Function at 0x4ba380
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1c
push ebx
mov ebx, dword [esp + 0x24]
push ebp
push esi
push edi
mov esi, dword [ebx + 8]
test esi, esi
jne 0x4ba3ae
cmp dword [ebx + 0x74], esi
jne 0x4ba3a3
mov eax, dword [ebx]
test byte [eax + 0x50], 8
jne 0x4ba3a3
mov byte [ebx + 0x17], 1
push ebx
call fcn.0051ae50
add esp, 4
mov esi, eax
mov eax, dword [ebx + 0x28]
dec dword [ebx + 0x38]
dec eax
cmp dword [esp + 0x4c], 0
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x38]
mov dword [esp + 0x10], eax
jge 0x4ba3dc
push eax
mov eax, dword [esp + 0x44]
movzx eax, byte [eax + 0x18]
push eax
push 0x30
push esi
call fcn.0051a3d0
add esp, 0x10
mov ecx, dword [esp + 0x40]
xor ebp, ebp
cmp dword [ecx + 0x14], ebp
jle 0x4ba4ae
mov ebx, dword [esp + 0x10]
nop
mov edi, dword [ecx]
mov eax, dword [esp + 0x44]
test byte [edi + 0x1c], 0x20
movzx eax, word [eax + ebp*4]
je 0x4ba450
test ax, ax
js 0x4ba450
movsx ecx, ax
xor edx, edx
mov dword [esp + 0x20], 0
test ecx, ecx
jle 0x4ba42c
mov eax, dword [edi + 4]
add eax, 0xe
mov dword [esp + 0x20], ecx
test byte [eax], 0x20
jne 0x4ba426
inc edx
add eax, 0x10
dec ecx
jne 0x4ba420
mov ecx, dword [esp + 0x20]
mov eax, dword [edi + 4]
add ecx, ecx
test byte [eax + ecx*8 + 0xe], 0x20
je 0x4ba44d
mov ax, word [edi + 0x24]
sub ax, dx
add ax, word [esp + 0x20]
movzx eax, ax
jmp 0x4ba450
movzx eax, dx
mov edx, dword [esp + 0x48]
mov ecx, dword [esi + 0x74]
inc edx
cwde
add edx, eax
cmp dword [esi + 0x78], ecx
jg 0x4ba471
push 0
push ebx
push edx
push 0x32
push esi
call fcn.004ceed0
add esp, 0x14
jmp 0x4ba49c
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
inc ebp
cmp ebp, dword [ecx + 0x14]
jl 0x4ba3f0
mov ebx, dword [esp + 0x30]
cmp dword [esp + 0x50], 0
jne 0x4bac8b
mov ebp, dword [esp + 0x3c]
test ebp, ebp
jne 0x4ba73c
mov al, byte [ebx + 0x13]
test al, al
jne 0x4ba4d4
inc dword [ebx + 0x2c]
mov edi, dword [ebx + 0x2c]
jmp 0x4ba4e3
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov edi, dword [ebx + eax*4 + 0x98]
mov eax, dword [esp + 0x44]
movzx eax, word [eax]
push eax
push dword [ecx]
call fcn.00515e30
mov edx, dword [esp + 0x50]
add esp, 8
mov ecx, dword [esi + 0x74]
inc edx
cwde
add edx, eax
cmp dword [esi + 0x78], ecx
jg 0x4ba516
push 0
push edi
push edx
push 0x50
push esi
call fcn.004ceed0
add esp, 0x14
jmp 0x4ba541
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x50
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ebp, dword [esi + 0x74]
cmp dword [esi + 0x78], ebp
jg 0x4ba55d
push 0
push 0
push edi
push 0xf
push esi
call fcn.004ceed0
add esp, 0x14
mov ebp, eax
jmp 0x4ba592
lea eax, [ebp + 1]
mov dword [esi + 0x74], eax
lea ecx, [ebp*4]
mov eax, dword [esi + 0x70]
add ecx, ebp
mov dword [eax + ecx*4], 0xf
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x38]
cmp edx, dword [eax]
jne 0x4ba615
cmp dword [esp + 0x4c], 1
jne 0x4ba615
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4ba5c7
push edi
push dword [esp + 0x14]
push dword [esp + 0x50]
push 0x35
push esi
call fcn.004ceed0
mov edx, dword [esp + 0x4c]
add esp, 0x14
jmp 0x4ba5fa
mov ebx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x35
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4ba615
lea ecx, [eax + eax*4]
mov edx, 0x90
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [esp + 0x38]
push 0x65
push edx
push dword [esp + 0x3c]
push dword [esp + 0x20]
push ebx
call fcn.00508400
mov ecx, dword [esi + 0x74]
add esp, 0x14
cmp dword [esi + 0x78], ecx
jg 0x4ba645
push edi
push 0
push dword [esp + 0x1c]
push 0x21
push esi
call fcn.004ceed0
add esp, 0x14
jmp 0x4ba674
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x21
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4ba691
push 0
push dword [esp + 0x14]
push 0
push 0xb
push esi
call fcn.004ceed0
add esp, 0x14
jmp 0x4ba6c4
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x74]
lea ecx, [edx - 2]
test ecx, ecx
jns 0x4ba6d1
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4ba6e0
mov eax, 0x6a4314
jmp 0x4ba6e9
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [esi + 0x74]
test ebp, ebp
jns 0x4ba6f6
lea ebp, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4ba705
mov eax, 0x6a4314
jmp 0x4ba714
mov eax, dword [esi + 0x70]
lea ecx, [ebp*4]
add ecx, ebp
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
test edi, edi
je 0x4bac8b
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4bac8b
movzx eax, al
mov dword [ebx + eax*4 + 0x98], edi
inc byte [ebx + 0x13]
jmp 0x4bac8b
mov edx, dword [ecx + 0x14]
mov dword [esp + 0x50], edx
cmp edx, 1
jne 0x4ba770
mov al, byte [ebx + 0x13]
test al, al
jne 0x4ba75b
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x18], eax
jmp 0x4ba79a
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x98]
mov dword [esp + 0x18], eax
jmp 0x4ba79a
mov ecx, dword [ebx + 0x1c]
mov edi, dword [ebx + 0x20]
mov dword [esp + 0x18], edi
cmp edx, ecx
jg 0x4ba78b
lea eax, [edi + edx]
sub ecx, edx
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], ecx
jmp 0x4ba79a
mov eax, dword [ebx + 0x2c]
lea ecx, [eax + 1]
add eax, edx
mov dword [esp + 0x18], ecx
mov dword [ebx + 0x2c], eax
mov al, byte [ebx + 0x13]
test al, al
jne 0x4ba7a9
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
jmp 0x4ba7b8
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x98]
mov ecx, dword [esi + 0x74]
mov edx, dword [ebp + 0x2c]
mov dword [esp + 0x1c], eax
cmp dword [esi + 0x78], ecx
jg 0x4ba7dd
push dword [esp + 0x34]
push edx
push dword [esp + 0x1c]
push 0x65
push esi
call fcn.004ceed0
add esp, 0x14
jmp 0x4ba80d
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x65
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0x10], 0
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x14]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x34]
mov dword [ecx + 0xc], eax
mov edi, dword [ebx + 8]
push ebp
push ebx
call fcn.00506120
mov edx, eax
add esp, 8
test edx, edx
je 0x4ba848
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4ba836
push edx
push 0xfffffffffffffff7
push eax
call fcn.004bbca0
add esp, 0xc
jmp 0x4ba848
mov eax, dword [edi + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x70]
mov byte [eax + ecx*4 - 0x13], 0xf7
mov dword [eax + ecx*4 - 4], edx
mov ecx, dword [esp + 0x50]
xor ebp, ebp
mov dword [esp + 0x24], ebp
test ecx, ecx
jle 0x4ba929
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x20], eax
mov edi, dword [ebx]
mov eax, dword [esp + 0x44]
test byte [edi + 0x1c], 0x20
movzx eax, word [eax + ebp*4]
je 0x4ba8c0
test ax, ax
js 0x4ba8c0
movsx ecx, ax
xor ebp, ebp
xor edx, edx
test ecx, ecx
jle 0x4ba89c
mov eax, dword [edi + 4]
mov ebp, ecx
add eax, 0xe
mov edi, edi
test byte [eax], 0x20
jne 0x4ba896
inc edx
add eax, 0x10
dec ecx
jne 0x4ba890
mov eax, dword [edi + 4]
mov ecx, ebp
add ecx, ecx
test byte [eax + ecx*8 + 0xe], 0x20
je 0x4ba8b9
mov ax, word [edi + 0x24]
sub ax, dx
add ax, bp
movzx eax, ax
jmp 0x4ba8bc
movzx eax, dx
mov ebp, dword [esp + 0x24]
mov edx, dword [esp + 0x48]
mov ecx, dword [esi + 0x74]
inc edx
mov edi, dword [esp + 0x20]
cwde
add edx, eax
cmp dword [esi + 0x78], ecx
jg 0x4ba8e5
push 0
push edi
push edx
push 0x4f
push esi
call fcn.004ceed0
add esp, 0x14
jmp 0x4ba910
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x4f
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
inc dword [esp + 0x20]
inc ebp
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x24], ebp
cmp ebp, ecx
jl 0x4ba866
mov ebx, dword [esp + 0x30]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x38]
cmp eax, dword [edx]
jne 0x4baafd
cmp dword [esp + 0x4c], 1
jne 0x4baafd
mov eax, dword [esi + 0x74]
inc eax
add eax, ecx
mov dword [esp + 0x20], eax
test ecx, ecx
jle 0x4baaad
xor ebx, ebx
jmp 0x4ba960
mov edi, dword [edx]
mov eax, dword [esp + 0x44]
test byte [edi + 0x1c], 0x20
movzx eax, word [eax + ebx*4]
je 0x4ba9b4
test ax, ax
js 0x4ba9b4
movsx ecx, ax
xor ebp, ebp
xor edx, edx
test ecx, ecx
jle 0x4ba994
mov eax, dword [edi + 4]
mov ebp, ecx
add eax, 0xe
test byte [eax], 0x20
jne 0x4ba98e
inc edx
add eax, 0x10
dec ecx
jne 0x4ba988
mov eax, dword [edi + 4]
mov ecx, ebp
add ecx, ecx
test byte [eax + ecx*8 + 0xe], 0x20
je 0x4ba9b1
mov ax, word [edi + 0x24]
sub ax, dx
add ax, bp
movzx eax, ax
jmp 0x4ba9b4
movzx eax, dx
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x48]
cwde
inc edi
add edi, eax
mov eax, dword [ecx + 4]
mov ebp, dword [ecx + 0xc]
mov dword [esp + 0x24], edi
movzx eax, word [eax + ebx*2]
test byte [ebp + 0x1c], 0x20
mov dword [esp + 0x28], eax
movzx eax, ax
je 0x4baa23
test ax, ax
js 0x4baa23
movsx ecx, ax
xor edi, edi
xor edx, edx
test ecx, ecx
jle 0x4ba9ff
mov eax, dword [ebp + 4]
mov edi, ecx
add eax, 0xe
test byte [eax], 0x20
jne 0x4ba9f9
inc edx
add eax, 0x10
dec ecx
jne 0x4ba9f3
mov eax, dword [ebp + 4]
mov ecx, edi
add ecx, ecx
test byte [eax + ecx*8 + 0xe], 0x20
je 0x4baa1c
mov ax, word [ebp + 0x24]
sub ax, dx
add ax, di
movzx eax, ax
jmp 0x4baa1f
movzx eax, dx
mov edi, dword [esp + 0x24]
mov ebp, dword [esp + 0x48]
mov ecx, dword [esp + 0x38]
cwde
lea edx, [ebp + 1]
add edx, eax
mov eax, dword [esp + 0x28]
cmp ax, word [ecx + 0x20]
jne 0x4baa3d
mov edx, ebp
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4baa58
push edx
push dword [esp + 0x24]
push edi
push 0x34
push esi
call fcn.004ceed0
add esp, 0x14
jmp 0x4baa83
mov ebp, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x34
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x4baa9a
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [esp + 0x40]
inc ebx
cmp ebx, dword [esp + 0x50]
jl 0x4ba960
mov ebx, dword [esp + 0x30]
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4baaca
push 0
push dword [esp + 0x14]
push 0
push 0xb
push esi
call fcn.004ceed0
add esp, 0x14
jmp 0x4baafd
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
push dword [esp + 0x3c]
push dword [ebx]
call fcn.00504060
mov edx, dword [esi + 0x74]
add esp, 8
mov edi, eax
cmp dword [esi + 0x78], edx
jg 0x4bab32
mov ebp, dword [esp + 0x1c]
push ebp
push dword [esp + 0x54]
mov ebp, dword [esp + 0x20]
push ebp
push 0x60
push esi
call fcn.004ceed0
add esp, 0x14
mov edx, eax
jmp 0x4bab69
mov ebp, dword [esp + 0x18]
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], ebp
mov ebp, dword [esp + 0x50]
mov dword [eax + ecx*4 + 8], ebp
