Function at 0x47fe10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x2e
push 0
push 0
dec ecx
jne 0x47fe18
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x480bf2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00480d98
mov dl, 1
mov eax, dword [0x417918]
call fcn.00403790
mov dword [ebp - 0x1c], eax
mov dl, 1
mov eax, dword [0x417918]
call fcn.00403790
mov dword [ebp - 0x20], eax
mov dl, 1
mov eax, dword [0x417918]
call fcn.00403790
mov dword [ebp - 0x24], eax
mov dl, 1
mov eax, dword [0x417918]
call fcn.00403790
mov dword [ebp - 0x28], eax
mov eax, 0xff
call fcn.00409a28
mov dword [ebp - 0x34], eax
xor eax, eax
push ebp
push 0x480bc5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0xc294a8]
cmp byte [eax], 0
je 0x47feaf
lea eax, [ebp - 0x30]
mov edx, 0x480c08
call fcn.00404694
jmp 0x47febc
lea eax, [ebp - 0x30]
mov edx, 0x480c30
call fcn.00404694
call fcn.004740cc
mov esi, eax
mov eax, dword [0xc294a8]
cmp byte [eax], 0
je 0x4806ac
mov edx, 0x80000002
mov eax, esi
call fcn.004315c4
mov edx, 0x480c08
xor ecx, ecx
mov eax, esi
call fcn.00431628
test al, al
je 0x480b88
mov edx, dword [ebp - 0x1c]
mov eax, esi
call fcn.004317b4
mov eax, esi
call fcn.00431594
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x480b88
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xc], 0
push dword [ebp - 0x30]
push 0x480c40
lea ecx, [ebp - 0x68]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x68]
lea eax, [ebp - 0x64]
mov edx, 3
call fcn.0040497c
mov edx, dword [ebp - 0x64]
xor ecx, ecx
mov eax, esi
call fcn.00431628
test al, al
je 0x48069b
mov edx, dword [ebp - 0x20]
mov eax, esi
call fcn.004317b4
mov eax, esi
call fcn.00431594
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x48069b
inc eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0
push dword [ebp - 0x30]
push 0x480c40
lea ecx, [ebp - 0x70]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x70]
push 0x480c40
lea ecx, [ebp - 0x74]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x74]
lea eax, [ebp - 0x6c]
mov edx, 5
call fcn.0040497c
mov edx, dword [ebp - 0x6c]
xor ecx, ecx
mov eax, esi
call fcn.00431628
test al, al
je 0x48068f
mov edx, dword [ebp - 0x24]
mov eax, esi
call fcn.004317b4
mov eax, esi
call fcn.00431594
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x48068f
inc eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], 0
push dword [ebp - 0x30]
push 0x480c40
lea ecx, [ebp - 0x7c]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x7c]
push 0x480c40
lea ecx, [ebp - 0x80]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x80]
push 0x480c40
lea ecx, [ebp - 0x84]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x84]
lea eax, [ebp - 0x78]
mov edx, 7
call fcn.0040497c
mov edx, dword [ebp - 0x78]
xor ecx, ecx
mov eax, esi
call fcn.00431628
test al, al
je 0x480683
mov edx, 0x480c4c
mov eax, esi
call fcn.00431c08
test al, al
je 0x480683
mov edx, dword [0x47df0c]
mov eax, 0x90
call fcn.00405500
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov ebx, eax
lea ecx, [ebp - 0x8c]
mov edx, 0x480c5c
mov eax, esi
call fcn.004319e0
mov eax, dword [ebp - 0x8c]
lea edx, [ebp - 0x88]
call fcn.0040883c
mov edx, dword [ebp - 0x88]
lea eax, [ebx + 0x18]
call fcn.00404650
lea ecx, [ebp - 0x90]
mov edx, 0x480c70
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0x90]
lea eax, [ebx + 0x10]
call fcn.00404650
mov edx, dword [ebx + 0x10]
mov eax, 0x480c88
call fcn.00404c00
test eax, eax
jle 0x48011f
lea eax, [ebx + 0x10]
push eax
mov edx, dword [ebx + 0x10]
mov eax, 0x480c88
call fcn.00404c00
mov edx, eax
inc edx
mov eax, dword [ebx + 0x10]
mov ecx, 0x400
call fcn.00404b1c
lea ecx, [ebp - 0x94]
mov edx, 0x480c94
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0x94]
lea eax, [ebx + 0x14]
call fcn.00404650
mov edx, dword [ebx + 0x14]
mov eax, 0x480c88
call fcn.00404c00
test eax, eax
jle 0x480171
lea eax, [ebx + 0x14]
push eax
mov edx, dword [ebx + 0x14]
mov eax, 0x480c88
call fcn.00404c00
mov edx, eax
inc edx
mov eax, dword [ebx + 0x14]
mov ecx, 0x400
call fcn.00404b1c
lea edx, [ebp - 0x98]
mov eax, dword [ebx + 0x10]
call fcn.00408a80
cmp dword [ebp - 0x98], 0
jne 0x480194
mov eax, ebx
mov edx, dword [ebx + 0x14]
call fcn.00404650
jmp 0x48019e
mov eax, ebx
mov edx, dword [ebx + 0x10]
call fcn.00404650
lea ecx, [ebp - 0x9c]
mov edx, 0x480ca8
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0x9c]
lea eax, [ebx + 0x1c]
call fcn.00404650
mov edx, dword [ebx + 0x1c]
mov eax, 0x480c88
call fcn.00404c00
test eax, eax
jle 0x4801f0
lea eax, [ebx + 0x1c]
push eax
mov edx, dword [ebx + 0x1c]
mov eax, 0x480c88
call fcn.00404c00
mov edx, eax
inc edx
mov eax, dword [ebx + 0x1c]
mov ecx, 0x400
call fcn.00404b1c
lea ecx, [ebp - 0xa0]
mov edx, 0x480cb4
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0xa0]
lea eax, [ebx + 0x54]
call fcn.00404650
lea ecx, [ebp - 0xa4]
mov edx, 0x480cc4
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0xa4]
lea eax, [ebx + 0x20]
call fcn.00404650
lea eax, [ebx + 0x28]
push eax
lea eax, [ebx + 0x2c]
push eax
lea ecx, [ebx + 0x24]
mov edx, dword [ebx + 0x20]
mov eax, dword [ebp - 4]
call fcn.00481724
cmp dword [ebx + 0x20], 0
jne 0x480272
lea eax, [ebx + 0x60]
push eax
lea ecx, [ebp - 0xa8]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0xa8]
lea ecx, [ebx + 0x5c]
lea edx, [ebx + 0x20]
call fcn.0047f820
lea eax, [ebx + 0xc]
push eax
lea ecx, [ebx + 8]
lea edx, [ebx + 4]
mov eax, dword [ebx + 0x18]
call fcn.0047f340
cmp dword [ebx + 4], 0
jne 0x4802aa
lea ecx, [ebp - 0xac]
mov edx, 0x480ce0
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0xac]
lea eax, [ebx + 4]
call fcn.00404650
lea ecx, [ebp - 0xb0]
mov edx, 0x480cf0
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0xb0]
lea eax, [ebx + 0x40]
call fcn.00404650
lea eax, [ebx + 0x4c]
push eax
lea eax, [ebx + 0x50]
push eax
lea ecx, [ebx + 0x48]
lea edx, [ebx + 0x44]
mov eax, dword [ebx + 0x40]
call fcn.0047f5f0
lea eax, [ebx + 0x60]
push eax
lea ecx, [ebx + 0x5c]
lea edx, [ebx + 0x58]
mov eax, dword [ebx + 0x54]
call fcn.0047f820
push dword [ebp - 0x30]
push 0x480c40
lea ecx, [ebp - 0xb4]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xb4]
push 0x480c40
lea ecx, [ebp - 0xb8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xb8]
push 0x480c40
lea ecx, [ebp - 0xbc]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xbc]
lea eax, [ebx + 0x64]
mov edx, 7
call fcn.0040497c
lea ecx, [ebp - 0xc0]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xc0]
lea eax, [ebx + 0x38]
call fcn.00404650
push 0
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0x30]
push 0x480c40
lea ecx, [ebp - 0xcc]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xcc]
push 0x480c40
lea ecx, [ebp - 0xd0]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xd0]
push 0x480c40
lea ecx, [ebp - 0xd4]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xd4]
lea eax, [ebp - 0xc8]
mov edx, 7
call fcn.0040497c
mov edx, dword [ebp - 0xc8]
mov ecx, 0x480d00
mov eax, 0x80000002
call fcn.004740f0
mov edx, dword [ebp - 0xc4]
lea eax, [ebx + 0x30]
call fcn.00404650
lea eax, [ebx + 0x7c]
push eax
lea eax, [ebx + 0x80]
push eax
lea ecx, [ebx + 0x78]
lea edx, [ebx + 0x74]
mov eax, dword [ebx + 0x30]
call fcn.0047fc20
lea ecx, [ebx + 0x6c]
lea edx, [ebx + 0x68]
mov eax, dword [ebx + 0x64]
call fcn.0047f988
lea ecx, [ebp - 0xd8]
mov edx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x30]
call fcn.0047ef90
mov edx, dword [ebp - 0xd8]
lea eax, [ebx + 0x34]
call fcn.00404650
mov eax, esi
call fcn.00431594
push dword [ebp - 0x30]
push 0x480c40
lea ecx, [ebp - 0xe0]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xe0]
push 0x480c40
lea ecx, [ebp - 0xe4]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xe4]
push 0x480c40
lea ecx, [ebp - 0xe8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xe8]
push 0x480c40
push 0x480c4c
lea eax, [ebp - 0xdc]
mov edx, 9
call fcn.0040497c
mov edx, dword [ebp - 0xdc]
xor ecx, ecx
mov eax, esi
call fcn.00431628
test al, al
je 0x480505
lea edx, [ebp - 0x60]
mov eax, esi
call fcn.0043174c
lea eax, [ebp - 0x4c]
call fcn.00471034
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.00470fa4
fstp qword [ebx + 0x88]
wait
mov eax, esi
call fcn.00431594
push dword [ebp - 0x30]
push 0x480c40
lea ecx, [ebp - 0xf0]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xf0]
push 0x480c40
lea ecx, [ebp - 0xf4]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xf4]
push 0x480c40
lea ecx, [ebp - 0xf8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xf8]
push 0x480c40
push 0x480d14
lea eax, [ebp - 0xec]
mov edx, 9
call fcn.0040497c
mov edx, dword [ebp - 0xec]
xor ecx, ecx
mov eax, esi
call fcn.00431628
test al, al
je 0x480632
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.0043187c
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x48062b
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0xfc]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0xfc], 0
je 0x480623
lea ecx, [ebp - 0x100]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x100]
mov eax, esi
call fcn.004319bc
cmp al, 1
jne 0x480623
lea ecx, [ebp - 0x108]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x104]
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0x104]
lea eax, [ebx + 0x3c]
call fcn.00404650
jmp 0x48062b
inc dword [ebp - 0x18]
dec dword [ebp - 0x44]
jne 0x4805b3
mov eax, esi
call fcn.00431594
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
call fcn.00408a80
cmp dword [ebp - 0x10c], 0
je 0x480675
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.0047e440
mov edx, dword [ebp - 0x2c]
