Function at 0x47a088
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x57
push 0
push 0
dec ecx
jne 0x47a090
push ecx
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x47b0a7
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebx + 0x38]
call fcn.00403d48
mov byte [ebp - 1], 0
lea eax, [ebx + 4]
call fcn.00403d48
lea eax, [ebx + 8]
call fcn.00403d48
lea eax, [ebx + 0xc]
mov edx, 0x47b0c4
call fcn.00403d9c
lea eax, [ebx + 0x10]
mov edx, 0x47b0d0
call fcn.00403d9c
lea eax, [ebx + 0x14]
mov edx, 0x47b0e0
call fcn.00403d9c
lea eax, [ebx + 0x18]
mov edx, 0x47b0e0
call fcn.00403d9c
call sub.kernel32.dll_GetACP
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x40]
call fcn.004091cc
mov edx, dword [ebp - 0x40]
lea eax, [ebx + 0x1c]
call fcn.00403d9c
mov eax, dword [ebx + 0x1c]
mov edx, 0x47b0e0
call fcn.004040d8
je 0x47a14f
mov eax, dword [ebx + 0x1c]
mov edx, 0x47b0ec
call fcn.004040d8
je 0x47a14f
lea eax, [ebx + 0x1c]
mov edx, 0x47b0f8
call fcn.00403d9c
mov edx, 0x47b0f8
lea eax, [ebx + 0x14]
call fcn.00403d9c
lea eax, [ebx + 0x14]
mov edx, dword [ebx + 0x1c]
call fcn.00403d9c
mov byte [ebx + 0x22], 0
mov eax, dword [ebx + 0x14]
mov edx, 0x47b0ec
call fcn.004040d8
jne 0x47a173
mov byte [ebx + 0x20], 2
jmp 0x47a19b
mov eax, dword [ebx + 0x14]
mov edx, 0x47b0e0
call fcn.004040d8
jne 0x47a197
mov eax, dword [ebx + 0x1c]
mov edx, 0x47b0ec
call fcn.004040d8
jne 0x47a197
mov byte [ebx + 0x20], 4
jmp 0x47a19b
mov byte [ebx + 0x20], 0
mov eax, dword [ebx + 0x14]
mov edx, 0x47b0ec
call fcn.004040d8
jne 0x47a1bf
mov eax, dword [ebx + 0x18]
mov edx, 0x47b0e0
call fcn.004040d8
jne 0x47a1bf
mov byte [ebx + 0x21], 2
jmp 0x47a1e7
mov eax, dword [ebx + 0x14]
mov edx, 0x47b0e0
call fcn.004040d8
jne 0x47a1e3
mov eax, dword [ebx + 0x18]
mov edx, 0x47b0ec
call fcn.004040d8
jne 0x47a1e3
mov byte [ebx + 0x21], 1
jmp 0x47a1e7
mov byte [ebx + 0x21], 0
lea eax, [ebx + 0x24]
call fcn.00403d48
mov dl, 1
mov eax, dword [0x4767b0]
call fcn.004768ec
mov esi, eax
mov edx, 0x80000002
mov eax, esi
call fcn.004769c8
mov edx, 0x47b104
mov eax, esi
call fcn.00476b54
test al, al
jne 0x47a239
lea eax, [ebx + 0x38]
mov edx, 0x47b124
call fcn.00403d9c
mov eax, esi
call fcn.00476998
mov eax, esi
call fcn.00402f60
jmp 0x47ae28
lea ecx, [ebp - 0x44]
mov edx, 0x47b138
mov eax, esi
call fcn.00476cb4
mov edx, dword [ebp - 0x44]
lea eax, [ebx + 4]
call fcn.00403d9c
lea ecx, [ebp - 0x10]
mov edx, 0x47b14c
mov eax, esi
call fcn.00476cb4
lea eax, [ebx + 0xc]
mov edx, dword [ebp - 0x10]
call fcn.00403d9c
mov eax, esi
call fcn.00476998
mov eax, esi
call fcn.00402f60
mov eax, dword [ebx + 4]
call fcn.00403fc8
mov edx, dword [ebx + 4]
cmp byte [edx + eax - 1], 0x5c
je 0x47a29a
lea eax, [ebx + 4]
mov edx, 0x47b160
call fcn.00403fd0
cmp dword [ebp - 0x10], 0
je 0x47a2af
mov eax, dword [ebp - 0x10]
mov edx, 0x47b0c4
call fcn.004040d8
jne 0x47a2bc
lea eax, [ebx + 8]
mov edx, dword [ebx + 4]
call fcn.00403d9c
jmp 0x47a30d
mov dword [ebp - 0x14], 0x20
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x3c]
push eax
call sub.advapi32.dll_GetUserNameA
push dword [ebx + 4]
push 0x47b16c
lea eax, [ebp - 0x48]
lea edx, [ebp - 0x3c]
mov ecx, 0x20
call fcn.00403f78
push dword [ebp - 0x48]
push 0x47b160
lea eax, [ebx + 8]
mov edx, 4
call fcn.00404088
lea eax, [ebx + 0x10]
lea edx, [ebp - 0x3c]
mov ecx, 0x20
call fcn.00403f78
lea eax, [ebx + 0x24]
mov ecx, 0x47b180
mov edx, dword [ebx + 8]
call fcn.00404014
mov eax, dword [ebx + 0x24]
call fcn.0040938c
test al, al
jne 0x47a344
lea eax, [ebx + 8]
mov edx, dword [ebx + 4]
call fcn.00403d9c
mov ecx, 0x47b180
lea eax, [ebx + 0x24]
mov edx, dword [ebx + 8]
call fcn.00404014
lea eax, [ebx + 0x28]
push eax
xor eax, eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], 3
xor eax, eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 7
lea eax, [ebp - 0x58]
mov ecx, 0xc
mov edx, 3
call fcn.0040570c
mov ecx, dword [ebx + 0x24]
mov dl, 1
mov eax, dword [0x475b30]
call fcn.00475bd8
mov esi, eax
push 0
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x47b198
mov edx, 0x47b1a8
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x5c]
lea eax, [ebx + 0x40]
call fcn.00403d9c
mov eax, dword [ebx + 0x1c]
push eax
lea eax, [ebp - 0x60]
push eax
mov ecx, 0x47b1c0
mov edx, 0x47b1d4
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x60]
lea eax, [ebx + 0x14]
call fcn.00403d9c
push 0x47b0e0
lea eax, [ebp - 0x64]
push eax
mov edx, 0x47b1d4
mov ecx, 0x47b1e8
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x64]
lea eax, [ebx + 0x18]
call fcn.00403d9c
push 1
push 0
push 2
push 0x47b1fc
lea eax, [ebp - 0x78]
push eax
mov ecx, 0x47b208
mov edx, 0x47b220
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x74]
call fcn.004052bc
lea eax, [ebp - 0x74]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
mov edx, 0x47b220
mov ecx, 0x47b234
mov eax, esi
call fcn.004761f8
test al, al
jne 0x47a490
push 2
push 0
push 2
push 0
lea eax, [ebp - 0x90]
push eax
mov edx, 0x47b220
mov ecx, 0x47b244
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x8c]
call fcn.004783c0
mov edx, dword [ebp - 0x8c]
lea eax, [ebp - 0x88]
call fcn.004052bc
lea eax, [ebp - 0x88]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
jmp 0x47a4e4
push 2
push 0
push 2
push 0
lea eax, [ebp - 0xa8]
push eax
mov ecx, 0x47b234
mov edx, 0x47b220
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0xa8]
lea edx, [ebp - 0xa4]
call fcn.0047944c
mov edx, dword [ebp - 0xa4]
lea eax, [ebp - 0xa0]
call fcn.004052bc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 0
push 0
push 2
push 0x47b254
lea eax, [ebp - 0xbc]
push eax
mov edx, 0x47b220
mov ecx, 0x47b264
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xbc]
lea eax, [ebp - 0xb8]
call fcn.004052bc
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 3
push 0
push 2
push 0x47b278
lea eax, [ebp - 0xd0]
push eax
mov edx, 0x47b220
mov ecx, 0x47b288
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xd0]
lea eax, [ebp - 0xcc]
call fcn.004052bc
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 4
push 0
push 2
push 0
lea eax, [ebp - 0xe4]
push eax
mov edx, 0x47b220
mov ecx, 0x47b29c
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xe4]
lea eax, [ebp - 0xe0]
call fcn.004052bc
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 5
push 0
push 2
push 0
lea eax, [ebp - 0xf8]
push eax
mov edx, 0x47b220
mov ecx, 0x47b2b0
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xf8]
lea eax, [ebp - 0xf4]
call fcn.004052bc
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 0
lea eax, [ebp - 0xfc]
push eax
mov edx, 0x47b220
mov ecx, 0x47b2c8
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xfc]
lea eax, [ebx + 0x48]
call fcn.00403d9c
lea edx, [ebp - 0x100]
mov eax, dword [ebx + 0x48]
call fcn.004090e8
cmp dword [ebp - 0x100], 0
jne 0x47a65b
push 5
push 0
push 2
lea eax, [ebx + 0x28]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004058b4
add esp, 0x14
lea edx, [ebp - 0x110]
lea eax, [ebx + 0x48]
call fcn.004050b4
push 0
lea eax, [ebp - 0x114]
push eax
mov edx, 0x47b220
mov ecx, 0x47b2e8
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x114]
lea eax, [ebx + 0x4c]
call fcn.00403d9c
lea edx, [ebp - 0x118]
mov eax, dword [ebx + 0x4c]
call fcn.004090e8
cmp dword [ebp - 0x118], 0
jne 0x47a6c0
push 5
push 0
push 2
lea eax, [ebx + 0x28]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.004058b4
add esp, 0x14
lea edx, [ebp - 0x128]
lea eax, [ebx + 0x4c]
call fcn.004050b4
push 6
push 0
push 2
push 0x12c
mov edx, 0x47b220
mov ecx, 0x47b30c
mov eax, esi
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
lea eax, [ebp - 0x138]
call fcn.004051ec
lea eax, [ebp - 0x138]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 7
push 0
push 2
push 0xbb8
mov edx, 0x47b220
mov ecx, 0x47b32c
mov eax, esi
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
lea eax, [ebp - 0x148]
call fcn.004051ec
lea eax, [ebp - 0x148]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 0
push 1
push 2
push 0x47b348
lea eax, [ebp - 0x15c]
push eax
mov edx, 0x47b220
mov ecx, 0x47b35c
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x15c]
lea eax, [ebp - 0x158]
call fcn.004052bc
lea eax, [ebp - 0x158]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 1
push 1
push 2
push 0x47b1fc
lea eax, [ebp - 0x170]
push eax
mov edx, 0x47b220
mov ecx, 0x47b370
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x170]
lea eax, [ebp - 0x16c]
call fcn.004052bc
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
mov ecx, 0x47b234
mov edx, 0x47b220
mov eax, esi
call fcn.004761f8
test al, al
jne 0x47a82f
push 2
push 1
push 2
push 0
lea eax, [ebp - 0x188]
push eax
mov edx, 0x47b220
mov ecx, 0x47b388
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x188]
lea edx, [ebp - 0x184]
call fcn.004783c0
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 0x180]
call fcn.004052bc
lea eax, [ebp - 0x180]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
jmp 0x47a883
push 2
push 1
push 2
push 0
lea eax, [ebp - 0x1a0]
push eax
mov ecx, 0x47b388
mov edx, 0x47b220
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x1a0]
lea edx, [ebp - 0x19c]
call fcn.0047944c
mov edx, dword [ebp - 0x19c]
lea eax, [ebp - 0x198]
call fcn.004052bc
lea eax, [ebp - 0x198]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 3
push 1
push 2
push 0x47b3a0
lea eax, [ebp - 0x1b4]
push eax
mov edx, 0x47b220
mov ecx, 0x47b3b0
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x1b4]
lea eax, [ebp - 0x1b0]
call fcn.004052bc
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 4
push 1
push 2
push 0
lea eax, [ebp - 0x1c8]
push eax
mov edx, 0x47b220
mov ecx, 0x47b3c4
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x1c8]
lea eax, [ebp - 0x1c4]
call fcn.004052bc
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 5
push 1
push 2
push 0x47b3d8
lea eax, [ebp - 0x1dc]
push eax
mov edx, 0x47b220
mov ecx, 0x47b3ec
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x1dc]
lea eax, [ebp - 0x1d8]
call fcn.004052bc
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 6
push 1
push 2
push 0x12c
mov edx, 0x47b220
mov ecx, 0x47b404
mov eax, esi
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
lea eax, [ebp - 0x1ec]
call fcn.004051ec
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 7
push 1
push 2
push 0xbb8
mov edx, 0x47b220
mov ecx, 0x47b424
mov eax, esi
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
lea eax, [ebp - 0x1fc]
call fcn.004051ec
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 0
push 2
push 2
push 0
lea eax, [ebp - 0x214]
push eax
mov ecx, 0x47b440
mov edx, 0x47b458
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x214]
lea edx, [ebp - 0x210]
call fcn.004090e8
mov edx, dword [ebp - 0x210]
lea eax, [ebp - 0x20c]
call fcn.004052bc
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 1
push 2
push 2
push 0xd3
mov edx, 0x47b458
mov ecx, 0x47b470
mov eax, esi
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
lea eax, [ebp - 0x224]
call fcn.004051ec
lea eax, [ebp - 0x224]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 2
push 2
push 2
push 0x400
mov edx, 0x47b458
mov ecx, 0x47b484
mov eax, esi
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
lea eax, [ebp - 0x234]
call fcn.004051ec
lea eax, [ebp - 0x234]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 0x47b0c4
lea eax, [ebp - 0x18]
push eax
mov edx, 0x47b458
mov ecx, 0x47b4a0
mov eax, esi
mov edi, dword [eax]
call dword [edi]
lea edx, [ebp - 0x238]
mov eax, dword [ebp - 0x18]
call fcn.00408ec0
mov edx, dword [ebp - 0x238]
lea eax, [ebp - 0x18]
call fcn.00403de0
mov eax, dword [ebp - 0x18]
mov edx, 0x47b4b8
call fcn.004040d8
je 0x47ab07
mov eax, dword [ebp - 0x18]
mov edx, 0x47b4c4
call fcn.004040d8
je 0x47ab07
mov eax, dword [ebp - 0x18]
mov edx, 0x47b4d0
call fcn.004040d8
je 0x47ab07
mov eax, dword [ebp - 0x18]
mov edx, 0x47b4dc
call fcn.004040d8
jne 0x47ab0d
mov byte [ebx + 0x22], 1
jmp 0x47ab11
mov byte [ebx + 0x22], 0
push 3
push 2
push 2
push 0x47b4ec
lea eax, [ebp - 0x24c]
push eax
mov edx, 0x47b220
mov ecx, 0x47b510
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x24c]
lea eax, [ebp - 0x248]
call fcn.004052bc
lea eax, [ebp - 0x248]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 0
push 3
push 2
push 0x47b52c
lea eax, [ebp - 0x260]
push eax
mov edx, 0x47b220
mov ecx, 0x47b53c
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x260]
lea eax, [ebp - 0x25c]
call fcn.004052bc
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 1
push 3
push 2
push 0x47b1fc
lea eax, [ebp - 0x274]
push eax
mov edx, 0x47b220
mov ecx, 0x47b550
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x274]
lea eax, [ebp - 0x270]
call fcn.004052bc
lea eax, [ebp - 0x270]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
push 2
push 3
push 2
push 0
lea eax, [ebp - 0x288]
push eax
mov edx, 0x47b220
mov ecx, 0x47b564
mov eax, esi
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x288]
lea eax, [ebp - 0x284]
call fcn.004052bc
lea eax, [ebp - 0x284]
push eax
lea eax, [ebx + 0x28]
push eax
call fcn.00405948
add esp, 0x14
mov ecx, dword [ebx + 0x3c]
mov edx, 0x47b578
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x40]
mov byte [ebx + 0x44], 0
push 3
push 0
push 2
lea eax, [ebx + 0x28]
push eax
lea eax, [ebp - 0x29c]
push eax
call fcn.004058b4
add esp, 0x14
lea edx, [ebp - 0x29c]
lea eax, [ebp - 0x28c]
call fcn.004050b4
mov edx, dword [ebp - 0x28c]
mov eax, 0x47b58c
call fcn.00408f1c
test eax, eax
jne 0x47ac7b
mov byte [ebx + 0x44], 1
push 3
push 0
push 2
lea eax, [ebx + 0x28]
push eax
lea eax, [ebp - 0x2b0]
push eax
call fcn.004058b4
add esp, 0x14
lea edx, [ebp - 0x2b0]
lea eax, [ebp - 0x2a0]
call fcn.004050b4
mov edx, dword [ebp - 0x2a0]
mov eax, 0x47b59c
call fcn.00408f1c
test eax, eax
jne 0x47acbd
mov byte [ebx + 0x44], 2
mov eax, esi
call fcn.00402f60
mov eax, dword [ebx + 0x14]
mov edx, 0x47b0ec
call fcn.004040d8
jne 0x47acd9
mov byte [ebx + 0x20], 2
jmp 0x47ad01
mov eax, dword [ebx + 0x14]
mov edx, 0x47b0e0
call fcn.004040d8
jne 0x47acfd
mov eax, dword [ebx + 0x1c]
mov edx, 0x47b0ec
call fcn.004040d8
jne 0x47acfd
mov byte [ebx + 0x20], 4
jmp 0x47ad01
mov byte [ebx + 0x20], 0
mov eax, dword [ebx + 0x14]
mov edx, 0x47b0ec
call fcn.004040d8
jne 0x47ad25
mov eax, dword [ebx + 0x18]
mov edx, 0x47b0e0
call fcn.004040d8
jne 0x47ad25
mov byte [ebx + 0x21], 2
jmp 0x47ad4d
mov eax, dword [ebx + 0x14]
mov edx, 0x47b0e0
call fcn.004040d8
jne 0x47ad49
mov eax, dword [ebx + 0x18]
mov edx, 0x47b0ec
call fcn.004040d8
jne 0x47ad49
mov byte [ebx + 0x21], 1
jmp 0x47ad4d
mov byte [ebx + 0x21], 0
mov eax, dword [ebx + 0x3c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jne 0x47ad7f
lea eax, [ebp - 0x2b4]
mov ecx, 0x47b5a8
mov edx, dword [ebx + 4]
call fcn.00404014
mov edx, dword [ebp - 0x2b4]
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x47ae24
mov eax, dword [ebx + 0x3c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x47ae24
inc eax
mov dword [ebp - 0x1c], eax
xor esi, esi
lea ecx, [ebp - 8]
mov edx, esi
mov eax, dword [ebx + 0x3c]
call fcn.00412c48
lea ecx, [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x3c]
call fcn.00412dd4
lea eax, [ebp - 0x2b8]
push eax
mov eax, dword [ebp - 0xc]
call fcn.00403fc8
mov edx, eax
mov ecx, 1
mov eax, dword [ebp - 0xc]
call fcn.004041d0
mov eax, dword [ebp - 0x2b8]
mov edx, 0x47b160
call fcn.004040d8
je 0x47adee
lea eax, [ebp - 0xc]
mov edx, 0x47b160
call fcn.00403fd0
lea ecx, [ebp - 0x2bc]
mov edx, dword [ebx + 4]
mov eax, dword [ebp - 0xc]
call fcn.00479f28
mov edx, dword [ebp - 0x2bc]
lea eax, [ebp - 0xc]
call fcn.00403de0
mov ecx, dword [ebp - 0xc]
mov edx, esi
mov eax, dword [ebx + 0x3c]
mov edi, dword [eax]
call dword [edi + 0x20]
inc esi
dec dword [ebp - 0x1c]
jne 0x47ad96
mov byte [ebp - 1], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47b0b1
lea eax, [ebp - 0x2bc]
mov edx, 3
call fcn.00403d6c
lea eax, [ebp - 0x2b0]
call fcn.00405638
lea eax, [ebp - 0x2a0]
call fcn.00403d48
lea eax, [ebp - 0x29c]
call fcn.00405638
lea eax, [ebp - 0x28c]
mov edx, 2
call fcn.00403d6c
lea eax, [ebp - 0x284]
call fcn.00405638
lea eax, [ebp - 0x274]
call fcn.00403d48
lea eax, [ebp - 0x270]
call fcn.00405638
lea eax, [ebp - 0x260]
call fcn.00403d48
lea eax, [ebp - 0x25c]
call fcn.00405638
lea eax, [ebp - 0x24c]
call fcn.00403d48
lea eax, [ebp - 0x248]
call fcn.00405638
lea eax, [ebp - 0x238]
call fcn.00403d48
lea eax, [ebp - 0x234]
mov edx, dword [0x4010d4]
mov ecx, 2
call fcn.00404768
lea eax, [ebp - 0x214]
mov edx, 2
call fcn.00403d6c
lea eax, [ebp - 0x20c]
mov edx, dword [0x4010d4]
mov ecx, 3
call fcn.00404768
lea eax, [ebp - 0x1dc]
call fcn.00403d48
lea eax, [ebp - 0x1d8]
call fcn.00405638
lea eax, [ebp - 0x1c8]
call fcn.00403d48
lea eax, [ebp - 0x1c4]
call fcn.00405638
lea eax, [ebp - 0x1b4]
call fcn.00403d48
lea eax, [ebp - 0x1b0]
call fcn.00405638
lea eax, [ebp - 0x1a0]
mov edx, 2
call fcn.00403d6c
lea eax, [ebp - 0x198]
call fcn.00405638
lea eax, [ebp - 0x188]
mov edx, 2
call fcn.00403d6c
lea eax, [ebp - 0x180]
call fcn.00405638
lea eax, [ebp - 0x170]
call fcn.00403d48
lea eax, [ebp - 0x16c]
call fcn.00405638
lea eax, [ebp - 0x15c]
call fcn.00403d48
lea eax, [ebp - 0x158]
mov edx, dword [0x4010d4]
mov ecx, 4
call fcn.00404768
lea eax, [ebp - 0x118]
mov edx, 2
call fcn.00403d6c
lea eax, [ebp - 0x110]
call fcn.00405638
lea eax, [ebp - 0x100]
mov edx, 3
call fcn.00403d6c
lea eax, [ebp - 0xf4]
call fcn.00405638
lea eax, [ebp - 0xe4]
call fcn.00403d48
lea eax, [ebp - 0xe0]
call fcn.00405638
lea eax, [ebp - 0xd0]
call fcn.00403d48
lea eax, [ebp - 0xcc]
call fcn.00405638
lea eax, [ebp - 0xbc]
call fcn.00403d48
lea eax, [ebp - 0xb8]
call fcn.00405638
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.00403d6c
lea eax, [ebp - 0xa0]
call fcn.00405638
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.00403d6c
lea eax, [ebp - 0x88]
call fcn.00405638
lea eax, [ebp - 0x78]
call fcn.00403d48
lea eax, [ebp - 0x74]
call fcn.00405638
lea eax, [ebp - 0x64]
mov edx, 3
call fcn.00403d6c
lea eax, [ebp - 0x48]
mov edx, 3
call fcn.00403d6c
lea eax, [ebp - 0x18]
call fcn.00403d48
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00403d6c
ret