Function at 0x49ba80
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x88
mov eax, dword [ecx]
push esi
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 8]
push edi
mov edi, edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x1c], edi
movdqu xmm0, xmmword [eax]
mov eax, dword [eax + 0x10]
mov edx, dword [edi + 0x34]
movdqu xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], eax
mov dword [esp + 0x14], 0
cmp dword [edx + 0x30], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], edx
je 0x49bb24
movzx eax, byte [edi + 4]
sub eax, 0x74
je 0x49bb03
dec eax
je 0x49bafc
dec eax
je 0x49baf5
mov eax, str.UNION
jmp 0x49bb08
mov eax, str.INTERSECT
jmp 0x49bb08
mov eax, str.EXCEPT
jmp 0x49bb08
mov eax, str.UNION_ALL
push eax
push str.ORDER_BY_clause_should_come_after__s_not_before
push ecx
call fcn.00447720
add esp, 0xc
mov dword [esp + 0x14], 1
jmp 0x49c31b
cmp dword [edx + 0x3c], 0
je 0x49bb6d
movzx eax, byte [edi + 4]
sub eax, 0x74
je 0x49bb60
dec eax
je 0x49bb53
dec eax
je 0x49bb46
mov eax, str.UNION
push eax
push str.LIMIT_clause_should_come_after__s_not_before
jmp 0x49bb0e
mov eax, str.INTERSECT
push eax
push str.LIMIT_clause_should_come_after__s_not_before
jmp 0x49bb0e
mov eax, str.EXCEPT
push eax
push str.LIMIT_clause_should_come_after__s_not_before
jmp 0x49bb0e
mov eax, str.UNION_ALL
push eax
push str.LIMIT_clause_should_come_after__s_not_before
jmp 0x49bb0e
call fcn.0049afd0
mov cl, byte [esp + 0x40]
mov esi, eax
mov dword [esp + 0x10], esi
cmp cl, 0xc
jne 0x49bbb0
mov eax, dword [edi]
mov edx, 0x39
mov ecx, esi
push dword [eax]
push dword [esp + 0x48]
call fcn.004634c0
mov ecx, dword [esi + 4]
add esp, 8
test ecx, ecx
je 0x49bbaa
mov eax, dword [esi + 0x20]
lea eax, [eax + eax*4]
mov byte [ecx + eax*4 - 0x11], 8
mov cl, 0xe
mov byte [esp + 0x40], cl
movzx eax, word [edi + 6]
test eax, 0x200
je 0x49bbd4
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0x40]
push eax
mov edx, edi
call fcn.0049ba20
mov dword [esp + 0x18], eax
jmp 0x49c318
test eax, 0x2000
je 0x49bbf3
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0x40]
push eax
mov edx, edi
call fcn.0049b380
add esp, 4
jmp 0x49c19c
cmp dword [edi + 0x30], 0
je 0x49bc11
mov ecx, dword [ebp + 8]
mov edx, edi
push ecx
mov ecx, dword [esp + 0x10]
call fcn.0049c8a0
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret
movzx eax, byte [edi + 4]
sub eax, 0x73
je 0x49bf7c
dec eax
je 0x49be70
dec eax
je 0x49bf7c
mov ecx, dword [esp + 0xc]
push 0
mov edx, dword [ecx + 0x44]
mov dword [esp + 0x28], edx
push edx
lea eax, [edx + 1]
mov edx, 0x39
mov dword [esp + 0x3c], eax
inc eax
mov dword [ecx + 0x44], eax
mov ecx, esi
call fcn.004634c0
mov ecx, edi
mov dword [edi + 0x10], eax
call fcn.00498130
mov edx, dword [esp + 0x20]
or word [eax + 6], 0x10
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x14]
mov word [esp + 0x70], 1
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov ecx, dword [eax + 0x1d0]
mov dword [esp + 0x34], ecx
lea ecx, [esp + 0x70]
push ecx
mov ecx, eax
call fcn.004a0b60
add esp, 0xc
mov dword [esp + 0x14], eax
test eax, eax
jne 0x49c31b
push eax
push dword [esp + 0x38]
lea edx, [eax + 0x39]
mov ecx, esi
call fcn.004634c0
mov dword [edi + 0x14], eax
mov edx, edi
mov eax, dword [edi + 0x3c]
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x40]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x14]
mov dword [edi + 0x34], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
mov ecx, dword [eax + 0x1d0]
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0x70]
push ecx
mov ecx, eax
call fcn.004a0b60
mov dword [esp + 0x20], eax
add esp, 0xc
mov eax, dword [edi + 0x34]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x18]
mov dword [edi + 0x34], eax
mov ecx, dword [eax + 0x18]
mov eax, dword [eax + 0x1c]
cmp dword [edi + 0x1c], eax
jb 0x49bd32
ja 0x49bd2c
cmp dword [edi + 0x18], ecx
jbe 0x49bd32
mov dword [edi + 0x18], ecx
mov dword [edi + 0x1c], eax
mov edx, dword [edi + 0x3c]
mov ecx, dword [esp + 0x20]
call fcn.00477170
cmp byte [esp + 0x40], 9
mov eax, dword [esp + 0x38]
mov dword [edi + 0x3c], eax
mov eax, dword [esp + 0x3c]
mov dword [edi + 0x40], eax
jne 0x49bd79
mov eax, dword [edi + 0x34]
mov ecx, edi
test eax, eax
je 0x49bd69
lea esp, [esp]
mov ecx, eax
mov eax, dword [ecx + 0x34]
test eax, eax
jne 0x49bd60
push dword [ecx]
mov ecx, dword [esp + 0x10]
xor edx, edx
call fcn.0049a6f0
add esp, 4
mov ecx, esi
call fcn.00463750
mov ecx, dword [esp + 0x10]
mov esi, eax
mov dword [esp + 0x38], esi
call fcn.00463750
mov ecx, dword [esp + 0xc]
mov edx, edi
push esi
mov dword [esp + 0x1c], eax
call fcn.0049b020
mov ecx, dword [esp + 0x14]
add esp, 4
mov edx, 0x6d
push esi
push dword [esp + 0x28]
call fcn.004634c0
mov ecx, dword [esp + 0x14]
call fcn.0047c330
mov ecx, dword [esp + 0x18]
mov esi, eax
push esi
push dword [esp + 0x30]
mov edx, 0x66
call fcn.004634c0
mov ecx, dword [esp + 0x20]
mov edx, 0x45
push 0
push esi
push dword [esp + 0x30]
mov edi, eax
push dword [esp + 0x50]
call fcn.004636a0
mov ecx, dword [esp + 0x2c]
mov edx, esi
call fcn.0047c350
push dword [esp + 0x58]
mov esi, dword [esp + 0x3c]
lea eax, [esp + 0x64]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x30]
push esi
push eax
push 0
push 0
push dword [esp + 0x58]
push dword [edx]
call fcn.00498ed0
add esp, 0x3c
mov edx, esi
mov esi, dword [esp + 0x10]
mov ecx, esi
call fcn.004637a0
push edi
mov edi, dword [esp + 0x28]
mov edx, 8
push edi
call fcn.004634c0
mov edx, dword [esp + 0x40]
mov ecx, esi
call fcn.004637a0
lea eax, [edi + 1]
mov edx, 0x3d
push 0
push eax
call fcn.004634c0
push 0
push edi
mov edx, 0x3d
mov ecx, esi
call fcn.004634c0
add esp, 0x18
jmp 0x49c198
mov ecx, dword [esp + 0x18]
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [edi + 8]
mov dword [ecx + 8], eax
mov eax, dword [edi + 0xc]
mov dword [ecx + 0xc], eax
mov eax, dword [edi + 0x3c]
mov dword [ecx + 0x3c], eax
mov eax, dword [edi + 0x40]
mov dword [ecx + 0x40], eax
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x1d0]
mov dword [esp + 0x2c], edx
lea edx, [esp + 0x40]
push edx
mov edx, ecx
mov ecx, eax
call fcn.004a0b60
add esp, 4
mov dword [esp + 0x14], eax
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
test eax, eax
jne 0x49c31b
mov edx, dword [esp + 0x18]
mov dword [edi + 0x34], eax
mov ecx, dword [edx + 8]
mov dword [edi + 8], ecx
mov eax, dword [edx + 0xc]
mov dword [edi + 0xc], eax
test ecx, ecx
je 0x49bef6
push ecx
mov edx, 0x2e
mov ecx, esi
call fcn.00463450
add esp, 4
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xc]
mov edx, edi
mov ecx, dword [eax + 0x1d0]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x40]
push ecx
mov ecx, eax
call fcn.004a0b60
mov ecx, dword [esp + 0x1c]
add esp, 4
mov dword [esp + 0x14], eax
mov eax, dword [edi + 0x34]
mov dword [edi + 0x34], ecx
mov dword [esp + 0x30], eax
mov eax, dword [ecx + 0x18]
add dword [edi + 0x18], eax
mov eax, dword [ecx + 0x1c]
adc dword [edi + 0x1c], eax
mov ecx, dword [ecx + 0x3c]
test ecx, ecx
je 0x49bf62
lea edx, [esp + 0x3c]
call fcn.00478300
test eax, eax
je 0x49bf62
mov eax, dword [esp + 0x3c]
test eax, eax
jle 0x49bf62
cdq
cmp dword [edi + 0x1c], edx
jb 0x49bf62
ja 0x49bf5c
cmp dword [edi + 0x18], eax
jbe 0x49bf62
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], edx
mov eax, dword [esp + 0x38]
test eax, eax
je 0x49c19c
mov edx, eax
mov ecx, esi
call fcn.004639f0
jmp 0x49c19c
cmp cl, 1
jne 0x49bf8b
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
jmp 0x49bfc1
mov ecx, dword [esp + 0xc]
push 0
mov edx, dword [ecx + 0x44]
mov dword [esp + 0x28], edx
push edx
lea eax, [edx + 1]
mov edx, 0x39
mov dword [ecx + 0x44], eax
mov ecx, esi
call fcn.004634c0
add esp, 8
mov dword [edi + 0x10], eax
mov ecx, edi
call fcn.00498130
or word [eax + 6], 0x10
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xc]
mov word [esp + 0x7c], 1
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov ecx, dword [eax + 0x1d0]
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x7c]
push ecx
mov ecx, eax
call fcn.004a0b60
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
jne 0x49c31b
cmp byte [edi + 4], 0x75
mov edx, edi
mov ecx, dword [edi + 0x3c]
sete al
mov dword [esp + 0x3c], ecx
mov ecx, dword [edi + 0x40]
inc al
mov byte [esp + 0x7c], al
mov eax, dword [esp + 0xc]
mov dword [esp + 0x38], ecx
mov dword [edi + 0x34], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
mov ecx, dword [eax + 0x1d0]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x7c]
push ecx
mov ecx, eax
call fcn.004a0b60
mov edx, dword [edi + 0x30]
add esp, 4
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x14], eax
call fcn.00477f20
cmp byte [edi + 4], 0x73
mov eax, dword [edi + 0x34]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x30], eax
mov dword [edi + 0x34], ecx
mov dword [edi + 0x30], 0
jne 0x49c098
mov eax, dword [ecx + 0x18]
add dword [edi + 0x18], eax
mov eax, dword [ecx + 0x1c]
adc dword [edi + 0x1c], eax
mov edx, dword [edi + 0x3c]
mov ecx, dword [esp + 0x20]
call fcn.00477170
mov eax, dword [esp + 0x3c]
mov dword [edi + 0x3c], eax
mov eax, dword [esp + 0x38]
mov dword [edi + 0x40], eax
mov al, byte [esp + 0x40]
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
cmp al, 1
je 0x49c19c
cmp al, 9
jne 0x49c0f9
mov eax, dword [edi + 0x34]
mov ecx, edi
test eax, eax
je 0x49c0e9
lea esp, [esp]
mov ecx, eax
mov eax, dword [ecx + 0x34]
test eax, eax
jne 0x49c0e0
push dword [ecx]
mov ecx, dword [esp + 0x10]
xor edx, edx
call fcn.0049a6f0
add esp, 4
mov ecx, esi
call fcn.00463750
mov ecx, dword [esp + 0x10]
mov esi, eax
mov dword [esp + 0x38], esi
call fcn.00463750
mov edx, dword [esp + 0x1c]
mov edi, eax
mov ecx, dword [esp + 0xc]
push esi
call fcn.0049b020
add esp, 4
mov edx, 0x6d
push esi
