Function at 0x486600
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x5b7348]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x487413
sub esp, 0x70
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x486632
test eax, 0x200
jne 0x486632
lea ecx, [0x506520]
mov edx, dword [esp + 0x74]
jmp 0x48665a
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
mov edx, dword [esp + 0x78]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00485360
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ecx, eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x54], edx
mov dword [esp + 0x30], ecx
mov ebx, dword [esp + 0x88]
test ebx, ebx
je 0x486684
test ebx, 0x200
jne 0x486684
lea ebp, [0x506520]
mov esi, dword [esp + 0x80]
jmp 0x4866c1
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00485360
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x88]
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x30]
cmp ecx, ebp
jne 0x4870c0
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.00404160
movzx eax, byte [esp + 0xc]
test al, al
je 0x4870c0
mov eax, dword [esp + 0x7c]
mov ecx, eax
and eax, 0x1f
nop
cmp eax, 0x11
ja 0x486beb
cmp eax, 0xc
ja 0x486a0d
cmp eax, 1
jne 0x486784
mov eax, dword [esp + 0x88]
mov ecx, eax
and eax, 0x1f
nop
nop
mov edx, dword [esp + 0x78]
movzx edx, byte [edx]
cmp eax, 1
je 0x486748
mov byte [esp + 0x23], dl
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004834a0
movzx edx, byte [esp + 0x23]
mov eax, dword [esp + 0x84]
cmp byte [eax], dl
je 0x486775
test dl, dl
je 0x486766
mov dword [esp + 0x8c], 1
add esp, 0x70
ret
mov dword [esp + 0x8c], 0xffffffff
add esp, 0x70
ret
mov dword [esp + 0x8c], 0
add esp, 0x70
ret
lea ecx, [eax - 2]
cmp ecx, 4
ja 0x4868d4
cmp eax, 3
ja 0x4867bb
cmp eax, 2
jne 0x4867a7
mov eax, dword [esp + 0x78]
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x4867fb
mov ecx, dword [esp + 0x78]
movsx eax, byte [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x4867fb
cmp eax, 4
jne 0x4867d4
mov ecx, dword [esp + 0x78]
movsx eax, word [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x4867fb
cmp eax, 5
jne 0x4867ec
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx]
mov ecx, eax
sar ecx, 0x1f
mov edx, eax
mov eax, ecx
mov ecx, edx
jmp 0x4867fb
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, eax
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0x88]
and edx, 0x1f
mov dword [esp + 0x40], edx
nop
cmp edx, 3
ja 0x486844
cmp edx, 2
jne 0x48682a
mov edx, dword [esp + 0x84]
mov edx, dword [edx]
mov ebx, edx
sar edx, 0x1f
mov ebp, ebx
mov ebx, edx
mov edx, ebp
jmp 0x486884
cmp edx, 3
jne 0x4873d8
mov ebx, dword [esp + 0x84]
movsx edx, byte [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x486884
cmp edx, 4
jne 0x48685a
mov ebx, dword [esp + 0x84]
movsx edx, word [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x486884
cmp edx, 5
jne 0x48686f
mov ebx, dword [esp + 0x84]
mov edx, dword [ebx]
mov ebx, edx
sar ebx, 0x1f
jmp 0x486884
cmp edx, 6
jne 0x4873d8
mov ebx, dword [esp + 0x84]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
cmp eax, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setl bl
xchg esi, ebx
cmp ecx, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
je 0x4868ae
mov eax, 0xffffffff
jmp 0x4868c9
cmp ecx, edx
seta cl
cmp eax, ebx
setg al
and ecx, ebp
or eax, ecx
test al, al
je 0x4868c7
mov eax, 1
jmp 0x4868c9
xor eax, eax
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
cmp eax, 7
jb 0x4870cf
cmp eax, 9
ja 0x48690c
cmp eax, 7
jne 0x4868f1
mov eax, dword [esp + 0x78]
mov eax, dword [eax]
xor ecx, ecx
jmp 0x486933
cmp eax, 8
jne 0x486901
mov ecx, dword [esp + 0x78]
movzx eax, byte [ecx]
xor ecx, ecx
jmp 0x486933
mov ecx, dword [esp + 0x78]
movzx eax, word [ecx]
xor ecx, ecx
jmp 0x486933
cmp eax, 0xa
jne 0x48691b
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx]
xor ecx, ecx
jmp 0x486933
cmp eax, 0xb
jne 0x48692b
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x486933
mov edx, dword [esp + 0x78]
