Function at 0x10004b76
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x18
mov eax, dword [0x100b505c]
mov edx, dword [0x100b5058]
imul edx, eax
push ebx
push ebp
mov dword [esp + 0xc], edx
push esi
push edi
mov edi, dword [0x100b5050]
imul edx, edi
imul edx, edi
mov esi, dword [0x100b5054]
imul edx, edx, 3
mov ecx, eax
imul ecx, ecx, 3
push 3
pop ebx
sub ebx, edx
mov dword [esp + 0x18], ecx
imul ebx, esi
lea ebx, [ebx + ecx + 3]
mov ebp, dword [0x100b504c]
mov ecx, edi
imul ebx, ebp
imul ecx, ecx, 3
push 3
pop edx
sub edx, ecx
imul edx, dword [0x100b5058]
mov ecx, esi
sub ecx, edi
imul ecx, ecx, 3
add ecx, eax
imul ecx, ecx, 3
add ebx, edx
add ebx, ecx
mov ecx, dword [esp + 0x18]
imul ebx, ebx, 0xf8
add ecx, 3
lea edx, [ebp + 1]
imul ecx, esi
imul edx, edi
imul edx, edx, 3
sub ecx, edx
xor edx, edx
imul ecx, eax
inc edx
sub edx, dword [0x100b5058]
lea eax, [ebp + ebp]
imul edx, edi
sub edx, eax
mov eax, dword [esp + 0x2c]
add edx, esi
imul edx, edx, 3
add ecx, edx
shl ecx, 6
add ebx, dword [ecx + eax + 0x3c]
mov eax, ebp
imul eax, esi
push 2
pop ecx
sub ecx, eax
sub ecx, dword [0x100b505c]
push 2
pop eax
imul ecx, esi
sub eax, edi
imul eax, dword [0x100b5058]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x18], eax
lea eax, [ebp + ebp]
add ecx, eax
mov eax, dword [esp + 0x18]
add eax, ecx
mov ecx, dword [0x100b505c]
add eax, ecx
imul eax, eax, 0x78
mov dword [esp + 0x18], eax
mov eax, dword [ebx + edx + 0x78]
mov ebx, dword [esp + 0x18]
add eax, ebx
add eax, edx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
imul eax, ecx
mov ebx, dword [0x100b5058]
imul ebx, esi
mov edx, esi
imul edx, esi
add eax, edx
imul eax, eax, 7
mov dword [esp + 0x18], ebx
add ebx, edi
imul ebx, ebx, 7
push 0x35
pop edx
sub edx, eax
imul edx, ebp
mov eax, esi
sub eax, ebp
inc eax
inc eax
imul eax, eax, 0x14
sub eax, ebx
imul eax, edi
add edx, eax
mov eax, dword [0x100b5058]
mov ebx, esi
imul ebx, ecx
imul ebx, ecx
sub ebx, eax
inc ebx
imul ebx, eax
imul eax, ebp
sub ebx, esi
imul ebx, ebx, 0x14
add edx, ebx
mov ebx, dword [esp + 0x10]
add edx, dword [ebx + 0x20]
mov dword [esp + 0x20], eax
imul eax, ebp
mov ebx, esi
imul ebx, edi
add eax, ebx
imul eax, dword [0x100b5058]
mov ebx, edi
sub ebx, ebp
imul ebx, esi
sub ebx, eax
lea eax, [edi + 3]
imul eax, edi
add ebx, ebp
add eax, ebx
mov ebx, dword [esp + 0x10]
shl eax, 2
sub eax, dword [esp + 0x18]
add edx, dword [esp + 0x2c]
imul eax, eax, 3
add eax, dword [ebx + 0x1c]
mov ebx, edi
add eax, dword [esp + 0x2c]
imul ebx, ebx, 6
mov dword [esp + 0x24], eax
mov eax, ecx
imul eax, edi
mov dword [esp + 0x18], eax
sub ebx, 6
imul ebx, ebp
mov eax, esi
imul eax, eax, 6
sub ebx, eax
mov eax, ecx
imul eax, ecx
add ebx, 5
sub eax, 3
imul ebx, edi
imul eax, eax, 6
add ebx, eax
mov eax, dword [esp + 0x18]
imul ebx, ecx
imul eax, eax, 5
add eax, 6
mov ecx, dword [0x100b5058]
imul eax, esi
sub ecx, ebp
imul ecx, ecx, 5
sub ecx, eax
dec ecx
dec ecx
mov eax, ecx
mov ecx, dword [0x100b5058]
imul eax, ecx
add ebx, eax
lea eax, [esi + 1]
imul eax, esi
add eax, edi
imul eax, eax, 5
sub ebx, eax
mov eax, dword [esp + 0x10]
add ebx, dword [eax + 0x24]
mov eax, dword [eax + 0x18]
add ebx, dword [esp + 0x2c]
and dword [esp + 0x10], 0
test eax, eax
mov dword [esp + 0x1c], eax
jbe 0x10004dd2
sub ecx, esi
imul ecx, ecx, 0x18
add ecx, edx
mov dword [esp + 0x14], ecx
jmp 0x10004dae
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
add ecx, dword [esp + 0x2c]
call fcn.10003cda
cmp eax, dword [esp + 0x30]
je 0x10004ddc
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
add dword [esp + 0x14], 4
cmp eax, dword [esp + 0x1c]
jb 0x10004daa
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
mov eax, dword [esp + 0x20]
sub eax, dword [esp + 0x18]
xor ecx, ecx
lea eax, [eax + esi - 1]
imul eax, dword [0x100b5058]
inc ecx
sub ecx, ebp
imul ecx, ebp
add eax, ecx
lea ecx, [edi - 1]
imul ecx, esi
add eax, ecx
mov ecx, dword [0x100b505c]
add ecx, ecx
sub eax, ecx
mov ecx, dword [esp + 0x24]
sub eax, edi
imul eax, eax, 5
add eax, dword [esp + 0x10]
movzx eax, word [ebx + eax*2]
mov eax, dword [ecx + eax*4]
add eax, dword [esp + 0x2c]
jmp 0x10004dd4