Function at 0x47c2c4
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x1a
push 0
push 0
dec ecx
jne 0x47c2cc
push ebx
push esi
push edi
mov eax, 0x47bdd4
call fcn.00406a7c
xor eax, eax
push ebp
push 0x47d330
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x481ed8]
mov byte [eax], 0
mov eax, 0x48481c
call fcn.004047d8
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.00402ac8
cmp dword [ebp - 0x14], 0
jne 0x47c31a
xor eax, eax
call fcn.0040471c
lea edx, [ebp - 0x18]
mov eax, 1
call fcn.00402ac8
cmp dword [ebp - 0x18], 0
je 0x47c33c
mov edx, 0x48481c
mov eax, 1
call fcn.00402ac8
mov eax, dword [0x48481c]
call fcn.004092fc
test al, al
jne 0x47c351
xor eax, eax
call fcn.0040471c
call fcn.0047bc34
mov byte [0x485c90], 0
xor eax, eax
mov dword [0x485844], eax
mov eax, 0x485c68
call fcn.004047d8
mov eax, 0x485c6c
call fcn.004047d8
mov eax, 0x485838
call fcn.004047d8
mov eax, 0x485824
call fcn.004047d8
mov eax, 0x48583c
call fcn.004047d8
mov eax, 0x485830
call fcn.004047d8
xor eax, eax
mov dword [0x485850], eax
xor eax, eax
mov dword [0x485848], eax
xor eax, eax
mov dword [0x48584c], eax
mov eax, 0x485c64
call fcn.004047d8
mov byte [0x485c75], 0
mov eax, 0x485c78
call fcn.004047d8
mov eax, 0x485c7c
call fcn.004047d8
mov byte [0x485c76], 0
mov eax, 0x485c54
mov edx, dword [0x482384]
mov dl, byte [edx]
call fcn.004049c0
lea edx, [ebp - 0x1c]
mov eax, 2
call fcn.00402ac8
mov eax, dword [ebp - 0x1c]
call fcn.0047b548
lea edx, [ebp - 0x20]
mov eax, 3
call fcn.00402ac8
mov eax, dword [ebp - 0x20]
call fcn.0047b548
lea edx, [ebp - 0x24]
mov eax, 4
call fcn.00402ac8
mov eax, dword [ebp - 0x24]
call fcn.0047b548
lea edx, [ebp - 0x28]
mov eax, 5
call fcn.00402ac8
mov eax, dword [ebp - 0x28]
call fcn.0047b548
lea edx, [ebp - 0x2c]
mov eax, 6
call fcn.00402ac8
mov eax, dword [ebp - 0x2c]
call fcn.0047b548
lea edx, [ebp - 0x30]
mov eax, 7
call fcn.00402ac8
mov eax, dword [ebp - 0x30]
call fcn.0047b548
lea edx, [ebp - 0x34]
mov eax, 8
call fcn.00402ac8
mov eax, dword [ebp - 0x34]
call fcn.0047b548
lea edx, [ebp - 0x38]
mov eax, 9
call fcn.00402ac8
mov eax, dword [ebp - 0x38]
call fcn.0047b548
lea edx, [ebp - 0x3c]
mov eax, 0xa
call fcn.00402ac8
mov eax, dword [ebp - 0x3c]
call fcn.0047b548
lea edx, [ebp - 0x40]
mov eax, 0xb
call fcn.00402ac8
mov eax, dword [ebp - 0x40]
call fcn.0047b548
lea edx, [ebp - 0x44]
mov eax, 0xc
call fcn.00402ac8
mov eax, dword [ebp - 0x44]
call fcn.0047b548
lea edx, [ebp - 0x48]
mov eax, 0xd
call fcn.00402ac8
mov eax, dword [ebp - 0x48]
call fcn.0047b548
lea edx, [ebp - 0x4c]
mov eax, 0xe
call fcn.00402ac8
mov eax, dword [ebp - 0x4c]
call fcn.0047b548
lea edx, [ebp - 0x50]
mov eax, 0xf
call fcn.00402ac8
mov eax, dword [ebp - 0x50]
call fcn.0047b548
cmp dword [0x485838], 0
jne 0x47c531
mov eax, 0x485838
mov edx, 0x47d348
call fcn.0040482c
cmp dword [0x485824], 0
jne 0x47c549
mov eax, 0x485824
mov edx, 0x47d354
call fcn.0040482c
cmp byte [0x485c90], 0