mov eax, dword [edx]
xor ecx, ecx
mov edx, dword [esp + 0x88]
and edx, 0x1f
mov dword [esp + 0x40], edx
nop
cmp edx, 9
ja 0x486983
cmp edx, 7
jne 0x486959
mov edx, dword [esp + 0x84]
mov edx, dword [edx]
xor ebx, ebx
jmp 0x4869bd
cmp edx, 8
jne 0x48696c
mov ebx, dword [esp + 0x84]
movzx edx, byte [ebx]
xor ebx, ebx
jmp 0x4869bd
cmp edx, 9
jne 0x48739e
mov ebx, dword [esp + 0x84]
movzx edx, word [ebx]
xor ebx, ebx
jmp 0x4869bd
cmp edx, 0xa
jne 0x486995
mov ebx, dword [esp + 0x84]
mov edx, dword [ebx]
xor ebx, ebx
jmp 0x4869bd
cmp edx, 0xb
jne 0x4869a8
mov ebx, dword [esp + 0x84]
mov edx, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x4869bd
cmp edx, 0xc
jne 0x48739e
mov ebp, dword [esp + 0x84]
mov edx, dword [ebp]
xor ebx, ebx
cmp ecx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setb bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebp
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
je 0x4869e7
mov eax, 0xffffffff
jmp 0x486a02
cmp ecx, ebx
seta cl
cmp eax, edx
seta al
and eax, ebp
or ecx, eax
test cl, cl
je 0x486a00
mov eax, 1
jmp 0x486a02
xor eax, eax
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
cmp eax, 0xe
ja 0x486ab9
cmp eax, 0xd
jne 0x486a29
mov eax, dword [esp + 0x78]
movss xmm0, dword [eax]
cvtss2sd xmm0, xmm0
jmp 0x486a31
mov eax, dword [esp + 0x78]
movsd xmm0, qword [eax]
mov eax, dword [esp + 0x88]
and eax, 0x1f
nop
cmp eax, 0xd
jne 0x486a52
mov eax, dword [esp + 0x84]
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x486a66
cmp eax, 0xe
jne 0x487360
mov eax, dword [esp + 0x84]
movsd xmm1, qword [eax]
nop
nop
ucomisd xmm0, xmm0
jne 0x486a70
jnp 0x486a83
ucomisd xmm1, xmm1
jne 0x486a78
jnp 0x486a7c
xor eax, eax
jmp 0x486aae
mov eax, 0xffffffff
jmp 0x486aae
ucomisd xmm1, xmm1
jne 0x486a8b
jnp 0x486a92
mov eax, 1
jmp 0x486aae
ucomisd xmm1, xmm0
jbe 0x486a9f
mov eax, 0xffffffff
jmp 0x486aae
ucomisd xmm0, xmm1
jbe 0x486aac
mov eax, 1
jmp 0x486aae
xor eax, eax
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
lea edx, [eax - 0xf]
cmp edx, 1
ja 0x486bdb
cmp eax, 0xf
jne 0x486ae1
mov eax, dword [esp + 0x78]
movss xmm0, dword [eax]
movss xmm1, dword [eax + 4]
cvtss2sd xmm0, xmm0
cvtss2sd xmm1, xmm1
jmp 0x486aee
mov eax, dword [esp + 0x78]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
mov eax, dword [esp + 0x88]
and eax, 0x1f
nop
cmp eax, 0xf
jne 0x486b18
mov eax, dword [esp + 0x84]
movss xmm2, dword [eax]
movss xmm3, dword [eax + 4]
cvtss2sd xmm2, xmm2
cvtss2sd xmm3, xmm3
jmp 0x486b31
cmp eax, 0x10
jne 0x487322
mov eax, dword [esp + 0x84]
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
nop
nop
ucomisd xmm0, xmm0
jne 0x486b3b
jnp 0x486b4e
ucomisd xmm2, xmm2
jne 0x486b43
jnp 0x486b47
xor eax, eax
jmp 0x486b79
mov eax, 0xffffffff
jmp 0x486b79
ucomisd xmm2, xmm2
jne 0x486b56
jnp 0x486b5d
mov eax, 1
jmp 0x486b79
ucomisd xmm2, xmm0
jbe 0x486b6a
mov eax, 0xffffffff
jmp 0x486b79
ucomisd xmm0, xmm2
jbe 0x486b77
mov eax, 1
jmp 0x486b79
xor eax, eax
test eax, eax
jne 0x486bd0
nop
nop
ucomisd xmm1, xmm1
jne 0x486b87
jnp 0x486b9a
ucomisd xmm3, xmm3
jne 0x486b8f
jnp 0x486b93
xor eax, eax
jmp 0x486bc5
mov eax, 0xffffffff
jmp 0x486bc5
ucomisd xmm3, xmm3
jne 0x486ba2
jnp 0x486ba9
mov eax, 1
jmp 0x486bc5
ucomisd xmm3, xmm1
jbe 0x486bb6
mov eax, 0xffffffff
jmp 0x486bc5
ucomisd xmm1, xmm3
jbe 0x486bc3
mov eax, 1
jmp 0x486bc5
xor eax, eax
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
cmp eax, 0x11
jne 0x4870cf
xor eax, eax
jmp 0x487239
cmp eax, 0x16
ja 0x486f28
cmp eax, 0x12
je 0x486e65
cmp eax, 0x14
je 0x486c10
cmp eax, 0x16
je 0x487052
jmp 0x4870cf
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov edx, dword [esp + 0x78]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x84]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x88]
mov dword [esp + 0x14], esi
call fcn.00487420
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x486e56
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 8], edx
call fcn.00484420
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x486c8d
test eax, 0x200
jne 0x486c8d
lea eax, [0x506520]
jmp 0x486ca9
mov edx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00485360
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x486cb0
mov eax, dword [eax + 4]
test eax, eax
je 0x486ce6
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ecx
mov eax, dword [esp + 0x60]
test eax, eax
je 0x486cde
movzx ecx, byte [eax + 0xf]
mov edx, ecx
and ecx, 0x1f
test dl, 0x20
jne 0x486cd8
or ecx, 0x80
mov edx, dword [esp + 0x64]
jmp 0x486cec
xor ecx, ecx
xor eax, eax
xor edx, edx
jmp 0x486cec
xor ecx, ecx
xor eax, eax
xor edx, edx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x48], edx
mov dword [esp + 0x44], eax
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebp, dword [esp + 0x84]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x88]
mov dword [esp + 8], esi
call fcn.00484420
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x486d38
test eax, 0x200
jne 0x486d38
lea eax, [0x506520]
jmp 0x486d54
mov edx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00485360
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x486d5b
mov eax, dword [eax + 4]
test eax, eax
je 0x486d91
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ecx
mov eax, dword [esp + 0x58]
test eax, eax
je 0x486d89
movzx ecx, byte [eax + 0xf]
mov edx, ecx
and ecx, 0x1f
test dl, 0x20
jne 0x486d83
or ecx, 0x80
mov edx, dword [esp + 0x5c]
jmp 0x486d97
xor ecx, ecx
xor eax, eax
xor edx, edx
jmp 0x486d97
xor ecx, ecx
xor eax, eax
xor edx, edx
mov ebx, dword [esp + 0x44]
mov dword [esp], ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.00486600
mov eax, dword [esp + 0x18]
test eax, eax
je 0x486dd2
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
call fcn.00484420
mov eax, dword [esp + 0xc]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 8], ebx
call fcn.00484420
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 8], eax
call fcn.00486600
mov eax, dword [esp + 0x18]
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
mov eax, dword [esp + 0x18]
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov edx, dword [esp + 0x78]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x84]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x88]
mov dword [esp + 0x14], esi
call fcn.00487420
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x486f19
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
call fcn.00485020
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 8], ecx
call fcn.00485020
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jbe 0x486f03
mov eax, 0xffffffff
jmp 0x486f0e
jae 0x486f0c
mov eax, 1
jmp 0x486f0e
xor eax, eax
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
mov eax, dword [esp + 0x18]
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
cmp eax, 0x18
jne 0x487041
mov eax, dword [esp + 0x88]
mov ecx, eax
and eax, 0x1f
mov edx, dword [esp + 0x78]
mov ebx, dword [edx]
mov dword [esp + 0x50], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x2c], edx
cmp eax, 0x18
jne 0x486f61
mov eax, dword [esp + 0x84]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x486f8f
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00485280
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x50]
mov dword [esp + 0x28], eax
mov dword [esp + 0x4c], ecx
nop
mov dword [esp], ebx
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.00402b90
movzx eax, byte [esp + 0xc]
xor eax, 1
mov byte [esp + 0x22], al
nop
mov ecx, dword [esp + 0x4c]
mov dword [esp], ecx
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x28]
mov dword [esp + 8], edx
call fcn.00402b90
movzx eax, byte [esp + 0xc]
xor eax, 1
movzx ecx, byte [esp + 0x22]
test cl, cl
je 0x486fed
test al, al
je 0x486fe6
xor eax, eax
jmp 0x487036
mov eax, 0xffffffff
jmp 0x487036
test al, al
je 0x486ff8
mov eax, 1
jmp 0x487036
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
call fcn.00402aa0
mov eax, dword [esp + 0x10]
test eax, eax
jge 0x48702b
mov eax, 0xffffffff
jmp 0x487036
jle 0x487034
mov eax, 1
jmp 0x487036
xor eax, eax
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
cmp eax, 0x19
jne 0x48704d
xor eax, eax
jmp 0x487145
cmp eax, 0x1a
jne 0x4870cf
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00485020
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 8], ecx
call fcn.00485020
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jbe 0x4870aa
mov eax, 0xffffffff
jmp 0x4870b5
jae 0x4870b3
mov eax, 1
jmp 0x4870b5
xor eax, eax
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
mov dword [esp + 0x8c], 0xffffffff
add esp, 0x70
ret
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x94]
mov ecx, dword [esp + 0x54]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x4e0b4d]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x15
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044f1a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004647b0
mov eax, dword [esp + 8]
lea ecx, [0x4c96e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00468330
mov edx, dword [esp + 0x38]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov ebx, dword [esp + 0x78]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00484f70
mov eax, dword [esp + 0x38]
cmp dword [esp + 0xc], eax
jle 0x48721f
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
mov edx, dword [esp + 0x78]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004845d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebp, dword [esp + 0x84]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x88]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x38]
mov dword [esp + 0xc], edi
call fcn.004845d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x6c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x40]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00486600
mov eax, dword [esp + 0x18]
test eax, eax
je 0x48713a
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
mov dword [esp + 0x8c], 0
add esp, 0x70
ret
mov edx, dword [esp + 0x34]
lea eax, [edx + 1]
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov ebx, dword [esp + 0x78]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00484900
mov eax, dword [esp + 0x34]
cmp dword [esp + 0xc], eax
jle 0x487313
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
mov edx, dword [esp + 0x78]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.004846c0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
mov ebp, dword [esp + 0x84]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x88]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x34]
mov dword [esp + 0xc], edi
call fcn.004846c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x6c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x40]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.00486600
mov eax, dword [esp + 0x18]
test eax, eax
je 0x48722e
mov dword [esp + 0x8c], eax
add esp, 0x70
ret
mov dword [esp + 0x8c], 0
add esp, 0x70
ret
mov dword [esp + 0x40], eax
lea eax, [0x4ce340]
mov dword [esp], eax
call fcn.0040b850
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x4e0af9]
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
lea ecx, [0x4cb560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00468330
mov dword [esp + 0x40], eax
lea eax, [0x4ce340]
mov dword [esp], eax
call fcn.0040b850
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x4e006e]
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
lea ecx, [0x4cb560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00468330
lea eax, [0x4ce340]
mov dword [esp], eax
call fcn.0040b850
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x4dfc35]
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
lea ecx, [0x4cb560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00468330
lea eax, [0x4ce340]
mov dword [esp], eax
call fcn.0040b850
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x4df86c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
lea ecx, [0x4cb560]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00468330
nop
call fcn.0046d4e0
jmp fcn.00486600