push dword [esp + 0x28]
mov esi, dword [esp + 0x18]
mov ecx, esi
call fcn.004634c0
push dword [esp + 0x40]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x4c]
mov esi, dword [esi + 0x20]
push edi
push eax
mov eax, dword [esp + 0x30]
mov edx, eax
push 0
push 0
push dword [esp + 0x40]
push dword [eax]
call fcn.00498ed0
mov ecx, dword [esp + 0x34]
add esp, 0x24
mov edx, edi
call fcn.004637a0
mov edi, dword [esp + 0x24]
mov edx, 8
push esi
push edi
mov esi, ecx
call fcn.004634c0
mov edx, dword [esp + 0x40]
mov ecx, esi
call fcn.004637a0
push 0
push edi
mov edx, 0x3d
call fcn.004634c0
add esp, 0x10
mov edi, dword [esp + 0x1c]
movzx edx, byte [edi + 4]
xor eax, eax
cmp byte [edi + 4], 0x74
mov ecx, dword [esp + 0xc]
setne al
push eax
push dword [esp + 0x2c]
push dword [esp + 0x34]
call fcn.00499b80
add esp, 0xc
test byte [edi + 6], 0x10
je 0x49c31b
mov eax, dword [edi]
mov ecx, dword [esp + 0x20]
push 1
mov eax, dword [eax]
mov edx, eax
mov dword [esp + 0x38], eax
call fcn.00499a70
mov ecx, eax
add esp, 4
mov dword [esp + 0x24], ecx
test ecx, ecx
jne 0x49c1f7
mov dword [esp + 0x14], 7
jmp 0x49c31b
xor eax, eax
add ecx, 0x14
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x38], eax
cmp dword [esp + 0x34], eax
jle 0x49c250
mov esi, dword [esp + 0xc]
mov edi, edi
push eax
mov edx, edi
mov ecx, esi
call fcn.0049b1b0
mov ecx, dword [esp + 0x30]
add esp, 4
mov dword [ecx], eax
test eax, eax
jne 0x49c230
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 8]
mov dword [ecx], eax
mov eax, dword [esp + 0x38]
add ecx, 4
inc eax
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x38], eax
cmp eax, dword [esp + 0x34]
jl 0x49c210
mov esi, dword [esp + 0x10]
lea ebx, [ebx]
lea eax, [edi + 0x10]
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], eax
mov edi, eax
mov eax, dword [edi]
test eax, eax
js 0x49c2f7
cmp dword [esi + 0x20], eax
jbe 0x49c282
mov ecx, dword [esi + 4]
lea edx, [eax + eax*4]
mov esi, dword [esp + 0x34]
mov dword [ecx + edx*4 + 8], esi
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
inc dword [ecx]
cmp dword [esi + 4], 0
mov edx, dword [esi]
mov dword [esp + 0x2c], edx
je 0x49c2c6
cmp byte [edx + 0x41], 0
jne 0x49c2c6
mov ecx, dword [esi + 4]
lea eax, [eax + eax*4]
push dword [ecx + eax*4 + 0x10]
movsx edx, byte [ecx + eax*4 + 1]
lea esi, [ecx + eax*4]
mov ecx, dword [esp + 0x30]
call fcn.00463a10
mov ecx, dword [esp + 0x28]
mov dword [esi + 0x10], ecx
mov byte [esi + 1], 0xfa
mov esi, dword [esp + 0x14]
jmp 0x49c2d7
push ecx
mov ecx, dword [esi]
mov edx, 0xfffffffa
call fcn.00463a10
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x3c]
add esp, 4
inc edx
mov dword [edi], 0xffffffff
add edi, 4
mov dword [esp + 0x38], edx
cmp edx, 2
jl 0x49c261
jmp 0x49c2fb
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x1c]
mov edi, dword [edi + 0x34]
mov dword [esp + 0x1c], edi
test edi, edi
jne 0x49c250
dec dword [ecx]
jne 0x49c31b
push ecx
call fcn.00444a30
add esp, 4
mov ecx, dword [ebp + 8]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x30]
push 1
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x50]
mov dword [ecx + 0xc], eax
mov ecx, dword [esp + 0x24]
call fcn.00497e90
mov eax, dword [esp + 0x18]
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret