Function at 0x4ad92f
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc24
mov eax, dword [0x4f8004]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0xc14], 0
xor eax, eax
mov dword [ebp - 0xc10], eax
mov dword [ebp - 0xc0c], eax
mov ecx, dword [ecx]
and dword [ebp - 0xc18], 0
push ebx
push esi
mov edx, dword [ecx]
lea eax, [ecx + 4]
mov dword [ebp - 0xc14], eax
mov ebx, 0x5256c0
lea eax, [ecx + 8]
mov dword [ebp - 0xc20], edx
add eax, edx
mov dword [0x525420], eax
mov eax, dword [ecx + edx + 4]
lea edx, [ebp - 0x34]
push edi
mov dword [0x525018], eax
mov edi, 0x5256d8
xor eax, eax
cmp dword [0x5256d4], 0x10
push 0xf
cmovae ebx, dword [0x5256c0]
cmp dword [0x5256ec], 0x10
pop ecx
cmovae edi, dword [0x5256d8]
mov dword [ebp - 0xc1c], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2c4], eax
movzx eax, byte [0x521555]
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x2c0], ecx
lea ecx, [ebp - 0x85c]
push eax
call fcn.0042a13c
pop ecx
movsx ecx, byte [0x5217d1]
mov esi, eax
lea eax, [ebp - 0x2d4]
push eax
push ecx
call fcn.004970f0
pop ecx
mov dl, al
lea ecx, [ebp - 0x844]
call fcn.0042a111
pop ecx
push esi
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x52c]
call fcn.0042a3b3
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x52c]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x514]
call fcn.0042a3b3
mov dl, byte [0x5212d2]
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x874]
call fcn.0042a111
movzx ecx, byte [0x521753]
lea edx, [ebp - 0x514]
push ecx
lea ecx, [ebp - 0x82c]
mov esi, eax
call fcn.0042a13c
pop ecx
pop ecx
push esi
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x4fc]
call fcn.0042a3b3
movzx eax, byte [0x521553]
lea edx, [ebp - 0x4fc]
push eax
lea ecx, [ebp - 0x814]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x64]
push ecx
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x4e4]
call fcn.0042a3b3
mov dl, byte [edi + 1]
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x91c]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0x4e4]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x4cc]
call fcn.0042a3b3
movzx eax, byte [0x521653]
lea edx, [ebp - 0x4cc]
push eax
lea ecx, [ebp - 0xa54]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x94]
push ecx
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x4b4]
call fcn.0042a3b3
movzx eax, byte [ebx + 1]
lea edx, [ebp - 0x4b4]
push eax
lea ecx, [ebp - 0xc04]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x13c]
push ecx
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x37c]
call fcn.0042a3b3
push 0x10
pop ebx
cmp dword [ebp - 0x368], ebx
lea eax, [ebp - 0x37c]
cmovae eax, dword [ebp - 0x37c]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x526c50], eax
mov edi, 0x5256d8
push 0xf
pop ecx
test eax, eax
je 0x4adfab
xor eax, eax
mov dword [ebp - 0x2a8], ecx
cmp dword [0x5256ec], ebx
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x2bc], eax
cmovae edi, dword [0x5256d8]
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x174], eax
movzx eax, byte [0x521411]
mov dword [ebp - 0x290], ecx
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x248], ecx
mov dword [ebp - 0x230], ecx
mov dword [ebp - 0x218], ecx
mov dword [ebp - 0x200], ecx
mov dword [ebp - 0x1e8], ecx
mov dword [ebp - 0x1d0], ecx
mov dword [ebp - 0x1b8], ecx
mov dword [ebp - 0x1a0], ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 0x170], ecx
lea ecx, [ebp - 0xb14]
push eax
call fcn.0042a13c
movsx ecx, byte [0x521513]
mov esi, eax
push ecx
call fcn.004970f0
push eax
lea edx, [ebp - 0x184]
lea ecx, [ebp - 0xafc]
call fcn.0042a13c
add esp, 0xc
lea ecx, [ebp - 0x49c]
push esi
push eax
push dword [ebp - 0xc14]
call fcn.0042a3b3
movzx eax, byte [str.rkgr]
lea edx, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0xb2c]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x49c]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x7e4]
call fcn.0042a3b3
movzx eax, byte [str.tRtxiutZYL]
lea edx, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0xb44]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x7e4]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x7cc]
call fcn.0042a3b3
mov dl, byte [0x52115a]
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0xb5c]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0x7cc]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x7b4]
call fcn.0042a3b3
mov dl, byte [0x5210d5]
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [ebp - 0xb74]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0x7b4]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x79c]
call fcn.0042a3b3
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x79c]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x784]
call fcn.0042a3b3
movzx eax, byte [edi + 6]
lea edx, [ebp - 0x784]
push eax
lea ecx, [ebp - 0xae4]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x22c]
push ecx
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x76c]
call fcn.0042a3b3
mov dl, byte [str.rkgr]
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0xb8c]
call fcn.0042a111
movsx ecx, byte [0x521312]
mov esi, eax
push ecx
call fcn.004970f0
push eax
lea edx, [ebp - 0x76c]
lea ecx, [ebp - 0xacc]
call fcn.0042a13c
add esp, 0xc
lea ecx, [ebp - 0x754]
push esi
push eax
push dword [ebp - 0xc14]
call fcn.0042a3b3
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x754]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x73c]
call fcn.0042a3b3
movzx eax, byte [0x5215d6]
lea edx, [ebp - 0x274]
push eax
lea ecx, [ebp - 0xba4]
call fcn.0042a13c
movzx ecx, byte [0x521498]
lea edx, [ebp - 0x73c]
push ecx
lea ecx, [ebp - 0xab4]
mov esi, eax
call fcn.0042a13c
pop ecx
pop ecx
push esi
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x724]
call fcn.0042a3b3
mov dl, byte [0x521559]
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xbbc]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x70c]
call fcn.0042a3b3
movzx eax, byte [0x5211d4]
lea edx, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0xbd4]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x70c]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x6f4]
call fcn.0042a3b3
movzx eax, byte [str.tRtxiutZYL]
lea edx, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0xbec]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x6f4]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x364]
call fcn.0042a3b3
cmp dword [ebp - 0x350], ebx
lea eax, [ebp - 0x364]
cmovae eax, dword [ebp - 0x364]
push eax
push dword [0x526c50]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
mov ecx, 0x1ff
or ebx, 0xffffffff
jmp 0x4ae643
xor eax, eax
mov dword [ebp - 0x158], ecx
cmp dword [0x5256d4], ebx
lea edx, [ebp - 0xdc]
mov ebx, 0x5256c0
mov dword [ebp - 0x16c], eax
cmovae ebx, dword [0x5256c0]
cmp dword [0x5256ec], 0x10
mov dword [ebp - 0x15c], eax
cmovae edi, dword [0x5256d8]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xb4], eax
movzx eax, byte [0x521555]
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xb0], ecx
lea ecx, [ebp - 0xa6c]
push eax
call fcn.0042a13c
pop ecx
movsx ecx, byte [0x5217d1]
mov esi, eax
lea eax, [ebp - 0xc4]
push eax
push ecx
call fcn.004970f0
pop ecx
mov dl, al
lea ecx, [ebp - 0x88c]
call fcn.0042a111
pop ecx
push esi
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x6dc]
call fcn.0042a3b3
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x6dc]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x6c4]
call fcn.0042a3b3
mov dl, byte [0x5212d2]
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0xa84]
call fcn.0042a111
movzx ecx, byte [0x521753]
lea edx, [ebp - 0x6c4]
push ecx
lea ecx, [ebp - 0xa3c]
mov esi, eax
call fcn.0042a13c
pop ecx
pop ecx
push esi
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x6ac]
call fcn.0042a3b3
movzx eax, byte [0x521553]
lea edx, [ebp - 0x6ac]
push eax
lea ecx, [ebp - 0xa24]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x124]
push ecx
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x694]
call fcn.0042a3b3
mov dl, byte [edi + 1]
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xa9c]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0x694]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x67c]
call fcn.0042a3b3
movzx eax, byte [0x521653]
lea edx, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0xa0c]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x154]
