Function at 0x47389a
Capabilities:
Terminate process

Disassembly:
push 0
call dword [sym.imp.msvcrt.dll_time]
add esp, 4
push eax
call dword [sym.imp.msvcrt.dll_srand]
add esp, 4
mov edi, 0x404f24
mov ecx, 0x1917c
xor eax, eax
rep stosd dword es:[edi], eax
call dword [sym.imp.kernel32.dll_GetProcessHeap]
mov dword [0x4012e4], eax
push 0x7000
call fcn.0046bf84
mov dword [0x404f28], eax
add eax, 0x1000
mov dword [0x404f64], eax
add eax, 0x1000
mov dword [0x404f68], eax
add eax, 0x1000
mov dword [0x404f70], eax
add eax, 0x2000
mov dword [0x404f74], eax
mov ebx, dword [0x404f70]
push 0x104
push ebx
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameW]
push ebx
push dword [0x404f28]
call dword [sym.imp.kernel32.dll_lstrcpyW]
push eax
push dword [0x404f64]
call dword [sym.imp.kernel32.dll_lstrcpyW]
push eax
call dword [sym.imp.shlwapi.dll_PathStripPathW]
push ebx
call dword [sym.imp.shlwapi.dll_PathRemoveFileSpecW]
push ebx
push 0x464fe4
call dword [sym.imp.kernel32.dll_lstrcpyW]
push ebx
call dword [sym.imp.kernel32.dll_SetCurrentDirectoryW]
push 0
push 0x404fdc
push 0x404f9c
push 0x404f98
call dword [sym.imp.msvcrt.dll___wgetmainargs]
add esp, 0x10
call fcn.0046ca51
cmp eax, 0xffffffff
je 0x4736b9
mov dword [0x404f24], eax
jmp 0x4738e6
cmp dword [0x404f98], 2
jge 0x473727
mov eax, dword [0x404f28]
mov word [eax], 0
push 1
push eax
call fcn.00472adb
test eax, eax
je 0x473715
push eax
push dword [0x404f64]
call dword [sym.imp.kernel32.dll_lstrcpyW]
push eax
call dword [sym.imp.shlwapi.dll_PathStripPathW]
push 0xfde9
push dword [0x404f28]
call fcn.00472ed4
cmp eax, 0xffffffff
je 0x4737a4
push eax
call fcn.0046e469
mov dword [0x404f24], eax
jmp 0x4738e6
push dword [0x404f28]
call fcn.0046bff1
push eax
call dword [sym.imp.kernel32.dll_ExitProcess]
mov ebx, dword [0x404f9c]
mov eax, dword [ebx + 4]
push eax
push dword [0x404f28]
call dword [sym.imp.kernel32.dll_lstrcpyW]
call 0x47374c
or dword [eax], eax
and byte [eax], al
and al, byte [eax]
daa
add byte [eax], al
add byte [eax - 1], dl
adc eax, sym.imp.shlwapi.dll_StrTrimW
push dword [0x404f28]
call dword [sym.imp.kernel32.dll_lstrlenW]
test eax, eax
je 0x4736c2
mov eax, dword [0x404f28]
cmp word [eax], 0x2d
jne 0x473776
xor eax, eax
jmp 0x4737a4
push dword [0x404f28]
push dword [0x404f64]
call dword [sym.imp.kernel32.dll_lstrcpyW]
push eax
call dword [sym.imp.shlwapi.dll_PathStripPathW]
push 0xfde9
push dword [0x404f28]
call fcn.00472ed4
cmp eax, 0xffffffff
jne 0x473812
push eax
call 0x4737e2
dec eax
add byte [edi], ch
bound eax, qword [eax]
bound eax, qword [eax]
jns 0x4737b4
and byte [eax], al
inc edx
add byte [ecx], al
push ebx
add byte [ecx], cl
inc ebx
add byte [eax], ah
add byte [esi], dh
add byte gs:[edx], dh
jae 0x4737ca
imul eax, dword [eax], 0x6e006f
and byte [eax], al
xor dword [eax], eax
add byte cs:[ecx], bh
add byte [esi], ch
add byte [edx], dh
add byte [0xa00], cl
add bh, bh
adc eax, sym.imp.msvcrt.dll_wprintf
add esp, 4
pop eax
test eax, eax
je 0x473715
push dword [0x404f28]
push 0x403f98
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 8
mov eax, 0xffffffff
jmp 0x473715
push eax
call fcn.0046e469
mov dword [0x404f24], eax
mov eax, dword [ebx + 8]
push eax
push dword [0x404f70]
call dword [sym.imp.kernel32.dll_lstrcpyW]
call 0x47383c
or dword [eax], eax
and byte [eax], al
and al, byte [eax]
daa
add byte [eax], al
add byte [eax - 1], dl
adc eax, sym.imp.shlwapi.dll_StrTrimW
push dword [0x404f70]
call dword [sym.imp.kernel32.dll_lstrlenW]
cmp eax, 0
je 0x4738e6
nop
call 0x47386a
sub eax, 0x69006200
add byte [esi], ch
add byte fs:[eax], al
add bh, bh
xor eax, 0x404f70
call dword [sym.imp.kernel32.dll_lstrcmpiW]
cmp eax, 0
jne 0x4738e6
mov eax, dword [ebx + 0xc]
push eax
push dword [0x404f70]
call dword [sym.imp.kernel32.dll_lstrcpyW]
call 0x47389a
or dword [eax], eax
and byte [eax], al
and al, byte [eax]
daa
add byte [eax], al
add byte [eax - 1], dl
adc eax, sym.imp.shlwapi.dll_StrTrimW
push dword [0x404f70]
call dword [sym.imp.kernel32.dll_lstrlenW]
cmp eax, 0
je 0x4738e6
call fcn.0046cbcf
cmp eax, 1
jne 0x4738ce
push 0x403f5e
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 4
xor eax, eax
jmp 0x4738e1
push 0x403f7c
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 4
mov eax, 0xffffffff
jmp 0x473715
call section..code
push 0x19
push 1
call fcn.0046b4f1
push 1
push dword [0x404f28]
call fcn.0046bc82
mov eax, dword [0x4012b4]
mov dword [0x404fbc], eax
mov eax, dword [0x4012bc]
mov dword [0x404fc0], eax