Function at 0x4861d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x486792
sub esp, 0x6c
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x84]
cmp eax, ecx
je 0x4861fc
xor edx, edx
jmp 0x486229
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x80]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00402580
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x84]
mov edx, eax
mov eax, dword [esp + 0x7c]
test dl, dl
jne 0x486238
mov edx, dword [esp + 0x88]
test edx, edx
jne 0x486252
mov eax, dword [esp + 0x70]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x90], eax
add esp, 0x6c
ret
mov ecx, dword [esp + 0x70]
mov dword [esp], ecx
mov edx, dword [esp + 0x74]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00484b20
mov eax, dword [esp + 0x10]
test eax, eax
je 0x486389
mov ebx, dword [esp + 0x88]
test ebx, ebx
jl 0x48628f
cmp ebx, eax
jg 0x48628f
mov eax, ebx
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
nop
lea ebx, [esp + 0x5c]
mov dword [esp + 0x5c], ebx
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x7c]
mov edi, ebp
sub ebp, esi
imul ebp, eax
mov ecx, dword [esp + 0x74]
add ebp, ecx
test ebp, ebp
jl 0x486779
mov dword [esp + 0x40], eax
mov edx, edi
mov edi, dword [esp + 0x64]
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x3c], ebx
sub ebx, edi
cmp ebx, ebp
jge 0x486374
mov dword [esp + 0x30], edi
nop
lea eax, [0x494c60]
mov dword [esp], eax
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x3c]
lea ecx, [ebp + ecx*2]
mov dword [esp + 0x34], ecx
mov dword [esp + 8], ecx
call fcn.00443910
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x30]
cmp edx, ebx
jl 0x486331
mov edx, ebx
cmp ecx, eax
je 0x486351
mov dword [esp + 0x58], eax
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004589a0
mov eax, dword [esp + 0x58]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x64], ebx
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x68], ebx
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0x7c]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x70]
xor edi, edi
xor edi, edi
mov dword [esp + 0x20], edi
jmp 0x486410
mov eax, dword [esp + 0x70]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x90], eax
add esp, 0x6c
ret
mov dword [esp + 0x38], ebp
mov dword [esp + 0x54], esi
add eax, esi
mov dword [esp], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004589a0
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x2c]
lea edi, [eax + 1]
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x7c]
add eax, esi
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x70]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x78]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x40]
cmp edi, eax
jge 0x48663c
mov dword [esp + 0x2c], edi
test esi, esi
jne 0x48648a
test edi, edi
jle 0x486478
mov ebx, dword [esp + 0x20]
cmp ecx, ebx
jb 0x486772
sub ecx, ebx
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, ebx
add ecx, ebp
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.0045d640
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x40]
jmp 0x4864e4
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x44]
jmp 0x4864e4
mov edi, dword [esp + 0x20]
cmp ecx, edi
jb 0x48676b
sub ecx, edi
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, edi
add ecx, ebp
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
call fcn.00486990
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x40]
mov ebx, dword [esp + 0x28]
cmp ecx, ebx
jb 0x486762
mov esi, dword [esp + 0x20]
cmp esi, ebx
ja 0x486759
sub ebx, esi
mov dword [esp + 0x24], ebx
neg ebx
sar ebx, 0x1f
and esi, ebx
lea ebx, [ebp + esi]
nop
mov esi, dword [esp + 0x5c]
test esi, esi
je 0x48652c
lea ebp, [esp + 0x5c]
cmp esi, ebp
jne 0x486741
mov ebp, dword [esp + 0x70]
lea esi, [esp + 0x5c]
jmp 0x486534
lea esi, [esp + 0x5c]
mov dword [esp + 0x5c], esi
mov ebp, dword [esp + 0x64]
mov ecx, dword [esp + 0x24]
lea eax, [ebp + ecx]
mov dword [esp + 0x3c], eax
mov edi, dword [esp + 0x68]
mov edx, dword [esp + 0x60]
cmp edi, eax
jae 0x48658a
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x38], ebp
lea ecx, [0x494c60]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.004439d0
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x38], edi
mov dword [esp + 0x54], edx
lea eax, [edx + ebp]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.004589a0
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x60], eax
nop
nop
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x4865d4
lea ecx, [esp + 0x5c]
cmp eax, ecx
je 0x4865e0
jmp 0x486729
lea eax, [esp + 0x5c]
mov dword [esp + 0x5c], eax
lea ecx, [esp + 0x5c]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x84]
lea ebx, [edx + eax]
mov dword [esp + 0x3c], ebx
mov ebp, dword [esp + 0x68]
mov esi, dword [esp + 0x60]
cmp ebp, ebx
jae 0x4863a3
mov dword [esp + 0x38], eax
lea ecx, [0x494c60]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004439d0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x84]
jmp 0x4863a3
mov eax, dword [esp + 0x20]
cmp ecx, eax
jb 0x486724
sub ecx, eax
mov edx, ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
add eax, ebp
nop
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x48666b
lea ebx, [esp + 0x5c]
cmp ecx, ebx
je 0x486673
jmp 0x48670c
lea ecx, [esp + 0x5c]
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x64]
lea ebx, [ecx + edx]
mov dword [esp + 0x40], ebx
mov ebp, dword [esp + 0x68]
mov esi, dword [esp + 0x60]
cmp ebp, ebx
jae 0x4866c8
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x50], eax
lea eax, [0x494c60]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004439d0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x54], esi
add ecx, esi
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004589a0
mov eax, dword [esp + 0x40]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], eax
add esp, 0x6c
ret
lea eax, [0x494aa0]
mov dword [esp], eax
lea eax, [0x4bdecc]
mov dword [esp + 4], eax
call fcn.0042fe70
call fcn.00458150
lea eax, [0x494aa0]
mov dword [esp], eax
lea eax, [0x4bdecc]
mov dword [esp + 4], eax
call fcn.0042fe70
lea eax, [0x494aa0]
mov dword [esp], eax
lea eax, [0x4bdecc]
mov dword [esp + 4], eax
call fcn.0042fe70
mov eax, esi
mov ecx, ebx
call fcn.00458150
mov edx, ecx
mov ecx, ebx
call fcn.00458110
mov eax, edi
call fcn.00458150
mov eax, ebx
call fcn.00458150
lea eax, [0x494aa0]
mov dword [esp], eax
lea eax, [0x4bdf90]
mov dword [esp + 4], eax
call fcn.0042fe70
nop
call fcn.00456c30
jmp fcn.004861d0