Function at 0x4c9a80
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2d98
call fcn.00497b90
mov dword [ebp - 0x2578], 0
mov eax, dword [0x519ac8]
mov ecx, dword [eax + 0x198]
mov edx, dword [ecx + 0x1cdc]
mov dword [ebp - 0x2574], edx
lea eax, [ebp - 0x100c]
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
push ecx
push 0x23
call fcn.004ca8d4
add esp, 8
push 0
lea edx, [ebp - 8]
push edx
mov eax, dword [0x519ac8]
push eax
call fcn.00440d33
add esp, 4
push eax
mov ecx, dword [0x519ac8]
push ecx
call fcn.0041b320
add esp, 8
push eax
call fcn.004ca911
add esp, 0xc
push 0x5083bc
mov edx, dword [ebp - 8]
push edx
call fcn.00496990
add esp, 8
lea eax, [ebp - 0x100c]
push eax
call fcn.004c7c60
add esp, 4
lea ecx, [ebp - 0x100c]
mov dword [ebp - 8], ecx
lea edx, [ebp - 8]
push edx
push 0x27
call fcn.004ca8d4
add esp, 8
push 0
lea eax, [ebp - 8]
push eax
call fcn.004567d0
push eax
call fcn.004ca911
add esp, 0xc
push 0x5083c0
mov ecx, dword [ebp - 8]
push ecx
call fcn.00496990
add esp, 8
lea edx, [ebp - 0x100c]
push edx
call fcn.004c7c60
add esp, 4
lea eax, [ebp - 0x100c]
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
push ecx
push 0x28
call fcn.004ca8d4
add esp, 8
push 0
lea edx, [ebp - 8]
push edx
mov eax, dword [0x519ac8]
xor ecx, ecx
mov cx, word [eax + 4]
push ecx
call fcn.004ca991
add esp, 0xc
push 0
lea edx, [ebp - 8]
push edx
mov eax, dword [0x519ac8]
xor ecx, ecx
mov cx, word [eax + 6]
push ecx
call fcn.004ca991
add esp, 0xc
push 0
lea edx, [ebp - 8]
push edx
xor eax, eax
cmp dword [0x5097cc], 0
setne al
push eax
call fcn.004ca991
add esp, 0xc
push 0
lea ecx, [ebp - 8]
push ecx
xor edx, edx
cmp dword [0x5097d0], 0
setne dl
push edx
call fcn.004ca991
add esp, 0xc
push 0
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x2574]
xor edx, edx
cmp dword [ecx + 0x818], 0
setne dl
push edx
call fcn.004ca991
add esp, 0xc
push 0
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x2574]
xor edx, edx
cmp dword [ecx + 0x81c], 0
setne dl
push edx
call fcn.004ca991
add esp, 0xc
push 0
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x2574]
xor edx, edx
cmp dword [ecx + 0x820], 0
setne dl
push edx
call fcn.004ca991
add esp, 0xc
push 0
lea eax, [ebp - 8]
push eax
push 0x1f7
mov ecx, dword [ebp - 0x2574]
push ecx
call fcn.0043add1
add esp, 8
neg eax
sbb eax, eax
neg eax
push eax
call fcn.004ca991
add esp, 0xc
push 0
lea edx, [ebp - 8]
push edx
mov eax, dword [ebp - 0x2574]
xor ecx, ecx
cmp dword [eax + 0xb04], 0
setne cl
push ecx
call fcn.004ca991
add esp, 0xc
push 0
lea edx, [ebp - 8]
push edx
mov eax, dword [ebp - 0x2574]
mov ecx, dword [eax + 0x8d0]
push ecx
call fcn.004ca911
add esp, 0xc
push 0
lea edx, [ebp - 8]
push edx
mov eax, dword [0x4f7048]
push eax
call fcn.004ca991
add esp, 0xc
push 0
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x2574]
mov eax, dword [edx + 0xaf0]
push eax
call fcn.004ca991
add esp, 0xc
push 0
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x2574]
mov eax, dword [edx + 0xaf4]
push eax
call fcn.004ca991
add esp, 0xc
push 0
lea ecx, [ebp - 8]
push ecx
mov edx, dword [0x4f7054]
push edx
call fcn.004ca991
add esp, 0xc
push 0
lea eax, [ebp - 8]
push eax
mov ecx, dword [0x4f7058]
push ecx
call fcn.004ca991
add esp, 0xc
push 0
lea edx, [ebp - 8]
push edx
push 0x206
mov eax, dword [ebp - 0x2574]
push eax
call fcn.0043add1
add esp, 8
neg eax
sbb eax, eax
neg eax
push eax
call fcn.004ca991
add esp, 0xc
push 0
lea ecx, [ebp - 8]
push ecx
mov edx, dword [0x509804]
push edx
call fcn.004ca991
add esp, 0xc
push 0
lea eax, [ebp - 8]
push eax
push 0x1f8
mov ecx, dword [ebp - 0x2574]
push ecx
call fcn.0043add1
add esp, 8
push eax
call fcn.004ca991
add esp, 0xc
push 0
lea edx, [ebp - 8]
push edx
push 0x1f9
mov eax, dword [ebp - 0x2574]
push eax
call fcn.0043add1
add esp, 8
push eax
call fcn.004ca991
add esp, 0xc
push 0
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x2574]
mov eax, dword [edx + 0x838]
push eax
call fcn.004ca991
add esp, 0xc
push 0
lea ecx, [ebp - 8]
push ecx
push 0x1fa
mov edx, dword [ebp - 0x2574]
push edx
call fcn.0043add1
add esp, 8
push eax
call fcn.004ca991
add esp, 0xc
push 0
lea eax, [ebp - 8]
push eax
push 0x1fb
mov ecx, dword [ebp - 0x2574]
push ecx
call fcn.0043add1
add esp, 8
push eax
call fcn.004ca991
add esp, 0xc
lea edx, [ebp - 0x2578]
push edx
push 0x41
mov eax, dword [0x519ac8]
push eax
call fcn.0043a030
add esp, 0xc
push 0
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x2578]
push edx
call fcn.004ca911
add esp, 0xc
push 0
lea eax, [ebp - 8]
push eax
mov ecx, dword [0x509820]
push ecx
call fcn.004ca991
add esp, 0xc
push 0
lea edx, [ebp - 8]
push edx
push 0x4000
mov eax, dword [0x519ac8]
push eax
call fcn.00439d5d
add esp, 8
push eax
call fcn.004ca991
add esp, 0xc
push 0
lea ecx, [ebp - 8]
push ecx
push 0x400
mov edx, dword [0x519ac8]
push edx
call fcn.00439d5d
add esp, 8
push eax
call fcn.004ca991
add esp, 0xc
push 0
lea eax, [ebp - 8]
push eax
push 0x800
mov ecx, dword [0x519ac8]
push ecx
call fcn.00439d5d
add esp, 8
push eax
call fcn.004ca991
add esp, 0xc
push 0x5083c4
mov edx, dword [ebp - 8]
push edx
call fcn.00496990
add esp, 8
lea eax, [ebp - 0x100c]
push eax
call fcn.004c7c60
add esp, 4
mov ecx, dword [0x519ac8]
cmp dword [ecx + 0xd8], 0
je 0x4c9fa2
mov edx, dword [0x519ac8]
mov eax, dword [edx + 0xd8]
mov ecx, dword [eax + 0x260]
mov dword [ebp - 0x257c], ecx
jmp 0x4c9f07
mov edx, dword [ebp - 0x257c]
mov eax, dword [edx + 0x408]
mov dword [ebp - 0x257c], eax
cmp dword [ebp - 0x257c], 0
je 0x4c9fa2
lea ecx, [ebp - 0x100c]
mov dword [ebp - 8], ecx
lea edx, [ebp - 8]
push edx
push 0x20
call fcn.004ca8d4
add esp, 8
push 0
lea eax, [ebp - 8]
push eax
push 0x5083c8
call fcn.004ca911
add esp, 0xc
push 0
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x257c]
push edx
call fcn.004ca911
add esp, 0xc
push 0
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x257c]
mov edx, dword [ecx + 0x404]
push edx
mov eax, dword [0x519ac8]
push eax
call fcn.0041b320
add esp, 8
push eax
call fcn.004ca911
add esp, 0xc
push 0x5083d0
mov ecx, dword [ebp - 8]
push ecx
call fcn.00496990
add esp, 8
lea edx, [ebp - 0x100c]
push edx
call fcn.004c7c60
add esp, 4
jmp 0x4c9ef5
mov eax, dword [0x519ac8]
mov ecx, dword [eax + 0xd8]
mov dword [ebp - 0x201c], ecx
jmp 0x4c9fc7
mov edx, dword [ebp - 0x201c]
mov eax, dword [edx + 0x370]
mov dword [ebp - 0x201c], eax
cmp dword [ebp - 0x201c], 0
je 0x4ca032
mov ecx, dword [ebp - 0x201c]
xor edx, edx
mov dl, byte [ecx + 0x318]
and edx, 1
test edx, edx
je 0x4ca030
push 0
lea eax, [ebp - 0x100c]
push eax
mov ecx, dword [ebp - 0x201c]
push ecx
mov edx, dword [0x519ac8]
push edx
call fcn.004194b7
add esp, 0x10
lea eax, [ebp - 0x100c]
push eax
push 6
push 0x5083d4
lea ecx, [ebp - 0x2018]
push ecx
call fcn.004970c0
add esp, 0x10
lea edx, [ebp - 0x2018]
push edx
call fcn.004c7c60
add esp, 4
jmp 0x4c9fb5
mov eax, dword [0x519ac8]
mov ecx, dword [eax + 0xd8]
mov dword [ebp - 0x201c], ecx
jmp 0x4ca057
mov edx, dword [ebp - 0x201c]
mov eax, dword [edx + 0x370]
mov dword [ebp - 0x201c], eax
cmp dword [ebp - 0x201c], 0
je 0x4ca19f
mov dword [ebp - 0x2580], 0x25
mov ecx, dword [ebp - 0x201c]
xor edx, edx
mov dl, byte [ecx + 0x318]
and edx, 1
test edx, edx
je 0x4ca085
jmp 0x4ca045
push 0
lea eax, [ebp - 0x100c]
push eax
mov ecx, dword [ebp - 0x201c]
push ecx
mov edx, dword [0x519ac8]
push edx
call fcn.004194b7
add esp, 0x10
lea eax, [ebp - 0x100c]
push eax
push 6
push str._x__s_n
lea ecx, [ebp - 0x2018]
push ecx
call fcn.004970c0
add esp, 0x10
lea edx, [ebp - 0x2018]
push edx
call fcn.004c7c60
add esp, 4
mov eax, dword [ebp - 0x201c]
cmp dword [eax + 0x320], 0
je 0x4ca19a
mov ecx, dword [ebp - 0x201c]
mov edx, dword [ecx + 0x320]
xor eax, eax
mov al, byte [edx + 0x318]
and eax, 8
test eax, eax
jne 0x4ca119
mov ecx, dword [ebp - 0x201c]
mov edx, dword [ecx + 0x320]
xor eax, eax
mov al, byte [edx + 0x318]
and eax, 2
test eax, eax
je 0x4ca123
mov dword [ebp - 0x2580], 0x26
mov ecx, dword [ebp - 0x201c]
mov edx, dword [ecx + 0x320]
push edx
mov eax, dword [0x519ac8]
push eax
call fcn.00443e82
add esp, 8
push eax
mov ecx, dword [ebp - 0x201c]
mov edx, dword [ecx + 0x320]
add edx, 2
push edx
mov eax, dword [ebp - 0x201c]
push eax
mov ecx, dword [0x519ac8]
push ecx
call fcn.00443e82
add esp, 8
push eax
mov edx, dword [ebp - 0x201c]
add edx, 2
push edx
mov eax, dword [ebp - 0x2580]
push eax
push str._x__s__s__s__s_n
lea ecx, [ebp - 0x100c]
push ecx
call fcn.004970c0
add esp, 0x1c
lea edx, [ebp - 0x100c]
push edx
call fcn.004c7c60
add esp, 4
jmp 0x4ca045
mov eax, dword [0x513564]
mov dword [ebp - 0x2570], eax
jmp 0x4ca1ba
mov ecx, dword [ebp - 0x2570]
mov edx, dword [ecx]
mov dword [ebp - 0x2570], edx
cmp dword [ebp - 0x2570], 0
je 0x4ca334
lea eax, [ebp - 0x2564]
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
push ecx
push 0x50
call fcn.004ca8d4
add esp, 8
push 0
lea edx, [ebp - 8]
push edx
mov eax, dword [ebp - 0x2570]
mov ecx, dword [eax + 4]
push ecx
call fcn.004ca911
add esp, 0xc
push str._n_n_n_n_n_n
mov edx, dword [ebp - 8]
push edx
call fcn.00496990
add esp, 8
lea eax, [ebp - 0x2564]
push eax
call fcn.004c7c60
add esp, 4
mov ecx, dword [ebp - 0x2570]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x2584], edx
mov eax, dword [ebp - 0x2584]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4ca32f
mov edx, dword [ebp - 0x2584]
movsx eax, byte [edx]
cmp eax, 0x20
jne 0x4ca255
mov ecx, dword [ebp - 0x2584]
add ecx, 1
mov dword [ebp - 0x2584], ecx
jmp 0x4ca236
lea edx, [ebp - 0x2988]
mov dword [ebp - 0x298c], edx
mov eax, dword [ebp - 0x2584]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4ca2ac
mov edx, dword [ebp - 0x2584]
movsx eax, byte [edx]
cmp eax, 0x20
je 0x4ca2ac
mov ecx, dword [ebp - 0x298c]
mov edx, dword [ebp - 0x2584]
mov al, byte [edx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x298c]
add ecx, 1
mov dword [ebp - 0x298c], ecx
mov edx, dword [ebp - 0x2584]
add edx, 1
mov dword [ebp - 0x2584], edx
jmp 0x4ca261
lea eax, [ebp - 0x2564]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x298c]
mov byte [ecx], 0
movsx edx, byte [ebp - 0x2988]
test edx, edx
jne 0x4ca2cb
jmp 0x4ca32f
lea eax, [ebp - 8]
push eax
push 0x52
call fcn.004ca8d4
add esp, 8
push 0
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0x2988]
push edx
call fcn.004ca911
add esp, 0xc
push 0x5083f8
mov eax, dword [ebp - 8]
push eax
call fcn.00496990
add esp, 8
lea ecx, [ebp - 0x2564]
push ecx
call fcn.004c7c60
add esp, 4
mov edx, dword [ebp - 0x2584]
movsx eax, byte [edx]
test eax, eax
je 0x4ca32a
mov ecx, dword [ebp - 0x2584]
add ecx, 1
mov dword [ebp - 0x2584], ecx
jmp 0x4ca225
jmp 0x4ca1ac
mov edx, dword [0x513568]
mov dword [ebp - 0x2570], edx
jmp 0x4ca350
mov eax, dword [ebp - 0x2570]
mov ecx, dword [eax]
mov dword [ebp - 0x2570], ecx
cmp dword [ebp - 0x2570], 0
je 0x4ca4ca
lea edx, [ebp - 0x2564]
mov dword [ebp - 8], edx
lea eax, [ebp - 8]
push eax
push 0x51
call fcn.004ca8d4
add esp, 8
push 0
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x2570]
mov eax, dword [edx + 4]
push eax
call fcn.004ca911
add esp, 0xc
push 0x5083fc
mov ecx, dword [ebp - 8]
push ecx
call fcn.00496990
add esp, 8
lea edx, [ebp - 0x2564]
push edx
call fcn.004c7c60
add esp, 4
mov eax, dword [ebp - 0x2570]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2990], ecx
mov edx, dword [ebp - 0x2990]
movsx eax, byte [edx]
test eax, eax
je 0x4ca4c5
mov ecx, dword [ebp - 0x2990]
movsx edx, byte [ecx]
cmp edx, 0x20
jne 0x4ca3eb
mov eax, dword [ebp - 0x2990]
add eax, 1
mov dword [ebp - 0x2990], eax
jmp 0x4ca3cc
lea ecx, [ebp - 0x2d94]
mov dword [ebp - 0x2d98], ecx
mov edx, dword [ebp - 0x2990]
movsx eax, byte [edx]
test eax, eax
je 0x4ca442
mov ecx, dword [ebp - 0x2990]
movsx edx, byte [ecx]
cmp edx, 0x20
je 0x4ca442
mov eax, dword [ebp - 0x2d98]
mov ecx, dword [ebp - 0x2990]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x2d98]
add eax, 1
mov dword [ebp - 0x2d98], eax
mov ecx, dword [ebp - 0x2990]
add ecx, 1
mov dword [ebp - 0x2990], ecx
jmp 0x4ca3f7
lea edx, [ebp - 0x2564]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x2d98]
mov byte [eax], 0
movsx ecx, byte [ebp - 0x2d94]
test ecx, ecx
jne 0x4ca461
jmp 0x4ca4c5
lea edx, [ebp - 8]
push edx
push 0x52
call fcn.004ca8d4
add esp, 8
push 0
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x2d94]
push ecx
call fcn.004ca911
add esp, 0xc
push 0x508400
mov edx, dword [ebp - 8]
push edx
call fcn.00496990
add esp, 8
lea eax, [ebp - 0x2564]
push eax
call fcn.004c7c60
add esp, 4
mov ecx, dword [ebp - 0x2990]
movsx edx, byte [ecx]
test edx, edx
je 0x4ca4c0
mov eax, dword [ebp - 0x2990]
add eax, 1
mov dword [ebp - 0x2990], eax
jmp 0x4ca3bb
jmp 0x4ca342
mov ecx, dword [0x504ea4]
mov dword [ebp - 0x256c], ecx
jmp 0x4ca4e6
mov edx, dword [ebp - 0x256c]
mov eax, dword [edx]
mov dword [ebp - 0x256c], eax
cmp dword [ebp - 0x256c], 0
je 0x4ca8b9
mov ecx, dword [ebp - 0x256c]
cmp dword [ecx + 0x34], 0
je 0x4ca50f
mov edx, dword [ebp - 0x256c]
mov eax, dword [edx + 0x34]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x4ca511
jmp 0x4ca4d8
lea edx, [ebp - 0x2564]
mov dword [ebp - 8], edx
lea eax, [ebp - 8]
push eax
push 0xc
call fcn.004ca8d4
add esp, 8
push 0
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x256c]
mov eax, dword [edx + 0x34]
push eax
call fcn.004ca911
add esp, 0xc
push 0
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x256c]
add edx, 0x54
push edx
call fcn.004ca911
add esp, 0xc
push 0
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x256c]
add ecx, 0x38
push ecx
call fcn.004ca911
add esp, 0xc
push 0
lea edx, [ebp - 8]
push edx
mov eax, dword [ebp - 0x256c]
add eax, 0x43
push eax
call fcn.004ca911
add esp, 0xc
push 0
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x256c]
mov eax, dword [edx + 0x70]
push eax
call fcn.004ca991
add esp, 0xc
mov ecx, dword [ebp - 0x256c]
cmp dword [ecx + 0x50], 0
je 0x4ca5d4
mov edx, dword [ebp - 0x256c]
mov eax, dword [edx + 0x50]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4ca5d4
push 0xd
lea edx, [ebp - 8]
push edx
mov eax, dword [ebp - 0x256c]
mov ecx, dword [eax + 0x50]
push ecx
call fcn.004ca911
add esp, 0xc
mov edx, dword [ebp - 0x256c]
cmp dword [edx + 0x74], 0
je 0x4ca5f8
push 1
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x256c]
mov edx, dword [ecx + 0x74]
push edx
call fcn.004ca991
add esp, 0xc
mov eax, dword [ebp - 0x256c]
movsx ecx, word [eax + 0x80]
test ecx, ecx
je 0x4ca625
push 2
lea edx, [ebp - 8]
push edx
mov eax, dword [ebp - 0x256c]
movsx ecx, word [eax + 0x82]
push ecx
call fcn.004ca991
add esp, 0xc
mov edx, dword [ebp - 0x256c]
cmp dword [edx + 0x88], 0
je 0x4ca64f
push 3
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x256c]
mov edx, dword [ecx + 0x88]
push edx
call fcn.004ca991
add esp, 0xc
mov eax, dword [ebp - 0x256c]
mov ecx, dword [eax + 0xb0]
and ecx, 2
test ecx, ecx
je 0x4ca672
push 4
lea edx, [ebp - 8]
push edx
push 1
call fcn.004ca991
add esp, 0xc
mov eax, dword [ebp - 0x256c]
cmp dword [eax + 0x90], 0
je 0x4ca69c
push 5
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x256c]
mov eax, dword [edx + 0x90]
push eax
call fcn.004ca991
add esp, 0xc
mov ecx, dword [ebp - 0x256c]
cmp dword [ecx + 0x94], 0
je 0x4ca6c6
push 6
lea edx, [ebp - 8]
push edx
mov eax, dword [ebp - 0x256c]
mov ecx, dword [eax + 0x94]
push ecx
call fcn.004ca991
add esp, 0xc
mov edx, dword [ebp - 0x256c]
cmp dword [edx + 0x98], 0
je 0x4ca6f0
push 7
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x256c]
mov edx, dword [ecx + 0x98]
push edx
call fcn.004ca991
add esp, 0xc
mov eax, dword [ebp - 0x256c]
cmp dword [eax + 0xa0], 0
je 0x4ca71a
push 9
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x256c]
mov eax, dword [edx + 0xa0]
push eax
call fcn.004ca991
add esp, 0xc
mov ecx, dword [ebp - 0x256c]
cmp dword [ecx + 0xa4], 0
je 0x4ca744
push 0xa
lea edx, [ebp - 8]
push edx
mov eax, dword [ebp - 0x256c]
mov ecx, dword [eax + 0xa4]
push ecx
call fcn.004ca991
add esp, 0xc
mov edx, dword [ebp - 0x256c]
cmp dword [edx + 0xa8], 0
je 0x4ca76e
push 0xb
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x256c]
mov edx, dword [ecx + 0xa8]
push edx
call fcn.004ca991
add esp, 0xc
mov eax, dword [ebp - 0x256c]
cmp dword [eax + 0xac], 0
je 0x4ca798
push 0xc
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x256c]
mov eax, dword [edx + 0xac]
push eax
call fcn.004ca991
add esp, 0xc
push 0x508404
mov ecx, dword [ebp - 8]
push ecx
call fcn.00496990
add esp, 8
lea edx, [ebp - 0x2564]
push edx
call fcn.004c7c60
add esp, 4
mov eax, dword [ebp - 0x256c]
mov ecx, dword [eax + 0x8c]
mov dword [ebp - 4], ecx
jmp 0x4ca7d1
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4ca860
mov ecx, dword [ebp - 0x256c]
add ecx, 0x54
push ecx
mov edx, dword [ebp - 4]
add edx, 0x10
push edx
call fcn.00497f00
add esp, 8
test eax, eax
jne 0x4ca7fa
jmp 0x4ca7c9
mov eax, dword [ebp - 4]
add eax, 0x10
push eax
call fcn.004cfb8c
add esp, 4
mov dword [ebp - 0x2568], eax
lea ecx, [ebp - 0x2564]
mov dword [ebp - 8], ecx
lea edx, [ebp - 8]
push edx
push 0xe
call fcn.004ca8d4
add esp, 8
push 0
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x2568]
push ecx
call fcn.004ca991
add esp, 0xc
push 0x508408
mov edx, dword [ebp - 8]
push edx
call fcn.00496990
add esp, 8
lea eax, [ebp - 0x2564]
push eax
call fcn.004c7c60
add esp, 4
jmp 0x4ca7c9
mov ecx, dword [ebp - 0x256c]
add ecx, 0x54
push ecx
mov edx, dword [ebp - 0x256c]
mov eax, dword [edx + 0x14]
push eax
call fcn.004cbcc2
add esp, 8
mov ecx, dword [ebp - 0x256c]
add ecx, 0x54
push ecx
mov edx, dword [ebp - 0x256c]
mov eax, dword [edx + 0x18]
push eax
call fcn.004cbcc2
add esp, 8
mov ecx, dword [ebp - 0x256c]
add ecx, 0x54
push ecx
mov edx, dword [ebp - 0x256c]
mov eax, dword [edx + 0x20]
push eax
call fcn.004cbcc2
add esp, 8
jmp 0x4ca4d8
push 0
call fcn.004c9030
add esp, 4
push 0x50840c
call fcn.004c7c60
add esp, 4
mov esp, ebp
pop ebp
ret