push ecx
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x664]
call fcn.0042a3b3
movzx eax, byte [ebx + 1]
lea edx, [ebp - 0x664]
push eax
lea ecx, [ebp - 0x9f4]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x16c]
push ecx
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x34c]
call fcn.0042a3b3
cmp dword [ebp - 0x338], 0x10
lea eax, [ebp - 0x34c]
cmovae eax, dword [ebp - 0x34c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x526c50], eax
test eax, eax
je 0x4ae636
mov dl, byte [str.rkgr]
lea eax, [ebp - 0x46c]
xor ebx, ebx
lea ecx, [ebp - 0x97c]
push 0xf
pop esi
push eax
mov dword [ebp - 0x334], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], esi
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f0], esi
mov dword [ebp - 0x2ec], ebx
mov dword [ebp - 0x2dc], ebx
mov dword [ebp - 0x2d8], esi
mov dword [ebp - 0x484], ebx
mov dword [ebp - 0x474], ebx
mov dword [ebp - 0x470], esi
mov dword [ebp - 0x46c], ebx
mov dword [ebp - 0x45c], ebx
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x454], ebx
mov dword [ebp - 0x444], ebx
mov dword [ebp - 0x440], esi
call fcn.0042a111
mov dl, byte [0x5210d5]
lea ecx, [ebp - 0x964]
mov dword [ebp - 0xc10], eax
lea eax, [ebp - 0x424]
push eax
mov dword [ebp - 0x43c], ebx
mov dword [ebp - 0x42c], ebx
mov dword [ebp - 0x428], esi
mov dword [ebp - 0x424], ebx
mov dword [ebp - 0x414], ebx
mov dword [ebp - 0x410], esi
call fcn.0042a111
mov dl, byte [0x52115a]
lea ecx, [ebp - 0x94c]
mov dword [ebp - 0xc08], eax
lea eax, [ebp - 0x40c]
push eax
mov dword [ebp - 0x40c], ebx
mov dword [ebp - 0x3fc], ebx
mov dword [ebp - 0x3f8], esi
call fcn.0042a111
movzx ecx, byte [str.tRtxiutZYL]
lea edx, [ebp - 0x3f4]
push ecx
lea ecx, [ebp - 0x934]
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0x3f4], ebx
mov dword [ebp - 0x3e4], ebx
mov dword [ebp - 0x3e0], esi
call fcn.0042a13c
movzx ecx, byte [str.rkgr]
lea edx, [ebp - 0x3dc]
and dword [ebp - 0x3dc], 0
mov ebx, eax
and dword [ebp - 0x3cc], 0
push ecx
lea ecx, [ebp - 0x7fc]
mov dword [ebp - 0x3c8], esi
call fcn.0042a13c
movzx ecx, byte [0x521411]
lea edx, [ebp - 0x3c4]
and dword [ebp - 0x3c4], 0
mov edi, eax
and dword [ebp - 0x3b4], 0
push ecx
lea ecx, [ebp - 0x904]
mov dword [ebp - 0x3b0], esi
call fcn.0042a13c
movsx ecx, byte [0x521513]
mov esi, eax
and dword [ebp - 0x3ac], 0
and dword [ebp - 0x39c], 0
push ecx
mov dword [ebp - 0x398], 0xf
call fcn.004970f0
push eax
lea edx, [ebp - 0x3ac]
lea ecx, [ebp - 0x8ec]
call fcn.0042a13c
add esp, 0x20
lea ecx, [ebp - 0x64c]
push esi
push eax
push dword [ebp - 0xc14]
call fcn.0042a3b3
push edi
lea eax, [ebp - 0x64c]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x634]
call fcn.0042a3b3
push ebx
lea eax, [ebp - 0x634]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x61c]
call fcn.0042a3b3
push dword [ebp - 0xc0c]
lea eax, [ebp - 0x61c]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x604]
call fcn.0042a3b3
push dword [ebp - 0xc08]
lea eax, [ebp - 0x604]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x5ec]
call fcn.0042a3b3
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x5ec]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x5d4]
call fcn.0042a3b3
cmp dword [0x5256ec], 0x10
lea edx, [ebp - 0x5d4]
mov eax, 0x5256d8
lea ecx, [ebp - 0x8d4]
cmovae eax, dword [0x5256d8]
movzx eax, byte [eax + 6]
push eax
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x454]
push ecx
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x5bc]
call fcn.0042a3b3
movsx eax, byte [0x521312]
push eax
call fcn.004970f0
push eax
lea edx, [ebp - 0x5bc]
lea ecx, [ebp - 0x8bc]
call fcn.0042a13c
pop ecx
pop ecx
push dword [ebp - 0xc10]
lea ecx, [ebp - 0x5a4]
push eax
push dword [ebp - 0xc14]
call fcn.0042a3b3
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x5a4]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x58c]
call fcn.0042a3b3
movzx eax, byte [0x5215d6]
lea edx, [ebp - 0x2ec]
push eax
lea ecx, [ebp - 0x994]
call fcn.0042a13c
movzx ecx, byte [0x521498]
lea edx, [ebp - 0x58c]
push ecx
lea ecx, [ebp - 0x8a4]
mov esi, eax
call fcn.0042a13c
pop ecx
pop ecx
push esi
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x574]
call fcn.0042a3b3
mov dl, byte [0x521559]
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp - 0x9ac]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0x574]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x55c]
call fcn.0042a3b3
movzx eax, byte [0x5211d4]
lea edx, [ebp - 0x31c]
and dword [ebp - 0x31c], 0
lea ecx, [ebp - 0x9c4]
and dword [ebp - 0x30c], 0
push eax
mov dword [ebp - 0x308], 0xf
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x55c]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x544]
call fcn.0042a3b3
movzx eax, byte [str.tRtxiutZYL]
lea edx, [ebp - 0x334]
push eax
lea ecx, [ebp - 0x9dc]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x544]
push eax
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x394]
call fcn.0042a3b3
cmp dword [ebp - 0x380], 0x10
lea eax, [ebp - 0x394]
cmovae eax, dword [ebp - 0x394]
push eax
push dword [0x526c50]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
mov eax, 0x1ff
mov dword [ebp - 0xc0c], eax
or eax, 0xffffffff
mov dword [ebp - 0xc10], eax
jmp 0x4ae638
xor edx, edx
mov ebx, dword [ebp - 0xc18]
mov ecx, 0xfffffe00
mov edi, dword [ebp - 0xc14]
lea eax, [ebp - 0xc1c]
push eax
push 0x40
push dword [ebp - 0xc20]
mov dword [ebp - 0xc08], ecx
push edi
call edx
mov esi, eax
mov eax, dword [ebp - 0xc0c]
test eax, 0x100
je 0x4ae68c
and eax, 0xfffffeff
lea ecx, [ebp - 0x394]
mov dword [ebp - 0xc0c], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc0c]
test al, al
jns 0x4ae6ac
and eax, 0xffffff7f
lea ecx, [ebp - 0x544]
mov dword [ebp - 0xc0c], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc0c]
test al, 0x40
je 0x4ae6ca
and eax, 0xffffffbf
lea ecx, [ebp - 0x55c]
mov dword [ebp - 0xc0c], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc0c]
test al, 0x20
je 0x4ae6e8
and eax, 0xffffffdf
lea ecx, [ebp - 0x574]
mov dword [ebp - 0xc0c], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc0c]
test al, 0x10
je 0x4ae706
and eax, 0xffffffef
lea ecx, [ebp - 0x8a4]
mov dword [ebp - 0xc0c], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc0c]
test al, 8
je 0x4ae724
and eax, 0xfffffff7
lea ecx, [ebp - 0x58c]
mov dword [ebp - 0xc0c], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc0c]
test al, 4
je 0x4ae742
and eax, 0xfffffffb
lea ecx, [ebp - 0x5a4]
mov dword [ebp - 0xc0c], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc0c]
test al, 2
je 0x4ae760
and eax, 0xfffffffd
lea ecx, [ebp - 0x8bc]
mov dword [ebp - 0xc0c], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc0c]
test al, 1
je 0x4ae76f
lea ecx, [ebp - 0x5bc]
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, eax
jns 0x4ae795
and eax, 0x7fffffff
lea ecx, [ebp - 0x8d4]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x40000000
je 0x4ae7b8
and eax, 0xbfffffff
lea ecx, [ebp - 0x5d4]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x20000000
je 0x4ae7db
and eax, 0xdfffffff
lea ecx, [ebp - 0x5ec]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x10000000
je 0x4ae7fe
and eax, 0xefffffff
lea ecx, [ebp - 0x604]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x8000000
je 0x4ae821
and eax, 0xf7ffffff
lea ecx, [ebp - 0x61c]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x4000000
je 0x4ae844
and eax, 0xfbffffff
lea ecx, [ebp - 0x634]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x2000000
je 0x4ae867
and eax, 0xfdffffff
lea ecx, [ebp - 0x64c]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x1000000
je 0x4ae88a
and eax, 0xfeffffff
lea ecx, [ebp - 0x8ec]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x800000
je 0x4ae8ad
and eax, 0xff7fffff
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x400000
je 0x4ae8d0
and eax, 0xffbfffff
lea ecx, [ebp - 0x904]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x200000
je 0x4ae8f3
and eax, 0xffdfffff
lea ecx, [ebp - 0x3c4]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x100000
je 0x4ae916
and eax, 0xffefffff
lea ecx, [ebp - 0x7fc]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x80000
je 0x4ae939
and eax, 0xfff7ffff
lea ecx, [ebp - 0x3dc]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x40000
je 0x4ae95c
and eax, 0xfffbffff
lea ecx, [ebp - 0x934]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x20000
je 0x4ae97f
and eax, 0xfffdffff
lea ecx, [ebp - 0x3f4]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x10000
je 0x4ae9a2
and eax, 0xfffeffff
lea ecx, [ebp - 0x94c]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x8000
je 0x4ae9c5
and eax, 0xffff7fff
lea ecx, [ebp - 0x40c]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x4000
je 0x4ae9e8
and eax, 0xffffbfff
lea ecx, [ebp - 0x964]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x2000
je 0x4aea0b
and eax, 0xffffdfff
lea ecx, [ebp - 0x424]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x1000
je 0x4aea2e
and eax, 0xffffefff
lea ecx, [ebp - 0x43c]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x800
je 0x4aea51
and eax, 0xfffff7ff
lea ecx, [ebp - 0x454]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x400
je 0x4aea74
and eax, 0xfffffbff
lea ecx, [ebp - 0x97c]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x200
je 0x4aea97
and eax, 0xfffffdff
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test eax, 0x100
je 0x4aeaba
and eax, 0xfffffeff
lea ecx, [ebp - 0x484]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test al, al
jns 0x4aeada
and eax, 0xffffff7f
lea ecx, [ebp - 0x994]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test al, 0x40
je 0x4aeaf8
and eax, 0xffffffbf
lea ecx, [ebp - 0x2ec]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test al, 0x20
je 0x4aeb16
and eax, 0xffffffdf
lea ecx, [ebp - 0x9ac]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test al, 0x10
je 0x4aeb34
and eax, 0xffffffef
lea ecx, [ebp - 0x304]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test al, 8
je 0x4aeb52
and eax, 0xfffffff7
lea ecx, [ebp - 0x9c4]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test al, 4
je 0x4aeb70
and eax, 0xfffffffb
lea ecx, [ebp - 0x31c]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test al, 2
je 0x4aeb8e
and eax, 0xfffffffd
lea ecx, [ebp - 0x9dc]
mov dword [ebp - 0xc10], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc10]
test al, 1
je 0x4aeb9d
lea ecx, [ebp - 0x334]
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, eax
jns 0x4aebc3
and eax, 0x7fffffff
lea ecx, [ebp - 0x34c]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x40000000
je 0x4aebe6
and eax, 0xbfffffff
lea ecx, [ebp - 0x9f4]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x20000000
je 0x4aec09
and eax, 0xdfffffff
lea ecx, [ebp - 0x664]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x10000000
je 0x4aec2c
and eax, 0xefffffff
lea ecx, [ebp - 0xa0c]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x8000000
je 0x4aec4f
and eax, 0xf7ffffff
lea ecx, [ebp - 0x67c]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x4000000
je 0x4aec72
and eax, 0xfbffffff
lea ecx, [ebp - 0x694]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x2000000
je 0x4aec95
and eax, 0xfdffffff
lea ecx, [ebp - 0xa24]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x1000000
je 0x4aecb8
and eax, 0xfeffffff
lea ecx, [ebp - 0x6ac]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x800000
je 0x4aecdb
and eax, 0xff7fffff
lea ecx, [ebp - 0xa3c]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x400000
je 0x4aecfe
and eax, 0xffbfffff
lea ecx, [ebp - 0x6c4]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x200000
je 0x4aed21
and eax, 0xffdfffff
lea ecx, [ebp - 0x6dc]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x100000
je 0x4aed44
and eax, 0xffefffff
lea ecx, [ebp - 0x88c]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x80000
je 0x4aedc5
mov ecx, dword [ebp - 0xb0]
and eax, 0xfff7ffff
mov dword [ebp - 0xc08], eax
cmp ecx, 0x10
jb 0x4aedad
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc10], ecx
cmp eax, 0x1000
jb 0x4aed9e
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc10]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc10]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0xc08]
pop ecx
pop ecx
and dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
test eax, 0x40000
je 0x4aede8
and eax, 0xfffbffff
lea ecx, [ebp - 0xa6c]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x20000
je 0x4aee69
mov ecx, dword [ebp - 0xc8]
and eax, 0xfffdffff
mov dword [ebp - 0xc08], eax
cmp ecx, 0x10
jb 0x4aee51
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc10], ecx
cmp eax, 0x1000
jb 0x4aee42
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc10]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc10]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0xc08]
pop ecx
pop ecx
and dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
test eax, 0x10000
je 0x4aeeea
mov ecx, dword [ebp - 0xe0]
and eax, 0xfffeffff
mov dword [ebp - 0xc08], eax
cmp ecx, 0x10
jb 0x4aeed2
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc10], ecx
cmp eax, 0x1000
jb 0x4aeec3
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc10]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc10]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0xc08]
pop ecx
pop ecx
and dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
test eax, 0x8000
je 0x4aef0d
and eax, 0xffff7fff
lea ecx, [ebp - 0xa84]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x4000
je 0x4aef8e
mov ecx, dword [ebp - 0xf8]
and eax, 0xffffbfff
mov dword [ebp - 0xc08], eax
cmp ecx, 0x10
jb 0x4aef76
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc10], ecx
cmp eax, 0x1000
jb 0x4aef67
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc10]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc10]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0xc08]
pop ecx
pop ecx
and dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0xf
mov byte [ebp - 0x10c], 0
test eax, 0x2000
je 0x4af00f
mov ecx, dword [ebp - 0x110]
and eax, 0xffffdfff
mov dword [ebp - 0xc08], eax
cmp ecx, 0x10
jb 0x4aeff7
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc10], ecx
cmp eax, 0x1000
jb 0x4aefe8
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc10]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc10]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0xc08]
pop ecx
pop ecx
and dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
test eax, 0x1000
je 0x4af032
and eax, 0xffffefff
lea ecx, [ebp - 0xa9c]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test eax, 0x800
je 0x4af0b3
mov ecx, dword [ebp - 0x98]
and eax, 0xfffff7ff
mov dword [ebp - 0xc08], eax
cmp ecx, 0x10
jb 0x4af09b
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc10], ecx
cmp eax, 0x1000
jb 0x4af08c
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc10]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc10]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0xc08]
pop ecx
pop ecx
and dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
test eax, 0x400
je 0x4af134
mov ecx, dword [ebp - 0x140]
and eax, 0xfffffbff
mov dword [ebp - 0xc08], eax
cmp ecx, 0x10
jb 0x4af11c
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc10], ecx
cmp eax, 0x1000
jb 0x4af10d
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc10]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc10]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0xc08]
pop ecx
pop ecx
and dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0xf
mov byte [ebp - 0x154], 0
test eax, 0x200
je 0x4af1b5
mov ecx, dword [ebp - 0x158]
and eax, 0xfffffdff
mov dword [ebp - 0xc08], eax
cmp ecx, 0x10
jb 0x4af19d
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc10], ecx
cmp eax, 0x1000
jb 0x4af18e
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc10]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc10]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0xc08]
pop ecx
pop ecx
and dword [ebp - 0x15c], 0
mov dword [ebp - 0x158], 0xf
mov byte [ebp - 0x16c], 0
test eax, 0x100
je 0x4af1d8
and eax, 0xfffffeff
lea ecx, [ebp - 0x364]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test al, al
jns 0x4af1f8
and eax, 0xffffff7f
lea ecx, [ebp - 0x6f4]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test al, 0x40
je 0x4af216
and eax, 0xffffffbf
lea ecx, [ebp - 0x70c]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test al, 0x20
je 0x4af234
and eax, 0xffffffdf
lea ecx, [ebp - 0x724]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test al, 0x10
je 0x4af252
and eax, 0xffffffef
lea ecx, [ebp - 0xab4]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test al, 8
je 0x4af270
and eax, 0xfffffff7
lea ecx, [ebp - 0x73c]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test al, 4
je 0x4af28b
lea ecx, [ebp - 0x754]
mov dword [ebp - 0xc08], eax
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test al, 2
je 0x4af2a0
lea ecx, [ebp - 0xacc]
call fcn.00429fa9
mov eax, dword [ebp - 0xc08]
test al, 1
je 0x4af2af
lea ecx, [ebp - 0x76c]
call fcn.00429fa9
test ebx, ebx
jns 0x4af2c4
lea ecx, [ebp - 0xae4]
and ebx, 0x7fffffff
call fcn.00429fa9
test ebx, 0x40000000
je 0x4af2dd
lea ecx, [ebp - 0x784]
and ebx, 0xbfffffff
call fcn.00429fa9
test ebx, 0x20000000
je 0x4af2f6
lea ecx, [ebp - 0x79c]
and ebx, 0xdfffffff
call fcn.00429fa9
test ebx, 0x10000000
je 0x4af30f
lea ecx, [ebp - 0x7b4]
and ebx, 0xefffffff
call fcn.00429fa9
test ebx, 0x8000000
je 0x4af328
lea ecx, [ebp - 0x7cc]
and ebx, 0xf7ffffff
call fcn.00429fa9
test ebx, 0x4000000
je 0x4af341
lea ecx, [ebp - 0x7e4]
and ebx, 0xfbffffff
call fcn.00429fa9
test ebx, 0x2000000
je 0x4af35a
lea ecx, [ebp - 0x49c]
and ebx, 0xfdffffff
call fcn.00429fa9
test ebx, 0x1000000
je 0x4af373
lea ecx, [ebp - 0xafc]
and ebx, 0xfeffffff
call fcn.00429fa9
test ebx, 0x800000
je 0x4af3e8
mov eax, dword [ebp - 0x170]
and ebx, 0xff7fffff
cmp eax, 0x10
jb 0x4af3d0
mov ecx, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4af3c7
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0xf
mov byte [ebp - 0x184], 0
test ebx, 0x400000
je 0x4af401
lea ecx, [ebp - 0xb14]
and ebx, 0xffbfffff
call fcn.00429fa9
test ebx, 0x200000
je 0x4af467
mov eax, dword [ebp - 8]
and ebx, 0xffdfffff
cmp eax, 0x10
jb 0x4af458
mov ecx, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4af44f
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
test ebx, 0x100000
je 0x4af480
lea ecx, [ebp - 0xb2c]
and ebx, 0xffefffff
call fcn.00429fa9
test ebx, 0x80000
je 0x4af4f5
mov eax, dword [ebp - 0x1a0]
and ebx, 0xfff7ffff
cmp eax, 0x10
jb 0x4af4dd
mov ecx, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4af4d4
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0xf
mov byte [ebp - 0x1b4], 0
test ebx, 0x40000
je 0x4af50e
lea ecx, [ebp - 0xb44]
and ebx, 0xfffbffff
call fcn.00429fa9
test ebx, 0x20000
je 0x4af583
mov eax, dword [ebp - 0x1b8]
and ebx, 0xfffdffff
cmp eax, 0x10
jb 0x4af56b
mov ecx, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4af562
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 0xf
mov byte [ebp - 0x1cc], 0
test ebx, 0x10000
je 0x4af59c
lea ecx, [ebp - 0xb5c]
and ebx, 0xfffeffff
call fcn.00429fa9
test ebx, 0x8000
je 0x4af611
mov eax, dword [ebp - 0x1d0]
and ebx, 0xffff7fff
cmp eax, 0x10
jb 0x4af5f9
mov ecx, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4af5f0
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
test ebx, 0x4000
je 0x4af62a
lea ecx, [ebp - 0xb74]
and ebx, 0xffffbfff
call fcn.00429fa9
test ebx, 0x2000
je 0x4af69f
mov eax, dword [ebp - 0x1e8]
and ebx, 0xffffdfff
cmp eax, 0x10
jb 0x4af687
mov ecx, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4af67e
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 0xf
mov byte [ebp - 0x1fc], 0
mov edx, 0x1000
test edx, ebx
je 0x4af717
mov eax, dword [ebp - 0x200]
and ebx, 0xffffefff
cmp eax, 0x10
jb 0x4af6ff
mov ecx, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, edx
jb 0x4af6f1
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
mov edx, 0x1000
and dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 0xf
mov byte [ebp - 0x214], 0
test ebx, 0x800
je 0x4af789
mov eax, dword [ebp - 0x218]
and ebx, 0xfffff7ff
cmp eax, 0x10
jb 0x4af771
mov ecx, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, edx
jb 0x4af768
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 0xf
mov byte [ebp - 0x22c], 0
test ebx, 0x400
je 0x4af7a2
lea ecx, [ebp - 0xb8c]
and ebx, 0xfffffbff
call fcn.00429fa9
test ebx, 0x200
je 0x4af817
mov eax, dword [ebp - 0x230]
and ebx, 0xfffffdff
cmp eax, 0x10
jb 0x4af7ff
mov ecx, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4af7f6
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0xf
mov byte [ebp - 0x244], 0
test ebx, 0x100
je 0x4af88c
mov eax, dword [ebp - 0x248]
and ebx, 0xfffffeff
cmp eax, 0x10
jb 0x4af874
mov ecx, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4af86b
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0xf
mov byte [ebp - 0x25c], 0
test bl, bl
jns 0x4af8a1
lea ecx, [ebp - 0xba4]
and ebx, 0xffffff7f
call fcn.00429fa9
test bl, 0x40
je 0x4af910
mov eax, dword [ebp - 0x260]
and ebx, 0xffffffbf
cmp eax, 0x10
jb 0x4af8f8
mov ecx, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4af8ef
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 0xf
mov byte [ebp - 0x274], 0
test bl, 0x20
je 0x4af923
lea ecx, [ebp - 0xbbc]
and ebx, 0xffffffdf
call fcn.00429fa9
test bl, 0x10
je 0x4af992
mov eax, dword [ebp - 0x278]
and ebx, 0xffffffef
cmp eax, 0x10
jb 0x4af97a
mov ecx, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4af971
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 0xf
mov byte [ebp - 0x28c], 0
test bl, 8
je 0x4af9a5
lea ecx, [ebp - 0xbd4]
and ebx, 0xfffffff7
call fcn.00429fa9
test bl, 4
je 0x4afa14
mov eax, dword [ebp - 0x290]
and ebx, 0xfffffffb
cmp eax, 0x10
jb 0x4af9fc
mov ecx, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4af9f3
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 0xf
mov byte [ebp - 0x2a4], 0
test bl, 2
je 0x4afa27
lea ecx, [ebp - 0xbec]
and ebx, 0xfffffffd
call fcn.00429fa9
test bl, 1
je 0x4afa95
mov eax, dword [ebp - 0x2a8]
cmp eax, 0x10
jb 0x4afa7b
mov ecx, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4afa72
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
xor ebx, ebx
mov dword [ebp - 0x2a8], 0xf
mov dword [ebp - 0x2ac], ebx
mov byte [ebp - 0x2bc], bl
jmp 0x4afa97
xor ebx, ebx
lea ecx, [ebp - 0x37c]
call fcn.00429fa9
lea ecx, [ebp - 0xc04]
call fcn.00429fa9
lea ecx, [ebp - 0x4b4]
call fcn.00429fa9
lea ecx, [ebp - 0xa54]
call fcn.00429fa9
lea ecx, [ebp - 0x4cc]
call fcn.00429fa9
lea ecx, [ebp - 0x4e4]
call fcn.00429fa9
lea ecx, [ebp - 0x814]
call fcn.00429fa9
lea ecx, [ebp - 0x4fc]
call fcn.00429fa9
lea ecx, [ebp - 0x82c]
call fcn.00429fa9
lea ecx, [ebp - 0x514]
call fcn.00429fa9
lea ecx, [ebp - 0x52c]
call fcn.00429fa9
lea ecx, [ebp - 0x844]
call fcn.00429fa9
mov eax, dword [ebp - 0x2c0]
cmp eax, 0x10
jb 0x4afb6a
mov ecx, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4afb61
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
lea ecx, [ebp - 0x85c]
mov dword [ebp - 0x2c4], ebx
mov dword [ebp - 0x2c0], 0xf
mov byte [ebp - 0x2d4], bl
call fcn.00429fa9
mov eax, dword [ebp - 0x20]
cmp eax, 0x10
jb 0x4afbd4
mov ecx, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4afbcb
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], bl
cmp eax, 0x10
jb 0x4afc2a
mov ecx, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4afc21
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
lea ecx, [ebp - 0x874]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], bl
call fcn.00429fa9
mov eax, dword [ebp - 0x188]
cmp eax, 0x10
jb 0x4afc91
mov ecx, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4afc88
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], 0xf
mov byte [ebp - 0x19c], bl
cmp eax, 0x10
jb 0x4afcf0
mov ecx, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4afce7
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
lea ecx, [ebp - 0x91c]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], bl
call fcn.00429fa9
mov eax, dword [ebp - 0x68]
cmp eax, 0x10
jb 0x4afd51
mov ecx, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4afd48
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], bl
cmp eax, 0x10
jb 0x4afdaa
mov ecx, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4afda1
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], bl
cmp eax, 0x10
jb 0x4afe0c
mov ecx, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], ecx
cmp eax, 0x1000
jb 0x4afe03
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc08]
push eax
call fcn.00424175
mov eax, dword [ebp - 0xc0c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc08]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x128], 0xf
mov byte [ebp - 0x13c], bl
test esi, esi
je 0x4afe36
push dword [0x525018]
push dword [0x525420]
call edi
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00486c63
leave
ret