Function at 0x47ca70
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d0f43
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
push edi
mov eax, dword [0x504108]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1c], edi
push 2
call fcn.004060b0
push 0x168
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x47cac9
mov ecx, eax
call fcn.00409cb0
mov esi, eax
jmp 0x47cacb
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push edi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x14]
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0xf0
mov eax, dword [esi]
call dword [eax + 0x5c]
push 1
mov ecx, esi
call fcn.00406090
push 0x48
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x47cb34
push 0xf9faf5
mov ecx, eax
call fcn.004141c0
mov ecx, eax
jmp 0x47cb36
xor ecx, ecx
mov eax, dword [esi]
push ecx
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0xa8]
push 2
mov ecx, esi
call fcn.004060b0
push 0x150
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x47cb7a
mov ecx, eax
call fcn.004048a0
mov ecx, eax
mov dword [ebp - 0x14], eax
jmp 0x47cb7f
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x178], ecx
je 0x47cbb1
test ecx, ecx
je 0x47cb9b
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x178]
mov dword [edi + 0x178], ecx
test eax, eax
je 0x47cbb1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x178]
push esi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x178]
push 1
call fcn.00406090
mov ecx, dword [edi + 0x178]
movaps xmm0, xmmword [0x4d4120]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
push 0xe8
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x47cc0c
mov ecx, eax
call fcn.0040f8b0
mov esi, eax
jmp 0x47cc0e
xor esi, esi
push 3
push 0xa0
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.0040f580
mov ecx, dword [edi + 0x178]
push esi
mov eax, dword [ecx]
call dword [eax + 0xa8]
mov ecx, dword [edi + 0x178]
push 1
call fcn.00407010
mov ecx, dword [edi + 0x178]
movaps xmm0, xmmword [0x4d4050]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
mov ecx, dword [edi + 0x178]
push 2
call fcn.004060b0
push 0x168
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 4
test eax, eax
je 0x47cc91
mov ecx, eax
call fcn.00409cb0
mov esi, eax
jmp 0x47cc93
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push edi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x14]
push 1
mov ecx, esi
call fcn.00406090
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0x14
mov eax, dword [esi]
call dword [eax + 0x5c]
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0x13
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi]
call dword [eax + 0x80]
push 2
mov ecx, esi
call fcn.004060b0
push 0x1c8
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 5
test eax, eax
je 0x47cd32
mov ecx, eax
call fcn.0041e7e0
mov ecx, eax
mov dword [ebp - 0x14], eax
jmp 0x47cd37
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x198], ecx
je 0x47cd69
test ecx, ecx
je 0x47cd53
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x198]
mov dword [edi + 0x198], ecx
test eax, eax
je 0x47cd69
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x198]
push esi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x198]
push 0
call fcn.00406090
movaps xmm0, xmmword [0x4d40b0]
sub esp, 0x10
mov ecx, dword [edi + 0x198]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.004205b0
sub esp, 0x10
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 5
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ecx, dword [edi + 0x198]
call fcn.00420650
mov ecx, dword [edi + 0x198]
movaps xmm0, xmmword [0x4d4100]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x198]
movaps xmm0, xmmword [0x4d4010]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0xe8
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 6
test eax, eax
je 0x47ce26
mov ecx, eax
call fcn.0040f8b0
jmp 0x47ce28
xor eax, eax
push 3
push 0xa1
mov ecx, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0xffffffff
call fcn.0040f580
mov ecx, dword [ebp - 0x10]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], 0x18
mov dword [eax + 4], 0
mov dword [eax + 8], 0x24
mov dword [eax + 0xc], 0xc
call fcn.00410420
mov eax, dword [ebp - 0x10]
mov ecx, dword [edi + 0x198]
push eax
push eax
push eax
call fcn.0041ef90
push 0xe8
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 7
test eax, eax
je 0x47ce9f
mov ecx, eax
call fcn.0040f8b0
jmp 0x47cea1
xor eax, eax
push 3
push 0xa1
mov ecx, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xffffffff
call fcn.0040f580
mov ecx, dword [ebp - 0x14]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0xc
mov dword [eax + 0xc], 0xc
call fcn.00410420
push 0xe8
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 8
test eax, eax
je 0x47cf07
mov ecx, eax
call fcn.0040f8b0
jmp 0x47cf09
xor eax, eax
push 3
push 0xa1
mov ecx, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0xffffffff
call fcn.0040f580
mov ecx, dword [ebp - 0x10]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], 0xc
mov dword [eax + 4], 0
mov dword [eax + 8], 0x18
mov dword [eax + 0xc], 0xc
call fcn.00410420
mov eax, dword [ebp - 0x10]
mov ecx, dword [edi + 0x198]
push eax
push eax
push dword [ebp - 0x14]
call fcn.0041f0d0
push ecx
mov ecx, esp
push 0x4d3f48
call fcn.00404280
mov ecx, dword [edi + 0x198]
call fcn.0041ecd0
mov ecx, dword [edi + 0x198]
push 0x6d615a
call fcn.0041ed70
movaps xmm0, xmmword [0x4d3ff0]
sub esp, 0x10
mov ecx, dword [edi + 0x198]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.004205f0
mov ecx, dword [edi + 0x198]
push 0xfffffffffffffff1
call fcn.0041ed90
mov ecx, dword [edi + 0x198]
push 2
call fcn.00407010
mov ecx, dword [edi + 0x198]
push 1
call fcn.0041ec20
mov ecx, dword [edi + 0x198]
test ecx, ecx
je 0x47cfe6
lea eax, [edi + 0x168]
test eax, eax
je 0x47cfe6
push eax
push 0x190
call fcn.004019a0
push 0x1b0
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 9
test eax, eax
je 0x47d00f
mov ecx, eax
call fcn.00414f00
mov ecx, eax
mov dword [ebp - 0x14], eax
jmp 0x47d014
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x19c], ecx
je 0x47d046
test ecx, ecx
je 0x47d030
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x19c]
mov dword [edi + 0x19c], ecx
test eax, eax
je 0x47d046
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x19c]
push esi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x19c]
push 0
call fcn.00406090
mov ecx, dword [edi + 0x19c]
push 1
call fcn.00406070
mov ecx, dword [edi + 0x19c]
push 1
call fcn.00406050
push ecx
mov ecx, esp
push 0x4d3f64
call fcn.00404280
mov ecx, dword [edi + 0x19c]
call fcn.00415650
mov ecx, dword [edi + 0x19c]
push 2
call fcn.00407010
mov ecx, dword [edi + 0x19c]
push 0x666666
mov eax, dword [ecx]
call dword [eax + 0x134]
mov ecx, dword [edi + 0x19c]
push 1
call fcn.004171d0
mov ecx, dword [edi + 0x19c]
push 0xfffffffffffffff1
call fcn.00416400
mov ecx, dword [edi + 0x19c]
push 1
call fcn.00406200
mov ecx, dword [edi + 0x19c]
test ecx, ecx
je 0x47d0f7
lea eax, [edi + 0x168]
test eax, eax
je 0x47d0f7
push eax
push 0x384
call fcn.004019a0
push 0x320
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0xa
test eax, eax
je 0x47d11d
mov ecx, eax
call fcn.0040a870
mov esi, eax
jmp 0x47d11f
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x194], esi
je 0x47d14e
test esi, esi
je 0x47d138
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x194]
mov dword [edi + 0x194], esi
test eax, eax
je 0x47d14e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x194]
push edi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x194]
push 1
call fcn.00406090
mov ecx, dword [edi + 0x194]
push 1
call fcn.00407010
mov ecx, dword [edi + 0x194]
movaps xmm0, xmmword [0x4d3980]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x194]
movaps xmm0, xmmword [0x4d4040]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0x4d3f70
lea ecx, [ebp - 0x14]
call fcn.00404280
mov ecx, dword [edi + 0x194]
lea edx, [ebp - 0x14]
push edx
mov dword [ebp - 4], 0xb
mov eax, dword [ecx]
call dword [eax + 0x150]
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x47d1f7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [edi + 0x194]
push 0xffffff
call fcn.0040c730
mov ecx, dword [edi + 0x194]
push 1
call fcn.0040cd00
mov ecx, dword [edi + 0x194]
push 0xffffffffffffffec
call fcn.0040eed0
movaps xmm0, xmmword [0x4d40d0]
sub esp, 0x10
mov ecx, dword [edi + 0x194]
mov eax, esp
push 3
push 0xa2
movups xmmword [eax], xmm0
call fcn.0040eb40
mov ecx, dword [edi + 0x194]
test ecx, ecx
je 0x47d25e
lea eax, [edi + 0x168]
test eax, eax
je 0x47d25e
push eax
push 0
call fcn.004019a0
push 0x168
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0xc
test eax, eax
je 0x47d284
mov ecx, eax
call fcn.00409cb0
mov esi, eax
jmp 0x47d286
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push edi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x14]
push 1
mov ecx, esi
call fcn.00406090
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0xe
mov eax, dword [esi]
call dword [eax + 0x5c]
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0xf
mov dword [eax + 8], 0x14
mov dword [eax + 0xc], 5
mov eax, dword [esi]
call dword [eax + 0x80]
push 2
mov ecx, esi
call fcn.004060b0
push 0x320
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0xd
test eax, eax
je 0x47d325
mov ecx, eax
call fcn.0040a870
mov ecx, eax
mov dword [ebp - 0x14], eax
jmp 0x47d32a
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x1a0], ecx
je 0x47d35c
test ecx, ecx
je 0x47d346
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x1a0]
mov dword [edi + 0x1a0], ecx
test eax, eax
je 0x47d35c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x1a0]
push esi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x1a0]
push 2
call fcn.00406090
mov ecx, dword [edi + 0x1a0]
push 2
call fcn.00407010
mov ecx, dword [edi + 0x1a0]
movaps xmm0, xmmword [0x4d40c0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x1a0]
xorps xmm0, xmm0
push 1
sub esp, 0x10
mov eax, esp
mov edx, dword [ecx]
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0x4d3f7c
lea ecx, [ebp - 0x14]
call fcn.00404280
mov ecx, dword [edi + 0x1a0]
lea edx, [ebp - 0x14]
push edx
mov dword [ebp - 4], 0xe
mov eax, dword [ecx]
call dword [eax + 0x150]
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x47d401
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
movaps xmm0, xmmword [0x4d4060]
mov ecx, dword [edi + 0x1a0]
push 1
sub esp, 0x10
mov eax, esp
movups xmmword [eax], xmm0
call fcn.0040f000
mov ecx, dword [edi + 0x1a0]
push 0
call fcn.0040efc0
mov ecx, dword [edi + 0x1a0]
push 2
call fcn.0040efe0
mov ecx, dword [edi + 0x1a0]
push 0x666666
call fcn.0040c730
mov ecx, dword [edi + 0x1a0]
push 1
call fcn.0040cd00
push 0xe8
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0xf
test eax, eax
je 0x47d47a
mov ecx, eax
call fcn.0040f8b0
mov esi, eax
jmp 0x47d47c
xor esi, esi
push 3
push 0xa3
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.0040f580
mov ecx, dword [edi + 0x1a0]
push esi
call fcn.0040c900
mov ecx, dword [edi + 0x1a0]
test ecx, ecx
je 0x47d4b9
lea eax, [edi + 0x168]
test eax, eax
je 0x47d4b9
push eax
push 0
call fcn.004019a0
push 0x168
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x10
test eax, eax
je 0x47d4e2
mov ecx, eax
call fcn.00409cb0
mov esi, eax
mov dword [ebp - 0x10], eax
jmp 0x47d4e7
xor esi, esi
mov dword [ebp - 0x10], esi
mov eax, dword [esi]
mov ecx, esi
push edi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x14]
push 1
mov ecx, esi
call fcn.00406090
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0x50
mov eax, dword [esi]
call dword [eax + 0x5c]
push 0x1c8
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x11
test eax, eax
je 0x47d54e
mov ecx, eax
call fcn.0041e7e0
mov esi, eax
jmp 0x47d550
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x1a4], esi
je 0x47d57f
test esi, esi
je 0x47d569
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x1a4]
mov dword [edi + 0x1a4], esi
test eax, eax
je 0x47d57f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x1a4]
push dword [ebp - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x1a4]
push 1
call fcn.0041ec70
mov ecx, dword [edi + 0x1a4]
push 1
call fcn.00406090
movaps xmm0, xmmword [0x4d40b0]
sub esp, 0x10
mov ecx, dword [edi + 0x1a4]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.004205b0
sub esp, 0x10
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 5
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ecx, dword [edi + 0x1a4]
call fcn.00420650
mov ecx, dword [edi + 0x1a4]
movaps xmm0, xmmword [0x4d40f0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x1a4]
movaps xmm0, xmmword [0x4d4020]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0xe8
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x12
test eax, eax
je 0x47d64d
mov ecx, eax
call fcn.0040f8b0
mov esi, eax
jmp 0x47d64f
xor esi, esi
push 3
push 0xa1
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.0040f580
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0x18
mov dword [eax + 4], 0
mov dword [eax + 8], 0x24
mov dword [eax + 0xc], 0xc
call fcn.00410420
mov ecx, dword [edi + 0x1a4]
push esi
push esi
push esi
call fcn.0041ef90
push 0xe8
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x13
test eax, eax
je 0x47d6c1
mov ecx, eax
call fcn.0040f8b0
mov esi, eax
jmp 0x47d6c3
xor esi, esi
push 3
push 0xa1
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.0040f580
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0xc
mov dword [eax + 0xc], 0xc
call fcn.00410420
push 0xe8
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x14
test eax, eax
je 0x47d725
mov ecx, eax
call fcn.0040f8b0
jmp 0x47d727
xor eax, eax
push 3
push 0xa1
mov ecx, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xffffffff
call fcn.0040f580
mov ecx, dword [ebp - 0x14]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], 0xc
mov dword [eax + 4], 0
mov dword [eax + 8], 0x18
mov dword [eax + 0xc], 0xc
call fcn.00410420
mov eax, dword [ebp - 0x14]
mov ecx, dword [edi + 0x1a4]
push eax
push eax
push esi
call fcn.0041f0d0
push ecx
mov ecx, esp
push 0x4d3f88
call fcn.00404280
mov ecx, dword [edi + 0x1a4]
call fcn.0041ecd0
mov ecx, dword [edi + 0x1a4]
push 0x999999
call fcn.0041ed70
movaps xmm0, xmmword [0x4d3ff0]
sub esp, 0x10
mov ecx, dword [edi + 0x1a4]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.004205f0
mov ecx, dword [edi + 0x1a4]
push 0xfffffffffffffff2
call fcn.0041ed90
mov ecx, dword [edi + 0x1a4]
test ecx, ecx
je 0x47d7e8
lea eax, [edi + 0x168]
test eax, eax
je 0x47d7e8
push eax
push 0x190
call fcn.004019a0
push 0x168
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x15
test eax, eax
je 0x47d80e
mov ecx, eax
call fcn.00409cb0
mov esi, eax
jmp 0x47d810
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x180], esi
je 0x47d83f
test esi, esi
je 0x47d829
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x180]
mov dword [edi + 0x180], esi
test eax, eax
je 0x47d83f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x180]
push dword [ebp - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x180]
push 1
call fcn.00406090
mov ecx, dword [edi + 0x180]
movaps xmm0, xmmword [0x4f0400]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x180]
movaps xmm0, xmmword [0x4d4030]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
mov ecx, dword [edi + 0x180]
push 2
call fcn.004060b0
push 0x1b0
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x16
test eax, eax
je 0x47d8c8
mov ecx, eax
call fcn.00414f00
mov esi, eax
jmp 0x47d8ca
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x184], esi
je 0x47d8f9
test esi, esi
je 0x47d8e3
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x184]
mov dword [edi + 0x184], esi
test eax, eax
je 0x47d8f9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x184]
push dword [edi + 0x180]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x184]
push 0
call fcn.00406090
mov ecx, dword [edi + 0x184]
push 1
call fcn.00406070
mov ecx, dword [edi + 0x184]
push 1
call fcn.00406050
push ecx
mov ecx, esp
push 0x4d3fa0
call fcn.00404280
mov ecx, dword [edi + 0x184]
call fcn.00415650
mov ecx, dword [edi + 0x184]
movaps xmm0, xmmword [0x4d4000]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
mov ecx, dword [edi + 0x184]
push 2
call fcn.00407010
mov ecx, dword [edi + 0x184]
push 0x999999
mov eax, dword [ecx]
call dword [eax + 0x134]
push 0x320
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x17
test eax, eax
je 0x47d9ae
mov ecx, eax
call fcn.0040a870
mov esi, eax
jmp 0x47d9b0
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x188], esi
je 0x47d9df
test esi, esi
je 0x47d9c9
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x188]
mov dword [edi + 0x188], esi
test eax, eax
je 0x47d9df
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x188]
push dword [edi + 0x180]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x188]
push 2
call fcn.00406090
mov ecx, dword [edi + 0x188]
push 2
call fcn.00407010
mov ecx, dword [edi + 0x188]
movaps xmm0, xmmword [0x4d4110]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x188]
movaps xmm0, xmmword [0x4d4070]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0x4d3fac
lea ecx, [ebp - 0x10]
call fcn.00404280
mov ecx, dword [edi + 0x188]
lea edx, [ebp - 0x10]
push edx
mov dword [ebp - 4], 0x18
mov eax, dword [ecx]
call dword [eax + 0x150]
mov edx, dword [ebp - 0x10]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x47da8d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [edi + 0x188]
push 1
call fcn.0040cd00
push 0xe8
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x19
test eax, eax
je 0x47dac0
mov ecx, eax
call fcn.0040f8b0
mov esi, eax
jmp 0x47dac2
xor esi, esi
push 3
push 0x8c
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.0040f580
push 2
mov ecx, esi
call fcn.00410410
movaps xmm0, xmmword [0x4d40e0]
sub esp, 0x10
mov eax, esp
mov ecx, esi
movups xmmword [eax], xmm0
call fcn.00410560
mov ecx, dword [edi + 0x188]
push esi
call fcn.0040b080
mov ecx, dword [edi + 0x188]
push esi
call fcn.0040b040
mov ecx, dword [edi + 0x188]
push esi
call fcn.0040c7b0
mov ecx, dword [edi + 0x188]
push esi
call fcn.0040b000
mov ecx, dword [edi + 0x188]
xor eax, eax
cmp dword [0x508280], eax
sete al
mov edx, dword [ecx]
push eax
call dword [edx + 0xf8]
mov ecx, dword [edi + 0x188]
test ecx, ecx
je 0x47db5c
lea eax, [edi + 0x168]
test eax, eax
je 0x47db5c
push eax
push 0
call fcn.004019a0
push 0x168
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1a
test eax, eax
je 0x47db82
mov ecx, eax
call fcn.00409cb0
mov esi, eax
jmp 0x47db84
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x18c], esi
je 0x47dbb3
test esi, esi
je 0x47db9d
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x18c]
mov dword [edi + 0x18c], esi
test eax, eax
je 0x47dbb3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x18c]
push dword [edi + 0x180]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x18c]
push 4
call fcn.00406090
mov ecx, dword [edi + 0x18c]
movaps xmm0, xmmword [0x4f0400]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x18c]
movaps xmm0, xmmword [0x4d4080]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0xe8
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1b
test eax, eax
je 0x47dc32
mov ecx, eax
call fcn.0040f8b0
mov esi, eax
jmp 0x47dc34
xor esi, esi
push 3
push 0x8c
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.0040f580
push 2
mov ecx, esi
call fcn.00410410
movaps xmm0, xmmword [0x4d40e0]
sub esp, 0x10
mov eax, esp
mov ecx, esi
movups xmmword [eax], xmm0
call fcn.00410560
mov ecx, dword [edi + 0x18c]
push esi
mov eax, dword [ecx]
call dword [eax + 0xa8]
push 0x1e0
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1c
test eax, eax
je 0x47dc9d
mov ecx, eax
call fcn.00420b60
mov esi, eax
jmp 0x47dc9f
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x190], esi
je 0x47dcce
test esi, esi
je 0x47dcb8
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x190]
mov dword [edi + 0x190], esi
test eax, eax
je 0x47dcce
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x190]
push 0x800
call fcn.00421690
mov ecx, dword [edi + 0x190]
push dword [edi + 0x18c]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x190]
push 4
call fcn.00406090
mov eax, dword [0x504094]
cmp eax, 0xffffffff
jne 0x47dda5
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 6
jb 0x47dd27
movaps xmm0, xmmword [0x4d4090]
mov dword [0x504094], 1
jmp 0x47dd38
mov dword [0x504094], 0
movaps xmm0, xmmword [0x4d40a0]
mov ecx, dword [edi + 0x190]
push 1
sub esp, 0x10
mov eax, esp
mov edx, dword [ecx]
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push ecx
mov ecx, esp
push str.c:program_file_
call fcn.00404280
mov ecx, dword [edi + 0x190]
call fcn.00420f70
mov ecx, dword [edi + 0x190]
push 0
mov eax, dword [ecx]
call dword [eax + 0xf8]
mov eax, dword [0x5081cc]
test eax, eax
jne 0x47ddc0
push 0x18c
call fcn.004849d2
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1d
test eax, eax
je 0x47ddb2
mov ecx, eax
call fcn.0042d800
jmp 0x47ddb4
test eax, eax
je 0x47dd31
movaps xmm0, xmmword [0x4d4090]
jmp 0x47dd38
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x5081cc], eax
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [eax + 4]
call fcn.00433c20
push ecx
mov esi, esp
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x20], esi
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
push eax
call fcn.00404410
add eax, 0x10
add esp, 4
mov dword [esi], eax
mov ecx, dword [edi + 0x190]
call fcn.00420f70
mov edi, dword [edi + 0x194]
mov ecx, dword [ebp - 0x1c]
mov esi, dword [edi]
mov ecx, dword [ecx + 0x198]
call fcn.0041ecc0
push eax
mov ecx, edi
call dword [esi + 0xf8]
mov edx, dword [ebp - 0x18]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x47de39
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret