Function at 0x49e690
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4fd018
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebp
push edi
mov edi, ecx
xor ebp, ebp
mov ecx, dword [esp + 0x48]
lea eax, [esp + 0x48]
push ebp
push eax
push ecx
lea ecx, [edi + 0x104]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
call fcn.00499590
test eax, eax
jne 0x49e6fc
push ebp
push 0x5b4fa4
mov ecx, edi
call fcn.0049d910
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
pop edi
pop ebp
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret 0x10
mov edx, dword [esp + 0x48]
push ebx
mov ebx, dword [esp + 0x50]
push esi
push ebp
push ebp
push ebx
lea ecx, [edx + 0x14]
call fcn.00498fc0
lea ecx, [esp + 0x2c]
mov esi, eax
call fcn.00487d00
push ebx
mov dword [esp + 0x4c], ebp
call fcn.00499740
add esp, 4
test eax, eax
je 0x49e79f
add esi, 0x18
push esi
call fcn.00488790
add esi, eax
push esi
call fcn.00488790
mov ecx, dword [esp + 0x60]
add esp, 8
cmp ecx, 3
lea eax, [esi + eax + 8]
ja case.default.0x49e804
jmp dword [ecx*4 + 0x49eae0]
add eax, 4
push eax
call fcn.0049a280
add esp, 4
mov dword [esp + 0x14], eax
jmp 0x49eaa6
mov eax, dword [eax]
shr eax, 2
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x49eaa6
mov eax, dword [eax]
shr eax, 1
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x49eaa6
mov eax, dword [eax]
not eax
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x49eaa6
mov eax, dword [esi]
push ebp
push eax
mov ecx, edi
call fcn.0049da50
mov ebx, dword [esp + 0x58]
mov ebp, eax
lea edi, [esi + 0x18]
mov edx, dword [ebp + 0x28]
lea ecx, [ebx + ebx*4]
mov esi, edi
lea eax, [edx + ecx*4]
push esi
mov dword [esp + 0x5c], eax
call fcn.00488790
add esi, eax
push esi
call fcn.00488790
add esi, eax
add esp, 8
mov esi, dword [esi]
test esi, esi
je 0x49e7f0
mov ecx, dword [esi + 0x1c]
push ecx
nop
nop
nop
nop
nop
nop
test eax, eax
je 0x49e7f0
mov eax, 1
jmp 0x49e7f2
xor eax, eax
cmp ebx, 8
jge 0x49ea57
cmp ebx, 7
ja case.default.0x49e804
jmp dword [ebx*4 + 0x49eaf0]
cmp eax, 1
jne 0x49e864
mov eax, dword [esi + 0x1c]
lea edx, [esp + 0x1c]
push edx
push eax
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x1c]
push ecx
nop
nop
nop
nop
nop
nop
push eax
call fcn.004f2535
mov edi, eax
test edi, edi
je 0x49e84f
mov ecx, esi
call fcn.004f4d9b
test eax, 0x80000000
jne 0x49e84f
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
call fcn.004f7369
mov eax, dword [esp + 0x1c]
test ebx, ebx
je 0x49e85b
mov eax, dword [esp + 0x20]
mov dword [esp + 0x14], eax
jmp 0x49eaa6
push edi
call fcn.00488790
add edi, eax
push edi
call fcn.00488790
add esp, 8
cmp ebx, 1
lea eax, [edi + eax + 4]
jne 0x49e881
add eax, 4
mov eax, dword [eax]
mov dword [esp + 0x14], eax
jmp 0x49eaa6
cmp eax, 1
jne 0x49e8cb
mov ecx, dword [esi + 0x1c]
lea eax, [esp + 0x1c]
push eax
push ecx
nop
nop
nop
nop
nop
nop
cmp ebx, 2
jne 0x49e8b8
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x1c]
sub eax, ecx
mov dword [esp + 0x14], eax
jmp 0x49eaa6
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
sub eax, ecx
mov dword [esp + 0x14], eax
jmp 0x49eaa6
push edi
call fcn.00488790
add edi, eax
push edi
call fcn.00488790
add esp, 8
cmp ebx, 3
lea eax, [edi + eax + 0xc]
jne 0x49e881
add eax, 4
mov eax, dword [eax]
mov dword [esp + 0x14], eax
jmp 0x49eaa6
push edi
call fcn.00488790
add edi, eax
push edi
call fcn.00488790
mov edx, dword [edi + eax + 0x1c]
lea eax, [edi + eax + 0x1c]
mov ecx, dword [eax + edx*4 + 4]
lea eax, [eax + edx*4 + 4]
lea eax, [ecx + eax + 4]
push eax
call fcn.0049a280
add esp, 0xc
mov dword [esp + 0x14], eax
jmp 0x49eaa6
cmp eax, 1
jne 0x49e948
mov edx, dword [esi + 0x1c]
push edx
nop
nop
nop
nop
nop
nop
xor ecx, ecx
test eax, eax
setne cl
mov eax, ecx
mov dword [esp + 0x14], eax
jmp 0x49eaa6
push edi
call fcn.00488790
add edi, eax
push edi
call fcn.00488790
mov edx, dword [edi + eax + 0x1c]
lea eax, [edi + eax + 0x1c]
mov ecx, dword [eax + edx*4 + 4]
lea eax, [eax + edx*4 + 4]
lea esi, [ecx + eax + 4]
push esi
call fcn.00488790
mov eax, dword [eax + esi + 4]
add esp, 0xc
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x49eaa6
cmp eax, 1
jne 0x49e99d
mov ecx, esi
call fcn.004f4f2a
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x14], eax
jmp 0x49eaa6
push edi
call fcn.00488790
add edi, eax
push edi
call fcn.00488790
mov edx, dword [edi + eax + 0x1c]
lea eax, [edi + eax + 0x1c]
mov ecx, dword [eax + edx*4 + 4]
lea eax, [eax + edx*4 + 4]
lea esi, [eax + ecx + 4]
push esi
call fcn.00488790
mov eax, dword [eax + esi + 4]
add esp, 0xc
shr eax, 1
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x49eaa6
push edi
call fcn.00488790
add edi, eax
push edi
call fcn.00488790
mov edx, dword [edi + eax + 0x1c]
lea eax, [edi + eax + 0x1c]
add esp, 8
mov ecx, dword [eax + edx*4 + 4]
lea eax, [eax + edx*4 + 4]
cmp ecx, 4
jb 0x49ea44
mov dword [esp + 0x3c], 0
mov ecx, dword [eax]
add eax, 4
push ecx
push eax
lea ecx, [esp + 0x34]
call fcn.00488470
mov esi, dword [esp + 0x3c]
mov eax, dword [esp + 0x34]
neg esi
sbb esi, esi
and esi, eax
mov edx, dword [esi]
push edx
call fcn.004a6ec0
mov dword [esi], eax
mov eax, dword [esp + 0x40]
push eax
push esi
call fcn.0049a310
add esp, 0xc
mov dword [esp + 0x14], eax
jmp 0x49eaa6
add eax, 4
push ecx
push eax
call fcn.0049a310
add esp, 8
mov dword [esp + 0x14], eax
jmp 0x49eaa6
test eax, eax
jne 0x49ea6a
mov ecx, dword [esp + 0x10]
push eax
push 0x5b4f90
call fcn.0049d910
push 6
call dword [ebp + 0x2c]
lea edx, [esp + 0x1c]
xor ecx, ecx
add ebx, 0xfffffff8
push edx
mov dword [esp + 0x20], ecx
push ebx
push esi
mov dword [esp + 0x2c], ecx
call eax
mov edx, dword [esp + 0x5c]
lea eax, [esp + 0x14]
lea ecx, [esp + 0x1c]
push eax
mov eax, dword [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x18]
push edx
push eax
call fcn.0049efb0
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
mov dword [esp + 0x2c], 0x59d408
call fcn.00487f00
mov ecx, dword [esp + 0x40]
mov eax, esi
pop esi
mov edx, edi
pop ebx
pop edi
pop ebp
mov dword fs:[0], ecx
add esp, 0x3c
ret 0x10