Function at 0x49b6ec
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get ntdll base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 8], ebx
test dl, dl
je 0x49b706
add esp, 0xfffffff0
call fcn.00403308
mov byte [ebp - 1], dl
mov esi, eax
xor eax, eax
push ebp
push 0x49c4bd
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, esi
call fcn.00418cc4
lea eax, [esi + 0x54]
mov edx, 0x49c4ec
call fcn.00403ce4
test byte [esi + 0x20], 0x10
je 0x49b76e
xor ecx, ecx
mov dl, 1
mov eax, dword [0x496e7c]
call fcn.00497884
mov ebx, eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x49c500
mov edx, 0x49c514
mov eax, ebx
call fcn.00497918
mov edx, dword [ebp - 8]
lea eax, [esi + 0x5c]
call fcn.00403ce4
mov eax, ebx
call fcn.00402fc8
mov byte [esi + 0x60], 1
mov byte [esi + 0x62], 1
mov dword [esi + 0x64], 0x79e
mov dword [esi + 0x68], 0x10000
mov dl, 1
mov eax, dword [0x498028]
call fcn.00402f98
mov ebx, eax
mov dword [esi + 0x4c], ebx
lea eax, [ebx + 4]
mov edx, 0x49c53c
call fcn.00403ce4
lea eax, [ebx + 8]
mov edx, 0x49c554
call fcn.00403ce4
lea eax, [ebx + 0x10]
mov edx, 0x49c584
call fcn.00403ce4
lea eax, [ebx + 0x14]
mov edx, 0x49c598
call fcn.00403ce4
lea eax, [ebx + 0x18]
mov edx, 0x49c5b4
call fcn.00403ce4
lea eax, [ebx + 0x1c]
mov edx, 0x49c5c8
call fcn.00403ce4
lea eax, [ebx + 0x20]
mov edx, 0x49c614
call fcn.00403ce4
lea eax, [ebx + 0x24]
mov edx, 0x49c628
call fcn.00403ce4
lea eax, [ebx + 0x28]
mov edx, 0x49c63c
call fcn.00403ce4
lea eax, [ebx + 0x2c]
mov edx, 0x49c64c
call fcn.00403ce4
lea eax, [ebx + 0x30]
mov edx, 0x49c660
call fcn.00403ce4
lea eax, [ebx + 0x34]
mov edx, 0x49c678
call fcn.00403ce4
lea eax, [ebx + 0x40]
mov edx, 0x49c690
call fcn.00403ce4
lea eax, [ebx + 0x44]
mov edx, 0x49c6a0
call fcn.00403ce4
lea eax, [ebx + 0x48]
mov edx, 0x49c690
call fcn.00403ce4
lea eax, [ebx + 0x38]
mov edx, 0x49c6b0
call fcn.00403ce4
lea eax, [ebx + 0x3c]
mov edx, 0x49c6d8
call fcn.00403ce4
lea eax, [ebx + 0x4c]
mov edx, 0x49c700
call fcn.00403ce4
lea eax, [ebx + 0x50]
mov edx, 0x49c728
call fcn.00403ce4
lea eax, [ebx + 0x54]
mov edx, 0x49c750
call fcn.00403ce4
lea eax, [ebx + 0x58]
mov edx, 0x49c780
call fcn.00403ce4
lea eax, [ebx + 0x5c]
mov edx, 0x49c794
call fcn.00403ce4
lea eax, [ebx + 0x60]
mov edx, 0x49c7a8
call fcn.00403ce4
lea eax, [ebx + 0x64]
mov edx, 0x49c7c0
call fcn.00403ce4
lea eax, [ebx + 0x68]
mov edx, 0x49c7e4
call fcn.00403ce4
lea eax, [ebx + 0x6c]
mov edx, 0x49c7f8
call fcn.00403ce4
lea eax, [ebx + 0x70]
mov edx, 0x49c830
call fcn.00403ce4
lea eax, [ebx + 0x74]
mov edx, 0x49c848
call fcn.00403ce4
lea eax, [ebx + 0x78]
mov edx, 0x49c86c
call fcn.00403ce4
lea eax, [ebx + 0x7c]
mov edx, 0x49c88c
call fcn.00403ce4
lea eax, [ebx + 0x80]
mov edx, 0x49c8a4
call fcn.00403ce4
lea eax, [ebx + 0x84]
mov edx, 0x49c8c8
call fcn.00403ce4
lea eax, [ebx + 0x88]
mov edx, 0x49c8e8
call fcn.00403ce4
lea eax, [ebx + 0x8c]
mov edx, 0x49c928
call fcn.00403ce4
lea eax, [ebx + 0x90]
mov edx, 0x49c7e4
call fcn.00403ce4
lea eax, [ebx + 0x94]
mov edx, 0x49c938
call fcn.00403ce4
