Function at 0x48f610
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x48fc95
sub esp, 0x70
mov eax, dword [esp + 0x74]
test byte [eax], al
mov ecx, dword [eax + 0x2000c]
cmp ecx, 0x40000000
jg 0x48fc53
mov ecx, dword [esp + 0x88]
cmp ecx, 0x11
jl 0x48fbd9
lea edx, [ecx - 0xf]
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x84]
mov ebp, dword [ebx]
imul esi, ebp, 0x1e35a7bd
shr esi, 0x12
xor edi, edi
xor edi, edi
mov dword [esp + 0x30], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x68], edi
xor edi, edi
jmp 0x48fa7f
imul ecx, esi, 0x1e35a7bd
shr ecx, 0x12
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x44]
mov edi, dword [esp + 0x28]
mov edx, ebp
mov edi, dword [esp + 0x38]
mov ebp, esi
mov esi, ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x3c], ebp
mov ebp, dword [esp + 0x28]
sar ebp, 5
lea ebx, [edi + ebp]
mov ecx, dword [esp + 0x28]
add ecx, ebp
cmp ebx, edx
jg 0x48fbc1
mov dword [esp + 0x28], ecx
and esi, 0x3fff
lea edx, [eax + esi*8 + 4]
mov ecx, dword [edx]
mov dword [esp + 0x40], ecx
lea ecx, [eax + esi*8]
lea esi, [eax + esi*8]
mov esi, dword [esi]
lea ebp, [edi + ebp + 4]
cmp ebx, ebp
ja 0x48fc8e
mov dword [esp + 0x5c], esi
mov esi, dword [esp + 0x88]
cmp ebp, esi
ja 0x48fc8e
mov dword [esp + 0x38], ebx
mov ebp, dword [eax + 0x2000c]
sub esi, ebx
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, ebx
mov ebx, dword [esp + 0x84]
mov esi, dword [ebx + esi]
mov ebx, dword [esp + 0x3c]
mov dword [ecx], ebx
lea ecx, [ebp + edi]
mov dword [edx], ecx
mov ecx, dword [eax + 0x2000c]
mov edx, dword [esp + 0x40]
sub edx, ecx
mov ecx, edi
sub edi, edx
cmp edi, 0x8000
jg 0x48f681
mov edx, dword [esp + 0x5c]
cmp ebx, edx
jne 0x48f681
mov edx, dword [esp + 0x30]
cmp edx, ecx
ja 0x48fc87
mov ebx, dword [esp + 0x8c]
cmp ecx, ebx
ja 0x48fc87
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
sub ebx, edx
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and ebx, edx
mov esi, dword [esp + 0x84]
add ebx, esi
mov dword [esp + 0xc], ebx
sub ecx, edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebp
call fcn.0048fca0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esp + 0x40]
jmp 0x48f7e5
mov ebp, ebx
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x50]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], edx
mov dword [esp + 0x2c], ebx
mov esi, dword [esp + 0x74]
sub ebp, dword [esi + 0x2000c]
mov dword [esp], esi
lea edi, [ebx + 4]
mov dword [esp + 0x40], edi
mov dword [esp + 4], edi
add ebp, 4
mov dword [esp + 0x24], ebp
mov dword [esp + 8], ebp
mov esi, dword [esp + 0x84]
mov dword [esp + 0xc], esi
mov esi, dword [esp + 0x88]
mov dword [esp + 0x10], esi
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.0048fd50
mov eax, dword [esp + 0x18]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x7c]
lea edx, [ecx + 1]
lea ebx, [eax + 1]
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x24]
sub ebp, esi
shl ebx, 0x16
lea ebx, [ebp + ebx + 0x3fffffff]
mov ebp, dword [esp + 0x80]
cmp edx, ebp
jg 0x48fb7b
mov esi, dword [esp + 0x68]
mov dword [esp + 0x7c], edx
mov dword [esi + ecx*4], ebx
mov ecx, dword [esp + 0x2c]
lea ebx, [ecx + eax + 4]
lea edi, [eax + ecx]
mov edx, dword [esp + 0x44]
cmp ebx, edx
jge 0x48fa95
lea edx, [ecx + eax + 3]
lea eax, [ecx + eax + 0xb]
cmp edx, eax
ja 0x48fc80
mov ecx, dword [esp + 0x88]
cmp eax, ecx
ja 0x48fc80
sub eax, edx
sub ecx, edx
neg ecx
sar ecx, 0x1f
and ecx, edx
test eax, eax
jbe 0x48fc79
mov dword [esp + 0x54], ebp
mov edx, dword [esp + 0x84]
movzx ebp, byte [edx + ecx]
cmp eax, 1
jbe 0x48fc79
mov dword [esp + 0x6c], esi
movzx esi, byte [edx + ecx + 1]
mov dword [esp + 0x5c], esi
shl esi, 8
or ebp, esi
cmp eax, 2
jbe 0x48fc79
mov dword [esp + 0x50], ebx
mov esi, dword [esp + 0x5c]
shr esi, 0x18
movzx ebx, byte [edx + ecx + 2]
mov dword [esp + 0x5c], ebx
shl ebx, 0x10
or ebp, ebx
mov ebx, dword [esp + 0x5c]
shr ebx, 0x10
or esi, ebx
cmp eax, 3
jbe 0x48fc79
movzx ebx, byte [edx + ecx + 3]
mov dword [esp + 0x5c], ebx
shl ebx, 0x18
or ebp, ebx
mov ebx, dword [esp + 0x5c]
shr ebx, 8
or esi, ebx
cmp eax, 4
jbe 0x48fc72
movzx ebx, byte [edx + ecx + 4]
or ebx, esi
cmp eax, 5
jbe 0x48fc72
movzx esi, byte [edx + ecx + 5]
shl esi, 8
or ebx, esi
cmp eax, 6
jbe 0x48fc72
movzx esi, byte [edx + ecx + 6]
shl esi, 0x10
or ebx, esi
cmp eax, 7
jbe 0x48fc72
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x40], edi
mov dword [esp + 0x4c], ebx
imul eax, ebp, 0x1e35a7bd
shr eax, 0x12
and eax, 0x3fff
mov esi, dword [esp + 0x74]
lea ebx, [esi + eax*8]
mov edi, dword [esi + 0x2000c]
movzx ecx, byte [edx + ecx + 7]
mov dword [ebx], ebp
lea eax, [esi + eax*8 + 4]
mov ebx, dword [esp + 0x40]
lea edi, [edi + ebx + 3]
mov dword [eax], edi
shl ecx, 0x18
mov eax, dword [esp + 0x4c]
or eax, ecx
mov dword [esp + 0x4c], eax
shl eax, 0x18
shr ebp, 8
or eax, ebp
imul ebp, eax, 0x1e35a7bd
shr ebp, 0x12
and ebp, 0x3fff
lea edi, [esi + ebp*8]
mov ecx, dword [edi + 4]
mov edi, dword [edi]
mov dword [esp + 0x48], edi
lea edx, [esi + ebp*8]
mov edi, dword [esi + 0x2000c]
mov dword [edx], eax
lea edx, [esi + ebp*8 + 4]
lea ebx, [edi + ebx + 4]
mov dword [edx], ebx
mov edx, dword [esi + 0x2000c]
mov ebx, ecx
sub ecx, edx
mov edx, dword [esp + 0x50]
mov ebp, edx
sub edx, ecx
cmp edx, 0x8000
jg 0x48fa25
mov ecx, dword [esp + 0x48]
cmp ecx, eax
je 0x48f7d3
mov eax, dword [esp + 0x4c]
shl eax, 0x10
mov ecx, dword [esp + 0x5c]
shr ecx, 0x10
or eax, ecx
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
lea edi, [edx + ecx + 5]
imul ecx, eax, 0x1e35a7bd
shr ecx, 0x12
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x84]
mov esi, ecx
mov ebp, eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x60], eax
mov eax, 0x20
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x60]
jmp 0x48f6b1
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x88]
cmp ebx, ecx
jge 0x48fb70
ja 0x48fc6b
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov eax, dword [esp + 0x8c]
sub eax, ebx
mov edx, eax
neg eax
sar eax, 0x1f
and eax, ebx
mov ebp, dword [esp + 0x84]
add eax, ebp
mov dword [esp + 0xc], eax
sub ecx, ebx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048fca0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x74]
add dword [ebp + 0x2000c], ebx
mov esi, dword [ebp + 0x20008]
cmp ebx, esi
ja 0x48fc64
mov dword [esp + 0x80], eax
mov dword [esp + 0x68], ecx
mov dword [esp + 0x7c], edx
mov dword [ebp + 0x20004], ebx
mov ebp, dword [ebp + 0x20000]
mov esi, dword [esp + 0x84]
cmp ebp, esi
je 0x48fb48
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
call fcn.00447e60
mov eax, dword [esp + 0x68]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x98], eax
add esp, 0x70
ret
mov ecx, esi
mov edx, eax
mov eax, ebp
jmp 0x48faf3
mov dword [esp + 0x5c], ebx
lea eax, [0x4bb9a0]
mov dword [esp], eax
mov ebx, dword [esp + 0x68]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00434700
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x5c]
jmp 0x48f87a
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x80]
mov eax, dword [esp + 0x7c]
mov esi, dword [esp + 0x68]
jmp 0x48fa99
mov edx, dword [eax + 0x2000c]
add edx, 0xffff
mov dword [eax + 0x2000c], edx
mov dword [eax + 0x20004], 0
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x14], eax
call fcn.0048fca0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], ecx
add esp, 0x70
ret
mov dword [esp], eax
call fcn.0048fff0
mov eax, dword [esp + 0x74]
jmp 0x48f641
call fcn.00423e40
ud2
call fcn.00423e40
ud2
call fcn.00423d40
ud2
call fcn.00423d40
ud2
call fcn.00423e40
ud2
call fcn.00423e40
ud2
call fcn.00423e40
ud2
call fcn.00445f00
jmp fcn.0048f610