Function at 0x47976e
Capabilities:
Inspect section memory permissions
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1bfc
call fcn.004ad610
mov eax, dword [0x4f8004]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x1b9c], ecx
xor ecx, ecx
mov dword [ebp - 0x1bac], ecx
mov eax, ecx
mov dword [ebp - 0x1bac], ecx
mov dword [ebp - 0x1bac], ecx
movsd xmm0, qword [0x525478]
ucomisd xmm0, qword [0x4f26f8]
push ebx
mov dword [ebp - 0x1b98], eax
mov dword [ebp - 0x1bc8], eax
mov dword [ebp - 0x1ba4], eax
mov dword [ebp - 0x1ba0], eax
mov dword [ebp - 0x1bc4], eax
push esi
push edi
lahf
test ah, 0x44
jp 0x47a07f
sub esp, 0x18
mov ecx, esp
push 0x4f2538
call fcn.00429edc
sub esp, 0x18
mov ecx, esp
push str.izqyutaakypl
call fcn.00429f4a
movsd xmm0, qword [0x525478]
call fcn.004ad090
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.0042a034
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movsd xmm0, qword [0x525478]
add esp, 0x48
mov dword [ebp - 0x1bac], eax
mov ebx, edx
call fcn.004ad090
push edx
mov ecx, eax
push ecx
push edx
push ecx
push 0
push 0x1601930a
sub esp, 0x18
mov eax, esp
push edx
push ecx
push eax
call fcn.0042a034
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov edi, eax
mov esi, edx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
movsd xmm1, qword [0x525478]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x1bc0], xmm0
movsd xmm0, qword [0x4f2658]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
sub esp, 0x18
movsd qword [ebp - 0x1bb8], xmm0
mov ecx, esp
push 0x4f250c
call fcn.00429f4a
movsd xmm0, qword [0x525478]
call fcn.004ad090
push edx
push eax
sub esp, 0x18
mov ecx, esp
push 0x4f2510
call fcn.00429edc
sub esp, 0x18
mov ecx, esp
push 0x4f2530
call fcn.00429edc
movsd xmm0, qword [0x4f2628]
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
movsd xmm1, qword [0x4f2610]
mov edx, esi
mov ecx, edi
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
divsd xmm1, qword [ebp - 0x1bb8]
divsd xmm1, qword [ebp - 0x1bc0]
addsd xmm1, qword [0x4f2660]
movsd qword [ebp - 0x1bd0], xmm1
call fcn.004ad140
cvttsd2si esi, qword [0x525478]
sub esp, 0x18
mov ecx, esp
movsd qword [ebp - 0x1bd8], xmm0
push str.weruewogao
call fcn.00429edc
push esi
push 0x3af772ac
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
cvttsd2si esi, qword [0x525478]
add esp, 0x24
movd xmm0, eax
push esi
cvtdq2pd xmm0, xmm0
sub esp, 0x18
mov ecx, esp
push str.ewqinbo
movsd qword [ebp - 0x1bc0], xmm0
call fcn.00429f4a
movsd xmm0, qword [0x525478]
mov edx, esi
mov ecx, 0x2a9c07e7
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusA]
mov ecx, dword [ebp - 0x1bac]
mov edx, ebx
movsd qword [ebp - 0x1bb8], xmm0
call fcn.004ad140
mulsd xmm0, qword [0x4f25f8]
push 0
push 0x3adec927
sub esp, 0x18
mov ecx, esp
movsd qword [ebp - 0x1bb0], xmm0
push str.tyhapani
call fcn.00429edc
cvttsd2si eax, qword [0x525478]
mov esi, dword [sym.imp.ADVAPI32.dll_OpenServiceW]
push eax
call esi
add esp, 0xc
mov ecx, esp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push 0x4f2538
mulsd xmm0, qword [ebp - 0x1bb0]
divsd xmm0, qword [ebp - 0x1bb8]
mulsd xmm0, qword [ebp - 0x1bc0]
mulsd xmm0, qword [ebp - 0x1bd8]
addsd xmm0, qword [ebp - 0x1bd0]
movsd qword [0x525478], xmm0
call fcn.00429edc
sub esp, 0x18
mov ecx, esp
push str.izqyutaakypl
call fcn.00429f4a
movsd xmm0, qword [0x525478]
call fcn.004ad090
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.0042a034
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movsd xmm0, qword [0x525478]
add esp, 0x48
mov dword [ebp - 0x1bac], eax
mov ebx, edx
call fcn.004ad090
push edx
mov ecx, eax
push ecx
push edx
push ecx
push 0
push 0x1601930a
sub esp, 0x18
mov eax, esp
push edx
push ecx
push eax
call fcn.0042a034
add esp, 0xc
call esi
mov edi, eax
mov esi, edx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
movsd xmm1, qword [0x525478]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x1bd8], xmm0
movsd xmm0, qword [0x4f2658]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
sub esp, 0x18
movsd qword [ebp - 0x1bd0], xmm0
mov ecx, esp
push 0x4f250c
call fcn.00429f4a
movsd xmm0, qword [0x525478]
call fcn.004ad090
push edx
push eax
sub esp, 0x18
mov ecx, esp
push 0x4f2510
call fcn.00429edc
sub esp, 0x18
mov ecx, esp
push 0x4f2530
call fcn.00429edc
movsd xmm0, qword [0x4f2628]
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
movsd xmm1, qword [0x4f2610]
mov edx, esi
mov ecx, edi
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
divsd xmm1, qword [ebp - 0x1bd0]
divsd xmm1, qword [ebp - 0x1bd8]
addsd xmm1, qword [0x4f2670]
movsd qword [ebp - 0x1be0], xmm1
call fcn.004ad140
cvttsd2si esi, qword [0x525478]
sub esp, 0x18
mov ecx, esp
push str.weruewogao
movsd qword [ebp - 0x1bc0], xmm0
call fcn.00429edc
push esi
push 0x3af772ac
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
cvttsd2si esi, qword [0x525478]
add esp, 0x24
movd xmm0, eax
push esi
cvtdq2pd xmm0, xmm0
sub esp, 0x18
mov ecx, esp
push str.ewqinbo
movsd qword [ebp - 0x1bb8], xmm0
call fcn.00429f4a
movsd xmm0, qword [0x525478]
mov edx, esi
mov ecx, 0x2a9c07e7
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusA]
mov ecx, dword [ebp - 0x1bac]
mov edx, ebx
movsd qword [ebp - 0x1bd8], xmm0
call fcn.004ad140
mulsd xmm0, qword [0x4f25f8]
push 0
push 0x3adec927
sub esp, 0x18
mov ecx, esp
movsd qword [ebp - 0x1bd0], xmm0
push str.tyhapani
call fcn.00429edc
cvttsd2si eax, qword [0x525478]
mov esi, dword [sym.imp.ADVAPI32.dll_OpenServiceW]
push eax
call esi
movd xmm0, eax
cvtdq2pd xmm0, xmm0
add esp, 0xc
mov ecx, esp
push 0x4f2538
mulsd xmm0, qword [ebp - 0x1bd0]
divsd xmm0, qword [ebp - 0x1bd8]
mulsd xmm0, qword [ebp - 0x1bb8]
mulsd xmm0, qword [ebp - 0x1bc0]
addsd xmm0, qword [ebp - 0x1be0]
movsd qword [0x525478], xmm0
call fcn.00429edc
sub esp, 0x18
mov ecx, esp
push str.izqyutaakypl
call fcn.00429f4a
movsd xmm0, qword [0x525478]
call fcn.004ad090
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.0042a034
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movsd xmm0, qword [0x525478]
add esp, 0x48
mov dword [ebp - 0x1bac], eax
mov ebx, edx
call fcn.004ad090
push edx
mov ecx, eax
push ecx
push edx
push ecx
push 0
push 0x1601930a
sub esp, 0x18
mov eax, esp
push edx
push ecx
push eax
call fcn.0042a034
add esp, 0xc
call esi
mov edi, eax
mov esi, edx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
movsd xmm1, qword [0x525478]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x1bd0], xmm0
movsd xmm0, qword [0x4f2658]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
sub esp, 0x18
movsd qword [ebp - 0x1be0], xmm0
mov ecx, esp
push 0x4f250c
call fcn.00429f4a
movsd xmm0, qword [0x525478]
call fcn.004ad090
push edx
push eax
sub esp, 0x18
mov ecx, esp
push 0x4f2510
call fcn.00429edc
sub esp, 0x18
mov ecx, esp
push 0x4f2530
call fcn.00429edc
movsd xmm0, qword [0x4f2628]
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
movsd xmm1, qword [0x4f2610]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
divsd xmm1, qword [ebp - 0x1be0]
divsd xmm1, qword [ebp - 0x1bd0]
addsd xmm1, qword [0x4f2680]
movsd qword [ebp - 0x1bc0], xmm1
mov edx, esi
mov ecx, edi
call fcn.004ad140
cvttsd2si esi, qword [0x525478]
sub esp, 0x18
mov ecx, esp
push str.weruewogao
movsd qword [ebp - 0x1bb8], xmm0
call fcn.00429edc
push esi
push 0x3af772ac
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
cvttsd2si esi, qword [0x525478]
add esp, 0x24
movd xmm0, eax
push esi
cvtdq2pd xmm0, xmm0
sub esp, 0x18
mov ecx, esp
push str.ewqinbo
movsd qword [ebp - 0x1bd8], xmm0
call fcn.00429f4a
movsd xmm0, qword [0x525478]
mov edx, esi
mov ecx, 0x2a9c07e7
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusA]
mov ecx, dword [ebp - 0x1bac]
mov edx, ebx
movsd qword [ebp - 0x1bd0], xmm0
call fcn.004ad140
mulsd xmm0, qword [0x4f25f8]
push 0
push 0x3adec927
sub esp, 0x18
mov ecx, esp
movsd qword [ebp - 0x1be0], xmm0
push str.tyhapani
call fcn.00429edc
cvttsd2si eax, qword [0x525478]
mov esi, dword [sym.imp.ADVAPI32.dll_OpenServiceW]
push eax
call esi
add esp, 0xc
mov ecx, esp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push 0x4f2538
mulsd xmm0, qword [ebp - 0x1be0]
divsd xmm0, qword [ebp - 0x1bd0]
mulsd xmm0, qword [ebp - 0x1bd8]
mulsd xmm0, qword [ebp - 0x1bb8]
addsd xmm0, qword [ebp - 0x1bc0]
movsd qword [0x525478], xmm0
call fcn.00429edc
sub esp, 0x18
mov ecx, esp
push str.izqyutaakypl
call fcn.00429f4a
movsd xmm0, qword [0x525478]
call fcn.004ad090
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.0042a034
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movsd xmm0, qword [0x525478]
add esp, 0x48
mov dword [ebp - 0x1bac], eax
mov ebx, edx
call fcn.004ad090
push edx
mov ecx, eax
push ecx
push edx
push ecx
push 0
push 0x1601930a
sub esp, 0x18
mov eax, esp
push edx
push ecx
push eax
call fcn.0042a034
add esp, 0xc
call esi
mov edi, eax
mov esi, edx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
movsd xmm1, qword [0x525478]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x1bd0], xmm0
movsd xmm0, qword [0x4f2658]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
sub esp, 0x18
movsd qword [ebp - 0x1be0], xmm0
mov ecx, esp
push 0x4f250c
call fcn.00429f4a
movsd xmm0, qword [0x525478]
call fcn.004ad090
push edx
push eax
sub esp, 0x18
mov ecx, esp
push 0x4f2510
call fcn.00429edc
sub esp, 0x18
mov ecx, esp
push 0x4f2530
call fcn.00429edc
movsd xmm0, qword [0x4f2628]
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
movsd xmm1, qword [0x4f2610]
mov edx, esi
mov ecx, edi
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
divsd xmm1, qword [ebp - 0x1be0]
divsd xmm1, qword [ebp - 0x1bd0]
addsd xmm1, qword [0x4f26a8]
movsd qword [ebp - 0x1bc0], xmm1
call fcn.004ad140
cvttsd2si esi, qword [0x525478]
sub esp, 0x18
mov ecx, esp
push str.weruewogao
movsd qword [ebp - 0x1bb8], xmm0
call fcn.00429edc
push esi
push 0x3af772ac
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
cvttsd2si esi, qword [0x525478]
add esp, 0x24
movd xmm0, eax
push esi
cvtdq2pd xmm0, xmm0
sub esp, 0x18
mov ecx, esp
push str.ewqinbo
movsd qword [ebp - 0x1bd8], xmm0
call fcn.00429f4a
movsd xmm0, qword [0x525478]
mov edx, esi
mov ecx, 0x2a9c07e7
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusA]
mov ecx, dword [ebp - 0x1bac]
mov edx, ebx
movsd qword [ebp - 0x1bd0], xmm0
call fcn.004ad140
mulsd xmm0, qword [0x4f25f8]
push 0
push 0x3adec927
sub esp, 0x18
mov ecx, esp
movsd qword [ebp - 0x1be0], xmm0
push str.tyhapani
call fcn.00429edc
cvttsd2si eax, qword [0x525478]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
add esp, 0x24
xor ecx, ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [ebp - 0x1be0]
divsd xmm0, qword [ebp - 0x1bd0]
mulsd xmm0, qword [ebp - 0x1bd8]
mulsd xmm0, qword [ebp - 0x1bb8]
addsd xmm0, qword [ebp - 0x1bc0]
movsd qword [0x525478], xmm0
push 0xf
pop eax
push 0x10
pop edx
cmp dword [0x5255cc], edx
mov ebx, 0x5255b8
mov dword [ebp - 0x518], eax
mov edi, 0x525630
cmovae ebx, dword [0x5255b8]
cmp dword [0x525644], edx
lea edx, [ebp - 0x4e4]
mov dword [ebp - 0x500], eax
cmovae edi, dword [0x525630]
mov dword [ebp - 0x4e8], eax
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x4b8], eax
movzx eax, byte [0x520e52]
mov dword [ebp - 0x52c], ecx
mov dword [ebp - 0x51c], ecx
mov dword [ebp - 0x514], ecx
mov dword [ebp - 0x504], ecx
mov dword [ebp - 0x4fc], ecx
mov dword [ebp - 0x4ec], ecx
mov dword [ebp - 0x4e4], ecx
mov dword [ebp - 0x4d4], ecx
mov dword [ebp - 0x4cc], ecx
mov dword [ebp - 0x4bc], ecx
lea ecx, [ebp - 0x15dc]
push eax
call fcn.0042a13c
mov dl, byte [edi + 1]
mov esi, eax
pop ecx
lea eax, [ebp - 0x4cc]
push eax
lea ecx, [ebp - 0x15c4]
call fcn.0042a111
pop ecx
push esi
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xdfc]
call fcn.0042a3b3
movzx eax, byte [0x520b91]
lea edx, [ebp - 0x4fc]
push eax
lea ecx, [ebp - 0x15f4]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xdfc]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xde4]
call fcn.0042a3b3
movzx eax, byte [0x520f10]
lea edx, [ebp - 0xde4]
push eax
lea ecx, [ebp - 0x15ac]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x514]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xdcc]
call fcn.0042a3b3
mov dl, byte [ebx + 4]
lea eax, [ebp - 0x52c]
push eax
lea ecx, [ebp - 0x160c]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0xdcc]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x4b4]
call fcn.0042a3b3
lea eax, [ebp - 0x4b4]
push 0x10
pop ebx
cmp dword [ebp - 0x4a0], ebx
cmovae eax, dword [ebp - 0x4b4]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x526c3c], eax
push 0xf
test eax, eax
je 0x47a4c4
xor eax, eax
mov ecx, 0x525630
cmp dword [0x525644], ebx
pop edi
cmovae ecx, dword [0x525630]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1a4], eax
movzx eax, byte [0x520d99]
push eax
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x218], edi
mov dword [ebp - 0x200], edi
mov dword [ebp - 0x1e8], edi
mov dword [ebp - 0x1d0], edi
mov dword [ebp - 0x1b8], edi
mov dword [ebp - 0x1a0], edi
movsx eax, byte [ecx + 1]
push eax
call fcn.004970f0
pop ecx
push eax
lea edx, [ebp - 0x1b4]
lea ecx, [ebp - 0x151c]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x1504]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x1cc]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xdb4]
call fcn.0042a3b3
mov dl, byte [0x520e92]
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x1534]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0xdb4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xd9c]
call fcn.0042a3b3
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0xd9c]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xd84]
call fcn.0042a3b3
movsx eax, byte [0x520c17]
push eax
call fcn.004970f0
pop ecx
push eax
lea edx, [ebp - 0xd84]
lea ecx, [ebp - 0x14ec]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x214]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xd6c]
call fcn.0042a3b3
mov dl, byte [0x520e12]
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x154c]
call fcn.0042a111
pop ecx
movzx ecx, byte [0x520c90]
lea edx, [ebp - 0xd6c]
push ecx
lea ecx, [ebp - 0x14d4]
mov esi, eax
call fcn.0042a13c
pop ecx
push esi
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xd54]
call fcn.0042a3b3
movzx eax, byte [0x520d95]
lea edx, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x1564]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xd54]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xd3c]
call fcn.0042a3b3
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0xd3c]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xd24]
call fcn.0042a3b3
mov dl, byte [0x520e90]
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x157c]
call fcn.0042a111
pop ecx
movzx ecx, byte [0x520954]
lea edx, [ebp - 0xd24]
push ecx
lea ecx, [ebp - 0x136c]
mov esi, eax
call fcn.0042a13c
pop ecx
push esi
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xd0c]
call fcn.0042a3b3
lea eax, [ebp - 0x7c]
push eax
movsx eax, byte [0x5206d2]
push eax
call fcn.004970f0
pop ecx
mov dl, al
lea ecx, [ebp - 0x1594]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0xd0c]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x49c]
call fcn.0042a3b3
lea eax, [ebp - 0x49c]
cmp dword [ebp - 0x488], ebx
cmovae eax, dword [ebp - 0x49c]
push eax
push dword [0x526c3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
mov ecx, 0x1fffffff
jmp 0x47a975
xor eax, eax
mov ebx, 0x5255b8
pop ecx
push 0x10
pop edx
cmp dword [0x5255cc], edx
mov edi, 0x525630
mov dword [ebp - 0x19c], eax
cmovae ebx, dword [0x5255b8]
cmp dword [0x525644], edx
lea edx, [ebp - 0x154]
mov dword [ebp - 0x18c], eax
cmovae edi, dword [0x525630]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x12c], eax
movzx eax, byte [0x520e52]
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x170], ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x128], ecx
lea ecx, [ebp - 0x1474]
push eax
call fcn.0042a13c
mov dl, byte [edi + 1]
mov esi, eax
pop ecx
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x145c]
call fcn.0042a111
pop ecx
push esi
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xcf4]
call fcn.0042a3b3
movzx eax, byte [0x520b91]
lea edx, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x148c]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xcf4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xcdc]
call fcn.0042a3b3
movzx eax, byte [0x520f10]
lea edx, [ebp - 0xcdc]
push eax
lea ecx, [ebp - 0x1444]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x184]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xcc4]
call fcn.0042a3b3
mov dl, byte [ebx + 4]
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x14a4]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0xcc4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x484]
call fcn.0042a3b3
lea eax, [ebp - 0x484]
push 0x10
pop ebx
cmp dword [ebp - 0x470], ebx
cmovae eax, dword [ebp - 0x484]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x526c3c], eax
test eax, eax
je 0x47a960
xor ecx, ecx
mov eax, 0x525630
cmp dword [0x525644], ebx
push 0xf
cmovae eax, dword [0x525630]
pop edx
mov dword [ebp - 0x1bac], eax
lea eax, [ebp - 0x46c]
push eax
movsx eax, byte [0x5206d2]
push eax
mov dword [ebp - 0x46c], ecx
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0x458], edx
mov dword [ebp - 0x454], ecx
mov dword [ebp - 0x444], ecx
mov dword [ebp - 0x440], edx
mov dword [ebp - 0x43c], ecx
mov dword [ebp - 0x42c], ecx
mov dword [ebp - 0x428], edx
mov dword [ebp - 0x424], ecx
mov dword [ebp - 0x414], ecx
mov dword [ebp - 0x410], edx
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 0x3f8], edx
mov dword [ebp - 0x3f4], ecx
mov dword [ebp - 0x3e4], ecx
mov dword [ebp - 0x3e0], edx
mov dword [ebp - 0x3c4], ecx
mov dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x3b0], edx
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x338], edx
mov dword [ebp - 0x394], ecx
mov dword [ebp - 0x384], ecx
mov dword [ebp - 0x380], edx
mov dword [ebp - 0x3dc], ecx
mov dword [ebp - 0x3cc], ecx
mov dword [ebp - 0x3c8], edx
call fcn.004970f0
pop ecx
mov dl, al
lea ecx, [ebp - 0x142c]
call fcn.0042a111
mov dl, byte [0x520e90]
mov dword [ebp - 0x1bc8], eax
lea eax, [ebp - 0x454]
pop ecx
push eax
lea ecx, [ebp - 0x1414]
call fcn.0042a111
pop ecx
movzx ecx, byte [0x520d95]
lea edx, [ebp - 0x424]
push ecx
lea ecx, [ebp - 0x13fc]
mov dword [ebp - 0x1bb4], eax
call fcn.0042a13c
mov dl, byte [0x520e12]
mov ebx, eax
pop ecx
lea eax, [ebp - 0x40c]
push eax
lea ecx, [ebp - 0x13e4]
call fcn.0042a111
mov dl, byte [0x520e92]
mov edi, eax
pop ecx
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0x13cc]
call fcn.0042a111
pop ecx
movzx ecx, byte [0x520d99]
mov esi, eax
mov eax, dword [ebp - 0x1bac]
push ecx
movsx ecx, byte [eax + 1]
push ecx
call fcn.004970f0
pop ecx
push eax
lea edx, [ebp - 0x394]
lea ecx, [ebp - 0x13b4]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x139c]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x34c]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xcac]
call fcn.0042a3b3
push esi
lea eax, [ebp - 0xcac]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xc94]
call fcn.0042a3b3
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0xc94]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xc7c]
call fcn.0042a3b3
movsx eax, byte [0x520c17]
push eax
call fcn.004970f0
pop ecx
push eax
lea edx, [ebp - 0xc7c]
lea ecx, [ebp - 0x1384]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x3f4]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xc64]
call fcn.0042a3b3
movzx eax, byte [0x520c90]
lea edx, [ebp - 0xc64]
push eax
lea ecx, [ebp - 0x121c]
call fcn.0042a13c
pop ecx
push edi
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xc4c]
call fcn.0042a3b3
push ebx
lea eax, [ebp - 0xc4c]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xc34]
call fcn.0042a3b3
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0xc34]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xc1c]
call fcn.0042a3b3
movzx eax, byte [0x520954]
lea edx, [ebp - 0xc1c]
push eax
lea ecx, [ebp - 0x1354]
call fcn.0042a13c
pop ecx
push dword [ebp - 0x1bb4]
lea ecx, [ebp - 0xc04]
push eax
push dword [ebp - 0x1b9c]
call fcn.0042a3b3
push dword [ebp - 0x1bc8]
lea eax, [ebp - 0xc04]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x37c]
call fcn.0042a3b3
push 0x10
pop ecx
cmp dword [ebp - 0x368], ecx
lea eax, [ebp - 0x37c]
cmovae eax, dword [ebp - 0x37c]
push eax
push dword [0x526c3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
or eax, 0xffffffff
mov dword [ebp - 0x1b98], eax
mov eax, 0xff
mov dword [ebp - 0x1bc8], eax
jmp 0x47a96d
mov eax, 0x7ff
xor edx, edx
mov dword [ebp - 0x1b98], eax
push 0xf
mov ecx, 0xe0000000
pop edi
lea eax, [ebp - 0x1bf8]
mov dword [ebp - 0x1bbc], ecx
push eax
push 0x18
pop eax
push eax
push dword [ebp - 0x1b9c]
call edx
mov ebx, dword [ebp - 0x1bc8]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x1b9c], eax
test bl, bl
jns 0x47a9bb
and ebx, 0xffffff7f
lea ecx, [ebp - 0x37c]
mov dword [ebp - 0x1bc8], ebx
call fcn.00429fa9
test bl, 0x40
je 0x47a9d4
and ebx, 0xffffffbf
lea ecx, [ebp - 0xc04]
mov dword [ebp - 0x1bc8], ebx
call fcn.00429fa9
test bl, 0x20
je 0x47a9ed
and ebx, 0xffffffdf
lea ecx, [ebp - 0x1354]
mov dword [ebp - 0x1bc8], ebx
call fcn.00429fa9
push 0x10
pop eax
test al, bl
je 0x47aa08
and ebx, 0xffffffef
lea ecx, [ebp - 0xc1c]
mov dword [ebp - 0x1bc8], ebx
call fcn.00429fa9
push 8
pop eax
test al, bl
je 0x47aa23
and ebx, 0xfffffff7
lea ecx, [ebp - 0xc34]
mov dword [ebp - 0x1bc8], ebx
call fcn.00429fa9
push 4
pop eax
test al, bl
je 0x47aa3e
and ebx, 0xfffffffb
lea ecx, [ebp - 0xc4c]
mov dword [ebp - 0x1bc8], ebx
call fcn.00429fa9
test bl, 2
je 0x47aa57
and ebx, 0xfffffffd
lea ecx, [ebp - 0x121c]
mov dword [ebp - 0x1bc8], ebx
call fcn.00429fa9
test bl, 1
je 0x47aa70
and ebx, 0xfffffffe
lea ecx, [ebp - 0xc64]
mov dword [ebp - 0x1bc8], ebx
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, eax
jns 0x47aa96
and eax, 0x7fffffff
lea ecx, [ebp - 0x1384]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x40000000
je 0x47aab9
and eax, 0xbfffffff
lea ecx, [ebp - 0xc7c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x20000000
je 0x47aadc
and eax, 0xdfffffff
lea ecx, [ebp - 0xc94]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x10000000
je 0x47aaff
and eax, 0xefffffff
lea ecx, [ebp - 0xcac]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x8000000
je 0x47ab22
and eax, 0xf7ffffff
lea ecx, [ebp - 0x139c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x4000000
je 0x47ab45
and eax, 0xfbffffff
lea ecx, [ebp - 0x13b4]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x2000000
je 0x47ab68
and eax, 0xfdffffff
lea ecx, [ebp - 0x394]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x1000000
je 0x47ab8b
and eax, 0xfeffffff
lea ecx, [ebp - 0x34c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x800000
je 0x47abae
and eax, 0xff7fffff
lea ecx, [ebp - 0x13cc]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x400000
je 0x47abd1
and eax, 0xffbfffff
lea ecx, [ebp - 0x3c4]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x200000
je 0x47abf4
and eax, 0xffdfffff
lea ecx, [ebp - 0x3dc]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x100000
je 0x47ac17
and eax, 0xffefffff
lea ecx, [ebp - 0x3f4]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x80000
je 0x47ac3a
and eax, 0xfff7ffff
lea ecx, [ebp - 0x13e4]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x40000
je 0x47ac5d
and eax, 0xfffbffff
lea ecx, [ebp - 0x40c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x20000
je 0x47ac80
and eax, 0xfffdffff
lea ecx, [ebp - 0x13fc]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x10000
je 0x47aca3
and eax, 0xfffeffff
lea ecx, [ebp - 0x424]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x8000
je 0x47acc6
and eax, 0xffff7fff
lea ecx, [ebp - 0x43c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x4000
je 0x47ace9
and eax, 0xffffbfff
lea ecx, [ebp - 0x1414]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x2000
je 0x47ad0c
and eax, 0xffffdfff
lea ecx, [ebp - 0x454]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
mov esi, 0x1000
test esi, eax
je 0x47ad31
and eax, 0xffffefff
lea ecx, [ebp - 0x142c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x800
je 0x47ad54
and eax, 0xfffff7ff
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x400
je 0x47ad77
and eax, 0xfffffbff
lea ecx, [ebp - 0x484]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x200
je 0x47ad9a
and eax, 0xfffffdff
lea ecx, [ebp - 0xcc4]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x100
je 0x47adbd
and eax, 0xfffffeff
lea ecx, [ebp - 0x1444]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test al, al
jns 0x47addd
and eax, 0xffffff7f
lea ecx, [ebp - 0xcdc]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test al, 0x40
je 0x47adfb
and eax, 0xffffffbf
lea ecx, [ebp - 0xcf4]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test al, 0x20
je 0x47ae19
and eax, 0xffffffdf
lea ecx, [ebp - 0x145c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
push 0x10
pop edx
test dl, al
je 0x47ae90
mov ecx, dword [ebp - 0x128]
and eax, 0xffffffef
mov dword [ebp - 0x1b98], eax
cmp ecx, edx
jb 0x47ae7c
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x1bb4], eax
mov dword [ebp - 0x1bac], ecx
cmp eax, esi
jb 0x47ae6d
lea eax, [ebp - 0x1bb4]
push eax
lea eax, [ebp - 0x1bac]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bb4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bac]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1b98]
pop ecx
pop ecx
and dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], edi
mov byte [ebp - 0x13c], 0
test al, 8
je 0x47aeae
and eax, 0xfffffff7
lea ecx, [ebp - 0x1474]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
push 0x10
pop esi
test al, 4
je 0x47af25
mov ecx, dword [ebp - 0x140]
mov dword [ebp - 0x1b98], eax
cmp ecx, esi
jb 0x47af11
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47af02
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1b98]
pop ecx
pop ecx
and dword [ebp - 0x144], 0
mov dword [ebp - 0x140], edi
mov byte [ebp - 0x154], 0
test al, 2
je 0x47af3a
lea ecx, [ebp - 0x148c]
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test al, 1
je 0x47af91
mov eax, dword [ebp - 8]
cmp eax, esi
jb 0x47af86
mov ecx, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47af7d
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0xc], 0
mov dword [ebp - 8], edi
mov byte [ebp - 0x1c], 0
mov eax, dword [ebp - 0x1bbc]
test eax, eax
jns 0x47b010
mov ecx, dword [ebp - 0x170]
and eax, 0x7fffffff
mov dword [ebp - 0x1bbc], eax
cmp ecx, esi
jb 0x47affc
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x184]
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47afed
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1bbc]
pop ecx
pop ecx
and dword [ebp - 0x174], 0
mov dword [ebp - 0x170], edi
mov byte [ebp - 0x184], 0
test eax, 0x40000000
je 0x47b033
and eax, 0xbfffffff
lea ecx, [ebp - 0x14a4]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x20000000
je 0x47b0af
mov ecx, dword [ebp - 0x188]
and eax, 0xdfffffff
mov dword [ebp - 0x1bbc], eax
cmp ecx, esi
jb 0x47b09b
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47b08c
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1bbc]
pop ecx
pop ecx
and dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], edi
mov byte [ebp - 0x19c], 0
test eax, 0x10000000
je 0x47b0d2
and eax, 0xefffffff
lea ecx, [ebp - 0x49c]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x8000000
je 0x47b0f5
and eax, 0xf7ffffff
lea ecx, [ebp - 0xd0c]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x4000000
je 0x47b118
and eax, 0xfbffffff
lea ecx, [ebp - 0x136c]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x2000000
je 0x47b13b
and eax, 0xfdffffff
lea ecx, [ebp - 0xd24]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x1000000
je 0x47b15e
and eax, 0xfeffffff
lea ecx, [ebp - 0xd3c]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x800000
je 0x47b181
and eax, 0xff7fffff
lea ecx, [ebp - 0xd54]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x400000
je 0x47b1a4
and eax, 0xffbfffff
lea ecx, [ebp - 0x14d4]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x200000
je 0x47b1c7
and eax, 0xffdfffff
lea ecx, [ebp - 0xd6c]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x100000
je 0x47b1ea
and eax, 0xffefffff
lea ecx, [ebp - 0x14ec]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x80000
je 0x47b20d
and eax, 0xfff7ffff
lea ecx, [ebp - 0xd84]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x40000
je 0x47b230
and eax, 0xfffbffff
lea ecx, [ebp - 0xd9c]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x20000
je 0x47b253
and eax, 0xfffdffff
lea ecx, [ebp - 0xdb4]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x10000
je 0x47b276
and eax, 0xfffeffff
lea ecx, [ebp - 0x1504]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x8000
je 0x47b299
and eax, 0xffff7fff
lea ecx, [ebp - 0x151c]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x4000
je 0x47b315
mov ecx, dword [ebp - 0x1a0]
and eax, 0xffffbfff
mov dword [ebp - 0x1bbc], eax
cmp ecx, esi
jb 0x47b301
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47b2f2
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1bbc]
pop ecx
pop ecx
and dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], edi
mov byte [ebp - 0x1b4], 0
test eax, 0x2000
je 0x47b391
mov ecx, dword [ebp - 0x1b8]
and eax, 0xffffdfff
mov dword [ebp - 0x1bbc], eax
cmp ecx, esi
jb 0x47b37d
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47b36e
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1bbc]
pop ecx
pop ecx
and dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], edi
mov byte [ebp - 0x1cc], 0
test eax, 0x1000
je 0x47b3b4
and eax, 0xffffefff
lea ecx, [ebp - 0x1534]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test eax, 0x800
je 0x47b430
mov ecx, dword [ebp - 0x1d0]
and eax, 0xfffff7ff
mov dword [ebp - 0x1bbc], eax
cmp ecx, esi
jb 0x47b41c
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47b40d
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1bbc]
pop ecx
pop ecx
and dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], edi
mov byte [ebp - 0x1e4], 0
test eax, 0x400
je 0x47b4ac
mov ecx, dword [ebp - 0x1e8]
and eax, 0xfffffbff
mov dword [ebp - 0x1bbc], eax
cmp ecx, esi
jb 0x47b498
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47b489
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1bbc]
pop ecx
pop ecx
and dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], edi
mov byte [ebp - 0x1fc], 0
test eax, 0x200
je 0x47b528
mov ecx, dword [ebp - 0x200]
and eax, 0xfffffdff
mov dword [ebp - 0x1bbc], eax
cmp ecx, esi
jb 0x47b514
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47b505
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1bbc]
pop ecx
pop ecx
and dword [ebp - 0x204], 0
mov dword [ebp - 0x200], edi
mov byte [ebp - 0x214], 0
test eax, 0x100
je 0x47b54b
and eax, 0xfffffeff
lea ecx, [ebp - 0x154c]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test al, al
jns 0x47b5c4
mov ecx, dword [ebp - 0x218]
and eax, 0xffffff7f
mov dword [ebp - 0x1bbc], eax
cmp ecx, esi
jb 0x47b5b0
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x22c]
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47b5a1
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1bbc]
pop ecx
pop ecx
and dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], edi
mov byte [ebp - 0x22c], 0
test al, 0x40
je 0x47b5e2
and eax, 0xffffffbf
lea ecx, [ebp - 0x1564]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test al, 0x20
je 0x47b64a
mov ecx, dword [ebp - 0x20]
and eax, 0xffffffdf
mov dword [ebp - 0x1bbc], eax
cmp ecx, esi
jb 0x47b63f
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47b630
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1bbc]
pop ecx
pop ecx
and dword [ebp - 0x24], 0
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x34], 0
push 0x10
pop edx
test dl, al
je 0x47b6b5
mov ecx, dword [ebp - 0x38]
and eax, 0xffffffef
mov dword [ebp - 0x1bbc], eax
cmp ecx, edx
jb 0x47b6aa
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47b69b
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1bbc]
pop ecx
pop ecx
and dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], edi
mov byte [ebp - 0x4c], 0
test al, 8
je 0x47b6d3
and eax, 0xfffffff7
lea ecx, [ebp - 0x157c]
mov dword [ebp - 0x1bbc], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
push 0x10
pop esi
test al, 4
je 0x47b73b
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x1bbc], eax
cmp ecx, esi
jb 0x47b730
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47b721
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
mov eax, dword [ebp - 0x1bbc]
pop ecx
pop ecx
and dword [ebp - 0x54], 0
mov dword [ebp - 0x50], edi
mov byte [ebp - 0x64], 0
test al, 2
je 0x47b750
lea ecx, [ebp - 0x1594]
call fcn.00429fa9
mov eax, dword [ebp - 0x1bbc]
test al, 1
je 0x47b7a7
mov eax, dword [ebp - 0x68]
cmp eax, esi
jb 0x47b79c
mov ecx, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x1bac], eax
mov dword [ebp - 0x1bb4], ecx
cmp eax, 0x1000
jb 0x47b793
lea eax, [ebp - 0x1bac]
push eax
lea eax, [ebp - 0x1bb4]
push eax
call fcn.00424175
mov eax, dword [ebp - 0x1bac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1bb4]
push eax
push ecx
call fcn.004870ef
pop ecx
pop ecx
and dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], edi
mov byte [ebp - 0x7c], 0
lea ecx, [ebp - 0x4b4]
call fcn.00429fa9
lea ecx, [ebp - 0xdcc]
call fcn.00429fa9
lea ecx, [ebp - 0x15ac]
call fcn.00429fa9
lea ecx, [ebp - 0xde4]
call fcn.00429fa9
lea ecx, [ebp - 0xdfc]
call fcn.00429fa9
lea ecx, [ebp - 0x15c4]
call fcn.00429fa9
lea ecx, [ebp - 0x4cc]
call fcn.00429fa9
lea ecx, [ebp - 0x15dc]
call fcn.00429fa9
lea ecx, [ebp - 0x4e4]
call fcn.00429fa9
lea ecx, [ebp - 0x15f4]
call fcn.00429fa9
lea ecx, [ebp - 0x4fc]
call fcn.00429fa9
lea ecx, [ebp - 0x514]
call fcn.00429fa9
lea ecx, [ebp - 0x160c]
call fcn.00429fa9
lea ecx, [ebp - 0x52c]
call fcn.00429fa9
cmp byte [ebp - 0x1b9c], 0
je 0x47b851
xor eax, eax
jmp 0x47e727
mov eax, dword [ebp - 0x1be6]
xor edx, edx
imul eax, dword [ebp - 0x1be8]
inc edx
movzx eax, ax
mov ecx, eax
cmp ax, dx
jne 0x47b876
push 0x10
mov dword [ebp - 0x1bc4], edx
pop edx
jmp 0x47b898
push 4
pop edx
cmp ax, dx
jbe 0x47b86b
push 8
pop edx
push 0x10
cmp ax, dx
jbe 0x47b86d
pop edx
cmp ax, dx
ja 0x47d178
mov dword [ebp - 0x1bc4], edx
xor eax, eax
mov dword [ebp - 0x98], edi
cmp dword [0x5255cc], edx
mov edi, 0x5255b8
push 0xf
cmovae edi, dword [0x5255b8]
mov esi, 0x5255d0
pop edx
push 0x10
pop ecx
cmp dword [0x5255e4], ecx
lea ecx, [ebp - 0x193c]
mov dword [ebp - 0xac], eax
cmovae esi, dword [0x5255d0]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x84], eax
movzx eax, byte [0x521094]
mov dword [ebp - 0x110], edx
mov dword [ebp - 0xf8], edx
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0x158], edx
mov dword [ebp - 0x80], edx
lea edx, [ebp - 0x94]
push eax
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x16c]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x109c]
call fcn.0042a3b3
movzx eax, byte [0x521013]
lea edx, [ebp - 0x109c]
push eax
movzx eax, byte [0x520d95]
lea ecx, [ebp - 0x1924]
push eax
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x190c]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0xc4]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x1084]
call fcn.0042a3b3
mov dl, byte [0x520a54]
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x1954]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0x1084]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x106c]
call fcn.0042a3b3
movzx eax, byte [0x520d93]
lea edx, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x196c]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x106c]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x1054]
call fcn.0042a3b3
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x1054]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x103c]
call fcn.0042a3b3
movzx eax, byte [esi + 1]
lea edx, [ebp - 0x103c]
push eax
lea ecx, [ebp - 0x18f4]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x124]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x1024]
call fcn.0042a3b3
movzx eax, byte [edi + 1]
lea edx, [ebp - 0x1024]
push eax
movzx eax, byte [0x520f10]
lea ecx, [ebp - 0x18dc]
push eax
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x18c4]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0xac]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x82c]
call fcn.0042a3b3
push 0x10
pop ecx
cmp dword [ebp - 0x818], ecx
lea eax, [ebp - 0x82c]
cmovae eax, dword [ebp - 0x82c]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x526c3c], eax
push 0xf
pop edi
test eax, eax
je 0x47be22
mov ecx, dword [0x5255e4]
xor eax, eax
or ebx, 0x100
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x804], eax
or ebx, 0xfffffe00
mov dword [ebp - 0x7fc], eax
mov edx, 0x5255d0
mov dword [ebp - 0x7ec], eax
mov dword [ebp - 0x7e4], eax
mov dword [ebp - 0x7d4], eax
push 0x10
pop eax
cmp ecx, eax
mov dword [ebp - 0x1bc8], ebx
mov eax, dword [0x5255d0]
mov ebx, edx
cmovae ebx, eax
mov dword [ebp - 0x800], edi
xor esi, esi
mov dword [ebp - 0x7e8], edi
mov dword [ebp - 0x7d0], edi
cmp ecx, 0x10
mov dword [ebp - 0x7cc], esi
mov dword [ebp - 0x7bc], esi
mov dword [ebp - 0x7b8], edi
mov edi, edx
cmovae edi, eax
mov dword [ebp - 0x7b4], esi
mov dword [ebp - 0x7a4], esi
mov dword [ebp - 0x79c], esi
mov dword [ebp - 0x78c], esi
mov esi, edx
cmovae esi, eax
mov dword [ebp - 0x7a0], 0xf
and dword [ebp - 0x784], 0
and dword [ebp - 0x774], 0
and dword [ebp - 0x76c], 0
and dword [ebp - 0x75c], 0
and dword [ebp - 0x754], 0
and dword [ebp - 0x744], 0
and dword [ebp - 0x3ac], 0
and dword [ebp - 0x39c], 0
cmp ecx, 0x10
mov dword [ebp - 0x788], 0xf
cmovae edx, eax
mov dword [ebp - 0x770], 0xf
movzx eax, byte [0x520c11]
push eax
lea eax, [ebp - 0x3ac]
mov dword [ebp - 0x758], 0xf
push eax
mov dword [ebp - 0x740], 0xf
mov dword [ebp - 0x398], 0xf
movsx eax, byte [edx + 6]
push eax
call fcn.004970f0
pop ecx
mov dl, al
lea ecx, [ebp - 0x1834]
call fcn.0042a111
pop ecx
mov edx, eax
lea ecx, [ebp - 0x181c]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x754]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x100c]
call fcn.0042a3b3
movzx eax, byte [0x520951]
lea edx, [ebp - 0x76c]
push eax
lea ecx, [ebp - 0x184c]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x100c]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xff4]
call fcn.0042a3b3
movzx eax, byte [0x520753]
lea edx, [ebp - 0x784]
push eax
lea ecx, [ebp - 0x1864]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xff4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xfdc]
call fcn.0042a3b3
movzx eax, byte [esi + 1]
lea edx, [ebp - 0xfdc]
push eax
lea ecx, [ebp - 0x1804]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x79c]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xfc4]
call fcn.0042a3b3
movsx eax, byte [0x520758]
push eax
call fcn.004970f0
pop ecx
push eax
lea edx, [ebp - 0x7b4]
lea ecx, [ebp - 0x187c]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xfc4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xfac]
call fcn.0042a3b3
movzx eax, byte [edi + 1]
lea edx, [ebp - 0xfac]
push eax
lea ecx, [ebp - 0x17ec]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x7cc]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xf94]
call fcn.0042a3b3
mov dl, byte [ebx + 1]
lea eax, [ebp - 0x7e4]
push eax
lea ecx, [ebp - 0x1894]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0xf94]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xf7c]
call fcn.0042a3b3
movzx eax, byte [0x520c18]
lea edx, [ebp - 0xf7c]
push eax
lea ecx, [ebp - 0x17d4]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x7fc]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xf64]
call fcn.0042a3b3
movzx eax, byte [0x520954]
lea edx, [ebp - 0x814]
push eax
lea ecx, [ebp - 0x18ac]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xf64]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x724]
call fcn.0042a3b3
push 0x10
pop ecx
cmp dword [ebp - 0x710], ecx
lea eax, [ebp - 0x724]
cmovae eax, dword [ebp - 0x724]
push eax
push dword [0x526c3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
push 0x1f
mov ebx, dword [ebp - 0x1bc8]
pop ecx
jmp 0x47c3b8
movzx eax, byte [0x520d93]
lea edx, [ebp - 0x6c4]
and dword [ebp - 0x6c4], 0
lea ecx, [ebp - 0x17bc]
and dword [ebp - 0x6b4], 0
push eax
mov dword [ebp - 0x6b0], edi
call fcn.0042a13c
mov esi, eax
mov dword [ebp - 0x698], edi
xor eax, eax
mov dword [ebp - 0x680], edi
mov dword [ebp - 0x6ac], eax
lea edx, [ebp - 0x664]
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x684], eax
mov dword [ebp - 0x67c], eax
mov dword [ebp - 0x66c], eax
mov dword [ebp - 0x664], eax
mov dword [ebp - 0x654], eax
movzx eax, byte [0x521094]
pop ecx
push eax
lea ecx, [ebp - 0x178c]
mov dword [ebp - 0x668], edi
mov dword [ebp - 0x650], edi
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x67c]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xf4c]
call fcn.0042a3b3
movzx eax, byte [0x521013]
lea edx, [ebp - 0xf4c]
push eax
movzx eax, byte [0x520d95]
lea ecx, [ebp - 0x1774]
push eax
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x175c]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x694]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xf34]
call fcn.0042a3b3
mov dl, byte [0x520a54]
lea eax, [ebp - 0x6ac]
push eax
lea ecx, [ebp - 0x17a4]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0xf34]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xf1c]
call fcn.0042a3b3
push esi
lea eax, [ebp - 0xf1c]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xf04]
call fcn.0042a3b3
and dword [ebp - 0x6dc], 0
lea eax, [ebp - 0x6dc]
and dword [ebp - 0x6cc], 0
lea ecx, [ebp - 0xeec]
push eax
lea eax, [ebp - 0xf04]
mov dword [ebp - 0x6c8], edi
push eax
push dword [ebp - 0x1b9c]
call fcn.0042a3b3
and dword [ebp - 0x6f4], 0
lea edx, [ebp - 0xeec]
and dword [ebp - 0x6e4], 0
mov esi, 0x5255d0
push 0x10
pop ecx
cmp dword [0x5255e4], ecx
mov eax, esi
mov dword [ebp - 0x6e0], edi
lea ecx, [ebp - 0x1744]
cmovae eax, dword [0x5255d0]
movzx eax, byte [eax + 1]
push eax
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x6f4]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xed4]
call fcn.0042a3b3
and dword [ebp - 0x70c], 0
lea edx, [ebp - 0xed4]
and dword [ebp - 0x6fc], 0
lea ecx, [ebp - 0x172c]
push 0x10
pop eax
cmp dword [0x5255cc], eax
mov eax, 0x5255b8
mov dword [ebp - 0x6f8], edi
cmovae eax, dword [0x5255b8]
movzx eax, byte [eax + 1]
push eax
movzx eax, byte [0x520f10]
push eax
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x1714]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x70c]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x64c]
call fcn.0042a3b3
push 0x10
pop ecx
cmp dword [ebp - 0x638], ecx
lea eax, [ebp - 0x64c]
cmovae eax, dword [ebp - 0x64c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor edx, edx
mov dword [0x526c3c], eax
test eax, eax
je 0x47c3b3
push 0x10
pop eax
cmp dword [0x5255e4], eax
mov eax, dword [0x5255d0]
push 0xf
pop ebx
mov dword [ebp - 0x590], edi
mov edi, esi
cmovae edi, eax
mov dword [ebp - 0x5a4], edx
cmp dword [0x5255e4], 0x10
mov dword [ebp - 0x594], edx
mov dword [ebp - 0x5bc], edx
mov dword [ebp - 0x5ac], edx
mov dword [ebp - 0x5d4], edx
mov dword [ebp - 0x5c4], edx
mov dword [ebp - 0x5ec], edx
mov dword [ebp - 0x5dc], edx
mov edx, esi
mov dword [ebp - 0x5a8], ebx
cmovae edx, eax
mov dword [ebp - 0x5c0], ebx
mov ebx, esi
cmovae ebx, eax
mov dword [ebp - 0x1b9c], edx
xor eax, eax
mov dword [ebp - 0x5d8], 0xf
push 0xf
pop ecx
mov dword [ebp - 0x604], eax
lea edx, [ebp - 0x58c]
mov dword [ebp - 0x5f4], eax
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x60c], eax
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x624], eax
mov dword [ebp - 0x58c], eax
mov dword [ebp - 0x57c], eax
movzx eax, byte [0x520951]
mov dword [ebp - 0x5f0], ecx
mov dword [ebp - 0x608], ecx
mov dword [ebp - 0x620], ecx
mov dword [ebp - 0x578], ecx
lea ecx, [ebp - 0x169c]
push eax
call fcn.0042a13c
pop ecx
push 0xf
pop edx
push 0x10
mov esi, eax
mov dword [ebp - 0x560], edx
xor eax, eax
mov dword [ebp - 0x548], edx
pop ecx
cmp dword [0x5255e4], ecx
mov ecx, 0x5255d0
mov dword [ebp - 0x574], eax
cmovae ecx, dword [0x5255d0]
mov dword [ebp - 0x564], eax
mov dword [ebp - 0x55c], eax
mov dword [ebp - 0x54c], eax
movzx eax, byte [0x520c11]
push eax
lea eax, [ebp - 0x55c]
push eax
movsx eax, byte [ecx + 6]
push eax
call fcn.004970f0
pop ecx
mov dl, al
lea ecx, [ebp - 0x1684]
call fcn.0042a111
pop ecx
mov edx, eax
lea ecx, [ebp - 0x166c]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x574]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xebc]
call fcn.0042a3b3
push esi
lea eax, [ebp - 0xebc]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xea4]
call fcn.0042a3b3
movzx eax, byte [0x520753]
lea edx, [ebp - 0x5a4]
push eax
lea ecx, [ebp - 0x16b4]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xea4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xe8c]
call fcn.0042a3b3
movzx eax, byte [edi + 1]
lea edx, [ebp - 0xe8c]
push eax
lea ecx, [ebp - 0x1654]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x5bc]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xe74]
call fcn.0042a3b3
movsx eax, byte [0x520758]
push eax
call fcn.004970f0
pop ecx
push eax
lea edx, [ebp - 0x5d4]
lea ecx, [ebp - 0x16cc]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xe74]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xe5c]
call fcn.0042a3b3
movzx eax, byte [ebx + 1]
lea edx, [ebp - 0xe5c]
push eax
lea ecx, [ebp - 0x163c]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x5ec]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xe44]
call fcn.0042a3b3
lea eax, [ebp - 0x604]
push eax
mov eax, dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x16e4]
mov dl, byte [eax + 1]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0xe44]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xe2c]
call fcn.0042a3b3
movzx eax, byte [0x520c18]
lea edx, [ebp - 0xe2c]
push eax
lea ecx, [ebp - 0x1624]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x61c]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xe14]
call fcn.0042a3b3
movzx eax, byte [0x520954]
lea edx, [ebp - 0x634]
push eax
lea ecx, [ebp - 0x16fc]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xe14]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x544]
call fcn.0042a3b3
push 0x10
pop ecx
cmp dword [ebp - 0x530], ecx
lea eax, [ebp - 0x544]
cmovae eax, dword [ebp - 0x544]
push eax
push dword [0x526c3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
mov eax, 0x1ffffff
push 0xffffffffffffffe0
mov dword [ebp - 0x1ba4], eax
jmp 0x47be16
mov ecx, 0xfffffe0
mov eax, dword [ebp - 0x1bc4]
movzx esi, ax
xor eax, eax
mov dword [ebp - 0x1b98], ecx
inc eax
mov ecx, esi
shl eax, cl
lea eax, [eax*4 + 0x28]
push eax
push 0x40
call edx
mov edi, eax
mov eax, dword [ebp - 0x1ba4]
test eax, 0x1000000
je 0x47c405
and eax, 0xfeffffff
lea ecx, [ebp - 0x544]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x800000
je 0x47c428
and eax, 0xff7fffff
lea ecx, [ebp - 0xe14]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x400000
je 0x47c44b
and eax, 0xffbfffff
lea ecx, [ebp - 0x1624]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x200000
je 0x47c46e
and eax, 0xffdfffff
lea ecx, [ebp - 0xe2c]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x100000
je 0x47c491
and eax, 0xffefffff
lea ecx, [ebp - 0xe44]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x80000
je 0x47c4b4
and eax, 0xfff7ffff
lea ecx, [ebp - 0x163c]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x40000
je 0x47c4d7
and eax, 0xfffbffff
lea ecx, [ebp - 0xe5c]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x20000
je 0x47c4fa
and eax, 0xfffdffff
lea ecx, [ebp - 0xe74]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x10000
je 0x47c51d
and eax, 0xfffeffff
lea ecx, [ebp - 0x1654]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x8000
je 0x47c540
and eax, 0xffff7fff
lea ecx, [ebp - 0xe8c]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x4000
je 0x47c563
and eax, 0xffffbfff
lea ecx, [ebp - 0xea4]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x2000
je 0x47c586
and eax, 0xffffdfff
lea ecx, [ebp - 0xebc]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x1000
je 0x47c5a9
and eax, 0xffffefff
lea ecx, [ebp - 0x166c]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x800
je 0x47c5cc
and eax, 0xfffff7ff
lea ecx, [ebp - 0x1684]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x400
je 0x47c5ef
and eax, 0xfffffbff
lea ecx, [ebp - 0x55c]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x200
je 0x47c612
and eax, 0xfffffdff
lea ecx, [ebp - 0x574]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test eax, 0x100
je 0x47c635
and eax, 0xfffffeff
lea ecx, [ebp - 0x169c]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test al, al
jns 0x47c655
and eax, 0xffffff7f
lea ecx, [ebp - 0x58c]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test al, 0x40
je 0x47c673
and eax, 0xffffffbf
lea ecx, [ebp - 0x16b4]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test al, 0x20
je 0x47c691
and eax, 0xffffffdf
lea ecx, [ebp - 0x5a4]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
push 0x10
pop ecx
test cl, al
je 0x47c6b2
and eax, 0xffffffef
lea ecx, [ebp - 0x5bc]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
push 8
pop ecx
test cl, al
je 0x47c6d3
and eax, 0xfffffff7
lea ecx, [ebp - 0x16cc]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
push 4
pop ecx
test cl, al
je 0x47c6f4
and eax, 0xfffffffb
lea ecx, [ebp - 0x5d4]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test al, 2
je 0x47c712
and eax, 0xfffffffd
lea ecx, [ebp - 0x5ec]
mov dword [ebp - 0x1ba4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba4]
test al, 1
je 0x47c721
lea ecx, [ebp - 0x16e4]
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, eax
jns 0x47c747
and eax, 0x7fffffff
lea ecx, [ebp - 0x604]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x40000000
je 0x47c76a
and eax, 0xbfffffff
lea ecx, [ebp - 0x61c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x20000000
je 0x47c78d
and eax, 0xdfffffff
lea ecx, [ebp - 0x16fc]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x10000000
je 0x47c7b0
and eax, 0xefffffff
lea ecx, [ebp - 0x634]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x8000000
je 0x47c7d3
and eax, 0xf7ffffff
lea ecx, [ebp - 0x64c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x4000000
je 0x47c7f6
and eax, 0xfbffffff
lea ecx, [ebp - 0x1714]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x2000000
je 0x47c819
and eax, 0xfdffffff
lea ecx, [ebp - 0x172c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x1000000
je 0x47c83c
and eax, 0xfeffffff
lea ecx, [ebp - 0xed4]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x800000
je 0x47c85f
and eax, 0xff7fffff
lea ecx, [ebp - 0x1744]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x400000
je 0x47c882
and eax, 0xffbfffff
lea ecx, [ebp - 0xeec]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x200000
je 0x47c8a5
and eax, 0xffdfffff
lea ecx, [ebp - 0xf04]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x100000
je 0x47c8c8
and eax, 0xffefffff
lea ecx, [ebp - 0xf1c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x80000
je 0x47c8eb
and eax, 0xfff7ffff
lea ecx, [ebp - 0xf34]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x40000
je 0x47c90e
and eax, 0xfffbffff
lea ecx, [ebp - 0x175c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x20000
je 0x47c931
and eax, 0xfffdffff
lea ecx, [ebp - 0x1774]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x10000
je 0x47c954
and eax, 0xfffeffff
lea ecx, [ebp - 0xf4c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x8000
je 0x47c977
and eax, 0xffff7fff
lea ecx, [ebp - 0x178c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x4000
je 0x47c99a
and eax, 0xffffbfff
lea ecx, [ebp - 0x664]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x2000
je 0x47c9bd
and eax, 0xffffdfff
lea ecx, [ebp - 0x67c]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x1000
je 0x47c9e0
and eax, 0xffffefff
lea ecx, [ebp - 0x694]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x800
je 0x47ca03
and eax, 0xfffff7ff
lea ecx, [ebp - 0x17a4]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x400
je 0x47ca26
and eax, 0xfffffbff
lea ecx, [ebp - 0x6ac]
mov dword [ebp - 0x1b98], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1b98]
test eax, 0x200
je 0x47ca49
push 0x18
pop ebx
cmp bx, cx
mov dword [ebp - 0x728], edi
push 8
sbb eax, eax
mov edi, 0x5255b8
pop ecx
and eax, ecx
add eax, ebx
mov ebx, 0x5255d0
movzx eax, ax
mov esi, ebx
mov dword [ebp - 0x1b9c], eax
movzx eax, ax
mov dword [ebp - 0x1bac], eax
xor eax, eax
cmp dword [0x5255cc], edx
push 0xf
cmovae edi, dword [0x5255b8]
cmp dword [0x5255e4], edx
lea edx, [ebp - 0x2bc]
pop ecx
cmovae esi, dword [0x5255d0]
mov dword [ebp - 0x73c], eax
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2ac], eax
movzx eax, byte [0x521094]
mov dword [ebp - 0x350], ecx
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x308], ecx
mov dword [ebp - 0x2f0], ecx
mov dword [ebp - 0x2d8], ecx
mov dword [ebp - 0x2c0], ecx
mov dword [ebp - 0x2a8], ecx
lea ecx, [ebp - 0x1324]
push eax
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x2d4]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xbec]
call fcn.0042a3b3
movzx eax, byte [0x521013]
lea edx, [ebp - 0xbec]
push eax
movzx eax, byte [0x520d95]
lea ecx, [ebp - 0x130c]
push eax
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x12f4]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x2ec]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xbd4]
call fcn.0042a3b3
mov dl, byte [0x520a54]
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp - 0x133c]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0xbd4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xbbc]
call fcn.0042a3b3
movzx eax, byte [0x520d93]
lea edx, [ebp - 0x31c]
push eax
lea ecx, [ebp - 0x14bc]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xbbc]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xba4]
call fcn.0042a3b3
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0xba4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xb8c]
call fcn.0042a3b3
movzx eax, byte [esi + 1]
lea edx, [ebp - 0xb8c]
push eax
lea ecx, [ebp - 0x12dc]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x364]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xb74]
call fcn.0042a3b3
movzx eax, byte [edi + 1]
lea edx, [ebp - 0xb74]
push eax
movzx eax, byte [0x520f10]
lea ecx, [ebp - 0x12c4]
push eax
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x12ac]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x73c]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x2a4]
call fcn.0042a3b3
push 0x10
pop ecx
cmp dword [ebp - 0x290], ecx
lea eax, [ebp - 0x2a4]
cmovae eax, dword [ebp - 0x2a4]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x526c3c], eax
push 0xf
test eax, eax
je 0x47d70f
mov ecx, dword [0x5255e4]
xor eax, eax
pop edi
mov dword [ebp - 0x28c], eax
mov edx, ebx
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x24c], eax
push 0x10
pop eax
cmp ecx, eax
mov dword [ebp - 0x278], edi
mov eax, dword [0x5255d0]
cmovae ebx, eax
mov dword [ebp - 0x260], edi
xor esi, esi
mov dword [ebp - 0x248], edi
mov dword [ebp - 0x244], esi
cmp ecx, 0x10
mov dword [ebp - 0x234], esi
mov dword [ebp - 0x230], edi
mov edi, edx
cmovae edi, eax
mov dword [ebp - 0xab4], esi
mov dword [ebp - 0xaa4], esi
mov dword [ebp - 0xa9c], esi
mov dword [ebp - 0xa8c], esi
mov esi, edx
cmovae esi, eax
mov dword [ebp - 0xaa0], 0xf
and dword [ebp - 0xa84], 0
and dword [ebp - 0xa74], 0
and dword [ebp - 0xa6c], 0
and dword [ebp - 0xa5c], 0
and dword [ebp - 0xa54], 0
and dword [ebp - 0xa44], 0
and dword [ebp - 0xa3c], 0
and dword [ebp - 0xa2c], 0
cmp ecx, 0x10
mov dword [ebp - 0xa88], 0xf
cmovae edx, eax
mov dword [ebp - 0xa70], 0xf
movzx eax, byte [0x520c11]
push eax
lea eax, [ebp - 0xa3c]
mov dword [ebp - 0xa58], 0xf
push eax
mov dword [ebp - 0xa40], 0xf
mov dword [ebp - 0xa28], 0xf
movsx eax, byte [edx + 6]
push eax
call fcn.004970f0
pop ecx
mov dl, al
lea ecx, [ebp - 0x1b94]
call fcn.0042a111
pop ecx
mov edx, eax
lea ecx, [ebp - 0x1b7c]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0xa54]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xb5c]
call fcn.0042a3b3
movzx eax, byte [0x520951]
lea edx, [ebp - 0xa6c]
push eax
lea ecx, [ebp - 0x1234]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xb5c]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xb44]
call fcn.0042a3b3
movzx eax, byte [0x520753]
lea edx, [ebp - 0xa84]
push eax
lea ecx, [ebp - 0x124c]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xb44]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xb2c]
call fcn.0042a3b3
movzx eax, byte [esi + 1]
lea edx, [ebp - 0xb2c]
push eax
lea ecx, [ebp - 0x1b64]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0xa9c]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xb14]
call fcn.0042a3b3
movsx eax, byte [0x520758]
push eax
call fcn.004970f0
pop ecx
push eax
lea edx, [ebp - 0xab4]
lea ecx, [ebp - 0x1264]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0xb14]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xafc]
call fcn.0042a3b3
movzx eax, byte [edi + 1]
lea edx, [ebp - 0xafc]
push eax
lea ecx, [ebp - 0x1b4c]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x244]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xae4]
call fcn.0042a3b3
mov dl, byte [ebx + 1]
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x127c]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0xae4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xacc]
call fcn.0042a3b3
movzx eax, byte [0x520c18]
lea edx, [ebp - 0xacc]
push eax
lea ecx, [ebp - 0x1b34]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x274]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x1204]
call fcn.0042a3b3
movzx eax, byte [0x520954]
lea edx, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x1294]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x1204]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0xa24]
call fcn.0042a3b3
push 0x10
pop ecx
cmp dword [ebp - 0xa10], ecx
lea eax, [ebp - 0xa24]
cmovae eax, dword [ebp - 0xa24]
push eax
push dword [0x526c3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, eax
mov esi, 0xfe000000
mov ebx, 0x3fffff
jmp 0x47dca5
pop ecx
xor eax, eax
mov dword [ebp - 0x9f8], ecx
push 0x10
pop edx
cmp dword [0x5255cc], edx
mov edi, 0x5255b8
mov esi, ebx
mov dword [ebp - 0xa0c], eax
cmovae edi, dword [0x5255b8]
cmp dword [0x5255e4], edx
lea edx, [ebp - 0x964]
mov dword [ebp - 0x9fc], eax
cmovae esi, dword [0x5255d0]
xor ebx, ebx
mov dword [ebp - 0x9f4], eax
mov dword [ebp - 0x9e4], eax
movzx eax, byte [0x521094]
mov dword [ebp - 0x9e0], ecx
mov dword [ebp - 0x9c8], ecx
mov dword [ebp - 0x9b0], ecx
mov dword [ebp - 0x998], ecx
mov dword [ebp - 0x980], ecx
mov dword [ebp - 0x968], ecx
mov dword [ebp - 0x950], ecx
lea ecx, [ebp - 0x1aec]
push eax
mov dword [ebp - 0x9dc], ebx
mov dword [ebp - 0x9cc], ebx
mov dword [ebp - 0x9c4], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9ac], ebx
mov dword [ebp - 0x99c], ebx
mov dword [ebp - 0x994], ebx
mov dword [ebp - 0x984], ebx
mov dword [ebp - 0x97c], ebx
mov dword [ebp - 0x96c], ebx
mov dword [ebp - 0x964], ebx
mov dword [ebp - 0x954], ebx
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x97c]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x11ec]
call fcn.0042a3b3
movzx eax, byte [0x521013]
lea edx, [ebp - 0x11ec]
push eax
movzx eax, byte [0x520d95]
lea ecx, [ebp - 0x1ad4]
push eax
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x1abc]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x994]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x11d4]
call fcn.0042a3b3
mov dl, byte [0x520a54]
lea eax, [ebp - 0x9ac]
push eax
lea ecx, [ebp - 0x1b04]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0x11d4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x11bc]
call fcn.0042a3b3
movzx eax, byte [0x520d93]
lea edx, [ebp - 0x9c4]
push eax
lea ecx, [ebp - 0x1b1c]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x11bc]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x11a4]
call fcn.0042a3b3
lea eax, [ebp - 0x9dc]
push eax
lea eax, [ebp - 0x11a4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x118c]
call fcn.0042a3b3
movzx eax, byte [esi + 1]
lea edx, [ebp - 0x118c]
push eax
lea ecx, [ebp - 0x1aa4]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x9f4]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x1174]
call fcn.0042a3b3
movzx eax, byte [edi + 1]
lea edx, [ebp - 0x1174]
push eax
movzx eax, byte [0x520f10]
lea ecx, [ebp - 0x1a8c]
push eax
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x1a74]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0xa0c]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x94c]
call fcn.0042a3b3
push 0x10
pop ecx
cmp dword [ebp - 0x938], ecx
lea eax, [ebp - 0x94c]
cmovae eax, dword [ebp - 0x94c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x526c3c], eax
test eax, eax
je 0x47dc8d
mov ecx, dword [0x5255e4]
mov edx, 0x5255d0
push 0xf
pop edi
push 0x10
pop eax
cmp ecx, eax
mov dword [ebp - 0x934], ebx
mov eax, dword [0x5255d0]
mov dword [ebp - 0x924], ebx
mov dword [ebp - 0x91c], ebx
mov dword [ebp - 0x90c], ebx
mov dword [ebp - 0x904], ebx
mov dword [ebp - 0x8f4], ebx
mov ebx, edx
cmovae ebx, eax
mov dword [ebp - 0x920], edi
xor esi, esi
mov dword [ebp - 0x908], edi
mov dword [ebp - 0x8f0], edi
cmp ecx, 0x10
mov dword [ebp - 0x8ec], esi
mov dword [ebp - 0x8dc], esi
mov dword [ebp - 0x8d8], edi
mov edi, edx
cmovae edi, eax
mov dword [ebp - 0x8d4], esi
mov dword [ebp - 0x8c4], esi
mov dword [ebp - 0x8bc], esi
mov dword [ebp - 0x8ac], esi
mov esi, edx
cmovae esi, eax
mov dword [ebp - 0x8c0], 0xf
and dword [ebp - 0x8a4], 0
and dword [ebp - 0x894], 0
and dword [ebp - 0x88c], 0
and dword [ebp - 0x87c], 0
and dword [ebp - 0x874], 0
and dword [ebp - 0x864], 0
and dword [ebp - 0x85c], 0
and dword [ebp - 0x84c], 0
cmp ecx, 0x10
mov dword [ebp - 0x8a8], 0xf
cmovae edx, eax
mov dword [ebp - 0x890], 0xf
movzx eax, byte [0x520c11]
push eax
lea eax, [ebp - 0x85c]
mov dword [ebp - 0x878], 0xf
push eax
mov dword [ebp - 0x860], 0xf
mov dword [ebp - 0x848], 0xf
movsx eax, byte [edx + 6]
push eax
call fcn.004970f0
pop ecx
mov dl, al
lea ecx, [ebp - 0x19e4]
call fcn.0042a111
pop ecx
mov edx, eax
lea ecx, [ebp - 0x19cc]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x874]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x115c]
call fcn.0042a3b3
movzx eax, byte [0x520951]
lea edx, [ebp - 0x88c]
push eax
lea ecx, [ebp - 0x19fc]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x115c]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x1144]
call fcn.0042a3b3
movzx eax, byte [0x520753]
lea edx, [ebp - 0x8a4]
push eax
lea ecx, [ebp - 0x1a14]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x1144]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x112c]
call fcn.0042a3b3
movzx eax, byte [esi + 1]
lea edx, [ebp - 0x112c]
push eax
lea ecx, [ebp - 0x19b4]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x8bc]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x1114]
call fcn.0042a3b3
movsx eax, byte [0x520758]
push eax
call fcn.004970f0
pop ecx
push eax
lea edx, [ebp - 0x8d4]
lea ecx, [ebp - 0x1a2c]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x1114]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x10fc]
call fcn.0042a3b3
movzx eax, byte [edi + 1]
lea edx, [ebp - 0x10fc]
push eax
lea ecx, [ebp - 0x199c]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x8ec]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x10e4]
call fcn.0042a3b3
mov dl, byte [ebx + 1]
lea eax, [ebp - 0x904]
push eax
lea ecx, [ebp - 0x1a44]
call fcn.0042a111
pop ecx
push eax
lea eax, [ebp - 0x10e4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x10cc]
call fcn.0042a3b3
movzx eax, byte [0x520c18]
lea edx, [ebp - 0x10cc]
push eax
lea ecx, [ebp - 0x1984]
call fcn.0042a13c
pop ecx
lea ecx, [ebp - 0x91c]
push ecx
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x10b4]
call fcn.0042a3b3
movzx eax, byte [0x520954]
lea edx, [ebp - 0x934]
push eax
lea ecx, [ebp - 0x1a5c]
call fcn.0042a13c
pop ecx
push eax
lea eax, [ebp - 0x10b4]
push eax
push dword [ebp - 0x1b9c]
lea ecx, [ebp - 0x844]
call fcn.0042a3b3
push 0x10
pop ecx
cmp dword [ebp - 0x830], ecx
lea eax, [ebp - 0x844]
cmovae eax, dword [ebp - 0x844]
push eax
push dword [0x526c3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, eax
or eax, 0xffffffff
mov dword [ebp - 0x1ba0], eax
mov eax, 0x3ff
mov dword [ebp - 0x1bc4], eax
jmp 0x47dc9a
mov eax, 0x1fff
mov ecx, ebx
mov dword [ebp - 0x1ba0], eax
mov esi, dword [ebp - 0x1ba4]
mov ebx, 0xffc00000
push 0x28
push 0x40
call ecx
mov edi, eax
mov eax, dword [ebp - 0x1bc4]
test eax, 0x200
je 0x47dcd6
and eax, 0xfffffdff
lea ecx, [ebp - 0x844]
mov dword [ebp - 0x1bc4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bc4]
test eax, 0x100
je 0x47dcf9
and eax, 0xfffffeff
lea ecx, [ebp - 0x10b4]
mov dword [ebp - 0x1bc4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bc4]
test al, al
jns 0x47dd19
and eax, 0xffffff7f
lea ecx, [ebp - 0x1984]
mov dword [ebp - 0x1bc4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bc4]
test al, 0x40
je 0x47dd37
and eax, 0xffffffbf
lea ecx, [ebp - 0x10cc]
mov dword [ebp - 0x1bc4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bc4]
test al, 0x20
je 0x47dd55
and eax, 0xffffffdf
lea ecx, [ebp - 0x10e4]
mov dword [ebp - 0x1bc4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bc4]
push 0x10
pop ecx
test cl, al
je 0x47dd76
and eax, 0xffffffef
lea ecx, [ebp - 0x199c]
mov dword [ebp - 0x1bc4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bc4]
push 8
pop ecx
test cl, al
je 0x47dd97
and eax, 0xfffffff7
lea ecx, [ebp - 0x10fc]
mov dword [ebp - 0x1bc4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bc4]
push 4
pop ecx
test cl, al
je 0x47ddb8
and eax, 0xfffffffb
lea ecx, [ebp - 0x1114]
mov dword [ebp - 0x1bc4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bc4]
test al, 2
je 0x47ddd6
and eax, 0xfffffffd
lea ecx, [ebp - 0x19b4]
mov dword [ebp - 0x1bc4], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1bc4]
test al, 1
je 0x47dde5
lea ecx, [ebp - 0x112c]
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, eax
jns 0x47de0b
and eax, 0x7fffffff
lea ecx, [ebp - 0x1144]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x40000000
je 0x47de2e
and eax, 0xbfffffff
lea ecx, [ebp - 0x115c]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x20000000
je 0x47de51
and eax, 0xdfffffff
lea ecx, [ebp - 0x19cc]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x10000000
je 0x47de74
and eax, 0xefffffff
lea ecx, [ebp - 0x19e4]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x8000000
je 0x47de97
and eax, 0xf7ffffff
lea ecx, [ebp - 0x85c]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x4000000
je 0x47deba
and eax, 0xfbffffff
lea ecx, [ebp - 0x874]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x2000000
je 0x47dedd
and eax, 0xfdffffff
lea ecx, [ebp - 0x19fc]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x1000000
je 0x47df00
and eax, 0xfeffffff
lea ecx, [ebp - 0x88c]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x800000
je 0x47df23
and eax, 0xff7fffff
lea ecx, [ebp - 0x1a14]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x400000
je 0x47df46
and eax, 0xffbfffff
lea ecx, [ebp - 0x8a4]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x200000
je 0x47df69
and eax, 0xffdfffff
lea ecx, [ebp - 0x8bc]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x100000
je 0x47df8c
and eax, 0xffefffff
lea ecx, [ebp - 0x1a2c]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x80000
je 0x47dfaf
and eax, 0xfff7ffff
lea ecx, [ebp - 0x8d4]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x40000
je 0x47dfd2
and eax, 0xfffbffff
lea ecx, [ebp - 0x8ec]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x20000
je 0x47dff5
and eax, 0xfffdffff
lea ecx, [ebp - 0x1a44]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x10000
je 0x47e018
and eax, 0xfffeffff
lea ecx, [ebp - 0x904]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x8000
je 0x47e03b
and eax, 0xffff7fff
lea ecx, [ebp - 0x91c]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x4000
je 0x47e05e
and eax, 0xffffbfff
lea ecx, [ebp - 0x1a5c]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x2000
je 0x47e081
and eax, 0xffffdfff
lea ecx, [ebp - 0x934]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x1000
je 0x47e0a4
and eax, 0xffffefff
lea ecx, [ebp - 0x94c]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x800
je 0x47e0c7
and eax, 0xfffff7ff
lea ecx, [ebp - 0x1a74]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x400
je 0x47e0ea
and eax, 0xfffffbff
lea ecx, [ebp - 0x1a8c]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x200
je 0x47e10d
and eax, 0xfffffdff
lea ecx, [ebp - 0x1174]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test eax, 0x100
je 0x47e130
and eax, 0xfffffeff
lea ecx, [ebp - 0x1aa4]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test al, al
jns 0x47e150
and eax, 0xffffff7f
lea ecx, [ebp - 0x118c]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test al, 0x40
je 0x47e16e
and eax, 0xffffffbf
lea ecx, [ebp - 0x11a4]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test al, 0x20
je 0x47e18c
and eax, 0xffffffdf
lea ecx, [ebp - 0x11bc]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
push 0x10
pop ecx
test cl, al
je 0x47e1ad
and eax, 0xffffffef
lea ecx, [ebp - 0x11d4]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
push 8
pop ecx
test cl, al
je 0x47e1ce
and eax, 0xfffffff7
lea ecx, [ebp - 0x1abc]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
push 4
pop ecx
test cl, al
je 0x47e1ec
lea ecx, [ebp - 0x1ad4]
mov dword [ebp - 0x1ba0], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test al, 2
je 0x47e201
lea ecx, [ebp - 0x11ec]
call fcn.00429fa9
mov eax, dword [ebp - 0x1ba0]
test al, 1
je 0x47e210
lea ecx, [ebp - 0x1aec]
call fcn.00429fa9
test ebx, ebx
jns 0x47e225
lea ecx, [ebp - 0x964]
and ebx, 0x7fffffff
call fcn.00429fa9
test ebx, 0x40000000
je 0x47e23e
lea ecx, [ebp - 0x97c]
and ebx, 0xbfffffff
call fcn.00429fa9
test ebx, 0x20000000
je 0x47e257
lea ecx, [ebp - 0x994]
and ebx, 0xdfffffff
call fcn.00429fa9
test ebx, 0x10000000
je 0x47e270
lea ecx, [ebp - 0x1b04]
and ebx, 0xefffffff
call fcn.00429fa9
test ebx, 0x8000000
je 0x47e289
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00486c63
leave
ret