Function at 0x48ac50
Capabilities:
Packed with generic packer

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x64e9f0
push eax
mov dword fs:[0], esp
sub esp, 0x5c
cmp byte [esp + 0x70], 0
push ebx
push ebp
push esi
mov ebx, ecx
mov esi, edx
je 0x48aca9
mov ecx, 1
mov eax, edi
call fcn.00586cf0
push 0x60
mov edx, 0xff
push 0xff
mov ecx, edx
lea eax, [esp + 0x1c]
call fcn.005643f0
mov ecx, edi
call fcn.00586cc0
mov cl, 1
mov eax, edi
call fcn.00586d10
cmp esi, 3
jg 0x48acbe
imul esi, esi, 0x4a
add esi, 0x1a6
mov ebp, 0xce
jmp 0x48acc9
imul esi, esi, 0x4a
add esi, 0x4c
mov ebp, 0x136
cmp ebx, 0x15
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
jne 0x48ae0d
cmp byte [esp + 0x7c], 0
je 0x48acff
push 0x20
mov edx, 0xff
push 0xff
mov ecx, edx
lea eax, [esp + 0x1c]
call fcn.005643f0
mov ecx, edi
call fcn.00586cc0
mov ebx, dword [0x6a74fc]
lea eax, [ebp + 7]
push eax
lea ecx, [esi - 7]
push ecx
mov eax, edi
call fcn.00587150
cmp byte [esp + 0x7c], 0
je 0x48ad2b
xor ecx, ecx
mov eax, edi
call fcn.00586cf0
xor cl, cl
call fcn.00586d10
mov edx, dword [esp + 0x78]
mov eax, dword [edx + 0x150]
mov ecx, dword [eax + 0x82c]
mov ebx, dword [ecx + 0x214]
push 0x15
push str._STORE_UPGRADE_SLOTS_
lea ecx, [esp + 0x38]
add ebx, 7
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], 0
mov byte [esp + 0x3c], 0
call fcn.00404330
lea edx, [esp + 0x4c]
push ebx
push edx
mov ecx, str.SLOTS
lea edx, [esp + 0x38]
mov dword [esp + 0x78], 0
call fcn.00513720
add esp, 8
mov byte [esp + 0x70], 2
cmp dword [esp + 0x48], 0x10
jb 0x48ada1
mov eax, dword [esp + 0x34]
push eax
call fcn.0061c19a
add esp, 4
mov ecx, dword [0x6a74b0]
push 5
push ecx
mov dword [esp + 0x1c], esi
add ebp, 6
push edi
mov esi, 0x72289c
lea ebx, [esp + 0x20]
lea edx, [esp + 0x58]
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], 0x37
mov dword [esp + 0x2c], 0x46
call fcn.0051a040
add esp, 0xc
cmp dword [esp + 0x64], 0x10
jb 0x48b14c
mov edx, dword [esp + 0x50]
push edx
call fcn.0061c19a
add esp, 4
jmp 0x48b14c
cmp ebx, 9
je 0x7a3107
cmp ebx, 0x16
jne 0x48ae35
mov ebx, dword [0x6a7320]
add ebp, 7
push ebp
add esi, 1
push esi
mov eax, edi
call fcn.00587150
jmp 0x48b14c
cmp ebx, 0x18
jne 0x48ae54
mov ebx, dword [0x6a783c]
add ebp, 0xa
push ebp
add esi, 0xfffffffb
push esi
mov eax, edi
call fcn.00587150
jmp 0x48b14c
cmp ebx, 0x17
jne 0x48ae70
mov ebx, dword [0x6a79b0]
add ebp, 0x1c
push ebp
push esi
mov eax, edi
call fcn.00587150
jmp 0x48b14c
cmp ebx, 8
jne 0x48ae89
mov ebx, dword [0x6a7380]
push ebp
push esi
mov eax, edi
call fcn.00587150
jmp 0x48b14c
cmp ebx, 0x12
jne 0x48aea8
mov ebx, dword [0x6a75e8]
add ebp, 2
push ebp
add esi, 0xfffffff8
push esi
mov eax, edi
call fcn.00587150
jmp 0x48b14c
cmp ebx, 0x19
jne 0x48aec7
mov ebx, dword [0x6a7388]
add ebp, 2
push ebp
add esi, 0xfffffff8
push esi
mov eax, edi
call fcn.00587150
jmp 0x48b14c
cmp ebx, 0x1b
jne 0x48aee6
mov ebx, dword [0x6a725c]
add ebp, 2
push ebp
add esi, 0xfffffff8
push esi
mov eax, edi
call fcn.00587150
jmp 0x48b14c
cmp ebx, 0x1d
jne 0x48af05
mov ebx, dword [0x6a7434]
add ebp, 0xd
push ebp
add esi, 0xffffffff
push esi
mov eax, edi
call fcn.00587150
jmp 0x48b14c
jmp 0x7ac35f
xor cl, cl
mov eax, edi
call fcn.00586d10
xor ecx, ecx
call fcn.00586cf0
mov ecx, dword [esp + 0x68]
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x68
ret 8
mov ebx, dword [0x740080]
jmp 0x7a4ac2