Function at 0x4ea023
Capabilities:
Inspect section memory permissions
Parse pe header

Disassembly:
push 0x720
mov eax, 0x76d386
call fcn.00736d13
mov dword [ebp - 0x70c], ecx
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x6d8], ebx
xor ecx, ecx
xor edi, edi
mov dword [ebp - 0x700], eax
mov dword [ebp - 0x6d4], edi
mov dword [ebp - 0x6dc], ecx
mov ecx, dword [eax]
lea eax, [ebp - 0x720]
push eax
mov esi, dword [ecx + 4]
call fcn.004da3c7
and dword [ebp - 4], edi
lea eax, [ebp - 0x6fc]
mov ecx, dword [ebp - 0x700]
push eax
mov ecx, dword [ecx]
call fcn.004da42b
mov byte [ebp - 4], 1
test esi, esi
mov esi, dword [ebp - 0x700]
je 0x4ea0d6
mov ecx, dword [esi]
mov al, byte [ecx + 0x18]
test al, al
jne 0x4ea09e
cmp dword [ecx + 0x28], 5
jne 0x4ea0d6
mov ecx, dword [ebp - 0x720]
lea eax, [ebp - 0x6e4]
push eax
call fcn.004c5851
mov byte [ebp - 4], 2
xor ebx, ebx
inc ebx
mov dword [ebp - 0x6d8], ebx
mov eax, dword [eax]
mov al, byte [eax + 0x50]
test al, al
je 0x4ea0d6
mov eax, dword [esi]
mov byte [ebp - 0x6f1], 0
mov al, byte [eax + 0x78]
test al, al
jne 0x4ea0dd
mov byte [ebp - 0x6f1], 1
mov dword [ebp - 4], 1
test bl, 1
je 0x4ea105
and ebx, 0xfffffffe
mov dword [ebp - 0x6d8], ebx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x6e0]
test ecx, ecx
je 0x4ea105
call fcn.0048103d
cmp byte [ebp - 0x6f1], 0
jne 0x4ebf5c
mov ecx, dword [esi]
lea eax, [ebp - 0x72c]
push eax
call fcn.004da3f9
mov byte [ebp - 4], 6
xor ecx, ecx
and dword [ebp - 0x718], 0
mov dword [ebp - 0x714], ecx
mov byte [ebp - 4], 8
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
dec eax
je 0x4ebb13
dec eax
je 0x4eb780
push 0x110
dec eax
je 0x4eb3df
dec eax
je 0x4eb039
dec eax
je 0x4eac8a
dec eax
je 0x4ea8c1
dec eax
je 0x4ea521
call fcn.00732133
mov edi, eax
pop ecx
mov dword [ebp - 0x70c], edi
mov byte [ebp - 4], 0xa8
test edi, edi
je 0x4ea373
push 0x846af0
lea ecx, [ebp - 0x118]
call fcn.004824e0
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0x310]
push 0x846b04
mov dword [ebp - 0x6dc], 0x20
call fcn.004824e0
mov dword [ebp - 4], 0xaa
lea ecx, [ebp - 0xe8]
push 0x846b08
mov dword [ebp - 0x6dc], 0x60
call fcn.004824e0
mov dword [ebp - 4], 0xab
lea ecx, [ebp - 0x2e0]
push 0x846afc
mov dword [ebp - 0x6dc], 0xe0
call fcn.004824e0
mov dword [ebp - 4], 0xac
lea ecx, [ebp - 0xb8]
push 0x846b00
mov dword [ebp - 0x6dc], 0x1e0
call fcn.004824e0
mov dword [ebp - 4], 0xad
lea ecx, [ebp - 0x2b0]
push 0x846b4c
mov dword [ebp - 0x6dc], 0x3e0
call fcn.004824e0
mov dword [ebp - 4], 0xae
lea ecx, [ebp - 0x88]
push 0x846b50
mov dword [ebp - 0x6dc], 0x7e0
call fcn.004824e0
mov dword [ebp - 4], 0xaf
lea ecx, [ebp - 0x704]
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x708], eax
lea eax, [ebp - 0x6f8]
push eax
mov dword [ebp - 0x6dc], 0xfe0
call fcn.00481095
mov dword [ebp - 4], 0xb1
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x6dc], 0x1fe0
mov dword [ebp - 0x700], 1
mov dword [ebp - 0x6e8], 3
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x724], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x72c]
mov dword [ebp - 0x6ec], eax
lea eax, [ebp - 0x5c8]
push eax
call fcn.0061198a
mov esi, eax
mov dword [ebp - 4], 0xb2
lea eax, [ebp - 0x478]
mov ecx, dword [ebp - 0x6fc]
push eax
mov dword [ebp - 0x6dc], 0x3fe0
call fcn.004d9f2c
mov dword [ebp - 4], 0xb3
lea ecx, [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x310]
mov ebx, 0x7fe0
push ecx
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0x6dc], ebx
push ecx
lea ecx, [ebp - 0x2e0]
push ecx
push esi
push eax
lea eax, [ebp - 0xb8]
mov ecx, edi
push eax
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x708]
push eax
lea eax, [ebp - 0x700]
push eax
lea eax, [ebp - 0x724]
push eax
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x6e8]
push eax
call fcn.005e3625
jmp 0x4ea37b
mov ebx, dword [ebp - 0x6dc]
xor eax, eax
mov dword [ebp - 4], 0xbd
lea ecx, [ebp - 0x718]
push eax
call fcn.004efceb
mov dword [ebp - 4], 0xbc
xor esi, esi
inc esi
test ebx, 0x4000
je 0x4ea3ba
push 0
and ebx, 0xffffbfff
lea ecx, [ebp - 0x478]
push esi
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov dword [ebp - 4], 0xbb
test ebx, 0x2000
je 0x4ea3e3
push 0
and ebx, 0xffffdfff
lea ecx, [ebp - 0x5c8]
push esi
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov eax, 0xba
mov dword [ebp - 4], eax
test ebx, 0x1000
je 0x4ea411
and ebx, 0xffffefff
mov dword [ebp - 0x6dc], ebx
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x704]
test ecx, ecx
je 0x4ea411
call fcn.0048103d
mov dword [ebp - 4], 0xb9
test ebx, 0x800
je 0x4ea43a
push 0
and ebx, 0xfffff7ff
lea ecx, [ebp - 0x88]
push esi
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov dword [ebp - 4], 0xb8
test ebx, 0x400
je 0x4ea463
push 0
and ebx, 0xfffffbff
lea ecx, [ebp - 0x2b0]
push esi
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov dword [ebp - 4], 0xb7
test ebx, 0x200
je 0x4ea48c
push 0
and ebx, 0xfffffdff
lea ecx, [ebp - 0xb8]
push esi
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov dword [ebp - 4], 0xb6
test ebx, 0x100
je 0x4ea4b5
push 0
and ebx, 0xfffffeff
lea ecx, [ebp - 0x2e0]
push esi
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov dword [ebp - 4], 0xb5
test bl, bl
jns 0x4ea4da
push 0
and ebx, 0xffffff7f
lea ecx, [ebp - 0xe8]
push esi
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov dword [ebp - 4], 0xb4
test bl, 0x40
je 0x4ea4fd
push 0
and ebx, 0xffffffbf
lea ecx, [ebp - 0x310]
push esi
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov dword [ebp - 4], 8
test bl, 0x20
je 0x4ebecd
and ebx, 0xffffffdf
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x6dc], ebx
jmp 0x4ebec4
call fcn.00732133
pop ecx
mov dword [ebp - 0x70c], eax
mov byte [ebp - 4], 0x91
test eax, eax
je 0x4ea720
push 0x846ae0
lea ecx, [ebp - 0x178]
call fcn.004824e0
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x370]
push 0x846af4
mov dword [ebp - 0x6d4], 0x8000000
call fcn.004824e0
mov dword [ebp - 4], 0x93
lea ecx, [ebp - 0x148]
push 0x846af8
mov dword [ebp - 0x6d4], 0x18000000
call fcn.004824e0
mov dword [ebp - 4], 0x94
lea ecx, [ebp - 0x340]
push 0x846aec
mov dword [ebp - 0x6d4], 0x38000000
call fcn.004824e0
mov dword [ebp - 4], 0x95
lea ecx, [ebp - 0x6e0]
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x6e4], eax
lea eax, [ebp - 0x6f8]
push eax
mov dword [ebp - 0x6d4], 0x78000000
call fcn.00481095
mov dword [ebp - 4], 0x97
mov ecx, 0xf8000000
mov dword [ebp - 0x6d4], ecx
xor ebx, ebx
mov ecx, dword [ebp - 0x720]
inc ebx
mov dword [ebp - 0x6ec], ebx
mov dword [ebp - 0x704], 9
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x724], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x6f0], eax
lea eax, [ebp - 0x538]
push eax
call fcn.004d9f61
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 4], 0x98
lea eax, [ebp - 0x5f8]
mov ecx, dword [esi]
push eax
mov dword [ebp - 0x6dc], ebx
call fcn.004da363
mov ebx, eax
mov dword [ebp - 4], 0x99
lea eax, [ebp - 0x508]
mov ecx, dword [ebp - 0x6fc]
push eax
mov dword [ebp - 0x6dc], 3
call fcn.004d9f2c
mov edi, eax
mov dword [ebp - 4], 0x9a
lea eax, [ebp - 0x658]
mov ecx, dword [esi]
push eax
mov dword [ebp - 0x6dc], 7
call fcn.004da331
mov esi, eax
mov dword [ebp - 4], 0x9b
lea eax, [ebp - 0x4d8]
mov ecx, dword [ebp - 0x700]
push eax
mov dword [ebp - 0x6dc], 0xf
mov ecx, dword [ecx]
call fcn.004da395
mov dword [ebp - 4], 0x9c
push 0x1f
pop ecx
mov dword [ebp - 0x6dc], ecx
lea ecx, [ebp - 0x178]
push ecx
lea ecx, [ebp - 0x370]
push ecx
push dword [ebp - 0x6e8]
lea ecx, [ebp - 0x148]
push ebx
push ecx
mov ecx, dword [ebp - 0x70c]
push edi
push esi
push eax
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x724]
push eax
lea eax, [ebp - 0x6f0]
push eax
lea eax, [ebp - 0x704]
push eax
call fcn.005e3625
mov edi, 0xf8000000
jmp 0x4ea722
xor eax, eax
mov dword [ebp - 4], 0xa6
lea ecx, [ebp - 0x718]
push eax
call fcn.004efceb
mov dword [ebp - 4], 0xa5
mov ebx, dword [ebp - 0x6dc]
test bl, 0x10
je 0x4ea75f
push 0
and ebx, 0xffffffef
lea ecx, [ebp - 0x4d8]
push 1
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov dword [ebp - 4], 0xa4
test bl, 8
je 0x4ea783
push 0
and ebx, 0xfffffff7
lea ecx, [ebp - 0x658]
push 1
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov dword [ebp - 4], 0xa3
test bl, 4
je 0x4ea7a7
push 0
and ebx, 0xfffffffb
lea ecx, [ebp - 0x508]
push 1
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov dword [ebp - 4], 0xa2
test bl, 2
je 0x4ea7cb
push 0
and ebx, 0xfffffffd
lea ecx, [ebp - 0x5f8]
push 1
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov dword [ebp - 4], 0xa1
test bl, 1
je 0x4ea7ef
push 0
and ebx, 0xfffffffe
lea ecx, [ebp - 0x538]
push 1
mov dword [ebp - 0x6dc], ebx
call fcn.00482a51
mov eax, 0xa0
mov dword [ebp - 4], eax
test edi, edi
jns 0x4ea819
and edi, 0x7fffffff
mov dword [ebp - 0x6d4], edi
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x6e0]
test ecx, ecx
je 0x4ea819
call fcn.0048103d
mov dword [ebp - 4], 0x9f
test edi, 0x40000000
je 0x4ea843
push 0
and edi, 0xbfffffff
lea ecx, [ebp - 0x340]
push 1
mov dword [ebp - 0x6d4], edi
call fcn.00482a51
mov dword [ebp - 4], 0x9e
test edi, 0x20000000
je 0x4ea86d
push 0
and edi, 0xdfffffff
lea ecx, [ebp - 0x148]
push 1
mov dword [ebp - 0x6d4], edi
call fcn.00482a51
mov dword [ebp - 4], 0x9d
test edi, 0x10000000
je 0x4ea897
push 0
and edi, 0xefffffff
lea ecx, [ebp - 0x370]
push 1
mov dword [ebp - 0x6d4], edi
call fcn.00482a51
mov dword [ebp - 4], 8
test edi, 0x8000000
je 0x4ebecd
and edi, 0xf7ffffff
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x6d4], edi
jmp 0x4ebec4
call fcn.00732133
pop ecx
mov dword [ebp - 0x6ec], eax
mov byte [ebp - 4], 0x35
test eax, eax
je 0x4eaacf
push 0x846a7c
lea ecx, [ebp - 0x208]
call fcn.004824e0
mov byte [ebp - 4], 0x36
or ebx, 0x80000
push 0x846a80
lea ecx, [ebp - 0x400]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0x37
or ebx, 0x100000
push 0x846a94
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0x38
or ebx, 0x200000
push 0x846a98
lea ecx, [ebp - 0x3d0]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0x39
or ebx, 0x400000
push 0x846a8c
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0x3a
or ebx, 0x800000
push 0x846a90
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0x3b
or ebx, 0x1000000
mov dword [ebp - 0x6d8], ebx
lea ecx, [ebp - 0x6e0]
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x6e4], eax
lea eax, [ebp - 0x6f8]
push eax
call fcn.00481095
mov dword [ebp - 4], 0x3d
or ebx, 0x2000000
mov dword [ebp - 0x6d8], ebx
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x70c], 1
mov dword [ebp - 0x6e8], 3
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x704], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x72c]
mov dword [ebp - 0x6f0], eax
lea eax, [ebp - 0x628]
push eax
call fcn.0061198a
mov edi, eax
mov dword [ebp - 4], 0x3e
or ebx, 0x4000000
lea eax, [ebp - 0x568]
mov dword [ebp - 0x6d8], ebx
mov ecx, dword [ebp - 0x6fc]
push eax
call fcn.004d9f2c
mov esi, eax
mov dword [ebp - 4], 0x3f
lea eax, [ebp - 0x6b8]
or ebx, 0x8000000
push eax
mov dword [ebp - 0x6d8], ebx
call fcn.004ec038
mov dword [ebp - 4], 0x40
lea ecx, [ebp - 0x208]
push ecx
lea ecx, [ebp - 0x400]
or ebx, 0x10000000
push ecx
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x6d8], ebx
push ecx
lea ecx, [ebp - 0x3d0]
push ecx
push edi
push esi
lea ecx, [ebp - 0x1a8]
push ecx
lea ecx, [ebp - 0x3a0]
push ecx
mov ecx, dword [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x70c]
push eax
lea eax, [ebp - 0x704]
push eax
lea eax, [ebp - 0x6f0]
push eax
lea eax, [ebp - 0x6e8]
push eax
call fcn.005e3625
jmp 0x4eaad1
xor eax, eax
mov dword [ebp - 4], 0x4a
lea ecx, [ebp - 0x718]
push eax
call fcn.004efceb
mov dword [ebp - 4], 0x49
test ebx, 0x10000000
je 0x4eab0e
push 0
and ebx, 0xefffffff
lea ecx, [ebp - 0x6b8]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x48
test ebx, 0x8000000
je 0x4eab38
push 0
and ebx, 0xf7ffffff
lea ecx, [ebp - 0x568]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x47
test ebx, 0x4000000
je 0x4eab62
push 0
and ebx, 0xfbffffff
lea ecx, [ebp - 0x628]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
push 0x46
pop eax
mov dword [ebp - 4], eax
test ebx, 0x2000000
je 0x4eab8e
and ebx, 0xfdffffff
mov dword [ebp - 0x6d8], ebx
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x6e0]
test ecx, ecx
je 0x4eab8e
call fcn.0048103d
mov dword [ebp - 4], 0x45
test ebx, 0x1000000
je 0x4eabb8
push 0
and ebx, 0xfeffffff
lea ecx, [ebp - 0x3a0]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x44
test ebx, 0x800000
je 0x4eabe2
push 0
and ebx, 0xff7fffff
lea ecx, [ebp - 0x1a8]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x43
test ebx, 0x400000
je 0x4eac0c
push 0
and ebx, 0xffbfffff
lea ecx, [ebp - 0x3d0]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x42
test ebx, 0x200000
je 0x4eac36
push 0
and ebx, 0xffdfffff
lea ecx, [ebp - 0x1d8]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x41
test ebx, 0x100000
je 0x4eac60
push 0
and ebx, 0xffefffff
lea ecx, [ebp - 0x400]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 8
test ebx, 0x80000
je 0x4ebecd
and ebx, 0xfff7ffff
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x6d8], ebx
jmp 0x4ebec4
call fcn.00732133
pop ecx
mov dword [ebp - 0x6ec], eax
mov byte [ebp - 4], 0x7a
mov edi, 0x20000
test eax, eax
je 0x4eae7a
push 0x846ad4
lea ecx, [ebp - 0x388]
call fcn.004824e0
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x298]
push 0x846ad8
mov dword [ebp - 0x6d4], edi
call fcn.004824e0
mov dword [ebp - 4], 0x7c
lea ecx, [ebp - 0x3e8]
push 0x846acc
mov dword [ebp - 0x6d4], 0x60000
call fcn.004824e0
mov dword [ebp - 4], 0x7d
lea ecx, [ebp - 0x268]
push 0x846ad0
mov dword [ebp - 0x6d4], 0xe0000
call fcn.004824e0
mov dword [ebp - 4], 0x7e
lea ecx, [ebp - 0x460]
push 0x846ae4
mov dword [ebp - 0x6d4], 0x1e0000
call fcn.004824e0
mov dword [ebp - 4], 0x7f
lea ecx, [ebp - 0x238]
push 0x846ae8
mov dword [ebp - 0x6d4], 0x3e0000
call fcn.004824e0
mov dword [ebp - 4], 0x80
lea ecx, [ebp - 0x430]
push 0x846adc
mov dword [ebp - 0x6d4], 0x7e0000
call fcn.004824e0
mov dword [ebp - 4], 0x81
and dword [ebp - 0x6e4], 0
and dword [ebp - 0x6e0], 0
mov dword [ebp - 0x6d4], 0xfe0000
mov dword [ebp - 4], 0x83
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x6d4], 0x1fe0000
mov dword [ebp - 0x70c], 1
mov dword [ebp - 0x6e8], 0x15
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x704], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [esi]
mov dword [ebp - 0x6f0], eax
lea eax, [ebp - 0x688]
push eax
call fcn.004da331
mov esi, eax
mov dword [ebp - 4], 0x84
lea eax, [ebp - 0x598]
mov ecx, dword [ebp - 0x72c]
push eax
mov dword [ebp - 0x6d4], 0x3fe0000
call fcn.0061198a
mov dword [ebp - 4], 0x85
lea ecx, [ebp - 0x388]
push ecx
lea ecx, [ebp - 0x298]
mov ebx, 0x7fe0000
push ecx
lea ecx, [ebp - 0x3e8]
mov dword [ebp - 0x6d4], ebx
push ecx
lea ecx, [ebp - 0x268]
push ecx
push esi
lea ecx, [ebp - 0x460]
push ecx
lea ecx, [ebp - 0x238]
push ecx
mov ecx, dword [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x70c]
push eax
lea eax, [ebp - 0x704]
push eax
lea eax, [ebp - 0x6f0]
push eax
lea eax, [ebp - 0x6e8]
push eax
call fcn.005e3625
jmp 0x4eae82
mov ebx, dword [ebp - 0x6d4]
xor eax, eax
mov dword [ebp - 4], 0x8f
lea ecx, [ebp - 0x718]
push eax
call fcn.004efceb
mov dword [ebp - 4], 0x8e
test ebx, 0x4000000
je 0x4eaebf
push 0
and ebx, 0xfbffffff
lea ecx, [ebp - 0x598]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x8d
test ebx, 0x2000000
je 0x4eaee9
push 0
and ebx, 0xfdffffff
lea ecx, [ebp - 0x688]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov eax, 0x8c
mov dword [ebp - 4], eax
test ebx, 0x1000000
je 0x4eaf17
and ebx, 0xfeffffff
mov dword [ebp - 0x6d4], ebx
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x6e0]
test ecx, ecx
je 0x4eaf17
call fcn.0048103d
mov dword [ebp - 4], 0x8b
test ebx, 0x800000
je 0x4eaf41
push 0
and ebx, 0xff7fffff
lea ecx, [ebp - 0x430]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x8a
test ebx, 0x400000
je 0x4eaf6b
push 0
and ebx, 0xffbfffff
lea ecx, [ebp - 0x238]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x89
test ebx, 0x200000
je 0x4eaf95
push 0
and ebx, 0xffdfffff
lea ecx, [ebp - 0x460]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x88
test ebx, 0x100000
je 0x4eafbf
push 0
and ebx, 0xffefffff
lea ecx, [ebp - 0x268]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x87
test ebx, 0x80000
je 0x4eafe9
push 0
and ebx, 0xfff7ffff
lea ecx, [ebp - 0x3e8]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x86
test ebx, 0x40000
je 0x4eb013
push 0
and ebx, 0xfffbffff
lea ecx, [ebp - 0x298]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 8
test edi, ebx
je 0x4ebecd
and ebx, 0xfffdffff
lea ecx, [ebp - 0x388]
mov dword [ebp - 0x6d4], ebx
jmp 0x4ebec4
call fcn.00732133
pop ecx
mov dword [ebp - 0x6ec], eax
mov byte [ebp - 4], 0x63
test eax, eax
je 0x4eb228
push 0x846aac
lea ecx, [ebp - 0x3b8]
call fcn.004824e0
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x40]
push 0x846ab0
mov dword [ebp - 0x6d4], 0x80
call fcn.004824e0
mov dword [ebp - 4], 0x65
lea ecx, [ebp - 0x28]
push 0x846ac4
mov dword [ebp - 0x6d4], 0x180
call fcn.004824e0
mov dword [ebp - 4], 0x66
lea ecx, [ebp - 0x2f8]
push 0x846ac8
mov dword [ebp - 0x6d4], 0x380
call fcn.004824e0
mov dword [ebp - 4], 0x67
lea ecx, [ebp - 0x448]
push 0x846abc
mov dword [ebp - 0x6d4], 0x780
call fcn.004824e0
mov dword [ebp - 4], 0x68
lea ecx, [ebp - 0x2c8]
push 0x846ac0
mov dword [ebp - 0x6d4], 0xf80
call fcn.004824e0
mov dword [ebp - 4], 0x69
lea ecx, [ebp - 0x6e0]
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x6e4], eax
lea eax, [ebp - 0x6f8]
push eax
mov dword [ebp - 0x6d4], 0x1f80
call fcn.00481095
mov dword [ebp - 4], 0x6b
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x6d4], 0x3f80
mov dword [ebp - 0x70c], 1
mov dword [ebp - 0x6e8], 3
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x704], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x72c]
mov dword [ebp - 0x6f0], eax
lea eax, [ebp - 0x4f0]
push eax
call fcn.0061198a
mov edi, eax
mov dword [ebp - 4], 0x6c
lea eax, [ebp - 0x4c0]
mov ecx, dword [ebp - 0x6fc]
push eax
mov dword [ebp - 0x6d4], 0x7f80
call fcn.004d9f2c
mov esi, eax
mov dword [ebp - 4], 0x6d
lea eax, [ebp - 0x490]
push eax
mov dword [ebp - 0x6d4], 0xff80
call fcn.004ec194
mov dword [ebp - 4], 0x6e
lea ecx, [ebp - 0x3b8]
push ecx
lea ecx, [ebp - 0x40]
mov ebx, 0x1ff80
push ecx
mov dword [ebp - 0x6d4], ebx
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x2f8]
push ecx
push edi
push esi
lea ecx, [ebp - 0x448]
push ecx
lea ecx, [ebp - 0x2c8]
push ecx
mov ecx, dword [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x70c]
push eax
lea eax, [ebp - 0x704]
push eax
lea eax, [ebp - 0x6f0]
push eax
lea eax, [ebp - 0x6e8]
push eax
call fcn.005e3625
jmp 0x4eb230
mov ebx, dword [ebp - 0x6d4]
xor eax, eax
mov dword [ebp - 4], 0x78
lea ecx, [ebp - 0x718]
push eax
call fcn.004efceb
mov dword [ebp - 4], 0x77
test ebx, 0x10000
je 0x4eb26d
push 0
and ebx, 0xfffeffff
lea ecx, [ebp - 0x490]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x76
test ebx, 0x8000
je 0x4eb297
push 0
and ebx, 0xffff7fff
lea ecx, [ebp - 0x4c0]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x75
test ebx, 0x4000
je 0x4eb2c1
push 0
and ebx, 0xffffbfff
lea ecx, [ebp - 0x4f0]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
push 0x74
pop eax
mov dword [ebp - 4], eax
test ebx, 0x2000
je 0x4eb2ed
and ebx, 0xffffdfff
mov dword [ebp - 0x6d4], ebx
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x6e0]
test ecx, ecx
je 0x4eb2ed
call fcn.0048103d
mov dword [ebp - 4], 0x73
test ebx, 0x1000
je 0x4eb317
push 0
and ebx, 0xffffefff
lea ecx, [ebp - 0x2c8]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x72
test ebx, 0x800
je 0x4eb341
push 0
and ebx, 0xfffff7ff
lea ecx, [ebp - 0x448]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x71
test ebx, 0x400
je 0x4eb36b
push 0
and ebx, 0xfffffbff
lea ecx, [ebp - 0x2f8]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x70
test ebx, 0x200
je 0x4eb392
push 0
and ebx, 0xfffffdff
lea ecx, [ebp - 0x28]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x6f
test ebx, 0x100
je 0x4eb3b9
push 0
and ebx, 0xfffffeff
lea ecx, [ebp - 0x40]
push 1
mov dword [ebp - 0x6d4], ebx
call fcn.00482a51
mov dword [ebp - 4], 8
test bl, bl
jns 0x4ebecd
and ebx, 0xffffff7f
lea ecx, [ebp - 0x3b8]
mov dword [ebp - 0x6d4], ebx
jmp 0x4ebec4
call fcn.00732133
pop ecx
mov dword [ebp - 0x6ec], eax
mov byte [ebp - 4], 0x4c
test eax, eax
je 0x4eb5d3
push 0x846aa4
lea ecx, [ebp - 0x58]
call fcn.004824e0
mov byte [ebp - 4], 0x4d
or ebx, 0x20000000
push 0x846aa8
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0x4e
or ebx, 0x40000000
push 0x846a9c
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0x4f
or ebx, 0x80000000
push 0x846aa0
lea ecx, [ebp - 0x358]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0x50
lea ecx, [ebp - 0x418]
push 0x846ab4
mov dword [ebp - 0x6d4], 1
call fcn.004824e0
mov dword [ebp - 4], 0x51
lea ecx, [ebp - 0x328]
push 3
pop esi
push 0x846ab8
mov dword [ebp - 0x6d4], esi
call fcn.004824e0
mov dword [ebp - 4], 0x52
lea ecx, [ebp - 0x6e0]
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x6e4], eax
lea eax, [ebp - 0x6f8]
push eax
mov dword [ebp - 0x6d4], 7
call fcn.00481095
mov dword [ebp - 4], 0x54
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x6d4], 0xf
mov dword [ebp - 0x70c], 1
mov dword [ebp - 0x6e8], esi
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x704], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x72c]
mov dword [ebp - 0x6f0], eax
lea eax, [ebp - 0x580]
push eax
call fcn.0061198a
mov edi, eax
mov dword [ebp - 4], 0x55
lea eax, [ebp - 0x550]
mov ecx, dword [ebp - 0x6fc]
push eax
mov dword [ebp - 0x6d4], 0x1f
call fcn.004d9f2c
mov esi, eax
mov dword [ebp - 4], 0x56
lea eax, [ebp - 0x520]
push eax
mov dword [ebp - 0x6d4], 0x3f
call fcn.004ec0e6
mov dword [ebp - 4], 0x57
push 0x7f
pop ecx
mov dword [ebp - 0x6d4], ecx
lea ecx, [ebp - 0x58]
push ecx
lea ecx, [ebp - 0x280]
push ecx
lea ecx, [ebp - 0x250]
push ecx
lea ecx, [ebp - 0x358]
push ecx
push edi
push esi
lea ecx, [ebp - 0x418]
push ecx
lea ecx, [ebp - 0x328]
push ecx
mov ecx, dword [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x70c]
push eax
lea eax, [ebp - 0x704]
push eax
lea eax, [ebp - 0x6f0]
push eax
lea eax, [ebp - 0x6e8]
push eax
call fcn.005e3625
jmp 0x4eb5d5
xor eax, eax
mov dword [ebp - 4], 0x61
lea ecx, [ebp - 0x718]
push eax
call fcn.004efceb
mov dword [ebp - 4], 0x60
mov eax, dword [ebp - 0x6d4]
test al, 0x40
je 0x4eb617
push 0
and eax, 0xffffffbf
lea ecx, [ebp - 0x520]
push 1
mov dword [ebp - 0x6d4], eax
call fcn.00482a51
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 4], 0x5f
test al, 0x20
je 0x4eb640
push 0
and eax, 0xffffffdf
lea ecx, [ebp - 0x550]
push 1
mov dword [ebp - 0x6d4], eax
call fcn.00482a51
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 4], 0x5e
test al, 0x10
je 0x4eb669
push 0
and eax, 0xffffffef
lea ecx, [ebp - 0x580]
push 1
mov dword [ebp - 0x6d4], eax
call fcn.00482a51
mov eax, dword [ebp - 0x6d4]
push 0x5d
pop ecx
mov dword [ebp - 4], ecx
test al, 8
je 0x4eb694
and eax, 0xfffffff7
mov dword [ebp - 0x6d4], eax
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 0x6e0]
test ecx, ecx
je 0x4eb694
call fcn.0048103d
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 4], 0x5c
test al, 4
je 0x4eb6bd
push 0
and eax, 0xfffffffb
lea ecx, [ebp - 0x328]
push 1
mov dword [ebp - 0x6d4], eax
call fcn.00482a51
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 4], 0x5b
test al, 2
je 0x4eb6e6
push 0
and eax, 0xfffffffd
lea ecx, [ebp - 0x418]
push 1
mov dword [ebp - 0x6d4], eax
call fcn.00482a51
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 4], 0x5a
test al, 1
je 0x4eb709
push 0
and eax, 0xfffffffe
lea ecx, [ebp - 0x358]
push 1
mov dword [ebp - 0x6d4], eax
call fcn.00482a51
mov dword [ebp - 4], 0x59
test ebx, ebx
jns 0x4eb72f
push 0
and ebx, 0x7fffffff
lea ecx, [ebp - 0x250]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x58
test ebx, 0x40000000
je 0x4eb759
push 0
and ebx, 0xbfffffff
lea ecx, [ebp - 0x280]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 8
test ebx, 0x20000000
je 0x4ebecd
and ebx, 0xdfffffff
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x6d8], ebx
jmp 0x4ebec4
mov eax, dword [ebp - 0x720]
cmp dword [eax + 0x10], 2
je 0x4ebf3c
push 0x110
call fcn.00732133
pop ecx
mov dword [ebp - 0x724], eax
mov byte [ebp - 4], 0x20
test eax, eax
je 0x4eb985
push 0x84690c
lea ecx, [ebp - 0x130]
call fcn.004824e0
mov byte [ebp - 4], 0x21
or ebx, 0x400
push 0x846804
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0x22
or ebx, 0x800
push 0x84685c
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0x23
or ebx, 0x1000
push 0x846a84
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0x24
or ebx, 0x2000
push 0x846a88
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0x25
or ebx, 0x4000
mov dword [ebp - 0x6d8], ebx
lea ecx, [ebp - 0x6e0]
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x6e4], eax
lea eax, [ebp - 0x6f8]
push eax
call fcn.00481095
mov dword [ebp - 4], 0x27
or ebx, 0x8000
mov dword [ebp - 0x6d8], ebx
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x704], 1
mov dword [ebp - 0x6ec], 0xb
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x6f0], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x6e8], eax
lea eax, [ebp - 0x610]
push eax
call fcn.004d9f2c
mov edi, eax
mov dword [ebp - 4], 0x28
or ebx, 0x10000
lea eax, [ebp - 0x5e0]
mov dword [ebp - 0x6d8], ebx
mov ecx, dword [esi]
push eax
call fcn.004da331
mov esi, eax
mov dword [ebp - 4], 0x29
or ebx, 0x20000
mov dword [ebp - 0x6d8], ebx
lea eax, [ebp - 0x5b0]
mov ecx, dword [ebp - 0x700]
push eax
mov ecx, dword [ecx]
call fcn.004da395
mov ecx, eax
mov dword [ebp - 4], 0x2a
or ebx, 0x40000
mov dword [ebp - 0x6d8], ebx
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xd0]
push eax
mov eax, dword [ebp - 0x70c]
add eax, 0x98
push eax
lea eax, [ebp - 0xa0]
push eax
push edi
push esi
push ecx
mov ecx, dword [ebp - 0x724]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x704]
push eax
lea eax, [ebp - 0x6f0]
push eax
lea eax, [ebp - 0x6e8]
push eax
lea eax, [ebp - 0x6ec]
push eax
call fcn.005e3625
jmp 0x4eb987
xor eax, eax
mov dword [ebp - 4], 0x33
lea ecx, [ebp - 0x718]
push eax
call fcn.004efceb
mov dword [ebp - 4], 0x32
test ebx, 0x40000
je 0x4eb9c4
push 0
and ebx, 0xfffbffff
lea ecx, [ebp - 0x5b0]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x31
test ebx, 0x20000
je 0x4eb9ee
push 0
and ebx, 0xfffdffff
lea ecx, [ebp - 0x5e0]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x30
test ebx, 0x10000
je 0x4eba18
push 0
and ebx, 0xfffeffff
lea ecx, [ebp - 0x610]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
push 0x2f
pop eax
mov dword [ebp - 4], eax
test ebx, 0x8000
je 0x4eba44
and ebx, 0xffff7fff
mov dword [ebp - 0x6d8], ebx
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x6e0]
test ecx, ecx
je 0x4eba44
call fcn.0048103d
mov dword [ebp - 4], 0x2e
test ebx, 0x4000
je 0x4eba6b
push 0
and ebx, 0xffffbfff
lea ecx, [ebp - 0x70]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x2d
test ebx, 0x2000
je 0x4eba95
push 0
and ebx, 0xffffdfff
lea ecx, [ebp - 0xa0]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x2c
test ebx, 0x1000
je 0x4ebabf
push 0
and ebx, 0xffffefff
lea ecx, [ebp - 0xd0]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x2b
test ebx, 0x800
je 0x4ebae9
push 0
and ebx, 0xfffff7ff
lea ecx, [ebp - 0x100]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 8
test ebx, 0x400
je 0x4ebecd
and ebx, 0xfffffbff
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x6d8], ebx
jmp 0x4ebec4
mov eax, dword [ebp - 0x720]
cmp dword [eax + 0x10], 3
jne 0x4ebb55
lea eax, [ebp - 0x640]
push eax
call fcn.004ebf8a
mov byte [ebp - 4], 9
mov ecx, dword [esi]
add ecx, 0x60
cmp ecx, eax
je 0x4ebb42
push 0xffffffffffffffff
push 0
push eax
call fcn.004828c2
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x640]
push 0
push 1
call fcn.00482a51
mov ecx, dword [esi]
lea eax, [ebp - 0x220]
push eax
call fcn.004da331
mov byte [ebp - 4], 0xa
push 0x110
call fcn.00732133
pop ecx
mov dword [ebp - 0x6ec], eax
mov byte [ebp - 4], 0xb
test eax, eax
je 0x4ebd51
push 0x8466ec
lea ecx, [ebp - 0x1f0]
call fcn.004824e0
mov byte [ebp - 4], 0xc
or ebx, 2
push 0x84652c
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0xd
or ebx, 4
push 0x8465ac
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0xe
or ebx, 8
push 0x8468b4
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x6d8], ebx
call fcn.004824e0
mov dword [ebp - 4], 0xf
or ebx, 0x10
mov dword [ebp - 0x6d8], ebx
lea ecx, [ebp - 0x6e0]
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x6e4], eax
lea eax, [ebp - 0x6f8]
push eax
call fcn.00481095
mov dword [ebp - 4], 0x11
or ebx, 0x20
mov dword [ebp - 0x6d8], ebx
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x70c], 1
mov dword [ebp - 0x6e8], 0xa
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x704], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [esi]
mov dword [ebp - 0x6f0], eax
lea eax, [ebp - 0x4a8]
push eax
call fcn.004da363
mov ebx, eax
mov dword [ebp - 4], 0x12
lea eax, [ebp - 0x6d0]
mov esi, dword [ebp - 0x6d8]
or esi, 0x40
mov dword [ebp - 0x6d8], esi
mov ecx, dword [ebp - 0x6fc]
push eax
call fcn.004d9f2c
mov edi, eax
mov dword [ebp - 4], 0x13
or esi, 0x80
mov dword [ebp - 0x6d8], esi
lea eax, [ebp - 0x6a0]
mov ecx, dword [ebp - 0x700]
push eax
mov ecx, dword [ecx]
call fcn.004da331
mov esi, eax
mov dword [ebp - 4], 0x14
lea eax, [ebp - 0x670]
or dword [ebp - 0x6d8], 0x100
push eax
mov eax, dword [ebp - 0x700]
mov ecx, dword [eax]
call fcn.004da395
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x1f0]
or dword [ebp - 0x6d8], 0x200
push ecx
lea ecx, [ebp - 0x1c0]
push ecx
lea ecx, [ebp - 0x190]
push ecx
push ebx
lea ecx, [ebp - 0x220]
push ecx
mov ecx, dword [ebp - 0x6ec]
push edi
push esi
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x70c]
push eax
lea eax, [ebp - 0x704]
push eax
lea eax, [ebp - 0x6f0]
push eax
lea eax, [ebp - 0x6e8]
push eax
call fcn.005e3625
mov ebx, dword [ebp - 0x6d8]
jmp 0x4ebd53
xor eax, eax
mov dword [ebp - 4], 0x1e
lea ecx, [ebp - 0x718]
push eax
call fcn.004efceb
mov dword [ebp - 4], 0x1d
test ebx, 0x200
je 0x4ebd90
push 0
and ebx, 0xfffffdff
lea ecx, [ebp - 0x670]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x1c
test ebx, 0x100
je 0x4ebdba
push 0
and ebx, 0xfffffeff
lea ecx, [ebp - 0x6a0]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x1b
test bl, bl
jns 0x4ebde0
push 0
and ebx, 0xffffff7f
lea ecx, [ebp - 0x6d0]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x1a
test bl, 0x40
je 0x4ebe04
push 0
and ebx, 0xffffffbf
lea ecx, [ebp - 0x4a8]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
push 0x19
pop eax
mov dword [ebp - 4], eax
test bl, 0x20
je 0x4ebe2a
and ebx, 0xffffffdf
mov dword [ebp - 0x6d8], ebx
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x6e0]
test ecx, ecx
je 0x4ebe2a
call fcn.0048103d
mov dword [ebp - 4], 0x18
test bl, 0x10
je 0x4ebe4e
push 0
and ebx, 0xffffffef
lea ecx, [ebp - 0x160]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x17
test bl, 8
je 0x4ebe72
push 0
and ebx, 0xfffffff7
lea ecx, [ebp - 0x190]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0x16
test bl, 4
je 0x4ebe96
push 0
and ebx, 0xfffffffb
lea ecx, [ebp - 0x1c0]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov dword [ebp - 4], 0xa
test bl, 2
je 0x4ebeba
push 0
and ebx, 0xfffffffd
lea ecx, [ebp - 0x1f0]
push 1
mov dword [ebp - 0x6d8], ebx
call fcn.00482a51
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x220]
push 0
push 1
call fcn.00482a51
mov eax, dword [ebp - 0x718]
test eax, eax
je 0x4ebf36
mov dword [ebp - 0x6e4], eax
lea ecx, [ebp - 0x6e0]
lea eax, [ebp - 0x714]
push eax
call fcn.00481095
mov byte [ebp - 4], 0xc0
lea ecx, [ebp - 0x710]
call fcn.004c0aa3
mov byte [ebp - 4], 0xc1
lea ecx, [ebp - 0x6e4]
push ecx
mov ecx, dword [eax]
call fcn.005df507
mov byte [ebp - 4], 0xc0
mov ecx, dword [ebp - 0x70c]
test ecx, ecx
je 0x4ebf23
call fcn.0048103d
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x6e0]
test ecx, ecx
je 0x4ebf36
call fcn.0048103d
mov ecx, dword [ebp - 0x714]
mov byte [ebp - 4], 6
test ecx, ecx
je 0x4ebf49
call fcn.0048103d
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x728]
test ecx, ecx
je 0x4ebf5c
call fcn.0048103d
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x6f8]
test ecx, ecx
je 0x4ebf6f
call fcn.0048103d
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x71c]
test ecx, ecx
je 0x4ebf82
call fcn.0048103d
call fcn.00736cc2
ret 4