Function at 0x4992cb
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xd4
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0xc]
xor eax, eax
push edi
mov edi, dword [ebx]
inc eax
xor ecx, ecx
cmp esi, ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], edi
je 0x499f7b
cmp byte [edi + 0x1e], cl
jne 0x499f7b
cmp dword [ebx + 0x40], ecx
jne 0x499f7b
push ecx
push ecx
push ecx
push 0x15
mov eax, ebx
call fcn.0047a5b5
add esp, 0x10
test eax, eax
je 0x499324
xor eax, eax
inc eax
jmp 0x499f7b
push 0x2c
lea eax, [esp + 0x70]
push 0
push eax
call fcn.00449940
mov eax, dword [ebp + 0x10]
add esp, 0xc
cmp byte [eax], 4
ja 0x499351
push edi
mov edi, dword [esi + 0x18]
call fcn.0046f3c0
and dword [esi + 0x18], 0
and word [esi + 6], 0xfffe
pop ecx
push 0
push esi
push ebx
call fcn.00498dcf
mov eax, dword [esi + 0x18]
mov dword [esp + 0x3c], eax
mov eax, dword [esi + 8]
add esp, 0xc
cmp dword [ebx + 0x40], 0
mov dword [esp + 0x4c], eax
jne 0x499f57
mov eax, dword [esp + 0x1c]
cmp byte [eax + 0x1e], 0
jne 0x499f57
movzx eax, byte [esi + 6]
shr eax, 2
and eax, 1
mov edi, ebx
mov dword [esp + 0x34], eax
call fcn.00479757
test eax, eax
mov dword [esp + 0x18], eax
je 0x499f57
and dword [esp + 0x20], 0
jmp 0x4994aa
mov eax, dword [esp + 0x4c]
movsx ecx, word [eax]
cmp dword [esp + 0x20], ecx
jge 0x4994b4
mov ecx, dword [esp + 0x20]
imul ecx, ecx, 0x38
lea edi, [ecx + eax + 8]
mov ebx, dword [edi + 0x10]
test ebx, ebx
je 0x4994a6
cmp byte [edi + 0x14], 0
jne 0x4994a6
mov eax, esi
call fcn.0046f418
mov ecx, dword [ebp + 8]
add dword [ecx + 0x210], eax
movzx eax, byte [ebx + 6]
shr eax, 2
and eax, 1
push eax
push dword [esp + 0x38]
mov dword [esp + 0x14], eax
push dword [esp + 0x28]
mov eax, esi
push ecx
call fcn.0047aeb3
add esp, 0x10
test eax, eax
je 0x499430
cmp dword [esp + 0xc], 0
je 0x499429
or word [esi + 6], 4
mov dword [esp + 0x34], 1
or dword [esp + 0x20], 0xffffffff
jmp 0x499472
mov eax, dword [edi + 0x18]
and dword [esp + 0xb4], 0
and dword [esp + 0xb8], 0
mov dword [esp + 0xb0], eax
lea eax, [esp + 0xac]
push eax
push ebx
push dword [ebp + 8]
mov byte [esp + 0xb8], 9
mov byte [esp + 0xb9], 0
call fcn.004992cb
add esp, 0xc
mov byte [edi + 0x14], 1
mov eax, dword [esp + 0x1c]
cmp byte [eax + 0x1e], 0
jne 0x499f57
mov eax, esi
call fcn.0046f418
mov ecx, dword [ebp + 8]
sub dword [ecx + 0x210], eax
mov eax, dword [esi + 8]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp + 0x10]
cmp byte [eax], 4
jbe 0x4994a6
mov eax, dword [esi + 0x18]
mov dword [esp + 0x30], eax
inc dword [esp + 0x20]
cmp dword [esi + 0x1c], 0
je 0x4993ae
mov ecx, dword [esi + 0xc]
mov eax, dword [esi]
mov dword [esp + 0x40], ecx
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x10], ecx
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x64], ecx
movzx ecx, byte [esi + 6]
and ecx, 1
cmp dword [esi + 0x1c], 0
mov dword [esp + 0x58], eax
mov dword [esp + 0xc], ecx
je 0x499532
cmp dword [esi + 0x24], 0
jne 0x49951e
xor ecx, ecx
xor edx, edx
mov eax, esi
mov dword [eax + 0x20], ecx
mov dword [eax + 0x24], esi
mov ecx, eax
mov eax, dword [eax + 0x1c]
inc edx
test eax, eax
