Function at 0x47e3d0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x626841
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x7151ac]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x7c], edi
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov dword [edi + 0x18], eax
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
and ebx, 0xfffffffe
mov dword [ebp - 4], eax
cmp esi, 0x13ed
mov dword [ebp - 0x78], 1
lea eax, [esi - 0x1388]
cmovne ebx, dword [ebp + 0x10]
mov dword [ebp - 0x74], ebx
cmp eax, 0x9e
ja case.0x47e456.5005
movzx eax, byte [eax + 0x480884]
jmp dword [eax*4 + 0x480760]
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47e4dc
push 0x667964
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
cmp edi, eax
je 0x47e4cf
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x47e4c4
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
mov ecx, edi
call fcn.0040f630
lea ecx, [ebp - 0x50]
call fcn.0040d530
lea ecx, [ebp - 0x30]
jmp 0x47e551
push 0x66796c
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 6
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
cmp edi, eax
je 0x47e546
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x47e53b
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
mov ecx, edi
call fcn.0040f630
lea ecx, [ebp - 0x30]
call fcn.0040d530
lea ecx, [ebp - 0x50]
call fcn.0040d530
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.0040d530
jmp 0x48064b
push 0x667974
lea ecx, [ebp - 0x70]
call fcn.0040cef0
test bl, 1
je 0x47e5b1
xor eax, eax
mov dword [ebp - 4], 7
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 9
jmp 0x47e519
xor eax, eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0xc
jmp 0x47e519
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47e633
push 0x667978
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0xf
jmp 0x47e519
push 0x667980
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x12
jmp 0x47e519
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47e6bf
push 0x667988
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x15
jmp 0x47e519
push 0x667990
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x18
jmp 0x47e519
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47e74b
push 0x667998
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x1b
jmp 0x47e519
push 0x6679a0
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x1e
jmp 0x47e519
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47e7d7
push 0x6679a8
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x21
jmp 0x47e519
push 0x6679b0
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x24
jmp 0x47e519
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47e863
push 0x667530
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x27
jmp 0x47e519
push 0x6527e8
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47e927
push 0x6679b8
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x6679c0
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47e9eb
push 0x6679c8
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x31
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x6679d0
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x34
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x36
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47eaaf
push 0x6679d8
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x37
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x6679e0
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x3a
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47eb73
push 0x6679e8
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x3d
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x3f
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x6679f4
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x40
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47ec37
push 0x6679fc
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x43
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x667a04
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x46
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x48
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47ecfb
push 0x667a0c
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x49
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x4b
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x667a14
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x4c
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x4e
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47edbf
push 0x667a18
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x4f
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x51
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x667a20
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x52
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47ee83
push 0x667a28
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x55
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x57
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x667a30
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x58
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x5a
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47ef47
push 0x667a38
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x5b
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x5d
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x667a40
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x5e
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x60
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f00b
push 0x667a48
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x61
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x63
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x667a54
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x64
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x66
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f0cf
push 0x667a5c
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x67
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x69
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x667a64
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x6a
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x6c
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f193
push 0x667a6c
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x6d
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x6f
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x667a74
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x70
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x72
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f257
push 0x667a7c
call fcn.0040cef0
xor eax, eax
mov dword [ebp - 4], 0x73
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x75
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
jmp 0x47e546
push 0x667a84
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x76
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x78
push esi
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
lea ecx, [ebp - 0x30]
call fcn.0040d530
lea ecx, [ebp - 0x50]
call fcn.0040d530
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.0040d530
mov esi, dword [ebp + 0xc]
jmp 0x48064b
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f2e9
push 0x667a8c
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x79
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x7b
jmp 0x47f27e
push 0x667a94
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x7c
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x7e
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f349
push 0x667a9c
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x7f
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x81
jmp 0x47f27e
push 0x667aa4
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x82
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x84
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f3a9
push 0x667aac
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x85
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x87
jmp 0x47f27e
push 0x667ab8
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x88
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x8a
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f409
push 0x667ac0
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x8b
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x8d
jmp 0x47f27e
push 0x667acc
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x8e
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x90
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f469
push 0x667ad8
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x91
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x93
jmp 0x47f27e
push 0x6527f0
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x94
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x96
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f4c9
push 0x667ae0
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x97
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x99
jmp 0x47f27e
push 0x667ae8
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x9a
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x9c
jmp 0x47f27e
push 0x667af0
lea ecx, [ebp - 0x70]
call fcn.0040cef0
test bl, 1
je 0x47f529
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x9d
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x9f
jmp 0x47f27e
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xa0
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xa2
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f57f
push 0x667af8
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xa3
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xa5
jmp 0x47f27e
push 0x667b00
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xa6
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xa8
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f5df
push 0x667b08
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xa9
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xab
jmp 0x47f27e
push 0x667b10
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xac
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xae
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f63f
push 0x667b18
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xaf
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xb1
jmp 0x47f27e
push 0x667b20
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xb2
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xb4
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f69f
push 0x667b28
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xb5
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xb7
jmp 0x47f27e
push 0x667b34
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xb8
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xba
jmp 0x47f27e
push 0x667b3c
lea ecx, [ebp - 0x70]
call fcn.0040cef0
test bl, 1
je 0x47f6ff
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xbb
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xbd
jmp 0x47f27e
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xbe
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xc0
jmp 0x47f27e
push 0x667b48
lea ecx, [ebp - 0x70]
call fcn.0040cef0
test bl, 1
je 0x47f755
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xc1
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xc3
jmp 0x47f27e
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xc4
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xc6
jmp 0x47f27e
push 0x667b54
lea ecx, [ebp - 0x70]
call fcn.0040cef0
test bl, 1
je 0x47f7ab
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xc7
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xc9
jmp 0x47f27e
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xca
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xcc
jmp 0x47f27e
push 0x667b60
lea ecx, [ebp - 0x70]
call fcn.0040cef0
test bl, 1
je 0x47f801
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xcd
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xcf
jmp 0x47f27e
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xd0
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xd2
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f857
push 0x667b6c
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xd3
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xd5
jmp 0x47f27e
push 0x667b74
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xd6
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xd8
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f8b7
push 0x667b7c
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xd9
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xdb
jmp 0x47f27e
push 0x667b88
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xdc
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xde
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f917
push 0x667b90
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xdf
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xe1
jmp 0x47f27e
push 0x667b98
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xe2
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xe4
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f977
push 0x667b9c
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xe5
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xe7
jmp 0x47f27e
push 0x6527e0
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xe8
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xea
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47f9d7
push 0x667ba0
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xeb
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xed
jmp 0x47f27e
push 0x6527e4
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xee
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xf0
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47fa37
push 0x667ba4
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xf1
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xf3
jmp 0x47f27e
push 0x667bb0
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xf4
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xf6
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47fa97
push 0x667bb8
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xf7
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xf9
jmp 0x47f27e
push 0x667bc0
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xfa
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xfc
jmp 0x47f27e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47faf7
push 0x667bc8
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xfd
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xff
jmp 0x47f27e
push 0x667bd8
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x100
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 2
push esi
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b810
add esp, 0xc
mov ecx, edi
push eax
call fcn.004163a0
lea ecx, [ebp - 0x30]
call fcn.0040d530
lea ecx, [ebp - 0x50]
call fcn.0040d530
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0
call fcn.0040d530
mov esi, dword [ebp + 0xc]
jmp 0x48064b
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47fb8c
push 0x667be4
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x103
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 5
jmp 0x47fb1e
push 0x667bf8
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x106
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 8
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47fbec
push 0x667c0c
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x109
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xb
jmp 0x47fb1e
push 0x667c18
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x10c
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xe
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47fc4c
push 0x667c24
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x10f
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x11
jmp 0x47fb1e
push 0x667c30
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x112
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x14
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47fcac
push 0x667c3c
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x115
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x17
jmp 0x47fb1e
push 0x667c44
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], pe_nt_image_headers32
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x1a
jmp 0x47fb1e
push 0x667c4c
lea ecx, [ebp - 0x70]
call fcn.0040cef0
test bl, 1
je 0x47fd0c
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x11b
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x1d
jmp 0x47fb1e
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x11e
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x20
jmp 0x47fb1e
push 0x667c54
lea ecx, [ebp - 0x70]
call fcn.0040cef0
test bl, 1
je 0x47fd62
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x121
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x23
jmp 0x47fb1e
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x124
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x26
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47fdb8
push 0x667c5c
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x127
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x29
jmp 0x47fb1e
push 0x667c68
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x12a
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x2c
jmp 0x47fb1e
push 0x667c70
lea ecx, [ebp - 0x70]
call fcn.0040cef0
test bl, 1
je 0x47fe18
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x12d
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x2f
jmp 0x47fb1e
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x130
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x32
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47fe6e
push 0x667c80
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x133
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x35
jmp 0x47fb1e
push 0x667c88
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x136
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x38
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47fece
push str.Z_t.
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x139
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x3b
jmp 0x47fb1e
push 0x667c9c
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x13c
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x3e
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47ff2e
push 0x667ca4
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x13f
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x41
jmp 0x47fb1e
push 0x667cb0
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x142
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x44
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47ff8e
push 0x667cbc
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x145
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x47
jmp 0x47fb1e
push 0x667cc4
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x148
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x4a
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x47ffee
push 0x667ccc
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x14b
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x4d
jmp 0x47fb1e
push 0x667cd4
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x14e
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x50
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x48004e
push 0x667cdc
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x151
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x53
jmp 0x47fb1e
push 0x667ce8
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x154
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x56
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x4800ae
push 0x667cf4
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x157
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x59
jmp 0x47fb1e
push 0x667d00
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x15a
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x5c
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x48010e
push 0x667d0c
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x15d
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x5f
jmp 0x47fb1e
push 0x667d1c
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x160
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x62
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x48016e
push 0x667d28
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x163
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x65
jmp 0x47fb1e
push 0x65cc64
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x166
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x68
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x4801ce
push 0x667d30
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x169
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x6b
jmp 0x47fb1e
push 0x667d40
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x16c
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x6e
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x48022e
push 0x667d50
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x16f
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x71
jmp 0x47fb1e
push 0x667d58
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x172
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x74
jmp 0x47fb1e
push 0x667d5c
lea ecx, [ebp - 0x70]
call fcn.0040cef0
test bl, 1
je 0x48028e
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x175
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x77
jmp 0x47fb1e
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x178
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x7a
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x4802e4
push 0x667d68
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x17b
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x7d
jmp 0x47fb1e
push 0x667d74
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x17e
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x80
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x480344
push 0x667d80
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x181
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x83
jmp 0x47fb1e
push 0x667d88
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x184
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x86
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x4803a4
push 0x667d90
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x187
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x89
jmp 0x47fb1e
push 0x667d9c
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x18a
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x8c
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x480404
push 0x667da8
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x18d
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x8f
jmp 0x47fb1e
push 0x667dac
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x190
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x92
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x480464
push 0x667db0
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x193
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x95
jmp 0x47fb1e
push 0x6527dc
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x196
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x98
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x4804c4
push 0x667db8
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x199
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x9b
jmp 0x47fb1e
push 0x667dc8
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x19c
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0x9e
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x480524
push 0x667dd4
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x19f
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xa1
jmp 0x47fb1e
push 0x667de4
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x1a2
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xa4
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x480584
push 0x667df0
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x1a5
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xa7
jmp 0x47fb1e
push 0x667dfc
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x1a8
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xaa
jmp 0x47fb1e
lea ecx, [ebp - 0x70]
test bl, 1
je 0x4805e4
push 0x667e04
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x1ab
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xad
jmp 0x47fb1e
push 0x667e10
call fcn.0040cef0
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x1ae
call fcn.0040cfe0
mov esi, eax
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
mov byte [ebp - 4], 0xb0
jmp 0x47fb1e
cmp dword [0x714840], 0
je 0x48064b
push 0x667e1c
push 0x64d658
push 0x667e48
push 0xd5
push 0x667e58
call fcn.005479a0
add esp, 0x14
cmp byte [0x747ee0], 0
je 0x48064b
mov byte [0x747ee0], 0
int3
test bl, 4
je 0x4806f2
lea ecx, [ebp - 0x30]
call fcn.0040cfe0
push 0x667e78
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0x1b1
call fcn.0040cef0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xb2
push eax
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
call fcn.0054a790
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xb1
mov bl, al
call fcn.0040d530
test bl, bl
je 0x4806a0
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004163a0
cmp dword [0x714840], 0
mov ebx, dword [ebp - 0x74]
je 0x4806e3
test bl, 2
je 0x4806e3
push 0x667e7c
push 0x667eb0
push 0x667e48
push 0xe5
push 0x667e58
call fcn.00547810
add esp, 0x14
cmp byte [0x747ee0], 0
je 0x4806e3
mov byte [0x747ee0], 0
int3
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0
call fcn.0040d530
cmp dword [edi + 0x10], 0
je 0x480740
test bl, 2
je 0x480740
lea eax, [ebp - 0x40]
push esi
push eax
call fcn.0047dc60
add esp, 8
cmp dword [ebp - 0x3c], 0
je 0x480740
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x40]
call fcn.0047dc40
mov esi, eax
push 9
push 1
mov ecx, edi
mov dword [ebp - 4], 0x1b3
call fcn.0043e130
push esi
mov ecx, edi
call fcn.0041b3c0
lea ecx, [ebp - 0x70]
call fcn.0040d530
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005ea7eb
mov esp, ebp
pop ebp
ret