Function at 0x47dbc0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x513f05
mov eax, dword fs:[0]
push eax
sub esp, 0x88
push ebx
push esi
push edi
mov eax, dword [0x57b728]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea ecx, [ebp - 0x30]
call fcn.00417d90
mov ebx, dword [ebp + 8]
mov eax, dword [edi]
push ebx
mov ecx, edi
mov dword [ebp - 4], 0
call dword [eax + 0x10c]
mov esi, eax
test esi, esi
jne 0x47ddab
mov eax, dword [edi]
push ebx
lea ecx, [ebp - 0x6c]
push ecx
mov ecx, edi
call dword [eax + 0x110]
push str..wtr
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 1
call fcn.004190d0
test al, al
je 0x47dca3
cmp dword [0x57604c], 0x5342e4
lea ecx, [ebp - 0x30]
jne 0x47dc4e
call fcn.00419670
jmp 0x47dc5c
push 0
push 0xffffffffffffffff
push 0x5342e4
call fcn.00418a80
push 0xffffffffffffffff
push dword [ebp - 0x64]
mov ecx, eax
call fcn.00418b20
mov ecx, dword [0x57d0f8]
push dword [ebp - 0x2c]
mov eax, dword [ecx]
call dword [eax + 0x184]
test eax, eax
je 0x47dd98
mov ecx, dword [0x57d0f8]
push eax
mov edx, dword [ecx]
call dword [edx + 0x140]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0
call fcn.00417dd0
mov bl, 1
jmp 0x47e449
push 0x5239fc
lea ecx, [ebp - 0x6c]
call fcn.004190d0
test al, al
jne 0x47dd06
push 0x5239f4
lea ecx, [ebp - 0x6c]
call fcn.004190d0
test al, al
jne 0x47dd06
mov ecx, dword [edi + 0xd8]
call fcn.0045a740
add eax, 0x2c
push eax
lea ecx, [ebp - 0x6c]
call fcn.00419130
test al, al
je 0x47dd98
lea eax, [ebp - 0x30]
push str.WorldDungeon_
push eax
call fcn.004013c0
add esp, 8
mov ecx, eax
push 0xffffffffffffffff
push dword [ebp - 0x64]
call fcn.00418b20
jmp 0x47dd8c
cmp dword [0x57604c], str.TerrainDetail_
lea ecx, [ebp - 0x30]
jne 0x47dd1c
call fcn.00419670
jmp 0x47dd2a
push 0
push 0xffffffffffffffff
push str.TerrainDetail_
call fcn.00418a80
push 0xffffffffffffffff
push dword [ebp - 0x64]
mov ecx, eax
call fcn.00418b20
mov ecx, dword [0x57d0f8]
push dword [ebp - 0x2c]
mov eax, dword [ecx]
call dword [eax + 0x184]
test eax, eax
jne 0x47dc81
push 0x5239f4
lea ecx, [ebp - 0x6c]
call fcn.004190d0
test al, al
je 0x47dd98
lea ecx, [ebp - 0x30]
call fcn.00419a20
cmp dword [0x57604c], 0x5239fc
lea ecx, [ebp - 0x30]
jne 0x47dd7e
call fcn.00419670
jmp 0x47dd8c
push 0
push 0xffffffffffffffff
push 0x5239fc
call fcn.00418a80
lea eax, [ebp - 0x30]
push eax
call fcn.0047eab0
add esp, 4
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0
call fcn.00417dd0
mov bl, 1
jmp 0x47e449
push 0
push 0x578144
push 0x575010
push 0
push esi
call fcn.004f070c
add esp, 0x14
mov dword [ebp + 8], eax
test eax, eax
je 0x47de1b
push 0x4f8
call fcn.004efd54
add esp, 4
mov dword [ebp + 0xc], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x47ddef
push dword [ebp + 8]
mov ecx, eax
call fcn.00477790
mov esi, eax
jmp 0x47ddf1
xor esi, esi
mov byte [ebp - 4], 0
test esi, esi
je 0x47df52
mov ecx, esi
call fcn.004791b0
test al, al
jne 0x47df52
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
mov bl, 1
jmp 0x47e449
push 0
push 0x576e30
push 0x575010
push 0
push esi
call fcn.004f070c
add esp, 0x14
test eax, eax
je 0x47e14a
lea esi, [eax + 0x14]
push 0x52e85c
mov ecx, esi
call fcn.004190d0
test al, al
je 0x47def2
mov eax, dword [edi]
push ebx
lea ecx, [ebp - 0x94]
push ecx
mov ecx, edi
call dword [eax + 0x110]
mov dword [ebp + 0xc], eax
mov esi, dword [edi]
push ebx
push 3
push 0x110a
push dword [edi + 0x38]
mov byte [ebp - 4], 3
call dword [sym.imp.USER32.dll_SendMessageA]
push eax
lea eax, [ebp - 0x6c]
push eax
mov ecx, edi
call dword [esi + 0x110]
mov esi, eax
cmp dword [0x57604c], 0x529b9c
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x30]
jne 0x47dea6
call fcn.00419670
jmp 0x47deb4
push 0
push 0xffffffffffffffff
push str.Entity_
call fcn.00418a80
push 0xffffffffffffffff
push dword [esi + 8]
mov ecx, eax
call fcn.00418b20
push 0
mov esi, eax
push 1
lea eax, [ebp + 8]
push eax
mov ecx, esi
mov byte [ebp + 8], 0x5c
call fcn.00418a80
mov eax, dword [ebp + 0xc]
push 0xffffffffffffffff
push dword [eax + 8]
mov ecx, esi
call fcn.00418b20
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 3
call fcn.00417dd0
jmp 0x47df37
push 0x52e858
mov ecx, esi
call fcn.004190d0
test al, al
je 0x47df59
mov eax, dword [edi]
push ebx
lea ecx, [ebp - 0x94]
push ecx
mov ecx, edi
call dword [eax + 0x110]
mov esi, eax
lea eax, [ebp - 0x30]
push str.Worlddungeon_
push eax
mov byte [ebp - 4], 5
call fcn.004013c0
add esp, 8
mov ecx, eax
push 0xffffffffffffffff
push dword [esi + 8]
call fcn.00418b20
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0
call fcn.00417dd0
lea eax, [ebp - 0x30]
push eax
call fcn.0047eab0
add esp, 4
mov bl, 1
jmp 0x47e449
push str..eft
mov ecx, esi
call fcn.004190d0
test al, al
je 0x47df99
lea eax, [ebp - 0x30]
push str.Effect_
push eax
call fcn.004013c0
add esp, 8
mov ecx, eax
push 0xffffffffffffffff
push dword [esi + 8]
call fcn.00418b20
lea eax, [ebp - 0x30]
push eax
call fcn.0047eab0
add esp, 4
mov bl, 1
jmp 0x47e449
push str..wav
mov ecx, esi
call fcn.004190d0
test al, al
je 0x47df52
mov ecx, dword [0x57d0f8]
lea edx, [ebp - 0x94]
mov eax, dword [ecx]
push edx
call dword [eax + 0x158]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 6
call fcn.00417e10
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0
call fcn.00417dd0
cmp dword [ebp - 0x24], 0
je 0x47e143
lea eax, [ebp - 0x30]
push str.Sound_
push eax
call fcn.004013c0
push dword [esi + 4]
push dword [ebp - 0x2c]
call fcn.004167d0
add esp, 0x10
test al, al
je 0x47e00c
lea ecx, [ebp - 0x30]
jmp 0x47e0a2
push str.back_
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.00414830
push dword [esi + 4]
mov byte [ebp - 4], 7
push dword [eax + 4]
call fcn.004167d0
add esp, 0x14
lea ecx, [ebp - 0x94]
mov bl, al
mov byte [ebp - 4], 0
call fcn.00417dd0
lea eax, [ebp - 0x30]
test bl, bl
je 0x47e052
push str.back_
jmp 0x47e097
push str.Music_
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.00414830
push dword [esi + 4]
mov byte [ebp - 4], 8
push dword [eax + 4]
call fcn.004167d0
add esp, 0x14
lea ecx, [ebp - 0x94]
mov bl, al
mov byte [ebp - 4], 0
call fcn.00417dd0
test bl, bl
je 0x47e143
push str.Music_
lea eax, [ebp - 0x30]
push eax
call fcn.004013c0
mov ecx, eax
add esp, 8
push 0xffffffffffffffff
push dword [esi + 8]
call fcn.00418b20
lea ecx, [ebp - 0x6c]
call fcn.00417d90
lea eax, [ebp - 0x6c]
push str._play__close
push eax
mov byte [ebp - 4], 9
call fcn.004013c0
add esp, 8
lea eax, [ebp + 8]
push 0
push 1
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp + 8], 0x22
call fcn.00418a80
push 0xffffffffffffffff
push dword [ebp - 0x28]
lea ecx, [ebp - 0x6c]
mov byte [ebp + 0xc], 0x22
call fcn.00418b20
push 0
push 1
lea ecx, [ebp + 0xc]
push ecx
mov ecx, eax
call fcn.00418a80
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push 0
push dword [ebp - 0x68]
push str.sndrec32.exe
push str.open
push dword [edi + 0x14]
call esi
cmp eax, 0x20
jge 0x47e130
push 1
push 0
push 0
push dword [ebp - 0x2c]
push str.open
push 0
call esi
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0
call fcn.00417dd0
mov bl, 1
jmp 0x47e449
xor bl, bl
jmp 0x47e449
push 0
push 0x577bd8
push 0x575010
push 0
push esi
call fcn.004f070c
push 0
push 0x577f9c
push 0x575010
push 0
push esi
