Function at 0x47f190
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4f04d1
push eax
mov eax, 0x165c
mov dword fs:[0], esp
call fcn.004dcdf0
push ebx
push ebp
mov ebx, ecx
push esi
push edi
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x168c]
xor esi, esi
cmp eax, esi
mov dword [esp + 0x1674], esi
jne 0x47f1ec
lea ecx, [esp + 0x167c]
mov dword [esp + 0x1674], 0xffffffff
call fcn.004ae200
or eax, 0xffffffff
jmp 0x47ff26
lea ecx, [esp + 0x60]
call fcn.0047dd70
mov eax, dword [ebx + 4]
lea ecx, [esp + 0x60]
push eax
mov byte [esp + 0x1678], 1
call fcn.00485300
test eax, eax
je 0x47fefc
mov ecx, dword [ebx + 0x1c]
push ecx
lea ecx, [esp + 0x64]
call fcn.00483f90
test eax, eax
je 0x47fefc
mov eax, dword [esp + 0x1690]
mov ebp, dword [esp + 0x168c]
mov edx, dword [esp + 0x1688]
lea ecx, [esp + 0x34]
push eax
push ecx
lea ecx, [esp + 0x1684]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], edx
call fcn.004ae2c0
mov edi, 0x512a68
or ecx, 0xffffffff
xor eax, eax
mov edx, dword [esp + 0x3c]
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov byte [esp + 0x1674], 2
push ecx
push 0x512a68
push edx
push esi
lea ecx, [esp + 0x44]
call fcn.00402c10
cmp eax, esi
jne 0x47f2ca
lea eax, [esp + 0xd0]
push 0x15
push eax
mov ecx, 0x513088
call fcn.0047dbf0
mov ecx, dword [0x4f4164]
mov byte [esp + 0x1674], 3
push ecx
push esi
push eax
lea ecx, [esp + 0x40]
call fcn.004017e0
push 1
lea ecx, [esp + 0xd4]
mov byte [esp + 0x1678], 2
call fcn.004019e0
mov eax, dword [esp + 0x54]
lea edx, [esp + 0x90]
push edx
push eax
lea ecx, [esp + 0x1684]
call fcn.004ae280
cmp dword [esp + 0x98], esi
jne 0x47fba6
push 4
lea ecx, [esp + 0x64]
call fcn.0047df80
cmp eax, esi
je 0x47fd90
cmp dword [esp + 0x1698], 0xffffffff
je 0x47f3b3
mov eax, dword [esp + 0x16b8]
test eax, eax
jne 0x47f3b3
lea ecx, [esp + 0x4dc]
call fcn.00495ed0
push 0xff
mov byte [esp + 0x1678], 5
call fcn.004dbc04
mov ecx, dword [ebx + 4]
mov edx, dword [esp + 0x169c]
add esp, 4
mov ebp, eax
push ecx
push edx
lea ecx, [esp + 0x4e4]
call fcn.00496690
mov edi, eax
xor esi, esi
test edi, edi
jle 0x47f375
push esi
lea ecx, [esp + 0x4e0]
call fcn.004967d0
inc esi
cmp esi, edi
jl 0x47f363
mov ecx, dword [ebx + 0x1c]
push 0
push 0
push 1
push 0
push 0
push 1
lea eax, [esp + 0x4f4]
push ebp
push eax
call fcn.0048d260
test ebp, ebp
je 0x47f39f
push ebp
call fcn.004db420
add esp, 4
lea ecx, [esp + 0x4dc]
mov byte [esp + 0x1674], 2
call fcn.00495fe0
xor esi, esi
cmp dword [ebx + 0x18], esi
je 0x47f82c
mov ecx, dword [ebx + 0x24]
mov eax, dword [ebx + 0x28]
lea edi, [ebx + 0x20]
push ecx
push eax
push eax
call fcn.004a93e0
add esp, 0xc
mov esi, eax
mov eax, dword [edi + 8]
mov ecx, edi
push eax
push esi
call fcn.004ca170
lea ecx, [esp + 0x6c]
mov dword [edi + 8], esi
mov dword [esp + 0x5c], 0
call fcn.00465530
mov cl, byte [esp + 0x34]
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push 0
mov byte [esp + 0x1688], 6
mov byte [esi], cl
mov ecx, esi
call fcn.004019e0
mov edx, dword [0x4f4164]
lea eax, [esp + 0x44]
push edx
push 0
push eax
mov ecx, esi
call fcn.004017e0
mov ecx, dword [0x512ac4]
call fcn.004655e0
cmp word [esp + 0x58], 0
jle 0x47f5ad
movsx ecx, word [esp + 0x58]
mov ebp, dword [esp + 0x54]
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], ecx
lea edx, [esp + 0x90]
lea ecx, [esp + 0x167c]
push edx
push ebp
call fcn.004ae280
mov eax, dword [ebx + 0xa0]
test eax, eax
je 0x47f531
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x47f58e
mov ecx, dword [ebx + 0x10]
sub ecx, eax
sar ecx, 2
mov dword [esp + 0x18], ecx
je 0x47f58e
mov eax, dword [esp + 0x14]
mov ebx, dword [eax + 0x10]
mov esi, dword [eax + 0xc]
mov ecx, ebx
sub ecx, esi
sar ecx, 2
test ecx, ecx
jle 0x47f4cd
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp dword [esi + eax*4], ebp
lea edx, [esi + eax*4]
jae 0x47f4c7
add edx, 4
mov esi, edx
or edx, 0xffffffff
sub edx, eax
add ecx, edx
jmp 0x47f4c9
mov ecx, eax
test ecx, ecx
jg 0x47f4aa
cmp esi, ebx
je 0x47f58e
cmp ebp, dword [esi]
jb 0x47f58e
cmp dword [esp + 0xa0], 0xffff
jae 0x47f58e
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x80]
movsx ecx, ax
inc eax
push edx
mov dword [esp + 0x60], eax
mov eax, dword [edi + 8]
mov dword [esp + 0x88], ecx
push 1
push eax
mov ecx, edi
mov dword [esp + 0x8c], ebp
call fcn.00460540
mov ecx, dword [esp + 0x9c]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x28], esp
push ecx
push eax
jmp 0x47f577
cmp dword [esp + 0xa0], 0xffff
jae 0x47f58e
mov eax, dword [edi + 8]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x80]
mov dword [esp + 0x80], ebp
push ecx
push 1
push eax
mov ecx, edi
mov dword [esp + 0x90], edx
call fcn.00460540
mov eax, dword [esp + 0x9c]
sub esp, 0x10
mov edx, esp
mov dword [esp + 0x28], esp
push eax
push edx
lea ecx, [esp + 0x1694]
call fcn.004ae2c0
mov ecx, dword [0x512ac4]
call fcn.00465b10
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
inc edx
add ebp, 0x40
dec eax
mov dword [esp + 0x30], edx
mov dword [esp + 0x1c], eax
jne 0x47f455
mov eax, dword [edi + 4]
test eax, eax
jne 0x47f5b8
xor esi, esi
jmp 0x47f5c0
mov esi, dword [edi + 8]
sub esi, eax
sar esi, 3
push esi
push 0
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
call fcn.00480f20
mov ecx, dword [esp + 0x16a0]
mov edx, dword [ebx + 4]
mov eax, dword [ebx + 0x1c]
push ecx
push edx
push eax
lea ecx, [ebx + 0x30]
call fcn.004ab3a0
lea ecx, [esp + 0x6c]
push ecx
mov ecx, dword [0x512ac4]
call fcn.00465c60
test al, al
je 0x47fae5
mov dl, byte [esp + 0x13]
xor edi, edi
xor ebp, ebp
mov byte [esp + 0x20], dl
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
cmp esi, edi
mov byte [esp + 0x1674], 7
jle 0x47f65e
push edi
lea ecx, [esp + 0x70]
call fcn.00465de0
test al, al
je 0x47f652