je 0x47c8c2
mov eax, dword [0x485c7c]
call fcn.004092fc
test al, al
jne 0x47c89a
mov eax, 0x485c80
call fcn.004047d8
lea edx, [ebp - 0x54]
mov eax, dword [0x485c7c]
call fcn.0047ad78
mov edx, dword [ebp - 0x54]
mov eax, 0x47d360
call fcn.00404ddc
test eax, eax
jle 0x47c66d
push dword [0x485c8c]
push 0x47d370
push 0x47d37c
lea eax, [ebp - 0x58]
mov edx, 3
call fcn.00404b58
mov edx, dword [ebp - 0x58]
mov eax, 0x48447c
call fcn.00402e3c
mov eax, 0x48447c
call fcn.00402bd8
call fcn.0040297c
test eax, eax
jne 0x47c66d
xor edx, edx
mov eax, 0x48447c
call fcn.00404eb4
call fcn.004034a4
call fcn.004028d0
mov eax, 0x48447c
call fcn.00402f04
call fcn.004028d0
push dword [0x485c8c]
push 0x47d370
push 0x47d37c
lea eax, [ebp - 0x60]
mov edx, 3
call fcn.00404b58
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x5c]
call fcn.0047ba80
mov edx, dword [ebp - 0x5c]
mov eax, 0x485c80
call fcn.0040482c
push dword [0x485c8c]
push 0x47d370
push 0x47d37c
lea eax, [ebp - 0x64]
mov edx, 3
call fcn.00404b58
mov eax, dword [ebp - 0x64]
call fcn.0040930c
cmp dword [0x485c80], 0
je 0x47c66d
mov eax, 0x485c7c
mov edx, dword [0x485c80]
call fcn.0040482c
lea edx, [ebp - 0x68]
mov eax, dword [0x485c7c]
call fcn.0047ad78
mov edx, dword [ebp - 0x68]
mov eax, 0x47d38c
call fcn.00404ddc
test eax, eax
jle 0x47c768
push dword [0x485c8c]
push 0x47d370
push 0x47d39c
lea eax, [ebp - 0x6c]
mov edx, 3
call fcn.00404b58
mov edx, dword [ebp - 0x6c]
mov eax, 0x48447c
call fcn.00402e3c
mov eax, 0x48447c
call fcn.00402bd8
call fcn.0040297c
test eax, eax
jne 0x47c768
xor edx, edx
mov eax, 0x48447c
call fcn.00404eb4
call fcn.004034a4
call fcn.004028d0
mov eax, 0x48447c
call fcn.00402f04
call fcn.004028d0
push dword [0x485c8c]
push 0x47d370
push 0x47d39c
lea eax, [ebp - 0x74]
mov edx, 3
call fcn.00404b58
mov eax, dword [ebp - 0x74]
lea edx, [ebp - 0x70]
call fcn.0047ba80
mov edx, dword [ebp - 0x70]
mov eax, 0x485c80
call fcn.0040482c
push dword [0x485c8c]
push 0x47d370
push 0x47d39c
lea eax, [ebp - 0x78]
mov edx, 3
call fcn.00404b58
mov eax, dword [ebp - 0x78]
call fcn.0040930c
cmp dword [0x485c80], 0
je 0x47c768
mov eax, 0x485c7c
mov edx, dword [0x485c80]
call fcn.0040482c
cmp dword [0x485c80], 0
jne 0x47c78b
lea edx, [ebp - 0x7c]
mov eax, dword [0x485c7c]
call fcn.0047ba80
mov edx, dword [ebp - 0x7c]
mov eax, 0x485c80
call fcn.0040482c
mov eax, dword [0x485c80]
call fcn.004092fc
test al, al
jne 0x47c88a
push dword [0x485c8c]
push 0x47d370
push 0x47d3ac
lea eax, [ebp - 0x80]
mov edx, 3
call fcn.00404b58
mov edx, dword [ebp - 0x80]
mov eax, 0x48447c
call fcn.00402e3c
mov eax, 0x48447c
call fcn.00402bd8
call fcn.0040297c
test eax, eax
jne 0x47c89a
xor edx, edx
mov eax, 0x48447c
call fcn.00404eb4
call fcn.004034a4
call fcn.004028d0
mov eax, 0x48447c
call fcn.00402f04
call fcn.004028d0
push dword [0x485c8c]
push 0x47d370
push 0x47d3ac
lea eax, [ebp - 0x88]
mov edx, 3
call fcn.00404b58
mov eax, dword [ebp - 0x88]
lea edx, [ebp - 0x84]
call fcn.0047ba80
mov edx, dword [ebp - 0x84]
mov eax, 0x485c80
call fcn.0040482c
push dword [0x485c8c]
push 0x47d370
push 0x47d3ac
lea eax, [ebp - 0x8c]
mov edx, 3
call fcn.00404b58
mov eax, dword [ebp - 0x8c]
call fcn.0040930c
cmp dword [0x485c80], 0
je 0x47c89a
mov eax, 0x485c7c
mov edx, dword [0x485c80]
call fcn.0040482c
jmp 0x47c89a
mov eax, 0x485c7c
mov edx, dword [0x485c80]
call fcn.0040482c
push 1
push 0
mov eax, dword [0x48481c]
call fcn.00404c98
push eax
mov eax, dword [0x485c7c]
call fcn.00404c98
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x47d312
mov edx, dword [0x48481c]
mov eax, 0x48447c
call fcn.00402e3c
mov eax, 0x48447c
call fcn.00402bcc
call fcn.0040297c
test eax, eax
jne 0x47d312
mov edx, 0x484820
mov ecx, 0x1000
mov eax, 0x48447c
call fcn.00403294
mov ebx, 0x3e8
mov eax, 0x485860
mov byte [eax], 1
inc eax
dec ebx
jne 0x47c907
xor eax, eax
mov dword [0x485820], eax
jmp 0x47cab3
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47caca
mov edx, 0x484818
mov eax, 0x48447c
call fcn.004031f8
mov eax, 0x48447c
call fcn.00403264
call fcn.004028d0
inc dword [0x485820]
mov eax, dword [0x485820]
cmp eax, dword [0x485844]
jle 0x47cab3
cmp dword [0x484818], 0
je 0x47cab3
xor ebx, ebx
jmp 0x47caa6
lea ecx, [ebp - 0x90]
mov eax, 0x484818
mov dl, 0x3b
call fcn.0047aa28
mov edx, dword [ebp - 0x90]
mov eax, 0x485854
call fcn.0040482c
inc ebx
mov eax, dword [0x482384]
mov al, byte [eax]
sub al, 0x2c
je 0x47ca0b
sub al, 2
jne 0x47ca1f
jmp 0x47c9cd
mov edx, dword [0x485854]
mov eax, 0x47d3bc
call fcn.00404ddc
mov esi, eax
mov eax, 0x485854
call fcn.00404cf0
mov edx, dword [0x482384]
mov dl, byte [edx]
mov byte [eax + esi - 1], dl
mov edx, dword [0x485854]
mov eax, 0x47d3bc
call fcn.00404ddc
test eax, eax
jg 0x47c9a5
jmp 0x47ca1f
mov edx, dword [0x485854]
mov eax, 0x47d3c8
call fcn.00404ddc
mov esi, eax
mov eax, 0x485854
call fcn.00404cf0
mov edx, dword [0x482384]
mov dl, byte [edx]
mov byte [eax + esi - 1], dl
mov edx, dword [0x485854]
mov eax, 0x47d3c8
call fcn.00404ddc
test eax, eax
jg 0x47c9e3
cmp dword [0x485854], 0
je 0x47caa6
mov edx, 0x485c48
mov eax, dword [0x485854]
call fcn.0040b004
test al, al
je 0x47ca9f
lea eax, [ebp - 0x94]
mov edx, dword [0x482384]
mov dl, byte [edx]
call fcn.004049c0
mov eax, dword [ebp - 0x94]
mov edx, dword [0x485854]
call fcn.00404ddc
test eax, eax
jne 0x47caa6
mov eax, dword [0x485854]
call fcn.00404a98
cmp eax, 0xb
jg 0x47ca9f
lea eax, [ebp - 0x98]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [0x485854]
call fcn.00404cf8
mov eax, dword [ebp - 0x98]
mov edx, 0x47d3d4
call fcn.00404be4
jne 0x47caa6
mov byte [ebx + 0x48585f], 0
cmp dword [0x484818], 0
jne 0x47c971
mov eax, 0x48447c
call fcn.0040306c
call fcn.004028d0
test al, al
je 0x47c91a
mov eax, 0x48447c
call fcn.00402f04
call fcn.004028d0
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47d312
mov edx, dword [0x48481c]
mov eax, 0x48447c
call fcn.00402e3c
mov eax, 0x48447c
call fcn.00402bcc
call fcn.0040297c
test eax, eax
jne 0x47d312
mov edx, 0x484820
mov ecx, 0x1000
mov eax, 0x48447c
call fcn.00403294
lea eax, [ebp - 0xa4]
call fcn.0047ba14
mov eax, dword [ebp - 0xa4]
lea edx, [ebp - 0xa0]
call fcn.00408b48
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x9c]
call fcn.0040890c
mov edx, dword [ebp - 0x9c]
mov eax, 0x485c58
call fcn.0040482c
mov edx, dword [0x485c58]
mov eax, 0x47d360
call fcn.00404ddc
test eax, eax
setg byte [0x485c5c]
cmp dword [0x485c64], 0
je 0x47cba2
mov eax, dword [0x485c64]
mov al, byte [eax]
sub al, 0x30
je 0x47cb92
dec al
je 0x47cb9b
jmp 0x47cba2
mov byte [0x485c5c], 0
jmp 0x47cba2
mov byte [0x485c5c], 0
xor eax, eax
mov dword [0x485820], eax
mov byte [0x48585c], 0
mov edx, 0x47d3e0
mov eax, 0x484648
call fcn.00402e3c
mov eax, 0x484648
call fcn.00402bd8
call fcn.0040297c
test eax, eax
jne 0x47cbd9
mov byte [0x48585c], 1
mov eax, 0x485840
call fcn.004047d8
mov byte [0x485c74], 1
cmp byte [0x485c76], 0
jne 0x47cc2e
mov eax, dword [0x482190]
mov eax, dword [eax]
mov edx, 0x47d3fc
call fcn.0043b280
mov ecx, dword [0x48210c]
mov eax, dword [0x482190]
mov eax, dword [eax]
mov edx, dword [0x47b1c8]
call fcn.0043b688
push 0
mov eax, dword [0x482190]
mov eax, dword [eax]
mov eax, dword [eax + 0x30]
push eax
call sub.user32.dll_ShowWindow
mov eax, 0x485c84
call fcn.004047d8
jmp 0x47d230
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47d247
mov edx, 0x484818
mov eax, 0x48447c
call fcn.004031f8
mov eax, 0x48447c
call fcn.00403264
call fcn.004028d0
lea edx, [ebp - 0xa8]
mov eax, dword [0x484818]
call fcn.00408b48
mov edx, dword [ebp - 0xa8]
mov eax, 0x484818
call fcn.0040482c
inc dword [0x485820]
mov eax, dword [0x485820]
cmp eax, dword [0x485844]
jle 0x47d230
cmp dword [0x484818], 0
je 0x47d230
cmp byte [0x485c76], 0
jne 0x47cd5d
cmp byte [0x485c74], 0
je 0x47cd08
cmp dword [0x485c68], 0
je 0x47cd08
jmp 0x47ccff
lea ecx, [ebp - 0xac]
mov eax, 0x485c68
mov dl, 0x2c
call fcn.0047aa28
mov edx, dword [ebp - 0xac]
mov eax, 0x485858
call fcn.0040482c
mov eax, dword [0x485858]
call fcn.0047b020
call fcn.0047b408
cmp dword [0x485c68], 0
jne 0x47ccce
cmp dword [0x485c6c], 0
je 0x47cd5d
mov eax, 0x485c70
mov edx, dword [0x485c6c]
call fcn.0040482c
jmp 0x47cd54
lea ecx, [ebp - 0xb0]
mov eax, 0x485c70
mov dl, 0x2c
call fcn.0047aa28
mov edx, dword [ebp - 0xb0]
mov eax, 0x485858
call fcn.0040482c
mov eax, dword [0x485858]
call fcn.0047b020
call fcn.0047b408
cmp dword [0x485c70], 0
jne 0x47cd23
mov byte [0x485c74], 0
mov eax, 0x485840
mov edx, dword [0x48583c]
call fcn.0040482c
xor edi, edi
jmp 0x47d223
lea ecx, [ebp - 0xb4]
mov eax, 0x484818
mov dl, 0x3b
call fcn.0047aa28
mov edx, dword [ebp - 0xb4]
mov eax, 0x485854
call fcn.0040482c
inc edi
cmp byte [edi + 0x48585f], 1
jne 0x47ce42
mov eax, dword [0x485c54]
mov al, byte [eax]
sub al, 0x2c
je 0x47ce29
sub al, 2
jne 0x47cf12
jmp 0x47cde8
mov edx, dword [0x485854]
mov eax, 0x47d3bc
call fcn.00404ddc
mov ebx, eax
mov eax, 0x485854
call fcn.00404cf0
mov edx, dword [0x485c54]
mov dl, byte [edx]
mov byte [eax + ebx - 1], dl
mov edx, dword [0x485854]
mov eax, 0x47d3bc
call fcn.00404ddc
test eax, eax
jg 0x47cdc0
jmp 0x47cf12
mov edx, dword [0x485854]
mov eax, 0x47d3c8
call fcn.00404ddc
mov ebx, eax
mov eax, 0x485854
call fcn.00404cf0
mov edx, dword [0x485c54]
mov dl, byte [edx]
mov byte [eax + ebx - 1], dl
mov edx, dword [0x485854]
mov eax, 0x47d3c8
call fcn.00404ddc
test eax, eax
jg 0x47ce01
jmp 0x47cf12
cmp byte [0x485c5c], 0
je 0x47cf12
mov eax, 0x485c60
mov edx, dword [0x485854]
call fcn.0040482c
mov eax, dword [0x482384]
mov al, byte [eax]
sub al, 0x2c
je 0x47ced6
sub al, 2
jne 0x47ceea
jmp 0x47ce98
mov edx, dword [0x485c60]
mov eax, 0x47d3bc
call fcn.00404ddc
mov ebx, eax
mov eax, 0x485c60
call fcn.00404cf0
mov edx, dword [0x482384]
mov dl, byte [edx]
mov byte [eax + ebx - 1], dl
mov edx, dword [0x485c60]
mov eax, 0x47d3bc
call fcn.00404ddc
test eax, eax
jg 0x47ce70
jmp 0x47ceea
mov edx, dword [0x485c60]
mov eax, 0x47d3c8
call fcn.00404ddc
mov ebx, eax
mov eax, 0x485c60
call fcn.00404cf0
mov edx, dword [0x482384]
mov dl, byte [edx]
mov byte [eax + ebx - 1], dl
mov edx, dword [0x485c60]
mov eax, 0x47d3c8
call fcn.00404ddc
test eax, eax
jg 0x47ceae
mov edx, 0x485c48
mov eax, dword [0x485c60]
call fcn.0040b004
test al, al
je 0x47cf12
mov eax, 0x485854
mov ecx, dword [0x485854]
mov edx, 0x47d414
call fcn.00404ae4
cmp dword [0x484818], 0
jne 0x47d044
cmp byte [0x485c76], 0
jne 0x47d01a
mov eax, dword [0x485854]
call fcn.00404a98
mov esi, eax
test esi, esi
jle 0x47cf5d
mov ebx, 1
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47cf5d
mov eax, dword [0x485854]
mov al, byte [eax + ebx - 1]
call fcn.0047b444
inc ebx
dec esi
jne 0x47cf41
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47d230
cmp dword [0x485840], 0
je 0x47cf98
lea ecx, [ebp - 0xb8]
mov eax, 0x485840
mov dl, 0x3b
call fcn.0047aa28
mov edx, dword [ebp - 0xb8]
mov eax, 0x48582c
call fcn.0040482c
jmp 0x47cfa8
mov eax, 0x48582c
mov edx, dword [0x485824]
call fcn.0040482c
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47d230
jmp 0x47cff3
lea ecx, [ebp - 0xbc]
mov eax, 0x48582c
mov dl, 0x2c
call fcn.0047aa28
mov edx, dword [ebp - 0xbc]
mov eax, 0x485858
call fcn.0040482c
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47cffc
mov eax, dword [0x485858]
call fcn.0047b020
call fcn.0047b408
cmp dword [0x48582c], 0
jne 0x47cfb8
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47d230
mov eax, dword [0x485848]
push eax
call sub.kernel32.dll_Sleep_1
jmp 0x47d223
push dword [0x485c84]
push dword [0x485854]
push 0x47d420
push 0x47d42c
mov eax, 0x485c84
mov edx, 4
call fcn.00404b58
jmp 0x47d223
cmp byte [0x485c76], 0
jne 0x47d131
mov eax, dword [0x485854]
call fcn.00404a98
mov esi, eax
test esi, esi
jle 0x47d082
mov ebx, 1
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47d082
mov eax, dword [0x485854]
mov al, byte [eax + ebx - 1]
call fcn.0047b444
inc ebx
dec esi
jne 0x47d066
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47d230
cmp dword [0x485840], 0
je 0x47d0bd
lea ecx, [ebp - 0xc0]
mov eax, 0x485840
mov dl, 0x3b
call fcn.0047aa28
mov edx, dword [ebp - 0xc0]
mov eax, 0x485828
call fcn.0040482c
jmp 0x47d0cd
mov eax, 0x485828
mov edx, dword [0x485838]
call fcn.0040482c
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47d230
jmp 0x47d118
lea ecx, [ebp - 0xc4]
mov eax, 0x485828
mov dl, 0x2c
call fcn.0047aa28
mov edx, dword [ebp - 0xc4]
mov eax, 0x485858
call fcn.0040482c
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47d121
mov eax, dword [0x485858]
call fcn.0047b020
call fcn.0047b408
cmp dword [0x485828], 0
jne 0x47d0dd
mov eax, dword [0x485848]
push eax
call sub.kernel32.dll_Sleep_1
jmp 0x47d223
mov eax, 0x485c88
call fcn.004047d8
mov eax, dword [0x485c78]
mov edx, 0x47d3bc
call fcn.00404be4
jne 0x47d160
mov eax, 0x485c88
mov edx, 0x47d3bc
call fcn.0040482c
jmp 0x47d202
cmp dword [0x485c78], 0
je 0x47d1f3
mov eax, 0x485828
mov edx, dword [0x485c78]
call fcn.0040482c
jmp 0x47d1e8
lea ecx, [ebp - 0xc8]
mov eax, 0x485828
mov dl, 0x2c
call fcn.0047aa28
mov edx, dword [ebp - 0xc8]
mov eax, 0x485858
call fcn.0040482c
mov eax, dword [0x485858]
call fcn.0047b0f0
test al, al
jbe 0x47d1d8
mov eax, dword [0x485858]
call fcn.0047b0f0
mov edx, eax
lea eax, [ebp - 0xcc]
call fcn.004049c0
mov edx, dword [ebp - 0xcc]
mov eax, 0x485c88
call fcn.00404aa0
jmp 0x47d1e8
mov eax, 0x485c88
mov edx, dword [0x485858]
call fcn.00404aa0
cmp dword [0x485828], 0
jne 0x47d17f
jmp 0x47d202
mov eax, 0x485c88
mov edx, 0x47d438
call fcn.0040482c
push dword [0x485c84]
push dword [0x485854]
push dword [0x485c88]
mov eax, 0x485c84
mov edx, 3
call fcn.00404b58
cmp dword [0x484818], 0
jne 0x47cd7b
mov eax, 0x48447c
call fcn.0040306c
call fcn.004028d0
test al, al
je 0x47cc3d
mov eax, 0x48447c
call fcn.00402f04
call fcn.004028d0
xor eax, eax
push ebp
push 0x47d27e
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0042d618
mov edx, dword [0x485c84]
call fcn.0042d2ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47d288
mov eax, dword [0x481ed8]
cmp byte [eax], 0
jne 0x47d2f0
cmp byte [0x485c76], 0
jne 0x47d2f0
mov eax, 0x485834
mov edx, dword [0x485830]
call fcn.0040482c
cmp dword [0x485834], 0
je 0x47d2f0
jmp 0x47d2e7
lea ecx, [ebp - 0xd0]
mov eax, 0x485834
mov dl, 0x2c
call fcn.0047aa28
mov edx, dword [ebp - 0xd0]
mov eax, 0x485858
call fcn.0040482c
mov eax, dword [0x485858]
call fcn.0047b020
call fcn.0047b408
cmp dword [0x485834], 0
jne 0x47d2b6
cmp byte [0x48585c], 0
je 0x47d312
mov eax, 0x484648
call fcn.00402f04
call fcn.004028d0
mov eax, 0x47d3e0
call fcn.0040930c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47d337
lea eax, [ebp - 0xd0]
mov edx, 0x30
call fcn.004047fc
ret