jne 0x4994ec
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x58]
test eax, eax
je 0x49951e
cmp edx, eax
jle 0x49951e
mov edi, dword [ebp + 8]
push str.too_many_terms_in_compound_SELECT
call fcn.004765b2
pop ecx
jmp 0x49931c
push dword [ebp + 0x10]
mov eax, esi
push dword [ebp + 8]
call fcn.0048b279
pop ecx
pop ecx
jmp 0x499f7b
cmp dword [eax], 1
mov ecx, dword [ebp + 0x10]
movzx ecx, byte [ecx]
jle 0x499549
mov edi, dword [ebp + 8]
push ecx
call fcn.004770f1
pop ecx
jmp 0x49954b
xor eax, eax
test eax, eax
jne 0x499f57
mov al, byte [esi + 6]
and al, 5
cmp al, 1
jne 0x49957d
mov ebx, dword [esi]
push 0
push dword [esp + 0x20]
call fcn.00472b5b
and word [esi + 6], 0xfffe
and dword [esp + 0x14], 0
pop ecx
pop ecx
mov dword [esi + 0x10], eax
mov dword [esp + 0x10], eax
mov edi, dword [esp + 0x30]
test edi, edi
mov ebx, dword [ebp + 8]
je 0x4995bc
push edi
push ebx
call fcn.0048a00d
mov ecx, dword [ebx + 0x44]
push 0xfffffffffffffff0
push eax
mov dword [edi + 8], ecx
inc dword [ebx + 0x44]
mov eax, dword [edi]
push 0
inc eax
inc eax
push eax
push dword [edi + 8]
push 0x28
push dword [esp + 0x38]
call fcn.00478375
add esp, 0x24
mov dword [esp + 0x2c], eax
mov dword [esi + 0x40], eax
jmp 0x4995c1
or dword [esp + 0x2c], 0xffffffff
mov eax, dword [ebp + 0x10]
cmp byte [eax], 9
jne 0x4995e0
mov ecx, dword [esp + 0x58]
push dword [ecx]
push dword [eax + 4]
mov eax, dword [esp + 0x20]
push 0x28
call fcn.004783a5
add esp, 0xc
mov eax, dword [esp + 0x18]
call fcn.00475fd5
push eax
mov dword [esp + 0xac], eax
push esi
mov eax, ebx
call fcn.0047b5e6
xor edi, edi
cmp dword [esp + 0x14], edi
pop ecx
pop ecx
je 0x499635
mov edi, dword [ebx + 0x44]
lea eax, [edi + 1]
mov dword [ebx + 0x44], eax
push dword [esi]
mov dword [esp + 0xa4], edi
push ebx
call fcn.0048a00d
push 0xfffffffffffffff0
push eax
push 0
push 0
push edi
push 0x28
push dword [esp + 0x38]
call fcn.00478375
add esp, 0x24
xor edi, edi
jmp 0x49963d
or dword [esp + 0xa0], 0xffffffff
cmp dword [esp + 0x34], edi
mov edx, dword [esp + 0x10]
jne 0x4996b9
cmp edx, edi
jne 0x4996bd
push edi
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x48]
push dword [esp + 0x58]
push ebx
call fcn.004953fa
mov ebx, eax
add esp, 0x14
cmp ebx, edi
je 0x499f57
cmp dword [esp + 0x2c], edi
jl 0x49968c
cmp dword [esp + 0x30], edi
jne 0x49968c
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x18]
push 1
call fcn.00475ead
or dword [esi + 0x40], 0xffffffff
pop ecx
push dword [ebx + 0x14]
mov eax, dword [ebp + 0x10]
push dword [ebx + 0x10]
push 0xffffffffffffffff
push dword [esp + 0x3c]
push edi
push edi
push dword [esp + 0x70]
push esi
push dword [ebp + 8]
call fcn.0047d58b
add esp, 0x24
push ebx
call fcn.00478dd7
pop ecx
jmp 0x499f09
cmp edx, edi
je 0x4996ed
mov esi, dword [esi]
mov eax, dword [esi]
cmp eax, edi
mov esi, dword [esi + 0xc]
jle 0x4996d6
lea ecx, [esi + 0x10]
mov word [ecx], di
dec eax
add ecx, 0x14
cmp eax, edi
jg 0x4996cb
mov eax, dword [edx]
cmp eax, edi
mov ecx, dword [edx + 0xc]
jle 0x4996ed
add ecx, 0x10
mov word [ecx], di
dec eax
add ecx, 0x14
cmp eax, edi
jg 0x4996e2
mov eax, dword [esp + 0x18]
call fcn.00475fd5
mov dword [esp + 0x3c], eax
xor eax, eax
push 9
pop ecx
lea edi, [esp + 0xbc]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xc0], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x10]
test eax, eax
mov dword [esp + 0xbc], ebx
je 0x499736
mov eax, dword [eax]
inc eax
mov dword [esp + 0x78], eax
jmp 0x49973b
and dword [esp + 0x78], 0
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x58]
mov dword [esp + 0x74], eax
lea eax, [esp + 0xbc]
push eax
call fcn.0047a8e0
mov esi, dword [esp + 0x34]
pop ecx
lea eax, [esp + 0xbc]
push eax
call fcn.0047a8e0
xor ebx, ebx
cmp dword [esp + 0x68], ebx
pop ecx
je 0x499780
push dword [esp + 0x64]
lea eax, [esp + 0xc0]
call fcn.00478037
pop ecx
cmp dword [esp + 0x90], ebx
mov eax, dword [esp + 0x80]
mov dword [esp + 0x88], eax
jle 0x4997c3
xor edi, edi
mov eax, dword [esp + 0x8c]
mov eax, dword [edi + eax]
mov esi, dword [eax + 0x10]
lea ecx, [esp + 0xbc]
push ecx
call fcn.0047a8e0
inc ebx
add edi, 0x10
cmp ebx, dword [esp + 0x94]
pop ecx
jl 0x499799
xor ebx, ebx
mov eax, dword [esp + 0x1c]
cmp byte [eax + 0x1e], 0
jne 0x499f57
cmp dword [esp + 0x10], ebx
je 0x499cd1
mov edi, dword [ebp + 8]
mov eax, dword [edi + 0x44]
push dword [esp + 0x10]
mov dword [esp + 0x74], eax
inc eax
push edi
mov dword [edi + 0x44], eax
call fcn.0048a00d
mov ebx, dword [esp + 0x20]
push 0xfffffffffffffff0
push eax
push 0
push dword [esp + 0x8c]
mov dword [esp + 0x6c], eax
push dword [esp + 0x88]
push 0x28
push ebx
call fcn.00478375
mov dword [esp + 0x80], eax
mov eax, dword [edi + 0x48]
add esp, 0x24
inc eax
lea esi, [eax + 1]
mov dword [esp + 0x44], eax
lea eax, [esi + 1]
mov dword [esp + 0x2c], eax
mov dword [edi + 0x48], eax
mov eax, ebx
mov dword [esp + 0x9c], esi
call fcn.00475fd5
inc dword [edi + 0x48]
mov dword [esp + 0x68], eax
mov eax, dword [edi + 0x48]
mov dword [esp + 0xc], eax
mov eax, ebx
call fcn.00475fd5
mov dword [esp + 0x50], eax
mov eax, dword [edi + 0x48]
lea ecx, [eax + 1]
mov dword [esp + 0x98], ecx
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx]
add eax, edx
push 0
mov dword [edi + 0x48], eax
mov ecx, dword [ecx]
push esi
lea edx, [eax + 1]
add ecx, eax
push 0
push 7
mov eax, ebx
mov dword [esp + 0x44], edx
mov dword [edi + 0x48], ecx
call fcn.00476023
xor esi, esi
push esi
push dword [esp + 0x58]
mov eax, ebx
push esi
push 7
call fcn.00476023
push dword [esp + 0x70]
mov eax, ebx
push dword [esp + 0x30]
push 2
call fcn.004783a5
add esp, 0x2c
push esi
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x48]
push dword [esp + 0x58]
push edi
call fcn.004953fa
add esp, 0x14
cmp eax, esi
mov dword [esp + 0xa4], eax
je 0x499f57
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4998f6
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x10]
and dword [esp + 0x40], esi
mov dword [esp + 0x10], eax
jmp 0x499a69
mov eax, dword [eax]
mov edx, dword [esp + 0x80]
mov dword [esp + 0x38], eax
inc eax
test edx, edx
mov dword [esp + 0x40], 1
mov dword [esp + 0x48], eax
mov dword [esp + 0x60], eax
jle 0x49992e
mov ecx, dword [esp + 0x7c]
add ecx, 0xc
cmp dword [ecx], eax
jl 0x499928
inc dword [esp + 0x60]
inc eax
add ecx, 0x18
dec edx
jne 0x49991f
push dword [esp + 0x60]
mov esi, edi
call fcn.0046b925
mov esi, eax
pop ecx
mov eax, edi
mov dword [esp + 0x24], esi
call fcn.0046baca
mov eax, dword [esp + 0x10]
push 0
push esi
mov ecx, edi
call fcn.0047c115
mov eax, dword [esp + 0x40]
add esi, eax
push esi
push dword [esp + 0x7c]
mov eax, ebx
push 0x34
call fcn.004783a5
mov eax, dword [esp + 0x5c]
and dword [esp + 0x34], 0
add esp, 0x14
cmp dword [esp + 0x80], 0
mov dword [esp + 0x28], eax
jle 0x4999f6
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
add eax, ecx
and dword [esp + 0x38], 0
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x7c]
add eax, ecx
mov ecx, dword [esp + 0x28]
cmp dword [eax + 0xc], ecx
jl 0x4999e0
push 0
push dword [esp + 0x4c]
mov esi, edi
push dword [eax + 4]
push dword [eax + 8]
push dword [eax]
call fcn.00486ed4
add esp, 0x14
cmp dword [esp + 0x48], eax
je 0x4999d8
push dword [esp + 0x48]
push eax
push 0xf
mov eax, ebx
call fcn.004783a5
add esp, 0xc
inc dword [esp + 0x28]
inc dword [esp + 0x48]
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
add dword [esp + 0x38], 0x18
cmp eax, dword [esp + 0x80]
jl 0x499996
mov eax, edi
call fcn.00467ed6
mov esi, eax
push esi
push dword [esp + 0x64]
mov eax, ebx
push dword [esp + 0x2c]
push 0x1e
call fcn.00476023
push esi
push dword [esp + 0x84]
mov eax, ebx
push 0x43
call fcn.004783a5
add esp, 0x1c
mov edx, esi
mov eax, edi
call fcn.00467ea2
push dword [esp + 0x24]
mov ecx, dword [esp + 0x64]
call fcn.00467e92
pop ecx
push dword [esp + 0xa4]
call fcn.00478dd7
pop ecx
push dword [esp + 0x3c]
mov eax, ebx
push dword [esp + 0x74]
push 0x3f
call fcn.004783a5
add esp, 0xc
mov eax, edi
mov byte [esp + 0x6d], 1
call fcn.0046baca
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x38], eax
mov eax, edi
call fcn.0046baca
mov ecx, dword [esp + 0x10]
xor eax, eax
cmp dword [ecx], eax
mov dword [esp + 0x28], eax
jle 0x499adf
mov dword [esp + 0x24], eax
cmp dword [esp + 0x40], 0
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x28]
je 0x499aae
add ecx, eax
push ecx
push eax
push dword [esp + 0x78]
mov eax, ebx
push 0x1c
call fcn.00476023
add esp, 0x10
jmp 0x499aca
lea esi, [eax + ecx]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
mov byte [esp + 0x6c], 1
mov eax, dword [eax + 0xc]
push dword [eax + ecx]
call fcn.0047a906
pop ecx
inc dword [esp + 0x28]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
add dword [esp + 0x24], 0x14
cmp ecx, dword [eax]
jl 0x499a89
mov esi, dword [esp + 0x10]
push 0xfffffffffffffffa
push dword [esp + 0x58]
push dword [esi]
push dword [esp + 0x40]
push dword [esp + 0xa8]
push 0x18
push ebx
call fcn.00478375
mov eax, dword [ebx + 0xc]
add esp, 0x1c
mov dword [esp + 0x54], eax
inc eax
push eax
push 0
push eax
push 0x19
mov eax, ebx
call fcn.00476023
push dword [esp + 0xa8]
mov ebx, dword [esi]
mov edi, dword [esp + 0x48]
mov eax, dword [ebp + 8]
call fcn.0047805e
mov esi, dword [esp + 0x2c]
add esp, 0x14
push dword [esp + 0x68]
mov eax, esi
push dword [esp + 0x30]
push 2
call fcn.004783a5
add esp, 0xc
push dword [esp + 0x3c]
mov eax, esi
push dword [esp + 0xa0]
push 0x70
call fcn.004783a5
add esp, 0xc
push dword [esp + 0x50]
mov eax, esi
push dword [esp + 0x10]
push 2
call fcn.004783a5
mov edx, dword [esi + 0xc]
mov eax, dword [esp + 0x60]
add esp, 0xc
mov ecx, esi
call fcn.0046861e
lea eax, [esp + 0x6c]
push eax
push dword [ebp + 8]
call fcn.00489d87
push 0
push dword [esp + 0x50]
xor edi, edi
inc edi
push edi
push 7
mov eax, esi
call fcn.00476023
add esp, 0x18
cmp dword [esp + 0x40], 0
je 0x499bbf
push dword [esp + 0x38]
mov eax, esi
push dword [esp + 0x74]
push 0x42
call fcn.004783a5
add esp, 0xc
jmp 0x499bd9
push dword [esp + 0xa4]
call fcn.00478dd7
pop ecx
mov ecx, dword [esp + 0x5c]
push edi
mov eax, esi
call fcn.00475ead
pop ecx
push dword [esp + 0x68]
mov eax, esi
push dword [esp + 0x30]
push 2
call fcn.004783a5
add esp, 0xc
xor ebx, ebx
push ebx
push dword [esp + 0x40]
mov eax, esi
push ebx
push edi
call fcn.00476023
mov eax, dword [esi + 0xc]
push ebx
push dword [esp + 0xb0]
mov dword [esp + 0x74], eax
push edi
push 7
mov eax, esi
call fcn.00476023
push dword [esp + 0x4c]
mov eax, esi
push 3
call fcn.004783bc
mov edx, dword [esp + 0x90]
mov ecx, esi
call fcn.00468642
mov ebx, dword [esi + 0xc]
lea eax, [ebx + 2]
push eax
push dword [esp + 0x70]
mov eax, esi
push 0x70
call fcn.004783a5
add esp, 0x34
push dword [esp + 0x2c]
mov eax, esi
push 3
call fcn.004783bc
mov eax, dword [ebp + 8]
lea edi, [esp + 0x74]
call fcn.004796cd
push 8
inc ebx
push ebx
push dword [esp + 0x74]
push dword [ebp + 8]
call fcn.0048d86e
push dword [esp + 0x74]
mov eax, dword [ebp + 0xc]
push ebx
push dword [esp + 0xc0]
push dword [esp + 0x54]
push 0
push 0
push dword [eax]
push eax
push dword [ebp + 8]
mov eax, dword [ebp + 0x10]
call fcn.0047d58b
add esp, 0x3c
push dword [esp + 0x2c]
mov eax, esi
push 3
call fcn.004783bc
mov edx, dword [esp + 0x58]
mov ecx, esi
call fcn.00468642
push dword [ebp + 8]
mov ebx, edi
call fcn.0048a9fc
add esp, 0xc
push dword [esp + 0xc]
mov eax, esi
push 3
call fcn.004783bc
pop ecx
jmp 0x499ef8
mov eax, dword [ebp + 0xc]
lea edx, [esp + 0x6c]
mov dword [esp + 0x44], ebx
call fcn.004678ad
mov edi, eax
cmp edi, ebx
je 0x499dd3
mov ebx, dword [ebp + 8]
mov esi, dword [edi + 0x44]
mov ecx, dword [ebx]
call fcn.00467a97
and dword [esp + 0xc], 0
and dword [esp + 0x5c], 0
mov esi, eax
mov eax, dword [ebx + 0x44]
mov dword [esp + 0x50], eax
inc eax
mov dword [ebx + 0x44], eax
mov eax, dword [edi + 0x18]
mov dword [esp + 0x54], eax
mov eax, ebx
call fcn.0047fe06
push dword [edi + 4]
mov ebx, dword [edi + 0x18]
mov eax, dword [ebp + 8]
push 0
push esi
call fcn.00475617
mov eax, dword [edi + 0x14]
xor ebx, ebx
add esp, 0xc
cmp eax, ebx
je 0x499d73
mov ecx, dword [esp + 0x5c]
cmp ecx, ebx
je 0x499d4a
mov edx, dword [eax + 4]
cmp edx, dword [ecx + 4]
jge 0x499d4c
mov ecx, eax
mov eax, dword [eax + 0x20]
cmp eax, ebx
jne 0x499d3e
cmp ecx, ebx
je 0x499d73
mov eax, dword [ecx + 4]
cmp eax, dword [edi + 0xc]
jge 0x499d73
mov edi, dword [ecx + 0x14]
push ecx
push dword [ebp + 8]
call fcn.0048932f
pop ecx
pop ecx
mov dword [esp + 0xc], eax
jmp 0x499d77
mov edi, dword [esp + 0x54]
push esi
mov esi, dword [esp + 0x1c]
push edi
push dword [esp + 0x58]
mov eax, esi
push 0x26
call fcn.00476023
add esp, 0x10
cmp dword [esp + 0xc], ebx
je 0x499da5
push 0xfffffffffffffff0
push dword [esp + 0x10]
or eax, 0xffffffff
push esi
call fcn.00475d88
add esp, 0xc
mov eax, dword [esp + 0x8c]
push dword [eax + 8]
mov eax, esi
push dword [esp + 0x54]
push 0x1f
call fcn.004783a5
add esp, 0xc
push dword [esp + 0x50]
mov eax, esi
push 0x2a
call fcn.004783bc
pop ecx
pop ecx
jmp 0x499eb0
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc], ebx
call fcn.0046b14e
test al, al
mov byte [esp + 0x17], al
je 0x499e2a
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov esi, dword [esp + 0x1c]
mov ebx, dword [eax + 0x10]
push 0
push esi
call fcn.00472b5b
test eax, eax
pop ecx
pop ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x44], eax
je 0x499e2a
cmp byte [esi + 0x1e], 0
jne 0x499e2a
cmp byte [esp + 0x17], 1
mov edx, dword [eax + 0xc]
setne cl
mov byte [edx + 0xc], cl
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov byte [eax], 0x98
mov esi, dword [ebp + 8]
push esi
lea ebx, [esp + 0x70]
call fcn.0048a9fc
movzx ax, byte [esp + 0x1b]
pop ecx
push eax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x48]
push dword [esp + 0x58]
push esi
call fcn.004953fa
mov edi, eax
xor ebx, ebx
add esp, 0x14
cmp edi, ebx
jne 0x499e70
push dword [esp + 0x1c]
mov edi, dword [esp + 0x48]
call fcn.0046f3c0
pop ecx
jmp 0x499f57
lea eax, [esp + 0x6c]
push eax
push esi
call fcn.00489d87
cmp dword [esp + 0x14], ebx
pop ecx
pop ecx
jne 0x499e9c
cmp byte [esp + 0x17], bl
je 0x499e9c
mov eax, dword [esp + 0x18]
push ebx
push dword [edi + 0x14]
push ebx
push 1
call fcn.00476023
add esp, 0x10
push edi
call fcn.00478dd7
pop ecx
lea edi, [esp + 0x6c]
mov eax, esi
call fcn.004796cd
xor ebx, ebx
push 8
push dword [esp + 0x40]
mov dword [esp + 0x38], ebx
push dword [esp + 0x6c]
push dword [ebp + 8]
call fcn.0048d86e
push dword [esp + 0x4c]
mov eax, dword [ebp + 0xc]
push dword [esp + 0x50]
push 0xffffffffffffffff
push ebx
push ebx
push ebx
push dword [eax]
push eax
push dword [ebp + 8]
mov eax, dword [ebp + 0x10]
call fcn.0047d58b
mov edi, dword [esp + 0x78]
add esp, 0x34
push dword [esp + 0x1c]
call fcn.0046f3c0
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x40]
pop ecx
mov ecx, esi
call fcn.00468642
mov esi, dword [ebp + 0xc]
xor edi, edi
cmp dword [esp + 0x30], edi
je 0x499f28
mov eax, dword [esp + 0x58]
push dword [eax]
mov eax, dword [ebp + 0x10]
mov ecx, dword [esp + 0x1c]
push esi
push dword [ebp + 8]
call fcn.0047b6df
add esp, 0xc
mov edx, dword [esp + 0xa8]
mov ecx, dword [esp + 0x18]
call fcn.00468642
mov eax, dword [ebp + 0x10]
cmp byte [eax], 5
mov dword [esp + 0x24], edi
jne 0x499f57
push dword [esp + 0x58]
push dword [esp + 0x50]
push dword [ebp + 8]
call fcn.00487ac2
add esp, 0xc
push dword [esp + 0x7c]
push dword [esp + 0x20]
call fcn.0046eba8
push dword [esp + 0x94]
push dword [esp + 0x28]
call fcn.0046eba8
mov eax, dword [esp + 0x34]
add esp, 0x10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret