Function at 0x47d930
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx + ecx*4]
add ecx, ecx
push ebx
push esi
lea esi, [eax + ecx*8 + 0x2e0]
movzx ecx, byte [esi + 0x2c]
lea edx, [eax + 0x148]
mov dword [esp + 0x4c], edx
push edi
mov edi, dword [eax]
mov edx, dword [edi]
mov ebx, dword [edi + 8]
mov dword [esp + 0x38], edx
mov edx, dword [esi + 0x40]
lea ecx, [ecx + ecx*4]
mov dword [esp + 0x2c], edx
mov edx, dword [eax + 4]
add ecx, ecx
lea ecx, [edx + ecx*8 + 8]
mov edx, dword [eax + 0x44]
mov dword [esp + 0x44], ecx
mov ecx, dword [ecx + 0x30]
mov dword [esp + 0x18], edi
mov dword [esp + 0x54], ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x4c], 0
test edx, edx
jle 0x47d9bc
add eax, 0x48
mov ecx, dword [esp + 0x1c]
cmp dword [eax], ecx
je 0x47dbc6
inc dword [esp + 0x4c]
add eax, 4
cmp dword [esp + 0x4c], edx
jl 0x47d9a3
xor eax, eax
xor edx, edx
mov ecx, dword [ebp + 8]
not eax
and eax, dword [ebp + 0x10]
not edx
and edx, dword [ebp + 0x14]
mov dword [esi + 0x48], eax
mov dword [esi + 0x4c], edx
mov eax, dword [ecx + 0x18]
mov edx, dword [ecx + 0x1c]
mov ecx, dword [ebp + 0xc]
call fcn.004fb370
mov edx, dword [esp + 0x2c]
and eax, 1
test byte [edx + 0x24], 0x40
mov dword [esp + 0x20], eax
je 0x47da03
mov eax, dword [ebp + 8]
test byte [eax + 0x22], 0x20
mov dword [esp + 0x68], 1
je 0x47da0b
mov dword [esp + 0x68], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [eax + 0x6c]
lea edx, [ecx + 1]
mov dword [eax + 0x6c], edx
lea edx, [ecx - 1]
mov dword [esp + 0x58], eax
mov dword [esp + 0x6c], ecx
test ecx, edx
jne 0x47da54
mov eax, ecx
lea ecx, [eax*8 + 4]
push 0
push ecx
mov ecx, dword [esp + 0x60]
mov eax, dword [ecx + 0x70]
mov esi, dword [ecx]
call fcn.00418620
mov edx, dword [esp + 0x60]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x74]
mov dword [edx + 0x70], eax
add esp, 8
mov eax, edx
mov eax, dword [eax + 0x70]
test eax, eax
je 0x47da62
mov dword [eax + ecx*4], 0xffffffff
or eax, 0xffffffff
sub eax, ecx
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], eax
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x48], eax
mov eax, dword [ecx + 0x6c]
lea edx, [eax + 1]
mov dword [ecx + 0x6c], edx
lea edx, [eax - 1]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x6c], eax
test eax, edx
jne 0x47dab8
lea ecx, [eax*8 + 4]
push 0
push ecx
mov ecx, dword [esp + 0x60]
mov eax, dword [ecx + 0x70]
mov esi, dword [ecx]
call fcn.00418620
mov edx, dword [esp + 0x60]
mov esi, dword [esp + 0x1c]
mov dword [edx + 0x70], eax
mov eax, dword [esp + 0x74]
add esp, 8
mov ecx, edx
mov ecx, dword [ecx + 0x70]
test ecx, ecx
je 0x47dac6
mov dword [ecx + eax*4], 0xffffffff
or ecx, 0xffffffff
sub ecx, eax
cmp byte [esi + 0x2c], 0
mov dword [esp + 0x58], ecx
mov dword [esi + 0x18], ecx
jbe 0x47db36
mov eax, dword [esp + 0x44]
test byte [eax + 0x24], 8
je 0x47db36
mov ecx, dword [edi + 0x48]
inc ecx
mov dword [edi + 0x48], ecx
mov dword [esi], ecx
mov eax, dword [ebx + 0x20]
mov edx, dword [ebx + 0x18]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x78], eax
cmp dword [edx + 0x54], eax
jg 0x47db13
push ebx
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47db36
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x34]
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea eax, [eax + eax*4]
lea eax, [edx + eax*4]
xor edx, edx
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov word [eax], 0x17
mov ecx, dword [esp + 0x44]
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x84], eax
test al, 4
je 0x47dc12
mov eax, dword [ecx + 0x1c]
mov edi, dword [ebx + 0x20]
mov edx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], ecx
cmp dword [edx + 0x54], edi
jg 0x47db72
push ebx
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47db9d
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x20]
mov edx, dword [esp + 0x6c]
lea eax, [edi + edi*4]
lea eax, [ecx + eax*4]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x78]
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], ecx
mov word [eax], 0x11
mov edi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
cmp dword [eax + 0x54], edi
jg 0x47dbdb
push ebx
call fcn.00436c80
add esp, 4
test eax, eax
je 0x47dbdb
mov edi, 1
mov dword [esi + 0x34], edi
mov byte [esi + 0x2d], 0xe
jmp 0x47ee16
mov ecx, dword [esp + 0x4c]
mov eax, 1
xor edx, edx
call fcn.0050e6c0
jmp 0x47d9c0
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea ecx, [edi + edi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x48]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x14
mov dword [esi + 0x34], edi
mov byte [esi + 0x2d], 0xe
jmp 0x47ee16
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x24]
test edx, 0x400
je 0x47de47
movzx eax, word [ecx + 0x28]
inc dword [edi + 0x64]
mov edx, dword [edi + 0x3c]
mov dword [esp + 0x4c], eax
add eax, 2
mov dword [esp + 0x74], eax
mov dword [esp + 0x34], edx
cmp eax, dword [edi + 0x38]
jg 0x47dc52
add edx, eax
mov dword [edi + 0x3c], edx
mov edx, dword [edi + 0x38]
sub edx, eax
mov dword [edi + 0x38], edx
jmp 0x47dc60
mov edx, dword [edi + 0x48]
inc edx
add eax, dword [edi + 0x48]
mov dword [esp + 0x34], edx
mov dword [edi + 0x48], eax
mov eax, dword [esi + 0xc]
mov dword [esp + 0x6c], eax
xor eax, eax
mov dword [esp + 0x28], eax
cmp dword [esp + 0x4c], eax
jle 0x47dcd2
mov edx, dword [ecx + 0x30]
mov eax, dword [edx + eax*4]
test eax, eax
je 0x47dcc3
test byte [eax + 0x12], 1
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x34]
je 0x47dcab
lea edx, [edx + ecx + 2]
push edx
mov edx, dword [esp + 0x24]
push edx
push ecx
push eax
push edi
mov eax, esi
call fcn.0047d2c0
mov eax, dword [esi + 0x10]
add esp, 0x14
mov dword [esp + 0x6c], eax
jmp 0x47dcbf
lea ecx, [edx + ecx + 2]
mov edx, dword [eax]
mov eax, dword [edx + 0x10]
push ecx
push eax
push edi
call fcn.0044e3a0
add esp, 0xc
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x28], eax
cmp eax, dword [esp + 0x4c]
jl 0x47dc73
mov edi, dword [ecx + 0x18]
mov esi, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x18]
cmp dword [ecx + 0x54], esi
jg 0x47dced
push ebx
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47dd14
mov eax, dword [ebx + 4]
inc dword [ebx + 0x20]
mov ecx, dword [esp + 0x34]
lea edx, [esi + esi*4]
lea eax, [eax + edx*4]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x17
mov esi, dword [ebx + 0x20]
mov edx, dword [ebx + 0x18]
cmp dword [edx + 0x54], esi
jg 0x47dd2c
push ebx
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47dd58
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x20]
mov edx, dword [esp + 0x4c]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x34]
inc ecx
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x17
mov eax, dword [esp + 0x2c]
movzx esi, byte [eax + 0x1c]
mov edx, dword [eax + 0x20]
mov edi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
neg esi
sbb esi, esi
and esi, 0xfffffff7
mov dword [esp + 0x78], edx
cmp dword [eax + 0x54], edi
jg 0x47dd8d
push ebx
call fcn.00436c80
add esp, 4
test eax, eax
je 0x47dd8d
mov eax, 1
jmp 0x47ddc0
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea ecx, [edi + edi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x6c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x34]
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], 0
mov word [eax], 0xc
mov eax, edi
mov edi, dword [esp + 0x78]
push ebx
lea ecx, [esi - 2]
call fcn.00437690
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x18]
xor esi, esi
add esp, 4
mov byte [eax + 0x1c], 0
cmp dword [esp + 0x4c], esi
jle 0x47de0e
cmp esi, 0x10
jge 0x47de0e
mov dx, word [eax + 0x1e]
mov cx, si
shr dx, cl
test dl, 1
je 0x47de07
mov eax, dword [eax + 0x30]
mov eax, dword [eax + esi*4]
call fcn.0047d1d0
mov eax, dword [esp + 0x2c]
inc esi
cmp esi, dword [esp + 0x4c]
jl 0x47dde4
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0x18]
mov dword [edi + 0x30], ecx
mov byte [edi + 0x2d], 0x9a
mov edx, dword [ebx + 0x20]
mov dword [edi + 0x34], edx
mov edi, dword [esp + 0x34]
mov ecx, esi
call fcn.0044cd10
cmp esi, dword [eax + 0x38]
jle 0x47de3d
mov dword [eax + 0x38], esi
mov dword [eax + 0x3c], edi
call fcn.0044ce10
jmp 0x47ee16
mov eax, edx
and eax, 0x100
je 0x47def5
test dl, 5
je 0x47def5
mov edx, dword [esp + 0x20]
mov eax, ecx
mov ecx, dword [eax + 0x30]
mov eax, dword [ecx]
inc dword [edi + 0x48]
mov ecx, dword [edi + 0x48]
push ecx
push edx
push 0
push eax
push edi
mov eax, esi
mov dword [esp + 0x48], ecx
call fcn.0047d2c0
add esp, 0x14
mov dword [esp + 0x40], eax
cmp eax, dword [esp + 0x34]
je 0x47de97
mov esi, dword [esp + 0x34]
mov edx, edi
call fcn.0044f790
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x10]
mov edi, dword [esp + 0x40]
push eax
push edi
push 0x26
mov esi, ebx
mov dword [esp + 0x54], eax
call fcn.00436e20
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x28]
add esp, 0xc
push edi
push ecx
push edx
push 0x49
call fcn.00436d10
mov eax, dword [esp + 0x28]
mov ecx, 1
call fcn.0044cd10
mov edx, dword [esp + 0x2c]
mov ecx, edi
push ecx
push 0xffffffffffffffff
push edx
mov edx, eax
call fcn.0044cc00
mov eax, dword [esp + 0x30]
add esp, 0x1c
mov byte [eax + 0x2d], 0x9f
jmp 0x47ee16
test eax, eax
je 0x47e0ed
test dl, 2
je 0x47e0ed
xor eax, eax
xor esi, esi
mov dword [esp + 0x3c], 0x9f
mov dword [esp + 0x6c], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x40], esi
test dl, 0x20
je 0x47df31
mov eax, dword [ecx + 0x30]
mov esi, dword [eax]
mov dword [esp + 0x40], esi
mov eax, 1
test dl, 0x10
je 0x47df40
mov ecx, dword [ecx + 0x30]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0x4c], edx
cmp dword [esp + 0x20], 0
je 0x47df55
mov eax, esi
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x40], esi
mov dword [esp + 0x4c], eax
test esi, esi
je 0x47dfd3
mov eax, dword [esp + 0x40]
mov edi, dword [eax]
mov eax, dword [edi + 0x10]
mov esi, dword [esp + 0x18]
lea ecx, [esp + 0x74]
push ecx
mov dword [esp + 0x48], 0x413f4042
call fcn.0044e200
movzx ecx, byte [edi]
mov edx, dword [esp + 0x4c]
add esp, 4
push eax
push edx
movzx edx, byte [esp + ecx - 4]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x24]
push eax
push edx
mov esi, ebx
call fcn.00436d10
mov edi, dword [esp + 0x88]
mov eax, dword [esp + 0x28]
add esp, 0x10
mov ecx, 1
call fcn.0044cd10
mov esi, dword [esp + 0x74]
mov edx, eax
call fcn.0044f790
mov eax, dword [esp + 0x40]
mov edi, dword [esp + 0x14]
call fcn.0047d1d0
mov edi, dword [esp + 0x18]
jmp 0x47dff6
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x1c]
neg edx
sbb edx, edx
push eax
and edx, 0xfffffffd
push ecx
add edx, 0x6d
push edx
mov esi, ebx
call fcn.00436e20
add esp, 0xc
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x47e05b
mov esi, dword [eax]
inc dword [edi + 0x48]
mov eax, dword [edi + 0x48]
push eax
mov dword [esp + 0x70], eax
mov eax, dword [esi + 0x10]
push eax
push edi
call fcn.0044e3a0
mov al, byte [esi]
add esp, 0xc
cmp al, 0x52
je 0x47e035
cmp al, 0x50
je 0x47e035
xor ecx, ecx
cmp dword [esp + 0x20], ecx
setne cl
lea ecx, [ecx + ecx + 0x50]
mov dword [esp + 0x3c], ecx
jmp 0x47e046
xor edx, edx
cmp dword [esp + 0x20], edx
sete dl
lea edx, [edx + edx + 0x51]
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x4c]
mov edi, dword [esp + 0x14]
call fcn.0047d1d0
mov eax, edi
mov edi, dword [esp + 0x18]
jmp 0x47e05f
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x20], 0
mov esi, dword [ebx + 0x20]
mov edx, dword [esp + 0x1c]
sete cl
add cl, 7
cmp dword [esp + 0x3c], 0x9f
mov byte [eax + 0x2d], cl
mov dword [eax + 0x30], edx
mov dword [eax + 0x34], esi
je 0x47ee16
inc dword [edi + 0x48]
mov eax, dword [edi + 0x48]
push eax
mov dword [esp + 0x38], eax
mov eax, edx
push eax
push 0x68
mov esi, ebx
call fcn.00436e20
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
add esp, 0xc
push esi
push 0xffffffffffffffff
push ecx
mov edx, edi
call fcn.0044cc00
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x48]
add esp, 0xc
push esi
push edx
push eax
push ecx
mov esi, ebx
call fcn.00436d10
mov eax, dword [ebx + 4]
add esp, 0x10
test eax, eax
je 0x47ee16
mov ecx, dword [ebx + 0x20]
lea edx, [ecx + ecx*4]
mov byte [eax + edx*4 - 0x11], 0x53
jmp 0x47ee16
test edx, 0x200
je 0x47e6b4
mov edx, dword [ecx + 0x1c]
movzx eax, word [ecx + 0x18]
mov dword [esp + 0x44], edx
mov edx, dword [esi + 8]
mov dword [esp + 0x4c], edx
mov edx, dword [ebp + 8]
mov dword [esp + 0x28], eax
xor eax, eax
test byte [edx + 0x22], 1
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x48], eax
mov byte [esp + 0x12], al
mov byte [esp + 0x11], al
mov byte [esp + 0x13], al
je 0x47e156
cmp byte [edx + 0x24], al
jle 0x47e156
mov eax, dword [esp + 0x44]
mov dx, word [eax + 0x2e]
cmp dx, word [esp + 0x28]
jbe 0x47e152
mov byte [esp + 0x11], 1
mov eax, 1
jmp 0x47e156
mov eax, dword [esp + 0x48]
test byte [ecx + 0x24], 0x20
movzx edx, word [esp + 0x28]
mov dword [esp + 0x24], edx
je 0x47e175
mov eax, dword [ecx + 0x30]
mov eax, dword [eax + edx*4]
mov dword [esp + 0x30], eax
inc edx
mov eax, 1
test byte [ecx + 0x24], 0x10
je 0x47e214
mov ecx, dword [ecx + 0x30]
mov edx, dword [ecx + edx*4]
mov ecx, 0x100
mov eax, 1
mov dword [esp + 0x34], edx
mov dword [esp + 0x48], eax
test word [edx + 0x14], cx
je 0x47e1e1
mov eax, dword [edi + 0x48]
mov edx, dword [esp + 0x14]
inc eax
mov dword [edi + 0x48], eax
mov dword [edx + 0x24], eax
push eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax + 0x1c]
mov eax, dword [esp + 0x28]
xor edx, edx
cmp byte [eax + ecx], 1
mov esi, ebx
sete dl
xor edx, dword [esp + 0x24]
push edx
push 0x17
call fcn.00436e20
mov edx, dword [esp + 0x20]
mov ecx, dword [ebx + 0x20]
mov eax, dword [esp + 0x54]
add esp, 0xc
mov dword [edx + 0x28], ecx
mov esi, edx
cmp dword [esp + 0x30], 0
jne 0x47e214
mov ecx, dword [esp + 0x44]
mov edx, dword [ecx + 4]
mov ecx, dword [esp + 0x24]
movsx ecx, word [edx + ecx*2]
test ecx, ecx
js 0x47e214
mov edx, dword [esp + 0x44]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + 4]
lea ecx, [ecx + ecx*2]
cmp byte [edx + ecx*8 + 0x14], 0
jne 0x47e214
mov byte [esp + 0x11], 1
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x3c]
push ecx
push eax
push edx
push esi
push edi
call fcn.0047d470
add esp, 0x14
cmp dword [esp + 0x3c], 0
mov dword [esp + 0x40], eax
je 0x47e243
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x24]
mov dl, byte [ecx + eax]
mov byte [esp + 0x12], dl
mov eax, dword [esi + 0x10]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x48], eax
movzx eax, word [ecx + 0x2e]
mov dword [esp + 0x78], eax
cmp word [esp + 0x28], ax
jae 0x47e276
mov ecx, dword [ecx + 0x1c]
mov eax, dword [esp + 0x24]
xor edx, edx
cmp byte [eax + ecx], dl
sete dl
cmp dword [esp + 0x20], edx
je 0x47e284
mov eax, dword [esp + 0x78]
cmp dword [esp + 0x20], 0
je 0x47e2a1
cmp ax, word [esp + 0x28]
jne 0x47e2a1
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], eax
mov al, byte [esp + 0x11]
mov dword [esp + 0x34], ecx
mov byte [esp + 0x11], 0
mov byte [esp + 0x13], al
mov eax, dword [esp + 0x30]
mov cl, 0x28
test eax, eax
je 0x47e2b8
mov dword [esp + 0x5c], 0
test byte [eax + 0x12], cl
je 0x47e2c0
mov dword [esp + 0x5c], 1
cmp dword [esp + 0x34], 0
je 0x47e2d8
mov edx, dword [esp + 0x34]
mov dword [esp + 0x64], 0
test byte [edx + 0x12], cl
je 0x47e2e0
mov dword [esp + 0x64], 1
test eax, eax
jne 0x47e2ef
mov dword [esp + 0x60], eax
cmp word [esp + 0x28], ax
jbe 0x47e2f7
mov dword [esp + 0x60], 1
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x28], ecx
test eax, eax
je 0x47e3b2
mov edx, dword [esp + 0x30]
add ecx, dword [esp + 0x40]
mov eax, dword [edx]
mov eax, dword [eax + 0x10]
push ecx
push eax
push edi
mov dword [esp + 0x78], eax
mov dword [esp + 0x84], ecx
call fcn.0044e3a0
mov ecx, dword [esp + 0x3c]
mov eax, 0x100
add esp, 0xc
test word [ecx + 0x14], ax
je 0x47e344
push esi
mov ecx, ebx
call fcn.0047d8f0
add esp, 4
mov edi, dword [esp + 0x6c]
mov eax, edi
call fcn.0044b720
test eax, eax
je 0x47e369
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x78]
push edx
push eax
push 0x4c
mov esi, ebx
call fcn.00436e20
add esp, 0xc
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x24]
test eax, eax
je 0x47e3a8
mov bl, byte [esi + eax]
mov eax, edi
call fcn.00449a90
cmp al, 0x41
jne 0x47e38a
mov ecx, dword [esp + 0x3c]
mov byte [esi + ecx], al
mov edx, dword [esp + 0x3c]
mov dl, byte [esi + edx]
mov ecx, edi
call fcn.0044b7d0
mov ebx, dword [esp + 0x54]
test eax, eax
je 0x47e3a8
mov eax, dword [esp + 0x3c]
mov byte [esi + eax], 0x41
inc dword [esp + 0x28]
mov edi, dword [esp + 0x18]
jmp 0x47e3e1
cmp byte [esp + 0x11], 0
je 0x47e3e5
add ecx, dword [esp + 0x40]
mov esi, ebx
push ecx
push 0
push 0x1a
call fcn.00436e20
mov eax, 1
add esp, 0xc
add dword [esp + 0x28], eax
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], eax
mov esi, dword [esp + 0x14]
movzx eax, byte [esp + 0x11]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
push edx
sub ecx, eax
mov eax, dword [esp + 0x40]
push edi
call fcn.0047d240
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x50]
push eax
mov eax, dword [esp + 0x58]
push ecx
mov ecx, dword [esp + 0x6c]
push edx
mov edx, dword [esp + 0x74]
push eax
lea eax, [ecx + edx*2]
mov ecx, dword [esp + 0x38]
movzx edx, byte [ecx + eax*2 + 0x5353fc]
push edx
mov eax, ebx
call fcn.00437060
mov edi, dword [esp + 0x40]
add esp, 0x1c
cmp dword [esp + 0x34], 0
mov dword [esp + 0x28], edi
je 0x47e4f4
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
mov esi, dword [ecx + 0x10]
add edi, dword [esp + 0x40]
mov eax, dword [esp + 0x18]
mov ecx, 1
mov dword [esp + 0x78], esi
call fcn.0044cd10
push edi
push esi
push eax
call fcn.0044e3a0
mov edx, dword [esp + 0x40]
mov ecx, 0x100
add esp, 0xc
test word [edx + 0x14], cx
je 0x47e490
mov eax, dword [esp + 0x14]
push eax
mov ecx, ebx
call fcn.0047d8f0
add esp, 4
mov eax, esi
call fcn.0044b720
test eax, eax
je 0x47e4ad
mov ecx, dword [esp + 0x48]
push ecx
push edi
push 0x4c
mov esi, ebx
call fcn.00436e20
add esp, 0xc
mov esi, dword [esp + 0x78]
mov bl, byte [esp + 0x12]
mov eax, esi
call fcn.00449a90
cmp al, 0x41
je 0x47e4e6
mov dl, byte [esp + 0x12]
mov ecx, esi
call fcn.0044b7d0
test eax, eax
jne 0x47e4e6
mov edx, dword [esp + 0x18]
push edi
push edx
lea eax, [esp + 0x1a]
mov ecx, 1
call fcn.0047d240
add esp, 8
inc dword [esp + 0x28]
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x54]
jmp 0x47e519
cmp byte [esp + 0x13], 0
je 0x47e51d
mov eax, edi
add eax, dword [esp + 0x40]
mov esi, ebx
push eax
push 0
push 0x1a
call fcn.00436e20
add esp, 0xc
mov dword [esp + 0x64], 0
inc edi
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
call fcn.00418230
mov edx, dword [ebx + 0x20]
mov dword [esi + 0x34], edx
test edi, edi
je 0x47e55f
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
push edi
push eax
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x70]
