Function at 0x474310
Capabilities:
Contain obfuscated stackstrings
Get memory capacity

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4af669
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x5c8
mov eax, dword [0x4cfa1c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x304], 0
call fcn.00472c20
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x268]
call fcn.0046f2c0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x208]
call fcn.00472d20
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x220]
call fcn.0046ee10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x238]
call fcn.0046ef00
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x250]
call fcn.00474070
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1f0]
call fcn.0046ec60
mov byte [ebp - 4], 6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x308], esp
xorps xmm0, xmm0
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 7
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov byte [ebp - 0x378], 0
lea ecx, [ebp - 0x370]
push dword [ebp - 0x378]
xorps xmm0, xmm0
mov edi, eax
movq qword [ebp - 0x370], xmm0
call fcn.00446660
xorps xmm0, xmm0
mov byte [ebp - 0x378], 3
push 0x18
movlpd qword [ebp - 0x1b0], xmm0
call fcn.00497fb9
lea ecx, [ebp - 0x1a7]
mov dword [ebp - 0x30c], eax
add esp, 4
mov dword [ebp - 0x1b0], ecx
mov dword [ebp - 0x1ac], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x220]
push ecx
mov ecx, eax
call fcn.00445b60
mov dword [ebp - 0x1ac], 0
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], esi
mov byte [ebp - 4], 9
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4d8], esp
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
push 9
push str.user_name
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 9
mov ecx, edi
call fcn.00444940
mov edx, eax
mov byte [ebp - 4], 0xb
mov cl, byte [edx]
mov edi, dword [ebp - 0x30c]
mov byte [edx], 3
mov eax, dword [edx + 8]
mov byte [ebp - 0x378], cl
mov byte [ebp - 0x308], cl
mov ecx, dword [edx + 0xc]
mov dword [edx + 8], edi
mov dword [edx + 0xc], esi
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x370]
push dword [ebp - 0x308]
call fcn.00446660
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x4d4], esp
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov byte [ebp - 0x388], 0
lea ecx, [ebp - 0x380]
push dword [ebp - 0x388]
xorps xmm0, xmm0
mov edi, eax
movq qword [ebp - 0x380], xmm0
call fcn.00446660
xorps xmm0, xmm0
mov byte [ebp - 0x388], 3
push 0x18
movlpd qword [ebp - 0x1b8], xmm0
call fcn.00497fb9
lea ecx, [ebp - 0x1a1]
mov dword [ebp - 0x30c], eax
add esp, 4
mov dword [ebp - 0x1b8], ecx
mov dword [ebp - 0x1b4], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x280]
push ecx
mov ecx, eax
call fcn.00445b60
mov dword [ebp - 0x1b4], 0
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], esi
mov byte [ebp - 4], 0xe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4d0], esp
xorps xmm0, xmm0
push 3
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
push 0x4bebc4
call fcn.00438600
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0xe
mov ecx, edi
call fcn.00444940
mov edx, eax
mov byte [ebp - 4], 0x10
mov cl, byte [edx]
mov edi, dword [ebp - 0x30c]
mov byte [edx], 3
mov eax, dword [edx + 8]
mov byte [ebp - 0x388], cl
mov byte [ebp - 0x308], cl
mov ecx, dword [edx + 0xc]
mov dword [edx + 8], edi
mov dword [edx + 0xc], esi
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x380]
push dword [ebp - 0x308]
call fcn.00446660
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x4cc], esp
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x11
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov byte [ebp - 0x398], 0
lea ecx, [ebp - 0x390]
push dword [ebp - 0x398]
xorps xmm0, xmm0
mov edi, eax
movq qword [ebp - 0x390], xmm0
call fcn.00446660
xorps xmm0, xmm0
mov byte [ebp - 0x398], 3
push 0x18
movlpd qword [ebp - 0x1c0], xmm0
call fcn.00497fb9
lea ecx, [ebp - 0x1a2]
mov dword [ebp - 0x30c], eax
add esp, 4
mov dword [ebp - 0x1c0], ecx
mov dword [ebp - 0x1bc], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x208]
push ecx
mov ecx, eax
call fcn.00445b60
mov dword [ebp - 0x1bc], 0
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], esi
mov byte [ebp - 4], 0x13
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4c8], esp
xorps xmm0, xmm0
push 3
movups xmmword [ecx], xmm0
push 0x4bebc8
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x13
mov ecx, edi
call fcn.00444940
mov edx, eax
mov byte [ebp - 4], 0x15
mov cl, byte [edx]
mov edi, dword [ebp - 0x30c]
mov byte [edx], 3
mov eax, dword [edx + 8]
mov byte [ebp - 0x398], cl
mov byte [ebp - 0x308], cl
mov ecx, dword [edx + 0xc]
mov dword [edx + 8], edi
mov dword [edx + 0xc], esi
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x390]
push dword [ebp - 0x308]
call fcn.00446660
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x4c4], esp
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov byte [ebp - 0x3a8], 0
lea ecx, [ebp - 0x3a0]
push dword [ebp - 0x3a8]
xorps xmm0, xmm0
mov edi, eax
movq qword [ebp - 0x3a0], xmm0
call fcn.00446660
xorps xmm0, xmm0
mov byte [ebp - 0x3a8], 3
push 0x18
movlpd qword [ebp - 0x1c8], xmm0
call fcn.00497fb9
lea ecx, [ebp - 0x1a3]
mov dword [ebp - 0x30c], eax
add esp, 4
mov dword [ebp - 0x1c8], ecx
mov dword [ebp - 0x1c4], eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x268]
push ecx
mov ecx, eax
call fcn.00445b60
mov dword [ebp - 0x1c4], 0
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], esi
mov byte [ebp - 4], 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4a8], esp
xorps xmm0, xmm0
push 2
movups xmmword [ecx], xmm0
push 0x4bebcc
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0x18
mov ecx, edi
call fcn.00444940
mov edx, eax
mov byte [ebp - 4], 0x1a
mov cl, byte [edx]
mov edi, dword [ebp - 0x30c]
mov byte [edx], 3
mov eax, dword [edx + 8]
mov byte [ebp - 0x3a8], cl
mov byte [ebp - 0x308], cl
mov ecx, dword [edx + 0xc]
mov dword [edx + 8], edi
mov dword [edx + 0xc], esi
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3a0]
push dword [ebp - 0x308]
call fcn.00446660
lea eax, [ebp - 0x2c0]
mov dword [ebp - 0x2c0], 0x40
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov edx, dword [ebp - 0x2b4]
mov ecx, dword [ebp - 0x2b8]
call fcn.004a2490
cvtsd2ss xmm0, xmm0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x174], esp
push 6
mulss xmm0, dword [0x4bf4d8]
push str.system
movss dword [ebp - 0x308], xmm0
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov byte [ebp - 0x3b8], 0
lea ecx, [ebp - 0x3b0]
push dword [ebp - 0x3b8]
xorps xmm0, xmm0
mov esi, eax
movq qword [ebp - 0x3b0], xmm0
call fcn.00446660
movss xmm0, dword [ebp - 0x308]
cvtps2pd xmm0, xmm0
mov byte [ebp - 0x3b8], 7
movsd qword [ebp - 0x178], xmm0
mov edi, dword [ebp - 0x174]
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], edi
mov byte [ebp - 4], 0x1c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4a4], esp
xorps xmm0, xmm0
push 3
movups xmmword [ecx], xmm0
push 0x4bebd0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x1c
mov ecx, esi
call fcn.00444940
mov edx, eax
mov byte [ebp - 4], 0x1e
mov cl, byte [edx]
mov esi, dword [ebp - 0x178]
mov byte [edx], 7
mov eax, dword [edx + 8]
mov byte [ebp - 0x3b8], cl
mov byte [ebp - 0x308], cl
mov ecx, dword [edx + 0xc]
mov dword [edx + 8], esi
mov dword [edx + 0xc], edi
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3b0]
push dword [ebp - 0x308]
call fcn.00446660
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x4dc], esp
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov byte [ebp - 0x358], 0
lea ecx, [ebp - 0x350]
push dword [ebp - 0x358]
xorps xmm0, xmm0
mov edi, eax
movq qword [ebp - 0x350], xmm0
call fcn.00446660
xorps xmm0, xmm0
mov byte [ebp - 0x358], 3
push 0x18
movlpd qword [ebp - 0x1d0], xmm0
call fcn.00497fb9
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x30c], eax
add esp, 4
mov dword [ebp - 0x1d0], ecx
mov dword [ebp - 0x1cc], eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x238]
push ecx
mov ecx, eax
call fcn.00445b60
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], esi
mov byte [ebp - 4], 0x21
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x344], esp
xorps xmm0, xmm0
push 0xd
movups xmmword [ecx], xmm0
push str.computer_name
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x22
mov byte [ebp - 4], 0x21
mov ecx, edi
call fcn.00444940
mov edx, eax
mov byte [ebp - 4], 0x23
mov cl, byte [edx]
mov byte [ebp - 0x308], cl
mov edi, dword [ebp - 0x30c]
mov byte [edx], 3
mov eax, dword [edx + 8]
mov byte [ebp - 0x358], cl
mov ecx, dword [edx + 0xc]
mov dword [edx + 8], edi
mov dword [edx + 0xc], esi
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x350]
push dword [ebp - 0x308]
call fcn.00446660
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x314], esp
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x24
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov dword [ebp - 0x318], 0x3638c13
xorps xmm0, xmm0
mov dword [ebp - 0x314], 0x335cf6b2
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x318]
mov ecx, dword [ebp - 0x314]
mov dword [ebp - 0x42c], ecx
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x318], 0x1f6797bc
mov dword [ebp - 0x314], 0xb9ca35ef
mov eax, dword [ebp - 0x318]
mov ecx, dword [ebp - 0x314]
mov dword [ebp - 0x424], ecx
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x318], 0x670afb7b
mov dword [ebp - 0x314], 0x335cf6b2
mov eax, dword [ebp - 0x318]
mov ecx, dword [ebp - 0x314]
mov dword [ebp - 0x318], 0x1f6797bc
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x314], 0xb9ca35ef
mov eax, dword [ebp - 0x318]
mov ecx, dword [ebp - 0x314]
movaps xmm1, xmmword [ebp - 0x430]
mov dword [ebp - 0x174], ecx
lea ecx, [ebp - 0x360]
mov dword [ebp - 0x178], eax
pxor xmm1, xmmword [ebp - 0x180]
mov byte [ebp - 0x368], 0
push dword [ebp - 0x368]
movaps xmmword [ebp - 0x430], xmm1
movq qword [ebp - 0x360], xmm0
call fcn.00446660
xorps xmm0, xmm0
mov byte [ebp - 0x368], 3
push 0x18
movlpd qword [ebp - 0x198], xmm0
call fcn.00497fb9
mov esi, eax
add esp, 4
lea eax, [ebp - 0x1a5]
mov dword [ebp - 0x194], esi
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x250]
push eax
mov ecx, esi
call fcn.00445b60
mov dword [ebp - 0x194], 0
mov byte [ebp - 4], 6
mov edi, dword [ebp - 0x19c]
mov dword [ebp - 0x360], esi
mov dword [ebp - 0x35c], edi
mov byte [ebp - 4], 0x26
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2fc], esp
lea edx, [ebp - 0x430]
xorps xmm0, xmm0
lea eax, [edx + 1]
mov dword [ebp - 0x308], eax
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x474d90
sub edx, dword [ebp - 0x308]
lea eax, [ebp - 0x430]
push edx
push eax
call fcn.00438600
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x30c]
call fcn.00444940
mov edx, eax
mov byte [ebp - 4], 0x28
mov cl, byte [edx]
mov byte [edx], 3
mov eax, dword [edx + 8]
mov byte [ebp - 0x368], cl
mov byte [ebp - 0x308], cl
mov ecx, dword [edx + 0xc]
mov dword [edx + 8], esi
mov dword [edx + 0xc], edi
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x360]
push dword [ebp - 0x308]
call fcn.00446660
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x2fc], esp
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x29
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov dword [ebp - 0x300], 0x2789808
mov edi, eax
mov dword [ebp - 0x2fc], 0x5b2f98d7
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x43c], ecx
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x300], 0x1f67e3d3
mov dword [ebp - 0x2fc], 0xb9ca35ef
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x434], ecx
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x300], 0x670afb7b
mov dword [ebp - 0x2fc], 0x335cf6b2
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], 0x1f6797bc
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x2fc], 0xb9ca35ef
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
movaps xmm1, xmmword [ebp - 0x440]
mov dword [ebp - 0x314], ecx
lea ecx, [ebp - 0x5cc]
mov dword [ebp - 0x318], eax
pxor xmm1, xmmword [ebp - 0x320]
movaps xmmword [ebp - 0x440], xmm1
call fcn.0046e810
mov byte [ebp - 4], 0x2b
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x474f20
mov eax, dword [eax]
push ecx
mov edx, eax
lea ecx, [ebp - 0x4f4]
call fcn.00448220
add esp, 4
mov dword [ebp - 0x304], 8
lea eax, [ebp - 0x4f4]
lea ecx, [ebp - 0x3e8]
push eax
call fcn.004486f0
mov byte [ebp - 4], 0x2c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2fc], esp
xorps xmm0, xmm0
lea edx, [ebp - 0x440]
lea esi, [edx + 1]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x474f80
sub edx, esi
lea eax, [ebp - 0x440]
push edx
push eax
call fcn.00438600
mov byte [ebp - 4], 0x2d
mov byte [ebp - 4], 0x2c
mov ecx, edi
call fcn.00444940
mov edi, eax
mov byte [ebp - 4], 0x2e
mov dl, byte [edi]
mov cl, byte [ebp - 0x3e8]
mov byte [edi], cl
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x3dc]
mov byte [ebp - 0x3e8], dl
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0x3e0], edx
mov dword [ebp - 0x3dc], esi
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x3e0]
push dword [ebp - 0x3e8]
call fcn.00446660
mov eax, 8
mov dword [ebp - 0x304], eax
and eax, 0xfffffff7
mov dword [ebp - 0x304], eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x4f4]
call fcn.00446fc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5cc]
call fcn.00446fc0
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x2fc], esp
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x2f
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov dword [ebp - 0x300], 0x2789808
mov edi, eax
mov dword [ebp - 0x2fc], 0x410398d7
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x46c], ecx
mov dword [ebp - 0x300], 0x7308e4d9
mov dword [ebp - 0x2fc], 0xd6a3419a
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], ecx
mov dword [ebp - 0x300], 0x168fc71b
mov dword [ebp - 0x2fc], 0x33326aa4
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0x300], 0xebf9d86
mov dword [ebp - 0x2fc], 0x64a1aed9
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], ecx
mov dword [ebp - 0x300], 0x670afb7b
mov dword [ebp - 0x2fc], 0x335cf6b2
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], 0x1f6797bc
mov dword [ebp - 0x2fc], 0xb9ca35ef
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x18c], ecx
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], 0x168fc775
mov dword [ebp - 0x2fc], 0x33326aa4
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x184], ecx
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], 0xebf9d86
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x2fc], 0x64a1aed9
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x17c], ecx
mov ecx, dword [ebp - 0x2fc]
movaps xmm1, xmmword [ebp - 0x470]
pxor xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x470], xmm1
movaps xmm1, xmmword [ebp - 0x460]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
pxor xmm1, xmmword [ebp - 0x180]
movaps xmmword [ebp - 0x460], xmm1
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x2f4]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [ebp - 0x2e8]
lea ecx, [ebp - 0x59c]
call fcn.00468f00
mov esi, eax
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x584]
mov edx, dword [ebp - 0x2ec]
call fcn.00468f00
mov byte [ebp - 4], 0x32
mov edx, eax
push 0x4beb80
lea ecx, [ebp - 0x56c]
call fcn.00447d10
add esp, 4
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x50c]
push esi
push eax
push dword [ebp - 0x2fc]
call fcn.00479720
mov eax, dword [ebp - 0x304]
or eax, 0x40
mov dword [ebp - 0x304], eax
and eax, 0xffffffbf
mov dword [ebp - 0x304], eax
mov dword [ebp - 4], 0x33
or eax, 0x10
mov dword [ebp - 0x304], eax
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x56c]
call fcn.00446fc0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x584]
call fcn.00446fc0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x59c]
call fcn.00446fc0
lea eax, [ebp - 0x50c]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.004486f0
mov byte [ebp - 4], 0x35
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x314], esp
xorps xmm0, xmm0
lea edx, [ebp - 0x470]
lea esi, [edx + 1]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov al, byte [edx]
inc edx
test al, al
jne 0x4752f4
sub edx, esi
lea eax, [ebp - 0x470]
push edx
push eax
call fcn.00438600
mov byte [ebp - 4], 0x36
mov byte [ebp - 4], 0x35
mov ecx, edi
call fcn.00444940
mov edi, eax
mov byte [ebp - 4], 0x37
mov dl, byte [edi]
mov cl, byte [ebp - 0x3f8]
mov byte [edi], cl
mov eax, dword [ebp - 0x3f0]
mov ecx, dword [ebp - 0x3ec]
mov byte [ebp - 0x3f8], dl
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0x3f0], edx
mov dword [ebp - 0x3ec], esi
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x3f0]
push dword [ebp - 0x3f8]
call fcn.00446660
mov esi, dword [ebp - 0x304]
and esi, 0xffffffef
mov dword [ebp - 0x304], esi
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x50c]
call fcn.00446fc0
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x2fc], esp
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x38
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov edi, eax
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x1a0]
push eax
call fcn.00483729
add esp, 4
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.00485495
lea eax, [ebp - 0x2e4]
push eax
push str._d__m__Y___H:_M:_S
lea eax, [ebp - 0x68]
push 0x50
push eax
call fcn.00485820
xorps xmm0, xmm0
mov dword [ebp - 0x4b0], 0
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x4ac], 0
add esp, 0x18
lea edx, [ecx + 1]
movups xmmword [ebp - 0x4c0], xmm0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x475430
sub ecx, edx
lea eax, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x4c0]
call fcn.00438600
lea eax, [ebp - 0x4c0]
or esi, 0x80
push eax
lea ecx, [ebp - 0x408]
mov dword [ebp - 0x304], esi
call fcn.004486f0
mov byte [ebp - 4], 0x3a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2fc], esp
xorps xmm0, xmm0
push 4
movups xmmword [ecx], xmm0
push str.time
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0x3a
mov ecx, edi
call fcn.00444940
mov edi, eax
mov byte [ebp - 4], 0x3c
mov dl, byte [edi]
mov cl, byte [ebp - 0x408]
mov byte [edi], cl
mov eax, dword [ebp - 0x400]
mov ecx, dword [ebp - 0x3fc]
mov byte [ebp - 0x408], dl
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0x400], edx
mov dword [ebp - 0x3fc], esi
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x400]
push dword [ebp - 0x408]
call fcn.00446660
and dword [ebp - 0x304], 0xffffff7f
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4c0]
call fcn.00446fc0
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x314], esp
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov dword [ebp - 0x300], 0x46f831e
mov edi, eax
mov dword [ebp - 0x2fc], 0x6c3982c7
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x300], 0x7713f6cc
mov dword [ebp - 0x2fc], 0xb9ca35ef
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x300], 0x670afb7b
mov dword [ebp - 0x2fc], 0x335cf6b2
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], 0x1f6797bc
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x2fc], 0xb9ca35ef
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x31c], ecx
mov ecx, dword [ebp - 0x2fc]
movaps xmm1, xmmword [ebp - 0x340]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], ecx
pxor xmm1, xmmword [ebp - 0x320]
movaps xmmword [ebp - 0x340], xmm1
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x170]
push 0x104
push 0
push eax
call fcn.00499a10
add esp, 0xc
lea eax, [ebp - 0x170]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
mov dword [ebp - 0x478], 0
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x474], 0
movups xmmword [ebp - 0x488], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x475667
sub ecx, edx
lea eax, [ebp - 0x170]
push ecx
push eax
lea ecx, [ebp - 0x488]
call fcn.00438600
mov esi, dword [ebp - 0x304]
or esi, 0x100
mov dword [ebp - 0x304], esi
mov byte [ebp - 4], 0x3f
lea edx, [ebp - 0x488]
cmp dword [ebp - 0x474], 0x10
lea ecx, [ebp - 0x554]
push dword [ebp - 0x478]
cmovae edx, dword [ebp - 0x488]
call fcn.00448220
add esp, 4
lea eax, [ebp - 0x554]
or esi, 0x200
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x304], esi
push eax
call fcn.004486f0
mov byte [ebp - 4], 0x40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2fc], esp
xorps xmm0, xmm0
lea edx, [ebp - 0x340]
lea esi, [edx + 1]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x475710
sub edx, esi
lea eax, [ebp - 0x340]
push edx
push eax
call fcn.00438600
mov byte [ebp - 4], 0x41
mov byte [ebp - 4], 0x40
mov ecx, edi
call fcn.00444940
mov edi, eax
mov byte [ebp - 4], 0x42
mov dl, byte [edi]
mov cl, byte [ebp - 0x418]
mov byte [edi], cl
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0x40c]
mov byte [ebp - 0x418], dl
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0x410], edx
mov dword [ebp - 0x40c], esi
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x410]
push dword [ebp - 0x418]
call fcn.00446660
mov esi, dword [ebp - 0x304]
and esi, 0xfffffdff
mov dword [ebp - 0x304], esi
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x554]
call fcn.00446fc0
and esi, 0xfffffeff
mov dword [ebp - 0x304], esi
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x488]
call fcn.00446fc0
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x2fc], esp
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x43
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
lea ecx, [ebp - 0x5b4]
mov edi, eax
call fcn.00473650
mov byte [ebp - 4], 0x45
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x475819
mov eax, dword [eax]
push ecx
mov edx, eax
lea ecx, [ebp - 0x524]
call fcn.00448220
add esp, 4
lea eax, [ebp - 0x524]
or esi, 0x400
lea ecx, [ebp - 0x3c8]
mov dword [ebp - 0x304], esi
push eax
call fcn.004486f0
mov byte [ebp - 4], 0x46
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2fc], esp
xorps xmm0, xmm0
push 8
movups xmmword [ecx], xmm0
push str.timezone
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x47
mov byte [ebp - 4], 0x46
mov ecx, edi
call fcn.00444940
mov edi, eax
mov byte [ebp - 4], 0x48
mov dl, byte [edi]
mov cl, byte [ebp - 0x3c8]
mov byte [edi], cl
mov eax, dword [ebp - 0x3c0]
mov ecx, dword [ebp - 0x3bc]
mov byte [ebp - 0x3c8], dl
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0x3c0], edx
mov dword [ebp - 0x3bc], esi
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3c0]
push dword [ebp - 0x3c8]
call fcn.00446660
mov esi, dword [ebp - 0x304]
and esi, 0xfffffbff
mov dword [ebp - 0x304], esi
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x524]
call fcn.00446fc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5b4]
call fcn.00446fc0
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x490], 0
push str.Mou2024
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 0x48c], 0
movups xmmword [ebp - 0x4a0], xmm0
call fcn.00438600
mov byte [ebp - 4], 0x49
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x314], esp
xorps xmm0, xmm0
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x4a
mov byte [ebp - 4], 0x49
mov ecx, 0x4cfd50
call fcn.00444940
mov dword [ebp - 0x198], 0xb638e19
mov esi, eax
mov dword [ebp - 0x194], 0x5232a9d6
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x194]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x198], 0x1f67f2d1
mov dword [ebp - 0x194], 0xb9ca35ef
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x194]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], ecx
mov dword [ebp - 0x198], 0x670afb7b
mov dword [ebp - 0x194], 0x335cf6b2
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x194]
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x198], 0x1f6797bc
mov dword [ebp - 0x194], 0xb9ca35ef
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x194]
movaps xmm1, xmmword [ebp - 0x450]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], ecx
pxor xmm1, xmmword [ebp - 0x340]
movaps xmmword [ebp - 0x450], xmm1
mov byte [ebp - 4], 0x4b
lea edx, [ebp - 0x4a0]
cmp dword [ebp - 0x48c], 0x10
lea ecx, [ebp - 0x53c]
push dword [ebp - 0x490]
cmovae edx, dword [ebp - 0x4a0]
call fcn.00448220
or dword [ebp - 0x304], 0x800
lea eax, [ebp - 0x53c]
add esp, 4
lea ecx, [ebp - 0x3d8]
push eax
call fcn.004486f0
mov byte [ebp - 4], 0x4c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x344], esp
xorps xmm0, xmm0
lea edx, [ebp - 0x450]
lea edi, [edx + 1]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov al, byte [edx]
inc edx
test al, al
jne 0x475ab2
sub edx, edi
lea eax, [ebp - 0x450]
push edx
push eax
call fcn.00438600
mov byte [ebp - 4], 0x4d
mov byte [ebp - 4], 0x4c
mov ecx, esi
call fcn.00444940
mov edi, eax
mov byte [ebp - 4], 0x4e
mov dl, byte [edi]
mov cl, byte [ebp - 0x3d8]
mov byte [edi], cl
mov eax, dword [ebp - 0x3d0]
mov ecx, dword [ebp - 0x3cc]
mov byte [ebp - 0x3d8], dl
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0x3d0], edx
mov dword [ebp - 0x3cc], esi
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x3d0]
push dword [ebp - 0x3d8]
call fcn.00446660
and dword [ebp - 0x304], 0xfffff7ff
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x53c]
call fcn.00446fc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4a0]
call fcn.00446fc0
sub esp, 0x18
xorps xmm0, xmm0
cmp dword [ebp - 0x1e0], 0
mov ecx, esp
mov dword [ebp - 0x2fc], esp
push 6
movups xmmword [ecx], xmm0
push str.system
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
je 0x475cab
call fcn.00438600
mov byte [ebp - 4], 0x4f
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov byte [ebp - 0x330], 0
lea ecx, [ebp - 0x328]
push dword [ebp - 0x330]
xorps xmm0, xmm0
mov edi, eax
movq qword [ebp - 0x328], xmm0
call fcn.00446660
xorps xmm0, xmm0
mov byte [ebp - 0x330], 3
push 0x18
movlpd qword [ebp - 0x1d8], xmm0
call fcn.00497fb9
lea ecx, [ebp - 0x1a6]
mov dword [ebp - 0x30c], eax
add esp, 4
mov dword [ebp - 0x1d8], ecx
mov dword [ebp - 0x1d4], eax
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x1f0]
push ecx
mov ecx, eax
call fcn.00445b60
mov dword [ebp - 0x1d4], 0
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], esi
mov byte [ebp - 4], 0x51
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x314], esp
xorps xmm0, xmm0
push 2
movups xmmword [ecx], xmm0
push 0x4bec00
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x52
mov byte [ebp - 4], 0x51
mov ecx, edi
call fcn.00444940
mov edx, eax
mov byte [ebp - 4], 0x53
mov cl, byte [edx]
mov edi, dword [ebp - 0x30c]
mov byte [edx], 3
mov eax, dword [edx + 8]
mov byte [ebp - 0x330], cl
mov byte [ebp - 0x308], cl
mov ecx, dword [edx + 0xc]
mov dword [edx + 8], edi
mov dword [edx + 0xc], esi
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], ecx
mov byte [ebp - 4], 6
push dword [ebp - 0x308]
jmp 0x475d66
call fcn.00438600
mov byte [ebp - 4], 0x54
mov byte [ebp - 4], 6
mov ecx, 0x4cfd50
call fcn.00444940
mov esi, eax
mov byte [ebp - 0x330], 0
lea eax, [ebp - 0x330]
push 0
lea ecx, [ebp - 0x328]
mov dword [ebp - 0x314], eax
call fcn.004469b0
mov byte [ebp - 4], 0x56
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x344], esp
xorps xmm0, xmm0
push 2
movups xmmword [ecx], xmm0
push 0x4bec00
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00438600
mov byte [ebp - 4], 0x57
mov byte [ebp - 4], 0x56
mov ecx, esi
call fcn.00444940
mov edi, eax
mov byte [ebp - 4], 0x58
mov dl, byte [edi]
mov cl, byte [ebp - 0x330]
mov byte [edi], cl
mov eax, dword [ebp - 0x328]
mov ecx, dword [ebp - 0x324]
mov byte [ebp - 0x330], dl
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0x328], edx
mov dword [ebp - 0x324], esi
mov byte [ebp - 4], 6
push dword [ebp - 0x330]
lea ecx, [ebp - 0x328]
call fcn.00446660
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1f0]
call fcn.00446fc0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x250]
call fcn.00446fc0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x238]
call fcn.00446fc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x220]
call fcn.00446fc0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x208]
call fcn.00446fc0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x268]
call fcn.00446fc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x280]
call fcn.00446fc0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00497d9d
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret