Function at 0x10004bbf
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x14
mov eax, dword [0x1006ffc0]
push ebx
push ebp
push esi
mov esi, dword [0x1006ffc4]
mov ebx, dword [0x1006ffc8]
push edi
mov edi, dword [0x1006ffcc]
mov ecx, edi
imul ecx, eax
mov dword [esp + 0x14], ecx
mov ecx, edi
imul ecx, edi
mov ebp, esi
sub ebp, ecx
mov ecx, dword [0x1006ffbc]
inc ebp
imul ebp, esi
mov edx, edi
sub edx, eax
dec edx
imul edx, ebx
sub edx, edi
sub edx, eax
add edx, esi
add edx, ecx
imul edx, edx, 0x1f
add ebp, edx
lea edx, [edi + edi]
sub ebp, edx
mov edx, dword [esp + 0x14]
sub edx, esi
add ebp, ebx
imul ebp, ebp, 0x30
dec edx
imul edx, ecx
lea ecx, [ebx + ebx]
sub ecx, eax
lea ecx, [edx + ecx*2]
mov edx, edi
imul edx, edx, 3
sub ecx, edx
mov edx, dword [esp + 0x28]
add ecx, esi
shl ecx, 9
add ebp, dword [ecx + edx + 0x3c]
lea ecx, [esi + edi]
add ecx, dword [0x1006ffbc]
push 8
imul ecx, ecx, 0x28
mov dword [esp + 0x14], ecx
mov ecx, dword [edx + ebp + 0x78]
mov ebp, dword [esp + 0x14]
add ecx, ebp
add ecx, edx
mov dword [esp + 0x14], ecx
lea ecx, [esi + eax]
imul ecx, eax
mov edx, ebx
sub edx, ecx
dec edx
imul edx, esi
mov ecx, ebx
shl ecx, 3
pop ebp
sub ebp, ecx
imul ebp, ebx
add edx, eax
lea ecx, [ebp + edx*8]
mov edx, edi
imul edx, edx, 6
add ecx, edx
mov edx, dword [esp + 0x10]
add ecx, dword [edx + 0x20]
lea edx, [eax + 1]
add ecx, dword [esp + 0x28]
mov dword [esp + 0x18], ecx
lea ecx, [ebx + 2]
imul ecx, ebx
imul edx, edi
lea ecx, [ecx + edx*2]
mov edx, eax
imul edx, edx, 3
add ecx, edx
mov edx, esi
imul ecx, ecx, 6
imul edx, esi
imul edx, edx, 6
push 0xfffffffffffffffa
pop ebp
sub ebp, edx
mov edx, dword [0x1006ffbc]
imul ebp, esi
sub ebp, ecx
mov ecx, edx
imul ecx, ecx, 6
sub ecx, 6
imul ecx, edx
add ebp, ecx
mov ecx, dword [esp + 0x10]
add ebp, dword [ecx + 0x1c]
mov ecx, dword [esp + 0x14]
imul ecx, eax
imul ecx, edx
push 3
pop edx
sub edx, ecx
lea ecx, [eax + 1]
imul ecx, ebx
add ebp, dword [esp + 0x28]
imul ecx, ecx, 3
and dword [esp + 0x14], 0
sub edx, esi
imul edx, esi
sub edx, ecx
sub edx, dword [0x1006ffbc]
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x24]
lea ecx, [ecx + edx*2]
add ecx, dword [esp + 0x28]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x1c], ecx
test ecx, ecx
jbe 0x10004d91
mov ecx, esi
imul ecx, eax
inc ecx
imul ecx, edi
imul ecx, ecx, 0x18
push 0x18
pop edx
sub edx, ecx
mov ecx, dword [0x1006ffbc]
imul edx, esi
imul ecx, ecx, 0x30
lea edx, [edx + ecx - 0x48]
mov ecx, ebx
imul edx, esi
add edx, dword [esp + 0x18]
imul ecx, edi
sub ecx, eax
sub ecx, dword [0x1006ffbc]
imul ecx, ecx, 0x18
add ecx, edx
mov dword [esp + 0x10], ecx
jmp 0x10004d6d
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
add ecx, dword [esp + 0x28]
call fcn.10003d67
cmp eax, dword [esp + 0x2c]
je 0x10004d9b
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
add dword [esp + 0x10], 4
cmp eax, dword [esp + 0x1c]
jb 0x10004d69
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret
mov eax, esi
imul edi, edi, 5
imul eax, eax, 3
sub eax, 3
imul eax, esi
mov ecx, ebx
imul ecx, ecx, 3
sub eax, ecx
mov ecx, dword [esp + 0x20]
imul eax, ebx
add edi, esi
imul edi, edi, 3
sub eax, edi
add eax, dword [esp + 0x14]
movzx eax, word [ecx + eax*2]
mov eax, dword [ebp + eax*4]
add eax, dword [esp + 0x28]
jmp 0x10004d93