Function at 0x47e738
Capabilities:
Inspect section memory permissions
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4654
call fcn.004ad610
mov eax, dword [0x4f8004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x4628], ecx
mov ecx, edi
mov dword [ebp - 0x4634], edi
mov eax, edi
mov dword [ebp - 0x4634], edi
mov ebx, edi
mov dword [ebp - 0x4634], edi
mov esi, edi
mov dword [ebp - 0x4634], edi
mov dword [ebp - 0x4634], edi
mov dword [ebp - 0x4634], edi
mov dword [ebp - 0x4634], edi
mov dword [ebp - 0x4648], edi
mov dword [ebp - 0x4638], eax
mov dword [ebp - 0x4630], eax
mov dword [ebp - 0x463c], eax
mov dword [ebp - 0x4620], ebx
mov dword [ebp - 0x4618], eax
mov dword [ebp - 0x4604], ecx
mov dword [ebp - 0x45fc], ecx
mov dword [ebp - 0x460c], esi
mov dword [ebp - 0x4608], ecx
mov dword [ebp - 0x4640], ecx
mov dword [ebp - 0x4600], ecx
mov dword [ebp - 0x4614], edi
mov dword [ebp - 0x4610], edi
mov dword [ebp - 0x4634], edi
mov dword [ebp - 0x45f8], 0xfff
cmp dword [0x524ff0], edi
je 0x47e809
mov ecx, dword [0x524ff0]
mov dword [ebp - 0x461c], ecx
jmp 0x47f379
lea ecx, [ebp - 0x13c]
call fcn.0042a4d6
lea ecx, [ebp - 0x13c]
call fcn.00429fcf
mov ecx, 0x5255d0
call fcn.00429f07
lea ecx, [ebp - 0x124]
mov esi, eax
call fcn.0042a4d6
lea ecx, [ebp - 0x124]
call fcn.00429fcf
lea ecx, [ebp - 0x4c]
call fcn.0042a4d6
lea ecx, [ebp - 0x4c]
call fcn.00429fcf
mov al, byte [0x520d93]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 0x461c], al
push dword [ebp - 0x461c]
call fcn.0042a2bc
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x3ac]
call fcn.00429f2b
lea ecx, [ebp - 0x10c]
call fcn.0042a4d6
lea ecx, [ebp - 0x10c]
call fcn.00429fcf
mov al, byte [0x520a54]
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0x461c], al
push dword [ebp - 0x461c]
push 1
push edi
call fcn.0042a2f7
push eax
lea ecx, [ebp - 0x394]
call fcn.00429f2b
lea ecx, [ebp - 0xf4]
call fcn.0042a4d6
lea ecx, [ebp - 0xf4]
call fcn.00429fcf
lea ecx, [ebp - 0xdc]
call fcn.0042a4d6
lea ecx, [ebp - 0xdc]
call fcn.00429fcf
lea ecx, [ebp - 0x34]
call fcn.0042a4d6
lea ecx, [ebp - 0x34]
call fcn.00429fcf
mov al, byte [0x521094]
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x461c], al
push dword [ebp - 0x461c]
call fcn.0042a2bc
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.00429f2b
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x4cc]
push eax
push dword [ebp - 0x4628]
lea ecx, [ebp - 0x154]
call fcn.0042a3b3
mov al, byte [0x520d95]
lea ecx, [ebp - 0x154]
mov byte [ebp - 0x461c], al
push dword [ebp - 0x461c]
call fcn.0042a2bc
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0xc4]
call fcn.00429f2b
mov al, byte [0x521013]
lea ecx, [ebp - 0xc4]
mov byte [ebp - 0x461c], al
push dword [ebp - 0x461c]
call fcn.0042a2bc
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x37c]
call fcn.00429f2b
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x37c]
push eax
push dword [ebp - 0x4628]
lea ecx, [ebp - 0x364]
call fcn.0042a3b3
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x364]
push eax
push dword [ebp - 0x4628]
lea ecx, [ebp - 0x34c]
call fcn.0042a3b3
lea eax, [ebp - 0x3ac]
push eax
lea eax, [ebp - 0x34c]
push eax
push dword [ebp - 0x4628]
lea ecx, [ebp - 0x334]
call fcn.0042a3b3
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x334]
push eax
push dword [ebp - 0x4628]
lea ecx, [ebp - 0x2ec]
call fcn.0042a3b3
movzx eax, byte [esi + 1]
lea ecx, [ebp - 0x2ec]
push eax
call fcn.0042a2bc
lea eax, [ebp - 0x2ec]
push eax
call fcn.0042a6f9
pop ecx
push eax
lea ecx, [ebp - 0x31c]
call fcn.00429f2b
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x31c]
push eax
push dword [ebp - 0x4628]
lea ecx, [ebp - 0x2d4]
call fcn.0042a3b3
mov al, byte [0x520f10]
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 0x461c], al
push dword [ebp - 0x461c]
call fcn.0042a2bc
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2bc]
call fcn.00429f2b
mov ebx, 0x5255b8
mov ecx, ebx
call fcn.00429f07
lea ecx, [ebp - 0x2bc]
mov al, byte [eax + 1]
mov byte [ebp - 0x461c], al
push dword [ebp - 0x461c]
call fcn.0042a2bc
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x304]
call fcn.00429f2b
lea ecx, [ebp - 0x16c]
call fcn.0042a4d6
lea ecx, [ebp - 0x16c]
call fcn.00429fcf
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x304]
push eax
push dword [ebp - 0x4628]
lea ecx, [ebp - 0x514]
call fcn.0042a3b3
lea ecx, [ebp - 0x514]
call fcn.00429f07
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x526c3c], eax
test eax, eax
je 0x47ee68
mov esi, 0x5255d0
push 6
mov ecx, esi
call fcn.00429f12
push 6
mov ecx, esi
mov bl, byte [eax]
call fcn.00429f12
push 1
mov ecx, 0x525630
mov bh, byte [eax]
call fcn.00429f12
lea ecx, [ebp - 0x91c]
mov esi, eax
call fcn.00429f75
push eax
movsx eax, byte [0x5206d2]
push eax
call fcn.004970f0
pop ecx
push eax
movzx eax, byte [0x520d94]
lea ecx, [ebp - 0x1204]
push eax
call fcn.00429f75
mov edx, eax
lea ecx, [ebp - 0x11ec]
call fcn.0042a13c
pop ecx
push eax
lea ecx, [ebp - 0x11d4]
call fcn.00429f75
push eax
mov dl, bl
lea ecx, [ebp - 0x11bc]
call fcn.0042a111
pop ecx
push eax
movzx eax, byte [0x520e55]
lea ecx, [ebp - 0x11a4]
push eax
call fcn.00429f75
push eax
movzx eax, byte [0x520a54]
lea ecx, [ebp - 0x118c]
push eax
call fcn.00429f75
push eax
lea ecx, [ebp - 0x1174]
call fcn.00429f75
push eax
movzx eax, byte [0x520755]
lea ecx, [ebp - 0x115c]
push eax
call fcn.00429f75
push eax
movsx eax, byte [str.hshkdY]
push eax
call fcn.004970f0
pop ecx
push eax
movzx eax, byte [0x520d94]
lea ecx, [ebp - 0x1144]
push eax
call fcn.00429f75
mov edx, eax
lea ecx, [ebp - 0x112c]
call fcn.0042a13c
pop ecx
push eax
lea ecx, [ebp - 0x1114]
call fcn.00429f75
push eax
mov dl, bh
lea ecx, [ebp - 0x10fc]
call fcn.0042a111
pop ecx
push eax
movzx eax, byte [0x5207d6]
lea ecx, [ebp - 0x10e4]
push eax
call fcn.00429f75
push eax
movzx eax, byte [0x520e55]
lea ecx, [ebp - 0x10cc]
push eax
call fcn.00429f75
push eax
movzx eax, byte [0x520c18]
lea ecx, [ebp - 0x10b4]
push eax
call fcn.00429f75
mov edx, eax
lea ecx, [ebp - 0x109c]
call fcn.0042a13c
pop ecx
push eax
movsx eax, byte [0x5205d6]
push eax
call fcn.004970f0
pop ecx
push eax
lea ecx, [ebp - 0x1084]
call fcn.00429f75
push eax
lea ecx, [ebp - 0x106c]
call fcn.00429f75
push eax
movzx eax, byte [0x520e96]
lea ecx, [ebp - 0x1054]
push eax
call fcn.00429f75
mov dl, byte [0x520d93]
lea ecx, [ebp - 0x103c]
push eax
call fcn.0042a111
pop ecx
push eax
lea ecx, [ebp - 0x1024]
call fcn.00429f75
push eax
movsx eax, byte [esi]
push eax
call fcn.004970f0
pop ecx
mov dl, al
lea ecx, [ebp - 0x100c]
call fcn.0042a111
pop ecx
mov edx, eax
lea ecx, [ebp - 0xff4]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xfdc]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xfc4]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xfac]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xf94]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xf7c]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xf64]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xf4c]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xf34]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xf1c]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xf04]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xeec]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xed4]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xebc]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xea4]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xe8c]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xe74]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xe5c]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xe44]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xe2c]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xe14]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xdfc]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xde4]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xdcc]
call fcn.0042a167
pop ecx
mov ecx, eax
call fcn.00429f07
push eax
push dword [0x526c3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, eax
or eax, 0xffffffff
mov dword [ebp - 0x4630], eax
push 0x3f
pop eax
mov dword [ebp - 0x463c], eax
or eax, 0xffffffff
jmp 0x47f35e
push 1
mov ecx, ebx
call fcn.00429f12
push 1
mov ecx, 0x5255d0
mov bl, byte [eax]
call fcn.00429f12
lea ecx, [ebp - 0xdb4]
mov esi, eax
call fcn.00429f75
push eax
movzx eax, byte [0x520f10]
lea ecx, [ebp - 0xd9c]
push ebx
push eax
call fcn.00429f75
push eax
movzx eax, byte [esi]
lea ecx, [ebp - 0xd84]
push eax
call fcn.00429f75
push eax
movzx eax, byte [0x520d93]
lea ecx, [ebp - 0xd6c]
push eax
call fcn.00429f75
mov edx, eax
lea ecx, [ebp - 0xd54]
call fcn.0042a13c
pop ecx
push eax
lea ecx, [ebp - 0xd3c]
call fcn.00429f75
mov dl, byte [0x520a54]
lea ecx, [ebp - 0xd24]
push eax
call fcn.0042a111
pop ecx
push eax
lea ecx, [ebp - 0xd0c]
call fcn.00429f75
push eax
movzx eax, byte [0x521013]
lea ecx, [ebp - 0xcf4]
push eax
movzx eax, byte [0x520d95]
push eax
call fcn.00429f75
push eax
movzx eax, byte [0x521094]
lea ecx, [ebp - 0xcdc]
push eax
call fcn.00429f75
mov edx, eax
lea ecx, [ebp - 0xcc4]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xcac]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xc94]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xc7c]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xc64]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xc4c]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xc34]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xc1c]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xc04]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xbec]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0xbd4]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xbbc]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xba4]
call fcn.0042a167
pop ecx
mov ecx, eax
call fcn.00429f07
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x526c3c], eax
test eax, eax
je 0x47f34c
mov esi, 0x5255d0
push 6
mov ecx, esi
call fcn.00429f12
push 6
mov ecx, esi
mov bl, byte [eax]
call fcn.00429f12
push 1
mov ecx, 0x525630
mov bh, byte [eax]
call fcn.00429f12
lea ecx, [ebp - 0xb8c]
mov esi, eax
call fcn.00429f75
push eax
movsx eax, byte [0x5206d2]
push eax
call fcn.004970f0
pop ecx
push eax
movzx eax, byte [0x520d94]
lea ecx, [ebp - 0xb74]
push eax
call fcn.00429f75
mov edx, eax
lea ecx, [ebp - 0xb5c]
call fcn.0042a13c
pop ecx
push eax
lea ecx, [ebp - 0xb44]
call fcn.00429f75
push eax
mov dl, bl
lea ecx, [ebp - 0xb2c]
call fcn.0042a111
pop ecx
push eax
movzx eax, byte [0x520e55]
lea ecx, [ebp - 0xb14]
push eax
call fcn.00429f75
push eax
movzx eax, byte [0x520a54]
lea ecx, [ebp - 0xafc]
push eax
call fcn.00429f75
push eax
lea ecx, [ebp - 0xae4]
call fcn.00429f75
push eax
movzx eax, byte [0x520755]
lea ecx, [ebp - 0xacc]
push eax
call fcn.00429f75
push eax
movsx eax, byte [str.hshkdY]
push eax
call fcn.004970f0
pop ecx
push eax
movzx eax, byte [0x520d94]
lea ecx, [ebp - 0xab4]
push eax
call fcn.00429f75
mov edx, eax
lea ecx, [ebp - 0xa9c]
call fcn.0042a13c
pop ecx
push eax
lea ecx, [ebp - 0xa84]
call fcn.00429f75
push eax
mov dl, bh
lea ecx, [ebp - 0xa6c]
call fcn.0042a111
pop ecx
push eax
movzx eax, byte [0x5207d6]
lea ecx, [ebp - 0xa54]
push eax
call fcn.00429f75
push eax
movzx eax, byte [0x520e55]
lea ecx, [ebp - 0xa3c]
push eax
call fcn.00429f75
push eax
movzx eax, byte [0x520c18]
lea ecx, [ebp - 0xa24]
push eax
call fcn.00429f75
mov edx, eax
lea ecx, [ebp - 0xa0c]
call fcn.0042a13c
pop ecx
push eax
movsx eax, byte [0x5205d6]
push eax
call fcn.004970f0
pop ecx
push eax
lea ecx, [ebp - 0x9f4]
call fcn.00429f75
push eax
lea ecx, [ebp - 0x9dc]
call fcn.00429f75
push eax
movzx eax, byte [0x520e96]
lea ecx, [ebp - 0x9c4]
push eax
call fcn.00429f75
mov dl, byte [0x520d93]
lea ecx, [ebp - 0x9ac]
push eax
call fcn.0042a111
pop ecx
push eax
lea ecx, [ebp - 0x994]
call fcn.00429f75
push eax
movsx eax, byte [esi]
push eax
call fcn.004970f0
pop ecx
mov dl, al
lea ecx, [ebp - 0x97c]
call fcn.0042a111
pop ecx
mov edx, eax
lea ecx, [ebp - 0x964]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x94c]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x934]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x52c]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x904]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x8ec]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x8d4]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x8bc]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x8a4]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x88c]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x874]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x85c]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x844]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x82c]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x814]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x7fc]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x7e4]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x7cc]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x7b4]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x79c]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x784]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x76c]
call fcn.0042a167
pop ecx
mov edx, eax
lea ecx, [ebp - 0x754]
call fcn.0042a13c
pop ecx
mov edx, eax
lea ecx, [ebp - 0x73c]
call fcn.0042a167
pop ecx
mov ecx, eax
call fcn.00429f07
push eax
push dword [0x526c3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
or dword [ebp - 0x4620], 0xffffffff
mov ecx, eax
push 0xffffffffffffffc0
mov dword [ebp - 0x4618], 0xfff
pop eax
jmp 0x47f353
mov ecx, edi
mov eax, 0x1fffffc0
mov dword [ebp - 0x463c], eax
mov eax, 0x7fffff
push edi
mov dword [ebp - 0x4638], eax
call ecx
mov ebx, dword [ebp - 0x4620]
mov dword [ebp - 0x461c], eax
mov eax, dword [ebp - 0x4618]
test eax, 0x800
je 0x47f39c
and eax, 0xfffff7ff
lea ecx, [ebp - 0x73c]
mov dword [ebp - 0x4618], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x4618]
test eax, 0x400
je 0x47f3bf
and eax, 0xfffffbff
lea ecx, [ebp - 0x754]
mov dword [ebp - 0x4618], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x4618]
test eax, 0x200
je 0x47f3e2
and eax, 0xfffffdff
lea ecx, [ebp - 0x76c]
mov dword [ebp - 0x4618], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x4618]
test eax, 0x100
je 0x47f405
and eax, 0xfffffeff
lea ecx, [ebp - 0x784]
mov dword [ebp - 0x4618], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x4618]
test al, al
jns 0x47f425
and eax, 0xffffff7f
lea ecx, [ebp - 0x79c]
mov dword [ebp - 0x4618], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x4618]
test al, 0x40
je 0x47f443
and eax, 0xffffffbf
lea ecx, [ebp - 0x7b4]
mov dword [ebp - 0x4618], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x4618]
test al, 0x20
je 0x47f461
and eax, 0xffffffdf
lea ecx, [ebp - 0x7cc]
mov dword [ebp - 0x4618], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x4618]
test al, 0x10
je 0x47f47f
and eax, 0xffffffef
lea ecx, [ebp - 0x7e4]
mov dword [ebp - 0x4618], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x4618]
test al, 8
je 0x47f49d
and eax, 0xfffffff7
lea ecx, [ebp - 0x7fc]
mov dword [ebp - 0x4618], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x4618]
test al, 4
je 0x47f4bb
and eax, 0xfffffffb
lea ecx, [ebp - 0x814]
mov dword [ebp - 0x4618], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x4618]
test al, 2
je 0x47f4d9
and eax, 0xfffffffd
lea ecx, [ebp - 0x82c]
mov dword [ebp - 0x4618], eax
call fcn.00429fa9
mov eax, dword [ebp - 0x4618]
test al, 1
je 0x47f4f1
and eax, 0xfffffffe
lea ecx, [ebp - 0x844]
mov dword [ebp - 0x4618], eax
call fcn.00429fa9
test ebx, ebx
jns 0x47f506
lea ecx, [ebp - 0x85c]
and ebx, 0x7fffffff
call fcn.00429fa9
test ebx, 0x40000000
je 0x47f51f
lea ecx, [ebp - 0x874]
and ebx, 0xbfffffff
call fcn.00429fa9
test ebx, 0x20000000
je 0x47f538
lea ecx, [ebp - 0x88c]
and ebx, 0xdfffffff
call fcn.00429fa9
test ebx, 0x10000000
je 0x47f551
lea ecx, [ebp - 0x8a4]
and ebx, 0xefffffff
call fcn.00429fa9
test ebx, 0x8000000
je 0x47f56a
lea ecx, [ebp - 0x8bc]
and ebx, 0xf7ffffff
call fcn.00429fa9
test ebx, 0x4000000
je 0x47f583
lea ecx, [ebp - 0x8d4]
and ebx, 0xfbffffff
call fcn.00429fa9
test ebx, 0x2000000
je 0x47f59c
lea ecx, [ebp - 0x8ec]
and ebx, 0xfdffffff
call fcn.00429fa9
test ebx, 0x1000000
je 0x47f5b5
lea ecx, [ebp - 0x904]
and ebx, 0xfeffffff
call fcn.00429fa9
test ebx, 0x800000
je 0x47f5ce
lea ecx, [ebp - 0x52c]
and ebx, 0xff7fffff
call fcn.00429fa9
test ebx, 0x400000
je 0x47f5e7
lea ecx, [ebp - 0x934]
and ebx, 0xffbfffff
call fcn.00429fa9
test ebx, 0x200000
je 0x47f600
lea ecx, [ebp - 0x94c]
and ebx, 0xffdfffff
call fcn.00429fa9
test ebx, 0x100000
je 0x47f619
lea ecx, [ebp - 0x964]
and ebx, 0xffefffff
call fcn.00429fa9
test ebx, 0x80000
je 0x47f632
lea ecx, [ebp - 0x97c]
and ebx, 0xfff7ffff
call fcn.00429fa9
test ebx, 0x40000
je 0x47f64b
lea ecx, [ebp - 0x994]
and ebx, 0xfffbffff
call fcn.00429fa9
test ebx, 0x20000
je 0x47f664
lea ecx, [ebp - 0x9ac]
and ebx, 0xfffdffff
call fcn.00429fa9
test ebx, 0x10000
je 0x47f67d
lea ecx, [ebp - 0x9c4]
and ebx, 0xfffeffff
call fcn.00429fa9
test ebx, 0x8000
je 0x47f696
lea ecx, [ebp - 0x9dc]
and ebx, 0xffff7fff
call fcn.00429fa9
bt ebx, 0xe
jae 0x47f6ad
lea ecx, [ebp - 0x9f4]
and ebx, 0xffffbfff
call fcn.00429fa9
test ebx, 0x2000
je 0x47f6c6
lea ecx, [ebp - 0xa0c]
and ebx, 0xffffdfff
call fcn.00429fa9
bt ebx, 0xc
jae 0x47f6dd
lea ecx, [ebp - 0xa24]
and ebx, 0xffffefff
call fcn.00429fa9
test ebx, 0x800
je 0x47f6f6
lea ecx, [ebp - 0xa3c]
and ebx, 0xfffff7ff
call fcn.00429fa9
test ebx, 0x400
je 0x47f70f
lea ecx, [ebp - 0xa54]
and ebx, 0xfffffbff
call fcn.00429fa9
test ebx, 0x200
je 0x47f728
lea ecx, [ebp - 0xa6c]
and ebx, 0xfffffdff
call fcn.00429fa9
test ebx, 0x100
je 0x47f741
lea ecx, [ebp - 0xa84]
and ebx, 0xfffffeff
call fcn.00429fa9
test bl, bl
jns 0x47f756
lea ecx, [ebp - 0xa9c]
and ebx, 0xffffff7f
call fcn.00429fa9
test bl, 0x40
je 0x47f769
lea ecx, [ebp - 0xab4]
and ebx, 0xffffffbf
call fcn.00429fa9
test bl, 0x20
je 0x47f77c
lea ecx, [ebp - 0xacc]
and ebx, 0xffffffdf
call fcn.00429fa9
test bl, 0x10
je 0x47f78f
lea ecx, [ebp - 0xae4]
and ebx, 0xffffffef
call fcn.00429fa9
test bl, 8
je 0x47f7a2
lea ecx, [ebp - 0xafc]
and ebx, 0xfffffff7
call fcn.00429fa9
test bl, 4
je 0x47f7b5
lea ecx, [ebp - 0xb14]
and ebx, 0xfffffffb
call fcn.00429fa9
test bl, 2
je 0x47f7c8
lea ecx, [ebp - 0xb2c]
and ebx, 0xfffffffd
call fcn.00429fa9
test bl, 1
je 0x47f7d8
lea ecx, [ebp - 0xb44]
call fcn.00429fa9
mov ebx, dword [ebp - 0x463c]
test ebx, ebx
jns 0x47f7f3
lea ecx, [ebp - 0xb5c]
and ebx, 0x7fffffff
call fcn.00429fa9
test ebx, 0x40000000
je 0x47f80c
lea ecx, [ebp - 0xb74]
and ebx, 0xbfffffff
call fcn.00429fa9
test ebx, 0x20000000
je 0x47f825
lea ecx, [ebp - 0xb8c]
and ebx, 0xdfffffff
call fcn.00429fa9
test ebx, 0x10000000
je 0x47f83e
lea ecx, [ebp - 0xba4]
and ebx, 0xefffffff
call fcn.00429fa9
test ebx, 0x8000000
je 0x47f857
lea ecx, [ebp - 0xbbc]
and ebx, 0xf7ffffff
call fcn.00429fa9
test ebx, 0x4000000
je 0x47f870
lea ecx, [ebp - 0xbd4]
and ebx, 0xfbffffff
call fcn.00429fa9
test ebx, 0x2000000
je 0x47f889
lea ecx, [ebp - 0xbec]
and ebx, 0xfdffffff
call fcn.00429fa9
test ebx, 0x1000000
je 0x47f8a2
lea ecx, [ebp - 0xc04]
and ebx, 0xfeffffff
call fcn.00429fa9
test ebx, 0x800000
je 0x47f8bb
lea ecx, [ebp - 0xc1c]
and ebx, 0xff7fffff
call fcn.00429fa9
test ebx, 0x400000
je 0x47f8d4
lea ecx, [ebp - 0xc34]
and ebx, 0xffbfffff
call fcn.00429fa9
test ebx, 0x200000
je 0x47f8ed
lea ecx, [ebp - 0xc4c]
and ebx, 0xffdfffff
call fcn.00429fa9
test ebx, 0x100000
je 0x47f906
lea ecx, [ebp - 0xc64]
and ebx, 0xffefffff
call fcn.00429fa9
test ebx, 0x80000
je 0x47f91f
lea ecx, [ebp - 0xc7c]
and ebx, 0xfff7ffff
call fcn.00429fa9
test ebx, 0x40000
je 0x47f938
lea ecx, [ebp - 0xc94]
and ebx, 0xfffbffff
call fcn.00429fa9
test ebx, 0x20000
je 0x47f951
lea ecx, [ebp - 0xcac]
and ebx, 0xfffdffff
call fcn.00429fa9
test ebx, 0x10000
je 0x47f96a
lea ecx, [ebp - 0xcc4]
and ebx, 0xfffeffff
call fcn.00429fa9
test ebx, 0x8000
je 0x47f983
lea ecx, [ebp - 0xcdc]
and ebx, 0xffff7fff
call fcn.00429fa9
bt ebx, 0xe
jae 0x47f99a
lea ecx, [ebp - 0xcf4]
and ebx, 0xffffbfff
call fcn.00429fa9
test ebx, 0x2000
je 0x47f9b3
lea ecx, [ebp - 0xd0c]
and ebx, 0xffffdfff
call fcn.00429fa9
bt ebx, 0xc
jae 0x47f9ca
lea ecx, [ebp - 0xd24]
and ebx, 0xffffefff
call fcn.00429fa9
test ebx, 0x800
je 0x47f9e3
lea ecx, [ebp - 0xd3c]
and ebx, 0xfffff7ff
call fcn.00429fa9
test ebx, 0x400
je 0x47f9fc
lea ecx, [ebp - 0xd54]
and ebx, 0xfffffbff
call fcn.00429fa9
test ebx, 0x200
je 0x47fa15
lea ecx, [ebp - 0xd6c]
and ebx, 0xfffffdff
call fcn.00429fa9
test ebx, 0x100
je 0x47fa2e
lea ecx, [ebp - 0xd84]
and ebx, 0xfffffeff
call fcn.00429fa9
test bl, bl
jns 0x47fa43
lea ecx, [ebp - 0xd9c]
and ebx, 0xffffff7f
call fcn.00429fa9
test bl, 0x40
je 0x47fa56
lea ecx, [ebp - 0xdb4]
and ebx, 0xffffffbf
call fcn.00429fa9
test bl, 0x20
je 0x47fa69
lea ecx, [ebp - 0xdcc]
and ebx, 0xffffffdf
call fcn.00429fa9
test bl, 0x10
je 0x47fa7c
lea ecx, [ebp - 0xde4]
and ebx, 0xffffffef
call fcn.00429fa9
test bl, 8
je 0x47fa8f
lea ecx, [ebp - 0xdfc]
and ebx, 0xfffffff7
call fcn.00429fa9
test bl, 4
je 0x47fa9f
lea ecx, [ebp - 0xe14]
call fcn.00429fa9
test bl, 2
je 0x47faaf
lea ecx, [ebp - 0xe2c]
call fcn.00429fa9
test bl, 1
je 0x47fabf
lea ecx, [ebp - 0xe44]
call fcn.00429fa9
mov ebx, dword [ebp - 0x4630]
test ebx, ebx
jns 0x47fada
lea ecx, [ebp - 0xe5c]
and ebx, 0x7fffffff
call fcn.00429fa9
test ebx, 0x40000000
je 0x47faf3
lea ecx, [ebp - 0xe74]
and ebx, 0xbfffffff
call fcn.00429fa9
test ebx, 0x20000000
je 0x47fb0c
lea ecx, [ebp - 0xe8c]
and ebx, 0xdfffffff
call fcn.00429fa9
test ebx, 0x10000000
je 0x47fb25
lea ecx, [ebp - 0xea4]
and ebx, 0xefffffff
call fcn.00429fa9
test ebx, 0x8000000
je 0x47fb3e
lea ecx, [ebp - 0xebc]
and ebx, 0xf7ffffff
call fcn.00429fa9
test ebx, 0x4000000
je 0x47fb57
lea ecx, [ebp - 0xed4]
and ebx, 0xfbffffff
call fcn.00429fa9
test ebx, 0x2000000
je 0x47fb70
lea ecx, [ebp - 0xeec]
and ebx, 0xfdffffff
call fcn.00429fa9
test ebx, 0x1000000
je 0x47fb89
lea ecx, [ebp - 0xf04]
and ebx, 0xfeffffff
call fcn.00429fa9
test ebx, 0x800000
je 0x47fba2
lea ecx, [ebp - 0xf1c]
and ebx, 0xff7fffff
call fcn.00429fa9
test ebx, 0x400000
je 0x47fbbb
lea ecx, [ebp - 0xf34]
and ebx, 0xffbfffff
call fcn.00429fa9
test ebx, 0x200000
je 0x47fbd4
lea ecx, [ebp - 0xf4c]
and ebx, 0xffdfffff
call fcn.00429fa9
test ebx, 0x100000
je 0x47fbed
lea ecx, [ebp - 0xf64]
and ebx, 0xffefffff
call fcn.00429fa9
test ebx, 0x80000
je 0x47fc06
lea ecx, [ebp - 0xf7c]
and ebx, 0xfff7ffff
call fcn.00429fa9
test ebx, 0x40000
je 0x47fc1f
lea ecx, [ebp - 0xf94]
and ebx, 0xfffbffff
call fcn.00429fa9
test ebx, 0x20000
je 0x47fc38
lea ecx, [ebp - 0xfac]
and ebx, 0xfffdffff
call fcn.00429fa9
test ebx, 0x10000
je 0x47fc51
lea ecx, [ebp - 0xfc4]
and ebx, 0xfffeffff
call fcn.00429fa9
test ebx, 0x8000
je 0x47fc6a
lea ecx, [ebp - 0xfdc]
and ebx, 0xffff7fff
call fcn.00429fa9
bt ebx, 0xe
jae 0x47fc81
lea ecx, [ebp - 0xff4]
and ebx, 0xffffbfff
call fcn.00429fa9
test ebx, 0x2000
je 0x47fc9a
lea ecx, [ebp - 0x100c]
and ebx, 0xffffdfff
call fcn.00429fa9
bt ebx, 0xc
jae 0x47fcb1
lea ecx, [ebp - 0x1024]
and ebx, 0xffffefff
call fcn.00429fa9
test ebx, 0x800
je 0x47fcca
lea ecx, [ebp - 0x103c]
and ebx, 0xfffff7ff
call fcn.00429fa9
test ebx, 0x400
je 0x47fce3
lea ecx, [ebp - 0x1054]
and ebx, 0xfffffbff
call fcn.00429fa9
test ebx, 0x200
je 0x47fcfc
lea ecx, [ebp - 0x106c]
and ebx, 0xfffffdff
call fcn.00429fa9
test ebx, 0x100
je 0x47fd15
lea ecx, [ebp - 0x1084]
and ebx, 0xfffffeff
call fcn.00429fa9
test bl, bl
jns 0x47fd2a
lea ecx, [ebp - 0x109c]
and ebx, 0xffffff7f
call fcn.00429fa9
test bl, 0x40
je 0x47fd3d
lea ecx, [ebp - 0x10b4]
and ebx, 0xffffffbf
call fcn.00429fa9
test bl, 0x20
je 0x47fd50
lea ecx, [ebp - 0x10cc]
and ebx, 0xffffffdf
call fcn.00429fa9
test bl, 0x10
je 0x47fd63
lea ecx, [ebp - 0x10e4]
and ebx, 0xffffffef
call fcn.00429fa9
test bl, 8
je 0x47fd76
lea ecx, [ebp - 0x10fc]
and ebx, 0xfffffff7
call fcn.00429fa9
test bl, 4
je 0x47fd89
lea ecx, [ebp - 0x1114]
and ebx, 0xfffffffb
call fcn.00429fa9
test bl, 2
je 0x47fd9c
lea ecx, [ebp - 0x112c]
and ebx, 0xfffffffd
call fcn.00429fa9
test bl, 1
je 0x47fdac
lea ecx, [ebp - 0x1144]
call fcn.00429fa9
mov ebx, dword [ebp - 0x4638]
test ebx, ebx
jns 0x47fdc7
lea ecx, [ebp - 0x115c]
and ebx, 0x7fffffff
call fcn.00429fa9
test ebx, 0x40000000
je 0x47fde0
lea ecx, [ebp - 0x1174]
and ebx, 0xbfffffff
call fcn.00429fa9
test ebx, 0x20000000
je 0x47fdf9
lea ecx, [ebp - 0x118c]
and ebx, 0xdfffffff
call fcn.00429fa9
test ebx, 0x10000000
je 0x47fe12
lea ecx, [ebp - 0x11a4]
and ebx, 0xefffffff
call fcn.00429fa9
test ebx, 0x8000000
je 0x47fe2b
lea ecx, [ebp - 0x11bc]
and ebx, 0xf7ffffff
call fcn.00429fa9
test ebx, 0x4000000
je 0x47fe44
lea ecx, [ebp - 0x11d4]
and ebx, 0xfbffffff
call fcn.00429fa9
test ebx, 0x2000000
je 0x47fe5d
lea ecx, [ebp - 0x11ec]
and ebx, 0xfdffffff
call fcn.00429fa9
test ebx, 0x1000000
je 0x47fe76
lea ecx, [ebp - 0x1204]
and ebx, 0xfeffffff
call fcn.00429fa9
test ebx, 0x800000
je 0x47fe8f
lea ecx, [ebp - 0x91c]
and ebx, 0xff7fffff
call fcn.00429fa9
test ebx, 0x400000
je 0x47fea8
lea ecx, [ebp - 0x514]
and ebx, 0xffbfffff
call fcn.00429fa9
test ebx, 0x200000
je 0x47fec1
lea ecx, [ebp - 0x304]
and ebx, 0xffdfffff
call fcn.00429fa9
test ebx, 0x100000
je 0x47feda
lea ecx, [ebp - 0x2bc]
and ebx, 0xffefffff
call fcn.00429fa9
test ebx, 0x80000
je 0x47fef3
lea ecx, [ebp - 0x2d4]
and ebx, 0xfff7ffff
call fcn.00429fa9
test ebx, 0x40000
je 0x47ff0c
lea ecx, [ebp - 0x31c]
and ebx, 0xfffbffff
call fcn.00429fa9
test ebx, 0x20000
je 0x47ff25
lea ecx, [ebp - 0x2ec]
and ebx, 0xfffdffff
call fcn.00429fa9
test ebx, 0x10000
je 0x47ff3e
lea ecx, [ebp - 0x334]
and ebx, 0xfffeffff
call fcn.00429fa9
test ebx, 0x8000
je 0x47ff57
lea ecx, [ebp - 0x34c]
and ebx, 0xffff7fff
call fcn.00429fa9
bt ebx, 0xe
jae 0x47ff6e