Function at 0x47ab30
Capabilities:
Check for time delay via gettickcount
Get file size
Get thread local storage value

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x544e11
push eax
mov dword fs:[0], esp
sub esp, 0xf14
mov ecx, 0x84
xor eax, eax
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0xf44]
xor ebx, ebx
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0xf4c]
mov ecx, 0x84
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a40], ebx
call edi
mov esi, dword [esp + 0xf34]
mov dword [0x598a48], eax
cmp esi, ebx
je 0x47bc77
cmp word [esi], bx
je 0x47bc77
mov eax, dword [esp + 0xf38]
cmp eax, ebx
je 0x47bc77
cmp word [eax], bx
je 0x47bc77
cmp dword [0x598a4c], ebx
jne 0x47abd3
mov dword [0x598a40], 2
mov dword [0x598a44], 0x306
jmp 0x47bc8b
mov eax, dword [0x550434]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x30], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0xf2c], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x14], eax
mov ebp, dword [esp + 0xf48]
xor eax, eax
cmp ebp, ebx
mov ecx, 0xe1
setne al
mov dword [esp + 0x20], eax
xor eax, eax
lea edi, [esp + 0xad]
mov byte [esp + 0xac], bl
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0xf40]
lea edx, [esp + 0x58]
stosw word es:[edi], ax
push edx
push 0x60
stosb byte es:[edi], al
push 1
mov dword [esp + 0x48], ecx
push 5
mov ecx, 9
xor eax, eax
lea edi, [esp + 0x98]
push 0x80
mov dword [esp + 0x98], ebx
push 0x120089
push esi
rep stosd dword es:[edi], eax
mov byte [esp + 0xf48], 2
mov dword [esp + 0x68], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x40], 0xffffffff
mov dword [esp + 0x50], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
call fcn.004bff10
mov ebp, eax
add esp, 0x1c
cmp ebp, 0xffffffff
mov dword [esp + 0x38], ebp
jne 0x47accd
cmp dword [esp + 0x58], 0xc0000034
je 0x47b763
push ebx
push 0x60
push 1
push 7
push 0x80
push 0x120089
push esi
call fcn.004bff10
mov ebp, eax
add esp, 0x1c
cmp ebp, 0xffffffff
mov dword [esp + 0x38], ebp
je 0x47b716
push ebp
call fcn.00473800
add esp, 4
cmp eax, ebx
push ebp
jne 0x47b73b
call fcn.004739d0
add esp, 4
test eax, eax
jne 0x47b73a
lea eax, [esp + 0x84]
push 0x28
push eax
push ebp
call fcn.004bf120
add esp, 0xc
test eax, eax
je 0x47b79f
mov ecx, dword [0x599010]
mov esi, dword [esp + 0xf38]
lea edx, [esp + 0x2c]
push ecx
push edx
push 0x57b424
push esi
mov dword [esp + 0x50], ebx
call fcn.004bfa30
add esp, 0x10
test eax, eax
je 0x47ad59
push esi
call fcn.004bffa0
add esp, 4
test eax, eax
je 0x47ad59
mov eax, dword [esp + 0x2c]
push eax
call fcn.004bffa0
add esp, 4
test eax, eax
je 0x47ad59
mov dword [esp + 0x4c], 1
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x48], 1
cmp eax, ebx
je 0x47af98
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x18]
call fcn.0043c110
mov edx, dword [esp + 0x14]
push ebx
push 0x60
push 2
push 1
push 0x80
push 0x12019f
push edx
call fcn.004bff10
add esp, 0x1c
cmp eax, 0xffffffff
mov dword [esp + 0x24], eax
je 0x47b7c3
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x64]
mov dword [esp + 0x60], ebx
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0xf38]
lea eax, [esp + 0x60]
push eax
push ecx
call fcn.004bf300
add esp, 8
test eax, eax
je 0x47b3e4
mov eax, dword [esp + 0xf3c]
mov dword [esp + 0x44], 1
cmp eax, ebx
jne 0x47b3e4
mov edx, dword [esp + 0xf38]
push ebx
push 0x60
push 1
push 7
push 0x80
push 0x120089
push edx
call fcn.004bff10
mov ebp, eax
add esp, 0x1c
cmp ebp, 0xffffffff
je 0x47b3e4
cmp dword [esp + 0x20], ebx
je 0x47aeb2
mov dword [esp + 0x18], ebx
mov dword [0x598a40], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a48], eax
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x7bd]
mov byte [esp + 0x7bc], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x7bc]
push eax
push ebp
call fcn.0048c210
add esp, 8
test eax, eax
jne 0x47ae73
lea ecx, [esp + 0x18]
push ecx
push ebp
call dword [sym.imp.KERNEL32.dll_GetFileSize]
jmp 0x47ae8d
lea edx, [esp + 0x18]
test edx, edx
je 0x47ae86
mov eax, dword [esp + 0x7d8]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x7d4]
cmp eax, ebx
jne 0x47ae97
cmp dword [esp + 0x18], ebx
je 0x47aeae
cmp dword [esp + 0xf48], 1
jne 0x47aeb2
push ebp
call fcn.00473800
add esp, 4
test eax, eax
je 0x47aeb2
mov dword [esp + 0x20], ebx
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x435]
mov byte [esp + 0x434], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x434]
push ecx
push ebp
stosb byte es:[edi], al
call fcn.00481680
add esp, 8
test eax, eax
je 0x47af8c
mov edx, dword [esp + 0x434]
mov eax, dword [esp + 0x438]
mov ecx, dword [esp + 0x43c]
mov dword [esp + 0xac], edx
mov edx, dword [esp + 0x440]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xf40]
mov dword [esp + 0xb4], ecx
mov ecx, 0x66
lea esi, [esp + 0x47c]
lea edi, [esp + 0xf4]
mov dword [esp + 0xb8], edx
cmp eax, ebx
mov dword [esp + 0x48], ebx
rep movsd dword es:[edi], dword [esi]
jne 0x47af8c
mov eax, dword [esp + 0x7b4]
cmp eax, ebx
jbe 0x47af8c
push eax
call fcn.0052644a
mov ecx, dword [esp + 0x7b8]
mov edx, eax
mov esi, ecx
xor eax, eax
mov edi, edx
mov dword [esp + 0x40], edx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x7b8]
lea eax, [esp + 0x44]
push eax
push ecx
push edx
push ebp
mov dword [esp + 0x54], ebx
call fcn.004819f0
add esp, 0x14
push ebp
call dword [0x59a140]
jmp 0x47b3e4
mov esi, dword [esp + 0xf38]
lea ecx, [esp + 0x14]
push esi
call fcn.0043c200
lea edx, [esp + 0x60]
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x64]
mov dword [esp + 0x60], ebx
push edx
rep stosd dword es:[edi], eax
push esi
call fcn.004bf300
add esp, 8
test eax, eax
je 0x47b071
mov eax, dword [esp + 0x80]
mov edi, 1
cmp eax, ebx
mov dword [esp + 0x44], edi
jne 0x47afee
cmp dword [esp + 0x7c], ebx
je 0x47b075
mov eax, dword [0x599010]
lea ecx, [esp + 0x10]
push eax
push ecx
push 0x57b304
push esi
call fcn.004bfa30
add esp, 0x10
test eax, eax
je 0x47b050
mov edx, dword [esp + 0x10]
mov dword [esp + 0x40], 1
push edx
push esi
call fcn.004bf760
add esp, 8
test eax, eax
je 0x47b02f
mov dword [esp + 0x28], 1
jmp 0x47b075
mov dword [0x598a40], 0x28
mov dword [0x598a44], 0x3e2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a48], eax
jmp 0x47b075
mov dword [0x598a40], 0x24
mov dword [0x598a44], 0x3ea
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a48], eax
jmp 0x47b075
mov edi, dword [esp + 0x44]
mov eax, dword [esp + 0x14]
push ebx
push 0x60
push 3
push 1
push 0x80
push 0x12019f
push eax
call fcn.004bff10
add esp, 0x1c
cmp eax, 0xffffffff
mov dword [esp + 0x24], eax
jne 0x47b0d4
mov ecx, dword [esp + 0x14]
push 1
push ebx
push ecx
call fcn.004bf1a0
mov edx, dword [esp + 0x20]
push ebx
push 0x60
push 1
push 7
push 0x80
push 0x12019f
push edx
call fcn.004bff10
add esp, 0x28
cmp eax, 0xffffffff
mov dword [esp + 0x24], eax
je 0x47b7e7
cmp edi, ebx
je 0x47b0e4
mov eax, dword [esp + 0x28]
mov dword [esp + 0x30], ebx
cmp eax, ebx
je 0x47b0ec
mov dword [esp + 0x30], 1
cmp edi, ebx
je 0x47b2e1
mov eax, dword [esp + 0x28]
or ebp, 0xffffffff
cmp eax, ebx
mov dword [esp + 0x18], 0xffffffff
je 0x47b1d5
mov eax, dword [esp + 0x10]
push ebx
push 0x60
push 1
push 7
push 0x80
push 0x120089
push eax
call fcn.004bff10
mov ebp, eax
add esp, 0x1c
cmp ebp, 0xffffffff
je 0x47b1dd
cmp dword [esp + 0x20], ebx
je 0x47b1cf
mov dword [esp + 0x18], ebx
mov dword [0x598a40], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a48], eax
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x7bd]
mov byte [esp + 0x7bc], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x7bc]
push ecx
push ebp
stosb byte es:[edi], al
call fcn.0048c210
add esp, 8
test eax, eax
jne 0x47b190
lea edx, [esp + 0x18]
push edx
push ebp
call dword [sym.imp.KERNEL32.dll_GetFileSize]
jmp 0x47b1aa
lea eax, [esp + 0x18]
test eax, eax
je 0x47b1a3
mov ecx, dword [esp + 0x7d8]
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x7d4]
cmp eax, ebx
jne 0x47b1b4
cmp dword [esp + 0x18], ebx
je 0x47b1cb
cmp dword [esp + 0xf48], 1
jne 0x47b1cf
push ebp
call fcn.00473800
add esp, 4
test eax, eax
je 0x47b1cf
mov dword [esp + 0x20], ebx
mov dword [esp + 0x18], ebp
jmp 0x47b1dd
mov edx, dword [esp + 0x24]
mov dword [esp + 0x18], edx
cmp dword [esp + 0xf3c], ebx
jne 0x47b2d5
mov edx, dword [esp + 0x18]
cmp edx, 0xffffffff
je 0x47b2d5
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x435]
mov byte [esp + 0x434], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x434]
push eax
push edx
call fcn.00481680
add esp, 8
test eax, eax
je 0x47b2d5
mov ecx, dword [esp + 0x434]
mov eax, dword [esp + 0x43c]
mov edx, dword [esp + 0x438]
mov dword [esp + 0xac], ecx
mov ecx, dword [esp + 0x440]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xf40]
mov dword [esp + 0xb8], ecx
mov ecx, 0x66
lea esi, [esp + 0x47c]
lea edi, [esp + 0xf4]
mov dword [esp + 0xb0], edx
cmp eax, ebx
mov dword [esp + 0x48], ebx
rep movsd dword es:[edi], dword [esi]
jne 0x47b2d5
mov eax, dword [esp + 0x7b4]
cmp eax, ebx
jbe 0x47b2d5
push eax
call fcn.0052644a
mov ecx, dword [esp + 0x7b8]
mov edx, eax
mov esi, ecx
xor eax, eax
mov edi, edx
mov dword [esp + 0x40], edx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x7b8]
lea eax, [esp + 0x60]
push eax
push ecx
push edx
mov edx, dword [esp + 0x28]
push edx
mov dword [esp + 0x70], ebx
call fcn.004819f0
add esp, 0x14
cmp ebp, 0xffffffff
je 0x47b2e1
push ebp
call dword [0x59a140]
mov ebp, dword [esp + 0x28]
cmp ebp, ebx
jne 0x47b3e4
cmp dword [esp + 0x40], ebx
je 0x47b3e4
mov eax, dword [esp + 0x10]
push eax
call fcn.00422fc1
add esp, 4
test eax, eax
jbe 0x47b3e4
mov dword [esp + 0x18], ebx
mov dword [0x598a40], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a48], eax
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x7bd]
mov byte [esp + 0x7bc], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [esp + 0x24]
lea ecx, [esp + 0x7bc]
push ecx
push edi
call fcn.0048c210
add esp, 8
test eax, eax
jne 0x47b362
lea edx, [esp + 0x18]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
jmp 0x47b37c
lea eax, [esp + 0x18]
test eax, eax
je 0x47b375
mov ecx, dword [esp + 0x7d8]
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x7d4]
cmp eax, ebx
jne 0x47b38c
cmp dword [esp + 0x18], ebx
jne 0x47b38c
mov dword [esp + 0x20], ebx
jmp 0x47b3e4
mov edx, dword [esp + 0x10]
push ebx
push 0x60
push 2
push 1
push 0x80
push 0x12019f
push edx
call fcn.004bff10
mov esi, eax
add esp, 0x1c
cmp esi, 0xffffffff
je 0x47b3d5
push 0xffffffffffffffff
push esi
push edi
call fcn.00472160
add esp, 0xc
test eax, eax
je 0x47b3ca
mov ebp, 1
mov dword [esp + 0x28], ebp
push esi
call dword [0x59a140]
cmp ebp, ebx
jne 0x47b3e4
mov eax, dword [esp + 0x10]
push 1
push eax
call fcn.004bf4a0
add esp, 8
mov ecx, 0xf7
xor eax, eax
lea edi, [esp + 0xb45]
mov byte [esp + 0xb44], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0xb44]
test ecx, ecx
stosb byte es:[edi], al
jne 0x47b443
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a40], 1
mov dword [0x598a44], 0x2947
call esi
mov dword [0x598a48], eax
mov dword [0x598a40], 7
mov dword [0x598a44], 0x47f
jmp 0x47b4da
mov eax, dword [0x57b3a8]
mov edx, dword [0x57b3a4]
mov ecx, dword [0x57b3ac]
mov dword [esp + 0xb48], eax
mov dword [esp + 0xb44], edx
mov edx, dword [0x57b3b0]
lea eax, [esp + 0xac]
mov dword [esp + 0xb4c], ecx
test eax, eax
mov dword [esp + 0xb50], edx
mov dword [esp + 0xb64], 2
mov dword [esp + 0xb68], ebx
mov dword [esp + 0xb6c], ebx
mov dword [esp + 0xb70], ebx
jne 0x47b5a6
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a40], 1
mov dword [0x598a44], 0x2988
call esi
mov dword [0x598a48], eax
mov dword [0x598a40], 8
mov dword [0x598a44], 0x486
call esi
mov ebp, dword [esp + 0x38]
mov dword [0x598a48], eax
cmp ebp, 0xffffffff
je 0x47b4f1
push ebp
call dword [0x59a140]
mov eax, dword [esp + 0x24]
cmp eax, 0xffffffff
je 0x47b501
push eax
call dword [0x59a140]
cmp dword [esp + 0xf40], ebx
jne 0x47b51b
mov eax, dword [esp + 0x3c]
cmp eax, ebx
je 0x47b51b
push eax
call fcn.00526473
add esp, 4
cmp dword [esp + 0x1c], ebx
jne 0x47b867
cmp dword [0x599000], ebx
je 0x47b84c
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [esp + 0x14]
mov dword [0x598a40], ebx
call ebp
cmp esi, ebx
mov dword [0x598a48], eax
je 0x47b94b
push esi
call fcn.00422fc1
add esp, 4
test eax, eax
je 0x47b94b
push ebx
push 0x60
push 1
push 7
push 0x80
push 0x120089
push esi
call fcn.004bff10
mov esi, eax
add esp, 0x1c
cmp esi, 0xffffffff
jne 0x47b80b
mov dword [0x598a40], 3
mov dword [0x598a44], 0x175d
call ebp
mov dword [0x598a48], eax
jmp 0x47b829
lea ecx, [esp + 0x28c]
test ecx, ecx
jne 0x47b5d2
mov dword [0x598a40], 1
mov dword [0x598a44], 0x296f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a48], eax
jmp 0x47b621
mov ecx, 0x66
xor eax, eax
lea edi, [esp + 0x28c]
mov esi, 0x598a50
rep stosd dword es:[edi], eax
mov eax, dword [0x57b300]
mov ecx, 0x66
lea edi, [esp + 0x28c]
cmp eax, 0xffffffff
rep movsd dword es:[edi], dword [esi]
je 0x47b611
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, ebx
je 0x47b611
mov dword [esp + 0x2ac], eax
lea edx, [esp + 0x28c]
push edx
call fcn.004c00d0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x48]
cmp eax, ebx
je 0x47b65b
mov ecx, 0x66
lea esi, [esp + 0x28c]
lea edi, [esp + 0xf4]
lea eax, [esp + 0xac]
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.004c0100
add esp, 4
mov ecx, dword [0x599008]
mov edx, dword [0x59900c]
mov esi, dword [esp + 0x24]
mov ebp, dword [esp + 0x38]
mov dword [esp + 0xc0], ecx
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x50]
mov dword [esp + 0x420], edx
push eax
lea edx, [esp + 0xb0]
push ecx
lea eax, [esp + 0xb4c]
push edx
push eax
push esi
push ebp
mov dword [esp + 0x68], ebx
call fcn.004846a0
mov ecx, dword [esp + 0x68]
add esp, 0x18
cmp ecx, ebx
je 0x47b6bb
cmp dword [esp + 0x30], ebx
jne 0x47b6bb
mov dword [esp + 0x30], 1
cmp eax, ebx
je 0x47b4e5
test byte [esp + 0xf50], 2
je 0x47b6e0
lea ecx, [esp + 0x84]
push 0x28
push ecx
push esi
call fcn.004bf160
add esp, 0xc
test byte [esp + 0xf50], 4
je 0x47b6fd
lea edx, [esp + 0x54]
lea eax, [esp + 0x34]
push edx
push eax
push ebp
call fcn.004c06f0
add esp, 0xc
cmp dword [esp + 0xf54], ebx
je 0x47b70d
push esi
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov dword [esp + 0x1c], ebx
jmp 0x47b4e5
mov dword [0x598a40], 3
mov dword [0x598a44], 0x344
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a48], eax
jmp 0x47b501
push ebp
call dword [0x59a140]
mov ecx, dword [esp + 0xf54]
mov edx, dword [esp + 0xf50]
mov eax, dword [esp + 0xf38]
push ecx
push edx
push ebx
push eax
push esi
call fcn.00471e00
add esp, 0x14
lea ecx, [esp + 0x14]
mov byte [esp + 0xf2c], 1
call fcn.0043bf80
lea ecx, [esp + 0x2c]
mov byte [esp + 0xf2c], bl
call fcn.0043bf80
lea ecx, [esp + 0x10]
mov dword [esp + 0xf2c], 0xffffffff
call fcn.0043bf80
xor eax, eax
jmp 0x47bc97
mov dword [0x598a40], 5
mov dword [0x598a44], 0x368
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a48], eax
jmp 0x47b4e5
mov dword [0x598a40], 4
mov dword [0x598a44], 0x384
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a48], eax
jmp 0x47b4e5
mov dword [0x598a40], 4
mov dword [0x598a44], 0x408
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x598a48], eax
jmp 0x47b4e5
lea ecx, [esp + 0xac]
push ecx
push esi
call fcn.00484350
add esp, 8
mov edi, eax
push esi
call dword [0x59a140]
cmp edi, ebx
jne 0x47b84c
mov dword [0x598a40], 0x1c
mov dword [0x598a44], 0x4b2
call ebp
mov dword [0x598a48], eax
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [esp + 0x34]
cmp eax, ebx
je 0x47b867
mov edx, dword [esp + 0x54]
push edx
push eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.004bf9a0
add esp, 0xc
mov eax, dword [esp + 0x4c]
cmp eax, ebx
mov eax, dword [esp + 0x1c]
je 0x47bae4
cmp eax, ebx
jne 0x47bad0
cmp dword [esp + 0x44], ebx
je 0x47ba32
mov ecx, dword [0x599010]
mov esi, dword [esp + 0xf38]
lea edx, [esp + 0x10]
push ecx
push edx
push 0x57b304
push esi
call fcn.004bfa30
add esp, 0x10
test eax, eax
je 0x47bc27
mov eax, dword [esp + 0x10]
push eax
push esi
call fcn.004bf760
add esp, 8
test eax, eax
je 0x47b9b2
mov ecx, dword [esp + 0x14]
push esi
push ecx
call fcn.004bf760
add esp, 8
test eax, eax
je 0x47b97f
cmp dword [esp + 0x20], ebx
je 0x47b96b
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0xf4c]
mov eax, dword [esi - 8]
cmp eax, 0x104
mov dword [edx + 0x20c], eax
jb 0x47bb13
lea eax, [eax + eax + 2]
push eax
call fcn.0052644a
mov edx, dword [esp + 0xf50]
mov edi, eax
xor eax, eax
mov ecx, dword [edx + 0x20c]
mov dword [edx + 0x208], edi
lea ecx, [ecx + ecx + 2]
mov esi, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x14]
mov ecx, dword [edx + 0x208]
push eax
push ecx
jmp 0x47bc1f
mov dword [0x598a40], 1
mov dword [0x598a44], 0x174f
call ebp
mov dword [0x598a48], eax
jmp 0x47b84c
mov edx, dword [esp + 0x10]
push 1
push edx
call fcn.004bf4a0
add esp, 8
jmp 0x47bc27
mov eax, dword [esp + 0x10]
push esi
push eax
call fcn.004bf760
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0xf4c]
add esp, 8
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [esi - 8]
cmp eax, 0x104
mov dword [ecx + 0x20c], eax
jae 0x47b9f6
jmp 0x47b9d5
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0xf44]
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [esi - 8]
cmp eax, 0x104
mov dword [ecx + 0x20c], eax
jae 0x47b9f6
mov edx, dword [esp + 0xf44]
mov ecx, 0x82
xor eax, eax
mov edi, edx
push esi
push edx
rep stosd dword es:[edi], eax
call fcn.00423c8a
add esp, 8
jmp 0x47bc27
lea edx, [eax + eax + 2]
push edx
call fcn.0052644a
mov edx, dword [esp + 0xf48]
mov edi, eax
mov eax, dword [edx + 0x20c]
mov dword [edx + 0x208], edi
lea ecx, [eax + eax + 2]
xor eax, eax
mov esi, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x18]
jmp 0x47bc17
mov eax, dword [esp + 0xf38]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.004bf760
add esp, 8
test eax, eax
jne 0x47bc27
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0xf44]
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [esi - 8]
cmp eax, 0x104
mov dword [edx + 0x20c], eax
jae 0x47ba8c
mov ecx, 0x82
xor eax, eax
mov edi, edx
push esi
rep stosd dword es:[edi], eax
push edx
call fcn.00423c8a
add esp, 8
jmp 0x47bc27
lea eax, [eax + eax + 2]
push eax
call fcn.0052644a
mov edx, dword [esp + 0xf48]
mov edi, eax
xor eax, eax
mov ecx, dword [edx + 0x20c]
mov dword [edx + 0x208], edi
lea ecx, [ecx + ecx + 2]
mov esi, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x14]
mov ecx, dword [edx + 0x208]
push eax
push ecx
jmp 0x47bc1f
mov edx, dword [esp + 0x14]
push 1
push edx
call fcn.004bf4a0
add esp, 8
jmp 0x47bc27
cmp eax, ebx
jne 0x47bb60
cmp dword [esp + 0x28], ebx
je 0x47bc27
cmp dword [esp + 0x20], ebx
je 0x47bb4c
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0xf4c]
mov eax, dword [esi - 8]
cmp eax, 0x104
mov dword [ecx + 0x20c], eax
jae 0x47bb34
mov edx, dword [esp + 0xf4c]
mov ecx, 0x82
xor eax, eax
mov edi, edx
push esi
push edx
rep stosd dword es:[edi], eax
call fcn.00423c8a
add esp, 8
jmp 0x47bc27
lea edx, [eax + eax + 2]
push edx
call fcn.0052644a
mov edx, dword [esp + 0xf50]
mov edi, eax
jmp 0x47bbf3
mov eax, dword [esp + 0x10]
push 1
push eax
call fcn.004bf4a0
add esp, 8
jmp 0x47bc27
cmp dword [esp + 0x30], ebx
je 0x47bb78
mov ecx, dword [esp + 0xf38]
push 1
push ecx
call fcn.004bf4a0
add esp, 8
cmp dword [esp + 0x28], ebx
je 0x47bc27
mov edx, dword [esp + 0xf38]
mov eax, dword [esp + 0x10]
push edx
push eax
call fcn.004bf760
add esp, 8
test eax, eax
jne 0x47bc27
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0xf44]
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [esi - 8]
cmp eax, 0x104
mov dword [ecx + 0x20c], eax
jae 0x47bbe0
mov edx, dword [esp + 0xf44]
mov ecx, 0x82
xor eax, eax
mov edi, edx
push esi
push edx
rep stosd dword es:[edi], eax
call fcn.00423c8a
add esp, 8
jmp 0x47bc27
lea edx, [eax + eax + 2]
push edx
call fcn.0052644a
mov edx, dword [esp + 0xf48]
mov edi, eax
mov dword [edx + 0x208], edi
mov eax, dword [edx + 0x20c]
lea ecx, [eax + eax + 2]
xor eax, eax
mov esi, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x14]
mov edx, dword [edx + 0x208]
push ecx
push edx
call fcn.00423c8a
add esp, 0xc
mov eax, dword [esp + 0x34]
cmp eax, ebx
je 0x47bc3c
push eax
call fcn.00526473
add esp, 4
mov dword [esp + 0x34], ebx
lea ecx, [esp + 0x14]
mov byte [esp + 0xf2c], 1
call fcn.0043bf80
lea ecx, [esp + 0x2c]
mov byte [esp + 0xf2c], bl
call fcn.0043bf80
lea ecx, [esp + 0x10]
mov dword [esp + 0xf2c], 0xffffffff
call fcn.0043bf80
mov eax, dword [esp + 0x1c]
jmp 0x47bc97
mov dword [0x598a40], 1
mov dword [0x598a44], 0x300
call edi
mov dword [0x598a48], eax
mov eax, 1
mov ecx, dword [esp + 0xf24]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xf20
ret