Function at 0x47a5f8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1f08
call fcn.0054cd40
lea eax, [ebp - 0x658]
push eax
call fcn.0055ebb0
mov dword [ebp - 0x1d70], 0
mov dword [ebp - 0x67c], 0xffffffff
mov ecx, dword [ebp + 0x10]
push ecx
push 0
mov edx, dword [ebp + 0xc]
push edx
call fcn.0054bfb0
add esp, 0xc
push 0x10b8
push 0
lea eax, [ebp - 0x1d48]
push eax
call fcn.0054bfb0
add esp, 0xc
push 0x200
push 0
lea ecx, [ebp - 0x880]
push ecx
call fcn.0054bfb0
add esp, 0xc
push 0
push 0x200
lea edx, [ebp - 0x880]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004862a1
add esp, 0x10
lea ecx, [ebp - 0x1d48]
push ecx
lea edx, [ebp - 0x880]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004db12c
add esp, 0xc
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x2f780], 0
je 0x47a6b4
mov edx, dword [ebp + 8]
cmp dword [edx + 0x25b4], 0
jne 0x47a6b4
jmp 0x47a73d
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x7b6]
mov byte [eax + 0x1a0], dl
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x7b7]
mov byte [eax + 0x1a1], dl
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x7b8]
mov byte [eax + 0x1a2], dl
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x7b9]
mov byte [eax + 0x1a3], dl
lea ecx, [ebp - 0x658]
call fcn.00406c70
sub eax, 0x7c7
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x1a4], al
lea ecx, [ebp - 0x658]
call fcn.00406c90
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x1a5], al
lea ecx, [ebp - 0x658]
call fcn.00406cb0
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x1a6], al
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004f8f44
add esp, 8
mov byte [ebp - 0x670], 0x12
mov byte [ebp - 0x66f], 1
mov byte [ebp - 0x66e], 0
mov byte [ebp - 0x66d], 2
mov byte [ebp - 0x66c], 0
mov byte [ebp - 0x66b], 0
mov byte [ebp - 0x66a], 0
mov byte [ebp - 0x669], 0x40
mov byte [ebp - 0x668], 0xc
mov byte [ebp - 0x667], 9
mov byte [ebp - 0x666], 0
mov byte [ebp - 0x665], 0x10
mov byte [ebp - 0x664], 0
mov byte [ebp - 0x663], 0x11
mov byte [ebp - 0x662], 1
mov byte [ebp - 0x661], 2
mov byte [ebp - 0x660], 3
mov byte [ebp - 0x65f], 1
mov byte [ebp - 0x1d84], 0x12
mov byte [ebp - 0x1d83], 1
mov byte [ebp - 0x1d82], 0
mov byte [ebp - 0x1d81], 2
mov byte [ebp - 0x1d80], 0
mov byte [ebp - 0x1d7f], 0
mov byte [ebp - 0x1d7e], 0
mov byte [ebp - 0x1d7d], 0x40
mov byte [ebp - 0x1d7c], 0xc
mov byte [ebp - 0x1d7b], 9
mov byte [ebp - 0x1d7a], 0
mov byte [ebp - 0x1d79], 0x10
mov byte [ebp - 0x1d78], 0
mov byte [ebp - 0x1d77], 0x11
mov byte [ebp - 0x1d76], 1
mov byte [ebp - 0x1d75], 2
mov byte [ebp - 0x1d74], 0
mov byte [ebp - 0x1d73], 1
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x40c4]
test edx, edx
jne 0x47a86e
push 0x12
lea eax, [ebp - 0x1d84]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.0054c980
add esp, 0xc
jmp 0x47a883
push 0x12
lea edx, [ebp - 0x670]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.0054c980
add esp, 0xc
mov ecx, dword [ebp + 8]
add ecx, 0x291e4
push ecx
call fcn.005353c2
add esp, 4
and eax, 0xff
mov edx, dword [ebp + 0xc]
mov byte [edx + 8], al
mov eax, dword [ebp + 8]
add eax, 0x291e4
push eax
call fcn.005353c2
add esp, 4
sar eax, 8
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 9], al
mov edx, dword [ebp + 8]
add edx, 0x291ea
push edx
call fcn.005353c2
add esp, 4
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0xa], al
mov edx, dword [ebp + 8]
add edx, 0x291ea
push edx
call fcn.005353c2
add esp, 4
sar eax, 8
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0xb], al
mov edx, dword [ebp + 8]
add edx, 0x291f0
push edx
call fcn.005353c2
add esp, 4
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0xc], al
mov edx, dword [ebp + 8]
add edx, 0x291f0
push edx
call fcn.005353c2
add esp, 4
sar eax, 8
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0xd], al
mov edx, dword [ebp + 8]
cmp dword [edx + 0x29050], 1
jne 0x47acc8
push 0x600
push 0
lea eax, [ebp - 0x654]
push eax
call fcn.0054bfb0
add esp, 0xc
push 0x600
lea ecx, [ebp - 0x654]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00506151
add esp, 0xc
mov dword [ebp - 0x1d88], eax
mov eax, dword [ebp - 0x4e2]
and eax, 0xff
and eax, 1
test eax, eax
je 0x47ac09
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x2ef74], 0
je 0x47ac07
push 0x600
push 0
lea edx, [ebp - 0x654]
push edx
call fcn.0054bfb0
add esp, 0xc
push 0x600
lea eax, [ebp - 0x654]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00506151
add esp, 0xc
mov dword [ebp - 0x1d88], eax
mov edx, dword [ebp - 0x502]
and edx, 0xff
shl edx, 8
mov eax, dword [ebp - 0x501]
and eax, 0xff
and eax, 0xff
add edx, eax
mov dword [ebp - 0x1d8c], edx
mov ecx, dword [ebp - 0x4e8]
and ecx, 0xff
shl ecx, 8
mov edx, dword [ebp - 0x4e7]
and edx, 0xff
and edx, 0xff
add ecx, edx
mov dword [ebp - 0x884], ecx
mov eax, dword [ebp - 0x4e2]
and eax, 0xff
and eax, 0x10
test eax, eax
je 0x47aa3e
mov ecx, dword [ebp - 0x4d7]
and ecx, 0xff
mov dword [ebp - 0x1ef8], ecx
jmp 0x47aa5b
mov edx, dword [ebp - 0x4ea]
and edx, 0xff
push edx
push 2
call fcn.00535402
add esp, 8
mov dword [ebp - 0x1ef8], eax
mov eax, dword [ebp - 0x1ef8]
mov dword [ebp - 0x680], eax
mov ecx, dword [ebp - 0x1d8c]
imul ecx, dword [ebp - 0x884]
imul ecx, dword [ebp - 0x680]
shl ecx, 1
mov dword [ebp - 0x65c], ecx
mov edx, dword [ebp + 8]
cmp dword [edx + 0x4764], 0x16
jl 0x47aacc
mov eax, dword [ebp + 8]
cmp dword [eax + 0x4764], 0x1b
jg 0x47aacc
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x25a4], 0x10
jne 0x47aaa9
jmp 0x47aaca
mov edx, dword [ebp - 0x4e2]
and edx, 0xff
and edx, 1
test edx, edx
je 0x47aaca
mov eax, dword [ebp - 0x65c]
shl eax, 1
mov dword [ebp - 0x65c], eax
jmp 0x47aaed
mov ecx, dword [ebp - 0x4e2]
and ecx, 0xff
and ecx, 1
test ecx, ecx
je 0x47aaed
mov edx, dword [ebp - 0x65c]
shl edx, 1
mov dword [ebp - 0x65c], edx
mov eax, dword [ebp - 0x4e2]
and eax, 0xff
and eax, 4
test eax, eax
je 0x47ab0d
mov ecx, dword [ebp - 0x65c]
shl ecx, 1
mov dword [ebp - 0x65c], ecx
mov dword [ebp - 0x890], 0x1f
jmp 0x47ab28
mov edx, dword [ebp - 0x890]
sub edx, 1
mov dword [ebp - 0x890], edx
cmp dword [ebp - 0x890], 0
jl 0x47abf4
mov eax, 1
mov ecx, dword [ebp - 0x890]
shl eax, cl
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2f27c]
and edx, eax
test edx, edx
je 0x47abef
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x1d90], eax
jmp 0x47ab72
mov ecx, dword [ebp - 0x1d90]
sub ecx, 1
mov dword [ebp - 0x1d90], ecx
cmp dword [ebp - 0x1d90], 0
jl 0x47abed
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2f17c]
shl eax, 0xb
cmp dword [ebp - 0x65c], eax
jl 0x47ab9b
mov dword [ebp - 0x67c], 0
jmp 0x47abed
mov ecx, dword [ebp - 0x1d90]
mov edx, dword [ebp + 8]
mov eax, dword [edx + ecx*4 + 0x2f17c]
shl eax, 0xb
cmp dword [ebp - 0x65c], eax
jl 0x47abe8
mov ecx, dword [ebp - 0x1d90]
mov edx, dword [ebp + 8]
mov eax, dword [edx + ecx*4 + 0x2f178]
shl eax, 0xb
cmp dword [ebp - 0x65c], eax
jge 0x47abe8
cmp dword [ebp - 0x1d90], 0
jle 0x47abe8
mov ecx, dword [ebp - 0x1d90]
mov dword [ebp - 0x67c], ecx
jmp 0x47abed
jmp 0x47ab63
jmp 0x47abf4
jmp 0x47ab19
cmp dword [ebp - 0x67c], 1
jne 0x47ac07
mov dword [ebp - 0x1d70], 1
jmp 0x47ac13
mov dword [ebp - 0x1d70], 0
cmp dword [ebp - 0x1d70], 0
je 0x47acc8
mov edx, dword [ebp + 8]
add edx, 0x29308
push edx
call fcn.005353c2
add esp, 4
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 8], al
mov edx, dword [ebp + 8]
add edx, 0x29308
push edx
call fcn.005353c2
add esp, 4
sar eax, 8
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 9], al
mov edx, dword [ebp + 8]
add edx, 0x2930e
push edx
call fcn.005353c2
add esp, 4
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0xa], al
mov edx, dword [ebp + 8]
add edx, 0x2930e
push edx
call fcn.005353c2
add esp, 4
sar eax, 8
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0xb], al
mov edx, dword [ebp + 8]
add edx, 0x29314
push edx
call fcn.005353c2
add esp, 4
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0xc], al
mov edx, dword [ebp + 8]
add edx, 0x29314
push edx
call fcn.005353c2
add esp, 4
sar eax, 8
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0xd], al
mov byte [ebp - 0x24], 9
mov byte [ebp - 0x23], 2
mov byte [ebp - 0x22], 0x20
mov byte [ebp - 0x21], 0
mov byte [ebp - 0x20], 1
mov byte [ebp - 0x1f], 1
mov byte [ebp - 0x1e], 0
mov byte [ebp - 0x1d], 0x80
mov byte [ebp - 0x1c], 0x32
mov byte [ebp - 0x1b], 9
mov byte [ebp - 0x1a], 4
mov byte [ebp - 0x19], 0
mov byte [ebp - 0x18], 0
mov byte [ebp - 0x17], 2
mov byte [ebp - 0x16], 8
mov byte [ebp - 0x15], 6
mov byte [ebp - 0x14], 0x50
mov byte [ebp - 0x13], 0
mov byte [ebp - 0x12], 7
mov byte [ebp - 0x11], 5
mov byte [ebp - 0x10], 0x81
mov byte [ebp - 0xf], 2
mov byte [ebp - 0xe], 0
mov byte [ebp - 0xd], 2
mov byte [ebp - 0xc], 0xff
mov byte [ebp - 0xb], 7
mov byte [ebp - 0xa], 5
mov byte [ebp - 9], 2
mov byte [ebp - 8], 2
mov byte [ebp - 7], 0
mov byte [ebp - 6], 2
mov byte [ebp - 5], 0xff
push 0x20
lea edx, [ebp - 0x24]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x12
push eax
call fcn.0054c980
add esp, 0xc
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x2b38], 0
je 0x47ad72
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x21], 1
jmp 0x47ad79
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x21], 6
mov byte [ebp - 4], 4
mov byte [ebp - 3], 3
mov byte [ebp - 2], 9
mov byte [ebp - 1], 4
push 4
lea ecx, [ebp - 4]
push ecx
mov edx, dword [ebp + 0xc]
add edx, 0x32
push edx
call fcn.0054c980
add esp, 0xc
mov eax, dword [ebp + 8]
add eax, 0x291f6
push eax
call fcn.0054c3e0
add esp, 4
mov dword [ebp - 0x888], eax
mov ecx, dword [ebp - 0x888]
lea edx, [ecx + ecx + 2]
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x36], dl
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x37], 3
mov dword [ebp - 0x88c], 0
jmp 0x47ade7
mov edx, dword [ebp - 0x88c]
add edx, 1
mov dword [ebp - 0x88c], edx
mov eax, dword [ebp - 0x88c]
cmp eax, dword [ebp - 0x888]
jge 0x47ae29
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x88c]
movsx edx, byte [ecx + 0x291f6]
test edx, edx
jne 0x47ae0b
jmp 0x47ae29
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x88c]
mov ecx, dword [ebp - 0x88c]
mov edx, dword [ebp + 0xc]
mov al, byte [eax + 0x291f6]
mov byte [edx + ecx*2 + 0x38], al
jmp 0x47add8
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x29050], 1
jne 0x47aed2
cmp dword [ebp - 0x1d70], 0
je 0x47aed2
mov edx, dword [ebp + 8]
add edx, 0x2931a
push edx
call fcn.0054c3e0
add esp, 4
mov dword [ebp - 0x888], eax
mov eax, dword [ebp - 0x888]
lea ecx, [eax + eax + 2]
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x36], cl
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x37], 3
mov dword [ebp - 0x88c], 0
jmp 0x47ae90
mov ecx, dword [ebp - 0x88c]
add ecx, 1
mov dword [ebp - 0x88c], ecx
mov edx, dword [ebp - 0x88c]
cmp edx, dword [ebp - 0x888]
jge 0x47aed2
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x88c]
movsx ecx, byte [eax + 0x2931a]
test ecx, ecx
jne 0x47aeb4
jmp 0x47aed2
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x88c]
mov eax, dword [ebp - 0x88c]
mov ecx, dword [ebp + 0xc]
mov dl, byte [edx + 0x2931a]
mov byte [ecx + eax*2 + 0x38], dl
jmp 0x47ae81
mov eax, dword [ebp + 8]
add eax, 0x2921a
push eax
call fcn.0054c3e0
add esp, 4
mov dword [ebp - 0x888], eax
mov ecx, dword [ebp - 0x888]
lea edx, [ecx + ecx + 2]
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x74], dl
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x75], 3
mov dword [ebp - 0x88c], 0
jmp 0x47af1b
mov edx, dword [ebp - 0x88c]
add edx, 1
mov dword [ebp - 0x88c], edx
mov eax, dword [ebp - 0x88c]
cmp eax, dword [ebp - 0x888]
jge 0x47af5d
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x88c]
movsx edx, byte [ecx + 0x2921a]
test edx, edx
jne 0x47af3f
jmp 0x47af5d
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x88c]
mov ecx, dword [ebp - 0x88c]
mov edx, dword [ebp + 0xc]
mov al, byte [eax + 0x2921a]
mov byte [edx + ecx*2 + 0x76], al
jmp 0x47af0c
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x29050], 1
jne 0x47b006
cmp dword [ebp - 0x1d70], 0
je 0x47b006
mov edx, dword [ebp + 8]
add edx, 0x2933e
push edx
call fcn.0054c3e0
add esp, 4
mov dword [ebp - 0x888], eax
mov eax, dword [ebp - 0x888]
lea ecx, [eax + eax + 2]
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x74], cl
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x75], 3
mov dword [ebp - 0x88c], 0
jmp 0x47afc4
mov ecx, dword [ebp - 0x88c]
add ecx, 1
mov dword [ebp - 0x88c], ecx
mov edx, dword [ebp - 0x88c]
cmp edx, dword [ebp - 0x888]
jge 0x47b006
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x88c]
movsx ecx, byte [eax + 0x2933e]
test ecx, ecx
jne 0x47afe8
jmp 0x47b006
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x88c]
mov eax, dword [ebp - 0x88c]
mov ecx, dword [ebp + 0xc]
mov dl, byte [edx + 0x2933e]
mov byte [ecx + eax*2 + 0x76], dl
jmp 0x47afb5
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x40c4]
test ecx, ecx
je 0x47b0af
mov edx, dword [ebp + 8]
add edx, 0x40c4
push edx
call fcn.0054c3e0
add esp, 4
mov dword [ebp - 0x888], eax
mov eax, dword [ebp - 0x888]
lea ecx, [eax + eax + 2]
mov edx, dword [ebp + 0xc]
mov byte [edx + 0xb2], cl
mov eax, dword [ebp + 0xc]
mov byte [eax + 0xb3], 3
mov dword [ebp - 0x88c], 0
jmp 0x47b068
mov ecx, dword [ebp - 0x88c]
add ecx, 1
mov dword [ebp - 0x88c], ecx
mov edx, dword [ebp - 0x88c]
cmp edx, dword [ebp - 0x888]
jge 0x47b0af
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x88c]
movsx ecx, byte [eax + 0x40c4]
test ecx, ecx
je 0x47b0ab
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x88c]
mov eax, dword [ebp - 0x88c]
mov ecx, dword [ebp + 0xc]
mov dl, byte [edx + 0x40c4]
mov byte [ecx + eax*2 + 0xb4], dl
jmp 0x47b0ad
jmp 0x47b0af
jmp 0x47b059
mov byte [ebp - 0x30], 0xa
mov byte [ebp - 0x2f], 6
mov byte [ebp - 0x2e], 0
mov byte [ebp - 0x2d], 2
mov byte [ebp - 0x2c], 0
mov byte [ebp - 0x2b], 0
mov byte [ebp - 0x2a], 0
mov byte [ebp - 0x29], 0x40
mov byte [ebp - 0x28], 1
mov byte [ebp - 0x27], 0
push 0xa
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x100
push ecx
call fcn.0054c980
add esp, 0xc
mov byte [ebp - 0x1d6c], 9
mov byte [ebp - 0x1d6b], 7
mov byte [ebp - 0x1d6a], 0x20
mov byte [ebp - 0x1d69], 0
mov byte [ebp - 0x1d68], 1
mov byte [ebp - 0x1d67], 1
mov byte [ebp - 0x1d66], 0
mov byte [ebp - 0x1d65], 0x80
mov byte [ebp - 0x1d64], 0x32
mov byte [ebp - 0x1d63], 9
mov byte [ebp - 0x1d62], 4
mov byte [ebp - 0x1d61], 0
mov byte [ebp - 0x1d60], 0
mov byte [ebp - 0x1d5f], 2
mov byte [ebp - 0x1d5e], 8
mov byte [ebp - 0x1d5d], 6
mov byte [ebp - 0x1d5c], 0x50
mov byte [ebp - 0x1d5b], 0
mov byte [ebp - 0x1d5a], 7
mov byte [ebp - 0x1d59], 5
mov byte [ebp - 0x1d58], 0x81
mov byte [ebp - 0x1d57], 2
mov byte [ebp - 0x1d56], 0x40
mov byte [ebp - 0x1d55], 0
mov byte [ebp - 0x1d54], 0xff
mov byte [ebp - 0x1d53], 7
mov byte [ebp - 0x1d52], 5
mov byte [ebp - 0x1d51], 2
mov byte [ebp - 0x1d50], 2
mov byte [ebp - 0x1d4f], 0x40
mov byte [ebp - 0x1d4e], 0
mov byte [ebp - 0x1d4d], 0xff
push 0x20
lea edx, [ebp - 0x1d6c]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x10a
push eax
call fcn.0054c980
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2942c]
mov dword [ebp - 0x1efc], edx
cmp dword [ebp - 0x1efc], 4
ja case.default.0x47b207
mov eax, dword [ebp - 0x1efc]
jmp dword [eax*4 + 0x47bf7b]
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x1a], 0x32
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x112], 0x32
jmp 0x47b27e
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x1a], 0x64
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x112], 0x64
jmp 0x47b27e
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x1a], 0x96
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x112], 0x96
jmp 0x47b27e
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x1a], 0xc8
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x112], 0xc8
jmp 0x47b27e
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x1a], 0xfa
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x112], 0xfa
jmp 0x47b27e
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x1a], 0x32
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x112], 0x32
mov byte [ebp - 0x54], 0
mov byte [ebp - 0x53], 0x80
mov byte [ebp - 0x52], 0
mov byte [ebp - 0x51], 1
mov byte [ebp - 0x50], 0x1f
mov byte [ebp - 0x4f], 0x73
mov byte [ebp - 0x4e], 0x6d
mov byte [ebp - 0x4d], 0x69
mov byte [ebp - 0x4c], 0x20
mov byte [ebp - 0x4b], 0x20
mov byte [ebp - 0x4a], 0x20
mov byte [ebp - 0x49], 0x20
mov byte [ebp - 0x48], 0x20
mov byte [ebp - 0x47], 0x20
mov byte [ebp - 0x46], 0x20
mov byte [ebp - 0x45], 0x20
mov byte [ebp - 0x44], 0x20
mov byte [ebp - 0x43], 0x20
mov byte [ebp - 0x42], 0x20
mov byte [ebp - 0x41], 0x20
mov byte [ebp - 0x40], 0x20
mov byte [ebp - 0x3f], 0x20
mov byte [ebp - 0x3e], 0x20
mov byte [ebp - 0x3d], 0x20
mov byte [ebp - 0x3c], 0x20
mov byte [ebp - 0x3b], 0x20
mov byte [ebp - 0x3a], 0x20
mov byte [ebp - 0x39], 0x20
mov byte [ebp - 0x38], 0x20
mov byte [ebp - 0x37], 0x20
mov byte [ebp - 0x36], 0x20
mov byte [ebp - 0x35], 0x20
mov byte [ebp - 0x34], 0x20
mov byte [ebp - 0x33], 0x20
mov byte [ebp - 0x32], 0x20
mov byte [ebp - 0x31], 0x20
push 0x24
lea ecx, [ebp - 0x54]
push ecx
mov edx, dword [ebp + 0xc]
add edx, 0x12a
push edx
call fcn.0054c980
add esp, 0xc
mov dword [ebp - 0x88c], 0
jmp 0x47b341
mov eax, dword [ebp - 0x88c]
add eax, 1
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 8
jge 0x47b380
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x88c]
movsx edx, byte [ecx + 0x292cc]
test edx, edx
jne 0x47b360
jmp 0x47b380
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0x88c]
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x88c]
mov dl, byte [ecx + 0x292cc]
mov byte [eax + 0x132], dl
jmp 0x47b332
mov dword [ebp - 0x88c], 0
jmp 0x47b39b
mov eax, dword [ebp - 0x88c]
add eax, 1
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 0x10
jge 0x47b3da
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x88c]
movsx edx, byte [ecx + 0x292dc]
test edx, edx
jne 0x47b3ba
jmp 0x47b3da
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 0x88c]
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x88c]
mov dl, byte [ecx + 0x292dc]
mov byte [eax + 0x13a], dl
jmp 0x47b38c
mov eax, dword [ebp + 8]
cmp dword [eax + 0x29050], 1
jne 0x47b4ab
cmp dword [ebp - 0x1d70], 0
je 0x47b4ab
mov dword [ebp - 0x88c], 0
jmp 0x47b412
mov ecx, dword [ebp - 0x88c]
add ecx, 1
mov dword [ebp - 0x88c], ecx
cmp dword [ebp - 0x88c], 8
jge 0x47b451
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x88c]
movsx eax, byte [edx + 0x293f0]
test eax, eax
jne 0x47b431
jmp 0x47b451
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp - 0x88c]
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x88c]
mov al, byte [edx + 0x293f0]
mov byte [ecx + 0x132], al
jmp 0x47b403
mov dword [ebp - 0x88c], 0
jmp 0x47b46c
mov ecx, dword [ebp - 0x88c]
add ecx, 1
mov dword [ebp - 0x88c], ecx
cmp dword [ebp - 0x88c], 0x10
jge 0x47b4ab
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x88c]
movsx eax, byte [edx + 0x29400]
test eax, eax
jne 0x47b48b
jmp 0x47b4ab
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp - 0x88c]
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x88c]
mov al, byte [edx + 0x29400]
mov byte [ecx + 0x13a], al
jmp 0x47b45d
mov dword [ebp - 0x88c], 0
jmp 0x47b4c6
mov ecx, dword [ebp - 0x88c]
add ecx, 1
mov dword [ebp - 0x88c], ecx
cmp dword [ebp - 0x88c], 4
jge 0x47b505
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x88c]
movsx eax, byte [edx + 0x291f0]
test eax, eax
jne 0x47b4e5
jmp 0x47b505
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp - 0x88c]
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x88c]
mov al, byte [edx + 0x291f0]
mov byte [ecx + 0x14a], al
jmp 0x47b4b7
push 0x30
push 0
mov ecx, dword [ebp + 0xc]
add ecx, 0x160
push ecx
call fcn.0054bfb0
add esp, 0xc
push 8
mov edx, dword [ebp + 8]
add edx, 0x4458
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x160
push eax
call fcn.0054c980
add esp, 0xc
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x2f778], 0
je 0x47b57c
mov edx, dword [ebp + 8]
cmp dword [edx + 0x2f7d0], 0
je 0x47b567
mov eax, dword [ebp + 0xc]
mov cl, byte [eax + 0x160]
or cl, 1
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x160], cl
jmp 0x47b57c
mov eax, dword [ebp + 0xc]
mov cl, byte [eax + 0x160]
and cl, 0xfe
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x160], cl
mov eax, dword [ebp + 8]
cmp dword [eax + 0x36ec4], 0
je 0x47b59e
mov ecx, dword [ebp + 0xc]
xor edx, edx
mov dl, byte [ecx + 0x162]
or edx, 3
mov dword [ebp - 0x1f00], edx
jmp 0x47b5b2
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov cl, byte [eax + 0x162]
and ecx, 0xfffffffc
mov dword [ebp - 0x1f00], ecx
mov edx, dword [ebp + 0xc]
mov al, byte [ebp - 0x1f00]
mov byte [edx + 0x162], al
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x29040], 0
je 0x47b638
mov edx, dword [ebp + 0xc]
mov al, byte [edx + 0x162]
and al, 0xfc
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x162], al
push 0x600
push 0
lea edx, [ebp - 0x654]
push edx
call fcn.0054bfb0
add esp, 0xc
push 0x600
lea eax, [ebp - 0x654]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00506151
add esp, 0xc
mov dword [ebp - 0x1d88], eax
mov edx, dword [ebp - 0x639]
and edx, 0xff
and edx, 2
mov eax, dword [ebp + 0xc]
mov cl, byte [eax + 0x162]
or cl, dl
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x162], cl
mov eax, dword [ebp + 8]
cmp dword [eax + 0x2b3c], 0
je 0x47b6f3
push pe_nt_image_headers32
push 0
lea ecx, [ebp - 0x1e90]
push ecx
call fcn.0054bfb0
add esp, 0xc
lea edx, [ebp - 0x1e90]
push edx
call fcn.0053534c
add esp, 4
push 0x5a9150
lea eax, [ebp - 0x1e90]
push eax
call fcn.0054bed0
add esp, 8
push 0x60
push 0
lea ecx, [ebp - 0x1ef0]
push ecx
call fcn.0054bfb0
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x154]
push eax
push 0x5a9160
lea ecx, [ebp - 0x1ef0]
push ecx
call fcn.0054c45b
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x154]
push eax
push 0x5a916c
lea ecx, [ebp - 0x1ed0]
push ecx
call fcn.0054c45b
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x154]
push eax
push 0x5a9178
lea ecx, [ebp - 0x1eb0]
push ecx
call fcn.0054c45b
add esp, 0xc
jmp 0x47b8f5
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x154]
mov dword [ebp - 0x1f04], eax
cmp dword [ebp - 0x1f04], 0x200
jg 0x47b752
cmp dword [ebp - 0x1f04], 0x200
je 0x47b834
mov ecx, dword [ebp - 0x1f04]
sub ecx, 0x20
mov dword [ebp - 0x1f04], ecx
cmp dword [ebp - 0x1f04], 0xe0
ja case.0x47b74b.4
mov eax, dword [ebp - 0x1f04]
xor edx, edx
mov dl, byte [eax + 0x47bfa3]
jmp dword [edx*4 + 0x47bf8f]
cmp dword [ebp - 0x1f04], 0x1000
jg 0x47b793
cmp dword [ebp - 0x1f04], 0x1000
je 0x47b897
cmp dword [ebp - 0x1f04], 0x400
je 0x47b857
cmp dword [ebp - 0x1f04], 0x800
je 0x47b877
jmp case.0x47b74b.4
cmp dword [ebp - 0x1f04], 0x2000
je 0x47b8b7
jmp case.0x47b74b.4
mov dword [ebp - 0x678], 2
mov dword [ebp - 0x1d4c], 0x20
mov dword [ebp - 0x674], 0x3d8
jmp 0x47b8f5
mov dword [ebp - 0x678], 4
mov dword [ebp - 0x1d4c], 0x20
mov dword [ebp - 0x674], 0x3d8
jmp 0x47b8f5
mov dword [ebp - 0x678], 8
mov dword [ebp - 0x1d4c], 0x20
mov dword [ebp - 0x674], 0x3d8
jmp 0x47b8f5
mov dword [ebp - 0x678], 0x10
mov dword [ebp - 0x1d4c], 0x20
mov dword [ebp - 0x674], 0x3d8
jmp 0x47b8f5
mov dword [ebp - 0x678], 0x10
mov dword [ebp - 0x1d4c], 0x3f
mov dword [ebp - 0x674], 0x3d8
jmp 0x47b8f5
mov dword [ebp - 0x678], 0x10
mov dword [ebp - 0x1d4c], 0x3f
mov dword [ebp - 0x674], 0x7b0
jmp 0x47b8f5
mov dword [ebp - 0x678], 0x10
mov dword [ebp - 0x1d4c], 0x3f
mov dword [ebp - 0x674], 0xf60
jmp 0x47b8f5
mov dword [ebp - 0x678], 0x10
mov dword [ebp - 0x1d4c], 0x3f
mov dword [ebp - 0x674], 0x1ec0
jmp 0x47b8f5
mov dword [ebp - 0x678], 0x10
mov dword [ebp - 0x1d4c], 0x3f
mov dword [ebp - 0x674], 0x3d80
jmp 0x47b8f5
mov dword [ebp - 0x678], 0
mov dword [ebp - 0x1d4c], 0
mov dword [ebp - 0x674], 0
mov ecx, dword [ebp + 0xc]
mov dl, byte [ebp - 0x678]
mov byte [ecx + 0x168], dl
mov eax, dword [ebp + 0xc]
mov cl, byte [ebp - 0x1d4c]
mov byte [eax + 0x169], cl
mov edx, dword [ebp - 0x674]
sar edx, 8
and edx, 0xff
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x16a], dl
mov ecx, dword [ebp - 0x674]
and ecx, 0xff
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x16b], cl
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x2ae0]
mov byte [eax + 0x16c], dl
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x2ae4]
mov byte [eax + 0x16d], dl
push 9
mov eax, dword [ebp + 8]
add eax, 0x4460
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x16e
push ecx
call fcn.0054c980
add esp, 0xc
mov edx, dword [ebp + 8]
cmp dword [edx + 0x2ef74], 0
je 0x47bd5c
mov eax, dword [ebp + 8]
cmp dword [eax + 0x4764], 0x15
je 0x47b9c9
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x4764], 0x14
je 0x47b9c9
mov edx, dword [ebp + 8]
cmp dword [edx + 0x4764], 0x16
jl 0x47bd5c
mov eax, dword [ebp + 8]
cmp dword [eax + 0x4764], 0x1b
jg 0x47bd5c
push 0x600
push 0
lea eax, [ebp - 0x654]
push eax
call fcn.0054bfb0
add esp, 0xc
push 0x600
lea ecx, [ebp - 0x654]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00506151
add esp, 0xc
mov dword [ebp - 0x1d88], eax
mov eax, dword [ebp - 0x502]
and eax, 0xff
shl eax, 8
mov ecx, dword [ebp - 0x501]
and ecx, 0xff
and ecx, 0xff
add eax, ecx
mov dword [ebp - 0x1d8c], eax
mov edx, dword [ebp - 0x4e8]
and edx, 0xff
shl edx, 8
mov eax, dword [ebp - 0x4e7]
and eax, 0xff
and eax, 0xff
add edx, eax
mov dword [ebp - 0x884], edx
mov ecx, dword [ebp - 0x4e2]
and ecx, 0xff
and ecx, 0x10
test ecx, ecx
je 0x47ba73
mov edx, dword [ebp - 0x4d7]
and edx, 0xff
mov dword [ebp - 0x1f08], edx
jmp 0x47ba8f
mov eax, dword [ebp - 0x4ea]
and eax, 0xff
push eax
push 2
call fcn.00535402
add esp, 8
mov dword [ebp - 0x1f08], eax
mov ecx, dword [ebp - 0x1f08]
mov dword [ebp - 0x680], ecx
mov edx, dword [ebp - 0x1d8c]
imul edx, dword [ebp - 0x884]
imul edx, dword [ebp - 0x680]
shl edx, 1
mov dword [ebp - 0x65c], edx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x4764], 0x16
jl 0x47baff
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x4764], 0x1b
jg 0x47baff
mov edx, dword [ebp + 8]
cmp dword [edx + 0x25a4], 0x10
jne 0x47badd
jmp 0x47bafd
mov eax, dword [ebp - 0x4e2]
and eax, 0xff
and eax, 1
test eax, eax
je 0x47bafd
mov ecx, dword [ebp - 0x65c]
shl ecx, 1
mov dword [ebp - 0x65c], ecx
jmp 0x47bb20
mov edx, dword [ebp - 0x4e2]
and edx, 0xff
and edx, 1
test edx, edx
je 0x47bb20
mov eax, dword [ebp - 0x65c]
shl eax, 1
mov dword [ebp - 0x65c], eax
mov ecx, dword [ebp - 0x4e2]
and ecx, 0xff
and ecx, 4
test ecx, ecx
je 0x47bb41
mov edx, dword [ebp - 0x65c]
shl edx, 1
mov dword [ebp - 0x65c], edx
mov eax, dword [ebp - 0x4df]
and eax, 0xff
push eax
mov ecx, dword [ebp - 0x65c]
push ecx
push 0x5a9188
lea edx, [ebp - 0xc90]
push edx
call fcn.0054c45b
add esp, 0x10
lea eax, [ebp - 0xc90]
push eax
call fcn.00536ebf
add esp, 4
mov dword [ebp - 0x890], 0x1f
jmp 0x47bb92
mov ecx, dword [ebp - 0x890]
sub ecx, 1
mov dword [ebp - 0x890], ecx
cmp dword [ebp - 0x890], 0
jl 0x47bc5e
mov edx, 1
mov ecx, dword [ebp - 0x890]
shl edx, cl
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2f27c]
and ecx, edx
test ecx, ecx
je 0x47bc59
mov edx, dword [ebp - 0x890]
mov dword [ebp - 0x1ef4], edx
jmp 0x47bbdc
mov eax, dword [ebp - 0x1ef4]
sub eax, 1
mov dword [ebp - 0x1ef4], eax
cmp dword [ebp - 0x1ef4], 0
jl 0x47bc57
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2f17c]
shl edx, 0xb
cmp dword [ebp - 0x65c], edx
jl 0x47bc05
mov dword [ebp - 0x67c], 0
jmp 0x47bc57
mov eax, dword [ebp - 0x1ef4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + eax*4 + 0x2f17c]
shl edx, 0xb
cmp dword [ebp - 0x65c], edx
jl 0x47bc52
mov eax, dword [ebp - 0x1ef4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + eax*4 + 0x2f178]
shl edx, 0xb
cmp dword [ebp - 0x65c], edx
jge 0x47bc52
cmp dword [ebp - 0x1ef4], 0
jle 0x47bc52
mov eax, dword [ebp - 0x1ef4]
mov dword [ebp - 0x67c], eax
jmp 0x47bc57
jmp 0x47bbcd
jmp 0x47bc5e
jmp 0x47bb83
cmp dword [ebp - 0x67c], 0xffffffff
je 0x47bc80
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x67c]
mov eax, dword [ebp + 8]
mov edx, dword [eax + edx*4 + 0x2f17c]
mov dword [ecx + 0x2f2b8], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2f2b8]
shl ecx, 0xb
push ecx
push str._StaticSize__nStaticSizeLBA___d
lea edx, [ebp - 0xc90]
push edx
call fcn.0054c45b
add esp, 0xc
lea eax, [ebp - 0xc90]
push eax
call fcn.00536ebf
add esp, 4
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x2f2bc], 0
je 0x47bceb
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2f17c]
shl eax, 0xb
cmp dword [ebp - 0x65c], eax
jle 0x47bceb
mov eax, dword [ebp - 0x65c]
cdq
and edx, 0x7ff
add eax, edx
sar eax, 0xb
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x2f2b8], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2f2b8]
shl eax, 0xb
sar eax, 0x18
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x170], al
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2f2b8]
shl eax, 0xb
sar eax, 0x10
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x171], al
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2f2b8]
shl eax, 0xb
sar eax, 8
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x172], al
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2f2b8]
shl eax, 0xb
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x173], al
mov edx, dword [ebp + 8]
cmp dword [edx + 0x36ec8], 0
je 0x47bdd5
mov eax, dword [ebp + 8]
cmp dword [eax + 0x4764], 0x14
je 0x47bda7
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x4764], 0x12
je 0x47bda7
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x36ebc]
shl eax, 4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x36eb0], eax
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x36eb0]
mov dword [edx + 0x36eb4], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x36eb0]
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x175], al
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x36eb4]
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x176], al
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x179], 0
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x17a], 0x30
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x17b], 0x50
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x185], 0x21
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x4469]
mov byte [eax + 0x186], dl
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x446a]
mov byte [eax + 0x187], dl
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x446b]
mov byte [eax + 0x188], dl
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x2b00]
mov byte [eax + 0x189], dl
mov eax, dword [ebp + 8]
add eax, 0x29644
push eax
call fcn.005353c2
add esp, 4
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x18b], al
mov edx, dword [ebp + 8]
add edx, 0x29648
push edx
call fcn.005353c2
add esp, 4
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x18c], al
mov edx, dword [ebp + 8]
add edx, 0x2964c
push edx
call fcn.005353c2
add esp, 4
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x18d], al
mov edx, dword [ebp + 8]
add edx, 0x29650
push edx
call fcn.005353c2
add esp, 4
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x18e], al
mov edx, dword [ebp + 8]
add edx, 0x29654
push edx
call fcn.005353c2
add esp, 4
and eax, 0xff
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x18f], al
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x29640]
neg eax
sbb eax, eax
and eax, 0x40
add eax, 0x80
mov ecx, dword [ebp + 0xc]
mov byte [ecx + 0x18f], al
mov edx, dword [ebp + 8]
cmp dword [edx + 0x2965c], 0
je 0x47bf25
mov eax, dword [ebp + 0xc]
mov cl, byte [eax + 0x18f]
or cl, 0x40
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x18f], cl
jmp 0x47bf3a
mov eax, dword [ebp + 0xc]
mov cl, byte [eax + 0x18f]
and cl, 0xbf
mov edx, dword [ebp + 0xc]
mov byte [edx + 0x18f], cl
mov eax, dword [ebp + 8]
cmp dword [eax + 0x29658], 0
je 0x47bf5d
mov ecx, dword [ebp + 0xc]
mov dl, byte [ecx + 0x18f]
or dl, 0x80
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x18f], dl
jmp 0x47bf72
mov ecx, dword [ebp + 0xc]
mov dl, byte [ecx + 0x18f]
and dl, 0x7f
mov eax, dword [ebp + 0xc]
mov byte [eax + 0x18f], dl
mov eax, 1
mov esp, ebp
pop ebp
ret