Function at 0x49c970
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x556390
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
push esi
push edi
mov eax, dword [ebp + 0x44]
mov edi, dword [0x5aad5c]
cmp eax, ebx
mov dword [esp + 0x1c], ebp
jne 0x49c9a7
mov edi, dword [0x5aad58]
cmp eax, ebx
je 0x49c9b3
mov edx, dword [0x5aad38]
jmp 0x49c9c6
mov eax, dword [ebp + 0x40]
mov edx, dword [0x5aad34]
cmp eax, ebx
je 0x49c9c6
mov edx, dword [0x5aad44]
mov eax, dword [ebp]
or ecx, 0xffffffff
mov eax, dword [eax - 8]
push eax
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, edx
push ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
call fcn.004e54f0
add esp, 8
push eax
call fcn.004e54f0
mov esi, dword [esp + 0x38]
add esp, 8
mov dword [esp + 0x30], ebx
mov dword [esi], eax
test ebx, ebx
jne 0x49ca0b
mov ecx, ebp
call fcn.004d3ad0
jmp 0x49ca26
cmp ebx, 1
jne 0x49ca17
mov eax, dword [0x5aad40]
jmp 0x49ca26
mov eax, dword [0x5aad7c]
cmp ebx, 2
je 0x49ca26
mov eax, dword [0x5aad3c]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x30]
not ecx
dec ecx
cmp eax, ecx
jge 0x49ca3e
mov dword [esp + 0x30], ecx
inc ebx
cmp ebx, 4
jl 0x49c9fe
mov ecx, dword [esp + 0x30]
mov eax, 0xb
mov dword [esi + 4], ecx
mov ecx, dword [0x5b15cc]
cdq
idiv ecx
mov ebx, eax
mov eax, 0xb
cdq
idiv ecx
mov dword [esp + 0x30], ebx
test edx, edx
je 0x49ca70
inc ebx
mov dword [esp + 0x30], ebx
mov edi, dword [0x5aad80]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edx, ecx
or ecx, 0xffffffff
mov dword [esi + 8], edx
mov edi, dword [0x5aad50]
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp edx, ecx
jge 0x49ca9a
mov dword [esi + 8], ecx
mov edi, dword [0x5aad40]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esi + 8]
not ecx
dec ecx
cmp eax, ecx
jge 0x49cab4
mov dword [esi + 8], ecx
cmp dword [esi + 8], ebx
jge 0x49cabc
mov dword [esi + 8], ebx
mov edi, dword [0x5aad70]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esi + 0xc], ecx
mov eax, dword [0x5ada84]
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], 0
mov dword [esp + 0x14], eax
mov byte [esp + 0x28], 1
xor eax, eax
lea ebx, [ebp + 0xc]
mov ecx, eax
push 0
inc eax
push ecx
mov ecx, ebx
mov dword [esp + 0x20], eax
call fcn.004d73d0
mov edi, eax
test edi, edi
je 0x49cbc3
mov eax, dword [edi]
mov ecx, dword [ebp + 0x50]
push 0xffff
push 0
lea edx, [esp + 0x18]
push 0
push edx
push eax
call fcn.00454b30
test eax, eax
jne 0x49cb3c
mov edx, dword [edi]
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [ebp + 0x50]
push edx
add ecx, 0x280
call fcn.004d4a00
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 4]
mov eax, dword [eax - 8]
push eax
push ecx
call fcn.004e54f0
mov dword [esi + 4], eax
lea edx, [esp + 0x1c]
lea eax, [edi + 6]
push edx
push eax
call fcn.004ce180
mov ecx, dword [esp + 0x24]
mov edx, dword [esi + 8]
mov eax, dword [ecx - 8]
push eax
push edx
call fcn.004e54f0
add esp, 0x18
mov dword [esi + 8], eax
mov eax, dword [ebx]
mov ecx, ebx
push edi
call dword [eax + 0x14]
mov ebp, eax
or ecx, 0xffffffff
mov edi, ebp
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
mov ecx, dword [esi]
push edi
push ecx
call fcn.004e54f0
mov dword [esi], eax
lea edi, [edi + ebp + 1]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edx, dword [esi + 0xc]
not ecx
dec ecx
push ecx
push edx
call fcn.004e54f0
mov ebp, dword [esp + 0x2c]
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x28]
add esp, 0x10
jmp 0x49caee
mov eax, dword [esp + 0x30]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 0xc]
add ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [ebp + 4]
mov eax, dword [ecx - 8]
push eax
push edx
call fcn.004e54f0
add esp, 8
lea ecx, [esp + 0x14]
mov dword [esi + 0xc], eax
mov byte [esp + 0x28], 0
call fcn.00527eff
lea ecx, [esp + 0x10]
mov dword [esp + 0x28], 0xffffffff
call fcn.00527eff
mov ecx, dword [esp + 0x20]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret 4