Function at 0x47ad50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x20
push ebx
mov ebx, dword [esp + 0x2c]
push esi
push edi
mov edi, ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0
je 0x47ade9
mov eax, dword [ecx + 0x20]
test eax, eax
je 0x47ad89
mov edx, dword [edi + 0x3e0]
cmp eax, dword [edx + 0xdd8]
je 0x47ae19
lea esi, [ecx + 0x10]
mov dword [esp + 0x10], esi
mov esi, dword [esi]
test esi, esi
je 0x47ade9
mov eax, dword [esi + 0x1c]
cmp eax, dword [ebx + 0xe8]
jge 0x47ada6
add esi, 0xc
jmp 0x47ad8c
mov ecx, dword [esi + 0x1c]
cmp ecx, dword [ebx + 0xe8]
jne 0x47ade9
mov eax, dword [edi + 0x3e0]
mov edx, dword [eax]
push ecx
push 0x8f
push 2
push eax
call dword [edx + 0xe0]
mov eax, dword [esi + 0x18]
mov ecx, dword [eax + 0x68]
add esp, 0x10
test ecx, ecx
je 0x47ade9
mov eax, dword [ecx + 0x210]
test eax, eax
jne 0x47ade4
call fcn.004a0d20
cmp eax, 6
jge 0x47ae19
mov eax, dword [ebx + 0xe0]
test eax, eax
jne 0x47ae24
mov eax, dword [edi + 0x3e0]
mov ecx, dword [eax]
push 0x90
push 2
push eax
call dword [ecx + 0xe0]
mov ecx, dword [edi + 0x3e0]
add esp, 0xc
push 1
call fcn.004b5010
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x20
ret 8
mov edx, dword [edi + 0x3e0]
mov eax, dword [edx + 0x1c]
push ebp
push 0
push eax
push 0x90
call fcn.005dd390
add esp, 0xc
test eax, eax
je 0x47ae4f
mov ecx, eax
call fcn.0048fd70
mov ebp, eax
test ebp, ebp
jne 0x47ae5b
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x20
ret 8
push 0
mov ecx, ebp
call fcn.00498950
mov esi, dword [ebp + 0x54]
mov ecx, dword [esp + 0x34]
and esi, 0xfffffdff
lea eax, [ebp + 8]
mov dword [ebp + 0x54], esi
cmp dword [eax], ecx
jne 0x47ae83
test ecx, ecx
jne 0x47ae83
mov dword [eax], ecx
jmp 0x47ae8d
push ecx
push eax
call fcn.005dc9a0
add esp, 8
mov eax, dword [ebp + 0xc]
test eax, eax
lea esi, [ebp + 0xc]
jne 0x47ae9f
mov dword [esi], 0
jmp 0x47aeaa
push 0
push esi
call fcn.005dc9a0
add esp, 8
mov eax, dword [esp + 0x34]
test eax, eax
je 0x47af09
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
test eax, eax
je 0x47aee6
mov ecx, dword [eax + 8]
mov edx, dword [ecx + 4]
mov ecx, dword [edx]
test ecx, ecx
je 0x47aee6
cmp eax, ecx
jne 0x47aee6
cmp dword [esi], 0
jne 0x47aed9
mov dword [esi], 0
jmp 0x47aef2
push 0
push esi
call fcn.005dc9a0
add esp, 8
jmp 0x47aef2
mov eax, dword [esp + 0x14]
push eax
mov ecx, esi
call fcn.00479150
mov ecx, dword [esp + 0x14]
push ebp
call fcn.00479180
mov ecx, dword [esp + 0x34]
or dword [ecx + 0x54], 0x1000
jmp 0x47af0f
mov ecx, dword [edi + 0xe0]
call fcn.0044bea0
mov ecx, ebp
push eax
call fcn.0044d900
lea ecx, [ebp + 0x7c]
push ecx
call fcn.0043d6a0
mov edx, dword [ebx + 0xe0]
mov dword [ebp + 0x18], edx
lea edi, [ebp + 0x30]
mov ecx, 7
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0xe8]
xor ecx, ecx
mov dword [ebp + 0x1c], eax
mov cx, word [ebx + 0xec]
add esp, 4
push ecx
mov ecx, ebp
call fcn.00495a00
mov dword [ebp + 0x54], 0
test dword [ebx + 0xdc], 0x20000
mov edi, 0x400
je 0x47af72
mov dword [ebp + 0x54], edi
mov edx, dword [ebx + 0x118]
push edx
mov ecx, ebp
call fcn.0048cb80
mov al, byte [ebx + 0xf0]
test al, al
mov eax, dword [ebp + 0x54]
je 0x47af92
or eax, 4
jmp 0x47af95
and eax, 0xfffffffb
mov dword [ebp + 0x54], eax
mov cl, byte [ebx + 0x10c]
test cl, cl
je 0x47afa9
or eax, 0x80
jmp 0x47afae
and eax, 0xffffff7f
or eax, 0x10
mov dword [ebp + 0x54], eax
mov ecx, dword [ebx + 0xe0]
test byte [ecx + 0x7f], 1
je 0x47afc7
or eax, 0x200000
jmp 0x47afcc
and eax, 0xffdfffff
mov dword [ebp + 0x54], eax
mov edx, dword [ebx + 0xe0]
cmp dword [edx + 0x78], 0x61
jne 0x47afe2
or eax, 0x400000
jmp 0x47afe7
and eax, 0xffbfffff
mov dword [ebp + 0x54], eax
mov eax, dword [ebp + 4]
xor esi, esi
push esi
mov ecx, ebp
mov dword [eax + 0x1c], esi
call fcn.004951f0
mov ecx, dword [ebp + 0x10]
cmp ecx, esi
lea eax, [ebp + 0x10]
jne 0x47b008
mov dword [eax], esi
jmp 0x47b012
push esi
push eax
call fcn.005dc9a0
add esp, 8
push esi
mov ecx, ebp
call fcn.00495970
push esi
mov ecx, ebp
mov dword [ebp + 0x4c], esi
mov dword [ebp + 0x50], esi
call fcn.00495270
fld qword [0x5f66c8]
fstp qword [ebp + 0x58]
push esi
fld qword [0x5f79d8]
mov ecx, ebp
fstp qword [ebp + 0x68]
mov dword [ebp + 0x60], esi
fld qword [0x5f79d8]
mov dword [ebp + 0x64], esi
fstp qword [ebp + 0x70]
call fcn.004957d0
mov ecx, dword [ebp + 0x18]
cmp dword [ecx + 0x5c], esi
je 0x47b06f
lea edx, [esp + 0x20]
push edx
call fcn.0048ca50
lea eax, [esp + 0x20]
push eax
mov ecx, ebp
call fcn.004955a0
mov ecx, ebp
call fcn.004989e0
push 0xffffffffffffffff
mov ecx, ebp
call fcn.00495750
push esi
mov ecx, ebp
call fcn.00495300
xor ecx, ecx
mov cl, byte [ebx + 0x10d]
push ecx
mov ecx, ebp
call fcn.00495520
test dword [ebx + 0xdc], edi
mov edi, dword [esp + 0x10]
je 0x47b129
mov byte [edi + 0x3ec], 1
mov edx, dword [ebp + 4]
cmp dword [edx + 0x20], esi
jne 0x47b0f9
push 0x3c8
call fcn.005dd330
mov esi, eax
add esp, 4
test esi, esi
je 0x47b0ed
mov eax, dword [edi + 0x3e0]
push 0
push eax
mov ecx, ebp
call fcn.0048e800
mov ecx, dword [edi + 0x3e4]
mov edx, dword [ecx + 0x78]
push eax
push edx
mov ecx, esi
call fcn.00449060
jmp 0x47b0ef
xor eax, eax
push eax
mov ecx, ebp
call fcn.00495300
xor esi, esi
mov al, byte [ebx + 0x114]
test al, al
je 0x47b114
mov eax, dword [ebp + 4]
mov eax, dword [eax + 0x20]
mov ecx, dword [eax + 0x368]
or ecx, 2
jmp 0x47b123
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + 0x20]
mov ecx, dword [eax + 0x368]
and ecx, 0xfffffffd
mov dword [eax + 0x368], ecx
mov eax, dword [ebx + 0xdc]
test ah, 1
je 0x47b1c9
cmp dword [ebx + 0x110], esi
je 0x47b1c9
mov byte [edi + 0x3ec], 1
mov edx, dword [ebp + 4]
cmp dword [edx + 0x20], esi
jne 0x47b194
push 0x3c8
call fcn.005dd330
mov esi, eax
add esp, 4
test esi, esi
je 0x47b18a
mov eax, dword [edi + 0x3e0]
push 0
push eax
mov ecx, ebp
call fcn.0048e800
mov ecx, dword [edi + 0x3e4]
mov edx, dword [ecx + 0x78]
push eax
push edx
mov ecx, esi
call fcn.00449060
jmp 0x47b18c
xor eax, eax
push eax
mov ecx, ebp
call fcn.00495300
mov eax, dword [ebp + 4]
mov ecx, dword [eax + 0x20]
mov dword [ecx + 0x368], 0x10
mov eax, dword [ebp + 4]
mov edx, dword [ebx + 0x110]
mov ecx, dword [eax + 0x20]
push edx
add ecx, 0x380
call fcn.00448fb0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + 0x20]
or dword [eax + 0x32c], 8
mov edi, dword [esp + 0x38]
lea edx, [edi + 0x1c]
push edx
mov ecx, ebp
call fcn.00495850
mov esi, dword [esp + 0x34]
test esi, esi
mov eax, dword [ebp + 0x18]
mov ebx, dword [eax + 0x68]
mov dword [esp + 0x14], 0
je 0x47b23b
mov eax, dword [ebx + 0x24c]
test eax, eax
je 0x47b23b
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47b209
mov ecx, ebx
call fcn.004a0d20
cmp eax, 6
jl 0x47b23b
mov ecx, esi
test ecx, ecx
je 0x47b23b
mov eax, dword [ecx + 0x20]
test eax, eax
je 0x47b23b
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x47b23b
mov edx, dword [eax + 0x24c]
test edx, edx
je 0x47b231
mov ecx, dword [ecx + 8]
jmp 0x47b210
mov ecx, dword [ecx + 0x20]
mov edx, dword [ecx + 0x2c]
mov dword [esp + 0x14], edx
mov ecx, dword [edi + 0xf4]
add edi, 0xf4
mov eax, ecx
and eax, 7
cmp eax, 7
jne 0x47b25c
and ecx, 0xfffffff8
mov ecx, dword [ecx + 0xc]
mov eax, ecx
and eax, 7
cmp eax, 2
jne 0x47b33d
and ecx, 0x1f
cmp ecx, eax
jne 0x47b33d
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x47b284
mov ecx, dword [eax + 0x78]
cmp ecx, 6
je 0x47b28e
cmp ecx, 0x61
je 0x47b28e
cmp dword [eax + 0x78], 2
je 0x47b28e
xor esi, esi
jmp 0x47b293
mov esi, 1
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47b2a4
mov ecx, ebx
call fcn.004a0d20
cmp eax, 6
jl 0x47b2bb
test esi, esi
jne 0x47b2b6
mov eax, dword [ebp + 0x18]
cmp dword [eax + 0x78], 9
jne 0x47b2bb
mov esi, 1
mov al, byte [ebx + 0x5ee]
test al, al
jne 0x47b2c9
test esi, esi
je 0x47b33d
xor eax, eax
push str.instance
lea ecx, [esp + 0x24]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
call fcn.0043b6e0
mov esi, dword [esp + 0x10]
mov edx, dword [esi + 0x378]
inc edx
mov eax, edx
push 0xa
push eax
lea ecx, [esp + 0x28]
mov dword [esi + 0x378], edx
call fcn.0043b3c0
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, dword [ebx + 0xd4]
lea edx, [esp + 0x20]
push edx
call fcn.004bf3e0
push eax
lea ecx, [ebp + 0x14]
call fcn.00425280
mov edx, dword [ebp + 0x54]
mov eax, dword [esp + 0x20]
or edx, 0x80000
push eax
mov dword [ebp + 0x54], edx
call fcn.005dd350
add esp, 4
jmp 0x47b368
mov ecx, edi
call fcn.00452170
test al, al
jne 0x47b364
mov ecx, dword [edi]
push ecx
mov ecx, dword [ebx + 0xd4]
lea edx, [esp + 0x20]
push edx
call fcn.0040e130
push eax
lea ecx, [ebp + 0x14]
call fcn.00425280
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x34]
test eax, eax
je 0x47b37e
add eax, 0x20
lea ecx, [ebp + 0x20]
push eax
call fcn.00479150
jmp 0x47b39b
mov ecx, dword [ebp + 0x20]
test ecx, ecx
lea eax, [ebp + 0x20]
jne 0x47b390
mov dword [eax], 0
jmp 0x47b39b
push 0
push eax
call fcn.005dc9a0
add esp, 8
mov eax, dword [esp + 0x38]
test byte [eax + 0xdc], 0x40
je 0x47b3b1
movzx eax, word [eax + 0xee]
jmp 0x47b3b3
xor eax, eax
push eax
mov ecx, ebp
call fcn.004954a0
mov ecx, dword [ebp + 0x24]
test ecx, ecx
lea eax, [ebp + 0x24]
jne 0x47b3cd
mov dword [eax], 0
jmp 0x47b3d8
push 0
push eax
call fcn.005dc9a0
add esp, 8
mov ecx, dword [ebp + 0x54]
and ecx, 0xffffefff
push 0
mov dword [ebp + 0x54], ecx
push 1
mov ecx, ebp
mov dword [ebp + 0x28], 0
call fcn.00491960
mov ecx, dword [ebp + 0x18]
mov eax, dword [ecx + 0x78]
cmp eax, 0x62
ja case.0x47b40c.1
movzx eax, byte [eax + 0x47bcb4]
jmp dword [eax*4 + 0x47bc94]
mov ecx, dword [ecx + 0x68]
mov al, byte [ecx + 0x5ee]
test al, al
je case.0x47b40c.1
mov ecx, esi
push ebp
call fcn.0047ac20
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 8
push 0xffff
mov ecx, ebp
call fcn.00495420
push 0x2c
call fcn.005dd330
mov edx, eax
add esp, 4
xor eax, eax
test edx, edx
je 0x47b461
mov ecx, 0xb
mov edi, edx
rep stosd dword es:[edi], eax
mov eax, edx
push eax
mov ecx, ebp
call fcn.004950b0
mov edx, dword [ebp + 4]
mov ecx, dword [edx + 8]
call fcn.00475cd0
push ebp
call fcn.004da260
mov eax, dword [esi + 0x3e0]
mov eax, dword [eax + 0x1c]
push 0
push eax
push 0xd8
call fcn.005dd390
add esp, 0x10
test eax, eax
je case.0x47b40c.1
mov edi, dword [esp + 0x10]
mov ecx, dword [edi + 0x3e0]
push ecx
mov ecx, eax
call fcn.004ab7f0
mov esi, eax
test esi, esi
je case.0x47b40c.1
mov ecx, esi
call fcn.004a8ca0
push esi
lea ecx, [ebp + 0x20]
call fcn.00479180
push ebx
mov ecx, esi
call fcn.004a8b90
mov ecx, ebp
call fcn.0048e800
push eax
mov ecx, esi
call fcn.004a8c20
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esi + 0x30]
call fcn.00479180
mov edx, dword [ebp + 0x1c]
push ebp
mov ecx, esi
mov dword [esi + 0x48], edx
call fcn.004791e0
xor ebx, ebx
mov ecx, ebp
mov dword [esi + 0x34], ebx
mov dword [esi + 4], ebx
mov dword [esi + 0x44], ebx
mov word [esi + 0x2a], 2
call fcn.004931f0
mov eax, dword [esi + 0x2c]
mov ecx, dword [eax + 0xb4]
mov edx, dword [ecx + 0x2c]
push edx
jmp 0x47b67a
movzx edi, word [esi + 0x14c]
mov eax, dword [ebp + 0x1c]
cmp eax, edi
mov edx, 1
jne 0x47b567
mov edi, dword [ebp + 8]
cmp edi, dword [esi + 0x144]
jne 0x47b567
cmp ecx, dword [esi + 0x148]
jne 0x47b567
mov edi, dword [ebp + 4]
mov di, word [edi + 0x5a]
cmp di, word [esi + 0x14e]
jne 0x47b567
mov edx, dword [esi + 0x140]
mov dword [esi + 0x13c], ebp
jmp 0x47b5a1
movzx edi, word [esi + 0x160]
cmp eax, edi
jne 0x47b5a1
mov eax, dword [ebp + 8]
cmp eax, dword [esi + 0x158]
jne 0x47b5a1
cmp ecx, dword [esi + 0x15c]
jne 0x47b5a1
mov ecx, dword [ebp + 4]
mov ax, word [ecx + 0x5a]
cmp ax, word [esi + 0x162]
jne 0x47b5a1
mov edx, dword [esi + 0x154]
mov dword [esi + 0x150], ebp
mov ecx, dword [ebp + 0x18]
mov eax, dword [ecx + 0x68]
mov cl, byte [eax + 0x5ee]
test cl, cl
jne 0x47b5bc
push 0
push edx
push ebp
mov ecx, esi
call fcn.0047c790
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47b5cd
mov ecx, ebx
call fcn.004a0d20
cmp eax, 6
jl case.0x47b40c.1
mov ecx, dword [esi + 0x3e0]
mov eax, dword [ecx + 0x1c]
push 0
push eax
push 0xd8
call fcn.005dd390
add esp, 0xc
test eax, eax
je case.0x47b40c.1
mov edi, dword [esp + 0x10]
mov ecx, dword [edi + 0x3e0]
push ecx
mov ecx, eax
call fcn.004ab7f0
mov esi, eax
test esi, esi
je case.0x47b40c.1
mov ecx, esi
call fcn.004a8ca0
push esi
lea ecx, [ebp + 0x20]
call fcn.00479180
push ebx
mov ecx, esi
call fcn.004a8b90
mov ecx, ebp
call fcn.0048e800
push eax
mov ecx, esi
call fcn.004a8c20
mov edx, dword [esp + 0x14]
push edx
lea ecx, [esi + 0x30]
call fcn.00479180
mov eax, dword [ebp + 0x1c]
push ebp
mov ecx, esi
mov dword [esi + 0x48], eax
call fcn.004791e0
xor ebx, ebx
mov ecx, ebp
mov dword [esi + 0x34], ebx
mov dword [esi + 4], ebx
mov dword [esi + 0x44], ebx
mov word [esi + 0x2a], 2
call fcn.004931f0
mov ecx, dword [esi + 0x2c]
mov edx, dword [ecx + 0xb4]
mov eax, dword [edx + 0x2c]
push eax
mov ecx, dword [esi + 0xb4]
call fcn.004a88a0
cmp dword [edi + 0x11c], ebx
jne case.0x47b40c.1
mov ecx, edi
push ebp
call fcn.0047ac20
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 8
mov ecx, ebp
call fcn.004962a0
mov edx, dword [esi + 0x11c]
xor edi, edi
test edx, edx
je 0x47b6e4
mov eax, ebp
lea ebx, [ebx]
mov ecx, dword [eax + 8]
cmp edx, ecx
je 0x47b6cd
mov eax, ecx
test eax, eax
jne 0x47b6c0
xor ecx, ecx
test eax, eax
setne cl
mov edi, ecx
test edi, edi
je 0x47b6e4
mov dword [esi + 0x120], 1
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47b6f5
mov ecx, ebx
call fcn.004a0d20
cmp eax, 6
jl 0x47b821
mov edx, dword [esi + 0x3e0]
mov eax, dword [edx + 0x1c]
push 0
push eax
push 0xd8
call fcn.005dd390
add esp, 0xc
test eax, eax
je case.0x47b40c.1
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x3e0]
push ecx
mov ecx, eax
call fcn.004ab7f0
mov esi, eax
test esi, esi
je case.0x47b40c.1
mov ecx, esi
call fcn.004a8ca0
push esi
lea ecx, [ebp + 0x20]
call fcn.00479180
push ebx
mov ecx, esi
call fcn.004a8b90
mov ecx, ebp
call fcn.0048e800
push eax
mov ecx, esi
call fcn.004a8c20
mov edx, dword [esp + 0x14]
push edx
lea ecx, [esi + 0x30]
call fcn.00479180
mov eax, dword [ebp + 0x1c]
push ebp
mov ecx, esi
mov dword [esi + 0x48], eax
call fcn.004791e0
xor ebx, ebx
mov ecx, ebp
mov dword [esi + 0x34], ebx
mov dword [esi + 0x44], ebx
mov dword [esi + 4], ebx
mov word [esi + 0x2a], 2
call fcn.004931f0
mov ecx, dword [esi + 0x2c]
mov edx, dword [ecx + 0xb4]
mov eax, dword [edx + 0x2c]
mov ecx, dword [esi + 0xb4]
push eax
call fcn.004a88a0
cmp edi, ebx
jne 0x47b7c0
mov ecx, dword [ebp + 4]
mov ecx, dword [ecx + 0x18]
test ecx, ecx
je 0x47b7c0
call fcn.00432d00
mov esi, dword [esp + 0x10]
mov eax, dword [esi + 0x11c]
test eax, eax
jne case.0x47b40c.1
push ebp
mov ecx, esi
call fcn.0047ac20
mov eax, dword [esi + 0x11c]
test eax, eax
jne case.0x47b40c.1
mov eax, dword [esi + 0x3e0]
test eax, eax
je case.0x47b40c.1
lea ecx, [eax + 0x24]
call fcn.004568b0
test eax, eax
je case.0x47b40c.1
mov ecx, dword [esi + 0x3e0]
push ebp
add ecx, 0x24
call fcn.0045c160
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 8
test edi, edi
jne case.0x47b40c.1
mov edx, dword [ebp + 4]
mov ecx, dword [edx + 0x18]
test ecx, ecx
je case.0x47b40c.1
call fcn.00432d00
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 8
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0xdc]
xor edi, edi
test ecx, 0x10000
mov dword [esp + 0x34], ebx
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
je 0x47b902
mov ecx, dword [ebx + 0x38]
cmp ecx, dword [ebx + 0x1c8]
jl case.0x47b40c.1
mov edx, dword [esi + 0x3e0]
mov eax, dword [edx + 0x1c]
push edi
push eax
push 0x600
call fcn.005dd390
add esp, 0xc
test eax, eax
je 0x47b8ad
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x3e0]
push ecx
mov ecx, eax
call fcn.004abac0
mov esi, eax
jmp 0x47b8af
xor esi, esi
mov edx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x44]
mov ecx, dword [ebx + 4]
mov edi, dword [ebx + 0x34]
mov dword [esi + 4], ecx
mov dword [esp + 0x18], edx
mov edx, dword [ebx + 0x1e8]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x10]
mov dword [esi + 0x1e8], edx
mov ecx, dword [eax + 0x3e0]
push ecx
mov ecx, esi
mov dword [esp + 0x38], esi
call fcn.004a92b0
mov dword [esi + 0x1dc], 1
mov edx, dword [ebx + 0x1cc]
mov dword [esi + 0x1cc], edx
mov ecx, esi
jmp 0x47b906
mov esi, ebx
mov ecx, ebx
call fcn.004771b0
test esi, esi
je case.0x47b40c.1
mov ecx, esi
call fcn.004a8ca0
push esi
lea ecx, [ebp + 0x20]
call fcn.00479180
mov eax, dword [esp + 0x34]
push eax
mov ecx, esi
call fcn.004a8b90
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esi + 0x30]
call fcn.00479180
mov edx, dword [ebp + 0x1c]
push ebp
mov ecx, esi
mov dword [esi + 0x48], edx
call fcn.004791e0
mov ecx, ebp
call fcn.0048e800
push eax
mov ecx, esi
call fcn.004a8c20
mov eax, dword [ebx + 0x1c8]
mov ecx, dword [ebx + 4]
push eax
push edi
push ecx
lea ecx, [esi + 4]
call fcn.0049c9d0
mov edx, dword [ebx + 0x3c]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esi + 0x34], edi
mov edi, dword [esp + 0x38]
mov dword [esi + 0x3c], edx
mov dword [esi + 0x38], eax
mov dword [esi + 0x44], ecx
mov eax, dword [edi + 0xf8]
test eax, eax
je 0x47bc27
mov dword [esi + 0x64], esi
mov edx, dword [edi + 0x11c]
mov eax, dword [edi + 0x104]
push edx
mov edx, dword [edi + 0x108]
push eax
mov eax, dword [edi + 0xfc]
push edx
mov edx, dword [edi + 0xf8]
push eax
lea ecx, [esi + 0x5c]
push edx
call fcn.00401940
push 0
push 0
push 0
push 0
push 0x200
lea ecx, [esi + 0x5c]
call fcn.00401a10
mov eax, dword [edi + 0xe0]
test byte [eax + 0x7f], 1
je 0x47ba04
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47b9f6
mov ecx, ebx
call fcn.004a0d20
cmp eax, 6
jl 0x47ba04
and byte [esi + 0x28], 0xf7
jmp 0x47bc27
push 0
push 0
push 0
push 0
push 1
lea ecx, [esi + 0x5c]
call fcn.00401a10
or byte [esi + 0x28], 8
jmp 0x47bc27
test byte [ecx + 8], 0x1e
je 0x47ba72
push 0x3c8
call fcn.005dd330
mov edi, eax
add esp, 4
test edi, edi
je 0x47ba61
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx + 0xc]
mov eax, dword [esi + 0x3e0]
push edx
push eax
mov ecx, ebp
call fcn.0048e800
mov ecx, dword [esi + 0x3e4]
mov edx, dword [ecx + 0x78]
push eax
push edx
mov ecx, edi
call fcn.00449060
jmp 0x47ba63
xor eax, eax
push eax
mov ecx, ebp
call fcn.00495300
mov byte [esi + 0x3ec], 1
mov eax, dword [esi + 0x3e0]
mov eax, dword [eax + 0x1c]
push 0
push eax
push 0xd8
call fcn.005dd390
add esp, 0xc
test eax, eax
je case.0x47b40c.1
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x3e0]
push ecx
mov ecx, eax
call fcn.004ab7f0
mov esi, eax
test esi, esi
je case.0x47b40c.1
mov ecx, esi
call fcn.004a8ca0
push esi
lea ecx, [ebp + 0x20]
call fcn.00479180
push ebx
mov ecx, esi
call fcn.004a8b90
mov ecx, ebp
call fcn.0048e800
push eax
mov ecx, esi
call fcn.004a8c20
mov edx, dword [esp + 0x14]
push edx
lea ecx, [esi + 0x30]
call fcn.00479180
mov eax, dword [ebp + 0x1c]
push ebp
mov ecx, esi
mov dword [esi + 0x48], eax
call fcn.004791e0
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax + 0x74]
mov edx, dword [eax + 0x70]
push ecx
push 0
push edx
lea ecx, [esi + 4]
call fcn.0049c9d0
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax + 0x80]
mov dword [esi + 0x3c], ecx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx + 4]
mov dword [esi + 0x38], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x34], 0
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx]
mov dword [esi + 0x44], edx
mov ecx, dword [eax + 0xb4]
mov edx, dword [ecx + 0x2c]
mov ecx, dword [esi + 0xb4]
push edx
call fcn.004a88a0
mov edi, dword [esp + 0x38]
mov eax, dword [edi + 0xf8]
test eax, eax
je 0x47bbd4
mov dword [esi + 0x64], esi
mov eax, dword [edi + 0x11c]
mov edx, dword [edi + 0x104]
push eax
mov eax, dword [edi + 0x108]
push edx
mov edx, dword [edi + 0xfc]
push eax
mov eax, dword [edi + 0xf8]
push edx
lea ecx, [esi + 0x5c]
push eax
call fcn.00401940
push 0
push 0
push 0
push 0
push 0x200
lea ecx, [esi + 0x5c]
call fcn.00401a10
mov eax, dword [esi + 0x38]
test eax, eax
jne 0x47bbbe
test ebx, ebx
je 0x47bbb8
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47bbb3
mov ecx, ebx
call fcn.004a0d20
cmp eax, 6
jl 0x47bbbe
and byte [esi + 0x28], 0xf7
jmp 0x47bbd4
push 0
push 0
push 0
push 0
push 1
lea ecx, [esi + 0x5c]
call fcn.00401a10
or byte [esi + 0x28], 8
mov eax, dword [edi + 0x100]
test eax, eax
je 0x47bc27
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x3e0]
test ecx, ecx
je 0x47bc27
push 1
push eax
call fcn.0040dfe0
test eax, eax
je 0x47bc27
mov edx, dword [edi + 0x100]
push edx
lea ecx, [esi + 0xac]
call fcn.00536500
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47bc1b
mov ecx, ebx
call fcn.004a0d20
cmp eax, 6
jg 0x47bc27
mov ecx, esi
call fcn.004ab9b0
mov edi, dword [esp + 0x10]
mov eax, dword [edi + 0x11c]
test eax, eax
jne 0x47bc6c
mov ecx, edi
push ebp
call fcn.0047ac20
mov eax, dword [edi + 0x11c]
test eax, eax
jne 0x47bc6c
mov eax, dword [edi + 0x3e0]
test eax, eax
je 0x47bc6c
lea ecx, [eax + 0x24]
call fcn.004568b0
test eax, eax
je 0x47bc6c
mov ecx, dword [edi + 0x3e0]
add ecx, 0x24
push ebp
call fcn.0045c160
test byte [esi + 0x28], 0x20
jne 0x47bc84
mov ecx, ebp
call fcn.004931f0
push 0
mov ecx, esi
push 0
call fcn.004ad4b0
and byte [esi + 0x28], 0xdf
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 8