Function at 0x4de8e8
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4df698
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov al, byte [eax + 4]
xor edx, edx
mov dl, al
cmp edx, 0xb2
ja case.0x4de928.0
mov dl, byte [edx + 0x4de92f]
jmp dword [edx*4 + 0x4de9e2]
mov eax, dword [ebp - 4]
cmp dword [eax + 0x14], 0
jne 0x4dea95
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
push eax
mov eax, dword [ebp - 4]
mov al, byte [eax + 6]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4d0a2c]
call fcn.004d7d84
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 4]
mov cl, byte [eax + 0xe8]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0x38]
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x14], 0
jne 0x4deb06
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
push eax
mov eax, dword [ebp - 4]
mov al, byte [eax + 6]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4d0a2c]
call fcn.004d7d84
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
push eax
mov eax, dword [ebp - 4]
mov al, byte [eax + 0xe8]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x94]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
call fcn.004d85ac
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x14], 0
jne 0x4deb85
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
push eax
mov eax, dword [ebp - 4]
mov al, byte [eax + 6]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4d0a2c]
call fcn.004d7d84
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x94]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
push eax
mov eax, dword [ebp - 4]
mov al, byte [eax + 0xe8]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [ebp - 4]
mov dl, byte [eax + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
call fcn.004d8680
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 4], 0x6e
jne 0x4debe2
mov eax, dword [ebp - 0x10]
mov edx, dword [0x4cda04]
call fcn.00403d04
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.004dd168
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x14], 0
jne 0x4dec36
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
push eax
mov eax, dword [ebp - 4]
mov al, byte [eax + 6]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4d0a2c]
call fcn.004d7d84
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x94]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
push eax
mov eax, dword [ebp - 4]
mov al, byte [eax + 0xe8]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov dl, 0x6a
call fcn.004d8680
mov edx, dword [0x4cdaf4]
call fcn.00403d04
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004dc7a8
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x94]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4d0418]
call fcn.004d231c
mov edx, dword [ebp - 4]
mov dword [edx + 0x11c], eax
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x11c], edx
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.004d33bc
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 4]
cmp byte [eax + 0xd], 0
jne 0x4ded29
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4cd5f8]
call fcn.004d4a40
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.004d33bc
mov eax, dword [ebp - 4]
call fcn.004db848
mov eax, dword [ebp - 4]
call fcn.004dc880
mov ebx, eax
mov eax, dword [ebp - 4]
mov byte [eax + 0xd], 1
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp 0x4ded6d
mov eax, dword [ebp - 4]
call fcn.004dc880
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.004db848
mov eax, dword [ebp - 4]
mov byte [eax + 0xd], 1
mov eax, dword [ebp - 4]
call fcn.004dc458
mov eax, dword [ebp - 4]
mov al, byte [eax + 4]
add al, 0xfc
sub al, 2
jb 0x4ded4c
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
push eax
push ebx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4d0a2c]
call fcn.004d7d84
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], eax
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4dedd8
mov edx, dword [ebp - 4]
mov cl, byte [edx + 0xe8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x10]
call fcn.004d8410
mov ebx, eax
jmp 0x4dedde
mov eax, dword [ebp - 4]
mov bl, byte [eax + 6]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.004d33bc
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
push eax
push ebx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4d0a2c]
call fcn.004d7d84
mov esi, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x14], esi
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x94]
mov eax, esi
call fcn.004d7f5c
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
cmp al, 0xb0
sete al
mov edx, dword [ebp - 4]
mov byte [edx + 0xe8], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4dee75
mov edx, dword [ebp - 4]
mov cl, byte [edx + 0xe8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xa8]
mov ebx, dword [eax]
call dword [ebx + 0x38]
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4deeaf
mov edx, dword [ebp - 4]
cmp byte [edx + 0xe8], 0
je 0x4deeaf
mov edx, dword [ebp - 4]
mov dl, byte [edx + 0xe8]
push edx
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x10]
mov dl, 0x20
call fcn.004d8038
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
and eax, 0xff
cmp eax, 0x18
jge 0x4def1d
add eax, 0xfffffffa
cmp eax, 0x10
ja case.0x4deed2.10
jmp dword [eax*4 + 0x4deed9]
cmp eax, 0x7d
jg 0x4def62
je 0x4df074
cmp eax, 0x7a
jg 0x4def4d
je 0x4df080
add eax, 0xffffffe8
sub eax, 2
jb case.0x4deed2.8
sub eax, 2
jb case.0x4deed2.9
jmp case.0x4deed2.10
sub eax, 0x7b
je 0x4df074
dec eax
je 0x4df080
jmp case.0x4deed2.10
sub eax, 0x9d
je 0x4df03b
dec eax
je 0x4df058
dec eax
je 0x4df03b
dec eax
je 0x4df058
jmp case.0x4deed2.10
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x118]
or al, byte [0x4df6a8]
mov edx, dword [ebp - 4]
mov byte [edx + 0x118], al
jmp case.0x4deed2.10
mov eax, dword [ebp - 4]
mov dl, byte [0x4df6a8]
not edx
and dl, byte [eax + 0x118]
mov eax, dword [ebp - 4]
mov byte [eax + 0x118], dl
jmp case.0x4deed2.10
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x118]
or al, byte [0x4df6ac]
mov edx, dword [ebp - 4]
mov byte [edx + 0x118], al
jmp case.0x4deed2.10
mov eax, dword [ebp - 4]
mov dl, byte [0x4df6ac]
not edx
and dl, byte [eax + 0x118]
mov eax, dword [ebp - 4]
mov byte [eax + 0x118], dl
jmp case.0x4deed2.10
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x118]
or al, byte [0x4df6b0]
mov edx, dword [ebp - 4]
mov byte [edx + 0x118], al
jmp case.0x4deed2.10
mov eax, dword [ebp - 4]
mov dl, byte [0x4df6b0]
not edx
and dl, byte [eax + 0x118]
mov eax, dword [ebp - 4]
mov byte [eax + 0x118], dl
jmp case.0x4deed2.10
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x118]
or al, byte [0x4df6b4]
mov edx, dword [ebp - 4]
mov byte [edx + 0x118], al
jmp case.0x4deed2.10
mov eax, dword [ebp - 4]
mov dl, byte [0x4df6b4]
not edx
and dl, byte [eax + 0x118]
mov eax, dword [ebp - 4]
mov byte [eax + 0x118], dl
jmp case.0x4deed2.10
mov eax, dword [ebp - 4]
mov byte [eax + 0x119], 0
jmp case.0x4deed2.10
mov eax, dword [ebp - 4]
cmp dword [eax + 0x14], 0
jne 0x4df0c7
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
push eax
mov eax, dword [ebp - 4]
mov al, byte [eax + 6]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4d0a2c]
call fcn.004d7d84
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 4], 0x7a
jne 0x4df0dc
mov eax, dword [ebp - 4]
mov byte [eax + 0x119], 1
jmp case.0x4deed2.10
mov eax, dword [ebp - 4]
mov byte [eax + 0x119], 2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4df10b
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x88]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + edx*4 + 0x20]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1c]
call fcn.004d845c
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
call fcn.004dc4ec
test al, al
je 0x4df18a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov ebx, dword [edx + eax*4 + 0x20]
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1c]
add edx, 0x66
call fcn.00404ba0
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004236f8
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x1c]
mov ecx, 0xa
mov eax, ebx
call fcn.004d0d6c
mov byte [ebx + 0x2c], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4df18a
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x88]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + edx*4 + 0x20]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1c]
call fcn.004d845c
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
call fcn.004dc530
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4df1c4
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x88]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + edx*4 + 0x20]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1c]
call fcn.004d845c
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
push ebp
mov eax, dword [ebp - 4]
mov al, byte [eax + 4]
xor edx, edx
call fcn.004ddb9c
pop ecx
test al, al
je 0x4df20e
mov eax, dword [ebp - 4]
cmp dword [eax + 0x14], 0
je 0x4df20e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov ecx, dword [edx + eax*4 + 0x20]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
call fcn.004d845c
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
push ebp
mov eax, dword [ebp - 4]
mov al, byte [eax + 4]
xor edx, edx
call fcn.004ddaf8
pop ecx
test al, al
je 0x4df258
mov eax, dword [ebp - 4]
cmp dword [eax + 0x14], 0
je 0x4df258
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov ecx, dword [edx + eax*4 + 0x20]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
call fcn.004d845c
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.004d33bc
mov eax, dword [ebp - 4]
call fcn.004dc4ec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov ebx, dword [edx + eax*4 + 0x20]
mov eax, ebx
call fcn.00423790
mov edx, eax
or dl, byte [0x4df6ac]
mov eax, ebx
call fcn.0042379c
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
push eax
mov eax, dword [ebp - 4]
mov al, byte [eax + 6]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4d0a2c]
call fcn.004d7d84
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.004d33bc
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 4]
call fcn.004dc530
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x94]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x4df4e9
inc esi
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x94]
mov edx, dword [ebp - 0x18]
call fcn.00417854
mov ebx, eax
mov al, byte [ebx + 4]
sub al, 0x3e
je 0x4df3fb
dec al
jne 0x4df4df
cmp dword [ebx + 0x10], 0
je 0x4df4df
mov eax, dword [ebp - 4]
cmp dword [eax + 0x14], 0
jne 0x4df3b1
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
push eax
mov eax, dword [ebp - 4]
mov al, byte [eax + 6]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4d0a2c]
call fcn.004d7d84
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], eax
lea edx, [ebp - 0x1c]
mov eax, dword [ebx + 0x10]
call fcn.00408dd8
mov eax, dword [ebp - 0x1c]
call fcn.00404bfc
test eax, eax
jle 0x4df3e2
mov eax, dword [ebp - 0x1c]
cmp byte [eax], 0x23
jne 0x4df3e2
lea eax, [ebp - 0x1c]
mov ecx, 1
mov edx, 1
call fcn.00404e94
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
jmp 0x4df4df
mov eax, dword [ebp - 4]
cmp byte [eax + 0x90], 0
je 0x4df40f
mov eax, dword [ebp - 4]
call fcn.004dc984
cmp dword [ebx + 0x10], 0
je 0x4df4df
lea ecx, [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x94]
mov dl, 0x91
call fcn.004e1f2c
test al, al
je 0x4df449
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
mov edx, dword [ebx + 0x10]
call fcn.004e1fd4
jmp 0x4df45c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
xor ecx, ecx
mov edx, dword [ebx + 0x10]
call fcn.004e1fd4
mov eax, dword [ebp - 4]
mov byte [eax + 0x90], 1
mov eax, dword [ebp - 4]
call fcn.004dc4ec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov ebx, dword [edx + eax*4 + 0x20]
mov eax, ebx
call fcn.00423790
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
or dl, byte [eax + 0x99]
mov eax, ebx
call fcn.0042379c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
mov edx, dword [eax + 0x94]
mov eax, ebx
call fcn.004234d0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4df4df
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x8c]
push edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x88]
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edx*4 + 0x20]
push edx
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x1c]
mov dl, 0x3e
call fcn.004d8548
inc dword [ebp - 0x18]
dec esi
jne 0x4df33a
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
call fcn.004dc984
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x88], 0x19
jge 0x4df5ce
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.004d33bc
mov eax, dword [ebp - 4]
inc dword [eax + 0x88]
push ebp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov edx, dword [edx + eax*4 + 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xa4]
call fcn.004de830
pop ecx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x88]
mov ecx, dword [ebp - 4]
mov dword [ecx + edx*4 + 0x20], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xa4]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4cd68c]
call fcn.004cdc10
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.004d33bc
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c]
push eax
mov eax, dword [ebp - 4]
call fcn.004dc880
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4d0a2c]
call fcn.004d7d84
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x88], 1
jle 0x4df631
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.004d33bc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xa4]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x4cd68c]
call fcn.004cdc10
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.004d33bc
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 4]
call fcn.004dc530
mov eax, dword [ebp - 4]
call fcn.004dc458
jmp case.0x4de928.0
push ebp
call fcn.004ddee4
pop ecx
jmp case.0x4de928.0
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004dcc44
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
call fcn.004dd5b4
jmp case.0x4de928.0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push dword [eax + 0xf4]
push dword [eax + 0xf0]
mov eax, dword [ebp - 4]
call fcn.004dd8e4
mov eax, dword [ebp - 4]
call fcn.004dc458
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4df69f
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00404968
ret