Function at 0x49ca60
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5564b0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
push esi
push edi
mov eax, dword [ebp + 0x44]
mov edi, dword [0x5aad5c]
cmp eax, ebx
mov dword [esp + 0x1c], ebp
jne 0x49ca97
mov edi, dword [0x5aad58]
cmp eax, ebx
je 0x49caa3
mov edx, dword [0x5aad38]
jmp 0x49cab6
mov eax, dword [ebp + 0x40]
mov edx, dword [0x5aad34]
cmp eax, ebx
je 0x49cab6
mov edx, dword [0x5aad44]
mov eax, dword [ebp]
or ecx, 0xffffffff
mov eax, dword [eax - 8]
push eax
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, edx
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
call fcn.004e55f0
add esp, 8
push eax
call fcn.004e55f0
mov esi, dword [esp + 0x38]
add esp, 8
mov dword [esp + 0x30], ebx
mov dword [esi], eax
test ebx, ebx
jne 0x49cafb
mov ecx, ebp
call fcn.004d3be0
jmp 0x49cb16
cmp ebx, 1
jne 0x49cb07
mov eax, dword [0x5aad40]
jmp 0x49cb16
mov eax, dword [0x5aad7c]
cmp ebx, 2
je 0x49cb16
mov eax, dword [0x5aad3c]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x30]
not ecx
dec ecx
cmp eax, ecx
jge 0x49cb2e
mov dword [esp + 0x30], ecx
inc ebx
cmp ebx, 4
jl 0x49caee
mov ecx, dword [esp + 0x30]
mov eax, 0xb
mov dword [esi + 4], ecx
mov ecx, dword [0x5b15cc]
cdq
idiv ecx
mov ebx, eax
mov eax, 0xb
cdq
idiv ecx
mov dword [esp + 0x30], ebx
test edx, edx
je 0x49cb60
inc ebx
mov dword [esp + 0x30], ebx
mov edi, dword [0x5aad80]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edx, ecx
or ecx, 0xffffffff
mov dword [esi + 8], edx
mov edi, dword [0x5aad50]
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp edx, ecx
jge 0x49cb8a
mov dword [esi + 8], ecx
mov edi, dword [0x5aad40]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esi + 8]
not ecx
dec ecx
cmp eax, ecx
jge 0x49cba4
mov dword [esi + 8], ecx
cmp dword [esi + 8], ebx
jge 0x49cbac
mov dword [esi + 8], ebx
mov edi, dword [0x5aad70]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esi + 0xc], ecx
mov eax, dword [0x5ada84]
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], 0
mov dword [esp + 0x14], eax
mov byte [esp + 0x28], 1
xor eax, eax
lea ebx, [ebp + 0xc]
mov ecx, eax
push 0
inc eax
push ecx
mov ecx, ebx
mov dword [esp + 0x20], eax
call fcn.004d74e0
mov edi, eax
test edi, edi
je 0x49ccb3
mov eax, dword [edi]
mov ecx, dword [ebp + 0x50]
push 0xffff
push 0
lea edx, [esp + 0x18]
push 0
push edx
push eax
call fcn.00454c30
test eax, eax
jne 0x49cc2c
mov edx, dword [edi]
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [ebp + 0x50]
push edx
add ecx, 0x280
call fcn.004d4b10
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 4]
mov eax, dword [eax - 8]
push eax
push ecx
call fcn.004e55f0
mov dword [esi + 4], eax
lea edx, [esp + 0x1c]
lea eax, [edi + 6]
push edx
push eax
call fcn.004ce290
mov ecx, dword [esp + 0x24]
mov edx, dword [esi + 8]
mov eax, dword [ecx - 8]
push eax
push edx
call fcn.004e55f0
add esp, 0x18
mov dword [esi + 8], eax
mov eax, dword [ebx]
mov ecx, ebx
push edi
call dword [eax + 0x14]
mov ebp, eax
or ecx, 0xffffffff
mov edi, ebp
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
mov ecx, dword [esi]
push edi
push ecx
call fcn.004e55f0
mov dword [esi], eax
lea edi, [edi + ebp + 1]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edx, dword [esi + 0xc]
not ecx
dec ecx
push ecx
push edx
call fcn.004e55f0
mov ebp, dword [esp + 0x2c]
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x28]
add esp, 0x10
jmp 0x49cbde
mov eax, dword [esp + 0x30]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 0xc]
add ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [ebp + 4]
mov eax, dword [ecx - 8]
push eax
push edx
call fcn.004e55f0
add esp, 8
lea ecx, [esp + 0x14]
mov dword [esi + 0xc], eax
mov byte [esp + 0x28], 0
call fcn.0052801f
lea ecx, [esp + 0x10]
mov dword [esp + 0x28], 0xffffffff
call fcn.0052801f
mov ecx, dword [esp + 0x20]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret 4