Function at 0x47bae0
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5898d2
mov eax, dword fs:[0]
push eax
sub esp, 0xd0
mov eax, dword [0x61094c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ecx + 8]
xor edi, edi
mov esi, dword [ebp + 8]
mov ecx, 0x80004003
mov eax, dword [eax]
test eax, eax
cmove edi, ecx
jne 0x47bb7c
push str.E:BT7c039243_72da_4e0d_8a2b_71068e04940dFreetools_srcMcEventsTrackerMcInstallationParams.cpp
push str.McInstallationParams::PopulateMembersForInstallation
push 0x1af
push 4
lea ecx, [ebp - 0xbc]
call fcn.004226f0
mov dword [ebp - 4], 0
push str.McInstallationParams::PopulateMembersForInstallation_Invalid_Pointer___m_bstrInstallationParams.m_str.
push dword [eax]
call fcn.00426cc0
add esp, 8
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0xbc]
call fcn.00424170
mov ecx, dword [ebp - 0xbc]
add ecx, 0x14
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x47ca5a
push eax
lea ecx, [ebp - 0xd8]
call fcn.004858f0
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 2
call fcn.00487fc0
mov edi, eax
test edi, edi
jns 0x47bbfe
push str.E:BT7c039243_72da_4e0d_8a2b_71068e04940dFreetools_srcMcEventsTrackerMcInstallationParams.cpp
push str.McInstallationParams::PopulateMembersForInstallation
push 0x1b9
push 4
lea ecx, [ebp - 0xbc]
call fcn.004226f0
mov byte [ebp - 4], 3
push str.McInstallationParams::PopulateMembersForInstallation_Parsing_failed.
push dword [eax]
call fcn.00426cc0
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0xbc]
call fcn.00424170
mov eax, dword [ebp - 0xbc]
add eax, 0x14
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [ebp - 0xd8]
call fcn.00487f50
jmp 0x47ca5a
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
push str.instid
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
cmp ecx, eax
je 0x47bc51
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47bc47
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
call fcn.00425730
cmp dword [ebp - 0x18], 0
jne 0x47bc8b
push 0
push 0
lea ecx, [ebp - 0x28]
call fcn.0044c120
cmp dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push 0xd
push str.UA_49812791_4
jne 0x47bc86
call fcn.00425790
jmp 0x47bc8b
call fcn.004258a0
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
cmp ecx, eax
je 0x47bca5
cmp dword [ebp - 0x14], 8
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.insuuid
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
cmp ecx, eax
je 0x47bcd9
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47bccf
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
jne 0x47bcfe
push 0x24
push str.00000000_0000_0000_0000_000000000000
lea ecx, [ebp - 0x28]
call fcn.00425790
mov edx, dword [ebp - 0x18]
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x18
cmp ecx, eax
je 0x47bd19
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.insaffid
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
cmp ecx, eax
je 0x47bd4d
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47bd43
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
call fcn.00425730
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x90
cmp ecx, eax
je 0x47bd79
cmp dword [ebp - 0x14], 8
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.insversion
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
cmp ecx, eax
je 0x47bdad
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47bda3
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
call fcn.00425730
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x48
cmp ecx, eax
je 0x47bdd6
cmp dword [ebp - 0x14], 8
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.insreturn
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
cmp ecx, eax
je 0x47be0a
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47be00
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
call fcn.00425730
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x2b8
cmp ecx, eax
je 0x47be36
cmp dword [ebp - 0x14], 8
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.inslaunch
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
cmp ecx, eax
je 0x47be6a
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47be60
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
call fcn.00425730
mov ecx, dword [esi]
mov edx, dword [ebp - 0x18]
add ecx, 0x2a0
test edx, edx
je 0x47be98
lea eax, [ebp - 0x28]
cmp ecx, eax
je 0x47bea4
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
jmp 0x47be9f
push 7
push str.Unknown
call fcn.00425790
mov ecx, dword [esi]
push 7
add ecx, 0x30
push str.MSSPlus
call fcn.00425790
mov ecx, dword [esi]
push 5
add ecx, 0x60
push str.event
call fcn.00425790
push str.instkstat
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
cmp ecx, eax
je 0x47befa
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47bef0
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
call fcn.00425730
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x3c0
cmp ecx, eax
je 0x47bf26
cmp dword [ebp - 0x14], 8
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.instkregupdate
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xd
cmp ecx, eax
je 0x47bf5a
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47bf50
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
call fcn.00425730
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x3d8
cmp ecx, eax
je 0x47bf86
cmp dword [ebp - 0x14], 8
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xe
push eax
call fcn.00473d20
test eax, eax
jne 0x47bfd2
mov ecx, dword [esi]
lea eax, [ebp - 0x40]
add ecx, 0xa8
cmp ecx, eax
je 0x47bfd2
cmp dword [ebp - 0x2c], 8
push dword [ebp - 0x30]
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.00425790
push str.inslanguage
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
cmp ecx, eax
je 0x47c006
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47bffc
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xe
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x47c033
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0xc0
cmp ecx, eax
je 0x47c060
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
jmp 0x47c05a
lea eax, [ebp - 0x40]
push eax
call fcn.00474d80
test eax, eax
je 0x47c060
mov ecx, dword [esi]
lea eax, [ebp - 0x40]
add ecx, 0xc0
cmp ecx, eax
je 0x47c060
cmp dword [ebp - 0x2c], 8
push dword [ebp - 0x30]
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.00425790
xor eax, eax
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 7
mov word [ebp - 0xb8], ax
push 1
push 0x5c7d90
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x10
call fcn.00425790
lea eax, [ebp - 0x40]
push eax
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ebp - 0xbc], esp
mov dword [ebp - 0xdc], ecx
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
push 8
push str.abtpkgid
mov byte [ebp - 4], 0x12
call fcn.00425790
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ebp - 0xdc], ecx
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
push 0xb
push str.queryparams
mov byte [ebp - 4], 0x14
call fcn.00425790
mov byte [ebp - 4], 0x13
mov byte [ebp - 4], 0x11
call fcn.004747c0
test eax, eax
je 0x47c13a
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push dword [ebp - 0x30]
cmovae eax, dword [ebp - 0x40]
lea ecx, [ebp - 0xb8]
push eax
call fcn.00425790
mov ecx, dword [esi]
lea eax, [ebp - 0xb8]
add ecx, 0x120
cmp ecx, eax
je 0x47c166
cmp dword [ebp - 0xa4], 8
push dword [ebp - 0xa8]
cmovae eax, dword [ebp - 0xb8]
push eax
call fcn.00425790
push 0
push 0
lea ecx, [ebp - 0x40]
call fcn.0044c120
cmp dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
push 0
push 0x5bb418
jne 0x47c189
call fcn.00425790
jmp 0x47c18e
call fcn.004258a0
push 0x10
call dword [sym.imp.KERNEL32.dll_GetUserGeoID]
cmp eax, 0xffffffff
je 0x47c1af
push eax
lea eax, [ebp - 0x40]
push 0x5c6df8
push eax
call fcn.00477070
add esp, 0xc
jmp 0x47c1be
push 1
push 0x5bdf28
lea ecx, [ebp - 0x40]
call fcn.00425790
mov ecx, dword [esi]
lea eax, [ebp - 0x40]
add ecx, 0x138
cmp ecx, eax
je 0x47c1de
cmp dword [ebp - 0x2c], 8
push dword [ebp - 0x30]
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.00425790
xor eax, eax
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
push 1
push 0x5bdf28
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x15
call fcn.00425790
push 0
push 0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x16
call fcn.0044c120
cmp dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
push 0
push 0x5bb418
jne 0x47c242
call fcn.00425790
jmp 0x47c247
call fcn.004258a0
lea eax, [ebp - 0x40]
push eax
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ebp - 0xdc], esp
mov dword [ebp - 0xbc], ecx
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
push 0xa
push str.IsMigrated
mov byte [ebp - 4], 0x17
call fcn.00425790
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ebp - 0xbc], ecx
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
push 0xc
push str.SecurityScan
mov byte [ebp - 4], 0x19
call fcn.00425790
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x16
call fcn.004747c0
test eax, eax
je 0x47c2e4
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push dword [ebp - 0x30]
cmovae eax, dword [ebp - 0x40]
lea ecx, [ebp - 0xa0]
push eax
call fcn.00425790
mov ecx, dword [esi]
lea eax, [ebp - 0xa0]
add ecx, 0x150
cmp ecx, eax
je 0x47c310
cmp dword [ebp - 0x8c], 8
push dword [ebp - 0x90]
cmovae eax, dword [ebp - 0xa0]
push eax
call fcn.00425790
push 0
push 0
lea ecx, [ebp - 0x40]
call fcn.0044c120
cmp dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
push 0
push 0x5bb418
jne 0x47c333
call fcn.00425790
jmp 0x47c338
call fcn.004258a0
lea eax, [ebp - 0x40]
push eax
call fcn.004742f0
test eax, eax
je 0x47c362
mov ecx, dword [esi]
lea eax, [ebp - 0x40]
add ecx, 0x78
cmp ecx, eax
je 0x47c362
cmp dword [ebp - 0x2c], 8
push dword [ebp - 0x30]
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.00425790
push str.inskey1
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
cmp ecx, eax
je 0x47c396
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47c38c
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x47c3c7
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x408
cmp ecx, eax
je 0x47c3c7
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.inskey2
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1b
cmp ecx, eax
je 0x47c3fb
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47c3f1
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x47c42c
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x420
cmp ecx, eax
je 0x47c42c
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.inskey3
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
cmp ecx, eax
je 0x47c460
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47c456
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x47c491
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x438
cmp ecx, eax
je 0x47c491
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.inskey4
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
cmp ecx, eax
je 0x47c4c5
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47c4bb
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x47c4f6
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x450
cmp ecx, eax
je 0x47c4f6
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.inskey5
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1e
cmp ecx, eax
je 0x47c52a
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47c520
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x47c55b
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x468
cmp ecx, eax
je 0x47c55b
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.inskey6
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
cmp ecx, eax
je 0x47c58f
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47c585
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x47c5c0
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x480
cmp ecx, eax
je 0x47c5c0
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.inskey7
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x20
cmp ecx, eax
je 0x47c5f4
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47c5ea
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x47c625
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x498
cmp ecx, eax
je 0x47c625
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.inskey8
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x21
cmp ecx, eax
je 0x47c659
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47c64f
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x47c68a
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x4b0
cmp ecx, eax
je 0x47c68a
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
push str.regschtaskerr
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x22
cmp ecx, eax
je 0x47c6be
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47c6b4
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x47c6ef
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x4c8
cmp ecx, eax
je 0x47c6ef
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
cmp dword [0x612714], 8
lea ecx, [ebp - 0xd8]
mov eax, 0x612700
cmovae eax, dword [0x612700]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x23
cmp ecx, eax
je 0x47c732
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47c728
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x47c763
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x4e0
cmp ecx, eax
je 0x47c763
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
cmp dword [0x61272c], 8
lea ecx, [ebp - 0xd8]
mov eax, 0x612718
cmovae eax, dword [0x612718]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x24
cmp ecx, eax
je 0x47c7a6
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47c79c
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00425730
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x47c7d7
mov ecx, dword [esi]
lea eax, [ebp - 0x28]
add ecx, 0x4f8
cmp ecx, eax
je 0x47c7d7
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
cmp dword [0x612744], 8
lea ecx, [ebp - 0xd8]
mov eax, 0x612730
cmovae eax, dword [0x612730]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00488560
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x25
cmp ecx, eax
je 0x47c81a
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x47c810
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.00425790
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
call fcn.00425730
mov ecx, dword [esi]
mov edx, dword [ebp - 0x18]
add ecx, 0x300
test edx, edx
jne 0x47c83e
push 0xa
push str.NotScanned
jmp 0x47c84f
lea eax, [ebp - 0x28]
cmp ecx, eax
je 0x47c854
cmp dword [ebp - 0x14], 8
push edx
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00425790
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
push 7
push str.0.0.0.0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x26
call fcn.00425790
push 0
push 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x27
call fcn.0044c120
cmp dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push 0
push 0x5bb418
jne 0x47c8b2
call fcn.00425790
jmp 0x47c8b7
call fcn.004258a0
lea eax, [ebp - 0x28]
push eax
call fcn.00475770
test eax, eax
je 0x47c8de
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x88]
push eax
call fcn.00425790
mov ecx, dword [esi]
lea eax, [ebp - 0x88]
add ecx, 0x168
cmp ecx, eax
je 0x47c904
cmp dword [ebp - 0x74], 8
push dword [ebp - 0x78]
cmovae eax, dword [ebp - 0x88]
push eax
call fcn.00425790
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
push 7
push str.0.0.0.0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x28
call fcn.00425790
push 0
push 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x29
call fcn.0044c120
cmp dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push 0
push 0x5bb418
jne 0x47c959
call fcn.00425790
jmp 0x47c95e
call fcn.004258a0
lea eax, [ebp - 0x28]
push eax
call fcn.004759a0
test eax, eax
je 0x47c982
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x70]
push eax
call fcn.00425790
mov ecx, dword [esi]
lea eax, [ebp - 0x70]
add ecx, 0x180
cmp ecx, eax
je 0x47c9a2
cmp dword [ebp - 0x5c], 8
push dword [ebp - 0x60]
cmovae eax, dword [ebp - 0x70]
push eax
call fcn.00425790
lea ecx, [ebp - 0x70]
call fcn.00425730
lea ecx, [ebp - 0x88]
call fcn.00425730
lea ecx, [ebp - 0xa0]
call fcn.00425730
lea ecx, [ebp - 0xb8]
call fcn.00425730
lea ecx, [ebp - 0x40]
call fcn.00425730
lea ecx, [ebp - 0x28]
call fcn.00425730
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xd8], 0
push dword [eax + 4]
lea eax, [ebp - 0xc4]
push eax
mov ecx, eax
call fcn.0042fc00
push 0x40
push dword [ebp - 0xc4]
call fcn.005541c2
mov eax, dword [ebp - 0xcc]
add esp, 8
push dword [eax + 4]
lea eax, [ebp - 0xcc]
push eax
mov ecx, eax
call fcn.0042fc00
push 0x40
push dword [ebp - 0xcc]
call fcn.005541c2
mov eax, dword [ebp - 0xd4]
add esp, 8
push dword [eax + 4]
lea eax, [ebp - 0xd4]
push eax
mov ecx, eax
call fcn.0042fc00
push 0x40
push dword [ebp - 0xd4]
call fcn.005541c2
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00553d2a
mov esp, ebp
pop ebp
ret 4