Function at 0x47c826
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x4c
mov edx, dword [esp + 0x50]
push ebx
imul ebx, dword [esp + 0x58], 0x50
push ebp
mov eax, dword [edx + 0x20]
mov ebp, dword [edx]
mov dword [esp + 0x10], eax
mov eax, dword [edx + 0xc]
add ebx, 0x38
add ebx, edx
mov dword [esp + 0x4c], ebp
add eax, 8
mov dword [esp + 0x40], ebx
push esi
xor esi, esi
movzx ecx, byte [ebx + 0x34]
shl ecx, 6
add eax, ecx
mov dword [esp + 0x20], esi
mov dword [esp + 0x40], eax
xor ecx, ecx
inc ecx
push edi
mov eax, dword [eax + 0x20]
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x10], eax
mov eax, dword [ebx]
shr eax, 0x19
and eax, ecx
mov dword [esp + 0x1c], edi
test dword [ebx], 0x800000
mov dword [esp + 0x14], eax
je 0x47c894
test byte [esp + 0x68], 0x20
mov dword [esp + 0x58], ecx
je 0x47c898
mov dword [esp + 0x58], esi
push edi
call fcn.004a92f5
push edi
mov dword [esp + 0x44], eax
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x24], eax
call fcn.004a92f5
cmp byte [ebx + 0x34], 0
pop ecx
pop ecx
mov dword [esp + 0x4c], eax
mov dword [ebx + 0x2c], eax
jbe 0x47c8de
mov ecx, dword [esp + 0x44]
test byte [ecx + 0x1c], 8
je 0x47c8de
mov eax, dword [ebp + 0x48]
inc eax
push eax
push esi
push 7
mov dword [ebp + 0x48], eax
push edi
mov dword [ebx + 0x18], eax
call fcn.004a2f7a
add esp, 0x10
test dword [ebx], 0x8000000
mov edx, dword [esp + 0x70]
je 0x47caef
mov ecx, dword [ebx + 0x10]
mov dword [esp + 0x38], ecx
mov eax, dword [ecx]
mov edx, dword [ecx + 0x10]
mov ecx, dword [ecx + 4]
inc dword [ebp + 0x54]
mov dword [esp + 0x34], eax
add eax, 2
push eax
push ebp
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x60], eax
call fcn.00496d15
pop ecx
pop ecx
xor ecx, ecx
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x34]
inc ecx
mov edx, ecx
mov dword [esp + 0x40], edx
cmp eax, ecx
jl 0x47c99c
mov ebx, dword [esp + 0x30]
mov ecx, esi
mov dword [esp + 0x44], ecx
test eax, eax
jle 0x47c987
mov edi, dword [esp + 0x2c]
cmp dword [edi + ecx*8], edx
mov edi, dword [esp + 0x64]
je 0x47c957
inc ecx
mov dword [esp + 0x44], ecx
cmp ecx, eax
jl 0x47c93f
jmp 0x47c987
lea eax, [edi + 1]
add eax, edx
push eax
imul eax, ecx, 0xc
imul ecx, dword [eax + ebx + 8], 0x28
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x20]
mov eax, dword [ecx + eax]
push dword [eax + 0xc]
push ebp
call fcn.004935e5
mov eax, dword [esp + 0x40]
add esp, 0xc
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
cmp ecx, eax
je 0x47c994
inc edx
mov dword [esp + 0x40], edx
cmp edx, eax
jle 0x47c935
mov ebx, dword [esp + 0x48]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
push dword [esp + 0x64]
push dword [eax + 0x14]
push 7
push edi
call fcn.004a2f7a
mov eax, dword [esp + 0x74]
inc eax
push eax
mov eax, dword [esp + 0x54]
dec eax
push eax
push 7
push edi
call fcn.004a2f7a
mov ecx, dword [esp + 0x58]
push 0xfffffffffffffffe
pop eax
push 0xfffffffffffffff5
cmp dword [ecx + 0x1c], esi
pop edx
cmovne eax, edx
push eax
push dword [ecx + 0x18]
mov eax, dword [esp + 0x38]
push dword [esp + 0x8c]
push dword [esp + 0x68]
push eax
push 0x88
push edi
call fcn.004a2fe6
mov eax, dword [esp + 0x74]
add esp, 0x3c
mov dword [eax + 0x1c], esi
mov eax, dword [esp + 0x34]
test eax, eax
jle 0x47ca4f
mov edi, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
add edi, 8
mov ebp, dword [esp + 0x18]
add ecx, 4
mov dword [esp + 0x48], ecx
cmp byte [ecx], 0
je 0x47ca36
imul eax, dword [edi], 0x28
add eax, dword [ebp + 0x20]
push eax
push ebx
call fcn.0047ec9b
mov eax, dword [esp + 0x3c]
pop ecx
pop ecx
mov ecx, dword [esp + 0x48]
add ecx, 8
add edi, 0xc
dec eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x34], eax
jne 0x47ca1a
mov ebp, dword [esp + 0x54]
mov edi, dword [esp + 0x1c]
push dword [esp + 0x58]
mov eax, dword [esp + 0x14]
push dword [esp + 0x68]
mov byte [ebx + 0x35], 0x8a
mov dword [ebx + 0x38], eax
mov eax, dword [edi + 0x1c]
push ebp
mov dword [ebx + 0x3c], eax
call fcn.0049dd0a
xor eax, eax
inc eax
push eax
push ebp
call fcn.004934cb
add esp, 0x14
mov eax, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x1c]
push dword [eax + 4]
call fcn.00482e83
pop ecx
not eax
not edx
pop ecx
mov ecx, dword [esp + 0x6c]
and ecx, eax
mov eax, dword [esp + 0x70]
and eax, edx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 0x20]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x58], edx
mov dword [esp + 0x64], eax
test eax, eax
jle 0x47d517
mov edi, ecx
test byte [edx + 0x12], 6
jne 0x47d4ff
mov ecx, dword [edx + 0x20]
mov eax, dword [edx + 0x24]
and ecx, edi
and eax, dword [esp + 0x44]
or ecx, eax
je 0x47d4d4
mov eax, dword [esp + 0x60]
xor ecx, ecx
inc ecx
mov byte [eax + 7], cl
jmp 0x47d4fb
test dword [ebx], 0x1000
je 0x47cb66
push ebp
call fcn.00496d46
push esi
push 3
push edx
push dword [esp + 0x7c]
mov edi, eax
push 0xffffffffffffffff
push dword [esp + 0x28]
mov dword [esp + 0x40], edi
push dword [esp + 0x34]
call fcn.00480d8f
push edi
push ebx
push eax
push ebp
call fcn.0047c610
mov esi, dword [ebx + 0x28]
mov edi, eax
push esi
push edi
push 0x15
push dword [esp + 0x58]
call fcn.004a2f7a
add esp, 0x40
push edi
push esi
mov esi, dword [esp + 0x18]
push esi
push 0x36
push dword [esp + 0x2c]
call fcn.004a2f95
push edi
push 0xffffffffffffffff
push esi
push ebp
call fcn.00493547
mov edi, dword [esp + 0x40]
add esp, 0x24
mov byte [ebx + 0x35], 0x95
xor esi, esi
jmp 0x47ca7b
test dword [ebx], 0x2000
je 0x47cd5d
push esi
push 0x24
push edx
push dword [esp + 0x78]
mov dword [esp + 0x50], 0x95
push 0xffffffffffffffff
push dword [esp + 0x24]
mov dword [esp + 0x60], esi
push dword [esp + 0x30]
call fcn.00480d8f
push esi
mov esi, dword [esp + 0x30]
push 0x18
push dword [esp + 0x94]
mov dword [esp + 0x8c], eax
push dword [esp + 0x94]
push 0xffffffffffffffff
push esi
push dword [esp + 0x4c]
call fcn.00480d8f
mov ecx, dword [esp + 0x4c]
add esp, 0x38
mov dword [esp + 0x34], eax
test ecx, ecx
je 0x47cbde
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x64], eax
jmp 0x47cbe2
mov eax, dword [esp + 0x64]
test eax, eax
je 0x47cc49
mov esi, dword [eax]
lea eax, [esp + 0x58]
push eax
mov dword [esp + 0x3c], 0x302e2f31
push dword [esi + 0xc]
push ebp
call fcn.0049445f
movzx ecx, byte [esi]
mov edi, eax
push edi
push dword [esp + 0x4c]
push dword [esp + 0x24]
movzx ecx, byte [esp + ecx + 3]
push ecx
push dword [esp + 0x38]
call fcn.004a2f95
xor eax, eax
inc eax
push eax
push edi
push ebp
call fcn.00493504
push dword [esp + 0x84]
push ebp
call fcn.0049dd33
push dword [esp + 0x98]
push ebx
call fcn.0047ec9b
mov edi, dword [esp + 0x58]
add esp, 0x3c
jmp 0x47cc63
push dword [esp + 0x3c]
test ecx, ecx
push esi
push 0x48
pop eax
push 0x43
pop edx
cmovne eax, edx
push eax
push edi
call fcn.004a2f7a
add esp, 0x10
mov edx, dword [esp + 0x34]
test edx, edx
je 0x47cccc
mov esi, dword [edx]
inc dword [ebp + 0x48]
mov eax, dword [ebp + 0x48]
push eax
push dword [esi + 0xc]
mov dword [esp + 0x50], eax
push ebp
call fcn.004935e5
mov al, byte [esi]
add esp, 0xc
cmp al, 0x4f
je 0x47cca6
cmp al, 0x4d
je 0x47cca6
cmp dword [esp + 0x14], 0
push 0x4d
pop esi
push 0x4f
pop eax
cmovne esi, eax
mov dword [esp + 0x40], esi
mov esi, dword [esp + 0x14]
jmp 0x47ccb9
mov esi, dword [esp + 0x14]
test esi, esi
push 0x50
pop eax
push 0x4e
pop ecx
cmovne eax, ecx
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x34]
push ecx
push ebx
call fcn.0047ec9b
mov edx, dword [esp + 0x3c]
pop ecx
pop ecx
jmp 0x47ccd0
mov esi, dword [esp + 0x14]
mov ecx, dword [edi + 0x1c]
test esi, esi
push 0x5f
pop eax
mov dword [esp + 0x58], 0x5c
cmovne eax, dword [esp + 0x58]
cmp dword [esp + 0x64], 0
mov byte [ebx + 0x35], al
mov eax, dword [esp + 0x10]
mov dword [ebx + 0x38], eax
mov dword [ebx + 0x3c], ecx
jne 0x47cd03
test edx, edx
jne 0x47cd03
xor ecx, ecx
inc ecx
mov byte [ebx + 0x36], cl
mov esi, dword [esp + 0x40]
cmp esi, 0x95
je 0x47d4cd
push ebp
call fcn.00496d46
push eax
push dword [esp + 0x18]
mov dword [esp + 0x30], eax
push 0x41
push edi
call fcn.004a2f7a
push dword [esp + 0x38]
push 0xffffffffffffffff
push dword [esp + 0x2c]
push ebp
call fcn.00493547
push dword [esp + 0x48]
push dword [esp + 0x64]
push dword [esp + 0x74]
push esi
push edi
call fcn.004a2f95
push 0x6b
push edi
call fcn.004a333d
add esp, 0x40
jmp 0x47cb5f
test dword [ebx], 0x30000
je 0x47d1a4
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebx + 4]
mov dword [esp + 0x3c], eax
mov eax, dword [edx + 8]
mov dword [esp + 0x64], ecx
mov dword [esp + 0x50], esi
mov dword [esp + 0x34], esi
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x48], eax
xor eax, eax
inc eax
mov dword [esp + 0x20], esi
mov dword [esp + 0x44], edx
test byte [esp + 0x68], al
je 0x47cdb0
test dword [ebx], 0x1000000
je 0x47cdb0
cmp dword [edx + 4], ecx
jle 0x47cdb0
mov dword [esp + 0x50], eax
jmp 0x47cdb2
mov eax, esi
test dword [ebx], 0x100000
je 0x47cde4
push edx
push 0x18
push dword [esp + 0x78]
push dword [esp + 0x78]
push dword [esp + 0x58]
push dword [esp + 0x24]
push dword [esp + 0x30]
call fcn.00480d8f
mov edx, dword [esp + 0x60]
add esp, 0x1c
mov dword [esp + 0x20], eax
xor eax, eax
inc eax
test dword [ebx], 0x200000
je 0x47ce12
push edx
push 0x24
push dword [esp + 0x78]
push dword [esp + 0x78]
push dword [esp + 0x58]
push dword [esp + 0x24]
push dword [esp + 0x30]
call fcn.00480d8f
mov dword [esp + 0x50], eax
add esp, 0x1c
xor eax, eax
inc eax
lea ecx, [esp + 0x28]
push ecx
push eax
push dword [esp + 0x78]
push dword [esp + 0x78]
push dword [esp + 0x28]
push ebx
push ebp
call fcn.0047c24f
push dword [esp + 0x44]
mov dword [esp + 0x4c], eax
push dword [ebp]
call fcn.00491f99
mov ecx, dword [esp + 0x68]
add esp, 0x24
mov dword [esp + 0x30], eax
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x64]
cmp eax, dword [ecx + 4]
jge 0x47ce79
mov ecx, dword [ecx + 0x28]
xor edx, edx
cmp byte [eax + ecx], dl
sete dl
cmp dword [esp + 0x14], edx
jne 0x47ce79
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x34], edx
jmp 0x47ce81
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x34]
test edx, edx
je 0x47ce8f
test byte [edx + 0x10], 0x28
mov dword [esp + 0x48], esi
je 0x47ce97
mov dword [esp + 0x48], 1
test ecx, ecx
je 0x47ceaa
test byte [ecx + 0x10], 0x28
jne 0x47ceaa
xor ecx, ecx
mov dword [esp + 0x54], esi
inc ecx
jmp 0x47ceb1
xor ecx, ecx
inc ecx
mov dword [esp + 0x54], ecx
test edx, edx
jne 0x47cef5
test eax, eax
jg 0x47cef5
mov dword [esp + 0x44], esi
mov dword [esp + 0x38], eax
cmp dword [esp + 0x50], esi
je 0x47cf79
add eax, dword [esp + 0x2c]
push eax
push esi
push 0xa
push edi
call fcn.004a2f7a
mov eax, dword [esp + 0x74]
xor ecx, ecx
inc eax
mov dword [esp + 0x58], esi
add esp, 0x10
mov dword [esp + 0x38], eax
inc ecx
mov dword [esp + 0x44], ecx
jmp 0x47cf7d
mov dword [esp + 0x44], ecx
mov dword [esp + 0x38], eax
test edx, edx
je 0x47cec1
mov eax, dword [edx]
mov esi, dword [esp + 0x2c]
add esi, dword [esp + 0x64]
push esi
mov eax, dword [eax + 0xc]
push eax
push ebp
mov dword [esp + 0x44], eax
call fcn.004935e5
push dword [esp + 0x4c]
push esi
push dword [esp + 0x4c]
push edi
call fcn.0049393b
mov eax, dword [esp + 0x44]
add esp, 0x1c
mov esi, dword [esp + 0x64]
test eax, eax
je 0x47cf70
movzx eax, byte [eax + esi]
push eax
push dword [esp + 0x3c]
call fcn.00490df2
pop ecx
cmp al, 0x62
mov eax, dword [esp + 0x2c]
pop ecx
jne 0x47cf54
mov byte [eax + esi], 0x62
movzx eax, byte [eax + esi]
push eax
push dword [esp + 0x3c]
call fcn.00494ec7
pop ecx
pop ecx
test eax, eax
je 0x47cf70
mov eax, dword [esp + 0x28]
mov byte [eax + esi], 0x62
lea eax, [esi + 1]
mov dword [esp + 0x38], eax
jmp 0x47cf81
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0x64]
push dword [esp + 0x28]
push eax
push dword [esp + 0x34]
push ebp
call fcn.0047c3b1
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x5c]
push dword [esp + 0x40]
push dword [esp + 0x58]
lea eax, [ecx + eax*2]
mov ecx, dword [esp + 0x30]
push dword [esp + 0x58]
movzx eax, byte [ecx + eax*2 + 0x4db99c]
push eax
push edi
call fcn.004a3017
mov eax, dword [esp + 0x48]
add esp, 0x28
mov dword [esp + 0x50], esi
test eax, eax
je 0x47d061
mov eax, dword [eax]
add esi, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x38], eax
xor eax, eax
inc eax
push eax
push esi
push ebp
call fcn.00493504
push esi
push dword [esp + 0x48]
push ebp
call fcn.004935e5
push dword [esp + 0x58]
push esi
push dword [esp + 0x58]
push edi
call fcn.0049393b
mov eax, dword [esp + 0x58]
add esp, 0x28
mov esi, dword [esp + 0x64]
test eax, eax
je 0x47d04b
movzx eax, byte [eax + esi]
push eax
push dword [esp + 0x3c]
call fcn.00490df2
pop ecx
cmp al, 0x62
mov eax, dword [esp + 0x34]
pop ecx
jne 0x47d02f
mov byte [eax + esi], 0x62
movzx eax, byte [eax + esi]
push eax
push dword [esp + 0x3c]
call fcn.00494ec7
pop ecx
test eax, eax
mov eax, dword [esp + 0x34]
pop ecx
je 0x47d04b
mov byte [eax + esi], 0x62
push eax
lea ecx, [esi + 1]
push ecx
push dword [esp + 0x34]
mov dword [esp + 0x5c], ecx
push ebp
call fcn.0047c3b1
add esp, 0x10
push dword [esp + 0x28]
push dword [ebp]
call fcn.00491da8
push dword [esp + 0x38]
push dword [ebp]
call fcn.00491da8
mov eax, dword [edi + 0x1c]
add esp, 0x10
cmp dword [esp + 0x20], 0
mov dword [ebx + 0x3c], eax
jne 0x47d091
test esi, esi
jne 0x47d091
mov ecx, esi
jmp 0x47d098
xor eax, eax
xor esi, esi
lea ecx, [eax + 1]
mov eax, dword [esp + 0x14]
inc eax
imul eax, ecx
movzx eax, byte [eax + 0x4db9a4]
cmp eax, 0x95
je 0x47d0de
push dword [esp + 0x50]
mov edx, dword [esp + 0x30]
push edx
push dword [esp + 0x48]
push dword [esp + 0x48]
push eax
push edi
call fcn.004a3017
mov eax, dword [esp + 0x6c]
cmp eax, dword [esp + 0x2c]
setne al
movzx eax, al
push eax
push edi
call fcn.004a333d
add esp, 0x20
push ebp
call fcn.00496d46
test dword [ebx], 0x300000
pop ecx
mov dword [esp + 0x54], eax
je 0x47d11a
mov ecx, dword [esp + 0x64]
push eax
push ecx
push dword [esp + 0x44]
push 0x1d
push edi
call fcn.004a2f95
push dword [esp + 0x60]
push dword [esp + 0x6c]
push 0x49
push edi
call fcn.004a2f7a
mov eax, dword [esp + 0x78]
add esp, 0x24
push eax
push ebp
call fcn.0049dd33
push dword [esp + 0x3c]
push ebx
call fcn.0047ec9b
push dword [esp + 0x30]
push ebx
call fcn.0047ec9b
add esp, 0x18
cmp dword [esp + 0x58], 0
jne 0x47d179
push ebp
call fcn.00496d46
push eax
push dword [esp + 0x44]
mov dword [esp + 0x30], eax
push 0x63
push edi
call fcn.004a2f7a
push dword [esp + 0x38]
push 0xffffffffffffffff
push dword [esp + 0x2c]
push ebp
call fcn.00493547
push dword [esp + 0x48]
push dword [esp + 0x38]
push 0x32
push edi
call fcn.004a2f7a
add esp, 0x34
test dword [ebx], 0x4000000
je 0x47d187
mov byte [ebx + 0x35], 0x95
jmp 0x47d198
cmp dword [esp + 0x14], 0
push 0x5f
pop eax
push 0x5c
pop ecx
cmovne eax, ecx
mov byte [ebx + 0x35], al
mov eax, dword [esp + 0x3c]
mov dword [ebx + 0x38], eax
jmp 0x47ca7b
test dword [ebx], 0x10000000
je 0x47d494
inc dword [ebp + 0x48]
mov eax, dword [ebp + 0x48]
push edi
mov dword [esp + 0x3c], eax
mov dword [esp + 0x54], esi
mov dword [esp + 0x5c], esi
call fcn.004a92f5
mov dword [esp + 0x2c], eax
mov eax, dword [ebx + 0x10]
pop ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x14], eax
mov eax, dword [eax + 0xc]
mov dword [ebx + 0x38], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x40], eax
mov byte [ebx + 0x35], 3
mov dword [esp + 0x2c], esi
mov eax, dword [ecx + 0x1c]
mov dword [esp + 0x30], esi
cmp eax, 1
jle 0x47d2fe
sub eax, dword [esp + 0x64]
dec eax
mov dword [esp + 0x34], eax
shl eax, 6
add eax, 0x48
push eax
push dword [ebp]
call fcn.00491dff
pop ecx
pop ecx
mov ecx, eax
mov dword [esp + 0x3c], ecx
test ecx, ecx
jne 0x47d22f
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
jmp 0x47d591
mov edx, dword [esp + 0x34]
lea edi, [ecx + 8]
mov esi, dword [esp + 0x44]
push 0x10
lea eax, [edx + 1]
mov word [ecx + 2], ax
mov word [ecx], ax
mov eax, dword [esp + 0x64]
pop ecx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 0xc]
add eax, 8
mov dword [esp + 0x20], eax
xor eax, eax
inc eax
cmp edx, eax
jl 0x47d291
mov eax, dword [esp + 0x3c]
lea ecx, [ebx + 0x84]
mov ebp, dword [esp + 0x20]
add eax, 0x48
mov ebx, ecx
movzx esi, byte [ebx]
mov edi, eax
shl esi, 6
lea ebx, [ebx + 0x50]
push 0x10
add esi, ebp
add eax, 0x40
pop ecx
rep movsd dword es:[edi], dword [esi]
dec edx
jne 0x47d271
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x54]
mov edi, dword [esp + 0x1c]
xor esi, esi
and dword [esp + 0x68], 8
jne 0x47d2bd
mov eax, dword [ebp + 0x48]
inc eax
push eax
push esi
push 0xa
lea ecx, [eax + 1]
mov dword [esp + 0x5c], eax
push edi
mov dword [esp + 0x68], ecx
mov dword [ebp + 0x48], ecx
call fcn.004a2f7a
add esp, 0x10
push dword [esp + 0x38]
push esi
push 7
push edi
call fcn.004a2f7a
mov dword [esp + 0x30], eax
xor ecx, ecx
mov eax, dword [esp + 0x28]
inc ecx
add esp, 0x10
cmp dword [eax + 0x18], ecx
jle 0x47d307
push esi
push esi
push 0x45
push dword [ebp]
call fcn.004930df
mov ecx, dword [esp + 0x84]
mov edx, eax
add esp, 0x10
mov dword [esp + 0x30], edx
mov dword [edx + 0xc], ecx
jmp 0x47d309
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x3c], eax
jmp 0x47d297
mov edx, esi
mov eax, dword [esp + 0x40]
mov ecx, esi
mov dword [esp + 0x34], esi
cmp dword [eax + 0x18], esi
jle 0x47d426
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0x40]
imul ecx, ecx, 0x28
add ecx, dword [edi + 0x20]
mov edi, dword [esp + 0x1c]
cmp dword [ecx + 8], eax
je 0x47d346
mov ebx, 0x200
cmp word [ecx + 0x10], bx
mov ebx, dword [esp + 0x48]
jne 0x47d40c
mov eax, dword [ecx]
test edx, edx
je 0x47d351
mov dword [edx + 8], eax
mov eax, edx
push 0xf0
push esi
push esi
push eax
push dword [esp + 0x4c]
push ebp
call fcn.004ac396
add esp, 0x18
mov dword [esp + 0x54], eax
test eax, eax
je 0x47d408
movzx ecx, byte [ebx + 0x34]
push esi
push ecx
push dword [esp + 0x6c]
lea ecx, [eax + 0x38]
push ecx
push dword [esp + 0x4c]
push ebp
call fcn.0047f532
add esp, 0x18
cmp word [esp + 0x68], 0
jne 0x47d3d9
mov eax, dword [esp + 0x40]
mov esi, dword [esp + 0x34]
push 0xffffffffffffffff
mov eax, dword [eax + 0x18]
dec eax
cmp esi, eax
pop eax
push dword [esp + 0x58]
cmove esi, eax
push dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x50]
push dword [eax + 0xc]
push ebp
call fcn.00493699
push esi
push eax
mov eax, dword [edi + 0x1c]
add eax, 2
push eax
push dword [esp + 0x70]
push 0x72
push edi
call fcn.004a3017
add esp, 0x2c
xor esi, esi
push dword [esp + 0x28]
push dword [esp + 0x3c]
push 2
push edi
call fcn.004a2f7a
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x3c]
push 1
pop edx
cmp byte [eax + 7], 0
push eax
cmovne ecx, edx
mov dword [esp + 0x40], ecx
call fcn.004accd5
add esp, 0x14
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x34]
inc ecx
mov dword [esp + 0x34], ecx
cmp ecx, dword [edx + 0x18]
mov edx, dword [esp + 0x30]
jl 0x47d320
mov eax, dword [esp + 0x30]
push eax
push dword [ebp]
call fcn.00491da8
push dword [edi + 0x1c]
push dword [esp + 0x2c]
push edi
call fcn.004a31a2
push dword [ebx + 0x24]
xor eax, eax
push esi
inc eax
push eax
push edi
call fcn.004a2f7a
push dword [esp + 0x4c]
push edi
call fcn.004aa6f5
mov eax, dword [esp + 0x8c]
xor ecx, ecx
inc ecx
add esp, 0x2c
cmp dword [eax + 0x1c], ecx
jle 0x47d478
push dword [esp + 0x3c]
push dword [ebp]
call fcn.00491da8
pop ecx
pop ecx
cmp dword [esp + 0x2c], 0
jne 0x47ca7b
push dword [esp + 0x14]
push ebx
call fcn.0047ec9b
pop ecx
pop ecx
jmp 0x47ca7b
mov ecx, dword [esp + 0x14]
push dword [esp + 0x3c]
mov al, byte [ecx + 0x4dbc88]
mov byte [ebx + 0x35], al
mov eax, dword [esp + 0x14]
push eax
mov dword [ebx + 0x38], eax
movzx eax, byte [ecx + 0x4dbc8c]
push eax
push edi
call fcn.004a2f7a
add esp, 0x10
inc eax
mov dword [ebx + 0x3c], eax
xor eax, eax
inc eax
mov byte [ebx + 0x36], al
jmp 0x47ca7b
xor esi, esi
jmp 0x47ca7f
mov eax, dword [edx]
cmp dword [ebx + 0x18], esi
je 0x47d4e3
xor ecx, ecx
inc ecx
test byte [eax + 2], cl
je 0x47d4fb
push 8
push dword [esp + 0x50]
push eax
push ebp
call fcn.0049475f
mov edx, dword [esp + 0x68]
add esp, 0x10
or byte [edx + 0x12], 4
mov eax, dword [esp + 0x64]
dec eax
add edx, 0x28
mov dword [esp + 0x64], eax
mov dword [esp + 0x58], edx
test eax, eax
jg 0x47cac2
mov edi, dword [esp + 0x1c]
cmp dword [ebx + 0x18], 0
je 0x47d57d
mov eax, dword [edi + 0x1c]
push dword [ebx + 0x18]
mov dword [ebx + 0x30], eax
xor eax, eax
inc eax
push eax
push 7
push edi
call fcn.004a2f7a
push ebp
call fcn.004934a1
mov ebx, dword [esp + 0x2c]
add esp, 0x14
mov edi, dword [ebx + 0x20]
cmp dword [ebx + 0x18], esi
jle 0x47d57d
test byte [edi + 0x12], 6
jne 0x47d574
mov ecx, dword [edi + 0x20]
mov eax, dword [edi + 0x24]
and ecx, dword [esp + 0x48]
and eax, dword [esp + 0x44]
or ecx, eax
jne 0x47d574
push 8
push dword [esp + 0x50]
push dword [edi]
push ebp
call fcn.0049475f
add esp, 0x10
or byte [edi + 0x12], 4
inc esi
add edi, 0x28
cmp esi, dword [ebx + 0x18]
jl 0x47d547
push dword [esp + 0x24]
push ebp
call fcn.0049dd33
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
pop ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret