0x14
add ebx, eax
add edi, 0x38
cmp esi, dword [esp + 0xc]
jl 0x4b15f1
mov esi, dword [esp + 0x18]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x28]
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4b1ad2
push esi
lea eax, [esp + 0x18]
mov dword [esp + 0x14], 0xffffff38
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], 0xffffff38
lea edx, [ebx - 1]
push eax
lea ecx, [esp + 0x584]
call fcn.004afd20
mov eax, dword [esp + 0x1c]
mov esi, 2
mov edi, dword [esp + 0x20]
add esp, 0xc
mov dword [esp + 0x50], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], edi
mov dword [esp + 0x54], edi
cmp ebx, esi
jle 0x4b1915
mov edx, dword [esp + 0x24]
lea eax, [edx + 0x210]
mov dword [esp + 0x10], eax
nop
mov eax, dword [eax]
mov ecx, dword [esp + eax*4 + 0x368]
mov eax, dword [esp + eax*4 + 0x260]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x30], eax
cmp dword [esp + ecx*4 + 0x470], eax
je 0x4b18f4
mov edi, dword [edx + ecx*4 + 0x208]
mov edx, dword [edx + eax*4 + 0x208]
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x3c], edi
lea edi, [esp + 0x158]
mov dword [esp + ecx*4 + 0x470], eax
mov ebx, dword [edx + ecx*4 + 0x344]
mov edx, dword [edx + eax*4 + 0x344]
mov dword [esp + 0xc], edx
mov edx, dword [esp + ecx*4 + 0x50]
lea ecx, [edi + ecx*4]
mov edi, dword [ecx]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x44], ecx
test edx, edx
js 0x4b1720
test edi, edi
jns 0x4b171c
mov edi, edx
jmp 0x4b1720
add edi, edx
sar edi, 1
mov ebx, dword [esp + eax*4 + 0x158]
lea ecx, [esp + 0x50]
lea ecx, [ecx + eax*4]
mov dword [esp + 0x4c], ecx
mov ecx, dword [ecx]
test ecx, ecx
js 0x4b1744
test ebx, ebx
jns 0x4b1740
mov ebx, ecx
jmp 0x4b1744
add ebx, ecx
sar ebx, 1
cmp edi, 0xffffffff
je 0x4b1add
cmp ebx, 0xffffffff
je 0x4b1add
push dword [esp + 0x18]
mov edx, dword [esp + 0x10]
push dword [ebp + 8]
mov ecx, dword [esp + 0x24]
push dword [ebp + 0xc]
push ebx
push edi
call fcn.004afb00
add esp, 0x14
test eax, eax
je 0x4b18d9
push dword [esp + 0x18]
mov ecx, dword [esp + 0x40]
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x40]
mov dword [esp + 0x40], 0xffffff38
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x38], 0xffffff38
mov dword [esp + 0x20], 0xffffff38
mov dword [esp + 0x28], 0xffffff38
mov edx, dword [eax]
lea eax, [ecx*8]
sub eax, ecx
sub edx, ecx
lea ecx, [esp + 0x584]
lea ecx, [ecx + eax*8]
call fcn.004afd20
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x28]
add esp, 0xc
mov dword [esp + 0xc], eax
push dword [esp + 0x18]
push ecx
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
sub edx, eax
lea ecx, [eax*8]
sub ecx, eax
lea eax, [esp + 0x584]
lea ecx, [eax + ecx*8]
call fcn.004afd20
add esp, 0xc
mov edx, eax
cmp dword [esp + 0xc], 0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x14], eax
je 0x4b181d
mov ecx, eax
jmp 0x4b1825
mov edi, dword [esp + 0x38]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x2c], ecx
test edx, edx
je 0x4b1833
mov dword [esp + 0x14], ecx
jmp 0x4b1837
mov ebx, dword [esp + 0x1c]
cmp dword [esp + 0xc], 0
je 0x4b1846
test edx, edx
jne 0x4b18d9
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
test edx, edx
mov dword [eax], edi
mov eax, dword [esp + 0x50]
cmove eax, edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + esi*4 + 0x50], ecx
mov ecx, dword [esp + 0x30]
cmp ecx, 1
mov dword [esp + esi*4 + 0x158], edi
mov dword [eax], ebx
mov eax, dword [esp + 0x15c]
cmove eax, ebx
cmp dword [esp + 0x2c], 0
mov dword [esp + 0x15c], eax
jge 0x4b1895
test edi, edi
js 0x4b18ec
