Function at 0x4badb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5bf1fe
mov eax, dword fs:[0]
push eax
sub esp, 0x14c
mov eax, dword [0x61f138]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x158], ebx
lea ecx, [ebp - 0x13c]
call fcn.004b5f10
mov dword [ebp - 4], 0
xor eax, eax
xor edi, edi
mov dword [ebp - 0x50], 7
mov dword [ebp - 0x54], edi
mov word [ebp - 0x64], ax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], 7
mov word [ebp - 0x4c], ax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 1
mov ecx, dword [ebx + 0xa4]
push eax
call fcn.0052ad40
mov esi, eax
lea eax, [ebp - 0x7c]
cmp eax, esi
je 0x4bae76
mov ecx, eax
call fcn.00445c30
mov eax, dword [esi + 8]
mov ecx, dword [esi]
mov dword [ebp - 0x74], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x70], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x6c], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0x68], eax
xor eax, eax
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 7
mov dword [ebp - 0x78], ecx
mov word [esi], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4baeb0
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4baea6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbea3
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov ecx, dword [ebx + 0x9c]
lea eax, [ebp - 0x28]
push eax
call fcn.0052ad40
mov esi, eax
lea eax, [ebp - 0xac]
cmp eax, esi
je 0x4baf1a
mov ecx, eax
call fcn.00445c30
mov eax, dword [esi + 8]
mov ecx, dword [esi]
mov dword [ebp - 0xa4], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0xa0], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x9c], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0xac], ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0x98], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov dword [ebp - 0xa8], ecx
mov word [esi], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4baf54
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4baf4a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbea8
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov ecx, dword [ebx + 0x88]
lea eax, [ebp - 0x28]
push eax
call fcn.0052ad40
mov esi, eax
lea eax, [ebp - 0x124]
cmp eax, esi
je 0x4bafbe
mov ecx, eax
call fcn.00445c30
mov eax, dword [esi + 8]
mov ecx, dword [esi]
mov dword [ebp - 0x11c], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x118], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x114], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x124], ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0x110], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov dword [ebp - 0x120], ecx
mov word [esi], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4baff8
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bafee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbead
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov ecx, dword [ebx + 0xa0]
lea eax, [ebp - 0x28]
push eax
call fcn.0052ad40
mov esi, eax
lea eax, [ebp - 0x94]
cmp eax, esi
je 0x4bb05f
mov ecx, eax
call fcn.00445c30
mov eax, dword [esi + 8]
mov ecx, dword [esi]
mov dword [ebp - 0x8c], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x88], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x84], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x94], ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov dword [ebp - 0x90], ecx
mov word [esi], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4bb099
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb08f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbeb2
