Function at 0x486810
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4bfd78
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x68
push ebx
push ebp
mov ebp, ecx
push esi
push edi
lea ecx, [esp + 0x64]
call fcn.004960d0
xor ebx, ebx
mov edi, 0x4c218c
or esi, 0xffffffff
mov dword [esp + 0x80], ebx
mov dword [esp + 0x38], edi
mov word [esp + 0x3c], si
mov word [esp + 0x3e], bx
mov eax, dword [esp + 0x88]
mov byte [esp + 0x80], 1
and eax, 0xff
dec eax
je 0x4869a4
dec eax
je 0x486a42
push 0xd0
push 0xf4
mov ecx, ebp
mov byte [esp + 0x24], 0xf4
mov byte [esp + 0x28], 0xd0
call fcn.004874c0
cmp ax, bx
jge 0x4868b3
push 1
lea ecx, [esp + 0x6c]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x84], esi
call fcn.00403270
jmp 0x4874a7
movsx eax, ax
cmp eax, ebx
je 0x486a42
cmp eax, 0xaa
je 0x486914
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 4
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x4dc9a0
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
mov dword [esp + 0x38], edi
jmp 0x487482
push 0xf5
push 0xf4
mov ecx, ebp
mov byte [esp + 0x24], 0xf4
mov byte [esp + 0x28], 0xf5
call fcn.004874c0
cmp ax, bx
jge 0x48694f
push 1
lea ecx, [esp + 0x6c]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x84], esi
call fcn.00403270
jmp 0x4874a7
je 0x486a42
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 3
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x4dc9a0
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
mov dword [esp + 0x38], edi
jmp 0x487482
push 0xf5
push 0xf4
mov ecx, ebp
mov byte [esp + 0x24], 0xf4
mov byte [esp + 0x28], 0xf5
call fcn.004874c0
cmp ax, bx
jge 0x4869df
push 1
lea ecx, [esp + 0x6c]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x84], esi
call fcn.00403270
jmp 0x4874a7
je 0x486a42
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 2
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x4dc9a0
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
push 1
lea ecx, [esp + 0x6c]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x84], esi
call fcn.00403270
jmp 0x4874a7
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4dc92c
call fcn.0048d140
mov ecx, dword [0x4e1f40]
call fcn.004994c0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4dc998
call fcn.0048d140
mov ecx, dword [0x4e1f40]
call fcn.004996e0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4dc990
call fcn.0048d140
mov ecx, dword [0x4e1f40]
call fcn.004996e0
mov ecx, dword [0x4e1f40]
lea eax, [esp + 0x38]
push eax
call fcn.00499820
mov esi, eax
cmp si, 0xffff
je 0x486b07
movsx eax, si
dec eax
jne 0x486afd
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x4dc990
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 5
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
push 0x4dc988
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
cmp si, bx
je 0x486b3a
jmp 0x486a42
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x38], edi
cmp eax, ebx
je 0x48742e
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x487425
cmp al, 0xff
je 0x487425
dec al
mov byte [ecx], al
mov ax, 1
jmp 0x4874aa
mov cl, byte [esp + 0x88]
sub esp, 0x10
mov edx, esp
mov edi, str.9999
xor eax, eax
mov dword [esp + 0x34], esp
mov byte [edx], cl
or ecx, 0xffffffff
mov dword [edx + 4], ebx
mov dword [edx + 8], ebx
mov dword [edx + 0xc], ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.9999
mov ecx, edx
call fcn.00413980
sub esp, 0x10
lea edx, [esp + 0x33]
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
push 0x4d76e8
mov byte [esp + 0xa8], 6
call fcn.004138c0
sub esp, 0x10
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
push 0x4d76e4
mov byte [esp + 0xb8], 7
call fcn.004138c0
sub esp, 0x10
lea edx, [esp + 0x55]
mov ecx, esp
mov dword [esp + 0x6c], esp
push edx
push 0x4e20c8
mov byte [esp + 0xc8], 8
call fcn.004138c0
push ecx
mov byte [esp + 0xc4], 9
mov ecx, esp
mov dword [esp + 0x74], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0xc8], 0xa
mov ecx, esp
mov dword [esp + 0x7c], esp
push 6
push 0x4dc978
call fcn.0048d140
lea eax, [esp + 0x98]
mov ecx, 0x4e1f40
push eax
mov byte [esp + 0xcc], 1
call fcn.00497280
mov edx, dword [0x4c21b8]
mov cx, word [eax]
push edx
add eax, 4
mov word [esp + 0x68], cx
push ebx
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x8c], 0xb
call fcn.00403070
mov eax, dword [esp + 0x58]
mov byte [esp + 0x80], 1
cmp eax, ebx
je 0x486c72
mov cl, byte [eax - 1]
dec eax
cmp cl, bl
je 0x486c69
cmp cl, 0xff
je 0x486c69
dec cl
mov byte [eax], cl
jmp 0x486c72
push eax
call fcn.004ac910
add esp, 4
lea ecx, [esp + 0x64]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
call fcn.00496320
cmp ax, 2
je 0x48747a
lea eax, [esp + 0x40]
lea ecx, [esp + 0x64]
push eax
call fcn.00496330
mov esi, dword [eax + 8]
mov eax, dword [esp + 0x44]
cmp eax, ebx
je 0x486cc7
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x486cbe
cmp al, 0xff
je 0x486cbe
dec al
mov byte [ecx], al
jmp 0x486cc7
push ecx
call fcn.004ac910
add esp, 4
cmp si, 4
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
push ebx
je 0x486d21
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0xc
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x4dc970
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
jmp 0x486b3a
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0xd
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x4dc968
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0x68]
call fcn.00496330
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x486d7c
mov eax, 0x4c2190
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x40]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x54]
and ecx, 3
cmp eax, ebx
rep movsb byte es:[edi], byte [esi]
je 0x486dc4
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x486dbb
cmp al, 0xff
je 0x486dbb
dec al
mov byte [ecx], al
jmp 0x486dc4
push ecx
call fcn.004ac910
add esp, 4
movsx cx, byte [esp + 0x40]
movsx dx, byte [esp + 0x41]
movsx ax, byte [esp + 0x42]
shl ecx, 4
add ecx, edx
mov esi, dword [esp + 0x1c]
shl ecx, 4
mov edi, dword [esp + 0x20]
lea eax, [ecx + eax + 0xccd]
movsx cx, byte [esp + 0x43]
shl eax, 4
add eax, ecx
mov cl, byte [esp + 0x88]
cmp cl, 2
mov dword [esp + 0x18], eax
jne 0x486e46
cmp ax, 0x4838
je 0x487009
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0xe
mov ecx, esp
mov dword [esp + 0x44], esp
push 6
push 0x4dc960
jmp 0x487463
push edi
push esi
mov ecx, ebp
call fcn.004874c0
mov ecx, dword [0x4e21dc]
xor edx, edx
mov dl, byte [esp + 0x19]
mov byte [esp + 0x12], dl
mov eax, dword [ecx]
lea edx, [esp + 0x16]
push edx
lea edx, [esp + 0x16]
push 1
push edx
call dword [eax + 0xc]
cmp ax, bx
jg 0x486ef2
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0xf
mov ecx, esp
mov dword [esp + 0x44], esp
push 6
push 0x4dc958
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x38], 0x4c218c
cmp eax, ebx
je 0x4873f1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4873e8
cmp al, 0xff
je 0x4873e8
dec al
mov byte [ecx], al
or ax, 0xffff
jmp 0x4874aa
test byte [esp + 0x16], 0xf0
je 0x486f2d
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0x10
mov ecx, esp
mov dword [esp + 0x44], esp
push 6
push 0x4dc960
jmp 0x487463
mov al, byte [esp + 0x18]
mov ecx, dword [0x4e21dc]
mov byte [esp + 0x12], al
lea eax, [esp + 0x16]
mov edx, dword [ecx]
push eax
lea eax, [esp + 0x16]
push 1
push eax
call dword [edx + 0xc]
cmp ax, bx
jg 0x486fce
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0x11
mov ecx, esp
mov dword [esp + 0x44], esp
push 6
push 0x4dc958
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x38], 0x4c218c
cmp eax, ebx
je 0x4873f1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4873e8
cmp al, 0xff
je 0x4873e8
dec al
mov byte [ecx], al
or ax, 0xffff
jmp 0x4874aa
test byte [esp + 0x16], 0xf0
je 0x487009
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0x12
mov ecx, esp
mov dword [esp + 0x44], esp
push 6
push 0x4dc960
jmp 0x487463
push 0x3e8
call fcn.00401f90
add esp, 4
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0x13
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x4dc968
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
cmp byte [esp + 0x88], bl
jne 0x4871a5
push ebx
push 0xf4
mov ecx, ebp
call fcn.004874c0
push edi
push esi
mov ecx, ebp
call fcn.004874c0
cmp ax, bx
jl 0x48747a
xor ecx, ecx
lea eax, [esp + 0x16]
mov cl, byte [esp + 0x19]
push eax
mov byte [esp + 0x16], cl
mov ecx, dword [0x4e21dc]
lea eax, [esp + 0x16]
push 1
mov edx, dword [ecx]
push eax
call dword [edx + 0xc]
cmp ax, bx
jle 0x487204
mov cl, byte [esp + 0x18]
lea eax, [esp + 0x16]
mov byte [esp + 0x12], cl
mov ecx, dword [0x4e21dc]
push eax
lea eax, [esp + 0x16]
mov edx, dword [ecx]
push 1
push eax
call dword [edx + 0xc]
cmp ax, bx
jle 0x487281
mov ecx, dword [0x4e21dc]
lea eax, [esp + 0x16]
push eax
mov byte [esp + 0x16], 0xf9
mov edx, dword [ecx]
lea eax, [esp + 0x16]
push 1
push eax
call dword [edx + 0xc]
cmp ax, bx
jle 0x4872fe
cmp byte [esp + 0x16], 0xff
je 0x4870d6
cmp byte [esp + 0x88], bl
jne 0x487130
mov ecx, dword [0x4e21dc]
lea eax, [esp + 0x16]
push eax
mov byte [esp + 0x16], 0xdc
mov edx, dword [ecx]
lea eax, [esp + 0x16]
push 1
push eax
call dword [edx + 0xc]
cmp ax, bx
jle 0x487377
push ebx
push 3
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0x19
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x4dc950
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
cmp ax, 2
je 0x4873fa
push ebx
push ebx
mov ecx, 0x4e1f08
call fcn.004914b0
mov cl, byte [0x4e21d8]
push ecx
mov ecx, ebp
call fcn.004875f0
test ax, ax
je 0x487434
jmp 0x487016
cmp byte [esp + 0x88], 2
jne 0x487072
push ebx
push 0xf5
mov ecx, ebp
call fcn.004874c0
cmp ax, bx
jl 0x48747a
jne 0x4871d0
jmp 0x4870d6
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0x14
mov ecx, esp
mov dword [esp + 0x44], esp
push 6
push 0x4dc9a0
jmp 0x487463
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0x15
mov ecx, esp
mov dword [esp + 0x44], esp
push 6
push 0x4dc958
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x38], 0x4c218c
cmp eax, ebx
je 0x4873f1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4873e8
cmp al, 0xff
je 0x4873e8
dec al
mov byte [ecx], al
or ax, 0xffff
jmp 0x4874aa
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0x16
mov ecx, esp
mov dword [esp + 0x44], esp
push 6
push 0x4dc958
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x38], 0x4c218c
cmp eax, ebx
je 0x4873f1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4873e8
cmp al, 0xff
je 0x4873e8
dec al
mov byte [ecx], al
or ax, 0xffff
jmp 0x4874aa
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0x17
mov ecx, esp
mov dword [esp + 0x44], esp
push 6
push 0x4dc958
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x38], 0x4c218c
cmp eax, ebx
je 0x4873f1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4873e8
cmp al, 0xff
je 0x4873e8
dec al
mov byte [ecx], al
or ax, 0xffff
jmp 0x4874aa
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0x18
mov ecx, esp
mov dword [esp + 0x44], esp
push 6
push 0x4dc958
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x38], 0x4c218c
cmp eax, ebx
je 0x4873f1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4873e8
cmp al, 0xff
je 0x4873e8
dec al
mov byte [ecx], al
or ax, 0xffff
jmp 0x4874aa
push ecx
call fcn.004ac910
add esp, 4
or ax, 0xffff
jmp 0x4874aa
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x38], 0x4c218c
cmp eax, ebx
je 0x48742e
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x487425
cmp al, 0xff
je 0x487425
dec al
mov byte [ecx], al
mov ax, 1
jmp 0x4874aa
push ecx
call fcn.004ac910
add esp, 4
mov ax, 1
jmp 0x4874aa
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4d7808
call fcn.0048d140
push ecx
mov byte [esp + 0x90], 0x1a
mov ecx, esp
mov dword [esp + 0x44], esp
push 6
push 0x4dc958
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x90], 1
call fcn.00496d10
mov dword [esp + 0x38], 0x4c218c
mov eax, dword [esp + 0x6c]
cmp eax, ebx
je 0x4874a7
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x48749e
cmp al, 0xff
je 0x48749e
dec al
mov byte [ecx], al
jmp 0x4874a7
push ecx
call fcn.004ac910
add esp, 4
xor ax, ax
mov ecx, dword [esp + 0x78]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x74
ret 4