Function at 0x47d360
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5cdee8
mov eax, dword fs:[0]
push eax
sub esp, 0x214
mov eax, dword [0x671580]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1c0], edi
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x1b8], ecx
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
je 0x47eaf6
xorps xmm0, xmm0
mov dword [ebp - 0x9c], 0
movq qword [ebp - 0xa4], xmm0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 4], 0
mov ecx, edi
call fcn.0047ec90
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], edi
test edi, edi
je 0x47d405
mov eax, dword [edi]
test eax, eax
je 0x47d405
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 1
lea ecx, [edi + 4]
lea eax, [ebp - 0xa4]
cmp eax, ecx
je 0x47d43b
mov esi, dword [ecx]
mov eax, 0x2aaaaaab
mov ecx, dword [ecx + 4]
sub ecx, esi
imul ecx
lea ecx, [ebp - 0xa4]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push esi
call fcn.00480090
mov byte [ebp - 4], 0
test edi, edi
je 0x47d457
mov eax, dword [edi]
test eax, eax
je 0x47d450
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x14], 0
call fcn.004607f0
movzx eax, al
shl eax, 8
add eax, 0x2001f
mov dword [ebp - 0x68], eax
mov eax, dword [edi + 0x20]
test eax, eax
je 0x47eae4
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x658f58
push eax
call esi
push 0x658f68
push dword [edi + 0x20]
mov dword [ebp - 0x64], eax
call esi
push 0x658fa8
push dword [edi + 0x20]
mov dword [ebp - 0x14], eax
call esi
push 0x658f8c
push dword [edi + 0x20]
mov dword [ebp - 0x6c], eax
call esi
mov esi, dword [ebp - 0x64]
mov dword [ebp - 0x1bc], eax
test esi, esi
je 0x47eae4
cmp dword [ebp - 0x14], 0
je 0x47eae4
cmp dword [ebp - 0x6c], 0
je 0x47eae4
test eax, eax
je 0x47eae4
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xa0]
je 0x47d900
push str.SOFTWAREMicrosoftWindowsCurrentVersionApplicationAssociationToasts
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x19c], 0
call fcn.0044ddd0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19c]
cmp dword [ebp - 0x16c], 7
lea eax, [ebp - 0x180]
push ecx
push dword [ebp - 0x68]
cmova eax, dword [ebp - 0x180]
push 0
push eax
push closesocket
call esi
test eax, eax
jne 0x47d8f1
mov esi, dword [ebp - 0xa4]
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0xa0]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x47d8db
xor eax, eax
mov dword [ebp - 0x18], eax
add eax, esi
lea ecx, [ebp - 0x98]
push eax
call fcn.0044de10
mov byte [ebp - 4], 3
xor esi, esi
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x47d5d7
mov edi, eax
nop word [eax + eax]
cmp dword [ebp - 0x84], 7
lea eax, [ebp - 0x98]
cmova eax, dword [ebp - 0x98]
movzx eax, word [eax + esi*2]
push eax
call fcn.004d9351
add esp, 4
movzx ecx, ax
cmp dword [ebp - 0x84], 7
lea eax, [ebp - 0x98]
cmova eax, dword [ebp - 0x98]
mov word [eax + esi*2], cx
inc esi
cmp esi, edi
jb 0x47d590
mov edi, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1b8]
xor ecx, ecx
mov dword [ebp - 0x1b4], ecx
mov ecx, dword [eax + 4]
mov esi, dword [eax]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x47d763
xor eax, eax
mov dword [ebp - 0x1a4], eax
nop dword [eax + eax]
add eax, esi
push eax
lea eax, [ebp - 0x38]
push 0x655c54
push eax
call fcn.00454750
mov byte [ebp - 4], 4
lea eax, [ebp - 0x38]
push eax
call fcn.00451590
mov esi, dword [ebp - 0x28]
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x88]
lea ecx, [ebp - 0x98]
add esp, 0x10
cmp dword [ebp - 0x24], 7
cmova eax, dword [ebp - 0x38]
cmp dword [ebp - 0x84], 7
push esi
cmova ecx, dword [ebp - 0x98]
push eax
push ecx
call fcn.0047b4d0
add esp, 0xc
cmp eax, 0xffffffff
je 0x47d677
add eax, esi
cmp eax, dword [ebp - 0x88]
je 0x47d70b
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x24]
cmp ecx, 7
jbe 0x47d6b5
mov edx, dword [ebp - 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47d6ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x1b8]
inc dword [ebp - 0x1b4]
add dword [ebp - 0x1a4], 0x18
mov ecx, dword [eax + 4]
mov esi, dword [eax]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x1b4], eax
jae 0x47d763
mov eax, dword [ebp - 0x1a4]
jmp 0x47d610
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x24]
cmp ecx, 7
jbe 0x47d749
mov edx, dword [ebp - 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47d73f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
mov byte [ebp - 4], 3
jmp 0x47d786
cmp dword [ebp - 0x84], 7
lea eax, [ebp - 0x98]
mov dword [ebp - 0x88], 0
cmova eax, dword [ebp - 0x98]
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x88], 0
mov esi, dword [ebp - 0x18]
je 0x47d841
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x98]
add eax, esi
cmp ecx, eax
je 0x47d7c0
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x47d7b3
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x98]
call fcn.0044def0
cmp dword [ebp - 0x84], 7
lea ecx, [ebp - 0x70]
push ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push ecx
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x70], 4
push ecx
lea eax, [ebp - 0x98]
mov dword [ebp - 0x74], 4
cmova eax, dword [ebp - 0x98]
push 0
push eax
push dword [ebp - 0x19c]
call dword [ebp - 0x14]
test eax, eax
jne 0x47d841
cmp dword [ebp - 0x74], 4
jne 0x47d841
cmp dword [ebp - 0x70], 4
jne 0x47d841
cmp dword [ebp - 0x1c], eax
je 0x47d841
cmp dword [ebp - 0x84], 7
lea ecx, [ebp - 0x1c]
push 4
push ecx
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x98]
cmova eax, dword [ebp - 0x98]
push 4
push 0
push eax
push dword [ebp - 0x19c]
call dword [ebp - 0x6c]
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x84]
cmp ecx, 7
jbe 0x47d885
mov edx, dword [ebp - 0x98]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47d87b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
xor eax, eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov byte [ebp - 4], 2
add esi, 0x18
mov ecx, dword [ebp - 0xa0]
mov eax, 0x2aaaaaab
inc dword [ebp - 0x20]
mov dword [ebp - 0x18], esi
mov esi, dword [ebp - 0xa4]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x20], eax
jae 0x47d8db
mov eax, dword [ebp - 0x18]
jmp 0x47d566
push dword [ebp - 0x19c]
call dword [ebp - 0x1bc]
mov dword [ebp - 0x19c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x180]
call fcn.0044dd70
xorps xmm0, xmm0
mov dword [ebp - 0xa8], 0
movq qword [ebp - 0xb0], xmm0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov byte [ebp - 4], 8
mov ecx, edi
call fcn.0047ec90
mov eax, dword [edi]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], edi
test eax, eax
je 0x47d955
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 9
lea ecx, [edi + 0x10]
lea eax, [ebp - 0xb0]
cmp eax, ecx
je 0x47d98b
mov esi, dword [ecx]
mov eax, 0x2aaaaaab
mov ecx, dword [ecx + 4]
sub ecx, esi
imul ecx
lea ecx, [ebp - 0xb0]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push esi
call fcn.00480090
mov byte [ebp - 4], 8
mov eax, dword [edi]
test eax, eax
je 0x47d99c
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x14], 0
cmp eax, dword [ebp - 0xac]
je 0x47ead5
push str.SOFTWAREMicrosoftWindowsCurrentVersionApplicationAssociationToasts
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x1a0], 0
call fcn.0044ddd0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1a0]
cmp dword [ebp - 0x184], 7
lea eax, [ebp - 0x198]
push ecx
push dword [ebp - 0x68]
cmova eax, dword [ebp - 0x198]
push 0
push eax
push closesocket
call dword [ebp - 0x64]
test eax, eax
jne 0x47eac6
mov byte [ebp - 4], 0xd
xorps xmm0, xmm0
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
mov byte [ebp - 4], 0x11
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov byte [ebp - 4], 0x12
xor ecx, ecx
mov dword [ebp - 0x1b4], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x1b8]
mov esi, dword [ecx]
mov ecx, dword [ecx + 4]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x47e9fd
nop dword [eax]
mov eax, dword [ebp - 0x1b4]
lea ecx, [ebp - 0x38]
lea eax, [eax + eax*2]
lea eax, [esi + eax*8]
push eax
call fcn.0044de10
mov byte [ebp - 4], 0x13
xor esi, esi
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x47dae9
mov edi, eax
cmp dword [ebp - 0x24], 7
lea eax, [ebp - 0x38]
cmova eax, dword [ebp - 0x38]
movzx eax, word [eax + esi*2]
push eax
call fcn.004d9351
add esp, 4
movzx ecx, ax
cmp dword [ebp - 0x24], 7
lea eax, [ebp - 0x38]
cmova eax, dword [ebp - 0x38]
mov word [eax + esi*2], cx
inc esi
cmp esi, edi
jb 0x47dab4
mov edi, dword [ebp - 0x1c0]
mov esi, dword [ebp - 0xb0]
xor ecx, ecx
mov dword [ebp - 0x1a4], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0xac]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x47e4db
nop word [eax + eax]
mov eax, dword [ebp - 0x1a4]
push str.FileAssociations
lea eax, [eax + eax*2]
lea eax, [esi + eax*8]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00452f00
add esp, 0xc
mov esi, eax
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0xd8]
cmp eax, esi
je 0x47db82
mov ecx, eax
call fcn.0044dd70
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0xd8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0xc8], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x20c]
cmp ecx, 7
jbe 0x47dbc6
mov edx, dword [ebp - 0x220]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47dbbc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
xor eax, eax
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x20c], 7
mov word [ebp - 0x220], ax
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xd8]
mov ecx, edi
push eax
push 0
push 0
lea eax, [ebp - 0x1d8]
push eax
call fcn.0047f280
mov esi, eax
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x50]
cmp eax, esi
je 0x47dc7d
mov ecx, dword [ebp - 0x3c]
cmp ecx, 7
jbe 0x47dc4b
mov edx, dword [ebp - 0x50]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47dc41
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
movups xmm0, xmmword [esi]
xor eax, eax
mov dword [ebp - 0x40], 0
mov word [ebp - 0x50], ax
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 7
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x40], xmm0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x1c4]
cmp ecx, 7
jbe 0x47dcc1
mov edx, dword [ebp - 0x1d8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47dcb7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
xor eax, eax
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1c4], 7
mov word [ebp - 0x1d8], ax
mov byte [ebp - 4], 0x13
mov esi, dword [ebp - 0x1a0]
cmp dword [ebp - 0x40], eax
je 0x47de34
cmp dword [ebp - 0x28], eax
je 0x47de34
test esi, esi
je 0x47de34
push 0x658f68
push dword [edi + 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x658fa8
push dword [edi + 0x20]
mov dword [ebp - 0x1ac], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], eax
je 0x47de34
test eax, eax
je 0x47de34
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x108]
call fcn.0044de10
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x108]
push 0x655c54
call fcn.0044dce0
cmp dword [ebp - 0x24], 7
lea eax, [ebp - 0x38]
push dword [ebp - 0x28]
cmova eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x108]
push eax
call fcn.0044e060
cmp dword [ebp - 0xf4], 7
lea ecx, [ebp - 0xb8]
push ecx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], 0
push ecx
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0xb8], 4
push ecx
lea eax, [ebp - 0x108]
mov dword [ebp - 0xb4], 4
cmova eax, dword [ebp - 0x108]
push 0
push eax
push esi
call dword [ebp - 0x1ac]
test eax, eax
jne 0x47dde4
cmp dword [ebp - 0xb4], 4
jne 0x47de25
cmp dword [ebp - 0xb8], 4
jne 0x47de25
cmp dword [ebp - 0x60], eax
je 0x47de25
jmp 0x47ddf8
mov dword [ebp - 0xb8], 4
mov dword [ebp - 0xb4], 4
cmp dword [ebp - 0xf4], 7
lea ecx, [ebp - 0x60]
push 4
push ecx
push 4
lea eax, [ebp - 0x108]
mov dword [ebp - 0x60], 0
cmova eax, dword [ebp - 0x108]
push 0
push eax
push esi
call dword [ebp - 0x1a8]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x108]
call fcn.0044dd70
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
lea eax, [ebp - 0xd8]
push eax
push 1
push 0
lea eax, [ebp - 0x1f0]
push eax
call fcn.0047f280
mov esi, eax
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x50]
cmp eax, esi
je 0x47deca
mov ecx, dword [ebp - 0x3c]
cmp ecx, 7
jbe 0x47de98
mov edx, dword [ebp - 0x50]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47de8e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
movups xmm0, xmmword [esi]
xor eax, eax
mov dword [ebp - 0x40], 0
mov word [ebp - 0x50], ax
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 7
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x40], xmm0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x1dc]
cmp ecx, 7
jbe 0x47df0e
