Function at 0x47dadc
Capabilities:
Access peb ldr_data
Get number of processors
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
mov ecx, 9
push 0
push 0
dec ecx
jne 0x47dae4
push ecx
push ebx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
call fcn.00405408
xor eax, eax
push ebp
push 0x47e5b9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.00404ad8
mov ecx, dword [ebp - 0x10]
mov dl, 1
mov eax, dword [0x430bb8]
call fcn.00430c68
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x47e56e
push dword fs:[eax]
mov dword fs:[eax], esp
push 1
mov ecx, 0x47e5d0
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x13], al
push 0
mov ecx, 0x47e5f4
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 8], al
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x47e604
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
add eax, 0xc
call fcn.00405100
push 0
mov ecx, 0x47e614
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
push 0
mov ecx, 0x47e628
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x11], al
push 0
mov ecx, 0x47e63c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x12], al
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x47e650
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
add eax, 0x14
call fcn.00405100
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x47e660
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
add eax, 0x18
call fcn.00405100
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x47e670
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
add eax, 0x1c
call fcn.00405100
push 0
mov ecx, 0x47e684
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x20], eax
push 0
mov ecx, 0x47e698
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x24], al
push 0
mov ecx, 0x47e6ac
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x25], al
push 0x32
mov ecx, 0x47e6c0
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x28], eax
push 0x32
mov ecx, 0x47e6d0
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x2c], eax
push 0x32
mov ecx, 0x47e6e0
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x30], eax
push 0x64
mov ecx, 0x47e6f8
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x47e708
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x38], eax
push 0
mov ecx, 0x47e718
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x3c], al
push 0
mov ecx, 0x47e72c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x3d], al
push 0
mov ecx, 0x47e740
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x3e], al
push 0
mov ecx, 0x47e754
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x3f], al
push 1
mov ecx, 0x47e768
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x40], al
push 1
mov ecx, 0x47e778
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x41], al
push 1
mov ecx, 0x47e788
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x42], al
push 0x32
mov ecx, 0x47e79c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x44], eax
push 0
mov ecx, 0x47e7a8
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x48], eax
push 1
mov ecx, 0x47e7b8
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x4c], al
push 0x47e7c8
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x47e7dc
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
add eax, 0x50
call fcn.00405100
push 1
mov ecx, 0x47e7f0
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x54], al
push 0x1d4c0
mov ecx, 0x47e804
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
push 0
mov ecx, 0x47e818
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
push 1
mov ecx, 0x47e82c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
push 0
mov ecx, 0x47e844
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x64], eax
push 0
mov ecx, 0x47e858
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x68], eax
push 0
mov ecx, 0x47e86c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x6c], al
push 0
mov ecx, 0x47e880
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x6d], al
push 0
mov ecx, 0x47e894
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x6e], al
push 1
mov ecx, 0x47e8a8
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x70], eax
push 1
mov ecx, 0x47e8b8
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x74], eax
push 1
mov ecx, 0x47e8cc
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x78], eax
push 0
mov ecx, 0x47e8dc
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x7c], al
push 0
mov ecx, 0x47e8f0
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x7d], al
push 0
mov ecx, 0x47e908
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x7e], al
push 0
mov ecx, 0x47e91c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x7f], al
push 0
mov ecx, 0x47e930
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x80], al
push 0
mov ecx, 0x47e944
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x81], al
push 1
mov ecx, 0x47e958
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x82], al
push 0
mov ecx, 0x47e96c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x83], al
push 0
mov ecx, 0x47e980
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x84], al
push 1
mov ecx, 0x47e994
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x85], al
push 0
mov ecx, 0x47e9a0
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x86], al
push 0
mov ecx, 0x47e9b4
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x87], al
push 0x12c
mov ecx, 0x47e9c4
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x88], eax
push 0x47e9dc
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x47e9ec
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
add eax, 0x8c
call fcn.00405100
push 0x47e9fc
lea eax, [ebp - 0x2c]
push eax
mov ecx, 0x47ea0c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 0x90
call fcn.00405100
push 0xa
mov ecx, 0x47ea20
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x94], eax
push 0x64
mov ecx, 0x47ea34
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x98], eax
push 0xa
mov ecx, 0x47ea48
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x9c], eax
push 0x64
mov ecx, 0x47ea5c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xa0], eax
push 1
mov ecx, 0x47ea74
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xa4], al
push 1
mov ecx, 0x47ea88
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xa5], al
push 0
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x47ea9c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
add eax, 0xa8
call fcn.00405100
push 0
mov ecx, 0x47eab0
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xac], eax
push 0
mov ecx, 0x47eac4
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xb0], eax
push 0x32
mov ecx, 0x47ead8
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xb4], eax
push 0x80
mov ecx, 0x47eaec
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xb8], eax
push 1
mov ecx, 0x47eb00
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xbc], al
push 0x47eb14
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x47eb24
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
add eax, 0xc0
call fcn.00405100
push 1
mov ecx, 0x47eb38
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc4], al
push 1
mov ecx, 0x47eb4c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc5], al
push 0
mov ecx, 0x47eb60
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc6], al
push 0
mov ecx, 0x47eb74
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc7], al
push 0
mov ecx, 0x47eb88
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc8], al
push 0
mov ecx, 0x47eb9c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc9], al
push 0
mov ecx, 0x47ebb0
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xca], al
push 0
mov ecx, 0x47ebc4
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xcb], al
push 0
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x47ebd8
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 4]
add eax, 0xcc
call fcn.00405100
push 0
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x47ebf0
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 4]
add eax, 0xd0
call fcn.00405100
push 0
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x47ec08
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 4]
add eax, 0xd4
call fcn.00405100
push 0
lea eax, [ebp - 0x44]
push eax
mov ecx, 0x47ec20
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 4]
add eax, 0xd8
call fcn.00405100
push 0
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x47ec38
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 4]
add eax, 0xdc
call fcn.00405100
push 0
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x47ec50
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
add eax, 0xe0
call fcn.00405100
push 0
mov ecx, 0x47ec68
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xe4], eax
push 0
mov ecx, 0x47ec7c
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xe8], eax
push 0
mov ecx, 0x47ec90
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xec], eax
push 0
mov ecx, 0x47eca4
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xf0], eax
push 0
mov ecx, 0x47ecb8
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xf4], eax
push 0
mov ecx, 0x47eccc
mov edx, 0x47e5e4
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xf8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47e575
mov eax, dword [ebp - 0xc]
call fcn.00403aa8
ret