Function at 0x47b000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x20
push ebx
mov ebx, dword [esp + 0x2c]
push esi
push edi
mov edi, ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0
je 0x47b099
mov eax, dword [ecx + 0x20]
test eax, eax
je 0x47b039
mov edx, dword [edi + 0x3e0]
cmp eax, dword [edx + 0xddc]
je 0x47b0c9
lea esi, [ecx + 0x10]
mov dword [esp + 0x10], esi
mov esi, dword [esi]
test esi, esi
je 0x47b099
mov eax, dword [esi + 0x1c]
cmp eax, dword [ebx + 0xe8]
jge 0x47b056
add esi, 0xc
jmp 0x47b03c
mov ecx, dword [esi + 0x1c]
cmp ecx, dword [ebx + 0xe8]
jne 0x47b099
mov eax, dword [edi + 0x3e0]
mov edx, dword [eax]
push ecx
push 0x8f
push 2
push eax
call dword [edx + 0xe0]
mov eax, dword [esi + 0x18]
mov ecx, dword [eax + 0x68]
add esp, 0x10
test ecx, ecx
je 0x47b099
mov eax, dword [ecx + 0x210]
test eax, eax
jne 0x47b094
call fcn.004a0f20
cmp eax, 6
jge 0x47b0c9
mov eax, dword [ebx + 0xe0]
test eax, eax
jne 0x47b0d4
mov eax, dword [edi + 0x3e0]
mov ecx, dword [eax]
push 0x90
push 2
push eax
call dword [ecx + 0xe0]
mov ecx, dword [edi + 0x3e0]
add esp, 0xc
push 1
call fcn.004b5570
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x20
ret 8
mov edx, dword [edi + 0x3e0]
mov eax, dword [edx + 0x1c]
push ebp
push 0
push eax
push 0x90
call fcn.005ddc40
add esp, 0xc
test eax, eax
je 0x47b0ff
mov ecx, eax
call fcn.00490050
mov ebp, eax
test ebp, ebp
jne 0x47b10b
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x20
ret 8
push 0
mov ecx, ebp
call fcn.00498bd0
mov esi, dword [ebp + 0x54]
mov ecx, dword [esp + 0x34]
and esi, 0xfffffdff
lea eax, [ebp + 8]
mov dword [ebp + 0x54], esi
cmp dword [eax], ecx
jne 0x47b133
test ecx, ecx
jne 0x47b133
mov dword [eax], ecx
jmp 0x47b13d
push ecx
push eax
call fcn.005dd250
add esp, 8
mov eax, dword [ebp + 0xc]
test eax, eax
lea esi, [ebp + 0xc]
jne 0x47b14f
mov dword [esi], 0
jmp 0x47b15a
push 0
push esi
call fcn.005dd250
add esp, 8
mov eax, dword [esp + 0x34]
test eax, eax
je 0x47b1b9
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
test eax, eax
je 0x47b196
mov ecx, dword [eax + 8]
mov edx, dword [ecx + 4]
mov ecx, dword [edx]
test ecx, ecx
je 0x47b196
cmp eax, ecx
jne 0x47b196
cmp dword [esi], 0
jne 0x47b189
mov dword [esi], 0
jmp 0x47b1a2
push 0
push esi
call fcn.005dd250
add esp, 8
jmp 0x47b1a2
mov eax, dword [esp + 0x14]
push eax
mov ecx, esi
call fcn.00479360
mov ecx, dword [esp + 0x14]
push ebp
call fcn.00479390
mov ecx, dword [esp + 0x34]
or dword [ecx + 0x54], 0x1000
jmp 0x47b1bf
mov ecx, dword [edi + 0xe0]
call fcn.0044c000
mov ecx, ebp
push eax
call fcn.0044da50
lea ecx, [ebp + 0x7c]
push ecx
call fcn.0043d810
mov edx, dword [ebx + 0xe0]
mov dword [ebp + 0x18], edx
lea edi, [ebp + 0x30]
mov ecx, 7
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0xe8]
xor ecx, ecx
mov dword [ebp + 0x1c], eax
mov cx, word [ebx + 0xec]
add esp, 4
push ecx
mov ecx, ebp
call fcn.00495c80
mov dword [ebp + 0x54], 0
test dword [ebx + 0xdc], 0x20000
mov edi, 0x400
je 0x47b222
mov dword [ebp + 0x54], edi
mov edx, dword [ebx + 0x118]
push edx
mov ecx, ebp
call fcn.0048ce60
mov al, byte [ebx + 0xf0]
test al, al
mov eax, dword [ebp + 0x54]
je 0x47b242
or eax, 4
jmp 0x47b245
and eax, 0xfffffffb
mov dword [ebp + 0x54], eax
mov cl, byte [ebx + 0x10c]
test cl, cl
je 0x47b259
or eax, 0x80
jmp 0x47b25e
and eax, 0xffffff7f
or eax, 0x10
mov dword [ebp + 0x54], eax
mov ecx, dword [ebx + 0xe0]
test byte [ecx + 0x7f], 1
je 0x47b277
or eax, 0x200000
jmp 0x47b27c
and eax, 0xffdfffff
mov dword [ebp + 0x54], eax
mov edx, dword [ebx + 0xe0]
cmp dword [edx + 0x78], 0x61
jne 0x47b292
or eax, 0x400000
jmp 0x47b297
and eax, 0xffbfffff
mov dword [ebp + 0x54], eax
mov eax, dword [ebp + 4]
xor esi, esi
push esi
mov ecx, ebp
mov dword [eax + 0x1c], esi
call fcn.00495470
mov ecx, dword [ebp + 0x10]
cmp ecx, esi
lea eax, [ebp + 0x10]
jne 0x47b2b8
mov dword [eax], esi
jmp 0x47b2c2
push esi
push eax
call fcn.005dd250
add esp, 8
push esi
mov ecx, ebp
call fcn.00495bf0
push esi
mov ecx, ebp
mov dword [ebp + 0x4c], esi
mov dword [ebp + 0x50], esi
call fcn.004954f0
fld qword [0x5f66c8]
fstp qword [ebp + 0x58]
push esi
fld qword [0x5f79d8]
mov ecx, ebp
fstp qword [ebp + 0x68]
mov dword [ebp + 0x60], esi
fld qword [0x5f79d8]
mov dword [ebp + 0x64], esi
fstp qword [ebp + 0x70]
call fcn.00495a50
mov ecx, dword [ebp + 0x18]
cmp dword [ecx + 0x5c], esi
je 0x47b31f
lea edx, [esp + 0x20]
push edx
call fcn.0048cd50
lea eax, [esp + 0x20]
push eax
mov ecx, ebp
call fcn.00495820
mov ecx, ebp
call fcn.00498c60
push 0xffffffffffffffff
mov ecx, ebp
call fcn.004959d0
push esi
mov ecx, ebp
call fcn.00495580
xor ecx, ecx
mov cl, byte [ebx + 0x10d]
push ecx
mov ecx, ebp
call fcn.004957a0
test dword [ebx + 0xdc], edi
mov edi, dword [esp + 0x10]
je 0x47b3d9
mov byte [edi + 0x3ec], 1
mov edx, dword [ebp + 4]
cmp dword [edx + 0x20], esi
jne 0x47b3a9
push 0x3c8
call fcn.005ddbe0
mov esi, eax
add esp, 4
test esi, esi
je 0x47b39d
mov eax, dword [edi + 0x3e0]
push 0
push eax
mov ecx, ebp
call fcn.0048eae0
mov ecx, dword [edi + 0x3e4]
mov edx, dword [ecx + 0x78]
push eax
push edx
mov ecx, esi
call fcn.004491b0
jmp 0x47b39f
xor eax, eax
push eax
mov ecx, ebp
call fcn.00495580
xor esi, esi
mov al, byte [ebx + 0x114]
test al, al
je 0x47b3c4
mov eax, dword [ebp + 4]
mov eax, dword [eax + 0x20]
mov ecx, dword [eax + 0x368]
or ecx, 2
jmp 0x47b3d3
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + 0x20]
mov ecx, dword [eax + 0x368]
and ecx, 0xfffffffd
mov dword [eax + 0x368], ecx
mov eax, dword [ebx + 0xdc]
test ah, 1
je 0x47b479
cmp dword [ebx + 0x110], esi
je 0x47b479
mov byte [edi + 0x3ec], 1
mov edx, dword [ebp + 4]
cmp dword [edx + 0x20], esi
jne 0x47b444
push 0x3c8
call fcn.005ddbe0
mov esi, eax
add esp, 4
test esi, esi
je 0x47b43a
mov eax, dword [edi + 0x3e0]
push 0
push eax
mov ecx, ebp
call fcn.0048eae0
mov ecx, dword [edi + 0x3e4]
mov edx, dword [ecx + 0x78]
push eax
push edx
mov ecx, esi
call fcn.004491b0
jmp 0x47b43c
xor eax, eax
push eax
mov ecx, ebp
call fcn.00495580
mov eax, dword [ebp + 4]
mov ecx, dword [eax + 0x20]
mov dword [ecx + 0x368], 0x10
mov eax, dword [ebp + 4]
mov edx, dword [ebx + 0x110]
mov ecx, dword [eax + 0x20]
push edx
add ecx, 0x380
call fcn.00449100
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + 0x20]
or dword [eax + 0x32c], 8
mov edi, dword [esp + 0x38]
lea edx, [edi + 0x1c]
push edx
mov ecx, ebp
call fcn.00495ad0
mov esi, dword [esp + 0x34]
test esi, esi
mov eax, dword [ebp + 0x18]
mov ebx, dword [eax + 0x68]
mov dword [esp + 0x14], 0
je 0x47b4eb
mov eax, dword [ebx + 0x24c]
test eax, eax
je 0x47b4eb
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47b4b9
mov ecx, ebx
call fcn.004a0f20
cmp eax, 6
jl 0x47b4eb
mov ecx, esi
test ecx, ecx
je 0x47b4eb
mov eax, dword [ecx + 0x20]
test eax, eax
je 0x47b4eb
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x47b4eb
mov edx, dword [eax + 0x24c]
test edx, edx
je 0x47b4e1
mov ecx, dword [ecx + 8]
jmp 0x47b4c0
mov ecx, dword [ecx + 0x20]
mov edx, dword [ecx + 0x2c]
mov dword [esp + 0x14], edx
mov ecx, dword [edi + 0xf4]
add edi, 0xf4
mov eax, ecx
and eax, 7
cmp eax, 7
jne 0x47b50c
and ecx, 0xfffffff8
mov ecx, dword [ecx + 0xc]
mov eax, ecx
and eax, 7
cmp eax, 2
jne 0x47b5ed
and ecx, 0x1f
cmp ecx, eax
jne 0x47b5ed
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x47b534
mov ecx, dword [eax + 0x78]
cmp ecx, 6
je 0x47b53e
cmp ecx, 0x61
je 0x47b53e
cmp dword [eax + 0x78], 2
je 0x47b53e
xor esi, esi
jmp 0x47b543
mov esi, 1
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47b554
mov ecx, ebx
call fcn.004a0f20
cmp eax, 6
jl 0x47b56b
test esi, esi
jne 0x47b566
mov eax, dword [ebp + 0x18]
cmp dword [eax + 0x78], 9
jne 0x47b56b
mov esi, 1
mov al, byte [ebx + 0x5ee]
test al, al
jne 0x47b579
test esi, esi
je 0x47b5ed
xor eax, eax
push str.instance
lea ecx, [esp + 0x24]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
call fcn.0043b850
mov esi, dword [esp + 0x10]
mov edx, dword [esi + 0x378]
inc edx
mov eax, edx
push 0xa
push eax
lea ecx, [esp + 0x28]
mov dword [esi + 0x378], edx
call fcn.0043b530
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, dword [ebx + 0xd4]
lea edx, [esp + 0x20]
push edx
call fcn.004bfd80
push eax
lea ecx, [ebp + 0x14]
call fcn.004252d0
mov edx, dword [ebp + 0x54]
mov eax, dword [esp + 0x20]
or edx, 0x80000
push eax
mov dword [ebp + 0x54], edx
call fcn.005ddc00
add esp, 4
jmp 0x47b618
mov ecx, edi
call fcn.00452260
test al, al
jne 0x47b614
mov ecx, dword [edi]
push ecx
mov ecx, dword [ebx + 0xd4]
lea edx, [esp + 0x20]
push edx
call fcn.0040e160
push eax
lea ecx, [ebp + 0x14]
call fcn.004252d0
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x34]
test eax, eax
je 0x47b62e
add eax, 0x20
lea ecx, [ebp + 0x20]
push eax
call fcn.00479360
jmp 0x47b64b
mov ecx, dword [ebp + 0x20]
test ecx, ecx
lea eax, [ebp + 0x20]
jne 0x47b640
mov dword [eax], 0
jmp 0x47b64b
push 0
push eax
call fcn.005dd250
add esp, 8
mov eax, dword [esp + 0x38]
test byte [eax + 0xdc], 0x40
je 0x47b661
movzx eax, word [eax + 0xee]
jmp 0x47b663
xor eax, eax
push eax
mov ecx, ebp
call fcn.00495720
mov ecx, dword [ebp + 0x24]
test ecx, ecx
lea eax, [ebp + 0x24]
jne 0x47b67d
mov dword [eax], 0
jmp 0x47b688
push 0
push eax
call fcn.005dd250
add esp, 8
mov ecx, dword [ebp + 0x54]
and ecx, 0xffffefff
push 0
mov dword [ebp + 0x54], ecx
push 1
mov ecx, ebp
mov dword [ebp + 0x28], 0
call fcn.00491c40
mov ecx, dword [ebp + 0x18]
mov eax, dword [ecx + 0x78]
cmp eax, 0x62
ja case.0x47b6bc.1
movzx eax, byte [eax + 0x47bfc4]
jmp dword [eax*4 + 0x47bfa4]
mov ecx, dword [ecx + 0x68]
mov al, byte [ecx + 0x5ee]
test al, al
je case.0x47b6bc.1
push ebp
mov ecx, esi
call fcn.0047aed0
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 8
push 0xffff
mov ecx, ebp
call fcn.004956a0
push 0x2c
call fcn.005ddbe0
mov edx, eax
add esp, 4
xor eax, eax
test edx, edx
je 0x47b711
mov ecx, 0xb
mov edi, edx
rep stosd dword es:[edi], eax
mov eax, edx
push eax
mov ecx, ebp
call fcn.00495330
mov edx, dword [ebp + 4]
mov ecx, dword [edx + 8]
call fcn.00475eb0
push ebp
call fcn.004daa50
mov eax, dword [esi + 0x3e0]
mov eax, dword [eax + 0x1c]
push 0
push eax
push 0xd8
call fcn.005ddc40
add esp, 0x10
test eax, eax
je case.0x47b6bc.1
mov edi, dword [esp + 0x10]
mov ecx, dword [edi + 0x3e0]
push ecx
mov ecx, eax
call fcn.004abab0
mov esi, eax
test esi, esi
je case.0x47b6bc.1
mov ecx, esi
call fcn.004a8ea0
push esi
lea ecx, [ebp + 0x20]
call fcn.00479390
push ebx
mov ecx, esi
call fcn.004a8d90
mov ecx, ebp
call fcn.0048eae0
push eax
mov ecx, esi
call fcn.004a8e20
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esi + 0x30]
call fcn.00479390
mov edx, dword [ebp + 0x1c]
push ebp
mov ecx, esi
mov dword [esi + 0x48], edx
call fcn.004793f0
xor ebx, ebx
mov ecx, ebp
mov dword [esi + 0x34], ebx
mov dword [esi + 4], ebx
mov dword [esi + 0x44], ebx
mov word [esi + 0x2a], 2
call fcn.00493470
mov eax, dword [esi + 0x2c]
mov ecx, dword [eax + 0xb4]
mov edx, dword [ecx + 0x2c]
mov ecx, dword [esi + 0xb4]
push edx
call fcn.004a8a60
cmp dword [edi + 0x11c], ebx
jne case.0x47b6bc.1
push ebp
mov ecx, edi
call fcn.0047aed0
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 8
movzx edi, word [esi + 0x14c]
mov eax, dword [ebp + 0x1c]
cmp eax, edi
mov edx, 1
jne 0x47b83d
mov edi, dword [ebp + 8]
cmp edi, dword [esi + 0x144]
jne 0x47b83d
cmp ecx, dword [esi + 0x148]
jne 0x47b83d
mov edi, dword [ebp + 4]
mov di, word [edi + 0x5a]
cmp di, word [esi + 0x14e]
jne 0x47b83d
mov edx, dword [esi + 0x140]
mov dword [esi + 0x13c], ebp
jmp 0x47b877
movzx edi, word [esi + 0x160]
cmp eax, edi
jne 0x47b877
mov eax, dword [ebp + 8]
cmp eax, dword [esi + 0x158]
jne 0x47b877
cmp ecx, dword [esi + 0x15c]
jne 0x47b877
mov ecx, dword [ebp + 4]
mov ax, word [ecx + 0x5a]
cmp ax, word [esi + 0x162]
jne 0x47b877
mov edx, dword [esi + 0x154]
mov dword [esi + 0x150], ebp
mov ecx, dword [ebp + 0x18]
mov eax, dword [ecx + 0x68]
mov cl, byte [eax + 0x5ee]
test cl, cl
jne 0x47b892
push 0
push edx
push ebp
mov ecx, esi
call fcn.0047caa0
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47b8a3
mov ecx, ebx
call fcn.004a0f20
cmp eax, 6
jl case.0x47b6bc.1
mov ecx, dword [esi + 0x3e0]
mov eax, dword [ecx + 0x1c]
push 0
push eax
push 0xd8
call fcn.005ddc40
add esp, 0xc
test eax, eax
je case.0x47b6bc.1
mov edi, dword [esp + 0x10]
mov ecx, dword [edi + 0x3e0]
push ecx
mov ecx, eax
call fcn.004abab0
mov esi, eax
test esi, esi
je case.0x47b6bc.1
mov ecx, esi
call fcn.004a8ea0
push esi
lea ecx, [ebp + 0x20]
call fcn.00479390
push ebx
mov ecx, esi
call fcn.004a8d90
mov ecx, ebp
call fcn.0048eae0
push eax
mov ecx, esi
call fcn.004a8e20
mov edx, dword [esp + 0x14]
push edx
lea ecx, [esi + 0x30]
call fcn.00479390
mov eax, dword [ebp + 0x1c]
push ebp
mov ecx, esi
mov dword [esi + 0x48], eax
call fcn.004793f0
xor ebx, ebx
mov ecx, ebp
mov dword [esi + 0x34], ebx
mov dword [esi + 4], ebx
mov dword [esi + 0x44], ebx
mov word [esi + 0x2a], 2
call fcn.00493470
mov ecx, dword [esi + 0x2c]
mov edx, dword [ecx + 0xb4]
mov eax, dword [edx + 0x2c]
mov ecx, dword [esi + 0xb4]
push eax
call fcn.004a8a60
cmp dword [edi + 0x11c], ebx
jne case.0x47b6bc.1
push ebp
mov ecx, edi
call fcn.0047aed0
cmp dword [edi + 0x11c], ebx
jne case.0x47b6bc.1
mov eax, dword [edi + 0x3e0]
cmp eax, ebx
je case.0x47b6bc.1
lea ecx, [eax + 0x24]
call fcn.005315a0
test eax, eax
je case.0x47b6bc.1
mov ecx, dword [edi + 0x3e0]
push ebp
add ecx, 0x24
call fcn.0045c330
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 8
mov ecx, ebp
call fcn.00496520
mov edx, dword [esi + 0x11c]
xor edi, edi
test edx, edx
je 0x47b9f4
mov eax, ebp
lea esp, [esp]
mov ecx, dword [eax + 8]
cmp edx, ecx
je 0x47b9dd
mov eax, ecx
test eax, eax
jne 0x47b9d0
xor ecx, ecx
test eax, eax
setne cl
mov edi, ecx
test edi, edi
je 0x47b9f4
mov dword [esi + 0x120], 1
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47ba05
mov ecx, ebx
call fcn.004a0f20
cmp eax, 6
jl 0x47bb31
mov edx, dword [esi + 0x3e0]
mov eax, dword [edx + 0x1c]
push 0
push eax
push 0xd8
call fcn.005ddc40
add esp, 0xc
test eax, eax
je case.0x47b6bc.1
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x3e0]
push ecx
mov ecx, eax
call fcn.004abab0
mov esi, eax
test esi, esi
je case.0x47b6bc.1
mov ecx, esi
call fcn.004a8ea0
push esi
lea ecx, [ebp + 0x20]
call fcn.00479390
push ebx
mov ecx, esi
call fcn.004a8d90
mov ecx, ebp
call fcn.0048eae0
push eax
mov ecx, esi
call fcn.004a8e20
mov edx, dword [esp + 0x14]
push edx
lea ecx, [esi + 0x30]
call fcn.00479390
mov eax, dword [ebp + 0x1c]
push ebp
mov ecx, esi
mov dword [esi + 0x48], eax
call fcn.004793f0
xor ebx, ebx
mov ecx, ebp
mov dword [esi + 0x34], ebx
mov dword [esi + 0x44], ebx
mov dword [esi + 4], ebx
mov word [esi + 0x2a], 2
call fcn.00493470
mov ecx, dword [esi + 0x2c]
mov edx, dword [ecx + 0xb4]
mov eax, dword [edx + 0x2c]
mov ecx, dword [esi + 0xb4]
push eax
call fcn.004a8a60
cmp edi, ebx
jne 0x47bad0
mov ecx, dword [ebp + 4]
mov ecx, dword [ecx + 0x18]
test ecx, ecx
je 0x47bad0
call fcn.00432e30
mov esi, dword [esp + 0x10]
mov eax, dword [esi + 0x11c]
test eax, eax
jne case.0x47b6bc.1
push ebp
mov ecx, esi
call fcn.0047aed0
mov eax, dword [esi + 0x11c]
test eax, eax
jne case.0x47b6bc.1
mov eax, dword [esi + 0x3e0]
test eax, eax
je case.0x47b6bc.1
lea ecx, [eax + 0x24]
call fcn.005315a0
test eax, eax
je case.0x47b6bc.1
mov ecx, dword [esi + 0x3e0]
push ebp
add ecx, 0x24
call fcn.0045c330
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 8
test edi, edi
jne case.0x47b6bc.1
mov edx, dword [ebp + 4]
mov ecx, dword [edx + 0x18]
test ecx, ecx
je case.0x47b6bc.1
call fcn.00432e30
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 8
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0xdc]
xor edi, edi
test ecx, 0x10000
mov dword [esp + 0x34], ebx
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
je 0x47bc12
mov ecx, dword [ebx + 0x38]
cmp ecx, dword [ebx + 0x1c8]
jl case.0x47b6bc.1
mov edx, dword [esi + 0x3e0]
mov eax, dword [edx + 0x1c]
push edi
push eax
push 0x600
call fcn.005ddc40
add esp, 0xc
test eax, eax
je 0x47bbbd
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x3e0]
push ecx
mov ecx, eax
call fcn.004abd80
mov esi, eax
jmp 0x47bbbf
xor esi, esi
mov edx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x44]
mov ecx, dword [ebx + 4]
mov edi, dword [ebx + 0x34]
mov dword [esi + 4], ecx
mov dword [esp + 0x18], edx
mov edx, dword [ebx + 0x1e8]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x10]
mov dword [esi + 0x1e8], edx
mov ecx, dword [eax + 0x3e0]
push ecx
mov ecx, esi
mov dword [esp + 0x38], esi
call fcn.004a94b0
mov dword [esi + 0x1dc], 1
mov edx, dword [ebx + 0x1cc]
mov dword [esi + 0x1cc], edx
mov ecx, esi
jmp 0x47bc16
mov esi, ebx
mov ecx, ebx
call fcn.00477390
test esi, esi
je case.0x47b6bc.1
mov ecx, esi
call fcn.004a8ea0
push esi
lea ecx, [ebp + 0x20]
call fcn.00479390
mov eax, dword [esp + 0x34]
push eax
mov ecx, esi
call fcn.004a8d90
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esi + 0x30]
call fcn.00479390
mov edx, dword [ebp + 0x1c]
push ebp
mov ecx, esi
mov dword [esi + 0x48], edx
call fcn.004793f0
mov ecx, ebp
call fcn.0048eae0
push eax
mov ecx, esi
call fcn.004a8e20
mov eax, dword [ebx + 0x1c8]
mov ecx, dword [ebx + 4]
push eax
push edi
push ecx
lea ecx, [esi + 4]
call fcn.0049cc10
mov edx, dword [ebx + 0x3c]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esi + 0x34], edi
mov edi, dword [esp + 0x38]
mov dword [esi + 0x3c], edx
mov dword [esi + 0x38], eax
mov dword [esi + 0x44], ecx
mov eax, dword [edi + 0xf8]
test eax, eax
je 0x47bf37
mov dword [esi + 0x64], esi
mov edx, dword [edi + 0x11c]
mov eax, dword [edi + 0x104]
push edx
mov edx, dword [edi + 0x108]
push eax
mov eax, dword [edi + 0xfc]
push edx
mov edx, dword [edi + 0xf8]
push eax
lea ecx, [esi + 0x5c]
push edx
call fcn.004018d0
push 0
push 0
push 0
push 0
push 0x200
lea ecx, [esi + 0x5c]
call fcn.004019a0
mov eax, dword [edi + 0xe0]
test byte [eax + 0x7f], 1
je 0x47bd14
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47bd06
mov ecx, ebx
call fcn.004a0f20
cmp eax, 6
jl 0x47bd14
and byte [esi + 0x28], 0xf7
jmp 0x47bf37
push 0
push 0
push 0
push 0
push 1
lea ecx, [esi + 0x5c]
call fcn.004019a0
or byte [esi + 0x28], 8
jmp 0x47bf37
test byte [ecx + 8], 0x1e
je 0x47bd82
push 0x3c8
call fcn.005ddbe0
mov edi, eax
add esp, 4
test edi, edi
je 0x47bd71
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx + 0xc]
mov eax, dword [esi + 0x3e0]
push edx
push eax
mov ecx, ebp
call fcn.0048eae0
mov ecx, dword [esi + 0x3e4]
mov edx, dword [ecx + 0x78]
push eax
push edx
mov ecx, edi
call fcn.004491b0
jmp 0x47bd73
xor eax, eax
push eax
mov ecx, ebp
call fcn.00495580
mov byte [esi + 0x3ec], 1
mov eax, dword [esi + 0x3e0]
mov eax, dword [eax + 0x1c]
push 0
push eax
push 0xd8
call fcn.005ddc40
add esp, 0xc
test eax, eax
je case.0x47b6bc.1
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x3e0]
push ecx
mov ecx, eax
call fcn.004abab0
mov esi, eax
test esi, esi
je case.0x47b6bc.1
