Function at 0x488c80
Capabilities:
Enumerate pe sections
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov dword [ebp - 0x18], eax
push 0x8000
push 4
call fcn.0049cf60
add esp, 8
mov dword [ebp - 8], eax
push 5
call fcn.0049dbf0
pop ecx
inc eax
push eax
call fcn.004a90c0
pop ecx
mov dword [ebp - 0x14], eax
mov word [ebp - 0xa], 0
push 2
call fcn.0049dbf0
pop ecx
mov dword [ebp - 0x1c], eax
push 3
call fcn.0049dbf0
pop ecx
mov edx, dword [ebp - 0x1c]
lea eax, [eax + edx*2]
mov word [ebp - 0xe], ax
mov eax, dword [ebp - 8]
test eax, eax
je 0x488cf1
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
mov word [ebp - 0xa], ax
movzx eax, word [0x7beb00]
inc eax
mov word [0x7beb00], ax
mov word [ebp - 0xc], ax
mov eax, dword [0x7beafc]
test eax, eax
je 0x488d29
movzx eax, word [ebp - 0xc]
shl eax, 6
push eax
mov eax, dword [0x7beafc]
push eax
call fcn.0049b5d0
add esp, 8
mov dword [0x7beafc], eax
jmp 0x488d36
push 0x40
call fcn.0049b580
pop ecx
mov dword [0x7beafc], eax
movzx eax, word [ebp - 0xc]
shl eax, 6
mov edx, dword [0x7beafc]
lea ebx, [edx + eax - 0x40]
push edi
mov edi, ebx
push edi
xor eax, eax
mov ecx, 0x10
rep stosd dword es:[edi], eax
pop eax
pop edi
push 1
call fcn.0049d280
pop ecx
inc eax
push eax
call fcn.0049b580
pop ecx
mov dword [ebx], eax
push 1
call fcn.0049d1e0
pop ecx
mov dword [ebp - 0x20], eax
push 1
call fcn.0049d280
pop ecx
inc eax
push eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebx]
push eax
call fcn.00531d20
add esp, 0xc
movzx eax, word [ebp - 0xa]
test eax, eax
je 0x489311
mov dword [ebp - 0x28], 0
push 2
call fcn.0049dbf0
pop ecx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x30], 0
mov word [ebp - 0x32], 0
mov word [ebp - 4], 1
jmp 0x488dfd
movzx eax, word [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
call fcn.004a3160
add esp, 8
movzx eax, ax
shl eax, 6
mov edx, dword [0x7beafc]
lea eax, [edx + eax - 0x40]
mov dword [ebp - 0x30], eax
movzx eax, word [eax + 0xc]
add dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x30]
movzx eax, word [eax + 4]
add dword [ebp - 0x40], eax
movzx eax, word [ebp - 4]
inc eax
mov word [ebp - 4], ax
movzx eax, word [ebp - 4]
movzx edx, word [ebp - 0xa]
cmp eax, edx
jle 0x488dbf
mov eax, dword [ebp - 0x40]
mov word [ebx + 4], ax
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x488e39
shl eax, 3
push eax
call fcn.0049b580
pop ecx
mov dword [ebx + 0x30], eax
mov eax, dword [ebp - 0x40]
shl eax, 3
push eax
push 0
mov eax, dword [ebx + 0x30]
push eax
call fcn.00531d50
add esp, 0xc
lea eax, [ebx + 0x12]
movzx edx, word [eax]
mov ecx, dword [ebp - 0x30]
movzx ecx, word [ecx + 0x12]
and ecx, 0xfffffffe
or edx, ecx
mov word [eax], dx
movzx eax, word [ebp - 0xe]
add dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov word [ebx + 0xe], ax
mov eax, dword [ebp - 0x28]
shl eax, 3
push eax
call fcn.0049b580
pop ecx
mov dword [ebx + 0x34], eax
mov eax, 0x38
mul dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
push eax
call fcn.0049b580
pop ecx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x28]
push eax
push 0
mov eax, dword [ebx + 8]
push eax
call fcn.00531d50
add esp, 0xc
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x28], 0
mov word [ebp - 4], 1
jmp 0x4892e1
movzx eax, word [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
call fcn.004a3160
add esp, 8
movzx eax, ax
shl eax, 6
mov edx, dword [0x7beafc]
lea eax, [edx + eax - 0x40]
mov dword [ebp - 0x30], eax
movzx eax, word [ebp - 4]
cmp eax, 1
jne 0x488f62
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x488f06
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x1c]
mov dword [ebx + 0x1c], eax
lea eax, [ebx + 0x12]
movzx edx, word [eax]
or edx, 0x4000
mov word [eax], dx
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x20]
mov dword [ebx + 0x20], eax
push 0
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x14]
push eax
call fcn.004a4100
add esp, 8
mov dword [ebx + 0x14], eax
push 0
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x18]
push eax
call fcn.004a4100
add esp, 8
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0x30]
mov ax, word [eax + 0x10]
mov word [ebx + 0x10], ax
mov eax, dword [ebp - 0x30]
movzx edx, word [eax + 0xc]
shl edx, 3
push edx
mov eax, dword [eax + 0x34]
push eax
mov eax, dword [ebx + 0x34]
push eax
call fcn.00531d20
add esp, 0xc
jmp 0x4890db
mov word [ebp - 0x4a], 0
mov eax, dword [ebx + 0x14]
mov eax, dword [eax + 8]
movzx eax, word [eax + 4]
mov dword [ebp - 0x38], eax
mov eax, dword [ebx + 0x18]
mov eax, dword [eax + 8]
movzx eax, word [eax + 4]
mov dword [ebp - 0x3c], eax
push 0
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x14]
push eax
call fcn.004a4100
add esp, 8
mov dword [ebp - 0x48], eax
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
mov word [ebp - 0x44], ax
mov eax, dword [ebx + 0x14]
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
mov word [ebp - 0x4c], ax
movzx eax, word [ebp - 0x44]
movzx edx, word [ebp - 0x4c]
add eax, edx
mov word [ebp - 0x44], ax
movzx eax, word [ebp - 0x44]
push eax
mov eax, dword [ebx + 0x14]
push eax
call fcn.004a2950
add esp, 8
movzx eax, word [ebp - 0x4c]
inc eax
mov word [ebp - 0x42], ax
jmp 0x48900b
movzx eax, word [ebp - 0x42]
push eax
mov eax, dword [ebx + 0x14]
push eax
call fcn.004a30e0
add esp, 8
push eax
movzx eax, word [ebp - 0x4a]
inc eax
mov word [ebp - 0x4a], ax
movzx eax, ax
push eax
mov eax, dword [ebp - 0x48]
push eax
call fcn.004a2d10
add esp, 0xc
movzx eax, word [ebp - 0x42]
inc eax
mov word [ebp - 0x42], ax
movzx eax, word [ebp - 0x42]
movzx edx, word [ebp - 0x44]
cmp eax, edx
jle 0x488fd7
mov eax, dword [ebp - 0x48]
push eax
call fcn.0049f7d0
pop ecx
lea eax, [ebx + 0x10]
movzx edx, word [eax]
mov ecx, dword [ebp - 0x30]
movzx ecx, word [ecx + 0x10]
add edx, ecx
mov word [eax], dx
push 0
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x18]
push eax
call fcn.004a4100
add esp, 8
mov dword [ebp - 0x48], eax
mov eax, dword [ebx + 0x18]
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
mov word [ebp - 0x44], ax
movzx eax, word [ebp - 0x44]
movzx edx, word [ebp - 0x4c]
add eax, edx
mov word [ebp - 0x44], ax
movzx eax, word [ebp - 0x44]
push eax
mov eax, dword [ebx + 0x18]
push eax
call fcn.004a2950
add esp, 8
mov word [ebp - 0x4a], 0
movzx eax, word [ebp - 0x4c]
inc eax
mov word [ebp - 0x42], ax
jmp 0x4890c5
movzx eax, word [ebp - 0x42]
push eax
mov eax, dword [ebx + 0x18]
push eax
call fcn.004a30e0
add esp, 8
push eax
movzx eax, word [ebp - 0x4a]
inc eax
mov word [ebp - 0x4a], ax
movzx eax, ax
push eax
mov eax, dword [ebp - 0x48]
push eax
call fcn.004a2d10
add esp, 0xc
movzx eax, word [ebp - 0x42]
inc eax
mov word [ebp - 0x42], ax
movzx eax, word [ebp - 0x42]
movzx edx, word [ebp - 0x44]
cmp eax, edx
jle 0x489091
mov eax, dword [ebp - 0x48]
push eax
call fcn.0049f7d0
pop ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
movzx eax, word [eax + 0xc]
inc eax
mov word [ebp - 2], ax
jmp 0x4892a7
lea eax, [ebp - 0x2c]
push eax
push ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
push eax
call fcn.00487540
add esp, 0xc
mov edi, eax
test di, di
je 0x48912d
movzx eax, di
imul eax, eax, 0x38
mov edx, dword [ebx + 8]
lea esi, [edx + eax - 0x38]
push 0x38
mov eax, dword [ebp - 0x24]
push eax
push esi
call fcn.00531d20
add esp, 0xc
jmp 0x489171
lea eax, [ebx + 0xc]
movzx edx, word [eax]
inc edx
mov word [eax], dx
movzx eax, word [ebp - 0x28]
imul eax, eax, 0x38
mov edx, dword [ebx + 8]
lea esi, [edx + eax]
push 0x38
mov eax, dword [ebp - 0x24]
push eax
push esi
call fcn.00531d20
add esp, 0xc
add dword [ebp - 0x28], 1
mov eax, dword [ebp - 0x28]
mov edi, eax
movzx eax, word [ebp - 0x28]
push eax
push ebx
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [esi]
push eax
call fcn.004875d0
add esp, 0x10
mov eax, dword [esi + 4]
lea edx, [0x48b620]
cmp eax, edx
je 0x489188
lea edx, [0x48b5c0]
cmp eax, edx
jne 0x489199
lea eax, [esi + 8]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x38]
add edx, ecx
mov word [eax], dx
jmp 0x4891dd
mov eax, dword [esi + 4]
lea edx, [0x48b7d0]
cmp eax, edx
je 0x4891b0
lea edx, [0x48b770]
cmp eax, edx
jne 0x4891c1
lea eax, [esi + 8]
movzx edx, word [eax]
movzx ecx, word [ebx + 6]
add edx, ecx
mov word [eax], dx
jmp 0x4891dd
mov eax, dword [esi + 4]
lea edx, [0x48b480]
cmp eax, edx
jne 0x4891dd
lea eax, [esi + 8]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x3c]
add edx, ecx
mov word [eax], dx
lea eax, [esi + 0xe]
movzx edx, word [eax]
or edx, 0x100
mov word [eax], dx
mov eax, dword [esi + 0x10]
test eax, eax
je 0x48929b
mov eax, dword [eax]
and eax, 0x8000
je 0x48921a
push 0
lea eax, [esi + 0x10]
mov dword [ebp - 0x44], eax
mov edx, dword [eax]
push edx
call fcn.004a4100
add esp, 8
mov edx, dword [ebp - 0x44]
mov dword [edx], eax
jmp 0x489252
mov eax, dword [esi + 0x10]
mov eax, dword [eax]
and eax, 4
je 0x48923e
push 0
lea eax, [esi + 0x10]
mov dword [ebp - 0x44], eax
mov edx, dword [eax]
push edx
call fcn.00494710
add esp, 8
mov edx, dword [ebp - 0x44]
mov dword [edx], eax
jmp 0x489252
lea eax, [esi + 0x10]
mov dword [ebp - 0x44], eax
mov edx, dword [eax]
push edx
call fcn.0049f730
pop ecx
mov edx, dword [ebp - 0x44]
mov dword [edx], eax
mov eax, dword [esi + 4]
lea edx, [0x48b7d0]
cmp eax, edx
je 0x489269
lea edx, [0x48b770]
cmp eax, edx
jne 0x48929b
movzx eax, word [ebp - 0x32]
mov edx, dword [ebx + 0x30]
mov cx, word [esi + 8]
mov word [edx + eax*8], cx
movzx eax, word [ebp - 0x32]
mov edx, dword [ebx + 0x30]
mov word [edx + eax*8 + 2], di
movzx eax, word [ebp - 0x32]
mov edx, dword [ebx + 0x30]
mov ecx, dword [esi + 0x10]
mov dword [edx + eax*8 + 4], ecx
movzx eax, word [ebp - 0x32]
inc eax
mov word [ebp - 0x32], ax
lea esi, [esi + 0x38]
mov eax, dword [ebp - 0x24]
lea eax, [eax + 0x38]
mov dword [ebp - 0x24], eax
movzx eax, word [ebp - 2]
dec eax
mov word [ebp - 2], ax
movzx eax, ax
test eax, eax
jne 0x4890f5
lea eax, [ebx + 0x28]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx + 0x28]
or dword [eax], edx
lea eax, [ebx + 6]
movzx edx, word [eax]
mov ecx, dword [ebp - 0x30]
movzx ecx, word [ecx + 4]
add edx, ecx
mov word [eax], dx
movzx eax, word [ebp - 4]
inc eax
mov word [ebp - 4], ax
movzx eax, word [ebp - 4]
movzx edx, word [ebp - 0xa]
cmp eax, edx
jle 0x488eb3
mov eax, dword [ebp - 0x28]
mov word [ebx + 0xc], ax
mov ax, word [ebp - 0x32]
mov word [ebx + 0x2c], ax
lea eax, [ebx + 0x12]
movzx edx, word [eax]
and edx, 0xfffffffe
mov word [eax], dx
jmp 0x4893b7
push 2
call fcn.0049dbf0
pop ecx
mov word [ebx + 4], ax
movzx eax, word [ebp - 0xe]
test eax, eax
jne 0x48932b
mov word [ebp - 0xe], 1
mov ax, word [ebp - 0xe]
mov word [ebx + 0xe], ax
mov eax, 0x38
movzx edx, word [ebp - 0xe]
mul edx
push eax
call fcn.0049b580
pop ecx
mov dword [ebx + 8], eax
mov eax, 0x38
movzx edx, word [ebp - 0xe]
mul edx
push eax
push 0
mov eax, dword [ebx + 8]
push eax
call fcn.00531d50
add esp, 0xc
movzx eax, word [ebp - 0xe]
shl eax, 3
push eax
call fcn.0049b580
pop ecx
mov dword [ebx + 0x34], eax
push 0
call fcn.0049f7f0
pop ecx
mov dword [ebx + 0x14], eax
push 0
call fcn.0049f7f0
pop ecx
mov dword [ebx + 0x18], eax
cmp word [ebx + 4], 0
je 0x4893b7
movzx eax, word [ebx + 4]
shl eax, 3
push eax
call fcn.0049b580
pop ecx
mov dword [ebx + 0x30], eax
movzx eax, word [ebx + 4]
shl eax, 3
push eax
push 0
mov eax, dword [ebx + 0x30]
push eax
call fcn.00531d50
add esp, 0xc
push 0x699a88
mov eax, dword [ebx]
push eax
call fcn.00534750
add esp, 8
test eax, eax
jne 0x48942b
push 0x48b770
movzx eax, word [ebp - 0xc]
push eax
call fcn.00488c20
add esp, 8
movzx eax, ax
test eax, eax
je 0x48941c
push 1
call fcn.0049d010
pop ecx
mov dword [ebp - 0x24], eax
push 2
call fcn.0049d010
pop ecx
push eax
mov eax, dword [ebp - 0x24]
push eax
push 2
push str.__CLSASSOCTYPE
push str.Scalar_class_can_not_contain_any_datas
push 0xbbd
push 1
call fcn.00492870
add esp, 0x1c
jmp 0x4897c3
mov ax, word [ebp - 0xc]
mov word [0x7beb24], ax
jmp 0x4897c3
push 0x699a78
mov eax, dword [ebx]
push eax
call fcn.00534750
add esp, 8
test eax, eax
jne 0x48949f
push 0x48b770
movzx eax, word [ebp - 0xc]
push eax
call fcn.00488c20
add esp, 8
movzx eax, ax
test eax, eax
je 0x489490
push 1
call fcn.0049d010
pop ecx
mov dword [ebp - 0x24], eax
push 2
call fcn.0049d010
pop ecx
push eax
mov eax, dword [ebp - 0x24]
push eax
push 2
push str.__CLSASSOCTYPE
push str.Scalar_class_can_not_contain_any_datas
push 0xbbd
push 1
call fcn.00492870
add esp, 0x1c
jmp 0x4897c3
mov ax, word [ebp - 0xc]
mov word [0x7beb26], ax
jmp 0x4897c3
push str.CHARACTER
mov eax, dword [ebx]
push eax
call fcn.00534750
add esp, 8
test eax, eax
jne 0x489513
push 0x48b770
movzx eax, word [ebp - 0xc]
push eax
call fcn.00488c20
add esp, 8
movzx eax, ax
test eax, eax
je 0x489504
push 1
call fcn.0049d010
pop ecx
mov dword [ebp - 0x24], eax
push 2
call fcn.0049d010
pop ecx
push eax
mov eax, dword [ebp - 0x24]
push eax
push 2
push str.__CLSASSOCTYPE
push str.Scalar_class_can_not_contain_any_datas
push 0xbbd
push 1
call fcn.00492870
add esp, 0x1c
jmp 0x4897c3
mov ax, word [ebp - 0xc]
mov word [0x7beb28], ax
jmp 0x4897c3
push 0x699a6c
mov eax, dword [ebx]
push eax
call fcn.00534750
add esp, 8
test eax, eax
jne 0x489587
push 0x48b770
movzx eax, word [ebp - 0xc]
push eax
call fcn.00488c20
add esp, 8
movzx eax, ax
test eax, eax
je 0x489578
push 1
call fcn.0049d010
pop ecx
mov dword [ebp - 0x24], eax
push 2
call fcn.0049d010
pop ecx
push eax
mov eax, dword [ebp - 0x24]
push eax
push 2
push str.__CLSASSOCTYPE
push str.Scalar_class_can_not_contain_any_datas
push 0xbbd
push 1
call fcn.00492870
add esp, 0x1c
jmp 0x4897c3
mov ax, word [ebp - 0xc]
mov word [0x7beb2a], ax
jmp 0x4897c3
push str.LOGICAL
mov eax, dword [ebx]
push eax
call fcn.00534750
add esp, 8
test eax, eax
jne 0x4895fb
push 0x48b770
movzx eax, word [ebp - 0xc]
push eax
call fcn.00488c20
add esp, 8
movzx eax, ax
test eax, eax
je 0x4895ec
push 1
call fcn.0049d010
pop ecx
mov dword [ebp - 0x24], eax
push 2
call fcn.0049d010
pop ecx
push eax
mov eax, dword [ebp - 0x24]
push eax
push 2
push str.__CLSASSOCTYPE
push str.Scalar_class_can_not_contain_any_datas
push 0xbbd
push 1
call fcn.00492870
add esp, 0x1c
jmp 0x4897c3
mov ax, word [ebp - 0xc]
mov word [0x7beb2c], ax
jmp 0x4897c3
push 0x699a8e
mov eax, dword [ebx]
push eax
call fcn.00534750
add esp, 8
test eax, eax
jne 0x48966f
push 0x48b770
movzx eax, word [ebp - 0xc]
push eax
call fcn.00488c20
add esp, 8
movzx eax, ax
test eax, eax
je 0x489660
push 1
call fcn.0049d010
pop ecx
mov dword [ebp - 0x24], eax
push 2
call fcn.0049d010
pop ecx
push eax
mov eax, dword [ebp - 0x24]
push eax
push 2
push str.__CLSASSOCTYPE
push str.Scalar_class_can_not_contain_any_datas
push 0xbbd
push 1
call fcn.00492870
add esp, 0x1c
jmp 0x4897c3
mov ax, word [ebp - 0xc]
mov word [0x7beb2e], ax
jmp 0x4897c3
push str.NUMERIC
mov eax, dword [ebx]
push eax
call fcn.00534750
add esp, 8
test eax, eax
jne 0x4896e3
push 0x48b770
movzx eax, word [ebp - 0xc]
push eax
call fcn.00488c20
add esp, 8
movzx eax, ax
test eax, eax
je 0x4896d4
push 1
call fcn.0049d010
pop ecx
mov dword [ebp - 0x24], eax
push 2
call fcn.0049d010
pop ecx
push eax
mov eax, dword [ebp - 0x24]
push eax
push 2
push str.__CLSASSOCTYPE
push str.Scalar_class_can_not_contain_any_datas
push 0xbbd
push 1
call fcn.00492870
add esp, 0x1c
jmp 0x4897c3
mov ax, word [ebp - 0xc]
mov word [0x7beb30], ax
jmp 0x4897c3
push str.POINTER
mov eax, dword [ebx]
push eax
call fcn.00534750
add esp, 8
test eax, eax
jne 0x489757
push 0x48b770
movzx eax, word [ebp - 0xc]
push eax
call fcn.00488c20
add esp, 8
movzx eax, ax
test eax, eax
je 0x489748
push 1
call fcn.0049d010
pop ecx
mov dword [ebp - 0x24], eax
push 2
call fcn.0049d010
pop ecx
push eax
mov eax, dword [ebp - 0x24]
push eax
push 2
push str.__CLSASSOCTYPE
push str.Scalar_class_can_not_contain_any_datas
push 0xbbd
push 1
call fcn.00492870
add esp, 0x1c
jmp 0x4897c3
mov ax, word [ebp - 0xc]
mov word [0x7beb32], ax
jmp 0x4897c3
push 0x699a4f
mov eax, dword [ebx]
push eax
call fcn.00534750
add esp, 8
test eax, eax
jne 0x4897c3
push 0x48b770
movzx eax, word [ebp - 0xc]
push eax
call fcn.00488c20
add esp, 8
movzx eax, ax
test eax, eax
je 0x4897b9
push 1
call fcn.0049d010
pop ecx
mov dword [ebp - 0x24], eax
push 2
call fcn.0049d010
pop ecx
push eax
mov eax, dword [ebp - 0x24]
push eax
push 2
push str.__CLSASSOCTYPE
push str.Scalar_class_can_not_contain_any_datas
push 0xbbd
push 1
call fcn.00492870
add esp, 0x1c
jmp 0x4897c3
mov ax, word [ebp - 0xc]
mov word [0x7beb34], ax
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x4897d2
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov dword [ebx + 0x24], eax
movzx eax, word [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x18]
lea eax, [eax + 0x10]
push eax
call fcn.004a0410
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret