Function at 0x48ed90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x3f0
mov eax, dword [0xa0b130]
xor eax, esp
mov dword [esp + 0x3ec], eax
cmp byte [0xa177de], 0
mov eax, dword [esp + 0x3fc]
push ebx
mov ebx, dword [esp + 0x408]
push esi
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x408]
push edi
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebx
jne 0x48fc41
push 0
sub esp, 8
lea ecx, [esp + 0x40c]
mov eax, esp
mov dword [eax], 0x927360
mov dword [eax + 4], 0xf
call fcn.00415ebf
cmp eax, 0xffffffff
jne 0x48fc41
call fcn.0040ab32
or byte [esp + 0x60], 1
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x404]
mov dword [esp + 0x48], 0
test eax, eax
je 0x48ee87
push 2
push eax
push dword [esp + 0x408]
lea eax, [esp + 0x48]
push eax
call fcn.0040e313
add esp, 0x10
cmp dword [esp + 0x40], 0
je 0x48ee87
sub esp, 8
lea ecx, [esp + 0x44]
mov eax, esp
sub esp, 8
mov dword [eax], ecx
mov dword [eax + 4], 1
mov eax, esp
mov dword [eax], 0x927360
mov dword [eax + 4], 0xf
lea eax, [esp + 0x158]
push eax
call fcn.004149e8
add esp, 0x14
lea ecx, [esp + 0x48]
push eax
call fcn.00408d64
lea ecx, [esp + 0x148]
call fcn.0040a45c
mov al, byte [esp + 0x60]
not al
test al, 1
jne 0x48eee2
sub esp, 8
xorps xmm0, xmm0
mov eax, esp
sub esp, 8
movq qword [eax], xmm0
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, esp
mov dword [eax], 0x927360
mov dword [eax + 4], 0xf
lea eax, [esp + 0x158]
push eax
call fcn.004149e8
add esp, 0x14
lea ecx, [esp + 0x48]
push eax
call fcn.00408d64
lea ecx, [esp + 0x148]
call fcn.0040a45c
mov al, byte [esp + 0x60]
not al
test al, 1
jne 0x48eef3
xor bl, bl
jmp 0x48fbdd
lea eax, [esp + 0x400]
mov word [esp + 0x2c], 0x105
mov dword [esp + 0x24], eax
lea eax, [esp + 0x24]
push 0
push eax
lea eax, [esp + 0x44]
push eax
call fcn.0040a542
add esp, 0xc
cmp dword [eax], 0
jne 0x48ef48
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x404]
call fcn.00412ba7
push eax
lea ecx, [esp + 0x134]
call fcn.00404b29
lea ecx, [esp + 0x84]
jmp 0x48ef70
push 0
lea eax, [esp + 0x14c]
push 0
push eax
call fcn.00412af3
add esp, 0xc
lea ecx, [esp + 0x130]
push eax
call fcn.00404b29
lea ecx, [esp + 0x148]
call fcn.0040aeed
mov esi, dword [esp + 0x18]
lea eax, [esp + 0xdc]
mov dword [esp + 0xd0], eax
lea eax, [esp + 0xf8]
mov dword [esp + 0xec], eax
lea eax, [esp + 0xc8]
mov dword [esp + 0x64], eax
xor eax, eax
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 4
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 1
mov dword [esp + 0x20], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x3c], eax
test esi, esi
je 0x48f081
cmp esi, 0x3fffffff
ja 0x48fc5b
lea edi, [esi*4]
cmp edi, 0x1000
jb 0x48f038
push edi
call fcn.00404818
add esp, 4
jmp 0x48f049
test edi, edi
je 0x48f047
push edi
call fcn.00405e93
add esp, 4
jmp 0x48f049
xor eax, eax
mov dword [esp + 0xc], eax
add eax, edi
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x20]
push eax
call fcn.0040d59e
add esp, 4
test al, al
je 0x48f073
push esi
push dword [esp + 0x10]
call fcn.0040c158
add esp, 8
jmp 0x48f081
test esi, esi
je 0x48f081
mov edi, dword [esp + 0xc]
mov ecx, esi
xor eax, eax
rep stosd dword es:[edi], eax
mov esi, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x20], eax
test esi, esi
je 0x48f113
cmp esi, 0x3fffffff
ja 0x48fc60
lea edi, [esi*4]
cmp edi, 0x1000
jb 0x48f0c5
push edi
call fcn.00404818
add esp, 4
jmp 0x48f0d6
test edi, edi
je 0x48f0d4
push edi
call fcn.00405e93
add esp, 4
jmp 0x48f0d6
xor eax, eax
mov dword [esp + 0x10], eax
add eax, edi
mov dword [esp + 0x20], eax
lea eax, [esp + 0x24]
push eax
call fcn.0040dfb7
add esp, 4
test al, al
je 0x48f101
push esi
mov esi, dword [esp + 0x14]
push esi
call fcn.00415a32
add esp, 8
jmp 0x48f11b
test esi, esi
je 0x48f117
mov ecx, esi
xor eax, eax
mov esi, dword [esp + 0x10]
mov edi, esi
rep stosd dword es:[edi], eax
jmp 0x48f11b
xor esi, esi
jmp 0x48f11b
mov esi, dword [esp + 0x10]
cmp dword [esp + 0x144], 0x10
lea ecx, [esp + 0x64]
push ecx
lea eax, [esp + 0x134]
cmovae eax, dword [esp + 0x134]
push eax
push esi
mov esi, dword [esp + 0x18]
push esi
push dword [esp + 0x28]
push dword [esp + 0x58]
call fcn.0048e7a0
add esp, 0x18
test al, al
jne 0x48f159
xor bl, bl
jmp 0x48fa7c
lea eax, [esp + 0x110]
mov dword [esp + 0x108], 0
mov dword [esp + 0x104], eax
lea eax, [esp + 0xa8]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x104]
push eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x110], 0x20
push eax
sub esp, 8
mov dword [esp + 0xb0], 0
mov eax, esp
mov dword [esp + 0xb4], 0x20
mov word [esp + 0x9c], 0x103
mov dword [esp + 0x94], str.symbolizer_input
mov dword [eax], 0x9236bc
mov dword [eax + 4], 0
lea eax, [esp + 0x94]
push eax
lea eax, [esp + 0x38]
push eax
call fcn.0040fe8e
add esp, 0x18
mov word [esp + 0x8c], 0x103
lea eax, [esp + 0x9c]
mov dword [esp + 0x84], str.symbolizer_output
push eax
sub esp, 8
mov eax, esp
mov dword [eax], 0x9236bc
mov dword [eax + 4], 0
lea eax, [esp + 0x90]
push eax
lea eax, [esp + 0x34]
push eax
call fcn.0040aaf1
mov ecx, dword [esp + 0x11c]
add esp, 0x14
cmp ecx, dword [esp + 0x10c]
jb 0x48f25d
push 1
push 0
lea eax, [esp + 0x118]
push eax
lea ecx, [esp + 0x110]
call fcn.00405e1b
mov ecx, dword [esp + 0x108]
mov eax, dword [esp + 0x104]
mov byte [ecx + eax], 0
lea ecx, [esp + 0x84]
push dword [esp + 0x104]
call fcn.00415f82
push 1
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x324]
call fcn.00410604
mov ecx, dword [esp + 0xa0]
cmp ecx, dword [esp + 0xa4]
jb 0x48f2c0
push 1
push 0
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0xa8]
call fcn.00405e1b
mov ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0x9c]
mov byte [ecx + eax], 0
lea ecx, [esp + 0x84]
mov eax, dword [esp + 0xa0]
push dword [esp + 0x9c]
mov dword [esp + 0xa4], eax
call fcn.00415f82
push 1
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x294]
call fcn.00410604
push 0
push 1
push dword [esp + 0x70]
lea ecx, [esp + 0x154]
call fcn.0040badc
cmp dword [esp + 0x18], 0
jle 0x48f3fd
mov edi, dword [esp + 0x10]
mov eax, esi
sub eax, edi
xor ebx, ebx
mov dword [esp + 0x1c], eax
nop
mov ecx, dword [eax + edi]
test ecx, ecx
je 0x48f3e7
mov esi, ecx
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x48f340
mov eax, dword [esp + 0x150]
sub esi, edx
mov edx, dword [esp + 0x154]
sub eax, edx
cmp esi, eax
jbe 0x48f36f
push esi
push ecx
lea ecx, [esp + 0x150]
call fcn.0041214d
mov ecx, eax
jmp 0x48f38c
test esi, esi
je 0x48f385
push esi
push ecx
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add dword [esp + 0x154], esi
lea ecx, [esp + 0x148]
mov eax, dword [ecx + 8]
mov edx, dword [ecx + 0xc]
sub eax, edx
cmp eax, 1
jae 0x48f3a9
push 1
push 0x925080
call fcn.0041214d
mov ecx, eax
jmp 0x48f3b3
mov al, byte [0x925080]
mov byte [edx], al
inc dword [ecx + 0xc]
push dword [edi]
call fcn.0040ea1b
mov edx, eax
mov ecx, dword [edx + 8]
mov esi, dword [edx + 0xc]
sub ecx, esi
cmp ecx, 1
jae 0x48f3d9
push 1
push 0x92406c
mov ecx, edx
call fcn.0041214d
jmp 0x48f3e3
mov al, byte [0x92406c]
mov byte [esi], al
inc dword [edx + 0xc]
mov eax, dword [esp + 0x1c]
inc ebx
add edi, 4
cmp ebx, dword [esp + 0x18]
jl 0x48f330
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0xc]
lea ecx, [esp + 0x148]
call fcn.0040ecc3
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x108]
push 0
mov dword [esp + 0x3b0], eax
mov eax, dword [esp + 0xa0]
push 0
mov dword [esp + 0x3c0], eax
push 0
mov dword [esp + 0x3bc], ecx
mov ecx, dword [esp + 0xac]
push 0
mov dword [esp + 0x3cc], ecx
lea ecx, [esp + 0x3bc]
push 0
sub esp, 8
mov byte [esp + 0x3d0], 1
mov eax, esp
mov byte [esp + 0x3dc], 1
mov dword [esp + 0x3e0], 0x9236bc
sub esp, 0xc
mov dword [esp + 0x3f0], 0
mov byte [esp + 0x3f4], 1
mov dword [esp + 0x3f8], 0x927360
mov dword [esp + 0x3fc], 0xf
mov dword [esp + 0x400], 0x9273a0
mov dword [esp + 0x404], 0x13
mov dword [esp + 0x408], 0x9273b8
mov dword [esp + 0x40c], 0xa
mov dword [esp + 0x410], 0x9273c8
mov dword [esp + 0x414], 0x12
mov dword [esp + 0x418], 0x9273e0
mov dword [esp + 0x41c], 0xa
mov dword [eax], ecx
lea ecx, [esp + 0x3f8]
mov dword [eax + 4], 3
mov eax, esp
sub esp, 8
mov byte [eax], 0
mov byte [eax + 8], 0
mov eax, esp
sub esp, 8
mov dword [eax], ecx
mov ecx, esp
mov dword [eax + 4], 5
lea eax, [esp + 0x80]
cmp dword [esp + 0x94], 0x10
cmovae eax, dword [esp + 0x80]
mov dword [ecx], eax
mov eax, dword [esp + 0x90]
mov dword [ecx + 4], eax
call fcn.00411d79
add esp, 0x38
test eax, eax
je 0x48f558
xor bl, bl
jmp 0x48f9a4
mov ecx, dword [esp + 0xa0]
cmp ecx, dword [esp + 0xa4]
jb 0x48f587
push 1
push 0
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0xa8]
call fcn.00405e1b
mov ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0x9c]
mov byte [ecx + eax], 0
mov eax, dword [esp + 0xa0]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x9c]
mov byte [esp + 0x2d], 1
cmp byte [eax], 0
je 0x48f5bc
mov dword [esp + 0x24], eax
mov byte [esp + 0x2c], 3
jmp 0x48f5c1
mov byte [esp + 0x2c], 1
push 0
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x84]
push eax
call fcn.0040bf2d
mov al, byte [esp + 0x90]
add esp, 0x18
not al
test al, 1
jne 0x48f5f2
xor bl, bl
jmp 0x48f98f
mov eax, dword [esp + 0x70]
push 1
push 0xffffffffffffffff
sub esp, 8
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
sub eax, ecx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], eax
lea ecx, [esp + 0x8c]
lea eax, [esp + 0x19c]
mov dword [esp + 0x194], 0
mov dword [esp + 0x190], eax
mov eax, esp
mov dword [esp + 0x198], 0x20
mov dword [eax], 0x92406c
mov dword [eax + 4], 1
lea eax, [esp + 0x190]
push eax
call fcn.0040727f
cmp dword [esp + 0x18], 0
mov edx, dword [esp + 0x180]
mov dword [esp + 0x14], edx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x1c], 0
jle 0x48f96f
lea eax, [esp + 0x6c]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], eax
lea eax, [esp + 0x18]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x44]
mov dword [esp + 0x90], eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x1c]
cmp dword [esi + eax*4], 0
jne 0x48f700
lea ecx, [esp + 0x84]
call fcn.0048c760
mov eax, dword [ebx + 0xc]
cmp eax, dword [ebx + 8]
jb 0x48f6e3
push 0xa
mov ecx, ebx
call fcn.0040c4b4
mov edx, dword [esp + 0x14]
jmp 0x48f95c
mov edx, dword [esp + 0x14]
mov byte [eax], 0xa
inc dword [ebx + 0xc]
jmp 0x48f95c
mov edx, dword [esp + 0x14]
nop word [eax + eax]
mov ecx, dword [esp + 0x180]
mov eax, dword [esp + 0x184]
lea eax, [ecx + eax*8]
cmp edx, eax
je 0x48fc12
mov esi, dword [edx + 4]
mov edi, dword [edx]
add edx, 8
mov dword [esp + 0x14], edx
test esi, esi
je 0x48f958
lea ecx, [esp + 0x84]
call fcn.0048c760
mov dword [esp + 0x24], esi
mov edx, esi
cmp esi, 2
jb 0x48f75e
push 2
push 0x9273f0
push edi
mov dword [esp + 0x30], esi
call fcn.004031ed
add esp, 0xc
test eax, eax
je 0x48f7a2
mov edx, esi
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 0xc]
sub eax, ecx
cmp dword [esp + 0x24], eax
jbe 0x48f777
push esi
push edi
mov ecx, ebx
call fcn.0041214d
jmp 0x48f789
push edx
push edi
push ecx
call sub.VCRUNTIME140.dll_memcpy
mov eax, esi
add esp, 0xc
add dword [ebx + 0xc], eax
mov eax, ebx
mov ecx, dword [eax + 0xc]
cmp ecx, dword [eax + 8]
jb 0x48f79c
push 0x20
mov ecx, eax
call fcn.0040c4b4
jmp 0x48f7a2
mov byte [ecx], 0x20
inc dword [eax + 0xc]
mov ecx, dword [esp + 0x180]
mov eax, dword [esp + 0x184]
lea eax, [ecx + eax*8]
mov ecx, dword [esp + 0x14]
cmp ecx, eax
je 0x48fc12
mov esi, dword [ecx + 4]
mov edx, esi
mov edi, dword [ecx]
add ecx, 8
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], esi
cmp esi, 2
jb 0x48f8fc
push 2
push 0x9273f0
push edi
mov dword [esp + 0x30], esi
call fcn.004031ed
add esp, 0xc