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov ecx, dword [ebx + 0x8c]
lea eax, [ebp - 0x28]
push eax
call fcn.0052ad40
mov esi, eax
lea eax, [ebp - 0x10c]
cmp eax, esi
je 0x4bb103
mov ecx, eax
call fcn.00445c30
mov eax, dword [esi + 8]
mov ecx, dword [esi]
mov dword [ebp - 0x104], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x100], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0xfc], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x10c], ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0xf8], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov dword [ebp - 0x108], ecx
mov word [esi], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4bb13d
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb133
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbeb7
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov ecx, dword [ebx + 0x90]
lea eax, [ebp - 0x28]
push eax
call fcn.0052ad40
mov esi, eax
lea eax, [ebp - 0xf4]
cmp eax, esi
je 0x4bb1a7
mov ecx, eax
call fcn.00445c30
mov eax, dword [esi + 8]
mov ecx, dword [esi]
mov dword [ebp - 0xec], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0xe8], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0xe4], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0xf4], ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0xe0], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov dword [ebp - 0xf0], ecx
mov word [esi], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4bb1e1
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb1d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbebc
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov ecx, dword [ebx + 0x94]
lea eax, [ebp - 0x28]
push eax
call fcn.0052ad40
mov esi, eax
lea eax, [ebp - 0xdc]
cmp eax, esi
je 0x4bb24b
mov ecx, eax
call fcn.00445c30
mov eax, dword [esi + 8]
mov ecx, dword [esi]
mov dword [ebp - 0xd4], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0xd0], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0xcc], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0xdc], ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0xc8], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov dword [ebp - 0xd8], ecx
mov word [esi], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4bb285
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb27b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbec1
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov ecx, dword [ebx + 0x98]
lea eax, [ebp - 0x28]
push eax
call fcn.0052ad40
mov esi, eax
lea eax, [ebp - 0xc4]
cmp eax, esi
je 0x4bb2ef
mov ecx, eax
call fcn.00445c30
mov eax, dword [esi + 8]
mov ecx, dword [esi]
mov dword [ebp - 0xbc], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0xb8], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0xb4], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0xb0], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov dword [ebp - 0xc0], ecx
mov word [esi], ax
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4bb329
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb31f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbec6
push edx
push ecx
call fcn.0056eec5
add esp, 8
push 1
push 0x5eccbc
lea ecx, [ebp - 0x13c]
call fcn.00445cb0
mov ecx, dword [ebx + 0x84]
lea eax, [ebp - 0x28]
push eax
call fcn.0052ad40
mov esi, eax
lea eax, [ebp - 0x64]
cmp eax, esi
je 0x4bb39e
mov ecx, eax
call fcn.00445c30
mov eax, dword [esi]
