Function at 0x4804d4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x2e
push 0
push 0
dec ecx
jne 0x4804dc
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4812b6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.0048145c
mov dl, 1
mov eax, dword [0x417a80]
call fcn.00403790
mov dword [ebp - 0x1c], eax
mov dl, 1
mov eax, dword [0x417a80]
call fcn.00403790
mov dword [ebp - 0x20], eax
mov dl, 1
mov eax, dword [0x417a80]
call fcn.00403790
mov dword [ebp - 0x24], eax
mov dl, 1
mov eax, dword [0x417a80]
call fcn.00403790
mov dword [ebp - 0x28], eax
mov eax, 0xff
call fcn.00409b04
mov dword [ebp - 0x34], eax
xor eax, eax
push ebp
push 0x481289
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0xc2a480]
cmp byte [eax], 0
je 0x480573
lea eax, [ebp - 0x30]
mov edx, 0x4812cc
call fcn.004046ac
jmp 0x480580
lea eax, [ebp - 0x30]
mov edx, 0x4812f4
call fcn.004046ac
call fcn.00474790
mov esi, eax
mov eax, dword [0xc2a480]
cmp byte [eax], 0
je 0x480d70
mov edx, 0x80000002
mov eax, esi
call fcn.00433cac
mov edx, 0x4812cc
xor ecx, ecx
mov eax, esi
call fcn.00433d10
test al, al
je 0x48124c
mov edx, dword [ebp - 0x1c]
mov eax, esi
call fcn.00433e9c
mov eax, esi
call fcn.00433c7c
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x48124c
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xc], 0
push dword [ebp - 0x30]
push 0x481304
lea ecx, [ebp - 0x68]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x68]
lea eax, [ebp - 0x64]
mov edx, 3
call fcn.00404994
mov edx, dword [ebp - 0x64]
xor ecx, ecx
mov eax, esi
call fcn.00433d10
test al, al
je 0x480d5f
mov edx, dword [ebp - 0x20]
mov eax, esi
call fcn.00433e9c
mov eax, esi
call fcn.00433c7c
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x480d5f
inc eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0
push dword [ebp - 0x30]
push 0x481304
lea ecx, [ebp - 0x70]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x70]
push 0x481304
lea ecx, [ebp - 0x74]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x74]
lea eax, [ebp - 0x6c]
mov edx, 5
call fcn.00404994
mov edx, dword [ebp - 0x6c]
xor ecx, ecx
mov eax, esi
call fcn.00433d10
test al, al
je 0x480d53
mov edx, dword [ebp - 0x24]
mov eax, esi
call fcn.00433e9c
mov eax, esi
call fcn.00433c7c
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x480d53
inc eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], 0
push dword [ebp - 0x30]
push 0x481304
lea ecx, [ebp - 0x7c]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x7c]
push 0x481304
lea ecx, [ebp - 0x80]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x80]
push 0x481304
lea ecx, [ebp - 0x84]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x84]
lea eax, [ebp - 0x78]
mov edx, 7
call fcn.00404994
mov edx, dword [ebp - 0x78]
xor ecx, ecx
mov eax, esi
call fcn.00433d10
test al, al
je 0x480d47
mov edx, 0x481310
mov eax, esi
call fcn.004342f0
test al, al
je 0x480d47
mov edx, dword [0x47e5d0]
mov eax, 0x90
call fcn.00405518
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov ebx, eax
lea ecx, [ebp - 0x8c]
mov edx, 0x481320
mov eax, esi
call fcn.004340c8
mov eax, dword [ebp - 0x8c]
lea edx, [ebp - 0x88]
call fcn.0040889c
mov edx, dword [ebp - 0x88]
lea eax, [ebx + 0x18]
call fcn.00404668
lea ecx, [ebp - 0x90]
mov edx, 0x481334
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0x90]
lea eax, [ebx + 0x10]
call fcn.00404668
mov edx, dword [ebx + 0x10]
mov eax, 0x48134c
call fcn.00404c18
test eax, eax
jle 0x4807e3
lea eax, [ebx + 0x10]
push eax
mov edx, dword [ebx + 0x10]
mov eax, 0x48134c
call fcn.00404c18
mov edx, eax
inc edx
mov eax, dword [ebx + 0x10]
mov ecx, 0x400
call fcn.00404b34
lea ecx, [ebp - 0x94]
mov edx, 0x481358
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0x94]
lea eax, [ebx + 0x14]
call fcn.00404668
mov edx, dword [ebx + 0x14]
mov eax, 0x48134c
call fcn.00404c18
test eax, eax
jle 0x480835
lea eax, [ebx + 0x14]
push eax
mov edx, dword [ebx + 0x14]
mov eax, 0x48134c
call fcn.00404c18
mov edx, eax
inc edx
mov eax, dword [ebx + 0x14]
mov ecx, 0x400
call fcn.00404b34
lea edx, [ebp - 0x98]
mov eax, dword [ebx + 0x10]
call fcn.00408b14
cmp dword [ebp - 0x98], 0
jne 0x480858
mov eax, ebx
mov edx, dword [ebx + 0x14]
call fcn.00404668
jmp 0x480862
mov eax, ebx
mov edx, dword [ebx + 0x10]
call fcn.00404668
lea ecx, [ebp - 0x9c]
mov edx, 0x48136c
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0x9c]
lea eax, [ebx + 0x1c]
call fcn.00404668
mov edx, dword [ebx + 0x1c]
mov eax, 0x48134c
call fcn.00404c18
test eax, eax
jle 0x4808b4
lea eax, [ebx + 0x1c]
push eax
mov edx, dword [ebx + 0x1c]
mov eax, 0x48134c
call fcn.00404c18
mov edx, eax
inc edx
mov eax, dword [ebx + 0x1c]
mov ecx, 0x400
call fcn.00404b34
lea ecx, [ebp - 0xa0]
mov edx, 0x481378
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0xa0]
lea eax, [ebx + 0x54]
call fcn.00404668
lea ecx, [ebp - 0xa4]
mov edx, 0x481388
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0xa4]
lea eax, [ebx + 0x20]
call fcn.00404668
lea eax, [ebx + 0x28]
push eax
lea eax, [ebx + 0x2c]
push eax
lea ecx, [ebx + 0x24]
mov edx, dword [ebx + 0x20]
mov eax, dword [ebp - 4]
call fcn.00481de8
cmp dword [ebx + 0x20], 0
jne 0x480936
lea eax, [ebx + 0x60]
push eax
lea ecx, [ebp - 0xa8]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0xa8]
lea ecx, [ebx + 0x5c]
lea edx, [ebx + 0x20]
call fcn.0047fee4
lea eax, [ebx + 0xc]
push eax
lea ecx, [ebx + 8]
lea edx, [ebx + 4]
mov eax, dword [ebx + 0x18]
call fcn.0047fa04
cmp dword [ebx + 4], 0
jne 0x48096e
lea ecx, [ebp - 0xac]
mov edx, 0x4813a4
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0xac]
lea eax, [ebx + 4]
call fcn.00404668
lea ecx, [ebp - 0xb0]
mov edx, 0x4813b4
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0xb0]
lea eax, [ebx + 0x40]
call fcn.00404668
lea eax, [ebx + 0x4c]
push eax
lea eax, [ebx + 0x50]
push eax
lea ecx, [ebx + 0x48]
lea edx, [ebx + 0x44]
mov eax, dword [ebx + 0x40]
call fcn.0047fcb4
lea eax, [ebx + 0x60]
push eax
lea ecx, [ebx + 0x5c]
lea edx, [ebx + 0x58]
mov eax, dword [ebx + 0x54]
call fcn.0047fee4
push dword [ebp - 0x30]
push 0x481304
lea ecx, [ebp - 0xb4]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xb4]
push 0x481304
lea ecx, [ebp - 0xb8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xb8]
push 0x481304
lea ecx, [ebp - 0xbc]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xbc]
lea eax, [ebx + 0x64]
mov edx, 7
call fcn.00404994
lea ecx, [ebp - 0xc0]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0xc0]
lea eax, [ebx + 0x38]
call fcn.00404668
push 0
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0x30]
push 0x481304
lea ecx, [ebp - 0xcc]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xcc]
push 0x481304
lea ecx, [ebp - 0xd0]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xd0]
push 0x481304
lea ecx, [ebp - 0xd4]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xd4]
lea eax, [ebp - 0xc8]
mov edx, 7
call fcn.00404994
mov edx, dword [ebp - 0xc8]
mov ecx, 0x4813c4
mov eax, 0x80000002
call fcn.004747b4
mov edx, dword [ebp - 0xc4]
lea eax, [ebx + 0x30]
call fcn.00404668
lea eax, [ebx + 0x7c]
push eax
lea eax, [ebx + 0x80]
push eax
lea ecx, [ebx + 0x78]
lea edx, [ebx + 0x74]
mov eax, dword [ebx + 0x30]
call fcn.004802e4
lea ecx, [ebx + 0x6c]
lea edx, [ebx + 0x68]
mov eax, dword [ebx + 0x64]
call fcn.0048004c
lea ecx, [ebp - 0xd8]
mov edx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x30]
call fcn.0047f654
mov edx, dword [ebp - 0xd8]
lea eax, [ebx + 0x34]
call fcn.00404668
mov eax, esi
call fcn.00433c7c
push dword [ebp - 0x30]
push 0x481304
lea ecx, [ebp - 0xe0]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xe0]
push 0x481304
lea ecx, [ebp - 0xe4]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xe4]
push 0x481304
lea ecx, [ebp - 0xe8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xe8]
push 0x481304
push 0x481310
lea eax, [ebp - 0xdc]
mov edx, 9
call fcn.00404994
mov edx, dword [ebp - 0xdc]
xor ecx, ecx
mov eax, esi
call fcn.00433d10
test al, al
je 0x480bc9
lea edx, [ebp - 0x60]
mov eax, esi
call fcn.00433e34
lea eax, [ebp - 0x4c]
call fcn.004716f8
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.00471668
fstp qword [ebx + 0x88]
wait
mov eax, esi
call fcn.00433c7c
push dword [ebp - 0x30]
push 0x481304
lea ecx, [ebp - 0xf0]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xf0]
push 0x481304
lea ecx, [ebp - 0xf4]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xf4]
push 0x481304
lea ecx, [ebp - 0xf8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0xf8]
push 0x481304
push 0x4813d8
lea eax, [ebp - 0xec]
mov edx, 9
call fcn.00404994
mov edx, dword [ebp - 0xec]
xor ecx, ecx
mov eax, esi
call fcn.00433d10
test al, al
je 0x480cf6
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.00433f64
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x480cef
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0xfc]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0xfc], 0
je 0x480ce7
lea ecx, [ebp - 0x100]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x100]
mov eax, esi
call fcn.004340a4
cmp al, 1
jne 0x480ce7
lea ecx, [ebp - 0x108]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x104]
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0x104]
lea eax, [ebx + 0x3c]
call fcn.00404668
jmp 0x480cef
inc dword [ebp - 0x18]
dec dword [ebp - 0x44]
jne 0x480c77
mov eax, esi
call fcn.00433c7c
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
call fcn.00408b14
cmp dword [ebp - 0x10c], 0
je 0x480d39
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.0047eb04
mov edx, dword [ebp - 0x2c]
mov byte [edx + 0x70], al
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
jmp 0x480d47
mov edx, dword [0x47e5d0]
mov eax, dword [ebp - 0x2c]
call fcn.0040552c
inc dword [ebp - 0x14]
dec dword [ebp - 0x40]
jne 0x4806c8
inc dword [ebp - 0x10]
dec dword [ebp - 0x3c]
jne 0x48064b
inc dword [ebp - 0xc]
dec dword [ebp - 0x38]
jne 0x4805e4
jmp 0x48124c
mov edx, 0x80000006
mov eax, esi
call fcn.00433cac
xor ecx, ecx
mov edx, 0x4813f4
mov eax, esi
call fcn.00433d10
test al, al
je 0x480e24
mov edx, dword [ebp - 0x1c]
mov eax, esi
call fcn.00433e9c
mov eax, esi
call fcn.00433c7c
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x480e24
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x114]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x114]
lea eax, [ebp - 0x110]
mov edx, 0x481414
call fcn.00404920
mov edx, dword [ebp - 0x110]
xor ecx, ecx
mov eax, esi
call fcn.00433d10
test al, al
je 0x480e1c
lea ecx, [ebp - 0x118]
mov edx, 0x481434
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, esi
call fcn.00433c7c
inc dword [ebp - 0xc]
dec dword [ebp - 0x38]
jne 0x480dbb
mov edx, 0x80000002
mov eax, esi
call fcn.00433cac
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x48124c
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x120]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x120]
lea edx, [ebp - 0x11c]
call fcn.0040889c
mov edx, dword [ebp - 0x11c]
mov eax, 0x481448
call fcn.00404c18
test eax, eax
jne 0x481240
push dword [ebp - 0x30]
push 0x481304
lea ecx, [ebp - 0x128]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x128]
lea eax, [ebp - 0x124]
mov edx, 3
call fcn.00404994
mov edx, dword [ebp - 0x124]
xor ecx, ecx
mov eax, esi
call fcn.00433d10
test al, al
je 0x481240
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.00433e9c
mov edx, dword [0x47e5d0]
mov eax, 0x90
call fcn.00405518
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov ebx, eax
mov edx, 0x481320
lea ecx, [ebp - 0x130]
mov eax, esi
call fcn.004340c8
mov eax, dword [ebp - 0x130]
lea edx, [ebp - 0x12c]
call fcn.0040889c
mov edx, dword [ebp - 0x12c]
lea eax, [ebx + 0x18]
call fcn.00404668
mov edx, 0x481334
lea ecx, [ebp - 0x134]
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0x134]
lea eax, [ebx + 0x10]
call fcn.00404668
mov edx, 0x481358
lea ecx, [ebp - 0x138]
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0x138]
lea eax, [ebx + 0x14]
call fcn.00404668
lea edx, [ebp - 0x13c]
mov eax, dword [ebx + 0x10]
call fcn.00408b14
cmp dword [ebp - 0x13c], 0
jne 0x480f82
mov eax, ebx
mov edx, dword [ebx + 0x14]
call fcn.00404668
jmp 0x480f8c
mov eax, ebx
mov edx, dword [ebx + 0x10]
call fcn.00404668
mov edx, 0x48136c
lea ecx, [ebp - 0x140]
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0x140]
lea eax, [ebx + 0x1c]
call fcn.00404668
mov edx, 0x481378
lea ecx, [ebp - 0x144]
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0x144]
lea eax, [ebx + 0x54]
call fcn.00404668
mov edx, 0x481388
lea ecx, [ebp - 0x148]
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0x148]
lea eax, [ebx + 0x20]
call fcn.00404668
lea eax, [ebx + 0x28]
push eax
lea eax, [ebx + 0x2c]
push eax
lea ecx, [ebx + 0x24]
mov edx, dword [ebx + 0x20]
mov eax, dword [ebp - 4]
call fcn.00481de8
cmp dword [ebx + 0x20], 0
jne 0x48102e
lea eax, [ebx + 0x60]
push eax
lea ecx, [ebp - 0x14c]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x14c]
lea ecx, [ebx + 0x5c]
lea edx, [ebx + 0x20]
call fcn.0047fee4
lea eax, [ebx + 0xc]
push eax
lea ecx, [ebx + 8]
lea edx, [ebx + 4]
mov eax, dword [ebx + 0x18]
call fcn.0047fa04
cmp dword [ebx + 4], 0
jne 0x481066
mov edx, 0x4813a4
lea ecx, [ebp - 0x150]
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0x150]
lea eax, [ebx + 4]
call fcn.00404668
mov edx, 0x4813b4
lea ecx, [ebp - 0x154]
mov eax, esi
call fcn.004340c8
mov edx, dword [ebp - 0x154]
lea eax, [ebx + 0x40]
call fcn.00404668
lea eax, [ebx + 0x4c]
push eax
lea eax, [ebx + 0x50]
push eax
lea ecx, [ebx + 0x48]
lea edx, [ebx + 0x44]
mov eax, dword [ebx + 0x40]
call fcn.0047fcb4
lea eax, [ebx + 0x60]
push eax
lea ecx, [ebx + 0x5c]
lea edx, [ebx + 0x58]
mov eax, dword [ebx + 0x54]
call fcn.0047fee4
push dword [ebp - 0x30]
push 0x481304
lea ecx, [ebp - 0x158]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x158]
lea eax, [ebx + 0x64]
mov edx, 3
call fcn.00404994
lea ecx, [ebp - 0x15c]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x15c]
lea eax, [ebx + 0x38]
call fcn.00404668
push 0
lea eax, [ebp - 0x160]
push eax
push dword [ebp - 0x30]
push 0x481304
lea ecx, [ebp - 0x168]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x168]
lea eax, [ebp - 0x164]
mov edx, 3
call fcn.00404994
mov edx, dword [ebp - 0x164]
mov ecx, 0x4813c4
mov eax, 0x80000002
call fcn.004747b4
mov edx, dword [ebp - 0x160]
lea eax, [ebx + 0x30]
call fcn.00404668
lea eax, [ebx + 0x7c]
push eax
lea eax, [ebx + 0x80]
push eax
lea ecx, [ebx + 0x78]
lea edx, [ebx + 0x74]
mov eax, dword [ebx + 0x30]
call fcn.004802e4
lea eax, [ebx + 0x34]
call fcn.00404614
lea ecx, [ebx + 0x6c]
lea edx, [ebx + 0x68]
mov eax, dword [ebx + 0x64]
call fcn.004802a4
lea edx, [ebp - 0x16c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
call fcn.00408b14
cmp dword [ebp - 0x16c], 0
je 0x48122b
mov eax, dword [ebp - 0x2c]
push dword [eax + 4]
push 0x481458
mov eax, dword [ebp - 0x2c]
push dword [eax + 0x14]
lea eax, [ebp - 0x170]
mov edx, 3
call fcn.00404994
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x54]
inc eax
jne 0x48122b
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.0047eb04
mov edx, dword [ebp - 0x2c]
mov byte [edx + 0x70], al
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
mov eax, dword [ebp - 0x2c]
push dword [eax + 4]
push 0x481458
mov eax, dword [ebp - 0x2c]
push dword [eax + 0x14]
lea eax, [ebp - 0x174]
mov edx, 3
call fcn.00404994
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x481239
mov edx, dword [0x47e5d0]
mov eax, dword [ebp - 0x2c]
call fcn.0040552c
mov eax, esi
call fcn.00433c7c
inc dword [ebp - 0xc]
dec dword [ebp - 0x38]
jne 0x480e4c
mov eax, esi
call fcn.004037c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x481290
mov eax, dword [ebp - 0x34]
call fcn.00409b60
mov eax, dword [ebp - 0x1c]
call fcn.004037c0
mov eax, dword [ebp - 0x20]
call fcn.004037c0
mov eax, dword [ebp - 0x24]
call fcn.004037c0
mov eax, dword [ebp - 0x28]
call fcn.004037c0
ret