Function at 0x472d60
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x68af8f
mov eax, dword fs:[0]
push eax
sub esp, 0x394
mov eax, dword [0x729140]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x2fc], ebx
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x300]
mov edi, dword [ebp + 0x24]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x318], 0
push 4
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x308], edi
mov dword [ebx + 0x18], 0
call fcn.00407a60
lea eax, [ebx + 0x1c]
push eax
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x2f4], eax
call fcn.0042ab70
mov dword [ebp - 4], 0
mov eax, dword [ebx + 4]
mov dword [ebp - 0x30c], eax
test eax, eax
je 0x473b4f
mov eax, dword [ebp - 0x300]
test eax, eax
je 0x472e38
mov eax, dword [eax]
test eax, eax
je 0x472e2e
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x300], 0
lea esi, [ebx + 0x20]
mov dword [ebp - 0x31c], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push eax
push esi
call ebx
mov byte [ebp - 4], 1
push ecx
push dword [ebp - 0x214]
push 0
push 0
push ecx
push dword [ebp - 0x314]
push str.POST
push dword [ebp - 0x30c]
call fcn.0047e280
mov ecx, eax
call fcn.0047e480
mov dword [ebp - 0x30c], eax
mov byte [ebp - 4], 0
push 0
push esi
call ebx
mov eax, dword [ebp - 0x30c]
test eax, eax
je 0x473b4f
cmp byte [ebp + 0x1c], 0
je 0x472ec2
push ecx
lea ecx, [ebp - 0x214]
mov dword [ebp - 0x214], 1
push ecx
push 0x41
push eax
call fcn.0047e280
mov ecx, eax
call fcn.0047eca0
push 4
lea ecx, [ebp - 0x304]
call fcn.00407a60
push dword [ebp - 0x2f4]
lea ecx, [ebp - 0x304]
call fcn.0042ab70
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x30c]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x304]
test eax, eax
je 0x472f14
mov eax, dword [eax]
test eax, eax
je 0x472f0a
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x304], 0
push str.Content_Type:_application_x_www_form_urlencoded__charsetUTF_8
lea ecx, [ebp - 0x24c]
call fcn.00405880
mov byte [ebp - 4], 3
mov eax, dword [edi]
cmp eax, dword [edi + 4]
je 0x47309b
push 0x6d6410
call fcn.00405dd0
add esp, 4
lea ecx, [ebp - 0x24c]
push eax
push 0x6d6410
call fcn.00406160
push str.Cookie:
call fcn.00405dd0
add esp, 4
lea ecx, [ebp - 0x24c]
push eax
push str.Cookie:
call fcn.00406160
xor ecx, ecx
mov eax, 0x2aaaaaab
mov dword [ebp - 0x314], ecx
mov ecx, dword [edi + 4]
sub ecx, dword [edi]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x47309b
mov esi, dword [edi]
xor eax, eax
mov dword [ebp - 0x2f4], eax
nop dword [eax]
add eax, esi
mov ebx, esi
lea ecx, [eax + 0x18]
mov dword [ebp - 0x214], ecx
mov ecx, eax
call fcn.0040cdb0
test al, al
jne 0x473058
mov ecx, dword [ebp - 0x214]
call fcn.0040cdb0
test al, al
jne 0x473058
mov ecx, dword [ebp - 0x2f4]
lea ecx, [ecx + esi]
call fcn.004028e0
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x472fe7
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x24c]
call fcn.00406160
push 0x6d28d4
call fcn.00405dd0
add esp, 4
lea ecx, [ebp - 0x24c]
push eax
push 0x6d28d4
call fcn.00406160
mov ecx, dword [ebp - 0x214]
call fcn.004028e0
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x473029
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x24c]
call fcn.00406160
push 0x6d59cc
call fcn.00405dd0
add esp, 4
lea ecx, [ebp - 0x24c]
push eax
push 0x6d59cc
call fcn.00406160
mov ebx, dword [edi]
mov ecx, dword [edi + 4]
mov eax, 0x2aaaaaab
inc dword [ebp - 0x314]
sub ecx, ebx
add dword [ebp - 0x2f4], 0x30
mov esi, ebx
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x2f4]
jb 0x472fa0
mov esi, dword [ebp - 0x31c]
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedExchange]
cmp byte [ebp + 0x1c], 0
je 0x4730b6
push str._r_nAccept_Encoding:_gzip_r_n
call fcn.00405dd0
add esp, 4
push eax
push str._r_nAccept_Encoding:_gzip_r_n
jmp 0x4730c9
push str._r_n_r_n
call fcn.00405dd0
add esp, 4
push eax
push str._r_n_r_n
lea ecx, [ebp - 0x24c]
call fcn.00406160
mov edi, dword [ebp - 0x310]
mov ecx, edi
call fcn.0040cdb0
test al, al
jne 0x47314c
push 0x6d64b8
lea ecx, [ebp - 0x234]
call fcn.00405880
mov byte [ebp - 4], 4
mov ecx, edi
call fcn.004028e0
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x47310a