push edx
movzx edx, byte [ecx + eax*2 + 0x535404]
push edx
mov eax, ebx
call fcn.00437060
add esp, 0x14
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x14]
call fcn.0047d1d0
mov eax, dword [esp + 0x34]
call fcn.0047d1d0
cmp dword [esp + 0x68], 0
jne 0x47e674
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 0xc]
test byte [eax + 0x2a], 0x20
jne 0x47e5d0
mov eax, dword [esp + 0x18]
inc dword [eax + 0x48]
mov edi, dword [eax + 0x48]
mov ecx, dword [esp + 0x4c]
push edi
push ecx
push 0x71
mov esi, ebx
call fcn.00436e20
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
add esp, 0xc
push edi
push 0xffffffffffffffff
push esi
call fcn.0044cc00
add esp, 0xc
push edi
push esi
push 0x43
mov esi, ebx
call fcn.00436e20
add esp, 0xc
jmp 0x47e670
mov edx, dword [esp + 0x1c]
cmp edx, dword [esp + 0x4c]
je 0x47e674
call fcn.00454810
movzx esi, word [eax + 0x2e]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x48], eax
call fcn.0044f7c0
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x40], eax
xor eax, eax
xor edi, edi
cmp ax, word [ecx + 0x2e]
jae 0x47e64c
jmp 0x47e610
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
lea eax, [edi + edx]
mov edx, dword [ecx + 4]
mov si, word [edx + edi*2]
mov edx, dword [esp + 0x44]
push eax
call fcn.00454830
mov ecx, dword [esp + 0x50]
cwde
push eax
push ecx
push 0x2f
mov esi, ebx
call fcn.00436d10
mov edx, dword [esp + 0x58]
movzx eax, word [edx + 0x2e]
inc edi
add esp, 0x10
cmp edi, eax
jl 0x47e610
mov ecx, dword [esp + 0x48]
movzx edx, word [ecx + 0x2e]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x58]
push edx
mov edx, dword [esp + 0x20]
push eax
push ecx
push edx
push 0x45
mov eax, ebx
call fcn.00437060
add esp, 0x14
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x2c]
test dword [eax + 0x24], 0x1000
je 0x47e687
mov byte [edi + 0x2d], 0x9f
jmp 0x47e695
cmp dword [esp + 0x20], 0
sete cl
add cl, 7
mov byte [edi + 0x2d], cl
mov edx, dword [esp + 0x4c]
mov dword [edi + 0x30], edx
mov cl, byte [eax + 0x26]
and cl, 1
mov byte [edi + 0x2e], cl
test byte [eax + 0x24], 0xf
jne 0x47ee16
jmp 0x47ee12
test edx, 0x2000
je 0x47edce
mov eax, dword [edi + 0x44]
inc dword [edi + 0x48]
mov dword [esp + 0x70], eax
inc eax
xor ecx, ecx
mov dword [edi + 0x44], eax
mov edi, dword [edi + 0x48]
mov eax, ebx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x34], edi
mov dword [esp + 0x48], ecx
mov dword [esp + 0x68], ecx
call fcn.00437110
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x74], eax
xor eax, eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x30], eax
mov eax, dword [edx + 0x10]
mov edx, dword [ecx + 0x30]
mov ecx, dword [ebp + 8]
mov dword [esp + 0x4c], eax
mov eax, dword [edx]
mov dword [esp + 0x2c], eax
mov eax, dword [eax + 0xc]
mov dword [esp + 0x6c], eax
mov byte [esi + 0x2d], 0x10
mov dword [esi + 0x30], edi
mov al, byte [ecx + 0x29]
cmp al, 1
jbe 0x47e7df
mov esi, dword [esp + 0x38]
movzx eax, al
sub eax, dword [ebp + 0xc]
push 0
dec eax
lea edx, [eax + eax*4]
shl edx, 4
add edx, 0x58
push edx
mov dword [esp + 0x6c], eax
call fcn.004184b0
add esp, 8
mov dword [esp + 0x40], eax
test eax, eax
jne 0x47e764
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [esp + 0x64]
mov esi, dword [esp + 0x44]
inc al
movzx ecx, al
mov eax, dword [esp + 0x40]
mov dword [eax + 4], ecx
mov dword [eax], ecx
lea edi, [eax + 8]
mov ecx, 0x14
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
add edx, 8
cmp dword [esp + 0x64], 1
jl 0x47e7e6
mov ecx, dword [esp + 0x64]
add eax, 0x58
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x14]
add eax, 0x7c
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ecx
mov edi, edi
mov eax, dword [esp + 0x60]
movzx eax, byte [eax]
mov edi, dword [esp + 0x5c]
lea esi, [eax + eax*4]
shl esi, 4
mov eax, 0x50
add dword [esp + 0x60], eax
add dword [esp + 0x5c], eax
add esi, edx
dec dword [esp + 0x64]
mov ecx, 0x14
rep movsd dword es:[edi], dword [esi]
jne 0x47e7b0
jmp 0x47e7e6
mov edx, dword [ecx + 4]
mov dword [esp + 0x40], edx
mov eax, dword [ebp + 8]
test byte [eax + 0x22], 8
jne 0x47e85d
mov ecx, dword [esp + 0x4c]
test byte [ecx + 0x2a], 0x20
jne 0x47e818
mov edi, dword [esp + 0x18]
inc dword [edi + 0x48]
mov eax, dword [edi + 0x48]
push eax
push 0
push 0x1a
mov esi, ebx
mov dword [esp + 0x54], eax
call fcn.00436e20
add esp, 0xc
jmp 0x47e853
mov eax, ecx
call fcn.00454810
mov edi, dword [esp + 0x18]
mov ecx, eax
mov eax, dword [edi + 0x44]
lea edx, [eax + 1]
mov dword [esp + 0x68], ecx
mov dword [edi + 0x44], edx
movzx ecx, word [ecx + 0x2e]
push ecx
push eax
push 0x39
mov esi, ebx
mov dword [esp + 0x54], eax
call fcn.00436e20
mov ecx, dword [esp + 0x74]
add esp, 0xc
mov eax, edi
call fcn.00437770
inc dword [edi + 0x48]
mov edx, dword [edi + 0x48]
mov dword [esp + 0x68], edx
mov eax, dword [esp + 0x34]
push eax
push 0
push 0x17
mov esi, ebx
call fcn.00436e20
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x90], eax
mov eax, dword [edi + 0xc]
add esp, 0xc
cmp eax, 1
jle 0x47e997
xor esi, esi
mov dword [esp + 0x64], esi
cmp eax, esi
jle 0x47e997
mov eax, dword [edi + 0x14]
mov ecx, dword [eax + esi]
add eax, esi
cmp eax, dword [esp + 0x2c]
je 0x47e8e3
test byte [ecx + 4], 1
jne 0x47e8e3
mov eax, dword [edi + 0x14]
test byte [eax + esi + 0x14], 2
jne 0x47e8e3
mov edx, 0x1fff
test word [eax + esi + 0x12], dx
je 0x47e8e3
mov eax, dword [esp + 0x38]
push 0
push 0
push ecx
push eax
call fcn.0044a690
mov ecx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x4c]
call fcn.0044a1a0
add esp, 0x14
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x64]
inc eax
add esi, 0x30
mov dword [esp + 0x64], eax
cmp eax, dword [edi + 0xc]
jl 0x47e895
cmp dword [esp + 0x30], 0
je 0x47e997
mov edi, dword [esp + 0x18]
mov esi, dword [edi]
push 0
push 0x30
call fcn.004184b0
mov esi, eax
add esp, 8
test esi, esi
je 0x47e935
push 0x30
push 0
push esi
call fcn.004f8f00
add esp, 0xc
or edx, 0xffffffff
mov byte [esi], 0x48
mov word [esi + 0x22], dx
mov dword [esi + 0x18], 1
mov eax, dword [edi]
mov dword [esp + 0x64], eax
test esi, esi
jne 0x47e960
mov ecx, eax
push esi
push ecx
call fcn.0044a550
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x6c]
push edx
push eax
call fcn.0044a550
add esp, 0x10
mov dword [esp + 0x30], esi
jmp 0x47e99b
mov eax, dword [esp + 0x30]
mov dword [esi + 0x10], eax
mov ecx, dword [eax + 4]
and ecx, 0x200100
or dword [esi + 4], ecx
call fcn.00449df0
mov edx, dword [edi]
mov eax, dword [edx + 0x64]
cmp dword [esi + 0x18], eax
jle 0x47e991
push eax
push 0x54e704
push edi
call fcn.0041ad80
add esp, 0xc
mov dword [esp + 0x30], esi
jmp 0x47e99b
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x6c]
xor ecx, ecx
mov dword [esp + 0x60], pe_nt_image_headers32
mov dword [esp + 0x24], ecx
cmp dword [eax + 0xc], ecx
jle 0x47ecb4
mov esi, dword [esp + 0x40]
mov dword [esp + 0x5c], ecx
mov edi, edi
mov eax, dword [eax + 0x14]
add eax, dword [esp + 0x5c]
mov ecx, dword [eax + 8]
cmp ecx, dword [esp + 0x1c]
je 0x47e9df
mov edx, 0x400
test word [eax + 0x12], dx
je 0x47ec99
mov ecx, dword [esp + 0x30]
mov eax, dword [eax]
mov dword [esp + 0x64], 0
test ecx, ecx
je 0x47e9fc
test byte [eax + 4], 1
jne 0x47e9fc
mov dword [ecx + 0xc], eax
mov eax, ecx
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x60]
push ecx
push edx
push 0
push 0
push eax
push esi
push edi
call fcn.00485da0
add esp, 0x1c
mov dword [esp + 0x80], eax
test eax, eax
je 0x47ec99
mov ecx, dword [esp + 0x14]
movzx edx, byte [ecx + 0x2c]
mov ecx, dword [ebp + 0xc]
push 0
push edx
push ecx
lea edx, [eax + 0x2e0]
push esi
mov ecx, edi
call fcn.0047cf10
mov edx, dword [ebp + 8]
add esp, 0x10
test byte [edx + 0x22], 8
jne 0x47ebbe
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax + 0xc]
mov eax, dword [esp + 0x24]
dec ecx
mov dword [esp + 0x3c], 0xffffffff
cmp eax, ecx
je 0x47ea6d
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x4c]
test byte [eax + 0x2a], 0x20
jne 0x47eabb
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x18]
push 0
push edx
push eax
push 0xffffffffffffffff
push ecx
call fcn.0044d0a0
mov edx, dword [esp + 0x50]
add esp, 0x14
push edx
push eax
mov eax, dword [esp + 0x50]
push 0
push eax
push 0x83
mov eax, ebx
call fcn.00437060
add esp, 0x14
mov dword [esp + 0x64], eax
jmp 0x47ebbe
call fcn.00454810
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 0x38]
mov esi, dword [ecx + 0x3c]
mov dword [esp + 0x7c], eax
movzx eax, word [eax + 0x2e]
mov dword [esp + 0x28], eax
mov dword [esp + 0x44], esi
cmp eax, edx
jg 0x47eaea
add esi, eax
sub edx, eax
mov dword [ecx + 0x3c], esi
mov dword [ecx + 0x38], edx
jmp 0x47eaf9
mov edx, dword [ecx + 0x48]
lea esi, [edx + 1]
add edx, eax
mov dword [esp + 0x44], esi
mov dword [ecx + 0x48], edx
xor esi, esi
test eax, eax
jle 0x47eb30
mov edi, ecx
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x1c]
lea edx, [esi + ecx]
mov ecx, dword [esp + 0x7c]
push 0
push edx
mov edx, dword [ecx + 4]
mov ecx, dword [esp + 0x54]
push eax
movsx eax, word [edx + esi*2]
push eax
push ecx
call fcn.0044d0a0
inc esi
add esp, 0x14
cmp esi, dword [esp + 0x28]
jl 0x47eb01
mov esi, dword [esp + 0x3c]
test esi, esi
je 0x47eb5b
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
push edx
push eax
push 0
push ecx
push 0x46
mov eax, ebx
call fcn.00437060
add esp, 0x14
mov dword [esp + 0x64], eax
test esi, esi
js 0x47eba0
mov edi, dword [esp + 0x68]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x44]
push edi
push edx
push eax
push 0x31
mov esi, ebx
call fcn.00436d10
mov ecx, dword [esp + 0x58]
push 0
push edi
push ecx
push 0x6f
call fcn.00436d10
add esp, 0x20
cmp dword [esp + 0x3c], 0
je 0x47eba0
mov ecx, dword [ebx + 4]
test ecx, ecx
je 0x47eba0
mov eax, dword [ebx + 0x20]
lea edx, [eax + eax*4]
mov byte [ecx + edx*4 - 0x11], 0x10
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x44]
mov eax, dword [esp + 0x18]
mov ecx, esi
call fcn.0044cd10
cmp esi, dword [eax + 0x38]
jle 0x47ebbe
mov dword [eax + 0x38], esi
mov dword [eax + 0x3c], edi
mov esi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
cmp dword [eax + 0x54], esi
jg 0x47ebd6
push ebx
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47ec03
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x74]
xor edi, edi
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov word [eax], 0xf
jmp 0x47ec05
xor edi, edi
mov eax, dword [esp + 0x64]
cmp eax, edi
je 0x47ec28
mov ecx, dword [ebx + 0x20]
cmp ecx, eax
jbe 0x47ec1e
mov edx, dword [ebx + 4]
lea eax, [eax + eax*4]
mov dword [edx + eax*4 + 8], ecx
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x18]
dec eax
mov dword [ecx + 0x58], eax
mov eax, dword [esp + 0x80]
cmp byte [eax + 0x27], 0
je 0x47ec3d
mov dword [esp + 0x78], 1
mov esi, dword [eax + 0x320]
test dword [esi + 0x24], 0x200
je 0x47ec84
cmp dword [esp + 0x24], edi
je 0x47ec5b
mov edx, dword [esp + 0x20]
cmp dword [esi + 0x1c], edx
jne 0x47ec84
mov ecx, dword [esp + 0x4c]
test byte [ecx + 0x2a], 0x20
je 0x47ec73
mov edx, dword [esi + 0x1c]
mov ecx, dword [edx + 0x34]
and cl, 3
cmp cl, 2
je 0x47ec84
mov edx, dword [esi + 0x1c]
or dword [esp + 0x60], 0x1000
mov dword [esp + 0x20], edx
jmp 0x47ec88
mov dword [esp + 0x20], edi
push eax
call fcn.004867c0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x44]
add esp, 4
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x6c]
add dword [esp + 0x5c], 0x30
inc ecx
mov dword [esp + 0x24], ecx
cmp ecx, dword [eax + 0xc]
jl 0x47e9c0
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x14]
mov dword [esi + 0x38], eax
test eax, eax
je 0x47ecca
mov eax, dword [esp + 0x70]
mov dword [esi + 8], eax
cmp dword [esp + 0x30], 0
je 0x47ecea
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x38]
push eax
push ecx
mov dword [eax + 0xc], 0
call fcn.0044a550
add esp, 8
mov eax, dword [ebx + 0x20]
mov ecx, dword [esp + 0x84]
cmp eax, ecx
jbe 0x47ed02
lea edx, [ecx + ecx*4]
mov ecx, dword [ebx + 4]
mov dword [ecx + edx*4 + 4], eax
mov edi, dword [esi + 0xc]
mov esi, dword [ebx + 0x20]
mov edx, dword [ebx + 0x18]
cmp dword [edx + 0x54], esi
jg 0x47ed1d
push ebx
call fcn.00436c80
add esp, 4
test eax, eax
jne 0x47ed40
mov ecx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0xe
mov ecx, dword [ebx + 0x18]
or eax, 0xffffffff
sub eax, dword [esp + 0x74]
js 0x47ed59
mov edx, dword [ecx + 0x70]
test edx, edx
je 0x47ed59
mov esi, dword [ebx + 0x20]
mov dword [edx + eax*4], esi
mov edx, dword [ebx + 0x20]
mov eax, dword [ebp + 8]
dec edx
mov dword [ecx + 0x58], edx
cmp byte [eax + 0x29], 1
jbe 0x47edb8
mov eax, dword [esp + 0x40]
test eax, eax
je 0x47edb8
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x47edaf
cmp dword [ecx + 0x208], 0
je 0x47ed89
call fcn.004181f0
jmp 0x47edb8
cmp eax, dword [ecx + 0x114]
jb 0x47edaf
cmp eax, dword [ecx + 0x118]
jae 0x47edaf
mov edx, dword [ecx + 0x110]
mov dword [eax], edx
dec dword [ecx + 0xfc]
mov dword [ecx + 0x110], eax
jmp 0x47edb8
push eax
call fcn.00418180
add esp, 4
cmp dword [esp + 0x78], 0
jne 0x47ee16
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x14]
call fcn.0047d1d0
jmp 0x47ee16
test byte [esp + 0x84], 8
je 0x47edde
mov byte [esi + 0x2d], 0x9f
jmp 0x47ee16
mov eax, dword [esp + 0x20]
mov cl, byte [eax + 0x535408]
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x48]
mov byte [edi + 0x2d], cl
mov ecx, dword [esp + 0x1c]
mov dword [edi + 0x30], ecx
movzx eax, byte [eax + 0x53540c]
push edx
push ecx
push eax
mov esi, ebx
call fcn.00436e20
add esp, 0xc
inc eax
mov dword [edi + 0x34], eax
mov byte [edi + 0x2f], 1
mov ecx, dword [esp + 0x50]
mov eax, dword [ecx + 0xc]
mov edi, dword [ecx + 0x14]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], eax
test eax, eax
jle 0x47ef26
movzx eax, word [edi + 0x14]
xor esi, esi
test al, 6
jne 0x47ef0a
mov edx, dword [esp + 0x14]
mov eax, dword [edi + 0x28]
mov ecx, dword [edi + 0x2c]
and eax, dword [edx + 0x48]
and ecx, dword [edx + 0x4c]
or eax, ecx
je 0x47ee5e
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x27], 1
jmp 0x47ef0a
mov eax, dword [edi]
mov dword [esp + 0x84], eax
cmp dword [edx], esi
je 0x47ee75
test byte [eax + 4], 1
je 0x47ef0a
movzx ecx, word [edi + 0x14]
test ecx, 0x200
je 0x47eed1
mov esi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
mov edi, dword [edx + 0x24]
cmp dword [eax + 0x54], esi
jg 0x47eea3
push ebx
call fcn.00436c80
add esp, 4
test eax, eax
je 0x47eea3
mov esi, 1
jmp 0x47eec6
mov edx, dword [ebx + 4]
inc dword [ebx + 0x20]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 4], edi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x2e
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x18]
push 0x10
push ecx
push eax
push edx
call fcn.0044ec20
add esp, 0x10
test esi, esi
je 0x47ef05
mov eax, dword [ebx + 0x20]
cmp eax, esi
jbe 0x47eefb
mov edx, dword [ebx + 4]
lea ecx, [esi + esi*4]
mov dword [edx + ecx*4 + 8], eax
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x18]
dec eax
mov dword [ecx + 0x58], eax
or word [edi + 0x14], 4
mov eax, dword [esp + 0x28]
dec eax
add edi, 0x30
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], edi
test eax, eax
jg 0x47ee30
mov ecx, dword [esp + 0x50]
mov eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], ecx
test ecx, ecx
jle 0x47f071
test byte [eax + 0x14], 6
jne 0x47f055
movzx ecx, word [eax + 0x12]
test cl, 0x82
je 0x47f055
test ecx, 0x800
je 0x47f055
mov edx, dword [eax + 8]
cmp edx, dword [esp + 0x1c]
jne 0x47f055
mov eax, dword [esp + 0x14]
cmp dword [eax], 0
jne 0x47f055
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x14]
push 0x83
push edx
mov edx, dword [eax + 0xc]
mov eax, dword [esp + 0x58]
mov dword [esp + 0x8c], ecx
mov ecx, dword [ebp + 0x10]
push ecx
mov ecx, dword [esp + 0x28]
push edx
push eax
xor edx, edx
call fcn.00481520
mov edi, eax
add esp, 0x14
test edi, edi
je 0x47f055
test byte [edi + 0x14], 4
jne 0x47f055
mov esi, dword [esp + 0x38]
push 0
push 0x30
call fcn.004184b0
add esp, 8
mov dword [esp + 0x4c], eax
test eax, eax
je 0x47f055
mov esi, dword [edi]
mov edi, eax
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x84]
mov edx, dword [ecx + 0xc]
mov ecx, dword [esp + 0x58]
push 0x10
push ecx
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x20]
push eax
push edx
call fcn.0044ec20
mov eax, dword [esp + 0x5c]
add esp, 0x10
cmp dword [esp + 0x38], 0
je 0x47f04c
mov ecx, dword [esp + 0x38]
cmp dword [ecx + 0x208], 0
je 0x47f026
call fcn.004181f0
jmp 0x47f055
cmp eax, dword [ecx + 0x114]
jb 0x47f04c
cmp eax, dword [ecx + 0x118]
jae 0x47f04c
mov edx, dword [ecx + 0x110]
mov dword [eax], edx
dec dword [ecx + 0xfc]
mov dword [ecx + 0x110], eax
jmp 0x47f055
push eax
call fcn.00418180
add esp, 4
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
dec ecx
add eax, 0x30
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], eax
test ecx, ecx
jg 0x47ef3c
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov dword [esp + 0x80], eax
test eax, eax
je 0x47f19f
mov ecx, dword [ebx + 0x20]
mov edx, dword [esp + 0x14]
mov dword [edx + 0x1c], ecx
mov eax, dword [ebx + 0x20]
mov edi, dword [ebx + 0x18]
mov dword [esp + 0x84], eax
cmp dword [edi + 0x54], eax
jg 0x47f117
mov eax, dword [edi + 0x54]
test eax, eax
je 0x47f0ad
add eax, eax
jmp 0x47f0b2
mov eax, 0x33
mov ebx, dword [ebx + 4]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
push 0
push eax
mov eax, dword [edi]
call fcn.00418550
mov esi, eax
add esp, 8
test esi, esi
je 0x47f146
mov eax, dword [edi]
test eax, eax
je 0x47f0ee
cmp esi, dword [eax + 0x114]
jb 0x47f0ee
cmp esi, dword [eax + 0x118]
jae 0x47f0ee
movzx ecx, word [eax + 0xf8]
jmp 0x47f0fa
push esi
call dword [0x54c280]
mov ecx, eax
add esp, 4
mov eax, 0xcccccccd
mul ecx
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x84]
shr edx, 4
mov dword [edi + 0x54], edx
mov dword [ecx + 4], esi
mov ebx, ecx
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea eax, [eax + edx*4]
mov ecx, 1
add dword [ebx + 0x20], ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax + 3], 0
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov word [eax], 0x17
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x50]
call fcn.0044d140
mov esi, dword [ebx + 0x14]
xor edi, edi
cmp dword [ebx + 0xc], edi
jle 0x47f19f
lea ecx, [ecx]
test byte [esi + 0x14], 6
jne 0x47f196
mov edx, dword [esp + 0x14]
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 0x2c]
and eax, dword [edx + 0x48]
and ecx, dword [edx + 0x4c]
or eax, ecx
jne 0x47f196
mov edx, dword [esp + 0x58]
mov eax, dword [esi]
mov ecx, dword [esp + 0x18]
push 0x10
push edx
push eax
push ecx
call fcn.0044ec20
add esp, 0x10
or word [esi + 0x14], 4
inc edi
add esi, 0x30
cmp edi, dword [ebx + 0xc]
jl 0x47f160
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x48]
mov edx, dword [ecx + 0x4c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret