Function at 0x469ce9
Capabilities:
Check for peb ntglobalflag flag
Check if file exists
Contain obfuscated stackstrings
Create process on windows
Get number of processors
Get process heap flags
Get process heap force flags
Parse pe header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x511b30
mov eax, dword fs:[0]
push eax
sub esp, 0x258
push ebx
push esi
push edi
mov eax, dword [0x5ff740]
xor eax, esp
push eax
lea eax, [esp + 0x268]
mov dword fs:[0], eax
mov edi, 0x5af648
push edi
lea ecx, [esp + 0x84]
call fcn.0040253b
mov dword [esp + 0x98], eax
and dword [esp + 0x270], 0
push edi
lea ecx, [esp + 0x7c]
call fcn.0040253b
mov dword [esp + 0x3c], eax
mov esi, 0x5af638
push esi
lea ecx, [esp + 0x74]
mov byte [esp + 0x274], 1
call fcn.0040253b
mov dword [esp + 0xc0], eax
mov ebx, 0x5af660
push ebx
lea ecx, [esp + 0x6c]
mov byte [esp + 0x274], 2
call fcn.0040253b
mov dword [esp + 0x34], eax
push ebx
lea ecx, [esp + 0x64]
mov byte [esp + 0x274], 3
call fcn.0040253b
mov dword [esp + 0x90], eax
push 0x5af69c
lea ecx, [esp + 0x5c]
mov byte [esp + 0x274], 4
call fcn.0040253b
mov dword [esp + 0x2c], eax
push esi
lea ecx, [esp + 0x54]
mov byte [esp + 0x274], 5
call fcn.0040253b
mov dword [esp + 0x8c], eax
push 0x5af64c
lea ecx, [esp + 0x4c]
mov byte [esp + 0x274], 6
call fcn.0040253b
mov dword [esp + 0xe4], eax
mov esi, 0x5af63c
push esi
lea ecx, [esp + 0x44]
mov byte [esp + 0x274], 7
call fcn.0040253b
mov dword [esp + 0xdc], eax
mov ebx, 0x5af65c
push ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x274], 8
call fcn.0040253b
mov dword [esp + 0x18], eax
push 0x5af640
lea ecx, [esp + 0x34]
mov byte [esp + 0x274], 9
call fcn.0040253b
push esi
push eax
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x27c], 0xa
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xb
push dword [esp + 0x18]
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.00402130
add esp, 0xc
push 0x5c385c
push eax
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0x27c], 0xc
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xd
push dword [esp + 0xdc]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00402130
add esp, 0xc
push edi
push eax
lea eax, [esp + 0xc0]
push eax
mov byte [esp + 0x27c], 0xe
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xf
push dword [esp + 0xe4]
push eax
lea eax, [esp + 0x84]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af654
push eax
lea eax, [esp + 0xd8]
push eax
mov byte [esp + 0x27c], 0x10
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x11
push dword [esp + 0x8c]
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.00402130
add esp, 0xc
mov esi, 0x5bfeb0
push esi
push eax
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0x27c], 0x12
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x13
push dword [esp + 0x2c]
push eax
lea eax, [esp + 0x74]
push eax
call fcn.00402130
add esp, 0xc
push ebx
push eax
lea eax, [esp + 0xf0]
push eax
mov byte [esp + 0x27c], 0x14
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x15
push dword [esp + 0x90]
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.00402130
add esp, 0xc
push esi
push eax
lea eax, [esp + 0xb0]
push eax
mov byte [esp + 0x27c], 0x16
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x17
push dword [esp + 0x34]
push eax
lea eax, [esp + 0x64]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af670
push eax
lea eax, [esp + 0xd0]
push eax
mov byte [esp + 0x27c], 0x18
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x19
push dword [esp + 0xc0]
push eax
lea eax, [esp + 0x5c]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af644
push eax
lea eax, [esp + 0xa8]
push eax
mov byte [esp + 0x27c], 0x1a
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x1b
push dword [esp + 0x3c]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.00402130
add esp, 0xc
push 0x5c1370
push eax
lea eax, [esp + 0xe0]
push eax
mov byte [esp + 0x27c], 0x1c
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x1d
push dword [esp + 0x98]
push eax
lea eax, [esp + 0x4c]
push eax
call fcn.00402130
add esp, 0xc
push eax
mov ecx, 0x60acb8
mov byte [esp + 0x274], 0x1e
call fcn.004025da
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xd8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xa0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xc8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xa8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xe8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xb0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x74]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xd0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x7c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xb8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x88]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x50]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x60]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x68]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x70]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x78]
add ecx, 0xfffffff0
call fcn.0040285b
or dword [esp + 0x270], 0xffffffff
mov ecx, dword [esp + 0x80]
add ecx, 0xfffffff0
call fcn.0040285b
push 0x5c1370
lea ecx, [esp + 0x18]
call fcn.0040253b
mov dword [esp + 0x6c], eax
push 0x5af644
lea ecx, [esp + 0x20]
mov dword [esp + 0x274], 0x1f
call fcn.0040253b
mov dword [esp + 0xb0], eax
push 0x5af670
lea ecx, [esp + 0xd8]
mov byte [esp + 0x274], 0x20
call fcn.0040253b
mov dword [esp + 0x74], eax
push esi
lea ecx, [esp + 0xd0]
mov byte [esp + 0x274], 0x21
call fcn.0040253b
mov dword [esp + 0xd0], eax
push ebx
lea ecx, [esp + 0xc8]
mov byte [esp + 0x274], 0x22
call fcn.0040253b
mov dword [esp + 0x7c], eax
push esi
lea ecx, [esp + 0xc0]
mov byte [esp + 0x274], 0x23
call fcn.0040253b
mov dword [esp + 0xb8], eax
push 0x5af654
lea ecx, [esp + 0xb8]
mov byte [esp + 0x274], 0x24
call fcn.0040253b
mov dword [esp + 0x20], eax
push edi
lea ecx, [esp + 0xb0]
mov byte [esp + 0x274], 0x25
call fcn.0040253b
mov dword [esp + 0x88], eax
push 0x5c385c
lea ecx, [esp + 0xa8]
mov byte [esp + 0x274], 0x26
call fcn.0040253b
mov dword [esp + 0x24], eax
push 0x5af63c
lea ecx, [esp + 0xa0]
mov byte [esp + 0x274], 0x27
call fcn.0040253b
mov dword [esp + 0x28], eax
mov esi, 0x5af658
push esi
lea ecx, [esp + 0x98]
mov byte [esp + 0x274], 0x28
call fcn.0040253b
mov dword [esp + 0x30], eax
push 0x5af63c
lea ecx, [esp + 0x150]
mov byte [esp + 0x274], 0x29
call fcn.0040253b
mov dword [esp + 0x38], eax
push esi
lea ecx, [esp + 0x188]
mov byte [esp + 0x274], 0x2a
call fcn.0040253b
mov dword [esp + 0x40], eax
push 0x5af64c
lea ecx, [esp + 0x148]
mov byte [esp + 0x274], 0x2b
call fcn.0040253b
mov dword [esp + 0x48], eax
push ebx
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x274], 0x2c
call fcn.0040253b
mov dword [esp + 0x50], eax
push 0x5af69c
lea ecx, [esp + 0x140]
mov byte [esp + 0x274], 0x2d
call fcn.0040253b
mov dword [esp + 0x58], eax
push 0x5af654
lea ecx, [esp + 0x180]
mov byte [esp + 0x274], 0x2e
call fcn.0040253b
mov dword [esp + 0x60], eax
push 0x5af66c
lea ecx, [esp + 0x138]
mov byte [esp + 0x274], 0x2f
call fcn.0040253b
mov dword [esp + 0x68], eax
push esi
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x274], 0x30
call fcn.0040253b
mov dword [esp + 0x70], eax
push 0x5af68c
lea ecx, [esp + 0x130]
mov byte [esp + 0x274], 0x31
call fcn.0040253b
mov dword [esp + 0x78], eax
push 0x5af64c
lea ecx, [esp + 0x134]
mov byte [esp + 0x274], 0x32
call fcn.0040253b
mov dword [esp + 0x80], eax
push 0x5af690
lea ecx, [esp + 0x12c]
mov byte [esp + 0x274], 0x33
call fcn.0040253b
push 0x5af64c
push eax
lea eax, [esp + 0x128]
push eax
mov byte [esp + 0x27c], 0x34
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x35
push dword [esp + 0x80]
push eax
lea eax, [esp + 0x12c]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af638
push eax
lea eax, [esp + 0x120]
push eax
mov byte [esp + 0x27c], 0x36
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x37
push dword [esp + 0x78]
push eax
lea eax, [esp + 0x1b4]
push eax
call fcn.00402130
add esp, 0xc
push esi
push eax
lea eax, [esp + 0x118]
push eax
mov byte [esp + 0x27c], 0x38
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x39
push dword [esp + 0x70]
push eax
lea eax, [esp + 0x174]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af670
push eax
lea eax, [esp + 0x110]
push eax
mov byte [esp + 0x27c], 0x3a
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x3b
push dword [esp + 0x68]
push eax
lea eax, [esp + 0x19c]
push eax
call fcn.00402130
add esp, 0xc
push ebx
push eax
lea eax, [esp + 0x108]
push eax
mov byte [esp + 0x27c], 0x3c
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x3d
push dword [esp + 0x60]
push eax
lea eax, [esp + 0x16c]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af650
push eax
lea eax, [esp + 0x17c]
push eax
mov byte [esp + 0x27c], 0x3e
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x3f
push dword [esp + 0x58]
push eax
lea eax, [esp + 0xfc]
push eax
call fcn.00402130
add esp, 0xc
mov esi, 0x5af660
push esi
push eax
lea eax, [esp + 0x1c0]
push eax
mov byte [esp + 0x27c], 0x40
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x41
push dword [esp + 0x50]
push eax
lea eax, [esp + 0x124]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af668
push eax
lea eax, [esp + 0x11c]
push eax
mov byte [esp + 0x27c], 0x42
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x43
push dword [esp + 0x48]
push eax
lea eax, [esp + 0x114]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af644
push eax
lea eax, [esp + 0x10c]
push eax
mov byte [esp + 0x27c], 0x44
call fcn.00402187
add esp, 0xc
push 0x60ac9c
push eax
lea eax, [esp + 0x104]
push eax
mov byte [esp + 0x27c], 0x45
call fcn.00402130
add esp, 0xc
mov byte [esp + 0x270], 0x46
push dword [esp + 0x40]
push eax
lea eax, [esp + 0x100]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af640
push eax
lea eax, [esp + 0x1bc]
push eax
mov byte [esp + 0x27c], 0x47
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x48
push dword [esp + 0x38]
push eax
lea eax, [esp + 0x164]
push eax
call fcn.00402130
add esp, 0xc
push ebx
push eax
lea eax, [esp + 0x194]
push eax
mov byte [esp + 0x27c], 0x49
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x4a
push dword [esp + 0x30]
push eax
lea eax, [esp + 0x15c]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af640
push eax
mov byte [esp + 0x278], 0x4b
lea eax, [esp + 0x1ac]
push eax
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x4c
push dword [esp + 0x28]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.00402130
add esp, 0xc
push ebx
push eax
lea eax, [esp + 0xe4]
push eax
mov byte [esp + 0x27c], 0x4d
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x4e
push dword [esp + 0x24]
push eax
lea eax, [esp + 0xec]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af63c
push eax
lea eax, [esp + 0x94]
push eax
mov byte [esp + 0x27c], 0x4f
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x50
push dword [esp + 0x88]
push eax
lea eax, [esp + 0x34]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af64c
push eax
lea eax, [esp + 0x98]
push eax
mov byte [esp + 0x27c], 0x51
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x52
push dword [esp + 0x20]
push eax
lea eax, [esp + 0x3c]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af638
push eax
lea eax, [esp + 0xc8]
push eax
mov byte [esp + 0x27c], 0x53
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x54
push dword [esp + 0xb8]
push eax
lea eax, [esp + 0x44]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af69c
push eax
lea eax, [esp + 0xa0]
mov byte [esp + 0x278], 0x55
push eax
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x56
push dword [esp + 0x7c]
push eax
lea eax, [esp + 0x4c]
push eax
call fcn.00402130
add esp, 0xc
push esi
push eax
lea eax, [esp + 0xe0]
push eax
mov byte [esp + 0x27c], 0x57
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x58
push dword [esp + 0xd0]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.00402130
add esp, 0xc
push esi
push eax
lea eax, [esp + 0xa8]
push eax
mov byte [esp + 0x27c], 0x59
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x5a
push dword [esp + 0x74]
push eax
lea eax, [esp + 0x5c]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af638
push eax
lea eax, [esp + 0xd0]
push eax
mov byte [esp + 0x27c], 0x5b
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x5c
push dword [esp + 0xb0]
push eax
lea eax, [esp + 0x64]
push eax
call fcn.00402130
add esp, 0xc
push edi
push eax
lea eax, [esp + 0xb0]
push eax
mov byte [esp + 0x27c], 0x5d
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x5e
push dword [esp + 0x6c]
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.00402130
add esp, 0xc
push edi
push eax
lea eax, [esp + 0xf0]
push eax
mov byte [esp + 0x27c], 0x5f
call fcn.00402187
add esp, 0xc
push eax
mov ecx, 0x60acb4
mov byte [esp + 0x274], 0x60
call fcn.004025da
mov ecx, dword [esp + 0xe8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xa8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xc8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xa0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xd8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x98]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xc0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x34]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x90]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x8c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xe4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xdc]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1a4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x154]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