Function at 0x464990
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4d8ef8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebp
push edi
mov edi, ecx
xor ebp, ebp
mov ecx, dword [esp + 0x48]
lea eax, [esp + 0x48]
push ebp
push eax
push ecx
lea ecx, [edi + 0x104]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
call fcn.0045f8d0
test eax, eax
jne 0x4649fc
push ebp
push 0x5e7f3c
mov ecx, edi
call fcn.00463c10
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
pop edi
pop ebp
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret 0x10
mov edx, dword [esp + 0x48]
push ebx
mov ebx, dword [esp + 0x50]
push esi
push ebp
push ebp
push ebx
lea ecx, [edx + 0x14]
call fcn.0045f300
lea ecx, [esp + 0x2c]
mov esi, eax
call fcn.0044ddf0
push ebx
mov dword [esp + 0x4c], ebp
call fcn.0045fa80
add esp, 4
test eax, eax
je 0x464a9f
add esi, 0x18
push esi
call fcn.004b2de0
add esi, eax
push esi
call fcn.004b2de0
mov ecx, dword [esp + 0x60]
add esp, 8
cmp ecx, 3
lea eax, [esi + eax + 8]
ja case.default.0x464b04
jmp dword [ecx*4 + 0x464de0]
add eax, 4
push eax
call fcn.004605c0
add esp, 4
mov dword [esp + 0x14], eax
jmp 0x464da6
mov eax, dword [eax]
shr eax, 2
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x464da6
mov eax, dword [eax]
shr eax, 1
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x464da6
mov eax, dword [eax]
not eax
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x464da6
mov eax, dword [esi]
push ebp
push eax
mov ecx, edi
call fcn.00463d50
mov ebx, dword [esp + 0x58]
mov ebp, eax
lea edi, [esi + 0x18]
mov edx, dword [ebp + 0x28]
lea ecx, [ebx + ebx*4]
mov esi, edi
lea eax, [edx + ecx*4]
push esi
mov dword [esp + 0x5c], eax
call fcn.004b2de0
add esi, eax
push esi
call fcn.004b2de0
add esi, eax
add esp, 8
mov esi, dword [esi]
test esi, esi
je 0x464af0
mov ecx, dword [esi + 0x1c]
push ecx
call fcn.006fb229
leave
test eax, eax
je 0x464af0
mov eax, 1
jmp 0x464af2
xor eax, eax
cmp ebx, 8
jge 0x464d57
cmp ebx, 7
ja case.default.0x464b04
jmp dword [ebx*4 + 0x464df0]
cmp eax, 1
jne 0x464b64
mov eax, dword [esi + 0x1c]
lea edx, [esp + 0x1c]
push edx
push eax
call fcn.006f96d3
mov edi, 0x511c4e8b
call fcn.007016d1
inc ebp
push eax
call fcn.004ce109
mov edi, eax
test edi, edi
je 0x464b4f
mov ecx, esi
call fcn.004d0977
test eax, 0x80000000
jne 0x464b4f
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
call fcn.004d2f3f
mov eax, dword [esp + 0x1c]
test ebx, ebx
je 0x464b5b
mov eax, dword [esp + 0x20]
mov dword [esp + 0x14], eax
jmp 0x464da6
push edi
call fcn.004b2de0
add edi, eax
push edi
call fcn.004b2de0
add esp, 8
cmp ebx, 1
lea eax, [edi + eax + 4]
jne 0x464b81
add eax, 4
mov eax, dword [eax]
mov dword [esp + 0x14], eax
jmp 0x464da6
cmp eax, 1
jne 0x464bcb
mov ecx, dword [esi + 0x1c]
lea eax, [esp + 0x1c]
push eax
push ecx
call fcn.006f96d3
fild dword [ebx + 0x137502fb]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x1c]
sub eax, ecx
mov dword [esp + 0x14], eax
jmp 0x464da6
push edi
call fcn.004b2de0
add edi, eax
push edi
call fcn.004b2de0
add esp, 8
cmp ebx, 3
lea eax, [edi + eax + 0xc]
jne 0x464b81
add eax, 4
mov eax, dword [eax]
mov dword [esp + 0x14], eax
jmp 0x464da6
push edi
call fcn.004b2de0
add edi, eax
push edi
call fcn.004b2de0
mov edx, dword [edi + eax + 0x1c]
lea eax, [edi + eax + 0x1c]
mov ecx, dword [eax + edx*4 + 4]
lea eax, [eax + edx*4 + 4]
lea eax, [ecx + eax + 4]
push eax
call fcn.004605c0
add esp, 0xc
mov dword [esp + 0x14], eax
jmp 0x464da6
cmp eax, 1
jne 0x464c48
mov edx, dword [esi + 0x1c]
push edx
call fcn.006fa04f
add dword [ebx], esi
leave
test eax, eax
setne cl
mov eax, ecx
mov dword [esp + 0x14], eax
jmp 0x464da6
push edi
call fcn.004b2de0
add edi, eax
push edi
call fcn.004b2de0
mov edx, dword [edi + eax + 0x1c]
lea eax, [edi + eax + 0x1c]
mov ecx, dword [eax + edx*4 + 4]
lea eax, [eax + edx*4 + 4]
lea esi, [ecx + eax + 4]
push esi
call fcn.004b2de0
mov eax, dword [eax + esi + 4]
add esp, 0xc
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x464da6
cmp eax, 1
jne 0x464c9d
mov ecx, esi
call fcn.004d0b06
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x14], eax
jmp 0x464da6
push edi
call fcn.004b2de0
add edi, eax
push edi
call fcn.004b2de0
mov edx, dword [edi + eax + 0x1c]
lea eax, [edi + eax + 0x1c]
mov ecx, dword [eax + edx*4 + 4]
lea eax, [eax + edx*4 + 4]
lea esi, [eax + ecx + 4]
push esi
call fcn.004b2de0
mov eax, dword [eax + esi + 4]
add esp, 0xc
shr eax, 1
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x464da6
push edi
call fcn.004b2de0
add edi, eax
push edi
call fcn.004b2de0
mov edx, dword [edi + eax + 0x1c]
lea eax, [edi + eax + 0x1c]
add esp, 8
mov ecx, dword [eax + edx*4 + 4]
lea eax, [eax + edx*4 + 4]
cmp ecx, 4
jb 0x464d44
mov dword [esp + 0x3c], 0
mov ecx, dword [eax]
add eax, 4
push ecx
push eax
lea ecx, [esp + 0x34]
call fcn.0044e560
mov esi, dword [esp + 0x3c]
mov eax, dword [esp + 0x34]
neg esi
sbb esi, esi
and esi, eax
mov edx, dword [esi]
push edx
call fcn.0046d5f0
mov dword [esi], eax
mov eax, dword [esp + 0x40]
push eax
push esi
call fcn.00460650
add esp, 0xc
mov dword [esp + 0x14], eax
jmp 0x464da6
add eax, 4
push ecx
push eax
call fcn.00460650
add esp, 8
mov dword [esp + 0x14], eax
jmp 0x464da6
test eax, eax
jne 0x464d6a
mov ecx, dword [esp + 0x10]
push eax
push 0x5e7f28
call fcn.00463c10
push 6
call dword [ebp + 0x2c]
lea edx, [esp + 0x1c]
xor ecx, ecx
add ebx, 0xfffffff8
push edx
mov dword [esp + 0x20], ecx
push ebx
push esi
mov dword [esp + 0x2c], ecx
call eax
mov edx, dword [esp + 0x5c]
lea eax, [esp + 0x14]
lea ecx, [esp + 0x1c]
push eax
mov eax, dword [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x18]
push edx
push eax
call fcn.004652b0
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
mov dword [esp + 0x2c], 0x5cf0f0
call fcn.0044dff0
mov ecx, dword [esp + 0x40]
mov eax, esi
pop esi
mov edx, edi
pop ebx
pop edi
pop ebp
mov dword fs:[0], ecx
add esp, 0x3c
ret 0x10