mov ebp, dword [esp + 0x1c]
mov dword [eax + ecx*4 + 0xc], ebp
mov ebp, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4bab87
mov ecx, dword [esp + 0x50]
cmp ecx, 0xfffffff4
je 0x4babd3
push edi
push ecx
push eax
call fcn.004bbca0
add esp, 0xc
jmp 0x4babd3
test edx, edx
jns 0x4bab8f
mov edx, dword [esi + 0x74]
dec edx
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x50]
test ecx, ecx
jns 0x4babc7
cmp byte [eax + 1], 0
jne 0x4babc7
cmp ecx, 0xfffffffd
jne 0x4babb3
mov dword [eax + 0x10], edi
mov byte [eax + 1], cl
jmp 0x4babd3
test edi, edi
je 0x4babd3
mov dword [eax + 0x10], edi
mov byte [eax + 1], cl
cmp ecx, 0xfffffff4
jne 0x4babd3
inc dword [edi + 0xc]
jmp 0x4babd3
push ecx
push edi
push eax
push esi
call fcn.00533cd0
add esp, 0x10
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x4babf7
mov edi, dword [esp + 0x1c]
push edi
push dword [esp + 0x14]
push dword [esp + 0x1c]
push 0x1f
push esi
call fcn.004ceed0
add esp, 0x14
mov edx, eax
jmp 0x4bac2a
mov edi, dword [esp + 0x14]
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x4bac45
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], 0
test edi, edi
je 0x4bac5d
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4bac5d
movzx eax, al
mov dword [ebx + eax*4 + 0x98], edi
inc byte [ebx + 0x13]
mov eax, dword [esp + 0x50]
cmp eax, 1
jne 0x4bac80
test ebp, ebp
je 0x4bac8b
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4bac8b
movzx eax, al
mov dword [ebx + eax*4 + 0x98], ebp
inc byte [ebx + 0x13]
jmp 0x4bac8b
cmp eax, dword [ebx + 0x1c]
jle 0x4bac8b
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], ebp
mov edx, dword [esp + 0x40]
mov cl, byte [edx + 0x18]
test cl, cl
jne 0x4bad0d
mov edx, dword [ebx]
mov eax, dword [edx + 0x20]
and eax, 0x80000
or eax, 0
jne 0x4bad09
cmp dword [ebx + 0x74], eax
jne 0x4bad09
cmp byte [ebx + 0x14], al
jne 0x4bad09
mov edi, dword [ebx + 8]
test edi, edi
jne 0x4baccb
test byte [edx + 0x50], 8
jne 0x4bacc0
mov byte [ebx + 0x17], 1
push ebx
call fcn.0051ae50
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x74]
test eax, eax
jne 0x4bacd4
mov eax, ebx
push 0xffffffffffffffff
push 0
push 0
push 2
push 0x313
push 0x46
push edi
mov byte [eax + 0x15], 1
call fcn.0051a490
mov eax, dword [edi + 0x74]
add esp, 0x1c
test eax, eax
jle 0x4bad71
lea ecx, [eax + eax*4]
mov edx, 4
mov eax, dword [edi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x4bad71
mov edx, dword [esp + 0x40]
mov ebp, dword [esp + 0x4c]
test ebp, ebp
jle 0x4bad26
test cl, cl
jne 0x4bad26
mov eax, dword [ebx + 0x74]
test eax, eax
jne 0x4bad22
mov eax, ebx
mov byte [eax + 0x15], 1
mov ecx, dword [esi + 0x74]
movzx edx, byte [edx + 0x18]
cmp dword [esi + 0x78], ecx
jg 0x4bad46
push 0
push ebp
push edx
push 0x9d
push esi
call fcn.004ceed0
add esp, 0x14
jmp 0x4bad71
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x9d
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x10]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4bad8f
push edx
push esi
push ecx
call fcn.004e0f70
add esp, 0xc
jmp 0x4bad98
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x74]
mov dword [ecx + edx*4], eax
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x4badbb
push 0
push 0
push dword [esp + 0x1c]
push 0x79
push esi
call fcn.004ceed0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
pop edi
pop esi
pop ebp
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
pop ebx
add esp, 0x1c
ret