Function at 0x4fb8d0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xbc]
cmp eax, dword [ecx + 8]
jbe 0x4fc789
sub esp, 0x13c
nop
mov ecx, dword [esp + 0x148]
test ecx, ecx
je 0x4fc777
nop
movzx edx, byte [0x727bf8]
test dl, dl
je 0x4fc76b
mov dword [0x727bfc], ecx
mov edx, dword [0x738420]
test edx, edx
jne 0x4fc754
mov eax, dword [esp + 0x14c]
mov dword [0x727c00], eax
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], eax
nop
mov edx, dword [esp + 0xf8]
test edx, edx
je 0x4fc747
nop
nop
movzx ebx, byte [edx + 0xf]
mov ebp, ebx
and ebx, 0x1f
xchg ebp, eax
test al, 0x20
xchg ebp, eax
jne 0x4fb96a
or ebx, 0x80
mov ebp, eax
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xf4], ebp
nop
mov ecx, dword [esp + 0xf0]
nop
test ecx, ecx
je 0x4fc73e
lea ebp, [0x604040]
mov dword [esp + 0xac], ecx
mov dword [esp + 0x44], ebp
nop
nop
mov esi, ebx
and ebx, 0x1f
cmp ebx, 0x16
je 0x4fc6e8
xor ebx, ebx
test bl, bl
jne 0x4fc694
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00492280
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0xcc], edx
mov ebx, dword [esp + 0x44]
mov ebx, dword [ebx + 0x28]
mov ebp, dword [esp + 0xac]
mov dword [esp], ebp
call ebx
mov eax, dword [esp + 4]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0xac], ecx
mov edx, dword [eax + 0x64]
mov dword [esp], ecx
call edx
lea eax, [esp + 8]
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x4c], ecx
xor edx, edx
jmp 0x4fba37
lea edx, [ebx + 1]
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0x4c]
cmp edx, ecx
jge 0x4fc677
mov dword [esp + 0x48], edx
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.00492410
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
nop
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.00492aa0
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0xac]
mov dword [esp], ebx
mov ebp, dword [esp + 0x48]
mov dword [esp + 4], ebp
call ecx
lea edi, [esp + 0x108]
mov esi, dword [esp + 0xc8]
call fcn.0044d42e
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x5c]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x10c]
mov ebp, dword [esp + 0x108]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004927d0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x40]
test ebx, ebx
je 0x4fbccb
mov dword [esp + 0x58], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc0], edx
mov ebp, dword [ebx + 8]
cmp ebp, 0x86318d2e
jbe 0x4fbf8d
cmp ebp, 0xd04ae83d
jbe 0x4fbd2a
cmp ebp, 0xe0ff5cb4
jne 0x4fbd1f
lea esi, [0x597b60]
cmp esi, ebx
jne 0x4fbbf4
mov ebx, dword [esp + 0x48]
test ebx, ebx
jne 0x4fba29
mov eax, dword [esp + 0x140]
mov dword [esp], eax
mov ecx, dword [esp + 0x144]
mov dword [esp + 4], ecx
mov edx, dword [0x7237e4]
mov ebx, dword [0x7237e0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.004fc890
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
test edx, edx
jne 0x4fbbdf
mov edx, dword [esp + 0xc0]
mov dword [esp], edx
mov edx, dword [esp + 0xc4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00493e20
mov ebx, dword [esp + 0x48]
lea esi, [0x597b60]
jmp 0x4fba29
mov dword [esp + 0x150], edx
mov dword [esp + 0x154], ebx
add esp, 0x13c
ret
cmp ebp, 0xeff20ea0
jne 0x4fbccb
lea ebp, [0x597ca0]
cmp ebp, ebx
jne 0x4fbccb
lea eax, [0x592560]
mov dword [esp], eax
call fcn.00409bc0
mov eax, dword [esp + 4]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0x140]
mov dword [esp], ecx
mov edx, dword [esp + 0x144]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004fc7a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
test eax, eax
jne 0x4fbcb6
nop
nop
mov eax, dword [esp + 0xbc]
movzx ecx, byte [eax + 1]
movzx eax, byte [eax]
mov edx, dword [esp + 0xc0]
mov dword [esp], edx
mov edx, dword [esp + 0xc4]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 8], edx
shl eax, 8
or ecx, eax
movzx eax, cx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.00493d10
mov ebx, dword [esp + 0x48]
lea esi, [0x597b60]
jmp 0x4fba29
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], ecx
add esp, 0x13c
ret
nop
lea eax, [0x59e6a0]
mov dword [esp], eax
call fcn.00409bc0
mov edi, dword [esp + 4]
mov dword [edi + 4], 0xe
mov eax, dword [0x738420]
test eax, eax
jne 0x4fbd12
lea eax, [0x5c8768]
mov dword [edi], eax
lea eax, [0x600de0]
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], edi
add esp, 0x13c
ret
lea eax, [0x5c8768]
call fcn.0044cea0
jmp 0x4fbcf7
lea esi, [0x597b60]
jmp 0x4fbbf4
cmp ebp, 0xa8ff599c
jne 0x4fbf7c
lea esi, [0x5928a0]
cmp esi, ebx
je 0x4fbe2a
cmp ebp, 0xd04ae83d
jne 0x4fbccb
lea ebp, [0x597ce0]
cmp ebp, ebx
jne 0x4fbccb
lea eax, [0x593360]
mov dword [esp], eax
call fcn.00409bc0
mov eax, dword [esp + 4]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0x140]
mov dword [esp], ecx
mov edx, dword [esp + 0x144]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 4
call fcn.004fc7a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x4fbe15
nop
nop
mov eax, dword [esp + 0xb8]
movzx ecx, byte [eax + 1]
movzx edx, byte [eax + 2]
movzx ebx, byte [eax + 3]
movzx eax, byte [eax]
mov ebp, dword [esp + 0xc0]
mov dword [esp], ebp
mov ebp, dword [esp + 0xc4]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x58]
mov dword [esp + 8], ebp
shl edx, 8
or edx, ebx
shl ecx, 0x10
or edx, ecx
shl eax, 0x18
or eax, edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.00493d10
mov ebx, dword [esp + 0x48]
lea esi, [0x597b60]
jmp 0x4fba29
mov dword [esp + 0x150], ecx
mov dword [esp + 0x154], eax
add esp, 0x13c
ret
mov dword [esp], esi
call fcn.00409bc0
mov eax, dword [esp + 4]
mov dword [esp + 0xd4], eax
mov ecx, dword [esp + 0x140]
mov dword [esp], ecx
mov edx, dword [esp + 0x144]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x20
mov dword [esp + 0x10], 0x20
call fcn.004fc7a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x4fbf67
lea edi, [esp + 0x84]
mov esi, dword [esp + 0xd4]
call fcn.0044d460
lea eax, [0x5928a0]
mov dword [esp], eax
lea ecx, [esp + 0x84]
mov dword [esp + 4], ecx
call fcn.004076d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
nop
test ecx, ecx
je 0x4fbf5f
nop
movzx edx, byte [0x727bf8]
test dl, dl
je 0x4fbeda
mov dword [0x727bfc], ecx
mov edx, dword [0x738420]
test edx, edx
jne 0x4fbf4f
mov dword [0x727c00], eax
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
nop
mov ecx, dword [esp + 0xe8]
test ecx, ecx
je 0x4fbf47
nop
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4fbf0a
or edx, 0x80
mov ebx, dword [esp + 0xc0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004937c0
mov ebx, dword [esp + 0x48]
lea esi, [0x597b60]
jmp 0x4fba29
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x4fbf0a
lea edi, [0x727c00]
call fcn.0044cea0
jmp 0x4fbeda
xor eax, eax
xor ecx, ecx
xor edx, edx
jmp 0x4fbf0a
mov dword [esp + 0x150], ecx
mov dword [esp + 0x154], eax
add esp, 0x13c
ret
cmp ebp, 0xd04ae83d
lea esi, [0x5928a0]
jmp 0x4fbd4a
cmp ebp, 0x382e7edf
ja 0x4fc3d7
cmp ebp, 0x1c184284
jne 0x4fc3c6
lea esi, [0x593360]
cmp esi, ebx
je 0x4fc277
cmp ebp, 0x382e7edf
jne 0x4fbccb
lea ebp, [0x58df20]
cmp ebp, ebx
jne 0x4fbccb
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov ebx, dword [esp + 0x48]
mov dword [esp + 4], ebx
call ecx
lea edi, [esp + 0x108]
mov esi, dword [esp + 0xc8]
call fcn.0044d42e
lea eax, [esp + 0x64]
mov dword [esp], eax
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
lea eax, [0x5c6530]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.0043c2f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xd0]
mov dword [esp], edx
mov ebx, dword [esp + 0xcc]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x5c]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.004927d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
nop
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 1
call fcn.00492aa0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4fc263
mov edx, dword [ecx + 8]
cmp edx, 0x86318d2e
jne 0x4fc25b
lea ebx, [0x597d20]
cmp ebx, ecx
jne 0x4fc24c
mov ebp, dword [eax + 4]
mov esi, dword [eax]
jne 0x4fc1e7
test esi, esi
setne al
test ebp, ebp
setne cl
or ecx, eax
test cl, cl
jne 0x4fc0da
mov ebx, dword [esp + 0x48]
lea esi, [0x597b60]
jmp 0x4fba29
mov eax, dword [0x70908c]
mov ecx, eax
add eax, 0x5000
mov edx, ecx
sar ecx, 0x1f
add edx, 0x5000
adc ecx, 0
cmp ebp, ecx
seta cl
sete dl
cmp esi, eax
seta al
and edx, eax
or edx, ecx
test dl, dl
jne 0x4fc1ca
mov dword [esp + 0x54], esi
lea eax, [0x597d60]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.00438fd0
mov eax, dword [esp + 0x14]
mov dword [esp + 0xb4], eax
mov ecx, dword [esp + 0x140]
mov dword [esp], ecx
mov edx, dword [esp + 0x144]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov ebx, dword [esp + 0x54]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebx
call fcn.004fc7a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x4fc1b5
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
call fcn.004938f0
lea ebx, [0x597d20]
jmp 0x4fc0cb
mov dword [esp + 0x150], ecx
mov dword [esp + 0x154], eax
add esp, 0x13c
ret
mov dword [esp + 0x150], 0
mov dword [esp + 0x154], 0
add esp, 0x13c
ret
cmp edx, 0xd04ae83d
jne 0x4fc244
lea ebp, [0x597ce0]
cmp ebp, ecx
jne 0x4fc23d
mov esi, dword [eax]
jne 0x4fc204
xor ebp, ebp
jmp 0x4fc0bb
cmp edx, 0xeff20ea0
jne 0x4fc235
lea edx, [0x597ca0]
cmp edx, ecx
jne 0x4fc22e
movzx eax, word [eax]
jne 0x4fc225
movzx esi, ax
xor ebp, ebp
jmp 0x4fc0bb
xor esi, esi
xor ebp, ebp
jmp 0x4fc0bb
mov eax, 0
jmp 0x4fc219
lea edx, [0x597ca0]
jmp 0x4fc225
mov esi, 0
jmp 0x4fc1fb
lea ebp, [0x597ce0]
jmp 0x4fc204
mov esi, 0
mov ebp, 0
jmp 0x4fc0b5
lea ebx, [0x597d20]
jmp 0x4fc1e7
lea edx, [0x597ca0]
lea ebx, [0x597d20]
lea ebp, [0x597ce0]
jmp 0x4fc225
mov dword [esp], esi
call fcn.00409bc0
mov eax, dword [esp + 4]
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x140]
mov dword [esp], ecx
mov edx, dword [esp + 0x144]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 4
call fcn.004fc7a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x4fc3b1
mov eax, dword [esp + 0xd8]
mov eax, dword [eax]
mov dword [esp + 0x60], eax
lea eax, [0x593360]
mov dword [esp], eax
lea ecx, [esp + 0x60]
mov dword [esp + 4], ecx
call fcn.004076d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
nop
test eax, eax
je 0x4fc3a9
nop
movzx edx, byte [0x727bf8]
test dl, dl
je 0x4fc31e
mov dword [0x727bfc], eax
mov edx, dword [0x738420]
test edx, edx
jne 0x4fc393
mov dword [0x727c00], ecx
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
nop
mov eax, dword [esp + 0xe0]
test eax, eax
je 0x4fc38b
nop
nop
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4fc34e
or edx, 0x80
mov ebx, dword [esp + 0xc0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004937c0
mov ebx, dword [esp + 0x48]
lea esi, [0x597b60]
jmp 0x4fba29
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4fc34e
lea edi, [0x727c00]
mov edx, eax
mov eax, ecx
call fcn.0044cea0
mov eax, edx
jmp 0x4fc31e
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4fc34e
mov dword [esp + 0x150], ecx
mov dword [esp + 0x154], eax
add esp, 0x13c
ret
cmp ebp, 0x382e7edf
lea esi, [0x593360]
jmp 0x4fbfb9
cmp ebp, 0x46fb81a2
jne 0x4fc666
lea esi, [0x592560]
cmp esi, ebx
je 0x4fc51b
cmp ebp, 0x86318d2e
jne 0x4fbccb
lea ebp, [0x597d20]
cmp ebp, ebx
jne 0x4fbccb
lea eax, [0x594860]
mov dword [esp], eax
call fcn.00409bc0
mov eax, dword [esp + 4]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0x140]
mov dword [esp], ecx
mov edx, dword [esp + 0x144]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 8
mov dword [esp + 0x10], 8
call fcn.004fc7a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x4fc506
nop
nop
mov eax, dword [esp + 0xb0]
movzx ecx, byte [eax + 4]
movzx edx, byte [eax + 5]
movzx ebx, byte [eax + 6]
movzx ebp, byte [eax + 7]
movzx esi, byte [eax + 1]
mov dword [esp + 0x54], esi
movzx edi, byte [eax + 2]
movzx esi, byte [eax + 3]
movzx eax, byte [eax]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, ebx
shl ebx, 8
or ebp, ebx
mov ebx, edx
shl edx, 0x10
or ebp, edx
mov edx, ecx
shl ecx, 0x18
or ecx, ebp
mov dword [esp + 0xc], ecx
shr ebx, 0x10
shr eax, 0x18
or ebx, eax
shr edx, 8
or edx, ebx
or edx, esi
shl edi, 8
or edx, edi
mov eax, dword [esp + 0x54]
shl eax, 0x10
or edx, eax
mov eax, dword [esp + 0x50]
shl eax, 0x18
or eax, edx
mov dword [esp + 0x10], eax
call fcn.00493d10
mov ebx, dword [esp + 0x48]
lea esi, [0x597b60]
jmp 0x4fba29
mov dword [esp + 0x150], ecx
mov dword [esp + 0x154], eax
add esp, 0x13c
ret
mov dword [esp], esi
call fcn.00409bc0
mov eax, dword [esp + 4]
mov dword [esp + 0xdc], eax
mov ecx, dword [esp + 0x140]
mov dword [esp], ecx
mov edx, dword [esp + 0x144]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004fc7a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x4fc651
mov eax, dword [esp + 0xdc]
movzx eax, word [eax]
mov word [esp + 0x3e], ax
lea eax, [0x592560]
mov dword [esp], eax
lea ecx, [esp + 0x3e]
mov dword [esp + 4], ecx
call fcn.004076d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
nop
test ecx, ecx
je 0x4fc649
nop
movzx edx, byte [0x727bf8]
test dl, dl
je 0x4fc5c4
mov dword [0x727bfc], ecx
mov edx, dword [0x738420]
test edx, edx
jne 0x4fc639
mov dword [0x727c00], eax
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
nop
mov ecx, dword [esp + 0x100]
test ecx, ecx
je 0x4fc631
nop
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4fc5f4
or edx, 0x80
mov ebx, dword [esp + 0xc0]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.004937c0
mov ebx, dword [esp + 0x48]
lea esi, [0x597b60]
jmp 0x4fba29
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x4fc5f4
lea edi, [0x727c00]
call fcn.0044cea0
jmp 0x4fc5c4
xor edx, edx
xor eax, eax
xor ecx, ecx
jmp 0x4fc5f4
mov dword [esp + 0x150], ecx
mov dword [esp + 0x154], eax
add esp, 0x13c
ret
cmp ebp, 0x86318d2e
lea esi, [0x592560]
jmp 0x4fc3f7
mov dword [esp + 0x150], 0
mov dword [esp + 0x154], 0
add esp, 0x13c
ret
nop
lea eax, [0x59e6a0]
mov dword [esp], eax
call fcn.00409bc0
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x36
mov eax, dword [0x738420]
test eax, eax
jne 0x4fc6db
lea eax, [0x5d271f]
mov dword [edi], eax
lea eax, [0x600de0]
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], edi
add esp, 0x13c
ret
lea eax, [0x5d271f]
call fcn.0044cea0
jmp 0x4fc6c0
mov dword [esp + 0x5c], esi
mov dword [esp + 0xa8], eax
mov dword [esp + 0xa4], edx
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.00492280
mov eax, dword [esp + 0x14]
and eax, 0x160
cmp eax, 0x100
setne bl
nop
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x44]
mov esi, dword [esp + 0x5c]
jmp 0x4fb9ae
xor ecx, ecx
xor ebp, ebp
jmp 0x4fb991
mov ebp, eax
xor ebx, ebx
xor eax, eax
xor edx, edx
jmp 0x4fb96c
lea edi, [0x727c00]
mov eax, dword [esp + 0x14c]
call fcn.0044cea0
jmp 0x4fb934
mov eax, dword [esp + 0x14c]
jmp 0x4fb934
mov ebp, dword [esp + 0x14c]
xor ebx, ebx
xor eax, eax
xor edx, edx
jmp 0x4fb96c
call fcn.0044b750
jmp fcn.004fb8d0