Function at 0x497ab0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6a877c
mov eax, dword fs:[0]
push eax
sub esp, 0x594
mov eax, dword [0x7e2670]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4e4], ecx
push 0
mov ecx, dword [ebp - 0x4e4]
call fcn.00404810
push eax
call fcn.0047bec0
add esp, 8
movzx eax, al
test eax, eax
jne 0x497cad
push 1
push 3
lea ecx, [ebp - 0x2fc]
call fcn.00470ce0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2fc]
test ecx, ecx
je 0x497b33
lea edx, [ebp - 0x2fc]
add edx, 0x10
mov dword [ebp - 0x4e8], edx
jmp 0x497b3d
mov dword [ebp - 0x4e8], 0
push str.the_uncompress_package_file__s_is_not_exist_FUNC:_s
mov eax, dword [ebp - 0x4e8]
push eax
call fcn.0040a270
add esp, 8
mov ecx, 1
test ecx, ecx
je 0x497c36
lea edx, [ebp - 0x2fc]
test edx, edx
je 0x497b79
lea eax, [ebp - 0x2fc]
add eax, 0x10
mov dword [ebp - 0x4ec], eax
jmp 0x497b83
mov dword [ebp - 0x4ec], 0
push 0x70cb4c
push 0x1d
push 0x70cb50
push 0x70cb54
push 0x70cb78
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4a0], esp
push 0x70cb7c
call fcn.00404630
mov dword [ebp - 0x4f0], eax
lea ecx, [ebp - 0x2c]
push ecx
call fcn.004989b0
add esp, 0x20
mov dword [ebp - 0x4f4], eax
mov edx, dword [ebp - 0x4f4]
mov dword [ebp - 0x4f8], edx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4f8]
call fcn.00404810
push eax
push 0x70cba0
mov eax, dword [ebp - 0x4ec]
push eax
call fcn.0040a270
add esp, 8
push eax
call fcn.0040a270
add esp, 8
push eax
call fcn.0040a270
add esp, 8
push eax
call fcn.0040a270
add esp, 8
push eax
call fcn.0040a270
add esp, 8
mov ecx, eax
call fcn.00404b90
push eax
call fcn.0040a270
add esp, 8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00404770
push 0x70cba4
mov ecx, dword [ebp - 0x4e4]
call fcn.00404810
push eax
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x2fc]
call fcn.004055d0
mov dword [ebp - 0x4fc], eax
mov edx, dword [ebp - 0x4fc]
mov dword [ebp - 0x500], edx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x500]
call fcn.00404810
push eax
push 4
call fcn.0049aa60
push eax
call fcn.0049ab00
add esp, 0x14
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x48]
call fcn.00404770
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2fc]
call fcn.004043b0
xor al, al
jmp 0x49898a
mov ecx, dword [ebp - 0x4e4]
call fcn.00498d10
movzx eax, al
test eax, eax
jne 0x497e6b
push 1
push 3
lea ecx, [ebp - 0x3a4]
call fcn.00470ce0
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x3a4]
test ecx, ecx
je 0x497cf4
lea edx, [ebp - 0x3a4]
add edx, 0x10
mov dword [ebp - 0x504], edx
jmp 0x497cfe
mov dword [ebp - 0x504], 0
push 0x70cbc8
push str.verifyPackInfo_failed_FUNC:
mov eax, dword [ebp - 0x504]
push eax
call fcn.0040a270
add esp, 8
push eax
call fcn.0040a270
add esp, 8
mov ecx, 1
test ecx, ecx
je 0x497e05
lea edx, [ebp - 0x3a4]
test edx, edx
je 0x497d48
lea eax, [ebp - 0x3a4]
add eax, 0x10
mov dword [ebp - 0x508], eax
jmp 0x497d52
mov dword [ebp - 0x508], 0
push 0x70cc08
push 0x22
push 0x70cc0c
push str.CRunthosOTAPack::doUncompressFile
push 0x70cc34
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4a4], esp
push 0x70cc38
call fcn.00404630
mov dword [ebp - 0x50c], eax
lea ecx, [ebp - 0x64]
push ecx
call fcn.004989b0
add esp, 0x20
mov dword [ebp - 0x510], eax
mov edx, dword [ebp - 0x510]
mov dword [ebp - 0x514], edx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x514]
call fcn.00404810
push eax
push 0x70cc5c
mov eax, dword [ebp - 0x508]
push eax
call fcn.0040a270
add esp, 8
push eax
call fcn.0040a270
add esp, 8
push eax
call fcn.0040a270
add esp, 8
push eax
call fcn.0040a270
add esp, 8
push eax
call fcn.0040a270
add esp, 8
mov ecx, eax
call fcn.00404b90
push eax
call fcn.0040a270
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x64]
call fcn.00404770
lea ecx, [ebp - 0x80]
push ecx
lea ecx, [ebp - 0x3a4]
call fcn.004055d0
mov dword [ebp - 0x518], eax
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x51c], edx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x51c]
call fcn.00404810
push eax
push 4
call fcn.0049aa60
push eax
call fcn.0049ab00
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x80]
call fcn.00404770
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a4]
call fcn.004043b0
xor al, al
jmp 0x49898a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4a8], esp
mov eax, dword [ebp - 0x4e4]
push eax
call fcn.0040d8d0
mov dword [ebp - 0x520], eax
call fcn.004950a0
add esp, 0x1c
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x524], edx
mov ecx, dword [ebp - 0x528]
mov dword [ebp - 0x1a4], ecx
mov edx, dword [ebp - 0x524]
mov dword [ebp - 0x1a0], edx
push 0x3f
push 0x70cb05
lea ecx, [ebp - 0x4ac]
call fcn.00454210
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x530], eax
mov dword [ebp - 4], 6
mov ecx, dword [ebp - 0x530]
push ecx
lea edx, [ebp - 0x4b0]
push edx
call fcn.00688c50
add esp, 8
lea ecx, [ebp - 0x4b0]
call fcn.00404a30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4ac]
call fcn.00404a30
push 1
push 0x40
push 0x20
mov ecx, dword [ebp - 0x4e4]
call fcn.00404810
push eax
lea ecx, [ebp - 0x254]
call fcn.0041c6b0
mov dword [ebp - 4], 7
push 0x3f
push 0x70cc60
lea ecx, [ebp - 0x4b4]
call fcn.00454210
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x538], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x538]
push ecx
lea edx, [ebp - 0x4b8]
push edx
call fcn.00688c50
add esp, 8
lea ecx, [ebp - 0x4b8]
call fcn.00404a30
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4b4]
call fcn.00404a30
mov eax, dword [ebp - 0x254]
mov ecx, dword [eax + 4]
lea ecx, [ebp + ecx - 0x254]
call fcn.0041c600
test eax, eax
je 0x49896b
mov dword [ebp - 0x3d8], 0x400
push 0x400
call fcn.00576bfc
add esp, 4
mov dword [ebp - 0x4bc], eax
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x3d4], edx
push 0
push 0x40
mov eax, dword [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x254]
call fcn.00473cd0
lea ecx, [ebp - 0x254]
call fcn.00473e20
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3dc], 0
push 0x40
mov ecx, dword [ebp - 0x3d4]
push ecx
mov edx, dword [ebp - 0x4e4]
add edx, 0x38
push edx
call fcn.00668860
add esp, 0xc
push 2
mov eax, dword [ebp - 0x4e4]
add eax, 0x64
push eax
lea ecx, [ebp - 0x3dc]
push ecx
call fcn.00668860
add esp, 0xc
push 0x40
push 0
mov edx, dword [ebp - 0x3d4]
push edx
call fcn.006665c0
add esp, 0xc
mov eax, dword [ebp - 0x3dc]
shl eax, 4
cdq
push edx
push eax
mov eax, dword [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x254]
call fcn.00473cd0
lea ecx, [ebp - 0x254]
call fcn.00473e20
mov dword [ebp - 0x3e0], eax
lea ecx, [ebp - 0x3d0]
push ecx
mov edx, dword [ebp - 0x3dc]
push edx
mov ecx, dword [ebp - 0x4e4]
add ecx, 0x78
call fcn.0049b490
mov eax, dword [ebp - 0x3dc]
shl eax, 4
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
push 0
mov ecx, dword [ebp - 0x4e4]
add ecx, 0x78
call fcn.0049b460
push eax
call fcn.00668860
add esp, 0xc
mov edx, dword [ebp - 0x4e4]
add edx, 0x38
push edx
lea ecx, [ebp - 0x3c0]
call fcn.00404630
mov byte [ebp - 4], 9
push 0x70cc64
lea eax, [ebp - 0x3c0]
push eax
call fcn.0045b9f0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x49856b
mov dword [ebp - 0x3e4], 0
jmp 0x498116
mov edx, dword [ebp - 0x3e4]
add edx, 1
mov dword [ebp - 0x3e4], edx
mov eax, dword [ebp - 0x3e4]
cmp eax, dword [ebp - 0x3dc]
jge 0x498566
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 0x40c], 0
push 4
mov ecx, dword [ebp - 0x3e4]
push ecx
mov ecx, dword [ebp - 0x4e4]
add ecx, 0x78
call fcn.0049b460
add eax, 4
push eax
lea edx, [ebp - 0x3e8]
push edx
call fcn.00668860
add esp, 0xc
push 4
mov eax, dword [ebp - 0x3e4]
push eax
mov ecx, dword [ebp - 0x4e4]
add ecx, 0x78
call fcn.0049b460
push eax
lea ecx, [ebp - 0x40c]
push ecx
call fcn.00668860
add esp, 0xc
mov edx, dword [ebp - 0x4e4]
add edx, 0x1c
push edx
lea ecx, [ebp - 0x408]
call fcn.0040d8d0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x408]
call fcn.00405300
movzx eax, al
test eax, eax
je 0x498219
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4c0], esp
push 0x70cb06
call fcn.00404630
mov dword [ebp - 0x53c], eax
lea ecx, [ebp - 0x9c]
push ecx
call fcn.004970d0
add esp, 0x20
mov dword [ebp - 0x540], eax
mov edx, dword [ebp - 0x540]
mov dword [ebp - 0x544], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x544]
push eax
lea ecx, [ebp - 0x408]
call fcn.00404740
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x9c]
call fcn.00404770
mov ecx, dword [ebp - 0x3e4]
push ecx
mov ecx, dword [ebp - 0x4e4]
add ecx, 0x78
call fcn.0049b460
movzx edx, byte [eax + 8]
cmp edx, 1
jne 0x49830f
push 0x70cc74
push 0xa
mov eax, dword [ebp - 0x3e4]
push eax
lea ecx, [ebp - 0xb8]
push ecx
call fcn.004861c0
add esp, 0xc
mov dword [ebp - 0x548], eax
mov edx, dword [ebp - 0x548]
mov dword [ebp - 0x54c], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x54c]
push eax
push str.SonPack_RunthOS_SP
lea ecx, [ebp - 0xd4]
push ecx
call fcn.004776f0
add esp, 0xc
mov dword [ebp - 0x550], eax
mov edx, dword [ebp - 0x550]
mov dword [ebp - 0x554], edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x554]
push eax
lea ecx, [ebp - 0xf0]
push ecx
call fcn.00488760
add esp, 0xc
mov dword [ebp - 0x558], eax
mov edx, dword [ebp - 0x558]
mov dword [ebp - 0x55c], edx
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x55c]
push eax
lea ecx, [ebp - 0x408]
call fcn.00477970
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xf0]
call fcn.00404770
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xd4]
call fcn.00404770
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xb8]
call fcn.00404770
jmp 0x4983de
push 0x70cc8c
push 0xa
mov ecx, dword [ebp - 0x3e4]
push ecx
lea edx, [ebp - 0x10c]
push edx
call fcn.004861c0
add esp, 0xc
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x564], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x564]
push ecx
push str.SonPack_RunthOS_AP
lea edx, [ebp - 0x128]
push edx
call fcn.004776f0
add esp, 0xc
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x56c], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x56c]
push ecx
lea edx, [ebp - 0x144]
push edx
call fcn.00488760
add esp, 0xc
mov dword [ebp - 0x570], eax
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0x574], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x574]
push ecx
lea ecx, [ebp - 0x408]
call fcn.00477970
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x144]
call fcn.00404770
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x128]
call fcn.00404770
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x10c]
call fcn.00404770
lea edx, [ebp - 0x408]
push edx
mov ecx, dword [ebp - 0x4e4]
add ecx, 0x98
call fcn.004066d0
push 0
lea ecx, [ebp - 0x408]
call fcn.00404810
push eax
call fcn.0047bec0
add esp, 8
movzx eax, al
test eax, eax
je 0x49842d
lea ecx, [ebp - 0x408]
call fcn.00404810
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x3ec], 0
mov ecx, dword [ebp - 0x254]
mov edx, dword [ecx + 4]
lea ecx, [ebp + edx - 0x254]
call fcn.004541f0
movzx eax, al
test eax, eax
jne 0x498552
mov dword [ebp - 0x410], 0
mov ecx, dword [ebp - 0x3ec]
add ecx, 0x400
cmp ecx, dword [ebp - 0x3e8]
jle 0x4984de
mov eax, dword [ebp - 0x3e8]
sub eax, dword [ebp - 0x3ec]
cdq
push edx
push eax
mov edx, dword [ebp - 0x3d4]
push edx
lea ecx, [ebp - 0x254]
call fcn.00473cd0
lea ecx, [ebp - 0x254]
call fcn.00473e20
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x410]
push eax
lea ecx, [ebp - 0x3d4]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4c4], esp
lea edx, [ebp - 0x408]
push edx
call fcn.0040d8d0
mov dword [ebp - 0x578], eax
call fcn.00495b90
add esp, 0x24
jmp 0x498552
push 0
push 0x400
mov eax, dword [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x254]
call fcn.00473cd0
lea ecx, [ebp - 0x254]
call fcn.00473e20
mov dword [ebp - 0x410], eax
mov ecx, dword [ebp - 0x410]
push ecx
lea edx, [ebp - 0x3d4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4c8], esp
lea eax, [ebp - 0x408]
push eax
call fcn.0040d8d0
mov dword [ebp - 0x57c], eax
call fcn.00495b90
add esp, 0x24
mov ecx, dword [ebp - 0x3ec]
add ecx, dword [ebp - 0x410]
mov dword [ebp - 0x3ec], ecx
jmp 0x498437
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x408]
call fcn.00404770
jmp 0x498107
jmp 0x498936
push 0x70cca4
lea edx, [ebp - 0x3c0]
push edx
call fcn.0045b9f0
add esp, 8
movzx eax, al
test eax, eax
je 0x498936
mov dword [ebp - 0x414], 0
jmp 0x4985a5
mov ecx, dword [ebp - 0x414]
add ecx, 1
mov dword [ebp - 0x414], ecx
mov edx, dword [ebp - 0x414]
cmp edx, dword [ebp - 0x3dc]
jge 0x498936
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x498], 0
push 4
mov eax, dword [ebp - 0x414]
push eax
mov ecx, dword [ebp - 0x4e4]
add ecx, 0x78
call fcn.0049b460
add eax, 4
push eax
lea ecx, [ebp - 0x458]
push ecx
call fcn.00668860
add esp, 0xc
push 4
mov edx, dword [ebp - 0x414]
push edx
mov ecx, dword [ebp - 0x4e4]
add ecx, 0x78
call fcn.0049b460
push eax
lea eax, [ebp - 0x498]
push eax
call fcn.00668860
add esp, 0xc
mov ecx, dword [ebp - 0x4e4]
add ecx, 0x1c
push ecx
lea ecx, [ebp - 0x494]
call fcn.0040d8d0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x494]
call fcn.00405300
movzx edx, al
test edx, edx
je 0x4986a8
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4cc], esp
push 0x70cb07
call fcn.00404630
mov dword [ebp - 0x580], eax
lea eax, [ebp - 0x160]
push eax
call fcn.004970d0
add esp, 0x20
mov dword [ebp - 0x584], eax
mov ecx, dword [ebp - 0x584]
mov dword [ebp - 0x588], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x588]
push edx
lea ecx, [ebp - 0x494]
call fcn.00404740
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x160]
call fcn.00404770
mov eax, dword [ebp - 0x498]
cdq
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4d0], esp
push edx
push eax
call fcn.00407ec0
lea ecx, [ebp - 0x254]
call fcn.0049b350
push 0
push 9
mov eax, dword [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x254]
call fcn.00473cd0
mov ecx, dword [ebp - 0x3d4]
push ecx
lea ecx, [ebp - 0x474]
call fcn.00404630
mov byte [ebp - 4], 0x14
push 0
push 0x40
mov edx, dword [ebp - 0x3d4]
push edx
lea ecx, [ebp - 0x254]
call fcn.00473cd0
push 0x40
mov eax, dword [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x454]
push ecx
call fcn.00668860
add esp, 0xc
lea edx, [ebp - 0x454]
push edx
mov ecx, dword [ebp - 0x4e4]
add ecx, 0x88
call fcn.0049b510
lea eax, [ebp - 0x43c]
push eax
push 0x70ccb0
lea ecx, [ebp - 0x17c]
call fcn.00404630
mov dword [ebp - 0x58c], eax
mov ecx, dword [ebp - 0x58c]
mov dword [ebp - 0x590], ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x590]
push edx
lea eax, [ebp - 0x198]
push eax
call fcn.00488760
add esp, 0xc
mov dword [ebp - 0x594], eax
mov ecx, dword [ebp - 0x594]
mov dword [ebp - 0x598], ecx
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x598]
push edx
lea ecx, [ebp - 0x494]
call fcn.00477970
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x198]
call fcn.00404770
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x17c]
call fcn.00404770
lea eax, [ebp - 0x494]
push eax
mov ecx, dword [ebp - 0x4e4]
add ecx, 0x98
call fcn.004066d0
mov ecx, dword [ebp - 0x458]
sub ecx, 0x49
mov dword [ebp - 0x458], ecx
mov dword [ebp - 0x478], 0
mov edx, dword [ebp - 0x254]
mov eax, dword [edx + 4]
lea ecx, [ebp + eax - 0x254]
call fcn.004541f0
movzx ecx, al
test ecx, ecx
jne 0x498913
mov dword [ebp - 0x49c], 0
mov edx, dword [ebp - 0x478]
add edx, 0x400
cmp edx, dword [ebp - 0x458]
jle 0x49889f
mov eax, dword [ebp - 0x458]
sub eax, dword [ebp - 0x478]
cdq
push edx
push eax
mov eax, dword [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x254]
call fcn.00473cd0
lea ecx, [ebp - 0x254]
call fcn.00473e20
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x49c]
push ecx
lea edx, [ebp - 0x3d4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4d4], esp
lea eax, [ebp - 0x494]
push eax
call fcn.0040d8d0
mov dword [ebp - 0x59c], eax
call fcn.00495b90
add esp, 0x24
jmp 0x498913
push 0
push 0x400
mov ecx, dword [ebp - 0x3d4]
push ecx
lea ecx, [ebp - 0x254]
call fcn.00473cd0
lea ecx, [ebp - 0x254]
call fcn.00473e20
mov dword [ebp - 0x49c], eax
mov edx, dword [ebp - 0x49c]
push edx
lea eax, [ebp - 0x3d4]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4d8], esp
lea edx, [ebp - 0x494]
push edx
call fcn.0040d8d0
mov dword [ebp - 0x5a0], eax
call fcn.00495b90
add esp, 0x24
mov eax, dword [ebp - 0x478]
add eax, dword [ebp - 0x49c]
mov dword [ebp - 0x478], eax
jmp 0x4987f8
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x474]
call fcn.00404770
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x494]
call fcn.00404770
jmp 0x498596
lea ecx, [ebp - 0x254]
call fcn.0041c810
mov ecx, dword [ebp - 0x3d4]
mov dword [ebp - 0x4dc], ecx
mov edx, dword [ebp - 0x4dc]
push edx
call fcn.00576bf1
add esp, 4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3c0]
call fcn.00404770
mov byte [ebp - 0x4dd], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x254]
call fcn.0041c620
mov al, byte [ebp - 0x4dd]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006665ac
mov esp, ebp
pop ebp
ret