mov edi, dword [esi + 0x10]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x64], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x60], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x5c], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x58], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x50], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov esi, dword [ebp - 0x150]
mov dword [ebp - 0x54], edi
jmp 0x4bb3a7
mov esi, dword [ebp - 0x64]
mov dword [ebp - 0x150], esi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4bb3e1
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb3d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbecb
push edx
push ecx
call fcn.0056eec5
add esp, 8
mov eax, dword [0x6c4e48]
test eax, eax
jne 0x4bb701
mov eax, dword [ebx + 0xd4]
mov edx, dword [eax + 0x2800]
mov ecx, dword [eax + 0x2804]
mov eax, 0x88888889
sub ecx, edx
mov dword [ebp - 0x14c], edx
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x4bb50f
push 1
push 0x5e347c
lea ecx, [ebp - 0x4c]
call fcn.00445cb0
mov esi, dword [ebp - 0x30]
lea eax, [ebp - 0x13c]
push eax
cmp dword [ebp - 0x2c], esi
je 0x4bb451
mov ecx, esi
call fcn.004bd070
add esi, 0xd8
mov dword [ebp - 0x30], esi
jmp 0x4bb45a
push esi
lea ecx, [ebp - 0x34]
call fcn.004bce60
mov esi, dword [ebx + 0xd4]
lea eax, [ebp - 0x64]
push eax
mov edi, dword [esi + 0x2804]
cmp dword [esi + 0x2808], edi
je 0x4bb4a8
mov ecx, edi
mov dword [ebp - 0x144], edi
call fcn.00441370
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 2
push eax
lea ecx, [edi + 0x18]
call fcn.00441370
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 3
push eax
lea ecx, [edi + 0x30]
call fcn.004bd150
add dword [esi + 0x2804], 0x3c
jmp 0x4bb4b4
push edi
lea ecx, [esi + 0x2800]
call fcn.004bcad0
mov eax, dword [ebx + 0xd4]
mov ecx, dword [eax + 0x2804]
sub ecx, dword [eax + 0x2800]
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
dec edx
shr eax, 0x1f
add eax, edx
mov word [0x6c4e44], ax
mov eax, dword [ebx + 0xd4]
mov eax, dword [eax + 0x2804]
mov ecx, dword [eax - 8]
sub ecx, dword [eax - 0xc]
mov eax, 0x4bda12f7
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
dec eax
add eax, edx
mov word [0x6c4e40], ax
jmp 0x4bbdaf
xor cl, cl
mov dword [ebp - 0x148], 0
xor edi, edi
mov byte [ebp - 0x13d], cl
test eax, eax
je 0x4bb653
mov ebx, eax
lea ecx, [ecx]
mov edx, dword [ebp - 0x14c]
mov eax, edi
shl eax, 4
sub eax, edi
cmp dword [ebp - 0x50], 8
lea edx, [edx + eax*4]
lea eax, [ebp - 0x64]
cmovae eax, esi
cmp dword [edx + 0x14], 8
mov esi, edx
jb 0x4bb554
mov esi, dword [edx]
mov edx, dword [edx + 0x10]
cmp edx, dword [ebp - 0x54]
jne 0x4bb58d
test edx, edx
je 0x4bb573
sub esi, eax
mov cx, word [esi + eax]
cmp cx, word [eax]
jne 0x4bb587
add eax, 2
sub edx, 1
jne 0x4bb562
mov eax, edi
mov cl, 1
mov byte [ebp - 0x13d], cl
mov edi, ebx
mov dword [ebp - 0x148], eax
jmp 0x4bb593
mov cl, byte [ebp - 0x13d]
mov eax, dword [ebp - 0x148]
mov esi, dword [ebp - 0x150]
inc edi
cmp edi, ebx
jb 0x4bb530
mov ebx, dword [ebp - 0x158]
test cl, cl
je 0x4bb653
movzx eax, ax
mov word [0x6c4e44], ax
cwde
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, dword [ebx + 0xd4]
mov eax, dword [eax + 0x2800]
lea esi, [eax + ecx*4]
mov eax, dword [esi + 0x34]
lea ecx, [ebp - 0x13c]
push ecx
cmp dword [esi + 0x38], eax
je 0x4bb5eb
mov ecx, eax
call fcn.004bd070
add dword [esi + 0x34], 0xd8
jmp 0x4bb5f4
push eax
lea ecx, [esi + 0x30]
call fcn.004bce60
movsx eax, word [0x6c4e44]
mov esi, eax
shl esi, 4
sub esi, eax
mov eax, dword [ebx + 0xd4]
shl esi, 2
push 1
push 0x5e347c
mov eax, dword [eax + 0x2800]
mov ecx, dword [eax + esi + 0x34]
sub ecx, dword [eax + esi + 0x30]
mov eax, 0x4bda12f7
imul ecx
sar edx, 6
mov eax, edx
dec edx
shr eax, 0x1f
add eax, edx
mov word [0x6c4e40], ax
mov eax, dword [ebx + 0xd4]
mov ecx, dword [eax + 0x2800]
add ecx, 0x18
add ecx, esi
call fcn.00445cb0
jmp 0x4bb6ea
push 1
push 0x5e347c
lea ecx, [ebp - 0x4c]
call fcn.00445cb0
mov esi, dword [ebp - 0x30]
lea eax, [ebp - 0x13c]
push eax
cmp dword [ebp - 0x2c], esi
je 0x4bb683
mov ecx, esi
call fcn.004bd070
add esi, 0xd8
mov dword [ebp - 0x30], esi
jmp 0x4bb68c
push esi
lea ecx, [ebp - 0x34]
call fcn.004bce60
mov esi, dword [ebx + 0xd4]
lea eax, [ebp - 0x64]
push eax
mov edi, dword [esi + 0x2804]
cmp dword [esi + 0x2808], edi
je 0x4bb6de
mov ecx, edi
mov dword [ebp - 0x144], edi
call fcn.00441370
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 4
push eax
lea ecx, [edi + 0x18]
call fcn.00441370
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 5
push eax
lea ecx, [edi + 0x30]
call fcn.004bd150
mov byte [ebp - 4], 1
add dword [esi + 0x2804], 0x3c
jmp 0x4bb6ea
push edi
lea ecx, [esi + 0x2800]
call fcn.004bcad0
mov ecx, dword [ebx + 0xd4]
mov byte [0x6c4e34], 0
call fcn.004b91d0
jmp 0x4bbdaf
cmp eax, 1
jne 0x4bbc62
cmp byte [0x6c4e35], 0
movsx eax, word [0x6c4e44]
je 0x4bb74e
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, dword [ebx + 0xd4]
mov eax, dword [eax + 0x2800]
lea ecx, [eax + ecx*4]
lea eax, [ebp - 0x64]
cmp ecx, eax
je 0x4bbde9
cmp dword [ebp - 0x50], 8
push edi
cmovae eax, esi
push eax
call fcn.00445cb0
jmp 0x4bbde9
mov ecx, dword [ebx + 0xd4]
mov edx, eax
shl edx, 4
sub edx, eax
mov dword [ebp - 0x14c], ecx
shl edx, 2
mov edi, dword [ecx + 0x2800]
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x144], edx
add edx, edi
cmp dword [ebp - 0x50], 8
cmovae ecx, esi
mov esi, edx
cmp dword [edx + 0x14], 8
jb 0x4bb786
mov esi, dword [edx]
mov edx, dword [edx + 0x10]
cmp edx, dword [ebp - 0x54]
jne 0x4bb9c1
test edx, edx
je 0x4bb7b5
sub esi, ecx
jmp 0x4bb7a0
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x4bb9c1
add ecx, 2
sub edx, 1
jne 0x4bb7a0
mov edx, dword [ebp - 0x144]
lea eax, [ebp - 0x124]
push eax
movsx eax, word [0x6c4e40]
imul ecx, eax, 0xd8
mov eax, dword [ebx + 0xd4]
mov eax, dword [eax + 0x2800]
add ecx, 0x18
mov eax, dword [eax + edx + 0x30]
add ecx, eax
call fcn.00441240
lea eax, [ebp - 0x10c]
push eax
movsx eax, word [0x6c4e44]
mov esi, eax
shl esi, 4
sub esi, eax
mov eax, dword [ebx + 0xd4]
mov edx, dword [eax + 0x2800]
movsx eax, word [0x6c4e40]
imul ecx, eax, 0xd8
add ecx, 0x30
add ecx, dword [edx + esi*4 + 0x30]
call fcn.00441240
lea eax, [ebp - 0xf4]
push eax
movsx eax, word [0x6c4e44]
mov esi, eax
shl esi, 4
sub esi, eax
mov eax, dword [ebx + 0xd4]
mov edx, dword [eax + 0x2800]
movsx eax, word [0x6c4e40]
imul ecx, eax, 0xd8
add ecx, 0x48
add ecx, dword [edx + esi*4 + 0x30]
call fcn.00441240
lea eax, [ebp - 0xdc]
push eax
movsx eax, word [0x6c4e44]
mov esi, eax
shl esi, 4
sub esi, eax
mov eax, dword [ebx + 0xd4]
mov edx, dword [eax + 0x2800]
movsx eax, word [0x6c4e40]
imul ecx, eax, 0xd8
add ecx, 0x60
add ecx, dword [edx + esi*4 + 0x30]
call fcn.00441240
lea eax, [ebp - 0xc4]
push eax
movsx eax, word [0x6c4e44]
mov esi, eax
shl esi, 4
sub esi, eax
mov eax, dword [ebx + 0xd4]
mov edx, dword [eax + 0x2800]
movsx eax, word [0x6c4e40]
imul ecx, eax, 0xd8
add ecx, 0x78
add ecx, dword [edx + esi*4 + 0x30]
call fcn.00441240
lea eax, [ebp - 0xac]
push eax
movsx eax, word [0x6c4e44]
mov esi, eax
shl esi, 4
sub esi, eax
mov eax, dword [ebx + 0xd4]
mov edx, dword [eax + 0x2800]
movsx eax, word [0x6c4e40]
imul ecx, eax, 0xd8
add ecx, 0x90
add ecx, dword [edx + esi*4 + 0x30]
call fcn.00441240
lea eax, [ebp - 0x94]
push eax
movsx eax, word [0x6c4e44]
mov esi, eax
shl esi, 4
sub esi, eax
mov eax, dword [ebx + 0xd4]
mov edx, dword [eax + 0x2800]
movsx eax, word [0x6c4e40]
imul ecx, eax, 0xd8
add ecx, 0xa8
add ecx, dword [edx + esi*4 + 0x30]
call fcn.00441240
lea eax, [ebp - 0x7c]
push eax
movsx eax, word [0x6c4e44]
mov esi, eax
shl esi, 4
sub esi, eax
mov eax, dword [ebx + 0xd4]
mov edx, dword [eax + 0x2800]
movsx eax, word [0x6c4e40]
imul ecx, eax, 0xd8
add ecx, 0xc0
add ecx, dword [edx + esi*4 + 0x30]
call fcn.00441240
lea eax, [ebp - 0x13c]
push eax
movsx eax, word [0x6c4e44]
mov esi, eax
shl esi, 4
sub esi, eax
mov eax, dword [ebx + 0xd4]
mov edx, dword [eax + 0x2800]
movsx eax, word [0x6c4e40]
imul ecx, eax, 0xd8
add ecx, dword [edx + esi*4 + 0x30]
call fcn.00441240
jmp 0x4bbdaf
xor al, al
mov dword [ebp - 0x148], 0
mov byte [ebp - 0x13d], al
xor esi, esi
mov eax, dword [ebx + 0xd4]
mov eax, dword [eax + 0x2804]
mov ecx, eax
mov dword [ebp - 0x144], eax
sub ecx, edi
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4bbb9b
mov ebx, dword [ebp - 0x54]
mov eax, esi
lea ecx, [ebp - 0x64]
shl eax, 4
sub eax, esi
cmp dword [ebp - 0x50], 8
cmovae ecx, dword [ebp - 0x150]
cmp dword [edi + eax*4 + 0x14], 8
lea edx, [edi + eax*4]
mov edi, edx
jb 0x4bba2a
mov edi, dword [edx]
mov edx, dword [edx + 0x10]
cmp edx, ebx
jne 0x4bba7a
test edx, edx
je 0x4bba48
sub edi, ecx
mov ax, word [ecx + edi]
cmp ax, word [ecx]
jne 0x4bba7a
add ecx, 2
sub edx, 1
jne 0x4bba37
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x144]
mov dword [ebp - 0x148], esi
mov byte [ebp - 0x13d], 1
sub ecx, dword [eax + 0x2800]
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, dword [ebp - 0x14c]
inc esi
mov ecx, dword [ebp - 0x144]
mov edi, dword [eax + 0x2800]
sub ecx, edi
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x4bba07
cmp byte [ebp - 0x13d], 0
mov ebx, dword [ebp - 0x158]
je 0x4bbb9b
mov eax, dword [ebp - 0x148]
lea ecx, [ebp - 0x13c]
shl eax, 4
sub eax, dword [ebp - 0x148]
push ecx
lea esi, [edi + eax*4]
mov eax, dword [esi + 0x34]
cmp dword [esi + 0x38], eax
je 0x4bbaee
mov ecx, eax
call fcn.004bd070
add dword [esi + 0x34], 0xd8
jmp 0x4bbaf7
push eax
lea ecx, [esi + 0x30]
call fcn.004bce60
movsx eax, word [0x6c4e44]
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, dword [ebx + 0xd4]
mov eax, dword [eax + 0x2800]
add eax, 0x30
lea ecx, [eax + ecx*4]
movsx eax, word [0x6c4e40]
imul eax, eax, 0xd8
add eax, dword [ecx]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.004bc810
mov ecx, dword [ebp - 0x148]
movzx eax, cx
mov word [0x6c4e44], ax
cwde
mov esi, eax
shl esi, 4
sub esi, eax
mov eax, dword [ebx + 0xd4]
shl esi, 2
push 1
push 0x5e347c
mov eax, dword [eax + 0x2800]
mov ecx, dword [eax + esi + 0x34]
sub ecx, dword [eax + esi + 0x30]
mov eax, 0x4bda12f7
imul ecx
sar edx, 6
mov eax, edx
dec edx
shr eax, 0x1f
add eax, edx
mov word [0x6c4e40], ax
mov eax, dword [ebx + 0xd4]
mov ecx, dword [eax + 0x2800]
add ecx, 0x18
add ecx, esi
call fcn.00445cb0
jmp 0x4bbdaf
push 1
push 0x5e347c
lea ecx, [ebp - 0x4c]
call fcn.00445cb0
mov esi, dword [ebp - 0x30]
lea eax, [ebp - 0x13c]
push eax
cmp dword [ebp - 0x2c], esi
je 0x4bbbcb
mov ecx, esi
call fcn.004bd070
add esi, 0xd8
mov dword [ebp - 0x30], esi
jmp 0x4bbbd4
push esi
lea ecx, [ebp - 0x34]
call fcn.004bce60
mov esi, dword [ebx + 0xd4]
lea eax, [ebp - 0x64]
push eax
mov edi, dword [esi + 0x2804]
cmp dword [esi + 0x2808], edi
je 0x4bbc22
mov ecx, edi
mov dword [ebp - 0x154], edi
call fcn.00441370
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 6
push eax
lea ecx, [edi + 0x18]
call fcn.00441370
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 7
push eax
lea ecx, [edi + 0x30]
call fcn.004bd150
add dword [esi + 0x2804], 0x3c
jmp 0x4bbc2e
push edi
lea ecx, [esi + 0x2800]
call fcn.004bcad0
movsx eax, word [0x6c4e44]
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, dword [ebx + 0xd4]
add ecx, 0xc
mov eax, dword [eax + 0x2800]
lea ecx, [eax + ecx*4]
movsx eax, word [0x6c4e40]
imul eax, eax, 0xd8
add eax, dword [ecx]
jmp 0x4bbda2
cmp eax, 2
jne 0x4bbdaf
movsx eax, word [0x6c4e44]
mov edi, dword [ebx + 0xd4]
mov esi, eax
shl esi, 4
sub esi, eax
mov dword [ebp - 0x148], edi
shl esi, 2
mov eax, dword [edi + 0x2800]
mov edx, dword [esi + eax + 0x30]
mov ecx, dword [esi + eax + 0x34]
mov eax, 0x4bda12f7
sub ecx, edx
mov dword [ebp - 0x144], edx
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x4bbcc6
mov byte [0x6c4e35], 1
mov edi, dword [ebx + 0xd4]
mov dword [ebp - 0x148], edi
jmp 0x4bbcd3
cmp byte [0x6c4e35], 0
je 0x4bbd84
mov eax, dword [edi + 0x2800]
mov ecx, dword [edi + 0x2804]
add eax, 0x3c
mov dword [ebp - 0x144], ecx
lea edi, [eax + esi]
cmp edi, ecx
je 0x4bbd5b
lea esi, [edi - 0xc]
mov ebx, ecx
push edi
lea ecx, [esi - 0x30]
call fcn.00441270
lea eax, [esi + 0x24]
push eax
lea ecx, [esi - 0x18]
call fcn.00441270
lea eax, [esi + 0x3c]
cmp esi, eax
je 0x4bbd3d
mov ecx, esi
call fcn.004bc930
mov eax, dword [esi + 0x3c]
mov dword [esi], eax
mov eax, dword [esi + 0x40]
mov dword [esi + 4], eax
mov eax, dword [esi + 0x44]
mov dword [esi + 8], eax
mov dword [esi + 0x3c], 0
mov dword [esi + 0x40], 0
mov dword [esi + 0x44], 0
add edi, 0x3c
add esi, 0x3c
cmp edi, ebx
jne 0x4bbcf4
mov edi, dword [ebp - 0x148]
mov ebx, dword [ebp - 0x158]
mov ecx, dword [edi + 0x2804]
jmp 0x4bbd61
mov edi, dword [ebp - 0x148]
lea esi, [ecx - 0x3c]
lea ecx, [esi + 0x30]
call fcn.004bc930
lea ecx, [esi + 0x18]
call fcn.00445c30
mov ecx, esi
call fcn.00445c30
add dword [edi + 0x2804], 0xffffffc4
jmp 0x4bbdaf
movsx eax, word [0x6c4e40]
mov ecx, dword [edi + 0x2800]
imul eax, eax, 0xd8
add ecx, 0x30
add eax, dword [ebp - 0x144]
add ecx, esi
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.004bc810
mov ecx, dword [ebx + 0xd4]
mov eax, 0x88888889
mov esi, dword [ecx + 0x2804]
sub esi, dword [ecx + 0x2800]
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, 0xffffffff
jne 0x4bbe2a
mov word [0x6c4e44], dx
mov word [0x6c4e40], dx
lea ecx, [ebp - 0x34]
call fcn.004bc930
lea ecx, [ebp - 0x4c]
call fcn.00445c30
lea ecx, [ebp - 0x64]
call fcn.00445c30
lea ecx, [ebp - 0x13c]
call fcn.004b5fc0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0056eeb4
mov esp, ebp
pop ebp
ret 8
movzx eax, ax
mov ecx, eax
dec eax
mov word [0x6c4e44], ax
test cx, cx
jle 0x4bbde2
mov esi, dword [ebx + 0xd4]
movsx eax, cx
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, dword [esi + 0x2800]
mov edx, dword [eax + ecx*4 - 8]
sub edx, dword [eax + ecx*4 - 0xc]
mov eax, 0x4bda12f7
imul edx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x4bbe7a
or eax, 0xffffffff
mov word [0x6c4e40], ax
jmp 0x4bbde9
mov ecx, dword [esi + 0x2804]
mov eax, 0x4bda12f7
mov edx, dword [ecx - 8]
sub edx, dword [ecx - 0xc]
imul edx
sar edx, 6
mov eax, edx
shr eax, 0x1f
dec eax
add eax, edx
mov word [0x6c4e40], ax
jmp 0x4bbde9
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
call fcn.00591dc6
int3