test eax, eax
jne 0x48f8fa
mov eax, dword [esp + 0x1c]
xorps xmm0, xmm0
mov esi, dword [esp + 0xc]
lea ecx, [eax*4]
mov eax, dword [esp + 0x10]
add esi, ecx
mov eax, dword [eax + ecx]
mov ecx, dword [ebx + 0xc]
cdq
mov dword [esp + 0x24], eax
mov eax, dword [ebx + 8]
sub eax, ecx
mov dword [esp + 0x28], edx
movlpd qword [esp + 0x2c], xmm0
mov dword [esp + 0x34], 0
mov word [esp + 0x38], 1
mov byte [esp + 0x3a], 1
cmp eax, 1
jae 0x48f853
push 1
push 0x9273f4
mov ecx, ebx
call fcn.0041214d
mov edi, eax
jmp 0x48f85f
mov al, byte [0x9273f4]
mov edi, ebx
mov byte [ecx], al
inc dword [ebx + 0xc]
mov ecx, dword [esi]
test ecx, ecx
je 0x48f87b
mov esi, ecx
lea edx, [esi + 1]
nop word [eax + eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x48f870
sub esi, edx
jmp 0x48f87d
xor esi, esi
mov eax, dword [edi + 8]
mov edx, dword [edi + 0xc]
sub eax, edx
cmp esi, eax
jbe 0x48f896
push esi
push ecx
mov ecx, edi
call fcn.0041214d
mov edi, eax
jmp 0x48f8a8
test esi, esi
je 0x48f8a8
push esi
push ecx
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add dword [edi + 0xc], esi
mov eax, dword [edi + 0xc]
cmp eax, dword [edi + 8]
jb 0x48f8bd
push 0x2b
mov ecx, edi
call fcn.0040c4b4
mov edi, eax
jmp 0x48f8c3
mov byte [eax], 0x2b
inc dword [edi + 0xc]
lea eax, [esp + 0x24]
mov ecx, edi
push eax
call fcn.0040d198
mov edx, eax
mov ecx, dword [edx + 8]
mov esi, dword [edx + 0xc]
sub ecx, esi
cmp ecx, 1
jae 0x48f8ee
push 1
push 0x925880
mov ecx, edx
call fcn.0041214d
jmp 0x48f929
mov al, byte [0x925880]
mov byte [esi], al
inc dword [edx + 0xc]
jmp 0x48f929
mov edx, esi
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 0xc]
sub eax, ecx
cmp dword [esp + 0x24], eax
jbe 0x48f915
push esi
push edi
mov ecx, ebx
call fcn.0041214d
jmp 0x48f929
test edx, edx
je 0x48f929
push esi
push edi
push ecx
call sub.VCRUNTIME140.dll_memcpy
mov eax, esi
add esp, 0xc
add dword [ebx + 0xc], eax
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 0xc]
sub eax, ecx
cmp eax, 1
jae 0x48f949
push 1
push 0x92406c
mov ecx, ebx
call fcn.0041214d
jmp 0x48f6f2
mov al, byte [0x92406c]
mov byte [ecx], al
inc dword [ebx + 0xc]
jmp 0x48f6f2
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x18]
jl 0x48f680
mov bl, 1
mov eax, dword [esp + 0x180]
lea ecx, [esp + 0x18c]
cmp eax, ecx
je 0x48f98f
mov edi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push eax
call edi
add esp, 4
test byte [esp + 0x78], 1
jne 0x48f9a4
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x48f9a4
mov eax, dword [ecx]
push 1
call dword [eax]
cmp byte [esp + 0x318], 0
je 0x48f9dd
lea eax, [esp + 0x28c]
mov word [esp + 0x8c], 0x106
mov dword [esp + 0x84], eax
lea eax, [esp + 0x84]
push 1
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.0040abeb
add esp, 0xc
mov eax, dword [esp + 0x28c]
lea ecx, [esp + 0x298]
mov edi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp eax, ecx
je 0x48f9fb
push eax
call edi
add esp, 4
cmp byte [esp + 0x3a8], 0
je 0x48fa34
lea eax, [esp + 0x31c]
mov word [esp + 0x8c], 0x106
mov dword [esp + 0x84], eax
lea eax, [esp + 0x84]
push 1
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.0040abeb
add esp, 0xc
mov eax, dword [esp + 0x31c]
lea ecx, [esp + 0x328]
cmp eax, ecx
je 0x48fa4c
push eax
call edi
add esp, 4
mov eax, dword [esp + 0x9c]
lea ecx, [esp + 0xa8]
cmp eax, ecx
je 0x48fa64
push eax
call edi
add esp, 4
mov eax, dword [esp + 0x104]
lea ecx, [esp + 0x110]
cmp eax, ecx
je 0x48fa7c
push eax
call edi
add esp, 4
mov eax, dword [esp + 0x10]
test eax, eax
je 0x48fab5
mov edx, dword [esp + 0x20]
sub edx, eax
and edx, 0xfffffffc
cmp edx, 0x1000
jb 0x48faab
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48fc0c
mov eax, ecx
push edx
push eax
call fcn.004036ca
add esp, 8
test esi, esi
je 0x48faea
mov edx, dword [esp + 0x3c]
sub edx, esi
and edx, 0xfffffffc
cmp edx, 0x1000
jb 0x48fae0
mov ecx, dword [esi - 4]
add edx, 0x23
sub esi, ecx
lea eax, [esi - 4]
cmp eax, 0x1f
ja 0x48fc0c
mov esi, ecx
push edx
push esi
call fcn.004036ca
add esp, 8
mov ecx, dword [esp + 0xd0]
mov eax, dword [esp + 0xd4]
lea edi, [ecx + eax*4]
cmp ecx, edi
je 0x48fb37
mov esi, ecx
mov eax, esi
sub eax, ecx
mov ecx, 0x1e
sar eax, 2
shr eax, 7
cmp eax, ecx
push 8
cmovb ecx, eax
mov eax, 0x1000
shl eax, cl
push eax
push dword [esi]
call fcn.00415398
mov ecx, dword [esp + 0xdc]
add esi, 4
add esp, 0xc
cmp esi, edi
jne 0x48fb01
mov esi, dword [esp + 0xec]
mov eax, dword [esp + 0xf0]
lea edi, [esi + eax*8]
cmp esi, edi
je 0x48fb74
nop dword [eax]
push 8
push dword [esi + 4]
push dword [esi]
call fcn.00415398
add esi, 8
add esp, 0xc
cmp esi, edi
jne 0x48fb50
mov esi, dword [esp + 0xec]
mov ecx, dword [esp + 0xd0]
mov edi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea eax, [esp + 0xf8]
cmp esi, eax
je 0x48fb92
push esi
call edi
mov ecx, dword [esp + 0xd4]
add esp, 4
lea eax, [esp + 0xdc]
cmp ecx, eax
je 0x48fba3
push ecx
call edi
add esp, 4
mov eax, dword [esp + 0x144]
cmp eax, 0x10
jb 0x48fbdd
mov edx, dword [esp + 0x130]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x48fbd3
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48fc0c
push ecx
push edx
call fcn.004036ca
add esp, 8
test byte [esp + 0x60], 1
jne 0x48fc27
mov edx, dword [esp + 0x5c]
cmp edx, 0x10
jb 0x48fc27
mov ecx, dword [esp + 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x48fc1d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x48fc1d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov esi, dword [esp + 0xc]
xor bl, bl
jmp 0x48f971
push edx
push ecx
call fcn.004036ca
add esp, 8
mov al, bl
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3ec]
xor ecx, esp
call fcn.004087b5
add esp, 0x3f0
ret
mov ecx, dword [esp + 0x3f8]
xor al, al
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004087b5
add esp, 0x3f0
ret
call fcn.0040a65f
call fcn.0040d3cd
int3