mov ecx, esi
call fcn.004a8ea0
push esi
lea ecx, [ebp + 0x20]
call fcn.00479390
push ebx
mov ecx, esi
call fcn.004a8d90
mov ecx, ebp
call fcn.0048eae0
push eax
mov ecx, esi
call fcn.004a8e20
mov edx, dword [esp + 0x14]
push edx
lea ecx, [esi + 0x30]
call fcn.00479390
mov eax, dword [ebp + 0x1c]
push ebp
mov ecx, esi
mov dword [esi + 0x48], eax
call fcn.004793f0
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax + 0x74]
mov edx, dword [eax + 0x70]
push ecx
push 0
push edx
lea ecx, [esi + 4]
call fcn.0049cc10
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax + 0x80]
mov dword [esi + 0x3c], ecx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx + 4]
mov dword [esi + 0x38], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x34], 0
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx]
mov dword [esi + 0x44], edx
mov ecx, dword [eax + 0xb4]
mov edx, dword [ecx + 0x2c]
mov ecx, dword [esi + 0xb4]
push edx
call fcn.004a8a60
mov edi, dword [esp + 0x38]
mov eax, dword [edi + 0xf8]
test eax, eax
je 0x47bee4
mov dword [esi + 0x64], esi
mov eax, dword [edi + 0x11c]
mov edx, dword [edi + 0x104]
push eax
mov eax, dword [edi + 0x108]
push edx
mov edx, dword [edi + 0xfc]
push eax
mov eax, dword [edi + 0xf8]
push edx
lea ecx, [esi + 0x5c]
push eax
call fcn.004018d0
push 0
push 0
push 0
push 0
push 0x200
lea ecx, [esi + 0x5c]
call fcn.004019a0
mov eax, dword [esi + 0x38]
test eax, eax
jne 0x47bece
test ebx, ebx
je 0x47bec8
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47bec3
mov ecx, ebx
call fcn.004a0f20
cmp eax, 6
jl 0x47bece
and byte [esi + 0x28], 0xf7
jmp 0x47bee4
push 0
push 0
push 0
push 0
push 1
lea ecx, [esi + 0x5c]
call fcn.004019a0
or byte [esi + 0x28], 8
mov eax, dword [edi + 0x100]
test eax, eax
je 0x47bf37
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x3e0]
test ecx, ecx
je 0x47bf37
push 1
push eax
call fcn.0040e010
test eax, eax
je 0x47bf37
mov edx, dword [edi + 0x100]
push edx
lea ecx, [esi + 0xac]
call fcn.00453380
mov eax, dword [ebx + 0x210]
test eax, eax
jne 0x47bf2b
mov ecx, ebx
call fcn.004a0f20
cmp eax, 6
jg 0x47bf37
mov ecx, esi
call fcn.004abc70
mov edi, dword [esp + 0x10]
mov eax, dword [edi + 0x11c]
test eax, eax
jne 0x47bf7c
mov ecx, edi
push ebp
call fcn.0047aed0
mov eax, dword [edi + 0x11c]
test eax, eax
jne 0x47bf7c
mov eax, dword [edi + 0x3e0]
test eax, eax
je 0x47bf7c
lea ecx, [eax + 0x24]
call fcn.005315a0
test eax, eax
je 0x47bf7c
mov ecx, dword [edi + 0x3e0]
add ecx, 0x24
push ebp
call fcn.0045c330
test byte [esi + 0x28], 0x20
jne 0x47bf94
mov ecx, ebp
call fcn.00493470
push 0
mov ecx, esi
push 0
call fcn.004ad7c0
and byte [esi + 0x28], 0xdf
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 8