Function at 0x477fe0
Capabilities:
Create process on windows
Self delete
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2804
call fcn.004d9280
mov eax, dword [0x4f72bc]
xor eax, ebp
mov dword [ebp - 4], eax
mov ax, word [0x4ebdd4]
push ebx
push esi
push edi
mov esi, ecx
mov cl, byte [0x4ebdd6]
push 0x7f02
push 0
mov dword [ebp - 0x2800], esi
mov word [ebp - 0x27e8], ax
mov byte [ebp - 0x27e6], cl
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
push 0
push 0x20
push 2
push 0
push 0
push 0x40000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
mov dword [ebp - 0x27f8], edi
test edi, edi
je 0x47aa9c
lea edx, [ebp - 0x13d0]
push edx
mov ecx, 3
call fcn.0047c870
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
add esp, 4
lea eax, [ebp - 0x27e8]
push eax
lea ecx, [ebp - 0x13d0]
push ecx
push 0x5016f0
lea edx, [ebp - 0xed0]
push str.Log_created_by__s_running__s_s
push edx
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 0x14
push 0
lea eax, [ebp - 0x27f4]
push eax
lea ecx, [ebp - 0xed0]
push ecx
call ebx
push eax
lea edx, [ebp - 0xed0]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
lea eax, [ebp - 0x13e0]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
cmp word [ebp - 0x13d8], 0xc
jbe 0x4780e8
mov ecx, 0xfff4
add word [ebp - 0x13d8], cx
push 0x4ebdf8
lea edx, [ebp - 0x1c]
push edx
jmp 0x4780f1
push 0x4ebdfc
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
movzx edx, word [ebp - 0x13d4]
movzx eax, word [ebp - 0x13d6]
lea ecx, [ebp - 0x1c]
push ecx
movzx ecx, word [ebp - 0x13d8]
push edx
push eax
push ecx
lea edx, [ebp - 0x8c0]
push str._2d:_02d:_02d__s
push edx
call esi
movzx eax, word [ebp - 0x13e0]
movzx ecx, word [ebp - 0x13da]
movzx edx, word [ebp - 0x13de]
push eax
push ecx
push edx
lea eax, [ebp - 0x1c]
push str._2d__02d__4d
push eax
call esi
add esp, 0x2c
lea ecx, [ebp - 0x27e8]
push ecx
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0xed0]
push str.Scan_saved_at__s__on__s_s
push ecx
call esi
add esp, 0x14
push 0
lea edx, [ebp - 0x27f4]
push edx
lea eax, [ebp - 0xed0]
push eax
call ebx
push eax
lea ecx, [ebp - 0xed0]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
lea edx, [ebp - 0x27e8]
push edx
push str.Version
push str.Description
push 0x4e2d04
push 0x4ebe54
push str.Company
push str.Filename
push 0x4ebe78
push str.SubType
push 0x4e2954
lea eax, [ebp - 0xed0]
push str._s__s__s__s__s__s__s__s___s_s
push eax
call esi
add esp, 0x30
push 0
lea ecx, [ebp - 0x27f4]
push ecx
lea edx, [ebp - 0xed0]
push edx
call ebx
push eax
lea eax, [ebp - 0xed0]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp dword [0x505890], 0
je 0x4781ff
call fcn.004c2580
call fcn.00488a50
xor esi, esi
xor edi, edi
mov dword [ebp - 0x27f0], eax
mov dword [ebp - 0x27e4], esi
cmp eax, edi
jle 0x4786d6
lea eax, [ebp - 0x1a8]
lea ecx, [ebp - 0x8b0]
sub eax, ecx
mov dword [ebp - 0x27ec], eax
jmp 0x478238
mov esi, dword [ebp - 0x27e4]
lea edi, [ebp - 0x1a8]
mov ebx, esi
call fcn.004c22f0
mov edx, dword [esi*4 + 0x501878]
mov edi, dword [sym.imp.KERNEL32.dll_GlobalLock]
push edx
call edi
mov ebx, eax
test ebx, ebx
je 0x4782bf
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebx
call esi
test eax, eax
mov edx, 0x7ffffffe
lea ecx, [ebp - 0xa0]
mov eax, 0x80
jne 0x478289
push str.Title_Not_Found
call fcn.004010b0
push str.Title_Not_Found
jmp 0x478290
push ebx
call fcn.004010b0
push ebx
call esi
push str.Title
lea esi, [ebp - 0xa0]
call fcn.0047da70
mov eax, dword [ebp - 0x27e4]
mov ecx, dword [eax*4 + 0x501878]
add esp, 4
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov esi, dword [ebp - 0x27e4]
push esi
lea ebx, [ebp - 0x9c8]
call fcn.004c23e0
mov edx, dword [esi*4 + 0x501878]
add esp, 4
push edx
mov dword [ebp - 0x27fc], 0
call edi
test eax, eax
je 0x478300
mov ecx, dword [esi*4 + 0x501878]
mov eax, dword [eax + 0x288]
push ecx
mov dword [ebp - 0x27fc], eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov edx, dword [ebp - 0x27fc]
push edx
lea edi, [ebp - 0x1c]
lea esi, [ebp - 0x1a8]
call fcn.0047f8b0
add esp, 4
push 0x1400
lea eax, [ebp - 0x27e0]
push 0
push eax
call fcn.004d29c0
mov ecx, esi
add esp, 0xc
push ecx
lea ecx, [ebp - 0x27e0]
call fcn.004c0890
add esp, 4
push 0x80
lea ebx, [ebp - 0x3a8]
lea ecx, [ebp - 0x1fe0]
call fcn.0047ab50
add esp, 4
push 0x400
lea ebx, [ebp - 0x1350]
lea ecx, [ebp - 0x1be0]
call fcn.0047ab50
add esp, 4
push 0x80
lea ebx, [ebp - 0x328]
lea ecx, [ebp - 0x23e0]
call fcn.0047ab50
add esp, 4
mov edx, 0x104
lea eax, [ebp - 0x8b0]
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x4783b4
mov ecx, dword [ebp - 0x27ec]
mov cl, byte [eax + ecx]
test cl, cl
je 0x4783b4
mov byte [eax], cl
inc eax
dec edx
jne 0x478395
jmp 0x4783b8
test edx, edx
jne 0x4783b9
dec eax
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea edx, [ebp - 0x8b0]
push edx
mov byte [eax], 0
call edi
test eax, eax
je 0x4783e0
nop
cmp byte [ebp + eax - 0x8b0], 0x5c
je 0x4783df
dec eax
jne 0x4783d0
jmp 0x4783e0
inc eax
movzx eax, ax
movzx ecx, ax
push 0x104
lea ecx, [ebp + ecx - 0x1a8]
lea ebx, [ebp - 0xad0]
call fcn.0047ab50
mov eax, dword [ebp - 0x27fc]
dec eax
add esp, 4
cmp eax, 0x19
ja case.0x478410.7
jmp dword [eax*4 + 0x47aae0]
push str.HKLM
jmp 0x47861f
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.HKLM
lea edx, [ebp - 0x2a8]
push edx
call esi
push str.RunOnce
lea eax, [ebp - 0x228]
push eax
jmp 0x47863a
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.HKLM
lea ecx, [ebp - 0x2a8]
push ecx
call esi
push str.RunOnceEx
lea edx, [ebp - 0x228]
push edx
jmp 0x47863a
push str.HKLM
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x2a8]
push eax
call esi
push str.RunServices
jmp 0x478633
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.HKLM
lea edx, [ebp - 0x2a8]
push edx
call esi
push str.RunServicesOnce
lea eax, [ebp - 0x228]
push eax
jmp 0x47863a
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.HKLM
lea ecx, [ebp - 0x2a8]
push ecx
call esi
push str.RunOnceSetup
lea edx, [ebp - 0x228]
push edx
jmp 0x47863a
push str.HKCU
jmp 0x47861f
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.HKCU
lea edx, [ebp - 0x2a8]
push edx
call esi
push str.RunOnce
lea eax, [ebp - 0x228]
push eax
jmp 0x47863a
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.HKCU
lea ecx, [ebp - 0x2a8]
push ecx
call esi
push str.RunOnceEx
lea edx, [ebp - 0x228]
push edx
jmp 0x47863a
push str.HKCU
jmp 0x478470
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.HKCU
lea edx, [ebp - 0x2a8]
push edx
call esi
push str.RunServicesOnce
lea eax, [ebp - 0x228]
push eax
jmp 0x47863a
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.HKCU
lea ecx, [ebp - 0x2a8]
push ecx
call esi
push str.RunOnceSetup
lea edx, [ebp - 0x228]
push edx
jmp 0x47863a
push 0x4ebefc
jmp 0x47861f
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x4ebefc
lea edx, [ebp - 0x2a8]
push edx
call esi
push str.RunOnce
lea eax, [ebp - 0x228]
push eax
jmp 0x47863a
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x4ebefc
lea ecx, [ebp - 0x2a8]
push ecx
call esi
push str.RunOnceEx
lea edx, [ebp - 0x228]
push edx
jmp 0x47863a
push 0x4ebefc
jmp 0x478470
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x4ebefc
lea edx, [ebp - 0x2a8]
push edx
call esi
push str.RunServiceOnce
lea eax, [ebp - 0x228]
push eax
jmp 0x47863a
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x4ebefc
lea ecx, [ebp - 0x2a8]
push ecx
call esi
push str.RunOnceSetup
lea edx, [ebp - 0x228]
push edx
jmp 0x47863a
push str.UnknownKey
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x2a8]
push eax
call esi
push 0x4ebeb0
lea ecx, [ebp - 0x228]
push ecx
call esi
lea edx, [ebp - 0x27e8]
push edx
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x1350]
push ecx
lea edx, [ebp - 0x1a8]
push edx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
lea edx, [ebp - 0xad0]
push edx
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x228]
push ecx
lea edx, [ebp - 0x2a8]
push edx
lea eax, [ebp - 0xed0]
push str._s__s__s___s__s__s__s__s__s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x30
push 0
lea ecx, [ebp - 0x27f4]
push ecx
lea edx, [ebp - 0xed0]
push edx
call edi
mov ecx, dword [ebp - 0x27f8]
push eax
lea eax, [ebp - 0xed0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x27e4]
inc eax
mov dword [ebp - 0x27e4], eax
cmp eax, dword [ebp - 0x27f0]
jl 0x478232
xor edi, edi
cmp dword [0x505890], edi
je 0x4786e3
call fcn.004c2580
call fcn.00489050
mov eax, dword [0x505890]
mov dword [ebp - 0x27f0], eax
mov dword [ebp - 0x27e4], edi
cmp eax, edi
jle 0x478a8d
lea eax, [ebp - 0x1a8]
lea edx, [ebp - 0x8b0]
sub eax, edx
mov dword [ebp - 0x27ec], eax
mov ebx, dword [ebp - 0x27e4]
lea edi, [ebp - 0x1a8]
call fcn.004c22f0
mov eax, dword [ebx*4 + 0x501878]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
test esi, esi
je 0x4787db
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call ebx
lea ecx, [ebp - 0xa0]
test eax, eax
mov edx, 0x80
mov eax, ecx
jne 0x47878b
mov edi, str.Title_Not_Found
sub edi, ecx
nop
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x47877f
mov cl, byte [eax + edi]
test cl, cl
je 0x47877f
mov byte [eax], cl
inc eax
dec edx
jne 0x478760
dec eax
push str.Title_Not_Found
jmp 0x4787af
test edx, edx
jne 0x478784
dec eax
push str.Title_Not_Found
jmp 0x4787af
mov edi, esi
sub edi, ecx
nop
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x4787a9
mov cl, byte [eax + edi]
test cl, cl
je 0x4787a9
mov byte [eax], cl
inc eax
dec edx
jne 0x478790
jmp 0x4787ad
test edx, edx
jne 0x4787ae
dec eax
push esi
mov byte [eax], 0
call ebx
push str.Title
lea esi, [ebp - 0xa0]
call fcn.0047da70
mov edx, dword [ebp - 0x27e4]
mov eax, dword [edx*4 + 0x501878]
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov edi, dword [ebp - 0x27e4]
mov ecx, dword [edi*4 + 0x501878]
push ecx
xor esi, esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
je 0x478809
mov edx, dword [edi*4 + 0x501878]
mov esi, dword [eax + 0x288]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
lea edi, [ebp - 0x1c]
lea esi, [ebp - 0x1a8]
call fcn.0047f8b0
add esp, 4
push 0x1400
lea eax, [ebp - 0x27e0]
push 0
push eax
call fcn.004d29c0
mov ecx, esi
add esp, 0xc
push ecx
lea ecx, [ebp - 0x27e0]
call fcn.004c0890
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 4
lea edx, [ebp - 0x1fe0]
push edx
call edi
xor ecx, ecx
test eax, eax
jle 0x478881
cmp ecx, 0x80
jge 0x47887c
mov dl, byte [ebp + ecx - 0x1fe0]
cmp dl, 0x2c
jne 0x478875
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47887c
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x478857
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x7a8]
mov byte [ebp + ecx - 0x7a8], 0
push eax
lea ecx, [ebp - 0x3a8]
push ecx
call ebx
lea edx, [ebp - 0x1be0]
push edx
call edi
xor ecx, ecx
test eax, eax
jle 0x4788da
mov edi, edi
cmp ecx, 0x400
jge 0x4788d5
mov dl, byte [ebp + ecx - 0x1be0]
cmp dl, 0x2c
jne 0x4788ce
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x4788d5
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x4788b0
lea eax, [ebp - 0x7a8]
mov byte [ebp + ecx - 0x7a8], 0
push eax
lea ecx, [ebp - 0x1350]
push ecx
call ebx
lea edx, [ebp - 0x23e0]
push edx
call edi
xor ecx, ecx
test eax, eax
jle 0x47892b
cmp ecx, 0x80
jge 0x478926
mov dl, byte [ebp + ecx - 0x23e0]
cmp dl, 0x2c
jne 0x47891f
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x478926
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x478901
lea eax, [ebp - 0x7a8]
mov byte [ebp + ecx - 0x7a8], 0
push eax
lea ecx, [ebp - 0x328]
push ecx
call ebx
mov edx, 0x104
lea eax, [ebp - 0x8b0]
mov edi, edi
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x47896f
mov ecx, dword [ebp - 0x27ec]
mov cl, byte [ecx + eax]
test cl, cl
je 0x47896f
mov byte [eax], cl
inc eax
dec edx
jne 0x478950
jmp 0x478973
test edx, edx
jne 0x478974
dec eax
lea edx, [ebp - 0x8b0]
push edx
mov byte [eax], 0
call edi
test eax, eax
je 0x478994
cmp byte [ebp + eax - 0x8b0], 0x5c
je 0x478993
dec eax
jne 0x478984
jmp 0x478994
inc eax
movzx eax, ax
movzx esi, ax
lea esi, [ebp + esi - 0x1a8]
push esi
call edi
xor ecx, ecx
test eax, eax
jle 0x4789df
lea edx, [ebp - 0x7a8]
sub esi, edx
cmp ecx, 0x104
jge 0x4789da
lea edx, [esi + ecx]
mov dl, byte [ebp + edx - 0x7a8]
cmp dl, 0x2c
jne 0x4789d3
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x4789da
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x4789b2
lea eax, [ebp - 0x7a8]
mov byte [ebp + ecx - 0x7a8], 0
push eax
lea ecx, [ebp - 0xad0]
push ecx
call ebx
lea edx, [ebp - 0x27e8]
push edx
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x1350]
push ecx
lea edx, [ebp - 0x1a8]
push edx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
lea edx, [ebp - 0xad0]
push edx
lea eax, [ebp - 0xa0]
push eax
push str.Folder
push 0x4ebf44
lea ecx, [ebp - 0xed0]
push str._s__s__s___s__s__s__s__s__s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x30
push 0
lea edx, [ebp - 0x27f4]
push edx
lea eax, [ebp - 0xed0]
push eax
call edi
mov edx, dword [ebp - 0x27f8]
push eax
lea ecx, [ebp - 0xed0]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x27e4]
inc eax
mov dword [ebp - 0x27e4], eax
cmp eax, dword [ebp - 0x27f0]
jl 0x478715
xor edi, edi
push 1
call fcn.00488120
add esp, 4
mov dword [ebp - 0x27f0], eax
mov dword [ebp - 0x27e4], edi
cmp eax, edi
jle 0x478f0b
lea eax, [ebp - 0x1a8]
lea ecx, [ebp - 0x8b0]
sub eax, ecx
mov dword [ebp - 0x27ec], eax
mov ebx, dword [ebp - 0x27e4]
lea edi, [ebp - 0x1a8]
call fcn.004c22f0
mov edx, dword [ebx*4 + 0x501878]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
test esi, esi
je 0x478b8b
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call ebx
lea ecx, [ebp - 0xa0]
test eax, eax
mov edx, 0x80
mov eax, ecx
jne 0x478b3b
mov edi, str.Title_Not_Found
sub edi, ecx
lea esp, [esp]
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x478b2f
mov cl, byte [eax + edi]
test cl, cl
je 0x478b2f
mov byte [eax], cl
inc eax
dec edx
jne 0x478b10
dec eax
push str.Title_Not_Found
jmp 0x478b5f
test edx, edx
jne 0x478b34
dec eax
push str.Title_Not_Found
jmp 0x478b5f
mov edi, esi
sub edi, ecx
nop
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x478b59
mov cl, byte [edi + eax]
test cl, cl
je 0x478b59
mov byte [eax], cl
inc eax
dec edx
jne 0x478b40
jmp 0x478b5d
test edx, edx
jne 0x478b5e
dec eax
push esi
mov byte [eax], 0
call ebx
push str.Title
lea esi, [ebp - 0xa0]
call fcn.0047da70
mov edx, dword [ebp - 0x27e4]
mov eax, dword [edx*4 + 0x501878]
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov edi, dword [ebp - 0x27e4]
mov ecx, dword [edi*4 + 0x501878]
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalLock]
push ecx
call ebx
test eax, eax
je 0x478c5a
lea esi, [eax + 0x184]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [ebp - 0x9c8]
test eax, eax
mov edx, 0x104
mov eax, ecx
jne 0x478c0d
mov esi, str.No_path_available
sub esi, ecx
mov edi, edi
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x478be9
mov cl, byte [esi + eax]
test cl, cl
je 0x478be9
mov byte [eax], cl
inc eax
dec edx
jne 0x478bd0
jmp 0x478bed
test edx, edx
jne 0x478bee
dec eax
push str.No_path_available
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStructNull
mov esi, str.No_Path_available
call fcn.0047da70
jmp 0x478c49
mov edi, esi
sub edi, ecx
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x478c2a
mov cl, byte [edi + eax]
test cl, cl
je 0x478c2a
mov byte [eax], cl
inc eax
dec edx
jne 0x478c11
jmp 0x478c2e
test edx, edx
jne 0x478c2f
dec eax
push esi
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStruct
call fcn.0047da70
mov edi, dword [ebp - 0x27e4]
mov edx, dword [edi*4 + 0x501878]
add esp, 4
push edx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [edi*4 + 0x501878]
push eax
xor esi, esi
call ebx
test eax, eax
je 0x478c7e
mov ecx, dword [edi*4 + 0x501878]
mov esi, dword [eax + 0x288]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
lea edi, [ebp - 0x1c]
lea esi, [ebp - 0x1a8]
call fcn.0047f8b0
add esp, 4
push 0x1400
lea edx, [ebp - 0x27e0]
push 0
push edx
call fcn.004d29c0
mov eax, esi
add esp, 0xc
push eax
lea ecx, [ebp - 0x27e0]
call fcn.004c0890
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 4
lea ecx, [ebp - 0x1fe0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x478cfa
lea esp, [esp]
cmp ecx, 0x80
jge 0x478cf5
mov dl, byte [ebp + ecx - 0x1fe0]
cmp dl, 0x2c
jne 0x478cee
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x478cf5
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x478cd0
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x3a8]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
lea ecx, [ebp - 0x1be0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x478d51
cmp ecx, 0x400
jge 0x478d4c
mov dl, byte [ebp + ecx - 0x1be0]
cmp dl, 0x2c
jne 0x478d45
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x478d4c
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x478d27
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x1350]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
lea ecx, [ebp - 0x23e0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x478da2
cmp ecx, 0x80
jge 0x478d9d
mov dl, byte [ebp + ecx - 0x23e0]
cmp dl, 0x2c
jne 0x478d96
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x478d9d
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x478d78
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x328]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
mov edx, 0x104
lea eax, [ebp - 0x8b0]
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x478de4
mov ecx, dword [ebp - 0x27ec]
mov cl, byte [ecx + eax]
test cl, cl
je 0x478de4
mov byte [eax], cl
inc eax
dec edx
jne 0x478dc5
jmp 0x478de8
test edx, edx
jne 0x478de9
dec eax
lea edx, [ebp - 0x8b0]
push edx
mov byte [eax], 0
call edi
test eax, eax
je 0x478e10
lea esp, [esp]
cmp byte [ebp + eax - 0x8b0], 0x5c
je 0x478e0f
dec eax
jne 0x478e00
jmp 0x478e10
inc eax
movzx eax, ax
movzx esi, ax
lea esi, [ebp + esi - 0x1a8]
push esi
call edi
xor ecx, ecx
test eax, eax
jle 0x478e5d
lea edx, [ebp - 0x7a8]
sub esi, edx
mov edi, edi
cmp ecx, 0x104
jge 0x478e58
lea edx, [esi + ecx]
mov dl, byte [ebp + edx - 0x7a8]
cmp dl, 0x2c
jne 0x478e51
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x478e58
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x478e30
lea eax, [ebp - 0x7a8]
mov byte [ebp + ecx - 0x7a8], 0
push eax
lea ecx, [ebp - 0xad0]
push ecx
call ebx
lea edx, [ebp - 0x27e8]
push edx
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x1350]
push ecx
lea edx, [ebp - 0x1a8]
push edx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
lea edx, [ebp - 0xad0]
push edx
lea eax, [ebp - 0xa0]
push eax
push 0x4e27f8
push str.Delayed_Start
lea ecx, [ebp - 0xed0]
push str._s__s__s___s__s__s__s__s__s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x30
push 0
lea edx, [ebp - 0x27f4]
push edx
lea eax, [ebp - 0xed0]
push eax
call edi
mov edx, dword [ebp - 0x27f8]
push eax
lea ecx, [ebp - 0xed0]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x27e4]
inc eax
mov dword [ebp - 0x27e4], eax
cmp eax, dword [ebp - 0x27f0]
jl 0x478abf
xor edi, edi
call fcn.00486ab0
mov dword [ebp - 0x27f0], eax
mov dword [ebp - 0x27e4], edi
cmp eax, edi
jle 0x47937b
lea eax, [ebp - 0x1a8]
lea ecx, [ebp - 0x8b0]
sub eax, ecx
mov dword [ebp - 0x27ec], eax
mov ebx, dword [ebp - 0x27e4]
lea edi, [ebp - 0x1a8]
call fcn.004c22f0
mov edx, dword [ebx*4 + 0x501878]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
test esi, esi
je 0x478ffc
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call ebx
lea ecx, [ebp - 0xa0]
test eax, eax
mov edx, 0x80
mov eax, ecx
jne 0x478fad
mov edi, str.Title_Not_Found
sub edi, ecx
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x478fa1
mov cl, byte [eax + edi]
test cl, cl
je 0x478fa1
mov byte [eax], cl
inc eax
dec edx
jne 0x478f82
dec eax
push str.Title_Not_Found
jmp 0x478fd0
test edx, edx
jne 0x478fa6
dec eax
push str.Title_Not_Found
jmp 0x478fd0
mov edi, esi
sub edi, ecx
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x478fca
mov cl, byte [edi + eax]
test cl, cl
je 0x478fca
mov byte [eax], cl
inc eax
dec edx
jne 0x478fb1
jmp 0x478fce
test edx, edx
jne 0x478fcf
dec eax
push esi
mov byte [eax], 0
call ebx
push str.Title
lea esi, [ebp - 0xa0]
call fcn.0047da70
mov edx, dword [ebp - 0x27e4]
mov eax, dword [edx*4 + 0x501878]
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov edi, dword [ebp - 0x27e4]
mov ecx, dword [edi*4 + 0x501878]
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalLock]
push ecx
call ebx
test eax, eax
je 0x4790ca
lea esi, [eax + 0x184]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [ebp - 0x9c8]
test eax, eax
mov edx, 0x104
mov eax, ecx
jne 0x47907d
mov esi, str.No_path_available
sub esi, ecx
nop
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x479059
mov cl, byte [eax + esi]
test cl, cl
je 0x479059
mov byte [eax], cl
inc eax
dec edx
jne 0x479040
jmp 0x47905d
test edx, edx
jne 0x47905e
dec eax
push str.No_path_available
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStructNull
mov esi, str.No_Path_available
call fcn.0047da70
jmp 0x4790b9
mov edi, esi
sub edi, ecx
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x47909a
mov cl, byte [edi + eax]
test cl, cl
je 0x47909a
mov byte [eax], cl
inc eax
dec edx
jne 0x479081
jmp 0x47909e
test edx, edx
jne 0x47909f
dec eax
push esi
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStruct
call fcn.0047da70
mov edi, dword [ebp - 0x27e4]
mov edx, dword [edi*4 + 0x501878]
add esp, 4
push edx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [edi*4 + 0x501878]
push eax
xor esi, esi
call ebx
test eax, eax
je 0x4790ee
mov ecx, dword [edi*4 + 0x501878]
mov esi, dword [eax + 0x288]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
lea edi, [ebp - 0x1c]
lea esi, [ebp - 0x1a8]
call fcn.0047f8b0
add esp, 4
push 0x1400
lea edx, [ebp - 0x27e0]
push 0
push edx
call fcn.004d29c0
mov eax, esi
add esp, 0xc
push eax
lea ecx, [ebp - 0x27e0]
call fcn.004c0890
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 4
lea ecx, [ebp - 0x1fe0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x47916a
lea esp, [esp]
cmp ecx, 0x80
jge 0x479165
mov dl, byte [ebp + ecx - 0x1fe0]
cmp dl, 0x2c
jne 0x47915e
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x479165
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x479140
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x3a8]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
lea ecx, [ebp - 0x1be0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x4791c1
cmp ecx, 0x400
jge 0x4791bc
mov dl, byte [ebp + ecx - 0x1be0]
cmp dl, 0x2c
jne 0x4791b5
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x4791bc
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x479197
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x1350]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
lea ecx, [ebp - 0x23e0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x479212
cmp ecx, 0x80
jge 0x47920d
mov dl, byte [ebp + ecx - 0x23e0]
cmp dl, 0x2c
jne 0x479206
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47920d
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x4791e8
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x328]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
mov edx, 0x104
lea eax, [ebp - 0x8b0]
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x479254
mov ecx, dword [ebp - 0x27ec]
mov cl, byte [ecx + eax]
test cl, cl
je 0x479254
mov byte [eax], cl
inc eax
dec edx
jne 0x479235
jmp 0x479258
test edx, edx
jne 0x479259
dec eax
lea edx, [ebp - 0x8b0]
push edx
mov byte [eax], 0
call edi
test eax, eax
je 0x479280
lea esp, [esp]
cmp byte [ebp + eax - 0x8b0], 0x5c
je 0x47927f
dec eax
jne 0x479270
jmp 0x479280
inc eax
movzx eax, ax
movzx esi, ax
lea esi, [ebp + esi - 0x1a8]
push esi
call edi
xor ecx, ecx
test eax, eax
jle 0x4792cd
lea edx, [ebp - 0x7a8]
sub esi, edx
mov edi, edi
cmp ecx, 0x104
jge 0x4792c8
lea edx, [esi + ecx]
mov dl, byte [ebp + edx - 0x7a8]
cmp dl, 0x2c
jne 0x4792c1
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x4792c8
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x4792a0
lea eax, [ebp - 0x7a8]
mov byte [ebp + ecx - 0x7a8], 0
push eax
lea ecx, [ebp - 0xad0]
push ecx
call ebx
lea edx, [ebp - 0x27e8]
push edx
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x1350]
push ecx
lea edx, [ebp - 0x1a8]
push edx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
lea edx, [ebp - 0xad0]
push edx
lea eax, [ebp - 0xa0]
push eax
push 0x4e27f8
push str.Active_Tasks
lea ecx, [ebp - 0xed0]
push str._s__s__s___s__s__s__s__s__s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x30
push 0
lea edx, [ebp - 0x27f4]
push edx
lea eax, [ebp - 0xed0]
push eax
call edi
mov edx, dword [ebp - 0x27f8]
push eax
lea ecx, [ebp - 0xed0]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x27e4]
inc eax
mov dword [ebp - 0x27e4], eax
cmp eax, dword [ebp - 0x27f0]
jl 0x478f38
xor edi, edi
call fcn.00493700
mov dword [ebp - 0x27f0], eax
mov dword [ebp - 0x27e4], edi
cmp eax, edi
jle 0x4797eb
lea eax, [ebp - 0x1a8]
lea ecx, [ebp - 0x8b0]
sub eax, ecx
mov dword [ebp - 0x27ec], eax
mov ebx, dword [ebp - 0x27e4]
lea edi, [ebp - 0x1a8]
call fcn.004c22f0
mov edx, dword [ebx*4 + 0x501878]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
test esi, esi
je 0x47946c
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call ebx
lea ecx, [ebp - 0xa0]
test eax, eax
mov edx, 0x80
mov eax, ecx
jne 0x47941d
mov edi, str.Title_Not_Found
sub edi, ecx
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x479411
mov cl, byte [eax + edi]
test cl, cl
je 0x479411
mov byte [eax], cl
inc eax
dec edx
jne 0x4793f2
dec eax
push str.Title_Not_Found
jmp 0x479440
test edx, edx
jne 0x479416
dec eax
push str.Title_Not_Found
jmp 0x479440
mov edi, esi
sub edi, ecx
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x47943a
mov cl, byte [eax + edi]
test cl, cl
je 0x47943a
mov byte [eax], cl
inc eax
dec edx
jne 0x479421
jmp 0x47943e
test edx, edx
jne 0x47943f
dec eax
push esi
mov byte [eax], 0
call ebx
push str.Title
lea esi, [ebp - 0xa0]
call fcn.0047da70
mov edx, dword [ebp - 0x27e4]
mov eax, dword [edx*4 + 0x501878]
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov edi, dword [ebp - 0x27e4]
mov ecx, dword [edi*4 + 0x501878]
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalLock]
push ecx
call ebx
test eax, eax
je 0x47953a
lea esi, [eax + 0x184]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [ebp - 0x9c8]
test eax, eax
mov edx, 0x104
mov eax, ecx
jne 0x4794ed
mov esi, str.No_path_available
sub esi, ecx
nop
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x4794c9
mov cl, byte [eax + esi]
test cl, cl
je 0x4794c9
mov byte [eax], cl
inc eax
dec edx
jne 0x4794b0
jmp 0x4794cd
test edx, edx
jne 0x4794ce
dec eax
push str.No_path_available
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStructNull
mov esi, str.No_Path_available
call fcn.0047da70
jmp 0x479529
mov edi, esi
sub edi, ecx
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x47950a
mov cl, byte [eax + edi]
test cl, cl
je 0x47950a
mov byte [eax], cl
inc eax
dec edx
jne 0x4794f1
jmp 0x47950e
test edx, edx
jne 0x47950f
dec eax
push esi
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStruct
call fcn.0047da70
mov edi, dword [ebp - 0x27e4]
mov edx, dword [edi*4 + 0x501878]
add esp, 4
push edx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [edi*4 + 0x501878]
push eax
xor esi, esi
call ebx
test eax, eax
je 0x47955e
mov ecx, dword [edi*4 + 0x501878]
mov esi, dword [eax + 0x288]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
lea edi, [ebp - 0x1c]
lea esi, [ebp - 0x1a8]
call fcn.0047f8b0
add esp, 4
push 0x1400
lea edx, [ebp - 0x27e0]
push 0
push edx
call fcn.004d29c0
mov eax, esi
add esp, 0xc
push eax
lea ecx, [ebp - 0x27e0]
call fcn.004c0890
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 4
lea ecx, [ebp - 0x1fe0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x4795da
lea esp, [esp]
cmp ecx, 0x80
jge 0x4795d5
mov dl, byte [ebp + ecx - 0x1fe0]
cmp dl, 0x2c
jne 0x4795ce
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x4795d5
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x4795b0
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x3a8]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
lea ecx, [ebp - 0x1be0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x479631
cmp ecx, 0x400
jge 0x47962c
mov dl, byte [ebp + ecx - 0x1be0]
cmp dl, 0x2c
jne 0x479625
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47962c
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x479607
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x1350]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
lea ecx, [ebp - 0x23e0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x479682
cmp ecx, 0x80
jge 0x47967d
mov dl, byte [ebp + ecx - 0x23e0]
cmp dl, 0x2c
jne 0x479676
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47967d
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x479658
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x328]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
mov edx, 0x104
lea eax, [ebp - 0x8b0]
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x4796c4
mov ecx, dword [ebp - 0x27ec]
mov cl, byte [eax + ecx]
test cl, cl
je 0x4796c4
mov byte [eax], cl
inc eax
dec edx
jne 0x4796a5
jmp 0x4796c8
test edx, edx
jne 0x4796c9
dec eax
lea edx, [ebp - 0x8b0]
push edx
mov byte [eax], 0
call edi
test eax, eax
je 0x4796f0
lea esp, [esp]
cmp byte [ebp + eax - 0x8b0], 0x5c
je 0x4796ef
dec eax
jne 0x4796e0
jmp 0x4796f0
inc eax
movzx eax, ax
movzx esi, ax
lea esi, [ebp + esi - 0x1a8]
push esi
call edi
xor ecx, ecx
test eax, eax
jle 0x47973d
lea edx, [ebp - 0x7a8]
sub esi, edx
mov edi, edi
cmp ecx, 0x104
jge 0x479738
lea edx, [ecx + esi]
mov dl, byte [ebp + edx - 0x7a8]
cmp dl, 0x2c
jne 0x479731
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x479738
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x479710
lea eax, [ebp - 0x7a8]
mov byte [ebp + ecx - 0x7a8], 0
push eax
lea ecx, [ebp - 0xad0]
push ecx
call ebx
lea edx, [ebp - 0x27e8]
push edx
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x1350]
push ecx
lea edx, [ebp - 0x1a8]
push edx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
lea edx, [ebp - 0xad0]
push edx
lea eax, [ebp - 0xa0]
push eax
push 0x4ebf6c
push str.IE_Helpers
lea ecx, [ebp - 0xed0]
push str._s__s__s___s__s__s__s__s__s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x30
push 0
lea edx, [ebp - 0x27f4]
push edx
lea eax, [ebp - 0xed0]
push eax
call edi
mov edx, dword [ebp - 0x27f8]
push eax
lea ecx, [ebp - 0xed0]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x27e4]
inc eax
mov dword [ebp - 0x27e4], eax
cmp eax, dword [ebp - 0x27f0]
jl 0x4793a8
xor edi, edi
mov ecx, dword [0x505890]
cmp ecx, edi
je 0x479823
xor esi, esi
cmp ecx, edi
jle 0x47981d
jmp 0x479800
mov eax, dword [esi*4 + 0x501878]
cmp eax, edi
je 0x479818
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [0x505890]
inc esi
cmp esi, ecx
jl 0x479800
mov dword [0x505890], edi
call fcn.004026a0
mov ecx, dword [0x505890]
mov dword [ebp - 0x27e4], edi
cmp ecx, edi
jle 0x479cb1
mov esi, dword [ebp - 0x27e4]
lea edi, [ebp - 0x1a8]
mov ebx, esi
call fcn.004c22f0
mov eax, dword [esi*4 + 0x501878]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov edi, eax
test edi, edi
je 0x479915
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
push edi
call ebx
lea ecx, [ebp - 0xa0]
test eax, eax
mov edx, 0x80
mov eax, ecx
jne 0x4798bb
mov esi, str.Title_Not_Found
sub esi, ecx
jmp 0x479890
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x4798af
mov cl, byte [eax + esi]
test cl, cl
je 0x4798af
mov byte [eax], cl
inc eax
dec edx
jne 0x479890
dec eax
push str.Title_Not_Found
jmp 0x4798df
test edx, edx
jne 0x4798b4
dec eax
push str.Title_Not_Found
jmp 0x4798df
mov esi, edi
sub esi, ecx
nop
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x4798d9
mov cl, byte [eax + esi]
test cl, cl
je 0x4798d9
mov byte [eax], cl
inc eax
dec edx
jne 0x4798c0
jmp 0x4798dd
test edx, edx
jne 0x4798de
dec eax
push edi
mov byte [eax], 0
call ebx
push str.Title
lea esi, [ebp - 0xa0]
call fcn.0047da70
mov edx, dword [ebp - 0x27e4]
mov eax, dword [edx*4 + 0x501878]
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalUnlock]
add esp, 4
push eax
call ebx
mov esi, dword [ebp - 0x27e4]
jmp 0x47991b
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov ecx, dword [esi*4 + 0x501878]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
je 0x4799d7
lea esi, [eax + 0x184]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [ebp - 0x9c8]
test eax, eax
mov edx, 0x104
mov eax, ecx
jne 0x47998e
mov esi, str.No_path_available
sub esi, ecx
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x47996f
mov cl, byte [eax + esi]
test cl, cl
je 0x47996f
mov byte [eax], cl
inc eax
dec edx
jne 0x479956
jmp 0x479973
test edx, edx
jne 0x479974
dec eax
push str.No_path_available
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStructNull
mov esi, str.No_Path_available
jmp 0x4799bf
mov edi, esi
sub edi, ecx
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x4799ab
mov cl, byte [edi + eax]
test cl, cl
je 0x4799ab
mov byte [eax], cl
inc eax
dec edx
jne 0x479992
jmp 0x4799af
test edx, edx
jne 0x4799b0
dec eax
push esi
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStruct
call fcn.0047da70
mov edx, dword [ebp - 0x27e4]
mov eax, dword [edx*4 + 0x501878]
add esp, 4
push eax
call ebx
mov edi, dword [ebp - 0x27e4]
mov ecx, dword [edi*4 + 0x501878]
push ecx
xor esi, esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
je 0x479a01
mov edx, dword [edi*4 + 0x501878]
mov esi, dword [eax + 0x288]
push edx
call ebx
lea eax, [ebp - 0x9c8]
push eax
call fcn.00402d90
add esp, 4
test eax, 0x400
jne 0x479c92
push esi
lea edi, [ebp - 0x1c]
lea esi, [ebp - 0x1a8]
call fcn.0047f8b0
add esp, 4
push 0x1400
lea ecx, [ebp - 0x27e0]
push 0
push ecx
call fcn.004d29c0
mov edx, esi
add esp, 0xc
push edx
lea ecx, [ebp - 0x27e0]
call fcn.004c0890
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 4
lea eax, [ebp - 0x1fe0]
push eax
call edi
xor ecx, ecx
test eax, eax
jle 0x479a9a
lea esp, [esp]
cmp ecx, 0x80
jge 0x479a95
mov dl, byte [ebp + ecx - 0x1fe0]
cmp dl, 0x2c
jne 0x479a8e
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x479a95
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x479a70
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov byte [ebp + ecx - 0x7a8], 0
lea ecx, [ebp - 0x7a8]
push ecx
lea edx, [ebp - 0x3a8]
push edx
call ebx
lea eax, [ebp - 0x1be0]
push eax
call edi
xor ecx, ecx
test eax, eax
jle 0x479af1
cmp ecx, 0x400
jge 0x479aec
mov dl, byte [ebp + ecx - 0x1be0]
cmp dl, 0x2c
jne 0x479ae5
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x479aec
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x479ac7
mov byte [ebp + ecx - 0x7a8], 0
lea ecx, [ebp - 0x7a8]
push ecx
lea edx, [ebp - 0x1350]
push edx
call ebx
lea eax, [ebp - 0x23e0]
push eax
call edi
xor ecx, ecx
test eax, eax
jle 0x479b42
cmp ecx, 0x80
jge 0x479b3d
mov dl, byte [ebp + ecx - 0x23e0]
cmp dl, 0x2c
jne 0x479b36
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x479b3d
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x479b18
mov byte [ebp + ecx - 0x7a8], 0
lea ecx, [ebp - 0x7a8]
push ecx
lea edx, [ebp - 0x328]
push edx
call ebx
lea eax, [ebp - 0x8b0]
lea edx, [ebp - 0x1a8]
mov ecx, eax
mov esi, 0x104
sub edx, ecx
nop
lea ecx, [esi + 0x7ffffefa]
test ecx, ecx
je 0x479b89
mov cl, byte [edx + eax]
test cl, cl
je 0x479b89
mov byte [eax], cl
inc eax
dec esi
jne 0x479b70
jmp 0x479b8d
test esi, esi
jne 0x479b8e
dec eax
lea edx, [ebp - 0x8b0]
push edx
mov byte [eax], 0
call edi
test eax, eax
je 0x479bb0
mov edi, edi
cmp byte [ebp + eax - 0x8b0], 0x5c
je 0x479baf
dec eax
jne 0x479ba0
jmp 0x479bb0
inc eax
movzx eax, ax
movzx esi, ax
lea esi, [ebp + esi - 0x1a8]
push esi
call edi
xor ecx, ecx
test eax, eax
jle 0x479bfd
lea edx, [ebp - 0x7a8]
sub esi, edx
mov edi, edi
cmp ecx, 0x104
jge 0x479bf8
lea edx, [esi + ecx]
mov dl, byte [ebp + edx - 0x7a8]
cmp dl, 0x2c
jne 0x479bf1
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x479bf8
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x479bd0
lea eax, [ebp - 0x7a8]
mov byte [ebp + ecx - 0x7a8], 0
push eax
lea ecx, [ebp - 0xad0]
push ecx
call ebx
lea edx, [ebp - 0x27e8]
push edx
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x1350]
push ecx
lea edx, [ebp - 0x1a8]
push edx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
lea edx, [ebp - 0xad0]
push edx
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0xf50]
push ecx
push 0x4ebf7c
lea edx, [ebp - 0xed0]
push str._s__s__s___s__s__s__s__s__s_s
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x30
push 0
lea eax, [ebp - 0x27f4]
push eax
lea ecx, [ebp - 0xed0]
push ecx
call edi
push eax
mov eax, dword [ebp - 0x27f8]
lea edx, [ebp - 0xed0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x27e4]
mov ecx, dword [0x505890]
inc eax
mov dword [ebp - 0x27e4], eax
cmp eax, ecx
jl 0x47983c
xor edi, edi
cmp ecx, edi
je 0x479cdd
xor esi, esi
cmp ecx, edi
jle 0x479cdd
lea esp, [esp]
mov eax, dword [esi*4 + 0x501878]
cmp eax, edi
je 0x479cd8
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [0x505890]
inc esi
cmp esi, ecx
jl 0x479cc0
mov dword [0x505890], edi
call fcn.00493900
mov dword [ebp - 0x27f0], eax
mov dword [ebp - 0x27e4], edi
cmp eax, edi
jle 0x47a15b
lea eax, [ebp - 0x1a8]
lea ecx, [ebp - 0x8b0]
sub eax, ecx
mov dword [ebp - 0x27ec], eax
mov ebx, dword [ebp - 0x27e4]
lea edi, [ebp - 0x1a8]
call fcn.004c22f0
mov edx, dword [ebx*4 + 0x501878]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
test esi, esi
je 0x479ddb
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call ebx
lea ecx, [ebp - 0xa0]
test eax, eax
mov edx, 0x80
mov eax, ecx
jne 0x479d8b
mov edi, str.Title_Not_Found
sub edi, ecx
lea ebx, [ebx]
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x479d7f
mov cl, byte [edi + eax]
test cl, cl
je 0x479d7f
mov byte [eax], cl
inc eax
dec edx
jne 0x479d60
dec eax
push str.Title_Not_Found
jmp 0x479daf
test edx, edx
jne 0x479d84
dec eax
push str.Title_Not_Found
jmp 0x479daf
mov edi, esi
sub edi, ecx
nop
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x479da9
mov cl, byte [eax + edi]
test cl, cl
je 0x479da9
mov byte [eax], cl
inc eax
dec edx
jne 0x479d90
jmp 0x479dad
test edx, edx
jne 0x479dae
dec eax
push esi
mov byte [eax], 0
call ebx
push str.Title
lea esi, [ebp - 0xa0]
call fcn.0047da70
mov edx, dword [ebp - 0x27e4]
mov eax, dword [edx*4 + 0x501878]
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov edi, dword [ebp - 0x27e4]
mov ecx, dword [edi*4 + 0x501878]
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalLock]
push ecx
call ebx
test eax, eax
je 0x479ea7
lea esi, [eax + 0x184]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [ebp - 0x9c8]
test eax, eax
mov edx, 0x104
mov eax, ecx
jne 0x479e5b
mov esi, str.No_path_available
sub esi, ecx
mov edi, edi
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x479e37
mov cl, byte [esi + eax]
test cl, cl
je 0x479e37
inc eax
dec edx
jne 0x479e20
jmp 0x479e3b
test edx, edx
jne 0x479e3c
dec eax
push str.No_path_available
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStructNull
mov esi, str.No_Path_available
call fcn.0047da70
jmp 0x479e96
mov edi, esi
sub edi, ecx
nop
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x479e77
mov cl, byte [eax + edi]
test cl, cl
je 0x479e77
inc eax
dec edx
jne 0x479e60
jmp 0x479e7b
test edx, edx
jne 0x479e7c
dec eax
push esi
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStruct
call fcn.0047da70
mov edi, dword [ebp - 0x27e4]
mov edx, dword [edi*4 + 0x501878]
add esp, 4
push edx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [edi*4 + 0x501878]
push eax
xor esi, esi
call ebx
test eax, eax
je 0x479ecb
mov ecx, dword [edi*4 + 0x501878]
mov esi, dword [eax + 0x288]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
lea edi, [ebp - 0x1c]
lea esi, [ebp - 0x1a8]
call fcn.0047f8b0
add esp, 4
push 0x1400
lea edx, [ebp - 0x27e0]
push 0
push edx
call fcn.004d29c0
mov eax, esi
add esp, 0xc
push eax
lea ecx, [ebp - 0x27e0]
call fcn.004c0890
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 4
lea ecx, [ebp - 0x1fe0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x479f4a
lea esp, [esp]
cmp ecx, 0x80
jge 0x479f45
mov dl, byte [ebp + ecx - 0x1fe0]
cmp dl, 0x2c
jne 0x479f3e
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x479f45
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x479f20
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x3a8]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
lea ecx, [ebp - 0x1be0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x479fa1
cmp ecx, 0x400
jge 0x479f9c
mov dl, byte [ebp + ecx - 0x1be0]
cmp dl, 0x2c
jne 0x479f95
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x479f9c
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x479f77
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x1350]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
lea ecx, [ebp - 0x23e0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x479ff2
cmp ecx, 0x80
jge 0x479fed
mov dl, byte [ebp + ecx - 0x23e0]
cmp dl, 0x2c
jne 0x479fe6
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x479fed
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x479fc8
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x328]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
mov edx, 0x104
lea eax, [ebp - 0x8b0]
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x47a034
mov ecx, dword [ebp - 0x27ec]
mov cl, byte [ecx + eax]
test cl, cl
je 0x47a034
mov byte [eax], cl
inc eax
dec edx
jne 0x47a015
jmp 0x47a038
test edx, edx
jne 0x47a039
dec eax
lea edx, [ebp - 0x8b0]
push edx
mov byte [eax], 0
call edi
test eax, eax
je 0x47a060
lea esp, [esp]
cmp byte [ebp + eax - 0x8b0], 0x5c
je 0x47a05f
dec eax
jne 0x47a050
jmp 0x47a060
inc eax
movzx eax, ax
movzx esi, ax
lea esi, [ebp + esi - 0x1a8]
push esi
call edi
xor ecx, ecx
test eax, eax
jle 0x47a0ad
lea edx, [ebp - 0x7a8]
sub esi, edx
mov edi, edi
cmp ecx, 0x104
jge 0x47a0a8
lea edx, [esi + ecx]
mov dl, byte [ebp + edx - 0x7a8]
cmp dl, 0x2c
jne 0x47a0a1
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47a0a8
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x47a080
lea eax, [ebp - 0x7a8]
mov byte [ebp + ecx - 0x7a8], 0
push eax
lea ecx, [ebp - 0xad0]
push ecx
call ebx
lea edx, [ebp - 0x27e8]
push edx
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x1350]
push ecx
lea edx, [ebp - 0x1a8]
push edx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
lea edx, [ebp - 0xad0]
push edx
lea eax, [ebp - 0xa0]
push eax
push str.Toolbar
push str.IE_Helpers
lea ecx, [ebp - 0xed0]
push str._s__s__s___s__s__s__s__s__s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x30
push 0
lea edx, [ebp - 0x27f4]
push edx
lea eax, [ebp - 0xed0]
push eax
call edi
mov edx, dword [ebp - 0x27f8]
push eax
lea ecx, [ebp - 0xed0]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x27e4]
inc eax
mov dword [ebp - 0x27e4], eax
cmp eax, dword [ebp - 0x27f0]
jl 0x479d10
xor edi, edi
mov ecx, dword [0x505890]
cmp ecx, edi
je 0x47a193
xor esi, esi
cmp ecx, edi
jle 0x47a18d
jmp 0x47a170
mov eax, dword [esi*4 + 0x501878]
cmp eax, edi
je 0x47a188
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [0x505890]
inc esi
cmp esi, ecx
jl 0x47a170
mov dword [0x505890], edi
call fcn.0048a730
mov dword [ebp - 0x27e4], edi
cmp dword [0x505890], edi
jle 0x47a61f
lea eax, [ebp - 0x1a8]
lea ecx, [ebp - 0x8b0]
sub eax, ecx
mov dword [ebp - 0x27ec], eax
mov ebx, dword [ebp - 0x27e4]
lea edi, [ebp - 0x1a8]
call fcn.004c22f0
mov edx, dword [ebx*4 + 0x501878]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
test esi, esi
je 0x47a28b
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call ebx
lea ecx, [ebp - 0xa0]
test eax, eax
mov edx, 0x80
mov eax, ecx
jne 0x47a23b
mov edi, str.Title_Not_Found
sub edi, ecx
jmp 0x47a210
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x47a22f
mov cl, byte [edi + eax]
test cl, cl
je 0x47a22f
mov byte [eax], cl
inc eax
dec edx
jne 0x47a210
dec eax
push str.Title_Not_Found
jmp 0x47a25f
test edx, edx
jne 0x47a234
dec eax
push str.Title_Not_Found
jmp 0x47a25f
mov edi, esi
sub edi, ecx
nop
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x47a259
mov cl, byte [edi + eax]
test cl, cl
je 0x47a259
mov byte [eax], cl
inc eax
dec edx
jne 0x47a240
jmp 0x47a25d
test edx, edx
jne 0x47a25e
dec eax
push esi
mov byte [eax], 0
call ebx
push str.Title
lea esi, [ebp - 0xa0]
call fcn.0047da70
mov edx, dword [ebp - 0x27e4]
mov eax, dword [edx*4 + 0x501878]
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov ecx, dword [ebp - 0x27e4]
mov edx, dword [ecx*4 + 0x501878]
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalLock]
push edx
call ebx
test eax, eax
je 0x47a357
lea esi, [eax + 0x184]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [ebp - 0x9c8]
test eax, eax
mov edx, 0x104
mov eax, ecx
jne 0x47a306
mov esi, str.No_path_available
sub esi, ecx
mov edi, edi
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x47a2e7
mov cl, byte [esi + eax]
test cl, cl
je 0x47a2e7
inc eax
dec edx
jne 0x47a2d0
jmp 0x47a2eb
test edx, edx
jne 0x47a2ec
dec eax
push str.No_path_available
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStructNull
mov esi, str.No_Path_available
jmp 0x47a33b
mov edi, esi
sub edi, ecx
lea ebx, [ebx]
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x47a327
mov cl, byte [edi + eax]
test cl, cl
je 0x47a327
inc eax
dec edx
jne 0x47a310
jmp 0x47a32b
test edx, edx
jne 0x47a32c
dec eax
push esi
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStruct
call fcn.0047da70
mov edx, dword [ebp - 0x27e4]
mov eax, dword [edx*4 + 0x501878]
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea edi, [ebp - 0xf50]
lea ecx, [ebp - 0xa0]
call fcn.004c5880
mov ecx, dword [ebp - 0x27e4]
mov edx, dword [ecx*4 + 0x501878]
push edx
xor esi, esi
call ebx
test eax, eax
je 0x47a398
mov esi, dword [eax + 0x288]
mov eax, dword [ebp - 0x27e4]
mov ecx, dword [eax*4 + 0x501878]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
lea edi, [ebp - 0x1c]
lea esi, [ebp - 0x1a8]
call fcn.0047f8b0
add esp, 4
push 0x1400
lea edx, [ebp - 0x27e0]
push 0
push edx
call fcn.004d29c0
mov eax, esi
add esp, 0xc
push eax
lea ecx, [ebp - 0x27e0]
call fcn.004c0890
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 4
lea ecx, [ebp - 0x1fe0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x47a410
cmp ecx, 0x80
jge 0x47a40b
mov dl, byte [ebp + ecx - 0x1fe0]
cmp dl, 0x2c
jne 0x47a404
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47a40b
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x47a3e6
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x3a8]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
lea ecx, [ebp - 0x1be0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x47a46a
lea ecx, [ecx]
cmp ecx, 0x400
jge 0x47a465
mov dl, byte [ebp + ecx - 0x1be0]
cmp dl, 0x2c
jne 0x47a45e
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47a465
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x47a440
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x1350]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
lea ecx, [ebp - 0x23e0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x47a4bb
cmp ecx, 0x80
jge 0x47a4b6
mov dl, byte [ebp + ecx - 0x23e0]
cmp dl, 0x2c
jne 0x47a4af
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47a4b6
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x47a491
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x328]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
mov edx, 0x104
lea eax, [ebp - 0x8b0]
mov edi, edi
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x47a4ff
mov ecx, dword [ebp - 0x27ec]
mov cl, byte [ecx + eax]
test cl, cl
je 0x47a4ff
mov byte [eax], cl
inc eax
dec edx
jne 0x47a4e0
jmp 0x47a503
test edx, edx
jne 0x47a504
dec eax
lea edx, [ebp - 0x8b0]
push edx
mov byte [eax], 0
call edi
test eax, eax
je 0x47a524
cmp byte [ebp + eax - 0x8b0], 0x5c
je 0x47a523
dec eax
jne 0x47a514
jmp 0x47a524
inc eax
movzx eax, ax
movzx esi, ax
lea esi, [ebp + esi - 0x1a8]
push esi
call edi
xor ecx, ecx
test eax, eax
jle 0x47a56f
lea edx, [ebp - 0x7a8]
sub esi, edx
cmp ecx, 0x104
jge 0x47a56a
lea edx, [esi + ecx]
mov dl, byte [ebp + edx - 0x7a8]
cmp dl, 0x2c
jne 0x47a563
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47a56a
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x47a542
lea eax, [ebp - 0x7a8]
mov byte [ebp + ecx - 0x7a8], 0
push eax
lea ecx, [ebp - 0xad0]
push ecx
call ebx
lea edx, [ebp - 0x27e8]
push edx
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x1350]
push ecx
lea edx, [ebp - 0x1a8]
push edx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
lea edx, [ebp - 0xad0]
push edx
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0xf50]
push ecx
push 0x4ebf8c
lea edx, [ebp - 0xed0]
push str._s__s__s___s__s__s__s__s__s_s
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x30
push 0
lea eax, [ebp - 0x27f4]
push eax
lea ecx, [ebp - 0xed0]
push ecx
call edi
push eax
mov eax, dword [ebp - 0x27f8]
lea edx, [ebp - 0xed0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x27e4]
inc eax
mov dword [ebp - 0x27e4], eax
cmp eax, dword [0x505890]
jl 0x47a1be
xor edi, edi
call fcn.004c4c00
mov dword [ebp - 0x27f0], eax
mov dword [ebp - 0x27e4], edi
cmp eax, edi
jle 0x47aa89
lea eax, [ebp - 0x1a8]
lea ecx, [ebp - 0x8b0]
sub eax, ecx
mov dword [ebp - 0x27ec], eax
mov ebx, dword [ebp - 0x27e4]
lea edi, [ebp - 0x1a8]
call fcn.004c22f0
mov edx, dword [ebx*4 + 0x501878]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
test esi, esi
je 0x47a710
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call ebx
lea ecx, [ebp - 0xa0]
test eax, eax
mov edx, 0x80
mov eax, ecx
jne 0x47a6c1
mov edi, str.Title_Not_Found
sub edi, ecx
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x47a6b5
mov cl, byte [edi + eax]
test cl, cl
je 0x47a6b5
mov byte [eax], cl
inc eax
dec edx
jne 0x47a696
dec eax
push str.Title_Not_Found
jmp 0x47a6e4
test edx, edx
jne 0x47a6ba
dec eax
push str.Title_Not_Found
jmp 0x47a6e4
mov edi, esi
sub edi, ecx
lea ecx, [edx + 0x7fffff7e]
test ecx, ecx
je 0x47a6de
mov cl, byte [edi + eax]
test cl, cl
je 0x47a6de
mov byte [eax], cl
inc eax
dec edx
jne 0x47a6c5
jmp 0x47a6e2
test edx, edx
jne 0x47a6e3
dec eax
push esi
mov byte [eax], 0
call ebx
push str.Title
lea esi, [ebp - 0xa0]
call fcn.0047da70
mov edx, dword [ebp - 0x27e4]
mov eax, dword [edx*4 + 0x501878]
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov edi, dword [ebp - 0x27e4]
mov ecx, dword [edi*4 + 0x501878]
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalLock]
push ecx
call ebx
test eax, eax
je 0x47a7d9
lea esi, [eax + 0x184]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [ebp - 0x9c8]
test eax, eax
mov edx, 0x104
mov eax, ecx
jne 0x47a78e
mov esi, str.No_path_available
sub esi, ecx
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x47a76a
mov cl, byte [esi + eax]
test cl, cl
je 0x47a76a
inc eax
dec edx
jne 0x47a753
jmp 0x47a76e
test edx, edx
jne 0x47a76f
dec eax
push str.No_path_available
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStructNull
mov esi, str.No_Path_available
call fcn.0047da70
jmp 0x47a7c8
mov edi, esi
sub edi, ecx
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x47a7a9
mov cl, byte [edi + eax]
test cl, cl
je 0x47a7a9
inc eax
dec edx
jne 0x47a792
jmp 0x47a7ad
test edx, edx
jne 0x47a7ae
dec eax
push esi
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.GetRunStruct
call fcn.0047da70
mov edi, dword [ebp - 0x27e4]
mov edx, dword [edi*4 + 0x501878]
add esp, 4
push edx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [edi*4 + 0x501878]
push eax
xor esi, esi
call ebx
test eax, eax
je 0x47a7fd
mov ecx, dword [edi*4 + 0x501878]
mov esi, dword [eax + 0x288]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
lea edi, [ebp - 0x1c]
lea esi, [ebp - 0x1a8]
call fcn.0047f8b0
add esp, 4
push 0x1400
lea edx, [ebp - 0x27e0]
push 0
push edx
call fcn.004d29c0
mov eax, esi
add esp, 0xc
push eax
lea ecx, [ebp - 0x27e0]
call fcn.004c0890
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 4
lea ecx, [ebp - 0x1fe0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x47a87a
jmp 0x47a850
cmp ecx, 0x80
jge 0x47a875
mov dl, byte [ebp + ecx - 0x1fe0]
cmp dl, 0x2c
jne 0x47a86e
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47a875
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x47a850
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x3a8]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
lea ecx, [ebp - 0x1be0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x47a8d1
cmp ecx, 0x400
jge 0x47a8cc
mov dl, byte [ebp + ecx - 0x1be0]
cmp dl, 0x2c
jne 0x47a8c5
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47a8cc
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x47a8a7
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x1350]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
lea ecx, [ebp - 0x23e0]
push ecx
call edi
xor ecx, ecx
test eax, eax
jle 0x47a922
cmp ecx, 0x80
jge 0x47a91d
mov dl, byte [ebp + ecx - 0x23e0]
cmp dl, 0x2c
jne 0x47a916
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47a91d
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x47a8f8
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x328]
push eax
mov byte [ebp + ecx - 0x7a8], 0
call ebx
mov edx, 0x104
lea eax, [ebp - 0x8b0]
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x47a964
mov ecx, dword [ebp - 0x27ec]
mov cl, byte [eax + ecx]
test cl, cl
je 0x47a964
mov byte [eax], cl
inc eax
dec edx
jne 0x47a945
jmp 0x47a968
test edx, edx
jne 0x47a969
dec eax
lea edx, [ebp - 0x8b0]
push edx
mov byte [eax], 0
call edi
test eax, eax
je 0x47a990
lea esp, [esp]
cmp byte [ebp + eax - 0x8b0], 0x5c
je 0x47a98f
dec eax
jne 0x47a980
jmp 0x47a990
inc eax
movzx eax, ax
movzx esi, ax
lea esi, [ebp + esi - 0x1a8]
push esi
call edi
xor ecx, ecx
test eax, eax
jle 0x47a9dd
lea edx, [ebp - 0x7a8]
sub esi, edx
mov edi, edi
cmp ecx, 0x104
jge 0x47a9d8
lea edx, [ecx + esi]
mov dl, byte [ebp + edx - 0x7a8]
cmp dl, 0x2c
jne 0x47a9d1
mov byte [ebp + ecx - 0x7a8], 0x20
jmp 0x47a9d8
mov byte [ebp + ecx - 0x7a8], dl
inc ecx
cmp ecx, eax
jl 0x47a9b0
lea eax, [ebp - 0x7a8]
mov byte [ebp + ecx - 0x7a8], 0
push eax
lea ecx, [ebp - 0xad0]
push ecx
call ebx
lea edx, [ebp - 0x27e8]
push edx
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x1350]
push ecx
lea edx, [ebp - 0x1a8]
push edx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x3a8]
push ecx
lea edx, [ebp - 0xad0]
push edx
lea eax, [ebp - 0xa0]
push eax
push 0x4e27f8
push str.Scheduled_Tasks
lea ecx, [ebp - 0xed0]
push str._s__s__s___s__s__s__s__s__s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x30
push 0
lea edx, [ebp - 0x27f4]
push edx
lea eax, [ebp - 0xed0]
push eax
call edi
mov edx, dword [ebp - 0x27f8]
push eax
lea ecx, [ebp - 0xed0]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x27e4]
inc eax
mov dword [ebp - 0x27e4], eax
cmp eax, dword [ebp - 0x27f0]
jl 0x47a64c
mov eax, dword [ebp - 0x27f8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x2800]
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov ecx, dword [0x4fbdcc]
push 1
push 0
push 0
push esi
push str.open
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.004cf2b6
mov esp, ebp
pop ebp
ret