Function at 0x48f670
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x48fc32
sub esp, 0x6c
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x84]
cmp eax, ecx
je 0x48f69c
xor edx, edx
jmp 0x48f6c9
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x80]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00402580
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x84]
mov edx, eax
mov eax, dword [esp + 0x7c]
test dl, dl
jne 0x48f6d8
mov edx, dword [esp + 0x88]
test edx, edx
jne 0x48f6f2
mov eax, dword [esp + 0x70]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x90], eax
add esp, 0x6c
ret
mov ecx, dword [esp + 0x70]
mov dword [esp], ecx
mov edx, dword [esp + 0x74]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x78]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0048dfc0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x48f829
mov ebx, dword [esp + 0x88]
test ebx, ebx
jl 0x48f72f
cmp ebx, eax
jg 0x48f72f
mov eax, ebx
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
nop
lea ebx, [esp + 0x5c]
mov dword [esp + 0x5c], ebx
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x7c]
mov edi, ebp
sub ebp, esi
imul ebp, eax
mov ecx, dword [esp + 0x74]
add ebp, ecx
test ebp, ebp
jl 0x48fc19
mov dword [esp + 0x40], eax
mov edx, edi
mov edi, dword [esp + 0x64]
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x3c], ebx
sub ebx, edi
cmp ebx, ebp
jge 0x48f814
mov dword [esp + 0x30], edi
nop
lea eax, [0x4ce8c0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x3c]
lea ecx, [ebp + ecx*2]
mov dword [esp + 0x34], ecx
mov dword [esp + 8], ecx
call fcn.00445bf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x30]
cmp edx, ebx
jl 0x48f7d1
mov edx, ebx
cmp ecx, eax
je 0x48f7f1
mov dword [esp + 0x58], eax
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0045c880
mov eax, dword [esp + 0x58]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x64], ebx
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x68], ebx
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0x7c]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x70]
xor edi, edi
xor edi, edi
mov dword [esp + 0x20], edi
jmp 0x48f8b0
mov eax, dword [esp + 0x70]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x90], eax
add esp, 0x6c
ret
mov dword [esp + 0x38], ebp
mov dword [esp + 0x54], esi
add eax, esi
mov dword [esp], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0045c880
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x2c]
lea edi, [eax + 1]
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x7c]
add eax, esi
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x70]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x78]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x40]
cmp edi, eax
jge 0x48fadc
mov dword [esp + 0x2c], edi
test esi, esi
jne 0x48f92a
test edi, edi
jle 0x48f918
mov ebx, dword [esp + 0x20]
cmp ecx, ebx
jb 0x48fc12
sub ecx, ebx
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, ebx
add ecx, ebp
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.004635b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x40]
jmp 0x48f984
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x44]
jmp 0x48f984
mov edi, dword [esp + 0x20]
cmp ecx, edi
jb 0x48fc0b
sub ecx, edi
mov edx, ecx
neg ecx
sar ecx, 0x1f
and ecx, edi
add ecx, ebp
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
call fcn.0048fe30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x40]
mov ebx, dword [esp + 0x28]
cmp ecx, ebx
jb 0x48fc02
mov esi, dword [esp + 0x20]
cmp esi, ebx
ja 0x48fbf9
sub ebx, esi
mov dword [esp + 0x24], ebx
neg ebx
sar ebx, 0x1f
and esi, ebx
lea ebx, [ebp + esi]
nop
mov esi, dword [esp + 0x5c]
test esi, esi
je 0x48f9cc
lea ebp, [esp + 0x5c]
cmp esi, ebp
jne 0x48fbe1
mov ebp, dword [esp + 0x70]
lea esi, [esp + 0x5c]
jmp 0x48f9d4
lea esi, [esp + 0x5c]
mov dword [esp + 0x5c], esi
mov ebp, dword [esp + 0x64]
mov ecx, dword [esp + 0x24]
lea eax, [ebp + ecx]
mov dword [esp + 0x3c], eax
mov edi, dword [esp + 0x68]
mov edx, dword [esp + 0x60]
cmp edi, eax
jae 0x48fa2a
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x38], ebp
lea ecx, [0x4ce8c0]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.00445cb0
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x38], edi
mov dword [esp + 0x54], edx
lea eax, [edx + ebp]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0045c880
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x60], eax
nop
nop
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x48fa74
lea ecx, [esp + 0x5c]
cmp eax, ecx
je 0x48fa80
jmp 0x48fbc9
lea eax, [esp + 0x5c]
mov dword [esp + 0x5c], eax
lea ecx, [esp + 0x5c]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x84]
lea ebx, [edx + eax]
mov dword [esp + 0x3c], ebx
mov ebp, dword [esp + 0x68]
mov esi, dword [esp + 0x60]
cmp ebp, ebx
jae 0x48f843
mov dword [esp + 0x38], eax
lea ecx, [0x4ce8c0]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00445cb0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x84]
jmp 0x48f843
mov eax, dword [esp + 0x20]
cmp ecx, eax
jb 0x48fbc4
sub ecx, eax
mov edx, ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
add eax, ebp
nop
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x48fb0b
lea ebx, [esp + 0x5c]
cmp ecx, ebx
je 0x48fb13
jmp 0x48fbac
lea ecx, [esp + 0x5c]
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x64]
lea ebx, [ecx + edx]
mov dword [esp + 0x40], ebx
mov ebp, dword [esp + 0x68]
mov esi, dword [esp + 0x60]
cmp ebp, ebx
jae 0x48fb68
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x50], eax
lea eax, [0x4ce8c0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00445cb0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x54], esi
add ecx, esi
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0045c880
mov eax, dword [esp + 0x40]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], eax
add esp, 0x6c
ret
lea eax, [0x4ce700]
mov dword [esp], eax
lea eax, [0x506ac4]
mov dword [esp + 4], eax
call fcn.00432050
call fcn.0045c080
lea eax, [0x4ce700]
mov dword [esp], eax
lea eax, [0x506ac4]
mov dword [esp + 4], eax
call fcn.00432050
lea eax, [0x4ce700]
mov dword [esp], eax
lea eax, [0x506ac4]
mov dword [esp + 4], eax
call fcn.00432050
mov eax, esi
mov ecx, ebx
call fcn.0045c080
mov edx, ecx
mov ecx, ebx
call fcn.0045c040
mov eax, edi
call fcn.0045c080
mov eax, ebx
call fcn.0045c080
lea eax, [0x4ce700]
mov dword [esp], eax
lea eax, [0x506a2c]
mov dword [esp + 4], eax
call fcn.00432050
nop
call fcn.0045ab60
jmp fcn.0048f670