mov eax, dword [ebx + 0x24]
mov ebp, 1
movsx ecx, di
lea edx, [eax + ecx*8]
mov eax, dword [esp + 0x28]
push edx
push ebp
push eax
lea ecx, [esp + 0x2c]
call fcn.00460540
inc edi
movsx ecx, di
cmp ecx, esi
jl 0x47f626
test ebp, ebp
jne 0x47f689
xor edi, edi
test esi, esi
jle 0x47f689
xor eax, eax
mov edx, dword [esp + 0x14]
mov ecx, dword [edx + 0x24]
lea eax, [ecx + eax*8]
mov ecx, dword [esp + 0x28]
push eax
push 1
push ecx
lea ecx, [esp + 0x2c]
call fcn.00460540
inc edi
movsx eax, di
cmp eax, esi
jl 0x47f666
push 0
push 0
sub esp, 0x10
mov ecx, 0x513088
mov edx, esp
mov dword [esp + 0x30], esp
push 0x17
push edx
call fcn.0047dbf0
sub esp, 0x10
mov ecx, 0x513088
mov eax, esp
mov dword [esp + 0x44], esp
push 7
push eax
mov byte [esp + 0x16a4], 8
call fcn.0047dbf0
mov ecx, 0x512ab0
mov byte [esp + 0x169c], 7
call fcn.00461540
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x1c]
mov ecx, 1
mov dword [eax + 0x2018], ecx
mov eax, dword [esp + 0xc4]
cmp eax, ecx
jne 0x47f75e
mov dl, byte [esp + 0x20]
sub esp, 0x10
mov ebx, esp
mov dword [esp + 0x28], esp
mov byte [ebx], dl
mov ecx, dword [esp + 0x34]
test ecx, ecx
jne 0x47f70b
xor eax, eax
jmp 0x47f714
mov eax, dword [esp + 0x38]
sub eax, ecx
sar eax, 3
test eax, eax
jge 0x47f71a
xor eax, eax
shl eax, 3
push eax
call fcn.004dbc04
mov dword [ebx + 4], eax
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x38]
add esp, 4
cmp edi, ecx
mov ebp, ecx
mov esi, eax
je 0x47f74d
push edi
push esi
call fcn.004607b0
add edi, 8
add esp, 8
add esi, 8
cmp edi, ebp
jne 0x47f739
mov ecx, dword [esp + 0x24]
mov dword [ebx + 8], esi
mov dword [ebx + 0xc], esi
call fcn.004806c0
jmp 0x47f7ce
mov cl, byte [esp + 0x20]
sub esp, 0x10
mov ebx, esp
mov dword [esp + 0x28], esp
mov byte [ebx], cl
mov ecx, dword [esp + 0x34]
test ecx, ecx
jne 0x47f779
xor eax, eax
jmp 0x47f782
mov eax, dword [esp + 0x38]
sub eax, ecx
sar eax, 3
test eax, eax
jge 0x47f788
xor eax, eax
lea edx, [eax*8]
push edx
call fcn.004dbc04
mov dword [ebx + 4], eax
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x38]
add esp, 4
cmp edi, ecx
mov ebp, ecx
mov esi, eax
je 0x47f7bf
push edi
push esi
call fcn.004607b0
add edi, 8
add esp, 8
add esi, 8
cmp edi, ebp
jne 0x47f7ab
mov ecx, dword [esp + 0x24]
mov dword [ebx + 8], esi
mov dword [ebx + 0xc], esi
call fcn.0047ff50
mov ecx, dword [esp + 0x14]
xor esi, esi
cmp eax, 0xb
mov ecx, dword [ecx + 0x1c]
mov dword [ecx + 0x2018], esi
je 0x47fa3c
cmp eax, esi
je 0x47f9f1
cmp eax, 0xaa
je 0x47fa6a
mov edx, dword [esp + 0x24]
push edx
call fcn.004db420
add esp, 4
lea ecx, [esp + 0x6c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov byte [esp + 0x1674], 2
call fcn.00453ea0
mov ebx, dword [esp + 0x14]
jmp 0x47f3b5
mov edx, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x24]
cmp edx, edx
mov eax, edx
je 0x47f84c
mov edi, dword [eax]
add eax, 8
mov dword [ecx], edi
mov edi, dword [eax - 4]
mov dword [ecx + 4], edi
add ecx, 8
cmp eax, edx
jne 0x47f838
mov eax, dword [ebx + 0x28]
mov dword [ebx + 0x28], ecx
mov cl, byte [esp + 0x13]
mov dword [esp + 0x18], eax
mov byte [esp + 0x44], cl
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], esi
cmp word [esp + 0x58], si
mov byte [esp + 0x1674], 0xa
jle 0x47f952
movsx edx, word [esp + 0x58]
mov edi, dword [esp + 0x54]
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], edx
lea eax, [esp + 0x90]
lea ecx, [esp + 0x167c]
push eax
push edi
call fcn.004ae280
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x47f906
mov ecx, dword [ebx + 0x10]
sub ecx, eax
sar ecx, 2
mov dword [esp + 0x18], ecx
je 0x47f906
mov ebp, dword [ebx + 0x10]
mov esi, eax
mov ecx, ebp
sub ecx, esi
sar ecx, 2
test ecx, ecx
jle 0x47f8ef
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp dword [esi + eax*4], edi
lea edx, [esi + eax*4]
jae 0x47f8e9
add edx, 4
mov esi, edx
or edx, 0xffffffff
sub edx, eax
add ecx, edx
jmp 0x47f8eb
mov ecx, eax
test ecx, ecx
jg 0x47f8cc
cmp esi, ebp
je 0x47f937
cmp edi, dword [esi]
jb 0x47f937
cmp dword [esp + 0xa0], 0xffff
jae 0x47f937
jmp 0x47f913
cmp dword [esp + 0xa0], 0xffff
jae 0x47f937
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x78]
mov dword [esp + 0x78], edi
push ecx
push 1
push edx
lea ecx, [esp + 0x50]
mov dword [esp + 0x88], eax
call fcn.00460540
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x1c]
inc edx
add edi, 0x40
dec eax
mov dword [esp + 0x30], edx
mov dword [esp + 0x1c], eax
jne 0x47f892
mov al, byte [esp + 0x44]
sub esp, 0x10
mov esi, esp
xor edi, edi
mov dword [esp + 0x28], esp
mov byte [esi], al
mov ecx, dword [esp + 0x58]
cmp ecx, edi
jne 0x47f96f
xor eax, eax
jmp 0x47f978
mov eax, dword [esp + 0x5c]
sub eax, ecx
sar eax, 3
cmp eax, edi
jge 0x47f97e
xor eax, eax
lea ecx, [eax*8]
push ecx
call fcn.004dbc04
mov dword [esi + 4], eax
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
add esp, 4
cmp ecx, edx
je 0x47f9b5
cmp eax, edi
je 0x47f9ab
mov ebp, dword [ecx]
mov dword [eax], ebp
mov ebp, dword [ecx + 4]
mov dword [eax + 4], ebp
add ecx, 8
add eax, 8
cmp ecx, edx
jne 0x47f99d
mov ecx, ebx
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
call fcn.0047ff50
cmp eax, 0xb
je 0x47fb3c
mov edx, dword [esp + 0x48]
mov byte [esp + 0x1674], 2
push edx
call fcn.004db420
add esp, 4
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
jmp 0x47f3b3
push esi
push 1
sub esp, 0x10
mov ecx, 0x513088
mov eax, esp
mov dword [esp + 0x30], esp
push 1
push eax
call fcn.0047dbf0
sub esp, 0x10
lea edx, [esp + 0x3b]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
push str.Read_data_stream_error_
mov byte [esp + 0x16a4], 9
call fcn.00415b10
mov ecx, 0x512ab0
mov byte [esp + 0x169c], 7
call fcn.00461540
mov ecx, dword [esp + 0x90]
lea eax, [esp + 0x1684]
push eax
push ecx
lea ecx, [esp + 0x1684]