mov eax, dword [esp + 0x10]
mov ebx, dword [eax]
lea eax, [ebx - 1]
test eax, eax
js 0x4b18b7
cmp dword [esp + eax*4 + 0x260], ecx
jne 0x4b18b7
mov dword [esp + eax*4 + 0x260], esi
sub eax, 1
jns 0x4b18a2
lea eax, [ebx + 1]
mov ebx, dword [esp + 0x28]
cmp eax, ebx
jge 0x4b18f0
cmp dword [esp + eax*4 + 0x368], edx
jne 0x4b18f0
mov dword [esp + eax*4 + 0x368], esi
inc eax
cmp eax, ebx
jl 0x4b18c2
jmp 0x4b18f0
mov dword [esp + esi*4 + 0x158], 0xffffff38
mov dword [esp + esi*4 + 0x50], 0xffffff38
mov ebx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x10]
inc esi
add eax, 4
mov dword [esp + 0x10], eax
cmp esi, ebx
jl 0x4b16a0
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x158]
jmp 0x4b1919
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x34]
mov ebx, dword [esp + 0x20]
add ecx, 7
and ecx, 0xfffffff8
mov edx, dword [eax + 0x48]
mov dword [esp + 0xc], ecx
lea eax, [edx + ecx]
cmp eax, dword [ebx + 0x4c]
mov ebx, dword [esp + 0x28]
jle 0x4b1983
mov edx, dword [esp + 0x20]
cmp dword [edx + 0x44], 0
je 0x4b196e
push 8
call fcn.00483cdb
mov edx, dword [esp + 0x24]
add esp, 4
mov ecx, dword [edx + 0x48]
add dword [edx + 0x50], ecx
mov ecx, dword [edx + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [edx + 0x44]
mov dword [eax], ecx
mov ecx, dword [esp + 0xc]
mov dword [edx + 0x54], eax
push ecx
mov dword [edx + 0x4c], ecx
call fcn.00483cdb
mov ecx, dword [esp + 0x24]
add esp, 4
xor edx, edx
mov dword [ecx + 0x44], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x44]
mov eax, dword [esp + 0xc]
add ecx, edx
add eax, edx
mov dword [esp + 0x14], ecx
cmp dword [esp + 0x50], 0
mov edx, dword [esp + 0x20]
mov dword [edx + 0x48], eax
jl 0x4b19b4
test esi, esi
jns 0x4b19ae
mov esi, dword [esp + 0x50]
jmp 0x4b19b4
add esi, dword [esp + 0x50]
sar esi, 1
mov dword [ecx], esi
test edi, edi
jns 0x4b19c3
mov edi, dword [esp + 0x15c]
jmp 0x4b19d6
cmp dword [esp + 0x15c], 0
jl 0x4b19d6
add edi, dword [esp + 0x15c]
sar edi, 1
mov dword [ecx + 4], edi
mov dword [esp + 0xc], 2
cmp ebx, 2
jle 0x4b1ad4
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x24]
lea eax, [ebx + 0x34c]
mov dword [esp + 0x10], eax
lea edx, [esi + 0x30c]
mov eax, 0xfffffcfc
mov dword [esp + 0x1c], edx
sub eax, esi
mov dword [esp + 0x30], eax
mov eax, dword [edx + 0xfc]
mov esi, dword [edx]
mov edi, dword [ebx + eax*4 + 0x344]
mov eax, dword [ecx + eax*4]
mov ebx, dword [ecx + esi*4]
and eax, 0x7fff
mov ecx, dword [esp + 0x10]
and ebx, 0x7fff
sub ebx, eax
mov dword [esp + 0x34], eax
mov eax, ebx
cdq
mov ecx, dword [ecx]
xor eax, edx
sub eax, edx
sub ecx, edi
imul eax, ecx
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx + esi*4 + 0x344]
sub ecx, edi
cdq
idiv ecx
mov edx, dword [esp + 0x34]
lea ecx, [eax + edx]
sub edx, eax
test ebx, ebx
mov ebx, dword [esp + 0xc]
cmovns edx, ecx
mov ecx, dword [esp + ebx*4 + 0x50]
mov eax, dword [esp + ebx*4 + 0x158]
test ecx, ecx
js 0x4b1a86
test eax, eax
jns 0x4b1a82
mov eax, ecx
jmp 0x4b1a86
add eax, ecx
sar eax, 1
test eax, eax
js 0x4b1a8e
cmp edx, eax
jne 0x4b1a95
mov eax, edx
or eax, 0x8000
mov edx, dword [esp + 0x1c]
inc ebx
mov ecx, dword [esp + 0x30]
mov esi, dword [esp + 0x14]
add ecx, edx
add edx, 4
mov dword [esp + 0xc], ebx
mov dword [ecx + esi], eax
add dword [esp + 0x10], 4
cmp ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x1c], edx
jl 0x4b1a11
mov eax, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor ecx, ecx
pop edi
pop esi
mov eax, ecx
pop ebx
mov esp, ebp
pop ebp
ret
push 1
call fcn.0047c42f
int3