Function at 0x47c4c8
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x4c
push 0
push 0
dec ecx
jne 0x47c4d1
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov esi, eax
xor eax, eax
push ebp
push 0x47db2c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
xor ecx, ecx
mov edx, 0x670
call fcn.00402d1c
mov eax, dword [ebp - 4]
lea ebx, [eax + 8]
mov eax, dword [ebp - 8]
mov edi, dword [eax + 0x218]
lea ecx, [ebp - 0x14]
mov edx, 1
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x10]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x10]
xor edx, edx
call fcn.00408564
mov dword [ebx], eax
lea ecx, [ebp - 0x1c]
mov edx, 2
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x18]
xor edx, edx
call fcn.00408564
mov dword [ebx + 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
add eax, 0x20
mov dword [ebx + 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
add eax, 0x30
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
add eax, 0x10
mov dword [ebx + 4], eax
lea ecx, [ebp - 0x24]
mov edx, 3
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x24]
lea eax, [ebp - 0x20]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x20]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x18], eax
lea ecx, [ebp - 0x2c]
mov edx, 5
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x28]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x28]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x60], eax
lea ecx, [ebp - 0x34]
mov edx, 7
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x34]
lea eax, [ebp - 0x30]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x30]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x24], eax
mov edx, dword [ebx + 0x18]
mov eax, esi
call fcn.0047a050
mov dword [ebx + 0x20], eax
mov edx, dword [ebx + 0x20]
add edx, 0x20
mov eax, esi
call fcn.0047a050
mov dword [ebx + 0x20], eax
add dword [ebx + 0x20], 0x130
lea ecx, [ebp - 0x3c]
mov edx, 8
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0x38]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x38]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x64], eax
lea ecx, [ebp - 0x44]
mov edx, 9
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x44]
lea eax, [ebp - 0x40]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x40]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xc0], eax
lea ecx, [ebp - 0x4c]
mov edx, 0xa
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x4c]
lea eax, [ebp - 0x48]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x48]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xc4], eax
lea ecx, [ebp - 0x54]
mov edx, 0xb
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x54]
lea eax, [ebp - 0x50]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x50]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xd0], eax
lea ecx, [ebp - 0x5c]
mov edx, 0xc
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x5c]
lea eax, [ebp - 0x58]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x58]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xcc], eax
lea ecx, [ebp - 0x64]
mov edx, 0xe
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x64]
lea eax, [ebp - 0x60]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x60]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x80], eax
lea ecx, [ebp - 0x6c]
mov edx, 0xf
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x6c]
lea eax, [ebp - 0x68]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x68]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x84], eax
lea ecx, [ebp - 0x74]
mov edx, 0x10
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x74]
lea eax, [ebp - 0x70]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x70]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x88], eax
lea ecx, [ebp - 0x7c]
mov edx, 0x11
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x7c]
lea eax, [ebp - 0x78]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x78]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xd4], eax
lea ecx, [ebp - 0x84]
mov edx, 0x12
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0x80]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x80]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xd8], eax
lea ecx, [ebp - 0x8c]
mov edx, 0x13
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x8c]
lea eax, [ebp - 0x88]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x88]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xf0], eax
lea ecx, [ebp - 0x94]
mov edx, 0x14
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x90]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x90]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xc8], eax
lea ecx, [ebp - 0x9c]
mov edx, 0x15
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x9c]
lea eax, [ebp - 0x98]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x98]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x90], eax
lea ecx, [ebp - 0xa4]
mov edx, 0x16
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0xa4]
lea eax, [ebp - 0xa0]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0xa0]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x94], eax
lea ecx, [ebp - 0xac]
mov edx, 0x17
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0xac]
lea eax, [ebp - 0xa8]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0xa8]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x70], eax
lea ecx, [ebp - 0xb4]
mov edx, 0x18
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0xb4]
lea eax, [ebp - 0xb0]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0xb0]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x74], eax
lea ecx, [ebp - 0xbc]
mov edx, 0x19
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0xbc]
lea eax, [ebp - 0xb8]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0xb8]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x78], eax
lea ecx, [ebp - 0xc4]
mov edx, 0x1a
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0xc4]
lea eax, [ebp - 0xc0]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0xc0]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xe4], eax
lea ecx, [ebp - 0xcc]
mov edx, 0x1b
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0xcc]
lea eax, [ebp - 0xc8]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0xc8]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xe8], eax
lea ecx, [ebp - 0xd4]
mov edx, 0x1c
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0xd4]
lea eax, [ebp - 0xd0]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0xd0]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x98], eax
lea ecx, [ebp - 0xdc]
mov edx, 0x1d
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0xdc]
lea eax, [ebp - 0xd8]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0xd8]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x9c], eax
lea ecx, [ebp - 0xe4]
mov edx, 0x1e
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0xe4]
lea eax, [ebp - 0xe0]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0xe0]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xa0], eax
lea ecx, [ebp - 0xec]
mov edx, 0x1f
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0xec]
lea eax, [ebp - 0xe8]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0xe8]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xa4], eax
lea ecx, [ebp - 0xf4]
mov edx, 0x20
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0xf4]
lea eax, [ebp - 0xf0]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0xf0]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xa8], eax
lea ecx, [ebp - 0xfc]
mov edx, 0x21
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0xfc]
lea eax, [ebp - 0xf8]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0xf8]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xac], eax
lea ecx, [ebp - 0x104]
mov edx, 0x22
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x104]
lea eax, [ebp - 0x100]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x100]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xb0], eax
lea ecx, [ebp - 0x10c]
mov edx, 0x23
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x10c]
lea eax, [ebp - 0x108]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x108]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xb4], eax
lea ecx, [ebp - 0x114]
mov edx, 0x24
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x114]
lea eax, [ebp - 0x110]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x110]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xb8], eax
lea ecx, [ebp - 0x11c]
mov edx, 0x25
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x11c]
lea eax, [ebp - 0x118]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x118]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xbc], eax
lea ecx, [ebp - 0x124]
mov edx, 0x26
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x124]
lea eax, [ebp - 0x120]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x120]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x8c], eax
lea ecx, [ebp - 0x12c]
mov edx, 0x27
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x12c]
lea eax, [ebp - 0x128]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x128]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x68], eax
lea ecx, [ebp - 0x134]
mov edx, 0x28
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x134]
lea eax, [ebp - 0x130]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x130]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x1c], eax
lea ecx, [ebp - 0x13c]
mov edx, 0x29
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x138]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x138]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x6c], eax
lea ecx, [ebp - 0x144]
mov edx, 0x2a
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x144]
lea eax, [ebp - 0x140]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x140]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x7c], eax
lea ecx, [ebp - 0x14c]
mov edx, 0x2b
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x14c]
lea eax, [ebp - 0x148]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x148]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xec], eax
lea ecx, [ebp - 0x154]
mov edx, 0x2c
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x154]
lea eax, [ebp - 0x150]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x150]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x10], eax
lea ecx, [ebp - 0x15c]
mov edx, 0x2d
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x15c]
lea eax, [ebp - 0x158]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x158]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x14], eax
lea ecx, [ebp - 0x164]
mov edx, 0x41
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x164]
lea eax, [ebp - 0x160]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x160]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xf4], eax
lea ecx, [ebp - 0x16c]
mov edx, 0x42
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x16c]
lea eax, [ebp - 0x168]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x168]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xf8], eax
lea ecx, [ebp - 0x174]
mov edx, 0x43
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x174]
lea eax, [ebp - 0x170]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x170]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xfc], eax
lea ecx, [ebp - 0x17c]
mov edx, 0x47
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x17c]
lea eax, [ebp - 0x178]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x178]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x5c], eax
mov eax, dword [ebp - 4]
lea ebx, [eax + 0x108]
mov eax, dword [ebp - 8]
mov edi, dword [eax + 0x218]
lea ecx, [ebp - 0x184]
mov edx, 4
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x184]
lea eax, [ebp - 0x180]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x180]
xor edx, edx
call fcn.00408564
mov dword [ebx + 8], eax
lea ecx, [ebp - 0x18c]
mov edx, 0xd
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x18c]
lea eax, [ebp - 0x188]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x188]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0xc], eax
lea ecx, [ebp - 0x194]
mov edx, 0x2e
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x194]
lea eax, [ebp - 0x190]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x190]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x10], eax
lea ecx, [ebp - 0x19c]
mov edx, 0x2f
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x19c]
lea eax, [ebp - 0x198]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x198]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x14], eax
lea ecx, [ebp - 0x1a4]
mov edx, 0x30
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1a4]
lea eax, [ebp - 0x1a0]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x1a0]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x28], eax
lea ecx, [ebp - 0x1ac]
mov edx, 0x31
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1ac]
lea eax, [ebp - 0x1a8]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x1a8]
xor edx, edx
call fcn.00408564
mov dword [ebx], eax
lea ecx, [ebp - 0x1b4]
mov edx, 0x32
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1b4]
lea eax, [ebp - 0x1b0]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x1b0]
xor edx, edx
call fcn.00408564
mov dword [ebx + 4], eax
lea ecx, [ebp - 0x1bc]
mov edx, 0x33
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1bc]
lea eax, [ebp - 0x1b8]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x1b8]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x2c], eax
lea ecx, [ebp - 0x1c4]
mov edx, 0x34
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1c4]
lea eax, [ebp - 0x1c0]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x1c0]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x30], eax
lea ecx, [ebp - 0x1cc]
mov edx, 0x35
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1cc]
lea eax, [ebp - 0x1c8]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x1c8]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x18], eax
lea ecx, [ebp - 0x1d4]
mov edx, 0x36
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1d4]
lea eax, [ebp - 0x1d0]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x1d0]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x1c], eax
lea ecx, [ebp - 0x1dc]
mov edx, 0x37
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1dc]
lea eax, [ebp - 0x1d8]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x1d8]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x20], eax
lea ecx, [ebp - 0x1e4]
mov edx, 0x38
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1e4]
lea eax, [ebp - 0x1e0]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x1e0]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x24], eax
lea ecx, [ebp - 0x1ec]
mov edx, 0x39
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1ec]
lea eax, [ebp - 0x1e8]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x1e8]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x34], eax
lea ecx, [ebp - 0x1f4]
mov edx, 0x3a
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1f4]
lea eax, [ebp - 0x1f0]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x1f0]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x50], eax
lea ecx, [ebp - 0x1fc]
mov edx, 0x3c
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x1fc]
lea eax, [ebp - 0x1f8]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x1f8]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x54], eax
lea ecx, [ebp - 0x204]
mov edx, 0x3d
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x204]
lea eax, [ebp - 0x200]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x200]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x58], eax
lea ecx, [ebp - 0x20c]
mov edx, 0x3e
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x20c]
lea eax, [ebp - 0x208]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x208]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x5c], eax
lea ecx, [ebp - 0x214]
mov edx, 0x3f
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x214]
lea eax, [ebp - 0x210]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x210]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x60], eax
lea ecx, [ebp - 0x21c]
mov edx, 0x40
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x21c]
lea eax, [ebp - 0x218]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x218]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x64], eax
lea ecx, [ebp - 0x224]
mov edx, 0x44
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x220]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x220]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x68], eax
lea ecx, [ebp - 0x22c]
mov edx, 0x45
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x22c]
lea eax, [ebp - 0x228]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x228]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x6c], eax
lea ecx, [ebp - 0x234]
mov edx, 0x46
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x234]
lea eax, [ebp - 0x230]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x230]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x70], eax
lea ecx, [ebp - 0x23c]
mov edx, 0x48
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x23c]
lea eax, [ebp - 0x238]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x238]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x38], eax
lea ecx, [ebp - 0x244]
mov edx, 0x49
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x244]
lea eax, [ebp - 0x240]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x240]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x3c], eax
lea ecx, [ebp - 0x24c]
mov edx, 0x4a
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x24c]
lea eax, [ebp - 0x248]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x248]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x40], eax
lea ecx, [ebp - 0x254]
mov edx, 0x4b
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x250]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x250]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x44], eax
lea ecx, [ebp - 0x25c]
mov edx, 0x4c
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x25c]
lea eax, [ebp - 0x258]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x258]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x48], eax
lea ecx, [ebp - 0x264]
mov edx, 0x4d
mov eax, edi
call fcn.0041a914
mov ecx, dword [ebp - 0x264]
lea eax, [ebp - 0x260]
mov edx, 0x47db44
call fcn.0040442c
mov eax, dword [ebp - 0x260]
xor edx, edx
call fcn.00408564
mov dword [ebx + 0x4c], eax
mov edi, dword [ebp - 4]
lea eax, [ebp - 0xc]
mov edx, 0x10
call fcn.0040476c
lea eax, [ebp - 0xc]
call fcn.00404638
add eax, 4
mov dword [eax], 0x32336c65
lea eax, [ebp - 0xc]
call fcn.00404638
mov dword [eax], 0x6e72656b
lea eax, [ebp - 0xc]
call fcn.00404638
mov byte [eax + 8], 0
mov eax, dword [ebp - 0xc]
call fcn.004045e0
push eax
call sub.kernel32.dll_GetModuleHandleA_2
mov ebx, eax
lea eax, [ebp - 0xc]
call fcn.00404638
add eax, 4
mov word [eax], 0x70
lea eax, [ebp - 0xc]
call fcn.00404638
mov dword [eax], 0x65656c53
mov eax, dword [ebp - 0xc]
call fcn.004045e0
push eax
push ebx
call sub.kernel32.dll_GetProcAddress_1
mov dword [edi], eax
lea eax, [ebp - 0xc]
call fcn.00404638
add eax, 4
mov dword [eax], 0x3233
lea eax, [ebp - 0xc]
call fcn.00404638
mov dword [eax], 0x72657375
mov eax, dword [ebp - 0xc]
call fcn.004045e0
push eax
call sub.kernel32.dll_GetModuleHandleA_2
mov ebx, eax
lea eax, [ebp - 0xc]
call fcn.00404638
add eax, 4
mov dword [eax], 0x7373654d
lea eax, [ebp - 0xc]
call fcn.00404638
mov dword [eax], 0x74736f50
lea eax, [ebp - 0xc]
call fcn.00404638
add eax, 8
mov dword [eax], 0x41656761
lea eax, [ebp - 0xc]
call fcn.00404638
mov byte [eax + 0xc], 0
mov eax, dword [ebp - 0xc]
call fcn.004045e0
push eax
push ebx
call sub.kernel32.dll_GetProcAddress_1
mov dword [edi + 4], eax
mov eax, dword [ebp - 4]
lea ebx, [eax + 8]
mov edx, dword [ebx + 0x18]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x1c
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x20
mov eax, esi
call fcn.0047a050
mov dword [ebx + 0x28], eax
mov edx, dword [ebx + 0x18]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x1c
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 8
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x20
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x18
mov eax, esi
call fcn.0047a050
mov dword [ebx + 0x2c], eax
mov edx, dword [ebx + 0x18]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x1c
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 8
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x24
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x18
mov eax, esi
call fcn.0047a050
mov dword [ebx + 0x30], eax
mov edx, dword [ebx + 0x18]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x1c
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 8
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x28
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x18
mov eax, esi
call fcn.0047a050
mov dword [ebx + 0x34], eax
mov edx, dword [ebx + 0x18]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x1c
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x20
mov eax, esi
call fcn.0047a050
mov edx, eax
mov eax, dword [ebp - 4]
add edx, dword [eax + 0x120]
mov eax, esi
call fcn.0047a050
mov dword [ebx + 0x40], eax
mov edx, dword [ebx + 0x18]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x1c
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x20
mov eax, esi
call fcn.0047a050
mov edx, eax
mov eax, dword [ebp - 4]
add edx, dword [eax + 0x124]
mov eax, esi
call fcn.0047a050
mov dword [ebx + 0x48], eax
mov edx, dword [ebx + 0x18]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x1c
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x20
mov eax, esi
call fcn.0047a050
mov edx, eax
mov eax, dword [ebp - 4]
add edx, dword [eax + 0x114]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x14
mov eax, esi
call fcn.0047a050
add eax, 4
mov dword [ebx + 0x44], eax
mov edx, dword [ebx + 0x18]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x1c
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x20
mov eax, esi
call fcn.0047a050
mov edx, eax
mov eax, dword [ebp - 4]
add edx, dword [eax + 0x118]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0xc
mov eax, esi
call fcn.0047a050
mov dword [ebx + 0x38], eax
mov edx, dword [ebx + 0x18]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x1c
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x20
mov eax, esi
call fcn.0047a050
mov edx, eax
mov eax, dword [ebp - 4]
add edx, dword [eax + 0x118]
add edx, 4
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0xc
mov eax, esi
call fcn.0047a050
mov dword [ebx + 0x4c], eax
mov edx, dword [ebx + 0x18]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x1c
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x20
mov eax, esi
call fcn.0047a050
mov edx, eax
mov eax, dword [ebp - 4]
add edx, dword [eax + 0x134]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0xc
mov eax, esi
call fcn.0047a050
mov dword [ebx + 0x50], eax
mov edx, dword [ebx + 0x18]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x1c
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0x20
mov eax, esi
call fcn.0047a050
mov edx, eax
mov eax, dword [ebp - 4]
add edx, dword [eax + 0x138]
mov eax, esi
call fcn.0047a050
mov edx, eax
add edx, 0xc
mov eax, esi
call fcn.0047a050
mov dword [ebx + 0x54], eax
mov eax, dword [ebx + 0x28]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x12c]
mov dword [ebx + 0x58], eax
mov eax, dword [ebx + 0x28]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x110]
mov dword [ebx + 0x3c], eax
mov ebx, fcn.0047b088
mov eax, dword [ebp - 4]
add eax, 0x17c
mov edx, 0x47b280
sub edx, ebx
mov dword [eax], edx
mov edx, 0x47b2b8
sub edx, ebx
mov dword [eax + 4], edx
mov edx, 0x47b548
sub edx, ebx
mov dword [eax + 8], edx
mov edx, 0x47b594
sub edx, ebx
mov dword [eax + 0xc], edx
mov edx, 0x47bc1c
sub edx, ebx
mov dword [eax + 0x3c], edx
mov edx, 0x47bc54
sub edx, ebx
mov dword [eax + 0x40], edx
mov edx, 0x47bf5c
sub edx, ebx
mov dword [eax + 0x50], edx
mov edx, 0x47bef0
sub edx, ebx
mov dword [eax + 0x4c], edx
mov edx, 0x47b964
sub edx, ebx
mov dword [eax + 0x20], edx
mov edx, fcn.0047b9a0
sub edx, ebx
mov dword [eax + 0x24], edx
mov edx, 0x47c020
sub edx, ebx
mov dword [eax + 0x58], edx
mov edx, 0x47c254
sub edx, ebx
mov dword [eax + 0x6c], edx
mov edx, 0x47bcc4
sub edx, ebx
mov dword [eax + 0x44], edx
mov edx, 0x47bd00
sub edx, ebx
mov dword [eax + 0x48], edx
mov edx, 0x47ba40
sub edx, ebx
mov dword [eax + 0x2c], edx
mov edx, 0x47ba80
sub edx, ebx
mov dword [eax + 0x30], edx
mov edx, fcn.0047b850
sub edx, ebx
mov dword [eax + 0x18], edx
mov edx, fcn.0047c188
sub edx, ebx
mov dword [eax + 0x64], edx
mov edx, 0x47bac0
sub edx, ebx
mov dword [eax + 0x34], edx
mov edx, 0x47bb88
sub edx, ebx
mov dword [eax + 0x38], edx
mov edx, 0x47b9d4
sub edx, ebx
mov dword [eax + 0x28], edx
mov edx, fcn.0047b1e4
sub edx, ebx
mov dword [eax + 0x10], edx
mov edx, 0x47b21c
sub edx, ebx
mov dword [eax + 0x14], edx
mov edx, 0x47b920
sub edx, ebx
mov dword [eax + 0x1c], edx
mov edx, fcn.0047b25c
sub edx, ebx
mov dword [eax + 0x68], edx
mov edx, 0x47bf9c
sub edx, ebx
mov dword [eax + 0x54], edx
mov edx, 0x47c090
sub edx, ebx
mov dword [eax + 0x5c], edx
mov edx, 0x47c0d4
sub edx, ebx
mov dword [eax + 0x60], edx
mov edx, 0x47b70c
sub edx, ebx
mov dword [eax + 0x70], edx
mov edx, 0x47c27c
sub edx, ebx
mov dword [eax + 0x74], edx
mov edx, 0x47c2b0
sub edx, ebx
mov dword [eax + 0x78], edx
mov edx, fcn.0047c2d8
sub edx, ebx
mov dword [eax + 0x7c], edx
mov ebx, dword [ebp - 4]
mov eax, dword [ebp - 4]
add eax, 0x1fc
mov edx, dword [ebp - 4]
add edx, 0x21c
sub edx, ebx
mov dword [eax], edx
mov edx, dword [ebp - 4]
add edx, 0x22c
sub edx, ebx
mov dword [eax + 4], edx
mov edx, dword [ebp - 4]
add edx, 0x230
sub edx, ebx
mov dword [eax + 8], edx
mov edx, dword [ebp - 4]
add edx, 0x23c
sub edx, ebx
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 4]
add edx, 0x240
sub edx, ebx
mov dword [eax + 0x10], edx
mov edx, dword [ebp - 4]
add edx, 0x24c
sub edx, ebx
mov dword [eax + 0x14], edx
mov edx, dword [ebp - 4]
add edx, 0x34c
sub edx, ebx
mov dword [eax + 0x18], edx
mov edx, dword [ebp - 4]
add edx, 0x35c
sub edx, ebx
mov dword [eax + 0x1c], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47db33
lea eax, [ebp - 0x264]
mov edx, 0x64
call fcn.00404144
lea eax, [ebp - 0xd4]
mov edx, 0x33
call fcn.00404144
ret