mov edx, dword [ebp - 0x1f0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47df04
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
xor eax, eax
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1dc], 7
mov word [ebp - 0x1f0], ax
mov byte [ebp - 4], 0x13
mov esi, dword [ebp - 0x1a0]
cmp dword [ebp - 0x40], eax
je 0x47e081
cmp dword [ebp - 0x28], eax
je 0x47e081
test esi, esi
je 0x47e081
push 0x658f68
push dword [edi + 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x658fa8
push dword [edi + 0x20]
mov dword [ebp - 0x1a8], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1ac], eax
je 0x47e081
test eax, eax
je 0x47e081
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x120]
call fcn.0044de10
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x120]
push 0x655c54
call fcn.0044dce0
cmp dword [ebp - 0x24], 7
lea eax, [ebp - 0x38]
push dword [ebp - 0x28]
cmova eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x120]
push eax
call fcn.0044e060
cmp dword [ebp - 0x10c], 7
lea ecx, [ebp - 0xbc]
push ecx
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xbc], 4
push ecx
lea eax, [ebp - 0x120]
mov dword [ebp - 0xc0], 4
cmova eax, dword [ebp - 0x120]
push 0
push eax
push esi
call dword [ebp - 0x1a8]
test eax, eax
jne 0x47e031
cmp dword [ebp - 0xc0], 4
jne 0x47e072
cmp dword [ebp - 0xbc], 4
jne 0x47e072
cmp dword [ebp - 0x20], eax
je 0x47e072
jmp 0x47e045
mov dword [ebp - 0xbc], 4
mov dword [ebp - 0xc0], 4
cmp dword [ebp - 0x10c], 7
lea ecx, [ebp - 0x20]
push 4
push ecx
push 4
lea eax, [ebp - 0x120]
mov dword [ebp - 0x20], 0
cmova eax, dword [ebp - 0x120]
push 0
push eax
push esi
call dword [ebp - 0x1ac]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x120]
call fcn.0044dd70
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
lea eax, [ebp - 0xd8]
push eax
push 0
push 1
lea eax, [ebp - 0x208]
push eax
call fcn.0047f280
mov esi, eax
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x50]
cmp eax, esi
je 0x47e0d6
mov ecx, eax
call fcn.0044dd70
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x50], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x40], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x1f4]
cmp ecx, 7
jbe 0x47e11a
mov edx, dword [ebp - 0x208]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47e110
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
xor eax, eax
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1f4], 7
mov word [ebp - 0x208], ax
mov byte [ebp - 4], 0x13
mov esi, dword [ebp - 0x1a0]
cmp dword [ebp - 0x40], eax
je 0x47e275
cmp dword [ebp - 0x28], eax
je 0x47e275
test esi, esi
je 0x47e275
push 0x658f68
push dword [edi + 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x658fa8
push dword [edi + 0x20]
mov dword [ebp - 0x1a8], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1ac], eax
je 0x47e275
test eax, eax
je 0x47e275
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x138]
call fcn.0044de10
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x138]
push 0x655c54
call fcn.0044dce0
cmp dword [ebp - 0x24], 7
lea eax, [ebp - 0x38]
push dword [ebp - 0x28]
cmova eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x138]
push eax
call fcn.0044e060
cmp dword [ebp - 0x124], 7
lea ecx, [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x64], 4
push ecx
lea eax, [ebp - 0x138]
mov dword [ebp - 0x68], 4
cmova eax, dword [ebp - 0x138]
push 0
push eax
push esi
call dword [ebp - 0x1a8]
test eax, eax
jne 0x47e22b
cmp dword [ebp - 0x68], 4
jne 0x47e266
cmp dword [ebp - 0x64], 4
jne 0x47e266
cmp dword [ebp - 0x18], eax
je 0x47e266
jmp 0x47e239
mov dword [ebp - 0x64], 4
mov dword [ebp - 0x68], 4
cmp dword [ebp - 0x124], 7
lea ecx, [ebp - 0x18]
push 4
push ecx
push 4
lea eax, [ebp - 0x138]
mov dword [ebp - 0x18], 0
cmova eax, dword [ebp - 0x138]
push 0
push eax
push esi
call dword [ebp - 0x1ac]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x138]
call fcn.0044dd70
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
lea eax, [ebp - 0xd8]
push eax
push 1
push 1
lea eax, [ebp - 0x180]
push eax
call fcn.0047f280
mov esi, eax
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x50]
cmp eax, esi
je 0x47e30b
mov ecx, dword [ebp - 0x3c]
cmp ecx, 7
jbe 0x47e2d9
mov edx, dword [ebp - 0x50]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47e2cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
movups xmm0, xmmword [esi]
xor eax, eax
mov dword [ebp - 0x40], 0
mov word [ebp - 0x50], ax
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 7
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x40], xmm0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x16c]
cmp ecx, 7
jbe 0x47e34f
mov edx, dword [ebp - 0x180]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47e345
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
xor eax, eax
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 7
mov word [ebp - 0x180], ax
mov byte [ebp - 4], 0x13
mov esi, dword [ebp - 0x1a0]
cmp dword [ebp - 0x40], eax
je 0x47e4aa
cmp dword [ebp - 0x28], eax
je 0x47e4aa
test esi, esi
je 0x47e4aa
push 0x658f68
push dword [edi + 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x658fa8
push dword [edi + 0x20]
mov dword [ebp - 0x1a8], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1ac], eax
je 0x47e4aa
test eax, eax
je 0x47e4aa
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x150]
call fcn.0044de10
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x150]
push 0x655c54
call fcn.0044dce0
cmp dword [ebp - 0x24], 7
lea eax, [ebp - 0x38]
push dword [ebp - 0x28]
cmova eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x150]
push eax
call fcn.0044e060
cmp dword [ebp - 0x13c], 7
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push ecx
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x6c], 4
push ecx
lea eax, [ebp - 0x150]
mov dword [ebp - 0x70], 4
cmova eax, dword [ebp - 0x150]
push 0
push eax
push esi
call dword [ebp - 0x1a8]
test eax, eax
jne 0x47e460
cmp dword [ebp - 0x70], 4
jne 0x47e49b
cmp dword [ebp - 0x6c], 4
jne 0x47e49b
cmp dword [ebp - 0x1c], eax
je 0x47e49b
jmp 0x47e46e
mov dword [ebp - 0x6c], 4
mov dword [ebp - 0x70], 4
cmp dword [ebp - 0x13c], 7
lea ecx, [ebp - 0x1c]
push 4
push ecx
push 4
lea eax, [ebp - 0x150]
mov dword [ebp - 0x1c], 0
cmova eax, dword [ebp - 0x150]
push 0
push eax
push esi
call dword [ebp - 0x1ac]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x150]
call fcn.0044dd70
mov ecx, dword [ebp - 0xac]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0xb0]
sub ecx, esi
inc dword [ebp - 0x1a4]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x1a4], eax
jb 0x47db20
xorps xmm0, xmm0
mov dword [ebp - 0x54], 0
movq qword [ebp - 0x5c], xmm0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
call fcn.0047f5d0
lea eax, [ebp - 0x5c]
mov ecx, edi
push eax
lea eax, [ebp - 0x38]
push eax
push 0
call fcn.0047f810
lea eax, [ebp - 0x5c]
mov ecx, edi
push eax
lea eax, [ebp - 0x38]
push eax
push 1
call fcn.0047f810
lea eax, [ebp - 0x5c]
push eax
call fcn.0047fc80
xor ecx, ecx
mov eax, 0x2aaaaaab
mov dword [ebp - 0x1a4], ecx
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp - 0x5c]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x47e59f
xor esi, esi
mov eax, dword [ebp - 0x5c]
mov ecx, edi
add eax, esi
push eax
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x1a0]
call fcn.0047eb20
mov ecx, dword [ebp - 0x58]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x5c]
add esi, 0x18
inc dword [ebp - 0x1a4]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x1a4], eax
jb 0x47e560
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
movq qword [ebp - 0x80], xmm0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push 0
call fcn.0047fa50
lea eax, [ebp - 0x80]
mov ecx, edi
push eax
lea eax, [ebp - 0x38]
push eax
push 1
call fcn.0047fa50
lea eax, [ebp - 0x80]
push eax
call fcn.0047fc80
mov byte [ebp - 4], 0x26
xorps xmm0, xmm0
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0
mov byte [ebp - 4], 0x24
mov esi, 7
xor eax, eax
mov dword [ebp - 0xdc], esi
mov dword [ebp - 0xe0], 0
mov word [ebp - 0xf0], ax
mov byte [ebp - 4], 0x27
xor ecx, ecx
mov dword [ebp - 0x1a4], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x7c]
sub ecx, dword [ebp - 0x80]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x47e82e
xor esi, esi
mov dword [ebp - 0x1b0], esi
nop word [eax + eax]
push 0xd
push str.Applications_
lea ecx, [ebp - 0xf0]
call fcn.0044def0
mov eax, dword [ebp - 0x80]
add eax, esi
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x47e692
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xf0]
call fcn.0044e060
cmp dword [ebp - 0xe0], 0
mov esi, dword [ebp - 0x1a0]
je 0x47e7f0
cmp dword [ebp - 0x28], 0
je 0x47e7f0
test esi, esi
je 0x47e7f0
push 0x658f68
push dword [edi + 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x658fa8
push dword [edi + 0x20]
mov dword [ebp - 0x1a8], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1ac], eax
je 0x47e7f0
test eax, eax
je 0x47e7f0
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x168]
call fcn.0044de10
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x168]
push 0x655c54
call fcn.0044dce0
cmp dword [ebp - 0x24], 7
lea eax, [ebp - 0x38]
push dword [ebp - 0x28]
cmova eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x168]
push eax
call fcn.0044e060
cmp dword [ebp - 0x154], 7
lea ecx, [ebp - 0x74]
push ecx
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x19c], 0
push ecx
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x74], 4
push ecx
lea eax, [ebp - 0x168]
mov dword [ebp - 0x14], 4
cmova eax, dword [ebp - 0x168]
push 0
push eax
push esi
call dword [ebp - 0x1a8]
test eax, eax
jne 0x47e7a0
cmp dword [ebp - 0x14], 4
jne 0x47e7e1
cmp dword [ebp - 0x74], 4
jne 0x47e7e1
cmp dword [ebp - 0x19c], eax
je 0x47e7e1
jmp 0x47e7ae
mov dword [ebp - 0x74], 4
mov dword [ebp - 0x14], 4
cmp dword [ebp - 0x154], 7
lea ecx, [ebp - 0x19c]
push 4
push ecx
push 4
lea eax, [ebp - 0x168]
mov dword [ebp - 0x19c], 0
cmova eax, dword [ebp - 0x168]
push 0
push eax
push esi
call dword [ebp - 0x1ac]
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x168]
call fcn.0044dd70
mov ecx, dword [ebp - 0x7c]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x80]
mov esi, dword [ebp - 0x1b0]
inc dword [ebp - 0x1a4]
add esi, 0x18
imul ecx
mov dword [ebp - 0x1b0], esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x1a4], eax
jb 0x47e670
mov esi, dword [ebp - 0xdc]
mov byte [ebp - 4], 0x29
cmp esi, 7
jbe 0x47e86c
mov edx, dword [ebp - 0xf0]
lea ecx, [esi*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47e862
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
xor eax, eax
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x47e900
lea ecx, [ebp - 0x80]
push ecx
push dword [ebp - 0x7c]
push eax
call fcn.0044e400
mov ecx, dword [ebp - 0x78]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x80]
add esp, 0xc
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x47e8e1
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push esi
call fcn.004c46ad
add esp, 8
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x47e977
lea ecx, [ebp - 0x5c]
push ecx
push dword [ebp - 0x58]
push eax
call fcn.0044e400
mov ecx, dword [ebp - 0x54]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x5c]
add esp, 0xc
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x47e958
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push esi
call fcn.004c46ad
add esp, 8
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x24]
cmp ecx, 7
jbe 0x47e9b5
mov edx, dword [ebp - 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47e9ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x1b8]
inc dword [ebp - 0x1b4]
mov ecx, dword [eax + 4]
mov esi, dword [eax]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x1b4], eax
jb 0x47da90
push dword [ebp - 0x1a0]
call dword [ebp - 0x1bc]
mov dword [ebp - 0x1a0], 0
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x3c]
cmp ecx, 7
jbe 0x47ea51
mov edx, dword [ebp - 0x50]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47ea47
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0xc4]
cmp ecx, 7
jbe 0x47eaa5
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47ea9b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47eb13
push ecx
push edx
call fcn.004c46ad
add esp, 8
xor eax, eax
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x198]
call fcn.0044dd70
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb0]
call fcn.0044dbf0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.0044dbf0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004c4309
mov esp, ebp
pop ebp
ret 4
call fcn.004d91aa
int3