Function at 0x4858c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4f2987
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x37c
mov eax, dword [0x53ffd0]
xor eax, dword [esp + 0x388]
push ebx
push ebp
push esi
mov dword [esp + 0x384], eax
push edi
mov ebp, ecx
lea eax, [esp + 0x39c]
push eax
mov dword [esp + 0x398], 0
call fcn.00481cd0
lea ecx, [esp + 0x60]
call fcn.004d5783
push str..son
lea ecx, [esp + 0x3a0]
push ecx
lea edx, [esp + 0x28]
push edx
mov byte [esp + 0x3a0], 1
call fcn.00410a70
add esp, 0xc
mov eax, dword [eax]
push 0
push 0x5021
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x3a0], 2
call fcn.004d5799
mov ebx, eax
mov eax, dword [esp + 0x20]
neg ebx
sbb bl, bl
add eax, 0xfffffff0
or edi, 0xffffffff
inc bl
mov byte [esp + 0x394], 1
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x485982
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test bl, bl
je 0x4859b7
lea ecx, [esp + 0x60]
mov byte [esp + 0x394], 0
call fcn.004d5b25
mov eax, dword [esp + 0x39c]
add eax, 0xfffffff0
mov dword [esp + 0x394], edi
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edi
dec edi
test edi, edi
jmp 0x485ef0
push 0x2f
push 0x5c
lea ecx, [esp + 0x3a4]
mov dword [ebp + 0xe0], edi
mov dword [ebp + 0xdc], edi
call fcn.0040f780
mov esi, dword [esp + 0x39c]
push 0x2f
push esi
call fcn.004b77bd
add esp, 8
test eax, eax
jne 0x4859ed
mov eax, edi
jmp 0x4859f1
sub eax, esi
sar eax, 1
inc eax
push eax
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x3a4]
call fcn.00406f90
lea edx, [esp + 0x5c]
push edx
lea eax, [esp + 0x184]
push eax
push 0x104
lea ecx, [esp + 0x18c]
push esi
mov byte [esp + 0x3a4], 3
mov dword [esp + 0x6c], ecx
call dword [sym.imp.KERNEL32.DLL_GetFullPathNameW]
test eax, eax
jne 0x485a83
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x394], 1
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x485a59
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x60]
mov byte [esp + 0x394], 0
call fcn.004d5b25
lea eax, [esi - 0x10]
mov dword [esp + 0x394], edi
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edi
dec edi
test edi, edi
jmp 0x485ef0
lea eax, [esp + 0x180]
push eax
lea ecx, [esp + 0xb0]
call fcn.00403260
mov ecx, dword [esp + 0x5c]
lea edx, [esp + 0x180]
sub ecx, edx
sar ecx, 1
push ecx
lea ecx, [esp + 0x40]
push ecx
mov ecx, eax
mov byte [esp + 0x39c], 4
call fcn.00406da0
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
mov byte [esp + 0x394], 6
lea edx, [eax + 0xc]
mov ecx, edi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x485ae3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 0x50c138
lea ecx, [esp + 0x40]
call fcn.00410a10
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax - 0xc]
test ecx, ecx
jne 0x485b26
add eax, 0xfffffff0
mov byte [esp + 0x394], 3
lea ecx, [eax + 0xc]
mov edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x485a34
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
jmp 0x485a34
call fcn.004d4318
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x10], eax
mov byte [esp + 0x394], 7
call fcn.004d4318
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x44], eax
push str.st_format_t2_n
lea ecx, [esp + 0x14]
mov byte [esp + 0x398], 8
call fcn.00415410
push str.Display_Start_t_s_n
lea ecx, [esp + 0x14]
call fcn.00415410
push str.TV_Type_t_t_s_n
lea ecx, [esp + 0x14]
call fcn.00415410
push str.Tape_Type_tNON_DROP_n
lea ecx, [esp + 0x14]
call fcn.00415410
push str.Pixel_Area_t_0__d__n
lea ecx, [esp + 0x14]
call fcn.00415410
push str.Directory_t_s_n
lea ecx, [esp + 0x14]
call fcn.00415410
push str.Subtitle_t_s_n
lea ecx, [esp + 0x14]
call fcn.00415410
push str.Display_Area_t_0_2_719__d__n
lea ecx, [esp + 0x14]
call fcn.00415410
push str.Contrast_t_15_15_15_0__n
lea ecx, [esp + 0x14]
call fcn.00415410
push 0x5036f0
lea ecx, [esp + 0x14]
call fcn.00415410
push str.SP_NUMBER_tSTART_tEND_tFILE_NAME_n
lea ecx, [esp + 0x14]
call fcn.00415410
mov eax, dword [ebp + 0x1c]
cmp eax, 0x1e0
mov esi, str.NTSC
je 0x485c0a
mov esi, 0x50bee4
mov cl, byte [ebp + 0x58]
test cl, cl
mov ecx, str.non_forced
je 0x485c1b
mov ecx, str.forced
xor edx, edx
cmp eax, 0x1e0
setne dl
add eax, 0xfffffffd
dec edx
and edx, 0xffffffa1
add edx, 0x23e
push edx
mov edx, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x44]
push edx
push eax
mov eax, dword [esp + 0x20]
push esi
push ecx
push eax
lea ecx, [esp + 0x60]
push ecx
call fcn.00407a50
mov edx, dword [esp + 0x64]
add esp, 0x20
push edx
lea ecx, [esp + 0x64]
call fcn.004d5949
lea ecx, [esp + 0x60]
call fcn.004d5ac0
mov eax, dword [ebp + 0x1c]
lea edx, [eax - 2]
xor ebx, ebx
imul edx, edx, 0x168
add eax, 0xfffffffe
mov dword [esp + 0x160], eax
mov eax, 4
mov word [esp + 0x166], ax
mov dword [esp + 0x17c], eax
mov al, byte [ebp + 0x59]
lea ecx, [edx + 0x76]
mov dword [esp + 0xea], ecx
mov byte [esp + 0x2f], al
xor eax, eax
mov ecx, 0xc
lea edi, [esp + 0x108]
lea esi, [ebp + 0xa0]
mov byte [esp + 0xf8], 0xff
mov byte [esp + 0xf9], bl
mov byte [esp + 0xfa], bl
mov byte [esp + 0xfb], bl
mov byte [esp + 0xfc], bl
mov byte [esp + 0xfd], bl
mov byte [esp + 0xfe], 0xff
mov byte [esp + 0xff], bl
mov byte [esp + 0x100], bl
mov byte [esp + 0x101], bl
mov byte [esp + 0x102], bl
mov byte [esp + 0x103], bl
mov byte [esp + 0x104], 0xff
mov byte [esp + 0x105], 0xff
mov byte [esp + 0x106], 0xff
mov byte [esp + 0x107], bl
rep stosd dword es:[edi], eax
mov ecx, esi
mov eax, dword [ecx]
mov dword [esp + 0xb0], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0xb4], eax
mov eax, dword [ecx + 8]
mov word [esp + 0xe8], 0x4d42
mov word [esp + 0xee], bx
mov word [esp + 0xf0], bx
mov dword [esp + 0xf2], 0x76
mov dword [esp + 0x158], 0x28
mov dword [esp + 0x15c], 0x2d0
mov word [esp + 0x164], 1
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], edx
mov dword [esp + 0x170], ebx
mov dword [esp + 0x174], ebx
mov dword [esp + 0x178], 0x10
mov byte [ebp + 0x59], 1
mov dword [esp + 0xc4], esi
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
mov ecx, dword [esp + 0xf8]
mov eax, esi
mov dword [eax], ecx
mov ecx, dword [esp + 0xfc]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x100]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x104]
mov dword [eax + 0xc], ecx
mov dword [esp + 0x30], ebx
push edx
lea ecx, [esp + 0x34]
mov byte [esp + 0x398], 9
call fcn.0044be40
test al, al
jne 0x485f01
mov edx, dword [esp + 0x30]
push edx
call fcn.004d2f9a
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
add esp, 4
mov byte [esp + 0x394], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x485e4b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x394], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x485e71
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov byte [esp + 0x394], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x485e97
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x394], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x485ebd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x60]
mov byte [esp + 0x394], 0
call fcn.004d5b25
mov eax, dword [esp + 0x39c]
add eax, 0xfffffff0
mov dword [esp + 0x394], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x485efa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
xor al, al
jmp 0x48695f
xor eax, eax
mov byte [esp + eax + 0x138], al
inc eax
cmp eax, 0x10
jl 0x485f03
lea ecx, [esp + 0x148]
call fcn.004d6a42
push str..spf
lea eax, [esp + 0x3a0]
push eax
lea ecx, [esp + 0x28]
push ecx
mov byte [esp + 0x3a0], 0xa
call fcn.00410a70
add esp, 0xc
mov eax, dword [eax]
push ebx
push 0x9001
push eax
lea ecx, [esp + 0x154]
mov byte [esp + 0x3a0], 0xb
call fcn.004d6c93
mov edi, eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0x394], 0xa
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x485f83
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
cmp edi, ebx
je 0x485fd3
lea edi, [ebp + 0x61]
mov dword [esp + 0x34], 0x10
movzx ecx, byte [edi + 1]
xor eax, eax
mov ah, byte [edi - 1]
push 4
lea edx, [esp + 0x24]
push edx
mov al, byte [edi]
shl eax, 8
or eax, ecx
lea ecx, [esp + 0x150]
mov dword [esp + 0x28], eax
call fcn.004d678f
mov eax, dword [esp + 0x34]
add edi, 4
dec eax
mov dword [esp + 0x34], eax
jne 0x485f92
lea ecx, [esp + 0x148]
call fcn.004d69e0
mov eax, 1
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov eax, 0xf
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov eax, dword [ebp + 0x13c]
shl eax, 5
mov ecx, dword [eax + ebp + 0x154]
cmp ecx, ebx
lea eax, [eax + ebp + 0x14c]
mov dword [esp + 0x90], ebx
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x20], ebx
jle 0x486839
mov dword [esp + 0x58], ebx
jmp 0x486040
mov ecx, dword [esp + 0x38]
push 0xffffffffffffffff
push ecx
mov ecx, ebp
call fcn.004808c0
test al, al
je 0x48680f
xor edx, edx
cmp edx, 4
je 0x48606f
test byte [edx + ebp + 0x108], 0xf0
je 0x48606f
inc edx
cmp edx, 5
jl 0x486058
jmp 0x4860a3
mov ecx, dword [ebp + 0x1c]
mov edi, dword [esp + 0x30]
and edx, 3
mov eax, edx
shl eax, 4
or eax, edx
mov bl, al
sub ecx, 2
imul ecx, ecx, 0x168
mov bh, bl
mov edx, ecx
shr ecx, 2
mov eax, ebx
shl eax, 0x10
mov ax, bx
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebp + 0xfc]
inc eax
cmp eax, 2
mov ecx, eax
jg 0x4860b6
mov ecx, 2
mov eax, dword [ebp + 0x104]
dec eax
cmp ecx, eax
mov dword [esp + 0x18], ecx
jge 0x486191
lea esp, [esp]
mov edx, dword [ebp + 0x1c]
sub edx, ecx
dec edx
js 0x486191
mov edi, dword [ebp + 0xf8]
mov esi, dword [ebp + 0xfc]
mov eax, dword [ebp + 0x100]
sub eax, edi
mov edx, ecx
sub edx, esi
imul eax, edx
mov edx, dword [ebp + 0x10c]
lea esi, [edx + eax*4 + 4]
mov eax, dword [ebp + 0x100]
mov edx, edi
inc edx
dec eax
cmp edx, eax
jge 0x48617d
nop
mov eax, dword [esi]
and eax, 0xffffff
cmp eax, 0xff
jne 0x486122
xor bl, bl
jmp 0x486135
cmp eax, 0xff0000
jne 0x48612d
mov bl, 1
jmp 0x486135
test eax, eax
setne bl
add bl, 2
mov eax, dword [ebp + 0x1c]
mov edi, dword [esp + 0x30]
sub eax, ecx
dec eax
imul eax, eax, 0x168
add edi, eax
mov ecx, edx
sar ecx, 1
add ecx, edi
xor eax, eax
test dl, 1
mov al, byte [ecx]
movzx edi, bl
je 0x486160
and eax, 0xf0
jmp 0x486166
and eax, 0xf
shl edi, 4
or eax, edi
mov byte [ecx], al
mov ecx, dword [ebp + 0x100]
inc edx
add esi, 4
dec ecx
cmp edx, ecx
mov ecx, dword [esp + 0x18]
jl 0x486110
mov edx, dword [ebp + 0x104]
inc ecx
dec edx
cmp ecx, edx
mov dword [esp + 0x18], ecx
jl 0x4860d0
call fcn.004d4318
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x39c]
inc eax
push eax
push ecx
lea edx, [esp + 0x20]
push str._s__04d.bmp
push edx
mov byte [esp + 0x3a4], 0xc
call fcn.00407a50
mov esi, dword [esp + 0x28]
push 0x2f
push esi
call fcn.004b77bd
add esp, 0x18
test eax, eax
jne 0x4861e1
or eax, 0xffffffff
jmp 0x4861e5
sub eax, esi
sar eax, 1
inc eax
push eax
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x20]
call fcn.00406f90
mov eax, dword [eax]
mov edi, dword [esp + 0x1c]
add edi, 0xfffffff0
lea esi, [eax - 0x10]
cmp esi, edi
mov byte [esp + 0x394], 0xd
mov dword [esp + 0x4c], edi
je 0x4862aa
mov ecx, dword [edi + 0xc]
test ecx, ecx
jge 0x48622f
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x24]
call fcn.00403180
jmp 0x4862aa
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 0x10]
mov edx, dword [esi + 0xc]
test edx, edx
lea ecx, [esi + 0xc]
jl 0x486251
cmp eax, dword [esi]
jne 0x486251
mov ebx, esi
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x48628c
mov ecx, dword [esi + 4]
mov edx, dword [eax]
push 2
push ecx
mov ecx, eax
call dword [edx]
mov ebx, eax
test ebx, ebx
je 0x48698d
mov edx, dword [esi + 4]
mov dword [ebx + 4], edx
mov eax, dword [esi + 4]
inc eax
lea ecx, [eax + eax]
mov eax, ecx
shr ecx, 2
add esi, 0x10
lea edi, [ebx + 0x10]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x4c]
or ecx, 0xffffffff
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4862a3
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
add ebx, 0x10
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
mov byte [esp + 0x394], 0xc
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4862d3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
xor ecx, ecx
mov cl, byte [ebp + 0x10a]
xor eax, eax
mov al, byte [ebp + 0x109]
lea edi, [esp + 0xc8]
lea esi, [esp + 0x74]
and ecx, 0xf
movzx edx, byte [esp + ecx + 0x138]
xor ecx, ecx
mov cl, byte [ebp + 0x108]
and eax, 0xf
movzx eax, byte [esp + eax + 0x138]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], edx
and ecx, 0xf
movzx ecx, byte [esp + ecx + 0x138]
mov dword [esp + 0xd0], ecx
xor ecx, ecx
mov cl, byte [ebp + 0x10b]
and ecx, 0xf
movzx ecx, byte [esp + ecx + 0x138]
mov dword [esp + 0xd4], ecx
mov ecx, 4
xor ebx, ebx
repe cmpsd dword [esi], dword es:[edi]
je 0x48639f
mov esi, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd0]
push esi
push ecx
push edx
push eax
mov dword [esp + 0x88], edx
lea edx, [esp + 0x20]
push str.Color_t___d__d__d__d__n
push edx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x94], ecx
mov dword [esp + 0x98], esi
call fcn.00407a50
mov eax, dword [esp + 0x28]
add esp, 0x18
push eax
lea ecx, [esp + 0x64]
call fcn.004d5949
movzx ecx, byte [ebp + 0x108]
movzx eax, byte [ebp + 0x109]
movzx edx, byte [ebp + 0x10a]
shr ecx, 4
mov dword [esp + 0xe0], ecx
movzx ecx, byte [ebp + 0x10b]
shr ecx, 4
shr eax, 4
shr edx, 4
mov dword [esp + 0xe4], ecx
mov ecx, 4
lea edi, [esp + 0xd8]
lea esi, [esp + 0x84]
xor ebx, ebx
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], edx
repe cmpsd dword [esi], dword es:[edi]
je 0x48644a
mov esi, dword [esp + 0xe4]
mov ecx, dword [esp + 0xe0]
push esi
push ecx
push edx
push eax
mov dword [esp + 0x9c], ecx
lea ecx, [esp + 0x20]
push str.Contrast___d__d__d__d__n
push ecx
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa8], esi
call fcn.00407a50
mov edx, dword [esp + 0x28]
add esp, 0x18
push edx
lea ecx, [esp + 0x64]
call fcn.004d5949
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x58]
mov eax, dword [ecx + edx + 8]
lea ebx, [ecx + edx]
cdq
mov ecx, 0x3e8
idiv ecx
mov ecx, 0x3c
mov esi, dword [ebp + 0x1c]
mov dword [esp + 0x40], edx
cdq
idiv ecx
mov dword [esp + 0x54], edx
cdq
idiv ecx
cmp esi, 0x1e0
mov dword [esp + 0x50], edx
mov dword [esp + 0x4c], eax
jne 0x486492
fld qword [0x50be40]
jmp 0x486498
fld qword [0x50be38]
fild dword [esp + 0x40]
fmul st(1)
fmul qword [0x507ad0]
call fcn.004b76b8
fstp st(0)
mov dword [esp + 0x40], eax
mov eax, dword [ebx + 0x10]
cdq
mov ecx, 0x3e8
idiv ecx
mov ecx, 0x3c
mov dword [esp + 0x14], edx
cdq
idiv ecx
mov edi, edx
cdq
idiv ecx
cmp esi, 0x1e0
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], edx
jne 0x4864e3
fld qword [0x50be40]
jmp 0x4864e9
fld qword [0x50be38]
fild dword [esp + 0x14]
fmul st(1)
fmul qword [0x507ad0]
call fcn.004b76b8
fstp st(0)
mov edx, dword [esp + 0x24]
mov dword [esp + 0x14], eax
cmp dword [esp + 0x4c], edx
jne 0x486564
mov eax, dword [esp + 0x28]
cmp dword [esp + 0x50], eax
jne 0x486564
cmp dword [esp + 0x54], edi
jne 0x486564
mov ecx, dword [esp + 0x14]
cmp dword [esp + 0x40], ecx
jne 0x486564
xor edx, edx
inc ecx
cmp esi, 0x1e0
setne dl
mov dword [esp + 0x14], ecx
dec edx
and edx, 5
add edx, 0x19
cmp ecx, edx
jne 0x486564
xor ecx, ecx
inc edi
cmp edi, 0x3c
mov dword [esp + 0x14], ecx
jne 0x486564
xor edi, edi
inc eax
cmp eax, 0x3c
mov dword [esp + 0x28], eax
jne 0x486564
mov eax, dword [esp + 0x24]
inc eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x34]
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x38]
dec eax
cmp ecx, eax
jge 0x486633
mov eax, dword [ebx + 0x38]
cdq
mov ecx, 0x3e8
idiv ecx
mov ecx, 0x3c
mov dword [esp + 0x94], edx
cdq
idiv ecx
mov dword [esp + 0x48], edx
cdq
idiv ecx
cmp esi, 0x1e0
mov dword [esp + 0x98], edx
mov ebx, eax
jne 0x4865b2
fld qword [0x50be40]
jmp 0x4865b8
fld qword [0x50be38]
fild dword [esp + 0x94]
fmul st(1)
fmul qword [0x507ad0]
call fcn.004b76b8
fstp st(0)
cmp ebx, dword [esp + 0x24]
jne 0x486633
mov edx, dword [esp + 0x28]
cmp dword [esp + 0x98], edx
jne 0x486633
cmp dword [esp + 0x48], edi
jne 0x486633
mov ecx, dword [esp + 0x14]
cmp eax, ecx
jne 0x486633
dec ecx
cmp ecx, 0xffffffff
mov dword [esp + 0x14], ecx
jne 0x486633
xor eax, eax
cmp esi, 0x1e0
setne al
dec eax
and eax, 5
add eax, 0x18
dec edi
cmp edi, ecx
mov dword [esp + 0x14], eax
jne 0x486633
dec edx
cmp edx, ecx
mov edi, 0x3b
mov dword [esp + 0x28], edx
jne 0x486633
mov eax, dword [esp + 0x24]
test eax, eax
mov dword [esp + 0x28], edi
jle 0x486633
dec eax
mov dword [esp + 0x24], eax
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x24]
cmp edx, ecx
jne 0x48667a
mov eax, dword [esp + 0x50]
cmp eax, dword [esp + 0x28]
jne 0x48667a
cmp dword [esp + 0x54], edi
jne 0x48667a
mov eax, dword [esp + 0x40]
cmp eax, dword [esp + 0x14]
jne 0x48667a
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x394], 0xa
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x486805
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
push esi
mov esi, dword [esp + 0x18]
push esi
mov esi, dword [esp + 0x30]
push edi
push esi
push ecx
mov ecx, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x6c]
push ecx
push edx
inc eax
push eax
lea edx, [esp + 0x38]
push str._04d_t_02d:_02d:_02d:_02d_t_02d:_02d:_02d:_02d_t_s_n
push edx
mov dword [esp + 0x50], eax
call fcn.00407a50
mov eax, dword [esp + 0x40]
add esp, 0x30
push eax
lea ecx, [esp + 0x64]
call fcn.004d5949
lea ecx, [esp + 0x9c]
call fcn.004d6a42
mov ebx, dword [esp + 0x18]
push 0
push 0x9001
push ebx
lea ecx, [esp + 0xa8]
mov byte [esp + 0x3a0], 0xe
call fcn.004d6c93
test eax, eax
je 0x4867d9
push 0xe
lea ecx, [esp + 0xec]
push ecx
lea ecx, [esp + 0xa4]
call fcn.004d678f
push 0x28
lea edx, [esp + 0x15c]
push edx
lea ecx, [esp + 0xa4]
call fcn.004d678f
push 0x40
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0xa4]
call fcn.004d678f
mov ecx, dword [ebp + 0x1c]
mov edx, dword [esp + 0x30]
sub ecx, 2
imul ecx, ecx, 0x168
push ecx
push edx
lea ecx, [esp + 0xa4]
call fcn.004d678f
lea ecx, [esp + 0x9c]
call fcn.004d69e0
push ecx
mov ecx, dword [ebx - 0x10]
mov eax, dword [ecx]
lea esi, [ebx - 0x10]
mov dword [esp + 0x4c], esp
mov dword [esp + 0x4c], esp
call dword [eax + 0x10]
mov ecx, dword [esi + 0xc]
test ecx, ecx
lea edx, [esi + 0xc]
jl 0x486794
cmp eax, dword [esi]
jne 0x486794
mov eax, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4867c8
mov ecx, dword [esi + 4]
mov edx, dword [eax]
push 2
push ecx
mov ecx, eax
call dword [edx]
test eax, eax
je 0x48698d
mov edx, dword [esi + 4]
mov dword [eax + 4], edx
mov ecx, dword [esi + 4]
inc ecx
add ecx, ecx
mov edx, ecx
shr ecx, 2
add esi, 0x10
lea edi, [eax + 0x10]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x4c]
add eax, 0x10
mov dword [ecx], eax
call fcn.00481630
add esp, 4
lea ecx, [esp + 0x9c]
mov byte [esp + 0x394], 0xc
call fcn.004d6a81
lea eax, [ebx - 0x10]
mov byte [esp + 0x394], 0xa
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x48680f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0x58]
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx + 8]
inc eax
add esi, 0x30
cmp eax, edx
mov dword [esp + 0x38], eax
mov dword [esp + 0x58], esi
jl 0x486040
mov esi, dword [esp + 0xc4]
mov dl, byte [esp + 0x2f]
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
mov dword [esi], eax
mov eax, dword [esp + 0xbc]
mov byte [ebp + 0x59], dl
mov edx, dword [esp + 0xb8]
mov dword [esi + 4], ecx
mov dword [esi + 8], edx
lea ecx, [esp + 0x148]
mov dword [esi + 0xc], eax
mov byte [esp + 0x394], 9
call fcn.004d6a81
mov ecx, dword [esp + 0x30]
push ecx
call fcn.004d2f9a
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
add esp, 4
mov byte [esp + 0x394], 7
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4868ae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x394], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4868d4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov byte [esp + 0x394], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4868fa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x394], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x486920
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x60]
mov byte [esp + 0x394], 0
call fcn.004d5b25
mov eax, dword [esp + 0x39c]
add eax, 0xfffffff0
mov dword [esp + 0x394], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48695d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov al, 1
mov ecx, dword [esp + 0x38c]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x388]
xor ecx, dword [esp + 0x398]
call fcn.004b8f56
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x388
ret 4
call fcn.00402690
int3