call fcn.004ae280
push 4
lea ecx, [esp + 0x64]
call fcn.0047df90
mov edx, dword [esp + 0x24]
push edx
jmp 0x47fabb
mov ecx, dword [esp + 0x90]
lea eax, [esp + 0x1684]
push eax
push ecx
lea ecx, [esp + 0x1684]
call fcn.004ae280
push 4
lea ecx, [esp + 0x64]
call fcn.0047df90
mov eax, dword [esp + 0x1684]
cmp eax, 0xffffffff
je 0x47fddd
lea edx, [esp + 0x1684]
lea ecx, [esp + 0x167c]
push edx
push eax
call fcn.004ae280
mov eax, dword [esp + 0x24]
push eax
call fcn.004db420
add esp, 4
lea ecx, [esp + 0x6c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov byte [esp + 0x1674], 2
call fcn.00453ea0
jmp 0x47fd4b
mov edx, dword [esp + 0x90]
lea ecx, [esp + 0x1684]
push ecx
push edx
lea ecx, [esp + 0x1684]
call fcn.004ae280
mov eax, dword [esp + 0x1684]
cmp eax, 0xffffffff
je 0x47fe1f
lea ecx, [esp + 0x1684]
push ecx
push eax
lea ecx, [esp + 0x1684]
call fcn.004ae280
lea ecx, [esp + 0x6c]
mov byte [esp + 0x1674], 2
call fcn.00453ea0
jmp 0x47fd4f
mov eax, dword [esp + 0x90]
lea edx, [esp + 0x1684]
push edx
push eax
lea ecx, [esp + 0x1684]
call fcn.004ae280
mov eax, dword [esp + 0x1684]
cmp eax, 0xffffffff
je 0x47fe72
lea ecx, [esp + 0x1684]
push ecx
push eax
lea ecx, [esp + 0x1684]
call fcn.004ae280
push 4
lea ecx, [esp + 0x64]
call fcn.0047df90
mov edx, dword [esp + 0x48]
push edx
call fcn.004db420
add esp, 4
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
jmp 0x47fd51
mov dword [esp + 0x88], 0x4f41ac
mov word [esp + 0x8c], 0xffff
mov word [esp + 0x8e], si
mov al, byte [esp + 0x34]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x28], esp
mov byte [esp + 0x1684], 0xb
mov byte [ecx], al
mov dword [ecx + 4], esi
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], esi
mov edx, dword [0x4f4164]
lea eax, [esp + 0x44]
push edx
push esi
push eax
call fcn.004017e0
mov ecx, dword [0x512ab0]
call fcn.004623b0
cmp bp, si
jle 0x47fcca
movsx edx, word [esp + 0x58]
mov ebx, dword [esp + 0x54]
lea ecx, [esp + 0xe0]
xor ebp, ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x5c], edx
lea eax, [esp + 0x90]
lea ecx, [esp + 0x167c]
push eax
push ebx
call fcn.004ae280
mov eax, dword [esp + 0xa0]
cmp eax, 0xffff
jb 0x47fc4b
cmp eax, 0xffffffff
jne 0x47fcb7
sub esp, 0x40
mov ecx, 0x10
lea esi, [esp + 0xd0]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
sub esp, 8
lea edx, [esp + 0x16c4]
mov ecx, esp
mov dword [esp + 0x60], esp
push edx
call fcn.0047f150
mov ecx, dword [esp + 0x5c]
call fcn.00480da0
test eax, eax
je 0x47fcb7
mov ecx, dword [esp + 0x9c]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x28], esp
push ecx
push eax
lea ecx, [esp + 0x1694]
call fcn.004ae2c0
mov ecx, dword [0x512ab0]
call fcn.00462590
mov eax, dword [esp + 0x1c]
mov dword [eax], ebp
add eax, 4
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x5c]
inc ebp
add ebx, 0x40
dec eax
mov dword [esp + 0x5c], eax
jne 0x47fc23
mov ecx, dword [0x512ab0]
lea edx, [esp + 0x88]
push edx
call fcn.004627b0
movsx eax, ax
cmp eax, 0xffffffff
je 0x47fcff
mov eax, dword [esp + eax*4 + 0xe0]
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x1684]
shl eax, 6
push ecx
add eax, edx
jmp 0x47fd33
mov eax, dword [esp + 0x90]
lea edx, [esp + 0x1684]
push edx
push eax
lea ecx, [esp + 0x1684]
call fcn.004ae280
mov eax, dword [esp + 0x1684]
cmp eax, 0xffffffff
je 0x47febe
lea ecx, [esp + 0x1684]
push ecx
push eax
lea ecx, [esp + 0x1684]
call fcn.004ae280
mov dword [esp + 0x88], 0x4f41ac
mov ebx, dword [esp + 0x14]
xor edi, edi
mov ecx, dword [esp + 0x38]
mov byte [esp + 0x1674], 1
cmp ecx, edi
je 0x47fd7d
mov al, byte [ecx - 1]
test al, al
je 0x47fd73
cmp al, 0xff
je 0x47fd73
dec al
mov byte [ecx - 1], al
jmp 0x47fd7d
dec ecx
push ecx
call fcn.004db420
add esp, 4
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
xor esi, esi
jmp 0x47f227
push esi
push 1
sub esp, 0x10
mov ecx, 0x513088
mov edx, esp
mov dword [esp + 0x30], esp
push 1
push edx
call fcn.0047dbf0
sub esp, 0x10
lea eax, [esp + 0x3b]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
push str.Not_support_
mov byte [esp + 0x16a4], 4
call fcn.00415b10
mov ecx, 0x512ab0
mov byte [esp + 0x169c], 2
call fcn.00461540
jmp 0x47fe07
mov ecx, dword [esp + 0x24]
push ecx
call fcn.004db420
add esp, 4
lea ecx, [esp + 0x6c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov byte [esp + 0x1674], 2
call fcn.00453ea0
push 1
lea ecx, [esp + 0x38]
mov byte [esp + 0x1678], 1
call fcn.004019e0
jmp 0x47fefc
lea ecx, [esp + 0x6c]
mov byte [esp + 0x1674], 2
call fcn.00453ea0
mov eax, dword [esp + 0x38]
test eax, eax
je 0x47fe55
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x47fe4c
cmp al, 0xff
je 0x47fe4c
dec al
mov byte [ecx], al
jmp 0x47fe55
push ecx
call fcn.004db420
add esp, 4
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
jmp 0x47fefc
mov edx, dword [esp + 0x48]
push edx
call fcn.004db420
mov eax, dword [esp + 0x3c]
add esp, 4
cmp eax, edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
je 0x47feb0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x47fea7
cmp al, 0xff
je 0x47fea7
dec al
mov byte [ecx], al
jmp 0x47feb0
push ecx
call fcn.004db420
add esp, 4
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
jmp 0x47fefc
mov eax, dword [esp + 0x38]
xor esi, esi
cmp eax, esi
mov dword [esp + 0x88], 0x4f41ac
je 0x47fef0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x47fee7
cmp al, 0xff
je 0x47fee7
dec al
mov byte [ecx], al
jmp 0x47fef0
push ecx
call fcn.004db420
add esp, 4
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], esi
lea ecx, [esp + 0x60]
mov byte [esp + 0x1674], 0
call fcn.0047ddb0
lea ecx, [esp + 0x167c]
mov dword [esp + 0x1674], 0xffffffff
call fcn.004ae200
xor eax, eax
mov ecx, dword [esp + 0x166c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1668
ret 0x4c