x18c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x15c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1b4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xf8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xfc]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x104]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x10c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x114]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x11c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1b8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xf4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x174]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x164]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x100]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x194]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x108]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x16c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x110]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1ac]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x118]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x124]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x120]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x128]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x130]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x12c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x19c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x134]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x17c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x13c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1bc]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x144]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x184]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x14c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x94]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x9c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xa4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xac]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xb4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xbc]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xc4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xcc]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xd4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.0040285b
or dword [esp + 0x270], 0xffffffff
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.0040285b
call fcn.004be6f3
push eax
lea ecx, [esp + 0x1c]
call fcn.004027f9
lea eax, [esp + 0x14]
mov dword [esp + 0x270], 0x61
push eax
lea esi, [esp + 0x1cc]
mov dword [esp + 0x18], SysReAllocStringLen
call fcn.0040ac2c
push 0x5af644
lea ecx, [esp + 0x1c8]
mov byte [esp + 0x274], 0x62
call fcn.0040253b
mov dword [esp + 0x94], eax
push 0x5b1604
lea ecx, [esp + 0x190]
mov byte [esp + 0x274], 0x63
call fcn.0040253b
mov dword [esp + 0x9c], eax
push ebx
lea ecx, [esp + 0x160]
mov byte [esp + 0x274], 0x64
call fcn.0040253b
mov dword [esp + 0xa4], eax
push 0x5af63c
lea ecx, [esp + 0x1b8]
mov byte [esp + 0x274], 0x65
call fcn.0040253b
mov dword [esp + 0xac], eax
mov byte [esp + 0x270], 0x66
push edi
lea ecx, [esp + 0xfc]
call fcn.0040253b
mov dword [esp + 0xb4], eax
mov esi, 0x5b2450
push esi
lea ecx, [esp + 0x100]
mov byte [esp + 0x274], 0x67
call fcn.0040253b
mov dword [esp + 0xbc], eax
push 0x5b2454
lea ecx, [esp + 0x108]
mov byte [esp + 0x274], 0x68
call fcn.0040253b
mov dword [esp + 0xc4], eax
push esi
lea ecx, [esp + 0x110]
mov byte [esp + 0x274], 0x69
call fcn.0040253b
mov dword [esp + 0xcc], eax
mov esi, 0x5af660
push esi
lea ecx, [esp + 0x118]
mov byte [esp + 0x274], 0x6a
call fcn.0040253b
mov dword [esp + 0xd4], eax
push 0x5af684
lea ecx, [esp + 0x120]
mov byte [esp + 0x274], 0x6b
call fcn.0040253b
mov dword [esp + 0x1c], eax
push 0x5af69c
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x274], 0x6c
call fcn.0040253b
mov dword [esp + 0x14], eax
push 0x5b275c
lea ecx, [esp + 0xf8]
mov byte [esp + 0x274], 0x6d
call fcn.0040253b
push ebx
push eax
lea eax, [esp + 0x17c]
push eax
mov byte [esp + 0x27c], 0x6e
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x6f
push dword [esp + 0x14]
push eax
lea eax, [esp + 0x16c]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af64c
push eax
lea eax, [esp + 0x108]
push eax
mov byte [esp + 0x27c], 0x70
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x71
push dword [esp + 0x1c]
push eax
lea eax, [esp + 0x19c]
push eax
call fcn.00402130
add esp, 0xc
