Function at 0x486040
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x280
push ebp
push esi
mov esi, ecx
mov ecx, dword [esi + 4]
push edi
call fcn.004ab3f0
test eax, eax
mov dword [esp + 0xc], eax
jne 0x48606d
mov edx, dword [esi + 4]
mov eax, dword [edx + 0x20]
test eax, eax
je 0x486b6d
mov dword [esp + 0xc], eax
lea ebp, [eax + 0x2c]
mov eax, dword [ebp]
mov ecx, dword [eax + 0xd4]
mov edi, dword [ecx + 0x1c]
mov ecx, eax
mov eax, dword [ecx + 0x210]
test eax, eax
mov dword [esp + 0x28], ebp
mov byte [esp + 0x4c], 0
jne 0x486096
call fcn.004ba290
cmp eax, 9
jl 0x4860a0
mov byte [esp + 0x4c], 1
mov edi, dword [edi + 0x834]
push edi
mov dword [esp + 0x4c], edi
call dword [0x68a2e8]
fild dword [esp + 0x2a8]
mov ecx, dword [esi + 4]
fst dword [esp + 0x24]
fmul dword [esi + 0x4c]
fmul dword [0x68bf18]
fstp dword [esp + 0x18]
call fcn.004ae690
mov ecx, dword [eax + 8]
cmp ecx, 7
jne 0x4860fd
mov edx, dword [eax + 0x14]
mov eax, dword [edx + 0x18]
mov ecx, dword [eax + 0x68]
mov edx, dword [ecx + 0xd4]
push edx
call fcn.004849a0
mov eax, dword [eax + 0x28]
add esp, 4
cmp eax, 0x3e7
je 0x486103
jmp 0x4860ff
mov eax, ecx
test eax, eax
je 0x48612b
fld dword [esi + 0x50]
fcom dword [0x68f3bc]
fnstsw ax
test ah, 5
jp 0x486128
fcom dword [0x68f3b8]
fnstsw ax
test ah, 0x41
jne 0x486128
fstp st(0)
fld dword [0x68a9c0]
fstp dword [esi + 0x50]
mov edi, dword [esp + 0x294]
test edi, edi
je 0x4861de
lea ebx, [ebx]
mov al, byte [edi + 0x2e]
cmp al, 3
je 0x48615e
cmp al, 4
je 0x48615e
mov edi, dword [edi + 0x20]
test edi, edi
jne 0x486140
mov dword [esp + 0x294], edi
jmp 0x4861de
mov eax, dword [edi + 0x4c]
mov ecx, dword [eax + 4]
cmp ecx, dword [esi + 4]
mov dword [esp + 0x294], edi
je 0x4861de
mov edx, dword [edi + 0x4c]
mov eax, dword [esi + 0x50]
mov dword [edx + 0x3c], eax
mov ecx, dword [edi + 0x4c]
mov edx, dword [esi + 0x48]
mov dword [ecx + 0x40], edx
mov eax, dword [edi + 0x4c]
mov ecx, dword [esi + 0x4c]
mov dword [eax + 0x44], ecx
mov edx, dword [edi + 0x4c]
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov ecx, dword [esi + 4]
call fcn.004ae690
mov ecx, dword [eax + 8]
cmp ecx, 7
jne 0x4861cd
mov ecx, dword [eax + 0x14]
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x68]
mov ecx, dword [eax + 0xd4]
push ecx
call fcn.004849a0
mov eax, dword [eax + 0x28]
add esp, 4
cmp eax, 0x3e7
jne 0x4861cf
mov eax, 1
jmp 0x4861cf
mov eax, ecx
mov edx, dword [edi + 0x4c]
mov byte [edx + 0x59], al
mov eax, dword [edi + 0x4c]
mov cl, byte [esi + 0x2c]
mov byte [eax + 0x58], cl
push ebx
mov ebx, dword [esp + 0x294]
mov eax, dword [ebx + 0x30]
test eax, eax
jne 0x48631c
mov edx, dword [ebx + 0x14]
xor eax, eax
push edx
push eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov byte [esp + 0xa0], al
mov eax, dword [ebx + 0x10]
push eax
lea ecx, [esp + 0x84]
mov dword [esp + 0x8c], 0x7fffffff
call fcn.004b5f20
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
add eax, 2
mov dword [esp + 0x7c], eax
mov cl, byte [eax + ecx]
movzx edi, cl
push edi
lea edx, [esp + 0x194]
inc eax
push edx
lea ecx, [esp + 0x80]
mov dword [esp + 0x84], eax
call fcn.004b7ad0
cmp eax, edi
jge 0x4862aa
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0xd4]
push 1
call fcn.004ceb90
mov ecx, dword [esp + 0x4c]
push ecx
call dword [0x68a2e4]
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x280
ret 0x24
lea edx, [esp + 0x190]
push edx
lea ecx, [esp + 0x44]
mov byte [esp + edi + 0x194], 0
call fcn.00441f50
mov eax, dword [ebp]
push ebx
lea ecx, [esp + 0x44]
push ecx
mov ecx, dword [esi + 0x18]
push eax
call fcn.00484410
test eax, eax
mov dword [ebx + 0x30], eax
jne 0x48630f
mov edx, dword [esp + 0x40]
push edx
call fcn.006058d0
xor eax, eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x50]
add esp, 4
push eax
call dword [0x68a2e4]
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x280
ret 0x24
mov ecx, dword [esp + 0x40]
push ecx
call fcn.006058d0
add esp, 4
mov eax, dword [esp + 0x2a8]
movzx edx, byte [eax + 2]
movzx ecx, byte [eax]
mov dword [esp + 0x10], edx
movzx edx, byte [eax + 1]
fild dword [esp + 0x10]
mov dword [esp + 0x10], ecx
fmul dword [0x68f3b4]
fild dword [esp + 0x10]
mov dword [esp + 0x10], edx
fmul dword [0x68f3b0]
faddp st(1)
fild dword [esp + 0x10]
fmul dword [0x68f3ac]
faddp st(1)
fcomp dword [0x68f3a8]
fnstsw ax
test ah, 0x41
jne 0x486370
mov ebp, 1
jmp 0x486372
xor ebp, ebp
mov edi, dword [esp + 0x1c]
mov edx, dword [esi + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [ebx + 0x30]
push ebp
push edi
push edx
mov dword [esp + 0xc4], 0x41800000
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0x3f000000
mov dword [esp + 0xd0], 0xbf0f5c29
mov dword [esp + 0xd4], 0x3f800000
call fcn.004851e0
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x486412
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x486412
cmp ebp, 1
mov edx, dword [esi + 4]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, dword [ebx + 0x30]
jne 0x4863ee
push 0
jmp 0x4863f0
push 1
push edi
push edx
call fcn.004851e0
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x486412
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x486412
lea eax, [esp + 0xb0]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x298]
test ecx, ecx
mov dword [esp + 0x5c], 0x41800000
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0x3f000000
mov dword [esp + 0x68], 0xbf0f5c29
mov dword [esp + 0x6c], 0x3f800000
je 0x486460
mov ecx, dword [esp + 0x18]
push ecx
mov ecx, dword [esi + 4]
push eax
lea edx, [esp + 0x64]
push edx
push edi
call fcn.004ae690
mov ecx, eax
call fcn.00483fd0
mov eax, dword [esp + 0x2b0]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x54], ecx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x58]
push ecx
lea ecx, [esi + 0x30]
mov dword [esp + 0x60], edx
call fcn.004443f0
fld dword [esi + 0x50]
fmul qword [0x68f3a0]
fstp qword [esp + 0x54]
fld qword [esp + 0x54]
fistp dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
cdq
mov ecx, 0x5a
idiv ecx
test edx, edx
jne 0x4865ac
mov ecx, dword [esi + 4]
call fcn.004ae690
mov ecx, dword [eax + 8]
cmp ecx, 7
jne 0x4864e3
mov edx, dword [eax + 0x14]
mov eax, dword [edx + 0x18]
mov ecx, dword [eax + 0x68]
mov edx, dword [ecx + 0xd4]
push edx
call fcn.004849a0
mov eax, dword [eax + 0x28]
add esp, 4
cmp eax, 0x3e7
je 0x4864ea
jmp 0x4864e5
mov eax, ecx
cmp eax, 1
jne 0x486512
fld dword [esp + 0x20]
fmul dword [0x68f39c]
fadd dword [0x68a9cc]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fistp dword [esp + 0x10]
fild dword [esp + 0x10]
fmul dword [0x68f398]
jmp 0x486538
fld dword [esp + 0x20]
fmul dword [0x68a9cc]
fadd dword [0x68f394]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fistp dword [esp + 0x10]
fild dword [esp + 0x10]
fmul dword [0x68f310]
mov ecx, dword [esi + 4]
fstp dword [esp + 0x20]
call fcn.004ae690
mov ecx, dword [eax + 8]
cmp ecx, 7
jne 0x486584
mov eax, dword [eax + 0x14]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x68]
mov eax, dword [edx + 0xd4]
push eax
call fcn.004849a0
mov eax, dword [eax + 0x28]
add esp, 4
cmp eax, 0x3e7
jne 0x486586
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x1c], ecx
fld dword [esp + 0x1c]
fistp dword [esp + 0x10]
fild dword [esp + 0x10]
jmp 0x4865b0
mov eax, ecx
test eax, eax
jne 0x48656e
fld dword [esp + 0x24]
fmul dword [0x68a9cc]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fistp dword [esp + 0x10]
fild dword [esp + 0x10]
fmul dword [0x68f310]
jmp 0x4865b0
fld dword [esp + 0x24]
mov edx, dword [esp + 0x20]
fchs
fst dword [esp + 0x24]
mov dword [esp + 0xf4], edx
fstp dword [esp + 0xf8]
fld dword [esp + 0x28]
fmul dword [0x68f390]
fst dword [esp + 0x54]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fistp dword [esp + 0x28]
mov ecx, dword [esi + 0x4c]
fild dword [esp + 0x28]
mov eax, dword [esi + 0x48]
mov edx, dword [esp + 0x20]
fmul dword [0x68f310]
mov dword [esp + 0x108], ecx
mov ecx, dword [esi + 0x50]
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x24]
fstp dword [esp + 0xfc]
mov dword [esp + 0x10c], edx
mov edx, dword [esi + 0x2c]
mov dword [esp + 0x114], ecx
mov ecx, dword [esi + 4]
mov dword [esp + 0x100], 0x48
mov dword [esp + 0x110], eax
mov dword [esp + 0x118], edx
call fcn.004ae690
mov ecx, dword [eax + 8]
cmp ecx, 7
jne 0x486675
mov eax, dword [eax + 0x14]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x68]
mov eax, dword [edx + 0xd4]
push eax
call fcn.004849a0
mov eax, dword [eax + 0x28]
add esp, 4
cmp eax, 0x3e7
jne 0x486677
mov eax, 1
jmp 0x486677
mov eax, ecx
fld dword [esp + 0xfc]
mov ecx, dword [esp + 0x64]
fmul dword [esi + 0x4c]
mov edx, dword [esp + 0x68]
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x6c]
fcomp dword [0x68f2e4]
mov dword [esp + 0x120], ecx
mov ecx, dword [esp + 0x29c]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x124], edx
movzx edx, word [esp + 0x2a0]
mov dword [esp + 0x9c], ecx
mov ecx, dword [eax]
mov dword [esp + 0xa0], edx
mov ebp, dword [ecx + 0x258]
fnstsw ax
test ah, 1
jne 0x4866e4
mov ebp, 7
mov eax, dword [esi + 0x18]
mov edx, dword [eax + 0x38]
mov dword [esp + 0x48], edx
mov dword [esp + 0x40], ebp
mov ecx, dword [eax + 0x34]
mov dword [esp + 0x44], ecx
fld dword [eax + 0x38]
fmul dword [0x68dc18]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fistp dword [esp + 0x28]
mov edx, dword [esp + 0x28]
mov eax, dword [esi + 0x18]
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa8], ebp
fld dword [eax + 0x34]
fmul dword [0x68dc18]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fistp dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
mov edi, dword [esi + 0x18]
mov dword [esp + 0xac], ecx
mov eax, dword [edi + 8]
test eax, eax
jne 0x486797
mov ecx, dword [edi + 4]
mov edx, dword [edi + 0x1c]
lea eax, [esp + 0x78]
push eax
push ecx
mov dword [esp + 0x80], edx
mov dword [esp + 0x84], 0x1000000
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0x10
mov dword [esp + 0x90], 5
call fcn.00599e80
add esp, 8
mov dword [edi + 8], eax
mov edx, dword [esi + 0x18]
mov eax, dword [edx + 4]
mov edi, dword [edi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
lea edx, [esp + 0xa4]
push edx
push edi
push eax
call fcn.00599fc0
mov ebx, eax
mov eax, dword [esp + 0x24]
add esp, 0x14
test eax, eax
mov dword [esp + 0x28], ebx
jne 0x486a2d
cmp ebp, 7
mov edi, dword [esi + 0x18]
jne 0x486862
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x258]
mov dword [esp + 0xa8], edx
mov eax, dword [edi + 8]
test eax, eax
jne 0x4867f8
mov ecx, edi
call fcn.00483ac0
mov edx, dword [edi + 8]
lea eax, [esp + 0x10]
push eax
mov eax, dword [esi + 0x18]
push 1
lea ecx, [esp + 0xa4]
push ecx
mov ecx, dword [eax + 4]
push edx
push ecx
call fcn.00599fc0
mov ecx, dword [esp + 0x24]
add esp, 0x14
cmp ecx, 1
jne 0x486855
mov edi, dword [esi + 0x18]
mov eax, dword [edi + 8]
test eax, eax
jne 0x486834
mov ecx, edi
call fcn.00483ac0
mov eax, dword [edi + 8]
mov ecx, dword [esi + 0x18]
lea edx, [esp + 0x9c]
push edx
mov edx, dword [ecx + 4]
push eax
push edx
call fcn.0059a270
add esp, 0xc
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xa8], 7
jmp 0x4868b3
mov dword [esp + 0xa8], 7
mov eax, dword [edi + 8]
test eax, eax
jne 0x48687b
mov ecx, edi
call fcn.00483ac0
mov edi, dword [edi + 8]
mov eax, dword [esi + 0x18]
mov eax, dword [eax + 4]
lea ecx, [esp + 0x10]
push ecx
push 1
lea edx, [esp + 0xa4]
push edx
push edi
push eax
call fcn.00599fc0
mov ecx, dword [esp + 0x24]
add esp, 0x14
cmp ecx, 1
jne 0x4868ac
mov ebx, eax
mov dword [esp + 0x28], ebx
mov dword [esp + 0xa8], ebp
test ecx, ecx
jne 0x4869fd
mov eax, dword [esi + 0x18]
mov ecx, dword [esp + 0x294]
mov dx, word [esp + 0x2a0]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov dword [esp + 0x80], ecx
mov ecx, dword [eax + 0xd4]
push ecx
mov ebx, str.t__39
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], ebx
mov word [esp + 0x88], dx
mov dword [esp + 0x8c], 0
mov byte [esp + 0x90], 0
call fcn.00484bb0
test al, al
je 0x4869d8
mov edx, dword [esp + 0x2c]
mov eax, dword [edx]
mov ecx, dword [eax + 0xd4]
mov edi, dword [esp + 0x88]
mov edx, dword [esp + 0x294]
push ecx
mov ecx, dword [esi + 0x18]
push edi
push edx
call fcn.00485d60
mov eax, dword [esp + 0x50]
push eax
lea ecx, [esp + 0x130]
push ecx
lea edx, [esi + 0x54]
push edx
lea eax, [esp + 0x3c]
push eax
mov eax, dword [esi + 0x18]
lea ecx, [esp + 0x168]
push ecx
mov ecx, dword [eax + 4]
lea edx, [esp + 0x108]
push edx
push edi
push ecx
call 0x59b3d0
mov edx, dword [esi + 0x18]
mov eax, dword [edx + 4]
lea ecx, [esp + 0x60]
push ecx
push edi
push eax
call fcn.00598a90
mov edi, dword [esi + 0x18]
mov ebp, eax
mov eax, dword [edi + 8]
add esp, 0x2c
test eax, eax
jne 0x48699a
mov ecx, edi
call fcn.00483ac0
mov eax, dword [esp + 0x28]
mov ecx, dword [edi + 8]
push ebp
lea edx, [esp + 0xa0]
push edx
mov edx, dword [esi + 0x18]
push eax
mov eax, dword [edx + 4]
push ecx
push eax
call fcn.0059a0e0
mov eax, dword [0x72b988]
add esp, 0x14
inc eax
lea ecx, [esp + 0x78]
mov dword [0x72b988], eax
mov dword [esp + 0x78], ebx
call fcn.00483e50
jmp 0x486a6e
lea ecx, [esp + 0x78]
mov dword [esp + 0x78], ebx
call fcn.00483e50
mov ecx, dword [esp + 0x4c]
push ecx
call dword [0x68a2e4]
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x280
ret 0x24
mov edx, dword [esp + 0x50]
push edx
lea eax, [esp + 0x130]
push eax
lea ecx, [esi + 0x54]
push ecx
lea edx, [esp + 0x3c]
push edx
mov edx, dword [esi + 0x18]
lea eax, [esp + 0x168]
push eax
mov eax, dword [edx + 4]
lea ecx, [esp + 0x108]
push ecx
push ebx
push eax
jmp 0x486a5b
mov ecx, dword [esp + 0x50]
push ecx
lea edx, [esp + 0x130]
push edx
lea eax, [esi + 0x54]
push eax
lea ecx, [esp + 0x3c]
push ecx
mov ecx, dword [esi + 0x18]
lea edx, [esp + 0x168]
push edx
mov edx, dword [ecx + 4]
lea eax, [esp + 0x108]
push eax
push ebx
push edx
call fcn.0059a9b0
mov eax, dword [0x72b98c]
add esp, 0x20
inc eax
mov dword [0x72b98c], eax
mov al, byte [esp + 0x2b4]
test al, al
jne 0x486b61
mov eax, dword [esp + 0x3a]
mov ecx, dword [esp + 0x34]
add ecx, eax
neg ecx
mov word [esp + 0xd0], cx
mov edx, dword [esp + 0xd0]
add edx, eax
mov eax, dword [esp + 0x2a8]
xor ecx, ecx
mov ch, byte [eax + 3]
mov word [esp + 0xd2], dx
movzx edx, byte [eax + 1]
mov cl, byte [eax]
movzx eax, byte [eax + 2]
shl ecx, 8
or ecx, edx
mov dx, word [esp + 0x2a0]
shl ecx, 8
or ecx, eax
mov eax, dword [esp + 0x29c]
mov dword [esp + 0xd4], ecx
mov ecx, dword [esp + 0x294]
mov dword [esp + 0xdc], ecx
mov ecx, dword [esp + 0x20]
mov word [esp + 0xe0], dx
mov edx, dword [esp + 0x24]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], edx
mov dword [esp + 0x54], eax
fld dword [esp + 0x54]
fistp dword [esp + 0x1c]
mov cx, word [esp + 0x1c]
mov eax, dword [esp + 0x298]
mov word [esp + 0xf0], cx
xor ecx, ecx
cmp eax, ecx
mov dword [esp + 0xd8], ecx
mov word [esp + 0xcc], cx
mov word [esp + 0xce], cx
je 0x486b61
lea edx, [esp + 0x5c]
push edx
lea ecx, [esp + 0xd0]
push ecx
mov ecx, dword [eax + 0x4c]
call fcn.00479260
mov edx, dword [esp + 0x4c]
push edx
call dword [0x68a2e4]
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x280
ret 0x24