Function at 0x47c280
Capabilities:
Parse pe header

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4a1568
push eax
mov dword fs:[0], esp
sub esp, 0x80
push ebx
push ebp
push esi
mov esi, ecx
mov ebp, 0x12c
lea ebx, [esi + 0x4b564]
mov ecx, dword [ebx]
test ecx, ecx
je 0x47c2b7
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [ebx], 0
add ebx, 4
dec ebp
jne 0x47c2ab
xor eax, eax
lea ecx, [esi + 0x4c8dc]
cmp dword [ecx], 0
je 0x47de87
inc eax
add ecx, 4
cmp eax, 0x5c
jl 0x47c2cb
push edi
mov edi, dword [esp + 0xa0]
mov ebp, 0x4a7000
mov eax, edi
mov dl, byte [eax]
mov bl, byte [ebp]
mov cl, dl
cmp dl, bl
jne 0x47c315
test cl, cl
je 0x47c311
mov dl, byte [eax + 1]
mov bl, byte [ebp + 1]
mov cl, dl
cmp dl, bl
jne 0x47c315
add eax, 2
add ebp, 2
test cl, cl
jne 0x47c2ec
xor eax, eax
jmp 0x47c31a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x47d0a2
mov ebx, dword [sym.imp.kernel32.dll_GetProcessHeap]
push 0x18
push 8
call ebx
mov ebp, dword [sym.imp.kernel32.dll_HeapAlloc]
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 0
je 0x47c361
mov ecx, dword [esi + 0x4c8e4]
push 0
mov edx, dword [ecx + 8]
mov ecx, eax
push edx
push 0
call fcn.00490220
jmp 0x47c363
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b564], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 1
je 0x47c39c
mov ecx, dword [esi + 0x4c8e8]
push 0
mov edx, dword [ecx + 8]
mov ecx, eax
push edx
push 0
call fcn.00490220
jmp 0x47c39e
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b568], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 2
je 0x47c3d2
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c3d4
xor eax, eax
mov dword [esi + 0x4b56c], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x4c8ec]
mov eax, dword [esp + 0xa4]
push eax
lea eax, [esp + 0x1c]
mov edx, dword [ecx + 8]
push edx
push 0x4af94c
push eax
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 3
je 0x47c43a
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c43c
xor eax, eax
mov edx, dword [esp + 0xa8]
mov dword [esi + 0x4b570], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x4c8f0]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x4af94c
push edx
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 4
je 0x47c4a2
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c4a4
xor eax, eax
mov edx, dword [esp + 0xac]
mov dword [esi + 0x4b574], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x4c8f4]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x4af94c
push edx
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 5
je 0x47c50a
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c50c
xor eax, eax
mov edx, dword [esp + 0xb0]
mov dword [esi + 0x4b578], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x4c9c4]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x4af94c
push edx
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 6
je 0x47c572
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c574
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b57c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 7
je 0x47c5a8
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c5aa
xor eax, eax
mov edx, dword [esp + 0xc0]
mov dword [esi + 0x4b580], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
mov edx, dword [esp + 0xb8]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xbc]
push eax
push ecx
push edx
push 0x4afd88
lea eax, [esp + 0x2c]
push 0x4afd78
push eax
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x1c
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 8
je 0x47c623
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c625
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b584], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 9
je 0x47c659
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c65b
xor eax, eax
mov dword [esi + 0x4b588], eax
mov eax, dword [esp + 0xa8]
or edi, 0xffffffff
test eax, eax
mov dword [esp + 0x98], edi
jne 0x47c9d5
mov eax, dword [esi + 0x4dd98]
cmp eax, 1
jne 0x47de66
mov ecx, dword [esi + 0x4dd94]
test ecx, ecx
jne 0x47c7f0
push 0
push 0
push 0x19
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 0xa
je 0x47c6d9
mov edx, dword [esi + 0x4c9c8]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c6db
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b58c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 0xb
je 0x47c714
mov edx, dword [esi + 0x4c9cc]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c716
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b590], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 0xc
je 0x47c74f
mov edx, dword [esi + 0x4c9d0]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c751
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b594], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 0xd
je 0x47c78a
mov edx, dword [esi + 0x4c9d4]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c78c
xor eax, eax
mov dword [esi + 0x4b598], eax
lea edi, [esi + 0x4b59c]
mov dword [esp + 0x10], 4
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0xe
je 0x47c7ce
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c7d0
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x47c7a0
jmp 0x47de75
cmp eax, 1
jne 0x47de66
cmp dword [esi + 0x4dd94], 1
jne 0x47de66
push 0
push 0
push 0x19
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0xf
je 0x47c848
mov edx, dword [esi + 0x4c9f0]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c84a
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b58c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x10
je 0x47c883
mov edx, dword [esi + 0x4c9f4]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c885
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b590], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x11
je 0x47c8be
mov edx, dword [esi + 0x4c9f8]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c8c0
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b594], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x12
je 0x47c8f9
mov edx, dword [esi + 0x4c9fc]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c8fb
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b598], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x13
je 0x47c934
mov edx, dword [esi + 0x4ca00]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c936
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b59c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x14
je 0x47c96f
mov edx, dword [esi + 0x4ca04]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c971
xor eax, eax
mov dword [esi + 0x4b5a0], eax
lea edi, [esi + 0x4b5a4]
mov dword [esp + 0x10], 2
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x15
je 0x47c9b3
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47c9b5
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x47c985
jmp 0x47de75
mov eax, dword [esp + 0xa4]
test eax, eax
mov eax, dword [esi + 0x4dd98]
je 0x47cd64
cmp eax, 1
jne 0x47de66
mov ecx, dword [esi + 0x4dd94]
test ecx, ecx
jne 0x47cb3d
push 0
push 0
push 0x17
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0
push 0
push 0x15
push 0x43
mov ecx, esi
call fcn.0043cc00
push 0
push 0
push 0x16
push 0x43
mov ecx, esi
call fcn.0043cc00
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x16
je 0x47ca61
mov edx, dword [esi + 0x4c9d8]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47ca63
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b58c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x17
je 0x47ca9c
mov edx, dword [esi + 0x4c9dc]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47ca9e
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b590], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x18
je 0x47cad7
mov edx, dword [esi + 0x4c9e0]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cad9
xor eax, eax
mov dword [esi + 0x4b594], eax
lea edi, [esi + 0x4b598]
mov dword [esp + 0x10], 5
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x19
je 0x47cb1b
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cb1d
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x47caed
jmp 0x47de75
cmp eax, 1
jne 0x47de66
cmp dword [esi + 0x4dd94], 1
jne 0x47de66
push 0
push 0
push 0x18
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0
push 0
push 0xc
push 0x43
mov ecx, esi
call fcn.0043cc00
push 0
push 0
push 0xd
push 0x43
mov ecx, esi
call fcn.0043cc00
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x1a
je 0x47cbb3
mov edx, dword [esi + 0x4ca08]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cbb5
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b58c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x1b
je 0x47cbee
mov edx, dword [esi + 0x4ca0c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cbf0
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b590], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x1c
je 0x47cc29
mov edx, dword [esi + 0x4ca10]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cc2b
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b594], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x1d
je 0x47cc64
mov edx, dword [esi + 0x4ca14]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cc66
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b598], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x1e
je 0x47cc9f
mov edx, dword [esi + 0x4ca18]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cca1
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b59c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x1f
je 0x47ccda
mov edx, dword [esi + 0x4ca1c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47ccdc
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b5a0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x20
je 0x47cd15
mov edx, dword [esi + 0x4ca20]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cd17
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b5a4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x21
je 0x47de55
mov edx, dword [esi + 0x4ca24]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
mov dword [esp + 0x98], edi
mov dword [esi + 0x4b5a8], eax
jmp 0x47de75
cmp eax, 1
jne 0x47de66
mov ecx, dword [esi + 0x4dd94]
test ecx, ecx
jne 0x47ce99
push 0
push 0
push 0x17
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x23
je 0x47cdbd
mov edx, dword [esi + 0x4c9e4]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cdbf
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b58c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x24
je 0x47cdf8
mov edx, dword [esi + 0x4c9e8]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cdfa
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b590], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x25
je 0x47ce33
mov edx, dword [esi + 0x4c9ec]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47ce35
xor eax, eax
mov dword [esi + 0x4b594], eax
lea edi, [esi + 0x4b598]
mov dword [esp + 0x10], 5
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x26
je 0x47ce77
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47ce79
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x47ce49
jmp 0x47de75
cmp eax, 1
jne 0x47de66
cmp dword [esi + 0x4dd94], 1
jne 0x47de66
push 0
push 0
push 0x18
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x27
je 0x47cef1
mov edx, dword [esi + 0x4ca28]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cef3
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b58c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x28
je 0x47cf2c
mov edx, dword [esi + 0x4ca2c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cf2e
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b590], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x29
je 0x47cf67
mov edx, dword [esi + 0x4ca30]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cf69
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b594], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x2a
je 0x47cfa2
mov edx, dword [esi + 0x4ca34]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cfa4
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b598], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x2b
je 0x47cfdd
mov edx, dword [esi + 0x4ca38]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47cfdf
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b59c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x2c
je 0x47d018
mov edx, dword [esi + 0x4ca3c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d01a
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b5a0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x2d
je 0x47d053
mov edx, dword [esi + 0x4ca40]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d055
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b5a4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x2e
je 0x47de55
mov edx, dword [esi + 0x4ca44]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
mov dword [esp + 0x98], edi
mov dword [esi + 0x4b5a8], eax
jmp 0x47de75
mov ebp, 0x4a6fec
mov eax, edi
mov dl, byte [eax]
mov bl, byte [ebp]
mov cl, dl
cmp dl, bl
jne 0x47d0d2
test cl, cl
je 0x47d0ce
mov dl, byte [eax + 1]
mov bl, byte [ebp + 1]
mov cl, dl
cmp dl, bl
jne 0x47d0d2
add eax, 2
add ebp, 2
test cl, cl
jne 0x47d0a9
xor eax, eax
jmp 0x47d0d7
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x47de75
mov ebx, dword [sym.imp.kernel32.dll_GetProcessHeap]
push 0x18
push 8
call ebx
mov ebp, dword [sym.imp.kernel32.dll_HeapAlloc]
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x30
je 0x47d11e
mov ecx, dword [esi + 0x4c8f8]
push 0
mov edx, dword [ecx + 8]
mov ecx, eax
push edx
push 0
call fcn.00490220
jmp 0x47d120
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b564], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x31
je 0x47d159
mov ecx, dword [esi + 0x4c8fc]
push 0
mov edx, dword [ecx + 8]
mov ecx, eax
push edx
push 0
call fcn.00490220
jmp 0x47d15b
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b568], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x32
je 0x47d18f
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d191
xor eax, eax
mov dword [esi + 0x4b56c], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x4c8ec]
mov eax, dword [esp + 0xa4]
push eax
lea eax, [esp + 0x1c]
mov edx, dword [ecx + 8]
push edx
push 0x4af94c
push eax
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x33
je 0x47d1f7
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d1f9
xor eax, eax
mov edx, dword [esp + 0xa8]
mov dword [esi + 0x4b570], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x4c8f0]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x4af94c
push edx
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x34
je 0x47d25f
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d261
xor eax, eax
mov edx, dword [esp + 0xac]
mov dword [esi + 0x4b574], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x4c8f4]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x4af94c
push edx
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x35
je 0x47d2c7
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d2c9
xor eax, eax
mov edx, dword [esp + 0xb0]
mov dword [esi + 0x4b578], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x4c9c4]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x4af94c
push edx
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x36
je 0x47d32f
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d331
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b57c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x37
je 0x47d365
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d367
xor eax, eax
mov edx, dword [esp + 0xc0]
mov dword [esi + 0x4b580], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
mov edx, dword [esp + 0xb8]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xbc]
push eax
push ecx
push edx
push 0x4afd88
lea eax, [esp + 0x2c]
push 0x4afd78
push eax
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x1c
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x38
je 0x47d3e0
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d3e2
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b584], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x39
je 0x47d416
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d418
xor eax, eax
mov dword [esi + 0x4b588], eax
mov eax, dword [esp + 0xa8]
or edi, 0xffffffff
test eax, eax
mov dword [esp + 0x98], edi
jne 0x47d791
mov eax, dword [esi + 0x4dd98]
cmp eax, 1
jne 0x47de66
cmp dword [esi + 0x4dd94], eax
jne 0x47d5ab
push 0
push 0
push 0x19
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x3a
je 0x47d494
mov edx, dword [esi + 0x4c9c8]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d496
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b58c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x3b
je 0x47d4cf
mov edx, dword [esi + 0x4c9cc]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d4d1
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b590], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x3c
je 0x47d50a
mov edx, dword [esi + 0x4c9d0]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d50c
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b594], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x3d
je 0x47d545
mov edx, dword [esi + 0x4c9d4]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d547
xor eax, eax
mov dword [esi + 0x4b598], eax
lea edi, [esi + 0x4b59c]
mov dword [esp + 0x10], 4
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x3e
je 0x47d589
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d58b
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x47d55b
jmp 0x47de75
cmp eax, 1
jne 0x47de66
mov eax, dword [esi + 0x4dd94]
test eax, eax
jne 0x47de66
push 0
push 0
push 0x19
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x3f
je 0x47d604
mov edx, dword [esi + 0x4c9f0]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d606
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b58c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x40
je 0x47d63f
mov edx, dword [esi + 0x4c9f4]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d641
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b590], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x41
je 0x47d67a
mov edx, dword [esi + 0x4c9f8]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d67c
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b594], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x42
je 0x47d6b5
mov edx, dword [esi + 0x4c9fc]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d6b7
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b598], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x43
je 0x47d6f0
mov edx, dword [esi + 0x4ca00]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d6f2
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b59c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x44
je 0x47d72b
mov edx, dword [esi + 0x4ca04]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d72d
xor eax, eax
mov dword [esi + 0x4b5a0], eax
lea edi, [esi + 0x4b5a4]
mov dword [esp + 0x10], 2
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x45
je 0x47d76f
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d771
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x47d741
jmp 0x47de75
mov eax, dword [esp + 0xa4]
test eax, eax
mov eax, dword [esi + 0x4dd98]
je 0x47db1f
cmp eax, 1
jne 0x47de66
cmp dword [esi + 0x4dd94], eax
jne 0x47d8f7
push 0
push 0
push 0x17
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0
push 0
push 0x15
push 0x43
mov ecx, esi
call fcn.0043cc00
push 0
push 0
push 0x16
push 0x43
mov ecx, esi
call fcn.0043cc00
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x46
je 0x47d81b
mov edx, dword [esi + 0x4c9d8]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d81d
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b58c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x47
je 0x47d856
mov edx, dword [esi + 0x4c9dc]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d858
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b590], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x48
je 0x47d891
mov edx, dword [esi + 0x4c9e0]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d893
xor eax, eax
mov dword [esi + 0x4b594], eax
lea edi, [esi + 0x4b598]
mov dword [esp + 0x10], 5
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x49
je 0x47d8d5
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d8d7
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x47d8a7
jmp 0x47de75
cmp eax, 1
jne 0x47de66
mov eax, dword [esi + 0x4dd94]
test eax, eax
jne 0x47de66
push 0
push 0
push 0x18
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0
push 0
push 0xc
push 0x43
mov ecx, esi
call fcn.0043cc00
push 0
push 0
push 0xd
push 0x43
mov ecx, esi
call fcn.0043cc00
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x4a
je 0x47d96e
mov edx, dword [esi + 0x4ca08]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d970
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b58c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x4b
je 0x47d9a9
mov edx, dword [esi + 0x4ca0c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d9ab
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b590], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x4c
je 0x47d9e4
mov edx, dword [esi + 0x4ca10]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47d9e6
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b594], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x4d
je 0x47da1f
mov edx, dword [esi + 0x4ca14]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47da21
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b598], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x4e
je 0x47da5a
mov edx, dword [esi + 0x4ca18]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47da5c
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b59c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x4f
je 0x47da95
mov edx, dword [esi + 0x4ca1c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47da97
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b5a0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x50
je 0x47dad0
mov edx, dword [esi + 0x4ca20]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47dad2
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b5a4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x51
je 0x47de55
mov edx, dword [esi + 0x4ca24]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
mov dword [esp + 0x98], edi
mov dword [esi + 0x4b5a8], eax
jmp 0x47de75
cmp eax, 1
jne 0x47de66
cmp dword [esi + 0x4dd94], eax
jne 0x47dc52
push 0
push 0
push 0x17
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x53
je 0x47db76
mov edx, dword [esi + 0x4c9e4]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47db78
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b58c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x54
je 0x47dbb1
mov edx, dword [esi + 0x4c9e8]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47dbb3
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b590], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x55
je 0x47dbec
mov edx, dword [esi + 0x4c9ec]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47dbee
xor eax, eax
mov dword [esi + 0x4b594], eax
lea edi, [esi + 0x4b598]
mov dword [esp + 0x10], 5
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x56
je 0x47dc30
push 0
push 0x4a7110
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47dc32
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x47dc02
jmp 0x47de75
cmp eax, 1
jne 0x47de66
mov eax, dword [esi + 0x4dd94]
test eax, eax
jne 0x47de66
push 0
push 0
push 0x18
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x57
je 0x47dcab
mov edx, dword [esi + 0x4ca28]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47dcad
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b58c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x58
je 0x47dce6
mov edx, dword [esi + 0x4ca2c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47dce8
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b590], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x59
je 0x47dd21
mov edx, dword [esi + 0x4ca30]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47dd23
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b594], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x5a
je 0x47dd5c
mov edx, dword [esi + 0x4ca34]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47dd5e
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b598], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x5b
je 0x47dd97
mov edx, dword [esi + 0x4ca38]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47dd99
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b59c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x5c
je 0x47ddd2
mov edx, dword [esi + 0x4ca3c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47ddd4
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b5a0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x5d
je 0x47de0d
mov edx, dword [esi + 0x4ca40]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
jmp 0x47de0f
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x4b5a4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x5e
je 0x47de55
mov edx, dword [esi + 0x4ca44]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.00490220
mov dword [esp + 0x98], edi
mov dword [esi + 0x4b5a8], eax
jmp 0x47de75
xor eax, eax
mov dword [esp + 0x98], edi
mov dword [esi + 0x4b5a8], eax
jmp 0x47de75
push 0
push 0
push 0x19
push 0x45
mov ecx, esi
call fcn.0043cc00
push 0
push 0
push 0
push 0
push 0x12
mov ecx, esi
call fcn.00431bf0
pop edi
mov ecx, dword [esp + 0x8c]
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x8c
ret 0x24