mov dword [ebp + 8], eax
call fcn.004f070c
push 0
push 0x577c6c
push 0x575010
push 0
push esi
mov dword [ebp - 0x70], eax
call fcn.004f070c
push 0
push 0x578004
push 0x575010
push 0
push esi
mov dword [ebp - 0x44], eax
call fcn.004f070c
add esp, 0x50
mov dword [ebp - 0x48], eax
push 0
push 0x578068
push 0x575010
push 0
push esi
call fcn.004f070c
push 0
push 0x577f14
push 0x575010
push 0
push esi
mov dword [ebp - 0x40], eax
call fcn.004f070c
push 0
push 0x577c44
push 0x575010
push 0
push esi
mov dword [ebp - 0x34], eax
call fcn.004f070c
push 0
push 0x577c1c
push 0x575010
push 0
push esi
mov dword [ebp - 0x38], eax
call fcn.004f070c
mov esi, dword [ebp + 8]
add esp, 0x50
mov dword [ebp - 0x3c], eax
test esi, esi
je 0x47e277
cmp dword [esi + 0x10], 1
jne 0x47e246
push 0x13c
call fcn.004efd54
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0xa
test eax, eax
je 0x47e3e9
push esi
push dword [edi + 0xd4]
mov ecx, eax
call fcn.00477650
mov esi, eax
jmp 0x47e3eb
push 0x148
call fcn.004efd54
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0xb
test eax, eax
je 0x47e3e9
push esi
push dword [edi + 0xd4]
mov ecx, eax
call fcn.004775e0
mov esi, eax
jmp 0x47e3eb
mov esi, dword [ebp - 0x70]
test esi, esi
je 0x47e2af
push 0x160
call fcn.004efd54
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0xc
test eax, eax
je 0x47e3e9
push esi
push dword [edi + 0xd4]
mov ecx, eax
call fcn.00478400
mov esi, eax
jmp 0x47e3eb
mov esi, dword [ebp - 0x44]
test esi, esi
je 0x47e2e7
push 0x1a0
call fcn.004efd54
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0xd
test eax, eax
je 0x47e3e9
push esi
push dword [edi + 0xd4]
mov ecx, eax
call fcn.004781f0
mov esi, eax
jmp 0x47e3eb
mov esi, dword [ebp - 0x48]
test esi, esi
je 0x47e31f
push 0x148
call fcn.004efd54
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0xe
test eax, eax
je 0x47e3e9
push esi
push dword [edi + 0xd4]
mov ecx, eax
call fcn.00477da0
mov esi, eax
jmp 0x47e3eb
mov esi, dword [ebp - 0x40]
test esi, esi
je 0x47e357
push 0x13c
call fcn.004efd54
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0xf
test eax, eax
je 0x47e3e9
push esi
push dword [edi + 0xd4]
mov ecx, eax
call fcn.00477960
mov esi, eax
jmp 0x47e3eb
mov esi, dword [ebp - 0x34]
test esi, esi
je 0x47e388
push 0x248
call fcn.004efd54
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x10
test eax, eax
je 0x47e3e9
push esi
push dword [edi + 0xd4]
mov ecx, eax
call fcn.00478280
mov esi, eax
jmp 0x47e3eb
mov esi, dword [ebp - 0x38]
test esi, esi
je 0x47e3b9
push 0x130
call fcn.004efd54
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x11
test eax, eax
je 0x47e3e9
push esi
push dword [edi + 0xd4]
mov ecx, eax
call fcn.004787a0
mov esi, eax
jmp 0x47e3eb
test eax, eax
je 0x47e43c
push 0x100
call fcn.004efd54
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x12
test eax, eax
je 0x47e3e9
push dword [ebp - 0x3c]
mov ecx, eax
push dword [edi + 0xd4]
call fcn.00477fb0
mov esi, eax
jmp 0x47e3eb
xor esi, esi
mov byte [ebp - 4], 0
test esi, esi
je 0x47e43c
mov eax, dword [esi]
push dword [edi + 0x14]
mov eax, dword [eax + 0x138]
mov ecx, esi
call eax
test al, al
je 0x47e430
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x120]
cmp eax, 1
jne 0x47e430
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x114]
push ebx
mov ecx, edi
call fcn.00464420
push dword [edi + 0x38]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
mov bl, 1
jmp 0x47e449
push dword [ebp + 0xc]
mov ecx, edi
push ebx
call fcn.004ea080
mov bl, al
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00417dd0
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8