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x234]
call fcn.00406160
lea ecx, [ebp - 0x234]
call fcn.004028e0
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x47312e
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x24c]
call fcn.00406160
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x234]
call fcn.00405870
mov eax, dword [ebp - 0x2fc]
mov edi, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x214], eax
cmp edi, eax
je 0x473271
lea ecx, [ebp - 0x234]
call fcn.004028e0
mov esi, eax
push edi
mov edx, 0x6d6410
lea ecx, [ebp - 0x264]
call fcn.0040d1e0
add esp, 4
mov byte [ebp - 4], 5
mov edx, eax
push 0x6d64e0
lea ecx, [ebp - 0x2ac]
call fcn.0040d2c0
add esp, 4
mov dword [ebp - 0x310], eax
mov byte [ebp - 4], 7
lea ecx, [edi + 0x18]
call fcn.004028e0
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x4731bc
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
mov ecx, dword [ebp - 0x310]
call fcn.00406160
push eax
call fcn.00405f00
add esp, 4
lea ecx, [ebp - 0x294]
push eax
call fcn.00406120
or dword [ebp - 0x318], 1
lea ecx, [ebp - 0x234]
push 0x6d6410
mov edx, eax
call fcn.0040d2c0
add esp, 4
mov byte [ebp - 4], 8
and dword [ebp - 0x318], 0xfffffffe
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x294]
call fcn.00405870
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2ac]
call fcn.00405870
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x264]
call fcn.00405870
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x47323e
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x24c]
push eax
call fcn.00406160
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x234]
call fcn.00405870
add edi, 0x30
cmp edi, dword [ebp - 0x214]
jne 0x473173
mov esi, dword [ebp - 0x31c]
mov dword [ebp - 0x310], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call ebx
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x24c]
push dword [ebp + 0x10]
push dword [ebp - 0x320]
call fcn.004060c0
push eax
lea ecx, [ebp - 0x24c]
call fcn.00405860
mov edi, dword [ebp - 0x30c]
push eax
push edi
call fcn.0047e280
mov ecx, eax
call fcn.0047e710
test eax, eax
je 0x473b19
mov byte [ebp - 4], 3
push 0
push esi
call ebx
cmp byte [ebp + 0x1c], 0
mov byte [ebp - 0x2f5], 0
je 0x473338
mov edx, edi
lea ecx, [ebp - 0x294]
call fcn.00472610
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x234]
call fcn.0047f840
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x234]
call fcn.00405860
mov edx, str.gzip
mov ecx, eax
call fcn.004d6390
mov byte [ebp - 0x2f5], al
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x234]
call fcn.00405870
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x294]
call fcn.00405870
mov ecx, dword [ebp - 0x324]
call fcn.004028e0
mov edi, eax
mov byte [ebp - 0x2ed], 0
mov dword [ebp - 0x320], edi
cmp dword [edi + 0x14], 0x10
mov dword [edi + 0x10], 0
jb 0x473361
mov eax, dword [edi]
lea ecx, [ebp - 0x2ed]
push ecx
push eax
call fcn.004075c0
add esp, 8
nop dword [eax]
nop word [eax + eax]
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x31c], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call ebx
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x218]
push eax
push 0x1ff
lea eax, [ebp - 0x210]
push eax
push dword [ebp - 0x30c]
call fcn.0047e280
mov ecx, eax
call fcn.0047ec00
test eax, eax
je 0x473b19
push 0
push esi
call ebx
mov ebx, dword [ebp - 0x218]
cmp ebx, 0x200
jae 0x473b0a
test ebx, ebx
je 0x473462
mov byte [ebp + ebx - 0x210], 0
mov edx, dword [edi + 0x14]
mov eax, edx
mov ecx, dword [edi + 0x10]
sub eax, ecx
cmp ebx, eax
ja 0x473441
lea eax, [ebx + ecx]
mov dword [edi + 0x10], eax
mov eax, edi
cmp edx, 0x10
jb 0x47340b
mov eax, dword [edi]
lea edi, [eax + ecx]
push ebx
lea eax, [ebp - 0x210]
push eax
push edi
call fcn.0041d1a0
add esp, 0xc
mov byte [ebp - 0x2ed], 0
lea eax, [ebp - 0x2ed]
push eax
lea eax, [edi + ebx]
push eax
call fcn.004075c0
mov edi, dword [ebp - 0x320]
add esp, 8
jmp 0x473462
mov ecx, dword [ebp - 0x324]
lea eax, [ebp - 0x210]
push ebx
push eax
mov byte [ebp - 0x310], 0
push dword [ebp - 0x310]
push ebx
call fcn.00421160
mov byte [ebp - 4], 3
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push 0
push esi
call ebx
cmp dword [ebp - 0x218], 0
ja 0x473380
cmp byte [ebp - 0x2f5], 0
je 0x4734ce
lea ecx, [ebp - 0x234]
call fcn.0041ec80
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x234]
mov ebx, dword [ebp - 0x324]
mov ecx, ebx
call fcn.00472780
test al, al
je 0x4735f8
lea eax, [ebp - 0x234]
mov ecx, ebx
push eax
call fcn.00456a90
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x234]
call fcn.0040ce30
mov ebx, dword [ebp - 0x308]
push ecx
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
call fcn.00441eb0
mov eax, dword [ebx]
add esp, 4
mov dword [ebx + 4], eax
mov dword [ebp - 0x2fc], 0x200
push 0x402
call fcn.006354e1
mov edi, eax
mov dword [ebp - 0x21c], 0
mov ecx, 0x200
mov dword [ebp - 0x2f4], edi
add esp, 4
xor eax, eax
mov word [edi], ax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x2b0], ecx
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x320], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x2b0]
push eax
push edi
push 0x2b
push dword [ebp - 0x30c]
call fcn.0047e280
mov ecx, eax
call fcn.0047e5d0
mov edi, eax
test edi, edi
setne byte [ebp - 0x2ed]
mov byte [ebp - 4], 3
push 0
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
test edi, edi
jne 0x47363f
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [ebp - 0x2fc]
cmp eax, ecx
jbe 0x47364b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x47363f
mov edi, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x2f4]
inc edi
push eax
mov dword [ebp - 0x2fc], edi
call fcn.00634f16
xor ecx, ecx
lea eax, [edi + 1]
add esp, 4
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.006354e1
mov ecx, dword [ebp - 0x2fc]
mov edi, eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x21c], eax
jmp 0x47350c
mov ecx, dword [ebp - 0x2fc]
mov byte [ebp - 0x2ed], 0
mov dword [ecx + 0x18], 0x2f8f
cmp dword [edi + 0x14], 0x10
mov dword [edi + 0x10], 0
jb 0x47361b
mov edi, dword [edi]
lea eax, [ebp - 0x2ed]
push eax
push edi
call fcn.004075c0
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x234]
call fcn.0040ce30
jmp 0x473b31
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [ebp - 0x2fc]
cmp byte [ebp - 0x2ed], 0
je 0x473ac2
mov edi, dword [ebp - 0x2f4]
cmp eax, ecx
ja 0x473515
xor ecx, ecx
mov word [edi + eax*2], cx
lea ecx, [ebp - 0x264]
push edi
call fcn.00405880
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x264]
call fcn.0040cdb0
test al, al
jne 0x473aa8
lea ecx, [ebp - 0x2ac]
call fcn.004058d0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x27c]
call fcn.004058d0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x264]
push 0
push 0x3d
call fcn.00473b90
mov dword [ebp - 0x308], eax
cmp eax, 0xffffffff
je 0x473755
push eax
push 0
lea eax, [ebp - 0x36c]
push eax
lea ecx, [ebp - 0x264]
call fcn.0043fc80
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2ac]
push eax
call fcn.0040cdf0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x36c]
call fcn.00405870
mov eax, dword [ebp - 0x308]
lea ecx, [ebp - 0x264]
inc eax
mov dword [ebp - 0x308], eax
call fcn.004060c0
mov ecx, dword [ebp - 0x308]
cmp ecx, eax
jae 0x473755
push 0xffffffffffffffff
push ecx
lea eax, [ebp - 0x384]
push eax
lea ecx, [ebp - 0x264]
call fcn.0043fc80
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x264]
push eax
call fcn.0040cdf0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x384]
call fcn.00405870
push 0
push 0x3b
lea ecx, [ebp - 0x264]
call fcn.00473b90
lea ecx, [ebp - 0x264]
cmp eax, 0xffffffff
je 0x47379f
push eax
push 0
lea eax, [ebp - 0x39c]
push eax
call fcn.0043fc80
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x27c]
push eax
call fcn.0040cdf0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x39c]
call fcn.00405870
jmp 0x4737d2
call fcn.004028e0
lea ecx, [ebp - 0x27c]
cmp ecx, eax
je 0x4737d2
lea ecx, [ebp - 0x264]
call fcn.004028e0
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x4737c3
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x27c]
call fcn.00405b20
mov edx, 0x6d5880
lea ecx, [ebp - 0x2ac]
call fcn.004d6530
mov edx, 0x6d5880
lea ecx, [ebp - 0x2ac]
call fcn.004d65b0
mov edx, 0x6d5880
lea ecx, [ebp - 0x27c]
call fcn.004d6530
mov edx, 0x6d5880
lea ecx, [ebp - 0x27c]
call fcn.004d65b0
lea ecx, [ebp - 0x2ac]
call fcn.0040cdb0
test al, al
jne 0x473a8a
lea ecx, [ebp - 0x27c]
call fcn.0040cdb0
test al, al
jne 0x473a8a
push str.http:__www.2345.com_
lea ecx, [ebp - 0x234]
call fcn.00405880
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x27c]
call fcn.004028e0
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x473861
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x234]
call fcn.00406160
xorps xmm0, xmm0
mov dword [ebp - 0x2ec], 0x3c
lea ecx, [ebp - 0x234]
movlpd qword [ebp - 0x2e8], xmm0
movlpd qword [ebp - 0x2e0], xmm0
movlpd qword [ebp - 0x2d8], xmm0
movlpd qword [ebp - 0x2d0], xmm0
movlpd qword [ebp - 0x2c8], xmm0
movlpd qword [ebp - 0x2c0], xmm0
movlpd qword [ebp - 0x2b8], xmm0
call fcn.004060c0
xor ecx, ecx
mov edx, 2
lea edi, [eax + 0x20]
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.006354e1
add esp, 4
mov dword [ebp - 0x2b8], eax
lea ecx, [edi + edi]
push ecx
push 0
push eax
call fcn.0064d010
add esp, 0xc
mov dword [ebp - 0x310], esi
lea eax, [edi - 1]
mov dword [ebp - 0x2b4], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x2ec]
push eax
push ecx
lea ecx, [ebp - 0x234]
call fcn.004060c0
push eax
lea ecx, [ebp - 0x234]
call fcn.00405860
push eax
call fcn.0047e280
mov ecx, eax
call fcn.0047e8e0
mov edi, eax
mov byte [ebp - 4], 0x18
push 0
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
test edi, edi
je 0x4739be
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0x294]
call fcn.00405880
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x294]
call fcn.0040cdb0
test al, al
jne 0x4739af
lea eax, [ebp - 0x31c]
push eax
lea ecx, [ebp - 0x294]
call fcn.004500d0
lea ecx, [ebp - 0x294]
push dword [eax]
lea eax, [ebp - 0x214]
push eax
call fcn.00450100
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x27c]
call fcn.0046ae20
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x294]
call fcn.00405870
push dword [ebp - 0x2b8]
call fcn.00634f16
add esp, 4
lea ecx, [ebp - 0x2ac]
call fcn.004028e0
push eax
lea ecx, [ebp - 0x354]
call fcn.00414330
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x27c]
call fcn.004028e0
push eax
lea ecx, [ebp - 0x33c]
call fcn.00414330
mov byte [ebp - 4], 0x1d
mov eax, dword [ebx + 4]
cmp dword [ebx + 8], eax
je 0x473a48
push eax
push 0x30
call fcn.004024a0
add esp, 8
mov edi, eax
lea eax, [ebp - 0x354]
mov dword [ebp - 0x308], edi
mov ecx, edi
push eax
call fcn.00406120
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x33c]
push eax
lea ecx, [edi + 0x18]
call fcn.00406120
mov byte [ebp - 4], 0x1d
add dword [ebx + 4], 0x30
jmp 0x473a57
lea ecx, [ebp - 0x354]
push ecx
push eax
mov ecx, ebx
call fcn.0046ae70
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x33c]
call fcn.00405870
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x354]
call fcn.00405870
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x234]
call fcn.00405870
mov edi, dword [ebp - 0x2f4]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x27c]
call fcn.00405870
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2ac]
call fcn.00405870
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x264]
call fcn.00405870
mov ecx, dword [ebp - 0x2fc]
jmp 0x473515
mov eax, dword [ebp - 0x2f4]
xor ecx, ecx
push eax
mov word [eax], cx
call fcn.00634f16
add esp, 4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x24c]
call fcn.00405870
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x304]
call fcn.0042aba0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x300]
call fcn.0042aba0
mov al, 1
jmp 0x473b63
mov byte [ebp - 4], 3
push 0
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
jmp 0x473b31
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x2fc]
mov dword [ecx + 0x18], eax
mov byte [ebp - 4], 3
push 0
push esi
call ebx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x24c]
call fcn.00405870
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x304]
call fcn.0042aba0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x300]
call fcn.0042aba0
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00634bf3
mov esp, ebp
pop ebp
ret 0x20