mov byte [edx + 0x70], al
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
jmp 0x480683
mov edx, dword [0x47df0c]
mov eax, dword [ebp - 0x2c]
call fcn.00405514
inc dword [ebp - 0x14]
dec dword [ebp - 0x40]
jne 0x480004
inc dword [ebp - 0x10]
dec dword [ebp - 0x3c]
jne 0x47ff87
inc dword [ebp - 0xc]
dec dword [ebp - 0x38]
jne 0x47ff20
jmp 0x480b88
mov edx, 0x80000006
mov eax, esi
call fcn.004315c4
xor ecx, ecx
mov edx, 0x480d30
mov eax, esi
call fcn.00431628
test al, al
je 0x480760
mov edx, dword [ebp - 0x1c]
mov eax, esi
call fcn.004317b4
mov eax, esi
call fcn.00431594
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x480760
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x114]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x114]
lea eax, [ebp - 0x110]
mov edx, 0x480d50
call fcn.00404908
mov edx, dword [ebp - 0x110]
xor ecx, ecx
mov eax, esi
call fcn.00431628
test al, al
je 0x480758
lea ecx, [ebp - 0x118]
mov edx, 0x480d70
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, esi
call fcn.00431594
inc dword [ebp - 0xc]
dec dword [ebp - 0x38]
jne 0x4806f7
mov edx, 0x80000002
mov eax, esi
call fcn.004315c4
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x480b88
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x120]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x120]
lea edx, [ebp - 0x11c]
call fcn.0040883c
mov edx, dword [ebp - 0x11c]
mov eax, 0x480d84
call fcn.00404c00
test eax, eax
jne 0x480b7c
push dword [ebp - 0x30]
push 0x480c40
lea ecx, [ebp - 0x128]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x128]
lea eax, [ebp - 0x124]
mov edx, 3
call fcn.0040497c
mov edx, dword [ebp - 0x124]
xor ecx, ecx
mov eax, esi
call fcn.00431628
test al, al
je 0x480b7c
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004317b4
mov edx, dword [0x47df0c]
mov eax, 0x90
call fcn.00405500
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov ebx, eax
mov edx, 0x480c5c
lea ecx, [ebp - 0x130]
mov eax, esi
call fcn.004319e0
mov eax, dword [ebp - 0x130]
lea edx, [ebp - 0x12c]
call fcn.0040883c
mov edx, dword [ebp - 0x12c]
lea eax, [ebx + 0x18]
call fcn.00404650
mov edx, 0x480c70
lea ecx, [ebp - 0x134]
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0x134]
lea eax, [ebx + 0x10]
call fcn.00404650
mov edx, 0x480c94
lea ecx, [ebp - 0x138]
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0x138]
lea eax, [ebx + 0x14]
call fcn.00404650
lea edx, [ebp - 0x13c]
mov eax, dword [ebx + 0x10]
call fcn.00408a80
cmp dword [ebp - 0x13c], 0
jne 0x4808be
mov eax, ebx
mov edx, dword [ebx + 0x14]
call fcn.00404650
jmp 0x4808c8
mov eax, ebx
mov edx, dword [ebx + 0x10]
call fcn.00404650
mov edx, 0x480ca8
lea ecx, [ebp - 0x140]
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0x140]
lea eax, [ebx + 0x1c]
call fcn.00404650
mov edx, 0x480cb4
lea ecx, [ebp - 0x144]
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0x144]
lea eax, [ebx + 0x54]
call fcn.00404650
mov edx, 0x480cc4
lea ecx, [ebp - 0x148]
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0x148]
lea eax, [ebx + 0x20]
call fcn.00404650
lea eax, [ebx + 0x28]
push eax
lea eax, [ebx + 0x2c]
push eax
lea ecx, [ebx + 0x24]
mov edx, dword [ebx + 0x20]
mov eax, dword [ebp - 4]
call fcn.00481724
cmp dword [ebx + 0x20], 0
jne 0x48096a
lea eax, [ebx + 0x60]
push eax
lea ecx, [ebp - 0x14c]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x14c]
lea ecx, [ebx + 0x5c]
lea edx, [ebx + 0x20]
call fcn.0047f820
lea eax, [ebx + 0xc]
push eax
lea ecx, [ebx + 8]
lea edx, [ebx + 4]
mov eax, dword [ebx + 0x18]
call fcn.0047f340
cmp dword [ebx + 4], 0
jne 0x4809a2
mov edx, 0x480ce0
lea ecx, [ebp - 0x150]
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0x150]
lea eax, [ebx + 4]
call fcn.00404650
mov edx, 0x480cf0
lea ecx, [ebp - 0x154]
mov eax, esi
call fcn.004319e0
mov edx, dword [ebp - 0x154]
lea eax, [ebx + 0x40]
call fcn.00404650
lea eax, [ebx + 0x4c]
push eax
lea eax, [ebx + 0x50]
push eax
lea ecx, [ebx + 0x48]
lea edx, [ebx + 0x44]
mov eax, dword [ebx + 0x40]
call fcn.0047f5f0
lea eax, [ebx + 0x60]
push eax
lea ecx, [ebx + 0x5c]
lea edx, [ebx + 0x58]
mov eax, dword [ebx + 0x54]
call fcn.0047f820
push dword [ebp - 0x30]
push 0x480c40
lea ecx, [ebp - 0x158]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x158]
lea eax, [ebx + 0x64]
mov edx, 3
call fcn.0040497c
lea ecx, [ebp - 0x15c]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x15c]
lea eax, [ebx + 0x38]
call fcn.00404650
push 0
lea eax, [ebp - 0x160]
push eax
push dword [ebp - 0x30]
push 0x480c40
lea ecx, [ebp - 0x168]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x168]
lea eax, [ebp - 0x164]
mov edx, 3
call fcn.0040497c
mov edx, dword [ebp - 0x164]
mov ecx, 0x480d00
mov eax, 0x80000002
call fcn.004740f0
mov edx, dword [ebp - 0x160]
lea eax, [ebx + 0x30]
call fcn.00404650
lea eax, [ebx + 0x7c]
push eax
lea eax, [ebx + 0x80]
push eax
lea ecx, [ebx + 0x78]
lea edx, [ebx + 0x74]
mov eax, dword [ebx + 0x30]
call fcn.0047fc20
lea eax, [ebx + 0x34]
call fcn.004045fc
lea ecx, [ebx + 0x6c]
lea edx, [ebx + 0x68]
mov eax, dword [ebx + 0x64]
call fcn.0047fbe0
lea edx, [ebp - 0x16c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
call fcn.00408a80
cmp dword [ebp - 0x16c], 0
je 0x480b67
mov eax, dword [ebp - 0x2c]
push dword [eax + 4]
push 0x480d94
mov eax, dword [ebp - 0x2c]
push dword [eax + 0x14]
lea eax, [ebp - 0x170]
mov edx, 3
call fcn.0040497c
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x54]
inc eax
jne 0x480b67
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.0047e440
mov edx, dword [ebp - 0x2c]
mov byte [edx + 0x70], al
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
mov eax, dword [ebp - 0x2c]
push dword [eax + 4]
push 0x480d94
mov eax, dword [ebp - 0x2c]
push dword [eax + 0x14]
lea eax, [ebp - 0x174]
mov edx, 3
call fcn.0040497c
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x480b75
mov edx, dword [0x47df0c]
mov eax, dword [ebp - 0x2c]
call fcn.00405514
mov eax, esi
call fcn.00431594
inc dword [ebp - 0xc]
dec dword [ebp - 0x38]
jne 0x480788
mov eax, esi
call fcn.004037c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x480bcc
mov eax, dword [ebp - 0x34]
call fcn.00409a84
mov eax, dword [ebp - 0x1c]
call fcn.004037c0
mov eax, dword [ebp - 0x20]
call fcn.004037c0
mov eax, dword [ebp - 0x24]
call fcn.004037c0
mov eax, dword [ebp - 0x28]
call fcn.004037c0
ret