Function at 0x48bae0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4a6cb8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x7c
mov eax, dword [esp + 0x8c]
lea ecx, [esp + 0x28]
push eax
call fcn.0040f9a0
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xc], 0
push ecx
lea ecx, [esp + 0x64]
call fcn.0040f9a0
mov eax, dword [esp + 0x30]
test eax, eax
je 0x48bb30
mov dword [esp + 0x3c], eax
jmp 0x48bb35
mov byte [esp + 0x39], 1
push ebx
push ebp
push esi
push edi
mov byte [esp + 0x50], 0
mov edx, dword [esp + 0x38]
cmp dword [edx], 0
je 0x48bd4d
cmp eax, dword [esp + 0x4c]
jne 0x48bb5d
mov cl, byte [esp + 0x50]
test cl, cl
jne 0x48bd4d
mov esi, eax
add eax, 0x30
mov dword [esp + 0x1c], eax
mov ecx, dword [eax]
mov dword [esp + 0x20], ecx
mov eax, dword [eax]
test eax, eax
je 0x48bb76
mov eax, dword [eax]
jmp 0x48bb78
xor eax, eax
test eax, eax
mov dword [esp + 0x24], eax
je 0x48bb84
mov eax, dword [eax]
jmp 0x48bb86
xor eax, eax
push 0x60
mov dword [esp + 0x2c], eax
mov dword [esp + 0x34], 0
mov byte [esp + 0x38], 0
mov byte [esp + 0x30], 0
mov byte [esp + 0x31], 0
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x94], 0
je 0x48bbca
push esi
mov ecx, eax
call fcn.00428dc0
mov ebx, eax
jmp 0x48bbcc
xor ebx, ebx
mov eax, dword [ebx + 4]
mov dword [esp + 0x94], 0xffffffff
test eax, eax
mov dword [esp + 0x58], eax
je 0x48bbe6
mov ebp, dword [eax]
jmp 0x48bbe8
xor ebp, ebp
test ebp, ebp
je 0x48bbf1
mov eax, dword [ebp]
jmp 0x48bbf3
xor eax, eax
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x24]
test eax, eax
je 0x48bc05
mov dword [esp + 0x30], eax
jmp 0x48bc0a
mov byte [esp + 0x2d], 1
mov byte [esp + 0x34], 0
mov edx, dword [esp + 0x1c]
cmp dword [edx], 0
je 0x48bd31
cmp eax, dword [esp + 0x30]
jne 0x48bc2e
mov al, byte [esp + 0x34]
test al, al
jne 0x48bd31
lea ecx, [esp + 0x1c]
call fcn.00402070
push 0x20
mov edi, eax
call sub.MFC42.DLL_operatornew
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0x94], 1
je 0x48bcd7
mov eax, 0x7fff
mov dword [esi], 0
mov word [esi + 8], ax
mov word [esi + 0xa], ax
mov eax, 0xffff8001
mov word [esi + 0xc], ax
mov word [esi + 0xe], ax
lea ecx, [esi + 0x10]
mov byte [esp + 0x94], 2
call fcn.0042aa30
lea eax, [esp + 0x14]
mov ecx, edi
push eax
mov byte [esp + 0x98], 3
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], edi
call fcn.0043b8f0
mov ecx, dword [eax]
mov dword [esi + 8], ecx
mov edx, dword [eax + 4]
mov eax, dword [esi + 4]
mov ecx, edi
and eax, 0x3fffffff
mov dword [esi + 0xc], edx
mov dword [esi + 4], eax
call fcn.0043b9e0
mov ecx, dword [esi + 4]
mov edx, ecx
xor edx, eax
and edx, 0x3fffffff
xor edx, ecx
mov dword [esi + 4], edx
jmp 0x48bcd9
xor esi, esi
mov eax, dword [ebx + 4]
mov dword [esp + 0x94], 0xffffffff
test eax, eax
jne 0x48bcfa
mov dword [esi], esi
mov dword [ebx + 4], esi
mov dword [esp + 0x60], esi
mov dword [esp + 0x58], esi
jmp 0x48bd1d
mov eax, dword [esp + 0x60]
test ebp, ebp
mov dword [esi], eax
je 0x48bd17
mov dword [ebp], esi
mov eax, dword [ebx + 4]
cmp ebp, eax
mov dword [esp + 0x58], ebp
jne 0x48bd1d
mov dword [ebx + 4], esi
jmp 0x48bd1d
mov ecx, dword [esp + 0x58]
mov dword [ecx], esi
lea ecx, [esp + 0x1c]
mov ebp, esi
call fcn.004403e0
mov eax, dword [esp + 0x24]
jmp 0x48bc0f
push ebx
lea ecx, [esp + 0x74]
call fcn.00426fb0
lea ecx, [esp + 0x38]
call fcn.004403e0
mov eax, dword [esp + 0x40]
jmp 0x48bb3e
mov ecx, dword [esp + 0x8c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x88
ret