Function at 0x485bf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x6c]
cmp eax, dword [ecx + 8]
jbe 0x487198
sub esp, 0xec
mov eax, dword [esp + 0x100]
mov dword [esp], eax
mov ecx, dword [esp + 0x104]
mov dword [esp + 4], ecx
call fcn.00489110
mov eax, dword [esp + 8]
test eax, eax
je 0x4868cf
mov dword [esp + 0x48], eax
lea ecx, [0x5317a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00446320
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x100]
test ecx, ecx
je 0x4868c2
mov dword [esp + 0xc0], eax
mov edx, dword [ecx + 8]
cmp edx, 0x734d2a16
ja 0x486245
cmp edx, 0x26b80717
jbe 0x485f2d
cmp edx, 0x5fcadfef
ja 0x485dca
cmp edx, 0x30c31d62
ja 0x485d50
cmp edx, 0x2ea27ffb
je 0x485cd9
cmp edx, 0x30c31d62
jne 0x4868b0
mov edx, dword [esp + 0x100]
lea ebx, [0x52c0e0]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
mov ebx, dword [edx + 4]
mov edx, dword [edx]
mov ecx, dword [esp + 0x48]
xor ebp, ebp
jmp 0x487172
mov ecx, dword [esp + 0x100]
lea edx, [0x5309a0]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0x104]
movsd xmm0, qword [ecx]
movsd qword [esp + 0x84], xmm0
mov ecx, dword [esp + 0xf8]
mov ecx, dword [ecx + 0x18]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0xfc]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x48]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebp
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], edx
call ecx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0x382e7edf
jne 0x485d81
mov ecx, dword [esp + 0x100]
lea edx, [0x52cb60]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0x104]
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx]
jmp 0x486b87
cmp edx, 0x5fcadfef
jne 0x4868b0
mov edx, dword [esp + 0x100]
lea ebx, [0x528e40]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
movzx edx, byte [edx]
mov ecx, dword [esp + 0x48]
test ecx, ecx
jbe 0x487163
mov byte [eax], dl
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0x6b581726
jbe 0x485e82
cmp edx, 0x6e0df0d1
je 0x485e2f
cmp edx, 0x734d2a16
jne 0x4868b0
mov edx, dword [esp + 0x100]
lea ebx, [0x52c060]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
mov ebx, dword [edx + 4]
mov dword [esp + 0x28], ebx
mov edx, dword [edx]
mov dword [esp + 0xa8], edx
mov ebp, dword [esp + 0xfc]
mov ecx, dword [esp + 0x48]
mov esi, dword [esp + 0xf8]
xor edi, edi
jmp 0x487134
mov edx, dword [esp + 0x100]
lea ebx, [0x5283c0]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
movzx edx, byte [edx]
test dl, dl
je 0x485e63
mov ecx, dword [esp + 0x48]
test ecx, ecx
jbe 0x4870be
mov byte [eax], 1
jmp 0x485e72
mov ecx, dword [esp + 0x48]
test ecx, ecx
jbe 0x4870b7
mov byte [eax], 0
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0x663e425f
jne 0x485ec7
mov edx, dword [esp + 0x100]
lea ebx, [0x5317a0]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
movzx edx, byte [edx]
mov ecx, dword [esp + 0x48]
test ecx, ecx
jbe 0x4870b0
mov byte [eax], dl
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0x6b581726
jne 0x4868b0
mov ecx, dword [esp + 0x100]
lea edx, [0x528dc0]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0xf8]
mov ecx, dword [ecx + 0x14]
mov edx, dword [esp + 0x104]
mov edx, dword [edx]
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call ecx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0x1f1d91d4
ja 0x4860c0
cmp edx, 0x13ff06c5
jbe 0x485fff
cmp edx, 0x1e2f74f8
je 0x485f9e
cmp edx, 0x1f1d91d4
jne 0x4868b0
mov edx, dword [esp + 0x100]
lea ebx, [0x52cae0]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
mov ebx, dword [edx + 4]
mov dword [esp + 0x20], ebx
mov edx, dword [edx]
mov dword [esp + 0x9c], edx
mov ebp, dword [esp + 0xfc]
mov ecx, dword [esp + 0x48]
mov esi, dword [esp + 0xf8]
xor edi, edi
jmp 0x487081
mov ecx, dword [esp + 0x100]
lea edx, [0x52b280]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0xf8]
mov ecx, dword [ecx + 0x18]
mov edx, dword [esp + 0x104]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
mov ebp, dword [esp + 0xfc]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x48]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebp
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ebx
call ecx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0xc66cd3
jne 0x486061
mov ecx, dword [esp + 0x100]
lea edx, [0x52b240]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0xf8]
mov ecx, dword [ecx + 0x14]
mov edx, dword [esp + 0x104]
mov edx, dword [edx]
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call ecx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0x13ff06c5
jne 0x4868b0
mov edx, dword [esp + 0x100]
lea ebx, [0x530760]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
movzx edx, byte [edx]
test dl, dl
je 0x4860a1
mov ecx, dword [esp + 0x48]
test ecx, ecx
jbe 0x48700b
mov byte [eax], 1
jmp 0x4860b0
mov ecx, dword [esp + 0x48]
test ecx, ecx
jbe 0x487004
mov byte [eax], 0
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0x2069b53f
ja 0x48618b
cmp edx, 0x1ffee651
je 0x486125
cmp edx, 0x2069b53f
jne 0x4868b0
mov edx, dword [esp + 0x100]
lea ebx, [0x52cb20]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
mov ebx, dword [edx + 4]
mov dword [esp + 0x30], ebx
mov edx, dword [edx]
mov dword [esp + 0xb4], edx
mov ebp, dword [esp + 0xfc]
mov ecx, dword [esp + 0x48]
mov esi, dword [esp + 0xf8]
xor edi, edi
jmp 0x486fd0
mov ecx, dword [esp + 0x100]
lea edx, [0x528980]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0x104]
movss xmm0, dword [ecx]
movss dword [esp + 0x74], xmm0
mov ecx, dword [esp + 0xf8]
mov ecx, dword [ecx + 0x14]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call ecx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0x20e38ee7
jne 0x4861d8
mov edx, dword [esp + 0x100]
lea ebx, [0x52caa0]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
mov ebx, dword [edx + 4]
mov dword [esp + 0x3c], ebx
mov edx, dword [edx]
mov dword [esp + 0xa0], edx
mov ebp, dword [esp + 0xfc]
mov ecx, dword [esp + 0x48]
mov esi, dword [esp + 0xf8]
xor edi, edi
jmp 0x486f2e
cmp edx, 0x26b80717
jne 0x4868b0
mov ecx, dword [esp + 0x100]
lea edx, [0x528e00]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0xf8]
mov ecx, dword [ecx + 0x18]
mov edx, dword [esp + 0x104]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
mov ebp, dword [esp + 0xfc]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x48]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebp
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ebx
call ecx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0xa066c615
jbe 0x4865d5
cmp edx, 0xcc06c027
jbe 0x486433
cmp edx, 0xe781e5b1
ja 0x486303
cmp edx, 0xd04ae83d
je 0x4862a9
cmp edx, 0xe781e5b1
jne 0x4868b0
mov edx, dword [esp + 0x100]
lea ebx, [0x52bbe0]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
mov ebx, dword [edx + 4]
mov edx, dword [edx]
mov ecx, dword [esp + 0x48]
xor ebp, ebp
jmp 0x486e7e
mov ecx, dword [esp + 0x100]
lea edx, [0x531720]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0x104]
mov ecx, dword [ecx]
mov edx, dword [esp + 0xf8]
mov edx, dword [edx + 0x14]
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call edx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0xecd580ce
jne 0x486367
mov ecx, dword [esp + 0x100]
lea edx, [0x530ea0]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0x104]
movzx ecx, word [ecx]
mov edx, dword [esp + 0xf8]
mov edx, dword [edx + 0x10]
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov word [esp + 0x10], cx
call edx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0xee92f42e
jne 0x4863cb
mov ecx, dword [esp + 0x100]
lea edx, [0x52b200]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0xf8]
mov ecx, dword [ecx + 0x10]
mov edx, dword [esp + 0x104]
movzx edx, word [edx]
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov word [esp + 0x10], dx
call ecx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0xeff20ea0
jne 0x4868b0
mov ecx, dword [esp + 0x100]
lea edx, [0x5316e0]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0x104]
movzx ecx, word [ecx]
mov edx, dword [esp + 0xf8]
mov edx, dword [edx + 0x10]
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov word [esp + 0x10], cx
call edx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0xba56ad13
ja 0x48652a
cmp edx, 0xb0c23ed3
jne 0x4864ad
mov ecx, dword [esp + 0x100]
lea edx, [0x530960]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0x104]
movss xmm0, dword [ecx]
movss dword [esp + 0x6c], xmm0
mov ecx, dword [esp + 0xf8]
mov ecx, dword [ecx + 0x14]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call ecx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0xba56ad13
jne 0x4868b0
mov ecx, dword [esp + 0x100]
lea edx, [0x5289c0]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0x104]
movsd xmm0, qword [ecx]
movsd qword [esp + 0x7c], xmm0
mov ecx, dword [esp + 0xf8]
mov ecx, dword [ecx + 0x18]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x80]
mov ebp, dword [esp + 0xfc]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x48]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebp
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], edx
call ecx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0xbbad4102
jne 0x48658c
mov ecx, dword [esp + 0x100]
lea edx, [0x530ee0]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0x104]
mov ecx, dword [ecx]
mov edx, dword [esp + 0xf8]
mov edx, dword [edx + 0x14]
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call edx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0xcc06c027
jne 0x4868b0
mov edx, dword [esp + 0x100]
lea ebx, [0x530f60]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
movzx edx, byte [edx]
mov ecx, dword [esp + 0x48]
test ecx, ecx
jbe 0x486e76
mov byte [eax], dl
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0x88768e96
ja 0x486745
cmp edx, 0x8237d00c
ja 0x48668b
cmp edx, 0x7ad3bff0
jne 0x48663a
mov edx, dword [esp + 0x100]
lea ebx, [0x52bea0]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
mov ebx, dword [edx + 4]
mov dword [esp + 0x24], ebx
mov edx, dword [edx]
mov dword [esp + 0xac], edx
mov ecx, dword [esp + 0x48]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
xor edi, edi
jmp 0x486e45
cmp edx, 0x8237d00c
jne 0x4868b0
mov edx, dword [esp + 0x100]
lea ebx, [0x52c020]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
mov ebx, dword [edx + 4]
mov dword [esp + 0x34], ebx
mov edx, dword [edx]
mov dword [esp + 0xb8], edx
mov ebp, dword [esp + 0xfc]
mov ecx, dword [esp + 0x48]
mov esi, dword [esp + 0xf8]
xor edi, edi
jmp 0x486d9f
cmp edx, 0x86318d2e
je 0x4866e4
cmp edx, 0x88768e96
jne 0x4868b0
mov edx, dword [esp + 0x100]
lea ebx, [0x52c0a0]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
mov ebx, dword [edx + 4]
mov dword [esp + 0x38], ebx
mov edx, dword [edx]
mov dword [esp + 0xb0], edx
mov ebp, dword [esp + 0xfc]
mov ecx, dword [esp + 0x48]
mov esi, dword [esp + 0xf8]
xor edi, edi
jmp 0x486cfb
mov ecx, dword [esp + 0x100]
lea edx, [0x531760]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0x104]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov ebx, dword [esp + 0xf8]
mov ebx, dword [ebx + 0x18]
mov ebp, dword [esp + 0xfc]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x48]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebp
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
call ebx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0x9ad926a8
jbe 0x486806
cmp edx, 0x9c373330
jne 0x48679e
mov edx, dword [esp + 0x100]
lea ebx, [0x52bee0]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
mov ebx, dword [edx + 4]
mov dword [esp + 0x2c], ebx
mov edx, dword [edx]
mov dword [esp + 0xa4], edx
mov ecx, dword [esp + 0x48]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
xor edi, edi
jmp 0x486c57
cmp edx, 0xa066c615
jne 0x4868b0
mov ecx, dword [esp + 0x100]
lea edx, [0x528d80]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0xf8]
mov ecx, dword [ecx + 0x10]
mov edx, dword [esp + 0x104]
movzx edx, word [edx]
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x48]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebx
mov word [esp + 0x10], dx
call ecx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0x963f9bff
jne 0x48686f
mov ecx, dword [esp + 0x100]
lea edx, [0x530f20]
cmp ecx, edx
jne 0x4868b0
mov ecx, dword [esp + 0x104]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov ebx, dword [esp + 0xf8]
mov ebx, dword [ebx + 0x18]
mov ebp, dword [esp + 0xfc]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x48]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebp
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
call ebx
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
cmp edx, 0x9ad926a8
jne 0x4868b0
mov edx, dword [esp + 0x100]
lea ebx, [0x52b2c0]
cmp edx, ebx
jne 0x4868b0
mov edx, dword [esp + 0x104]
movzx edx, byte [edx]
mov ecx, dword [esp + 0x48]
test ecx, ecx
jbe 0x486bc6
mov byte [eax], dl
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
mov edx, dword [esp + 0x48]
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
mov edx, dword [esp + 0x48]
mov ecx, eax
mov eax, edx
jmp 0x486b87
mov ecx, dword [esp + 0x100]
test ecx, ecx
je 0x486969
nop
movzx edx, byte [0x663f58]
test dl, dl
je 0x486924
mov edx, dword [esp + 0x100]
mov dword [0x663f5c], edx
mov edx, dword [0x68ad40]
test edx, edx
jne 0x486910
mov eax, dword [esp + 0x104]
mov dword [0x663f60], eax
jmp 0x48692b
lea edi, [0x663f60]
mov eax, dword [esp + 0x104]
call fcn.0045c980
jmp 0x48692b
mov eax, dword [esp + 0x104]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], eax
mov edx, dword [esp + 0xcc]
test edx, edx
je 0x48695f
nop
movzx ebx, byte [edx + 0xf]
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x48695b
or ebx, 0x80
mov ebp, eax
jmp 0x486976
mov ebp, eax
xor ebx, ebx
xor edx, edx
xor eax, eax
jmp 0x486976
mov ebp, dword [esp + 0x104]
xor ebx, ebx
xor edx, edx
xor eax, eax
nop
mov esi, ebx
and ebx, 0x1f
cmp ebx, 0x16
jne 0x48699f
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00481fc0
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov esi, ebx
mov dword [esp + 0x98], eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x94], edx
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.004871b0
mov eax, dword [esp + 0xc]
test eax, eax
jge 0x486aa1
mov eax, dword [esp + 0x100]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x104]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xc4]
test eax, eax
je 0x4869fc
lea ecx, [0x58ba44]
jmp 0x486a00
xor ecx, ecx
xor eax, eax
mov ecx, dword [ecx + 0x80]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x554fe3]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x1b
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00449750
mov eax, dword [esp + 0x14]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x40], ecx
lea edx, [0x5353c0]
mov dword [esp], edx
call fcn.0040b290
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x40]
mov dword [edi + 4], eax
mov eax, dword [0x68ad40]
test eax, eax
jne 0x486a7a
mov eax, dword [esp + 0xbc]
mov dword [edi], eax
jmp 0x486a86
mov eax, dword [esp + 0xbc]
call fcn.0045c980
lea eax, [0x587864]
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], edi
add esp, 0xec
ret
mov dword [esp + 0x44], eax
lea ecx, [0x5317a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.00446320
mov eax, dword [esp + 0xc]
mov dword [esp + 0xc0], eax
lea edi, [esp + 0xd4]
xor eax, eax
call fcn.0045cbca
mov eax, dword [esp + 0xf8]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 0xdc], eax
mov ecx, dword [esp + 0x44]
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], ecx
lea edx, [esp + 0xd4]
mov dword [esp], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x98]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xc], edx
call fcn.004881e0
mov eax, dword [esp + 0xf0]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0xf4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xc0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], ecx
add esp, 0xec
ret
mov ebx, dword [esp + 0xf0]
mov ebx, dword [ebx + 0x10]
mov ebp, dword [esp + 0xf4]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], ecx
add esp, 0xec
ret
xor eax, eax
call fcn.0045ca00
movsd qword [esp + 0x8c], xmm0
mov edx, dword [esi + 0x18]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x90]
mov dword [esp], ebp
sub ecx, edi
mov dword [esp + 0x78], ecx
neg ecx
sar ecx, 0x1f
and edi, ecx
lea ecx, [edi + eax]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
call edx
mov eax, dword [esp + 0x4c]
lea edi, [eax + 1]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0xfc]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xa4]
mov eax, ecx
mov ecx, edx
mov edx, esi
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
cmp edi, ebx
jge 0x486c71
mov dword [esp + 0x4c], edi
movsd xmm0, qword [edx + edi*8]
shl edi, 3
cmp ecx, edi
jae 0x486bcd
jmp 0x486c81
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
mov eax, edi
call fcn.0045ca60
mov esi, dword [esi + 0x18]
mov dword [esp], ebp
sub ecx, edi
mov dword [esp + 0x78], ecx
neg ecx
sar ecx, 0x1f
and edi, ecx
lea ecx, [edi + eax]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ebx
call esi
mov eax, dword [esp + 0x60]
lea edi, [eax + 1]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xb0]
mov eax, edx
mov ecx, ebx
mov edx, esi
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
cmp edi, ebx
jge 0x486d18
mov dword [esp + 0x60], edi
lea edx, [edx + edi*8]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
shl edi, 3
cmp ecx, edi
jae 0x486c88
jmp 0x486d28
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
mov eax, edi
call fcn.0045ca60
mov ebx, dword [esi + 0x10]
mov dword [esp], ebp
sub ecx, edi
mov dword [esp + 0x78], ecx
neg ecx
sar ecx, 0x1f
and edi, ecx
lea ecx, [edi + eax]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov word [esp + 0x10], dx
call ebx
mov eax, dword [esp + 0x5c]
lea edi, [eax + 1]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0xb8]
mov eax, ebp
mov ecx, edx
mov edx, esi
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
cmp edi, ebx
jge 0x486db7
mov dword [esp + 0x5c], edi
movzx edx, word [edx + edi*2]
shl edi, 1
cmp ecx, edi
jae 0x486d2f
jmp 0x486dc7
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
mov eax, edi
call fcn.0045ca60
movss dword [esp + 0x70], xmm0
mov edx, dword [esi + 0x14]
mov ebx, dword [esp + 0x70]
mov dword [esp], ebp
sub ecx, edi
mov dword [esp + 0x78], ecx
neg ecx
sar ecx, 0x1f
and edi, ecx
lea ecx, [edi + eax]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
call edx
mov eax, dword [esp + 0x54]
lea edi, [eax + 1]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0xfc]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0xac]
mov eax, ebp
mov edx, esi
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
cmp edi, ebx
jge 0x486e5f
mov dword [esp + 0x54], edi
movss xmm0, dword [edx + edi*4]
shl edi, 2
cmp ecx, edi
jae 0x486dce
jmp 0x486e6f
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
mov eax, edi
call fcn.0045ca60
xor eax, eax
call fcn.0045ca00
inc ebp
cmp ebp, ebx
jge 0x486ea0
movzx esi, byte [edx + ebp]
xchg esi, eax
test al, al
xchg esi, eax
je 0x486e96
cmp ebp, ecx
jae 0x486eb7
mov byte [eax + ebp], 1
jmp 0x486e7d
cmp ebp, ecx
jae 0x486eb0
mov byte [eax + ebp], 0
jmp 0x486e7d
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
mov eax, ebp
call fcn.0045ca00
mov eax, ebp
call fcn.0045ca00
mov ebx, dword [esi + 0x10]
mov dword [esp], ebp
sub ecx, edi
mov dword [esp + 0x78], ecx
neg ecx
sar ecx, 0x1f
and edi, ecx
lea ecx, [edi + eax]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov word [esp + 0x10], dx
call ebx
mov eax, dword [esp + 0x64]
lea edi, [eax + 1]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0xa0]
mov eax, ebp
mov ecx, edx
mov edx, esi
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
cmp edi, ebx
jge 0x486f46
mov dword [esp + 0x64], edi
movzx edx, word [edx + edi*2]
shl edi, 1
cmp ecx, edi
jae 0x486ebe
jmp 0x486f56
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
mov eax, edi
call fcn.0045ca60
mov esi, dword [esi + 0x18]
mov dword [esp], ebp
sub ecx, edi
mov dword [esp + 0x78], ecx
neg ecx
sar ecx, 0x1f
and edi, ecx
lea ecx, [edi + eax]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ebx
call esi
mov eax, dword [esp + 0x68]
lea edi, [eax + 1]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xb4]
mov eax, edx
mov ecx, ebx
mov edx, esi
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
cmp edi, ebx
jge 0x486fed
mov dword [esp + 0x68], edi
lea edx, [edx + edi*8]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
shl edi, 3
cmp ecx, edi
jae 0x486f5d
jmp 0x486ffd
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
mov eax, edi
call fcn.0045ca60
xor eax, eax
call fcn.0045ca00
xor eax, eax
call fcn.0045ca00
mov ebx, dword [esi + 0x14]
mov dword [esp], ebp
sub ecx, edi
mov dword [esp + 0x78], ecx
neg ecx
sar ecx, 0x1f
and edi, ecx
lea ecx, [edi + eax]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call ebx
mov eax, dword [esp + 0x58]
lea edi, [eax + 1]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0x9c]
mov eax, ebp
mov ecx, edx
mov edx, esi
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
cmp edi, ebx
jge 0x487099
mov dword [esp + 0x58], edi
mov edx, dword [edx + edi*4]
shl edi, 2
cmp ecx, edi
jae 0x487012
jmp 0x4870a9
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
mov eax, edi
call fcn.0045ca60
xor eax, eax
call fcn.0045ca00
xor eax, eax
call fcn.0045ca00
xor eax, eax
call fcn.0045ca00
mov ebx, dword [esi + 0x14]
mov dword [esp], ebp
sub ecx, edi
mov dword [esp + 0x78], ecx
neg ecx
sar ecx, 0x1f
and edi, ecx
lea ecx, [edi + eax]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call ebx
mov eax, dword [esp + 0x50]
lea edi, [eax + 1]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0xf8]
mov ebp, dword [esp + 0xc0]
mov esi, dword [esp + 0xa8]
mov eax, ebp
mov ecx, edx
mov edx, esi
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0xfc]
mov esi, dword [esp + 0xf8]
cmp edi, ebx
jge 0x48714c
mov dword [esp + 0x50], edi
mov edx, dword [edx + edi*4]
shl edi, 2
cmp ecx, edi
jae 0x4870c5
jmp 0x48715c
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
mov eax, edi
call fcn.0045ca60
xor eax, eax
call fcn.0045ca00
xchg esi, ebx
mov byte [eax + ebp], bl
xchg esi, ebx
inc ebp
cmp ebp, ebx
jge 0x487180
movzx esi, byte [edx + ebp]
cmp ebp, ecx
jb 0x48716a
jmp 0x487190
mov edx, ecx
mov eax, edx
mov ecx, dword [esp + 0xc0]
jmp 0x486b87
mov eax, ebp
call fcn.0045ca00
nop
call fcn.0045b540
jmp fcn.00485bf0