mov byte [esp + 0x270], 0x72
push 0x5af640
push eax
lea eax, [esp + 0x110]
push eax
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x73
push dword [esp + 0xd4]
push eax
lea eax, [esp + 0x174]
push eax
call fcn.00402130
add esp, 0xc
push edi
push eax
lea eax, [esp + 0x118]
push eax
mov byte [esp + 0x27c], 0x74
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x75
push dword [esp + 0xcc]
push eax
lea eax, [esp + 0x1b4]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af678
push eax
lea eax, [esp + 0x120]
push eax
mov byte [esp + 0x27c], 0x76
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x77
push dword [esp + 0xc4]
push eax
lea eax, [esp + 0x12c]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af664
push eax
lea eax, [esp + 0x128]
push eax
mov byte [esp + 0x27c], 0x78
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x79
push dword [esp + 0xbc]
push eax
lea eax, [esp + 0x130]
push eax
call fcn.00402130
add esp, 0xc
push 0x5b244c
push eax
lea eax, [esp + 0x138]
push eax
mov byte [esp + 0x27c], 0x7a
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x7b
push dword [esp + 0xb4]
push eax
lea eax, [esp + 0x134]
push eax
call fcn.00402130
add esp, 0xc
push esi
mov byte [esp + 0x274], 0x7c
push eax
lea eax, [esp + 0x1a4]
push eax
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x7d
push dword [esp + 0xac]
push eax
lea eax, [esp + 0x13c]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af6a4
push eax
lea eax, [esp + 0x184]
push eax
mov byte [esp + 0x27c], 0x7e
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x7f
push dword [esp + 0xa4]
push eax
lea eax, [esp + 0x144]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af668
push eax
lea eax, [esp + 0x1c4]
push eax
mov byte [esp + 0x27c], 0x80
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x81
push dword [esp + 0x9c]
push eax
lea eax, [esp + 0x14c]
push eax
call fcn.00402130
add esp, 0xc
push str.6VC
push eax
lea eax, [esp + 0x18c]
push eax
mov byte [esp + 0x27c], 0x82
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0x83
push dword [esp + 0x94]
push eax
lea eax, [esp + 0x154]
push eax
call fcn.00402130
add esp, 0xc
push 0x5b0d34
push eax
lea eax, [esp + 0x1c8]
push eax
mov byte [esp + 0x27c], 0x84
call fcn.00402187
add esp, 0xc
mov ecx, dword [esp + 0x14c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x184]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x144]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1bc]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x13c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x17c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x134]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x19c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x12c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x130]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x128]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x120]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x124]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x118]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1ac]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x110]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x16c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x108]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x194]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x100]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x164]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x174]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xf4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1b8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x11c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x114]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x10c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x104]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xfc]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xf8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1b4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x15c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x18c]
add ecx, 0xfffffff0
call fcn.0040285b
mov byte [esp + 0x270], 0xa7
mov ecx, dword [esp + 0x1c4]
add ecx, 0xfffffff0
call fcn.0040285b
push 1
push dword [esp + 0x1c4]
lea esi, [esp + 0x1d0]
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x1d4], 0x20019
call fcn.0040ac48
test eax, eax
je 0x46b3f9
mov esi, 0x5c3860
push esi
lea eax, [esp + 0x1cc]
push eax
call fcn.0040acb9
test eax, eax
je 0x46b3ed
lea eax, [esp + 0x18]
push eax
push esi
lea edi, [esp + 0x1d0]
call fcn.0040ad6a
mov edi, 0x5af648
lea esi, [esp + 0x1c8]
call fcn.0040aca6
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x46b412
lea eax, [esp + 0x18]
push eax
mov ecx, 0x60acb4
call fcn.004025da
push 0x5af660
lea ecx, [esp + 0x88]
call fcn.0040253b
mov dword [esp + 0x60], eax
push 0x5c3858
lea ecx, [esp + 0xe4]
mov byte [esp + 0x274], 0xa8
call fcn.0040253b
mov dword [esp + 0x68], eax
mov esi, 0x5af67c
push esi
lea ecx, [esp + 0xf0]
mov byte [esp + 0x274], 0xa9
call fcn.0040253b
mov dword [esp + 0x70], eax
push 0x5af64c
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x274], 0xaa
call fcn.0040253b
mov dword [esp + 0x78], eax
push 0x5c3870
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x274], 0xab
call fcn.0040253b
mov dword [esp + 0x80], eax
push esi
lea ecx, [esp + 0x1a4]
mov byte [esp + 0x274], 0xac
call fcn.0040253b
mov dword [esp + 0x1a4], eax
push 0x5af64c
lea ecx, [esp + 0x19c]
mov byte [esp + 0x274], 0xad
call fcn.0040253b
mov dword [esp + 0x154], eax
push 0x5af688
lea ecx, [esp + 0x194]
mov byte [esp + 0x274], 0xae
call fcn.0040253b
mov dword [esp + 0x94], eax
mov esi, 0x5b1604
push esi
lea ecx, [esp + 0x18c]
mov byte [esp + 0x274], 0xaf
call fcn.0040253b
mov dword [esp + 0x9c], eax
push edi
lea ecx, [esp + 0x184]
mov byte [esp + 0x274], 0xb0
call fcn.0040253b
mov dword [esp + 0xa4], eax
push 0x5af668
lea ecx, [esp + 0x17c]
mov byte [esp + 0x274], 0xb1
call fcn.0040253b
mov dword [esp + 0xac], eax
push 0x5af6a8
lea ecx, [esp + 0x174]
mov byte [esp + 0x274], 0xb2
call fcn.0040253b
mov dword [esp + 0xb4], eax
push 0x5bfea8
lea ecx, [esp + 0x16c]
mov byte [esp + 0x274], 0xb3
call fcn.0040253b
mov dword [esp + 0xbc], eax
mov byte [esp + 0x270], 0xb4
push 0x5af674
lea ecx, [esp + 0x164]
call fcn.0040253b
mov dword [esp + 0xc4], eax
push 0x5af6a4
lea ecx, [esp + 0x15c]
mov byte [esp + 0x274], 0xb5
call fcn.0040253b
mov dword [esp + 0xcc], eax
push 0x5af640
lea ecx, [esp + 0x154]
mov byte [esp + 0x274], 0xb6
call fcn.0040253b
mov dword [esp + 0xd4], eax
push 0x5af66c
lea ecx, [esp + 0x14c]
mov byte [esp + 0x274], 0xb7
call fcn.0040253b
mov dword [esp + 0x1c], eax
push 0x5af684
lea ecx, [esp + 0x144]
mov byte [esp + 0x274], 0xb8
call fcn.0040253b
mov dword [esp + 0x14], eax
push 0x5b2804
lea ecx, [esp + 0x13c]
mov byte [esp + 0x274], 0xb9
call fcn.0040253b
push ebx
push eax
lea eax, [esp + 0xf8]
push eax
mov byte [esp + 0x27c], 0xba
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xbb
push dword [esp + 0x14]
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af668
push eax
lea eax, [esp + 0xec]
push eax
mov byte [esp + 0x27c], 0xbc
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xbd
push dword [esp + 0x1c]
push eax
lea eax, [esp + 0x94]
push eax
call fcn.00402130
add esp, 0xc
push ebx
push eax
lea eax, [esp + 0x34]
push eax
mov byte [esp + 0x27c], 0xbe
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xbf
push dword [esp + 0xd4]
push eax
lea eax, [esp + 0x98]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af650
push eax
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x27c], 0xc0
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xc1
push dword [esp + 0xcc]
push eax
lea eax, [esp + 0xc8]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af668
push eax
lea eax, [esp + 0x44]
push eax
mov byte [esp + 0x27c], 0xc2
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xc3
push dword [esp + 0xc4]
push eax
lea eax, [esp + 0xa0]
push eax
call fcn.00402130
add esp, 0xc
push esi
push eax
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0x27c], 0xc4
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xc5
push dword [esp + 0xbc]
push eax
lea eax, [esp + 0xe0]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af650
push eax
lea eax, [esp + 0x54]
push eax
mov byte [esp + 0x27c], 0xc6
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xc7
push dword [esp + 0xb4]
push eax
lea eax, [esp + 0xa8]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af640
push eax
lea eax, [esp + 0x5c]
push eax
mov byte [esp + 0x27c], 0xc8
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xc9
push dword [esp + 0xac]
push eax
lea eax, [esp + 0xd0]
push eax
call fcn.00402130
add esp, 0xc
mov byte [esp + 0x270], 0xca
push 0x5af670
push eax
lea eax, [esp + 0x64]
push eax
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xcb
push dword [esp + 0xa4]
push eax
lea eax, [esp + 0xb0]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af650
push eax
lea eax, [esp + 0x6c]
push eax
mov byte [esp + 0x27c], 0xcc
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xcd
push dword [esp + 0x9c]
push eax
lea eax, [esp + 0xf0]
push eax
call fcn.00402130
add esp, 0xc
push 0x5b275c
push eax
lea eax, [esp + 0x74]
push eax
mov byte [esp + 0x27c], 0xce
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xcf
push dword [esp + 0x94]
push eax
lea eax, [esp + 0xb8]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af63c
push eax
lea eax, [esp + 0x7c]
push eax
mov byte [esp + 0x27c], 0xd0
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xd1
push dword [esp + 0x154]
push eax
lea eax, [esp + 0xd8]
push eax
call fcn.00402130
add esp, 0xc
push edi
push eax
lea eax, [esp + 0x84]
push eax
mov byte [esp + 0x27c], 0xd2
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xd3
push dword [esp + 0x1a4]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.00402130
add esp, 0xc
mov byte [esp + 0x270], 0xd4
push esi
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xd5
push dword [esp + 0x80]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af638
push eax
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x27c], 0xd6
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xd7
push dword [esp + 0x78]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af6a4
push eax
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x27c], 0xd8
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xd9
push dword [esp + 0x70]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af6a4
push eax
lea eax, [esp + 0x48]
push eax
mov byte [esp + 0x27c], 0xda
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xdb
push dword [esp + 0x68]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.00402130
add esp, 0xc
push edi
push eax
lea eax, [esp + 0x58]
push eax
mov byte [esp + 0x27c], 0xdc
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xdd
push dword [esp + 0x60]
push eax
lea eax, [esp + 0x60]
push eax
call fcn.00402130
add esp, 0xc
mov byte [esp + 0x270], 0xde
mov eax, dword [eax]
lea ecx, [esp + 0x1e4]
push 3
push eax
lea eax, [esp + 0x1e8]
push eax
mov dword [esp + 0x1ec], ecx
call fcn.00407356
mov byte [esp + 0x270], 0xdf
push dword [esp + 0x1e0]
push str.Title
call fcn.0046688f
lea eax, [esp + 0x1ec]
pop ecx
pop ecx
cmp dword [esp + 0x1e0], eax
je 0x46baa4
push dword [esp + 0x1e0]
call fcn.004de9e3
pop ecx
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x50]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x88]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xb8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x7c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xd0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x74]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xb0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x6c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xe8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x64]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xa8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x5c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xc8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xa0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xd8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x98]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xc0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x34]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x90]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x8c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xe4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xdc]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xf0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x138]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x140]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x148]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x150]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x158]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x160]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x168]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x170]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x178]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x180]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x188]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x190]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x198]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1a0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1a8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1b0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xec]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xe0]
add ecx, 0xfffffff0
call fcn.0040285b
mov byte [esp + 0x270], 0xa7
mov ecx, dword [esp + 0x84]
add ecx, 0xfffffff0
call fcn.0040285b
push 0
push 0
call fcn.004677c3
pop ecx
pop ecx
push 0x5af660
lea ecx, [esp + 0x20]
call fcn.0040253b
mov dword [esp + 0x1b0], eax
push esi
lea ecx, [esp + 0x18]
mov byte [esp + 0x274], 0xe0
call fcn.0040253b
mov esi, eax
push 0x5af640
lea ecx, [esp + 0x13c]
mov byte [esp + 0x274], 0xe1
call fcn.0040253b
mov dword [esp + 0xec], eax
push 0x5af66c
lea ecx, [esp + 0x144]
mov byte [esp + 0x274], 0xe2
call fcn.0040253b
mov dword [esp + 0xe0], eax
push 0x5af674
lea ecx, [esp + 0x14c]
mov byte [esp + 0x274], 0xe3
call fcn.0040253b
mov dword [esp + 0x84], eax
push 0x5af678
lea ecx, [esp + 0x154]
mov byte [esp + 0x274], 0xe4
call fcn.0040253b
push edi
push eax
lea eax, [esp + 0x160]
push eax
mov byte [esp + 0x27c], 0xe5
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xe6
push dword [esp + 0x84]
push eax
lea eax, [esp + 0x168]
push eax
call fcn.00402130
add esp, 0xc
push 0x5b2454
push eax
lea eax, [esp + 0x170]
push eax
mov byte [esp + 0x27c], 0xe7
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xe8
push dword [esp + 0xe0]
push eax
lea eax, [esp + 0x178]
push eax
call fcn.00402130
add esp, 0xc
push edi
push eax
lea eax, [esp + 0x180]
push eax
mov byte [esp + 0x27c], 0xe9
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xea
push dword [esp + 0xec]
push eax
lea eax, [esp + 0x188]
push eax
call fcn.00402130
add esp, 0xc
push 0x5af668
push eax
lea eax, [esp + 0x190]
push eax
mov byte [esp + 0x27c], 0xeb
call fcn.00402187
add esp, 0xc
push esi
push eax
lea eax, [esp + 0x198]
push eax
mov byte [esp + 0x27c], 0xec
call fcn.00402130
add esp, 0xc
push 0x5af664
push eax
lea eax, [esp + 0x1a0]
push eax
mov byte [esp + 0x27c], 0xed
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xee
push dword [esp + 0x1b0]
push eax
lea eax, [esp + 0x1a8]
push eax
call fcn.00402130
add esp, 0xc
push ebx
push eax
lea eax, [esp + 0x1b0]
push eax
mov byte [esp + 0x27c], 0xef
call fcn.00402187
add esp, 0xc
mov byte [esp + 0x270], 0xf0
mov eax, dword [eax]
push 3
push eax
lea eax, [esp + 0x1e8]
lea ecx, [esp + 0x1ec]
push eax
mov dword [esp + 0x1ec], ecx
call fcn.00407356
mov byte [esp + 0x270], 0xf1
push dword [esp + 0x1e0]
push str.Title
call fcn.0046688f
lea eax, [esp + 0x1ec]
pop ecx
pop ecx
cmp dword [esp + 0x1e0], eax
je 0x46bff8
push dword [esp + 0x1e0]
call fcn.004de9e3
pop ecx
mov ecx, dword [esp + 0x1a8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1a0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x198]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x190]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x188]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x180]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x178]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x170]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x168]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x160]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x158]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x150]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x148]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x140]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x138]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.0040285b
mov byte [esp + 0x270], 0xa7
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.0040285b
push dword [0x60acbc]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x46c1cf
mov esi, 0x5c3750
push esi
lea ecx, [esp + 0xf0]
call fcn.0040dd8e
mov edi, eax
push esi
lea ecx, [esp + 0xe4]
mov byte [esp + 0x274], 0xf2
call fcn.0040dd8e
push 0x60acbc
push eax
lea eax, [esp + 0x8c]
push eax
mov byte [esp + 0x27c], 0xf3
call fcn.00402130
add esp, 0xc
push edi
push eax
lea eax, [esp + 0xf8]
push eax
mov byte [esp + 0x27c], 0xf4
call fcn.00402130
mov ecx, dword [esp + 0x90]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xe0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0xec]
add ecx, 0xfffffff0
call fcn.0040285b
push 1
push 0x5afd90
push str._verysilent
push dword [esp + 0xfc]
push str.open
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0xf0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x1c0]
add ecx, 0xfffffff0
call fcn.0040285b
lea esi, [esp + 0x1c8]
call fcn.0040aca6
mov ecx, dword [esp + 0x1d0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [esp + 0x268]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret