Function at 0x47bae0
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5eb0c9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x468
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x30], edi
mov eax, dword [edi + 0x3f8]
not eax
test al, 1
jne 0x47ca63
push 1
call fcn.00405120
test eax, eax
je 0x47ca63
push 0x664e2c
lea ecx, [esp + 0x38]
call fcn.004ff1f0
xor ebp, ebp
lea ecx, [esp + 0x64]
mov dword [esp + 0x480], ebp
call fcn.00456540
lea ecx, [esp + 0xa0]
call fcn.0040ee50
lea ecx, [esp + 0xf8]
mov byte [esp + 0x480], 1
call fcn.005bae68
lea ecx, [esp + 0x10c]
mov byte [esp + 0x480], 2
call fcn.005bb2c6
lea ecx, [esp + 0x120]
mov byte [esp + 0x480], 3
call fcn.004918b0
mov dword [esp + 0x120], 0x5f7a80
lea ecx, [esp + 0x134]
mov byte [esp + 0x480], 4
call fcn.005bb2c6
lea ecx, [esp + 0x148]
mov byte [esp + 0x480], 5
call fcn.005bb2c6
lea ecx, [esp + 0x15c]
mov byte [esp + 0x480], 6
call fcn.005bae68
lea ecx, [esp + 0x184]
mov byte [esp + 0x480], 7
call fcn.004918b0
mov eax, dword [0x6707bc]
mov dword [esp + 0x198], eax
mov dword [esp + 0x19c], eax
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1a4], eax
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x480], 0xc
call fcn.005bb2c6
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x480], 0xd
call fcn.005bae68
lea ecx, [esp + 0x1d8]
mov byte [esp + 0x480], 0xe
call fcn.005bae68
lea ecx, [esp + 0x1f0]
mov byte [esp + 0x480], 0xf
call fcn.005bae68
lea ecx, [esp + 0x204]
mov byte [esp + 0x480], 0x10
call fcn.0040fb10
lea ecx, [esp + 0x218]
mov byte [esp + 0x480], 0x11
call fcn.0040f670
lea ecx, [esp + 0x22c]
mov byte [esp + 0x480], 0x12
call fcn.005bae68
lea ecx, [esp + 0x240]
mov byte [esp + 0x480], 0x13
call fcn.004918b0
lea ecx, [esp + 0x258]
mov byte [esp + 0x480], 0x14
call fcn.005bb2c6
push ebp
lea ecx, [esp + 0x270]
mov byte [esp + 0x484], 0x15
call fcn.0040ea10
push ebp
lea ecx, [esp + 0x290]
mov byte [esp + 0x484], 0x16
call fcn.0040ed60
push ebp
lea ecx, [esp + 0x2ac]
mov byte [esp + 0x484], 0x17
call fcn.0040ec70
push ebp
lea ecx, [esp + 0x2cc]
mov byte [esp + 0x484], 0x18
call fcn.0040edc0
push ebp
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x484], 0x19
call fcn.0040ed90
push ebp
lea ecx, [esp + 0x304]
mov byte [esp + 0x484], 0x1a
call fcn.0040edf0
push ebp
lea ecx, [esp + 0x320]
mov byte [esp + 0x484], 0x1b
call fcn.0040eb30
push ebp
lea ecx, [esp + 0x33c]
mov byte [esp + 0x484], 0x1c
call fcn.0040eb90
lea ecx, [esp + 0x358]
mov byte [esp + 0x480], 0x1d
call fcn.0040ee20
mov eax, dword [0x6707bc]
mov dword [esp + 0x3a0], eax
mov dword [esp + 0x3a4], eax
mov dword [esp + 0x3a8], eax
mov dword [esp + 0x3ac], eax
lea ecx, [esp + 0x174]
mov byte [esp + 0x480], 0x22
push ecx
mov dword [esp + 0x258], 0xffff
mov dword [esp + 0x3a0], ebp
mov dword [esp + 0x1f0], ebp
mov dword [esp + 0x174], ebp
mov dword [esp + 0x1ac], ebp
call dword [sym.imp.ole32.dll_CoCreateGuid]
push 5
push ebp
lea ecx, [esp + 0x100]
mov dword [esp + 0x3c0], ebp
mov dword [esp + 0x3bc], ebp
mov dword [esp + 0x3c4], ebp
mov dword [esp + 0x3c8], ebp
mov dword [esp + 0x3cc], ebp
mov dword [esp + 0x3d4], ebp
mov dword [esp + 0x3d0], ebp
call fcn.005baefb
push 5
push ebp
lea ecx, [esp + 0x114]
call fcn.005bb4dc
push 5
push ebp
lea ecx, [esp + 0x13c]
call fcn.005bb4dc
push 5
push ebp
lea ecx, [esp + 0x150]
call fcn.005bb4dc
push 5
push ebp
lea ecx, [esp + 0x164]
call fcn.005baefb
lea ecx, [esp + 0x64]
lea edx, [esp + 0x64]
lea eax, [esp + 0x64]
mov dword [esp + 0x320], ecx
mov dword [esp + 0x304], edx
mov dword [esp + 0x354], eax
lea ecx, [esp + 0x64]
lea edx, [esp + 0x64]
lea eax, [esp + 0x64]
mov dword [esp + 0x2c4], ecx
mov dword [esp + 0x2cc], edx
mov dword [esp + 0x2e8], eax
lea ecx, [esp + 0x374]
lea edx, [esp + 0x64]
lea eax, [esp + 0x64]
push 0x28
push ecx
mov dword [esp + 0x298], edx
mov dword [esp + 0x290], eax
call fcn.004927e0
add esp, 8
push 0x400
lea ecx, [esp + 0x40]
mov byte [esp + 0x484], 0x23
call fcn.005c7a55
push ebp
push 0x1000
lea edx, [esp + 0x44]
mov bl, 0x24
push ebp
push edx
lea ecx, [esp + 0x444]
mov byte [esp + 0x490], bl
call fcn.005c4459
push ebp
push ebp
push 1
push ebp
push ebp
lea eax, [esp + 0x448]
push 1
push eax
lea ecx, [edi + 0xc0]
mov byte [esp + 0x49c], 0x25
call fcn.00458400
test eax, eax
mov byte [esp + 0x480], bl
lea ecx, [esp + 0x434]
jne 0x47c201
call fcn.005c4535
lea ecx, [esp + 0x3c]
mov byte [esp + 0x480], 0x23
call fcn.005c7b1a
lea ecx, [esp + 0x64]
mov byte [esp + 0x480], 0x47
call fcn.00460ce0
lea ecx, [esp + 0x3ac]
mov byte [esp + 0x480], 0x46
call fcn.005bc421
lea ecx, [esp + 0x3a8]
mov byte [esp + 0x480], 0x45
call fcn.005bc421
lea ecx, [esp + 0x3a4]
mov byte [esp + 0x480], 0x44
call fcn.005bc421
lea ecx, [esp + 0x3a0]
mov byte [esp + 0x480], 0x43
call fcn.005bc421
lea ecx, [esp + 0x358]
mov byte [esp + 0x480], 0x42
call fcn.00402cd0
lea ecx, [esp + 0x338]
mov byte [esp + 0x480], 0x41
call fcn.00402470
lea ecx, [esp + 0x31c]
mov byte [esp + 0x480], 0x40
call fcn.00402620
lea ecx, [esp + 0x300]
mov byte [esp + 0x480], 0x3f
call fcn.00402ba0
lea ecx, [esp + 0x2e4]
mov byte [esp + 0x480], 0x3e
call fcn.00402940
lea ecx, [esp + 0x2c8]
mov byte [esp + 0x480], 0x3d
call fcn.00402a70
lea ecx, [esp + 0x2a8]
mov byte [esp + 0x480], 0x3c
call fcn.00402470
lea ecx, [esp + 0x28c]
mov byte [esp + 0x480], 0x3b
call fcn.00402810
lea ecx, [esp + 0x26c]
mov byte [esp + 0x480], 0x3a
call fcn.00402470
mov byte [esp + 0x480], 0x39
lea ecx, [esp + 0x258]
call fcn.005bb2f9
mov esi, 0x5f7940
lea ecx, [esp + 0x240]
mov byte [esp + 0x480], 0x38
mov dword [esp + 0x240], esi
call fcn.00491ab0
lea ecx, [esp + 0x22c]
mov byte [esp + 0x480], 0x37
call fcn.005bae9b
lea ecx, [esp + 0x218]
mov byte [esp + 0x480], 0x36
call fcn.00409d50
lea ecx, [esp + 0x204]
mov byte [esp + 0x480], 0x35
mov dword [esp + 0x204], esi
call fcn.00491ab0
lea ecx, [esp + 0x1f0]
mov byte [esp + 0x480], 0x34
call fcn.005bae9b
lea ecx, [esp + 0x1d8]
mov byte [esp + 0x480], 0x33
call fcn.005bae9b
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x480], 0x32
call fcn.005bae9b
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x480], 0x31
call fcn.005bb2f9
lea ecx, [esp + 0x1a4]
mov byte [esp + 0x480], 0x30
call fcn.005bc421
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x480], 0x2f
call fcn.005bc421
lea ecx, [esp + 0x19c]
mov byte [esp + 0x480], 0x2e
call fcn.005bc421
lea ecx, [esp + 0x198]
mov byte [esp + 0x480], 0x2d
call fcn.005bc421
lea ecx, [esp + 0x184]
mov byte [esp + 0x480], 0x2c
mov dword [esp + 0x184], esi
call fcn.00491ab0
lea ecx, [esp + 0x15c]
mov byte [esp + 0x480], 0x2b
call fcn.005bae9b
lea ecx, [esp + 0x148]
mov byte [esp + 0x480], 0x2a
call fcn.005bb2f9
lea ecx, [esp + 0x134]
mov byte [esp + 0x480], 0x29
call fcn.005bb2f9
lea ecx, [esp + 0x120]
mov byte [esp + 0x480], 0x28
mov dword [esp + 0x120], esi
call fcn.00491ab0
lea ecx, [esp + 0x10c]
mov byte [esp + 0x480], 0x27
call fcn.005bb2f9
mov byte [esp + 0x480], 0x26
jmp 0x47c53b
call fcn.005c4535
mov edx, dword [esp + 0x3c]
push ebp
push ebp
lea ecx, [esp + 0x44]
call dword [edx + 0x28]
push ebp
push 0x1000
lea eax, [esp + 0x44]
push 1
push eax
lea ecx, [esp + 0x444]
call fcn.005c4459
mov eax, dword [edi + 0x3fc]
push ebp
push ebp
push 1
push ebp
push ebp
lea ecx, [esp + 0x448]
push eax
push ecx
lea ecx, [esp + 0x80]
mov byte [esp + 0x49c], 0x48
call fcn.0045c4a0
test eax, eax
mov byte [esp + 0x480], bl
lea ecx, [esp + 0x434]
jne 0x47c560
call fcn.005c4535
lea ecx, [esp + 0x3c]
mov byte [esp + 0x480], 0x23
call fcn.005c7b1a
lea ecx, [esp + 0x64]
mov byte [esp + 0x480], 0x6a
call fcn.00460ce0
lea ecx, [esp + 0x3ac]
mov byte [esp + 0x480], 0x69
call fcn.005bc421
lea ecx, [esp + 0x3a8]
mov byte [esp + 0x480], 0x68
call fcn.005bc421
lea ecx, [esp + 0x3a4]
mov byte [esp + 0x480], 0x67
call fcn.005bc421
lea ecx, [esp + 0x3a0]
mov byte [esp + 0x480], 0x66
call fcn.005bc421
lea ecx, [esp + 0x358]
mov byte [esp + 0x480], 0x65
call fcn.00402cd0
lea ecx, [esp + 0x338]
mov byte [esp + 0x480], 0x64
call fcn.00402470
lea ecx, [esp + 0x31c]
mov byte [esp + 0x480], 0x63
call fcn.00402620
lea ecx, [esp + 0x300]
mov byte [esp + 0x480], 0x62
call fcn.00402ba0
lea ecx, [esp + 0x2e4]
mov byte [esp + 0x480], 0x61
call fcn.00402940
lea ecx, [esp + 0x2c8]
mov byte [esp + 0x480], 0x60
call fcn.00402a70
lea ecx, [esp + 0x2a8]
mov byte [esp + 0x480], 0x5f
call fcn.00402470
lea ecx, [esp + 0x28c]
mov byte [esp + 0x480], 0x5e
call fcn.00402810
lea ecx, [esp + 0x26c]
mov byte [esp + 0x480], 0x5d
call fcn.00402470
mov byte [esp + 0x480], 0x5c
lea ecx, [esp + 0x258]
call fcn.005bb2f9
mov esi, 0x5f7940
lea ecx, [esp + 0x240]
mov byte [esp + 0x480], 0x5b
mov dword [esp + 0x240], esi
call fcn.00491ab0
lea ecx, [esp + 0x22c]
mov byte [esp + 0x480], 0x5a
call fcn.005bae9b
lea ecx, [esp + 0x218]
mov byte [esp + 0x480], 0x59
call fcn.00409d50
lea ecx, [esp + 0x204]
mov byte [esp + 0x480], 0x58
mov dword [esp + 0x204], esi
call fcn.00491ab0
lea ecx, [esp + 0x1f0]
mov byte [esp + 0x480], 0x57
call fcn.005bae9b
lea ecx, [esp + 0x1d8]
mov byte [esp + 0x480], 0x56
call fcn.005bae9b
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x480], 0x55
call fcn.005bae9b
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x480], 0x54
call fcn.005bb2f9
lea ecx, [esp + 0x1a4]
mov byte [esp + 0x480], 0x53
call fcn.005bc421
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x480], 0x52
call fcn.005bc421
lea ecx, [esp + 0x19c]
mov byte [esp + 0x480], 0x51
call fcn.005bc421
lea ecx, [esp + 0x198]
mov byte [esp + 0x480], 0x50
call fcn.005bc421
lea ecx, [esp + 0x184]
mov byte [esp + 0x480], 0x4f
mov dword [esp + 0x184], esi
call fcn.00491ab0
lea ecx, [esp + 0x15c]
mov byte [esp + 0x480], 0x4e
call fcn.005bae9b
lea ecx, [esp + 0x148]
mov byte [esp + 0x480], 0x4d
call fcn.005bb2f9
lea ecx, [esp + 0x134]
mov byte [esp + 0x480], 0x4c
call fcn.005bb2f9
lea ecx, [esp + 0x120]
mov byte [esp + 0x480], 0x4b
mov dword [esp + 0x120], esi
call fcn.00491ab0
lea ecx, [esp + 0x10c]
mov byte [esp + 0x480], 0x4a
call fcn.005bb2f9
mov byte [esp + 0x480], 0x49
lea ecx, [esp + 0xf8]
call fcn.005bae9b
lea ecx, [esp + 0xa0]
mov byte [esp + 0x480], 0
call fcn.00402d50
jmp 0x47ca4f
call fcn.005c4535
lea ecx, [esp + 0x3c]
mov byte [esp + 0x480], 0x23
call fcn.005c7b1a
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
mov dword [esp + 0x10], 1
xor ecx, ecx
mov eax, ecx
inc ecx
lea edx, [esp + 0x18]
mov dword [esp + 0x2c], ecx
push edx
push eax
lea ecx, [esp + 0x324]
call fcn.004f48d0
test eax, eax
je 0x47c702
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 8]
cmp eax, ebp
je 0x47c5d3
lea ecx, [esp + 0x14]
push ebp
push ecx
push eax
lea ecx, [esp + 0x2f0]
call fcn.004f4970
test eax, eax
je 0x47c5d3
mov edx, dword [esp + 0x14]
test byte [edx + 8], 2
je 0x47c5d7
mov dword [esp + 0x14], ebp
mov eax, dword [esp + 0x18]
mov esi, dword [eax + 0xc]
mov eax, dword [0x66da40]
push eax
push esi
call fcn.0052d867
add esp, 8
test eax, eax
je 0x47c63b
mov eax, dword [esp + 0x10]
mov ecx, eax
inc eax
push ecx
lea ecx, [esp + 0x3d4]
push str._W_d
push ecx
mov dword [esp + 0x1c], eax
call ebx
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x3dc]
push edx
push esi
lea ecx, [esp + 0x78]
push eax
push ecx
call fcn.0047caf0
mov eax, dword [esp + 0x34]
add esp, 0x1c
lea edx, [esp + 0x3d0]
push edx
lea ecx, [eax + 0xc]
call fcn.005bc5aa
mov ecx, dword [esp + 0x18]
add ecx, 0x10
call fcn.005bc3ac
mov edx, dword [esp + 0x18]
push ebp
lea ecx, [edx + 0x14]
call fcn.004f4160
mov edi, eax
test edi, edi
je 0x47c6f3
mov eax, dword [esp + 0x18]
push 0
push ebp
mov esi, dword [eax + 0x14]
lea ecx, [eax + 0x14]
call fcn.004f4110
mov ecx, dword [esp + 0x18]
push eax
add ecx, 0x14
call dword [esi + 0x14]
mov esi, eax
mov eax, dword [0x66da40]
push eax
push esi
call fcn.0052d867
add esp, 8
test eax, eax
je 0x47c6db
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x3d0]
mov ecx, eax
inc eax
push ecx
push str._W_d
push edx
mov dword [esp + 0x1c], eax
call ebx
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x3dc]
push eax
push esi
lea edx, [esp + 0x78]
push ecx
push edx
call fcn.0047caf0
mov ecx, dword [esp + 0x34]
add esp, 0x1c
lea eax, [esp + 0x3d0]
add ecx, 0x14
push eax
push edi
call fcn.004e6ba0
mov edx, dword [esp + 0x18]
push 0x674ee0
push edi
lea ecx, [edx + 0x14]
call fcn.004e6c00
inc ebp
jmp 0x47c647
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x30]
xor ebp, ebp
jmp 0x47c586
xor esi, esi
lea ecx, [esp + 0x1c]
mov eax, esi
inc esi
push ecx
push eax
lea ecx, [esp + 0x2ec]
mov dword [esp + 0x34], esi
call fcn.004f48d0
test eax, eax
je 0x47c844
mov edx, dword [esp + 0x1c]
test byte [edx + 8], 2
jne 0x47c704
mov eax, dword [esp + 0x10]
mov ecx, eax
inc eax
mov dword [esp + 0x10], eax
push ecx
lea eax, [esp + 0x3d4]
push str._W_d
push eax
call ebx
add esp, 0xc
lea ecx, [esp + 0x3d0]
push ecx
mov ecx, dword [esp + 0x20]
call fcn.005bc5aa
mov edx, dword [esp + 0x1c]
lea ecx, [edx + 4]
call fcn.005bc3ac
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x10]
add ecx, 0xc
push eax
push ecx
call fcn.0047ca80
mov eax, dword [esp + 0x24]
add esp, 8
cmp dword [eax + 0x3c], ebp
jne 0x47c78c
xor ecx, ecx
jmp 0x47c78f
mov ecx, dword [eax + 0x34]
mov eax, dword [eax + 0x3c]
shr eax, 2
cmp eax, ebp
jle 0x47c704
mov esi, ecx
mov edi, eax
mov eax, dword [esi]
lea edx, [esp + 0x14]
push ebp
push edx
push eax
lea ecx, [esp + 0x2d4]
call fcn.004f4970
test eax, eax
je 0x47c82d
mov eax, dword [esp + 0x14]
test byte [eax + 0x10], 0x80
jne 0x47c82d
mov ecx, dword [eax]
cmp byte [ecx], 0x5f
je 0x47c7fe
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x3d0]
mov ecx, eax
inc eax
push ecx
push str._W_d
push edx
mov dword [esp + 0x1c], eax
call ebx
mov ecx, dword [esp + 0x20]
add esp, 0xc
lea eax, [esp + 0x3d0]
push eax
call fcn.005bc5aa
mov eax, dword [esp + 0x14]
lea ecx, [eax + 8]
call fcn.005bc3ac
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
add edx, 0x38
push ecx
push edx
call fcn.0047ca80
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x18]
add ecx, 0x18
push eax
push ecx
call fcn.0047ca80
add esp, 0x10
add esi, 4
dec edi
jne 0x47c7a1
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x2c]
jmp 0x47c704
lea edx, [esp + 0x10]
lea eax, [esp + 0x2a8]
push edx
push eax
call fcn.0047ca80
lea ecx, [esp + 0x18]
lea edx, [esp + 0x340]
push ecx
push edx
call fcn.0047ca80
add esp, 0x10
xor esi, esi
lea ecx, [esp + 0x28]
mov eax, esi
push ecx
push eax
lea ecx, [esp + 0x294]
inc esi
call fcn.004f48d0
test eax, eax
je 0x47c8e2
mov edx, dword [esp + 0x28]
test byte [edx + 8], 2
jne 0x47c86d
mov eax, dword [esp + 0x10]
mov ecx, eax
inc eax
mov dword [esp + 0x10], eax
push ecx
lea eax, [esp + 0x3d4]
push str._W_d
push eax
call ebx
add esp, 0xc
lea ecx, [esp + 0x3d0]
push ecx
mov ecx, dword [esp + 0x2c]
call fcn.005bc5aa
mov edx, dword [esp + 0x28]
lea ecx, [edx + 4]
call fcn.005bc3ac
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x10]
add ecx, 0xc
push eax
push ecx
call fcn.0047ca80
add esp, 8
jmp 0x47c86d
xor esi, esi
lea edx, [esp + 0x24]
mov eax, esi
push edx
push eax
lea ecx, [esp + 0x308]
inc esi
call fcn.004f48d0
test eax, eax
je 0x47c961
mov eax, dword [esp + 0x24]
test byte [eax + 8], 4
jne 0x47c8e4
mov ecx, dword [eax + 0x34]
cmp dword [ecx - 8], ebp
je 0x47c942
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x3d0]
mov ecx, eax
inc eax
push ecx
push str._W_d
push edx
mov dword [esp + 0x1c], eax
call ebx
mov ecx, dword [esp + 0x30]
add esp, 0xc
lea eax, [esp + 0x3d0]
push eax
call fcn.005bc5aa
mov eax, dword [esp + 0x24]
lea ecx, [eax + 4]
call fcn.005bc3ac
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
add edx, 0x10
push ecx
push edx
call fcn.0047ca80
add esp, 8
jmp 0x47c8e4
lea ecx, [esp + 0x360]
mov dword [esp + 0x35c], ebp
call fcn.00491ab0
lea ecx, [esp + 0x274]
mov dword [esp + 0x270], ebp
call fcn.00491ab0
lea eax, [esp + 0x1ac]
push eax
call fcn.00461bd0
mov ecx, dword [0x6707bc]
add esp, 4
mov dword [esp + 0x20], ecx
lea edx, [esp + 0x20]
mov bl, 0x6b
push 1
push edx
lea ecx, [esp + 0x6c]
mov byte [esp + 0x488], bl
call fcn.00456fc0
test eax, eax
je 0x47ca2d
mov eax, dword [esp + 0x20]
push 1
push eax
lea ecx, [esp + 0x6c]
call fcn.00458020
cmp eax, 1
jne 0x47ca2d
mov ecx, dword [0x6707bc]
mov dword [esp + 0x14], ecx
push 0x664e08
lea ecx, [esp + 0x18]
mov byte [esp + 0x484], 0x6c
call fcn.005bc5aa
lea edx, [esp + 0x20]
lea ecx, [esp + 0x14]
push edx
call fcn.005bc839
push 0x664dfc
lea ecx, [esp + 0x18]
call fcn.005bc7fd
mov eax, dword [esp + 0x14]
push 1
push eax
mov ecx, edi
call fcn.00473ec0
lea ecx, [esp + 0x14]
mov byte [esp + 0x480], bl
call fcn.005bc421
lea ecx, [esp + 0x20]
mov byte [esp + 0x480], 0x23
call fcn.005bc421
lea ecx, [esp + 0x64]
mov byte [esp + 0x480], 0
call fcn.00401f70
lea ecx, [esp + 0x34]
mov dword [esp + 0x480], 0xffffffff
call fcn.004ff2a0
mov ecx, dword [esp + 0x478]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x474
ret