lea eax, [ebx + 0x98]
call fcn.00403c90
lea eax, [ebx + 0x9c]
mov edx, 0x49c948
call fcn.00403ce4
lea eax, [ebx + 0xa0]
mov edx, 0x49c958
call fcn.00403ce4
lea eax, [ebx + 0xa4]
mov edx, 0x49c984
call fcn.00403ce4
lea eax, [ebx + 0xc]
mov edx, 0x49c9c0
call fcn.00403ce4
mov dl, 1
mov eax, dword [0x499c7c]
call fcn.00402f98
mov ebx, eax
mov dword [esi + 0x50], ebx
lea eax, [ebx + 4]
mov edx, 0x49c9cc
call fcn.00403ce4
lea eax, [ebx + 8]
mov edx, 0x49ca00
call fcn.00403ce4
lea eax, [ebx + 0xc]
mov edx, 0x49ca3c
call fcn.00403ce4
lea eax, [ebx + 0x10]
mov edx, 0x49ca64
call fcn.00403ce4
lea eax, [ebx + 0x14]
mov edx, 0x49ca84
call fcn.00403ce4
lea eax, [ebx + 0x18]
mov edx, 0x49caa4
call fcn.00403ce4
lea eax, [ebx + 0x1c]
mov edx, 0x49cad0
call fcn.00403ce4
lea eax, [ebx + 0x20]
mov edx, 0x49caf8
call fcn.00403ce4
lea eax, [ebx + 0x24]
mov edx, 0x49cb38
call fcn.00403ce4
lea eax, [ebx + 0x28]
mov edx, 0x49cb7c
call fcn.00403ce4
lea eax, [ebx + 0x2c]
mov edx, 0x49cba4
call fcn.00403ce4
lea eax, [ebx + 0x30]
mov edx, 0x49cbd4
call fcn.00403ce4
lea eax, [ebx + 0x34]
mov edx, 0x49cc00
call fcn.00403ce4
lea eax, [ebx + 0x38]
mov edx, 0x49cc34
call fcn.00403ce4
lea eax, [ebx + 0x3c]
mov edx, 0x49cc68
call fcn.00403ce4
lea eax, [ebx + 0x40]
mov edx, 0x49ccb8
call fcn.00403ce4
lea eax, [ebx + 0x44]
mov edx, 0x49ccf0
call fcn.00403ce4
lea eax, [ebx + 0x48]
mov edx, 0x49cd28
call fcn.00403ce4
lea eax, [ebx + 0x4c]
mov edx, 0x49cd60
call fcn.00403ce4
lea eax, [ebx + 0x50]
mov edx, 0x49cd9c
call fcn.00403ce4
lea eax, [ebx + 0x54]
mov edx, 0x49cdd8
call fcn.00403ce4
lea eax, [ebx + 0x58]
mov edx, 0x49ce14
call fcn.00403ce4
lea eax, [ebx + 0x5c]
mov edx, 0x49ce50
call fcn.00403ce4
lea eax, [ebx + 0x60]
mov edx, 0x49ce88
call fcn.00403ce4
lea eax, [ebx + 0x64]
mov edx, 0x49cebc
call fcn.00403ce4
lea eax, [ebx + 0x68]
mov edx, 0x49cecc
call fcn.00403ce4
lea eax, [ebx + 0x6c]
mov edx, 0x49ceec
call fcn.00403ce4
lea eax, [ebx + 0x70]
mov edx, 0x49cf0c
call fcn.00403ce4
lea eax, [ebx + 0x74]
mov edx, 0x49cf2c
call fcn.00403ce4
lea eax, [ebx + 0x78]
mov edx, 0x49cf60
call fcn.00403ce4
lea eax, [ebx + 0x7c]
mov edx, 0x49cf84
call fcn.00403ce4
lea eax, [ebx + 0x80]
mov edx, 0x49cf9c
call fcn.00403ce4
lea eax, [ebx + 0x84]
mov edx, 0x49cfc0
call fcn.00403ce4
lea eax, [ebx + 0x88]
mov edx, 0x49cfe8
call fcn.00403ce4
lea eax, [ebx + 0x8c]
mov edx, 0x49d010
call fcn.00403ce4
lea eax, [ebx + 0x90]
mov edx, 0x49d028
call fcn.00403ce4
lea eax, [ebx + 0x94]
mov edx, 0x49d054
call fcn.00403ce4
lea eax, [ebx + 0x98]
mov edx, 0x49d088
call fcn.00403ce4
mov dl, 1
mov eax, dword [0x4988e0]
call fcn.00402f98
mov edi, eax
mov dword [ebx + 0x9c], edi
lea eax, [edi + 4]
mov edx, 0x49d09c
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 8
mov edx, 0x49d0ac
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0xc
mov edx, 0x49d0bc
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x10
mov edx, 0x49d0d0
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x14
mov edx, 0x49d0e8
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x18
mov edx, 0x49d0f8
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x1c
mov edx, 0x49d10c
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x20
mov edx, 0x49d11c
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x24
mov edx, 0x49d12c
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x28
mov edx, 0x49d13c
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x2c
mov edx, 0x49d14c
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x30
mov edx, 0x49d15c
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x34
mov edx, 0x49d16c
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x38
mov edx, 0x49d17c
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x3c
mov edx, 0x49d190
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x40
mov edx, 0x49d1a0
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x44
mov edx, 0x49d1b4
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x48
mov edx, 0x49d1c8
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x4c
mov edx, 0x49d1dc
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x50
mov edx, 0x49d1f4
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x54
mov edx, 0x49d204
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x5c
mov edx, 0x49d214
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x60
mov edx, 0x49d224
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x64
mov edx, 0x49d238
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x68
mov edx, 0x49d24c
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x6c
mov edx, 0x49d260
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x70
mov edx, 0x49d274
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x78
mov edx, 0x49d284
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x7c
mov edx, 0x49d294
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x80
mov edx, 0x49d2ac
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x84
mov edx, 0x49d2c0
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x74
mov edx, 0x49d2d0
call fcn.00403ce4
mov eax, dword [ebx + 0x9c]
add eax, 0x88
mov edx, 0x49d2e0
call fcn.00403ce4
mov dl, 1
mov eax, dword [0x498ff0]
call fcn.00402f98
mov edi, eax
mov dword [ebx + 0xa0], edi
lea eax, [edi + 4]
mov edx, 0x49d11c
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 8
mov edx, 0x49d214
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0xc
mov edx, 0x49d13c
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x10
mov edx, 0x49d14c
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x14
mov edx, 0x49d15c
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x18
mov edx, 0x49d284
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x1c
mov edx, 0x49d294
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x20
mov edx, 0x49d2f0
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x24
mov edx, 0x49d300
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x28
mov edx, 0x49d310
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x2c
mov edx, 0x49d324
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x30
mov edx, 0x49d2c0
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x34
mov edx, 0x49d338
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x38
mov edx, 0x49d348
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x3c
mov edx, 0x49d35c
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x44
mov edx, 0x49d378
call fcn.00403ce4
mov eax, dword [ebx + 0xa0]
add eax, 0x40
mov edx, 0x49d1dc
call fcn.00403ce4
lea eax, [ebx + 0xac]
mov edx, 0x49d394
call fcn.00403ce4
lea eax, [ebx + 0xb0]
mov edx, 0x49d3a0
call fcn.00403ce4
mov dl, 1
mov eax, dword [0x4993e4]
call fcn.00402f98
mov edi, eax
mov dword [ebx + 0xa4], edi
lea eax, [edi + 4]
mov edx, 0x49d3ac
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 8
mov edx, 0x49d3c0
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0xc
mov edx, 0x49d3d4
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x10
mov edx, 0x49d3e4
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x14
mov edx, 0x49d3f4
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x18
mov edx, 0x49d408
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x28
mov edx, 0x49d41c
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x2c
mov edx, 0x49d42c
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x30
mov edx, 0x49d43c
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x34
mov edx, 0x49d44c
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x38
mov edx, 0x49d464
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x1c
mov edx, 0x49d470
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x20
mov edx, 0x49d48c
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x24
mov edx, 0x49d4a8
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x3c
mov edx, 0x49d4d4
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x40
mov edx, 0x49d4fc
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x44
mov edx, 0x49d50c
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x48
mov edx, 0x49d51c
call fcn.00403ce4
mov eax, dword [ebx + 0xa4]
add eax, 0x4c
mov edx, 0x49d52c
call fcn.00403ce4
mov dl, 1
mov eax, dword [0x4999b0]
call fcn.00402f98
mov edi, eax
mov dword [ebx + 0xa8], edi
lea eax, [edi + 4]
mov edx, 0x49d53c
call fcn.00403ce4
mov eax, dword [ebx + 0xa8]
add eax, 8
mov edx, 0x49d548
call fcn.00403ce4
mov eax, dword [ebx + 0xa8]
add eax, 0xc
mov edx, 0x49d564
call fcn.00403ce4
mov eax, dword [ebx + 0xa8]
add eax, 0x10
mov edx, 0x49d570
call fcn.00403ce4
mov eax, dword [ebx + 0xa8]
add eax, 0x14
mov edx, 0x49d580
call fcn.00403ce4
mov eax, dword [ebx + 0xa8]
add eax, 0x18
mov edx, 0x49d594
call fcn.00403ce4
mov eax, dword [ebx + 0xa8]
add eax, 0x1c
mov edx, 0x49d5b4
call fcn.00403ce4
mov eax, dword [ebx + 0xa8]
add eax, 0x20
mov edx, 0x49d5e0
call fcn.00403ce4
mov eax, dword [ebx + 0xa8]
add eax, 0x24
mov edx, 0x49d600
call fcn.00403ce4
mov eax, dword [ebx + 0xa8]
add eax, 0x28
mov edx, 0x49d628
call fcn.00403ce4
mov dl, 1
mov eax, dword [0x49b150]
call fcn.0049db98
mov dword [esi + 0x28], eax
mov dl, 1
mov eax, dword [0x49b094]
call fcn.00402f98
mov ebx, eax
mov dword [esi + 0x24], ebx
mov byte [ebx + 4], 1
mov dl, 1
mov eax, dword [0x49a75c]
call fcn.00402f98
mov ebx, eax
mov dword [esi + 0x34], ebx
lea eax, [ebx + 4]
mov edx, 0x49d644
call fcn.00403ce4
lea eax, [ebx + 8]
mov edx, 0x49d658
call fcn.00403ce4
mov dl, 1
mov eax, dword [0x49a55c]
call fcn.00402f98
mov ebx, eax
mov dword [esi + 0x2c], ebx
lea eax, [ebx + 4]
mov edx, 0x49d674
call fcn.00403ce4
lea eax, [ebx + 8]
mov edx, 0x49d690
call fcn.00403ce4
lea eax, [ebx + 0xc]
mov edx, 0x49d6a8
call fcn.00403ce4
lea eax, [ebx + 0x10]
mov edx, 0x49d6bc
call fcn.00403ce4
lea eax, [ebx + 0x14]
mov edx, 0x49d6cc
call fcn.00403ce4
lea eax, [ebx + 0x18]
mov edx, 0x49d6d8
call fcn.00403ce4
lea eax, [ebx + 0x1c]
mov edx, 0x49d708
call fcn.00403ce4
mov dl, 1
mov eax, dword [0x49a864]
call fcn.00402f98
mov ebx, eax
mov dword [esi + 0x30], ebx
lea eax, [ebx + 4]
mov edx, 0x49c7a8
call fcn.00403ce4
lea eax, [ebx + 8]
mov edx, 0x49d738
call fcn.00403ce4
lea eax, [ebx + 0xc]
mov edx, 0x49d750
call fcn.00403ce4
lea eax, [ebx + 0x10]
mov edx, 0x49c830
call fcn.00403ce4
lea eax, [ebx + 0x14]
mov edx, 0x49c848
call fcn.00403ce4
lea eax, [ebx + 0x18]
mov edx, 0x49d768
call fcn.00403ce4
lea eax, [ebx + 0x1c]
mov edx, 0x49c948
call fcn.00403ce4
lea eax, [ebx + 0x20]
mov edx, 0x49d788
call fcn.00403ce4
lea eax, [ebx + 0x24]
mov edx, 0x49d798
call fcn.00403ce4
lea eax, [ebx + 0x28]
mov edx, 0x49d7a8
call fcn.00403ce4
lea eax, [ebx + 0x2c]
mov edx, 0x49d7b8
call fcn.00403ce4
lea eax, [ebx + 0x30]
mov edx, 0x49c7c0
call fcn.00403ce4
lea eax, [ebx + 0x34]
mov edx, 0x49c8a4
call fcn.00403ce4
lea eax, [ebx + 0x38]
mov edx, 0x49d7c8
call fcn.00403ce4
lea eax, [ebx + 0x3c]
mov edx, 0x49d800
call fcn.00403ce4
lea eax, [ebx + 0x40]
mov edx, 0x49d840
call fcn.00403ce4
lea eax, [ebx + 0x44]
mov edx, 0x49d878
call fcn.00403ce4
lea eax, [ebx + 0x48]
mov edx, 0x49d894
call fcn.00403ce4
lea eax, [ebx + 0x4c]
mov edx, 0x49d8c0
call fcn.00403ce4
mov dl, 1
mov eax, dword [0x497d24]
call fcn.00402f98
mov ebx, eax
mov dword [esi + 0x48], ebx
lea eax, [ebx + 4]
mov edx, 0x49d8e8
call fcn.00403ce4
lea eax, [ebx + 8]
mov edx, 0x49d910
call fcn.00403ce4
lea eax, [ebx + 0xc]
mov edx, 0x49d938
call fcn.00403ce4
lea eax, [ebx + 0x10]
mov edx, 0x49d954
call fcn.00403ce4
lea eax, [ebx + 0x14]
mov edx, 0x49d974
call fcn.00403ce4
lea eax, [ebx + 0x18]
mov edx, 0x49d9b8
call fcn.00403ce4
lea eax, [ebx + 0x1c]
mov edx, 0x49d9fc
call fcn.00403ce4
lea eax, [ebx + 0x20]
mov edx, 0x49da18
call fcn.00403ce4
lea eax, [ebx + 0x24]
mov edx, 0x49da40
call fcn.00403ce4
lea eax, [ebx + 0x28]
mov edx, 0x49da78
call fcn.00403ce4
lea eax, [ebx + 0x2c]
mov edx, 0x49d9b8
call fcn.00403ce4
mov byte [esi + 0x38], 1
lea eax, [esi + 0x3c]
mov edx, 0x49daac
call fcn.00403ce4
lea eax, [esi + 0x40]
mov edx, 0x49d7a8
call fcn.00403ce4
lea eax, [esi + 0x58]
call fcn.00403c90
mov byte [esi + 0x61], 0
mov al, byte [0x49dab0]
mov byte [esi + 0x39], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49c4c4
lea eax, [ebp - 8]
call fcn.00403c90
ret