Function at 0x47240f
Capabilities:
Check os version
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x244
push esi
mov dword [ebp - 0x130], 0xa5c62e08
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1ec], 0xfffffffe
mov dword [ebp - 0x20c], 0x1c3c39ba
mov dword [ebp - 0x1c4], 0xffffffff
mov dword [ebp - 0x1cc], 4
mov dword [ebp - 0x1d4], 0xa0d461e3
mov dword [ebp - 0x1c0], 0
push 1
lea ecx, [ebp - 0x1b0]
call fcn.0040194d
mov dword [ebp - 0x10], 0
jmp 0x472486
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x47249c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x23c], 0x398
jmp 0x47247f
mov dword [ebp - 0x10], 0
jmp 0x4724ac
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x4724c8
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1b0]
call fcn.00401379
mov dword [eax], 1
jmp 0x4724a5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x23c], 0
jne 0x4724e4
mov dword [ebp - 0xc0], 1
jmp 0x4724eb
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x130], eax
push 0
lea ecx, [ebp - 0x1b0]
call fcn.00401379
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x84]
mov dword [ecx], eax
lea ecx, [ebp - 0x1b0]
call fcn.00401a1f
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x472e65
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040194d
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x94], 7
mov dword [ebp - 0x14], 0
jmp 0x47255d
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x472576
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.00401379
mov dword [eax], 3
jmp 0x472556
mov dword [ebp - 0x14], 0
jmp 0x472586
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x47259c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x22c], 0xfffffffc
jmp 0x47257f
push 0
lea ecx, [ebp - 0x5c]
call fcn.00401379
cmp dword [eax], 1
jl 0x4725b7
mov dword [ebp - 0x100], 1
jmp 0x4725be
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x100], eax
jg 0x4725d5
mov dword [ebp - 0x154], 1
jmp 0x4725dc
and dword [ebp - 0x154], 0
push 0
lea ecx, [ebp - 0x5c]
call fcn.00401379
push 0
lea ecx, [ebp - 0x5c]
call fcn.00401379
cmp dword [eax], 0
jge 0x4725fe
mov dword [ebp - 0x80], 1
jmp 0x472602
and dword [ebp - 0x80], 0
push 0
lea ecx, [ebp - 0x5c]
call fcn.00401379
mov ecx, dword [ebp - 0x80]
add ecx, dword [eax]
sub ecx, dword [ebp - 0x74]
imul eax, ecx, 0xfffffffd
cmp eax, dword [ebp - 0x74]
jg 0x472628
mov dword [ebp - 0xc4], 1
jmp 0x47262f
and dword [ebp - 0xc4], 0
push 0
lea ecx, [ebp - 0x5c]
call fcn.00401379
mov esi, dword [eax]
add esi, dword [ebp - 0xc4]
push 0
lea ecx, [ebp - 0x5c]
call fcn.00401379
cmp esi, dword [eax]
jge 0x47265b
mov dword [ebp - 0x8c], 1
jmp 0x472662
and dword [ebp - 0x8c], 0
push 0
lea ecx, [ebp - 0x5c]
call fcn.00401379
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax]
je 0x4728aa
push 2
lea ecx, [ebp - 0x10c]
call fcn.0040194d
mov dword [ebp - 0xe4], 0xfffffff7
push 1
lea ecx, [ebp - 0x178]
call fcn.0040194d
mov dword [ebp - 0x168], 0xf6f6d779
mov dword [ebp - 0x18], 0
jmp 0x4726b8
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x4726d4
push dword [ebp - 0x18]
lea ecx, [ebp - 0x10c]
call fcn.00401379
mov dword [eax], 1
jmp 0x4726b1
mov dword [ebp - 0x18], 0
jmp 0x4726e4
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x472700
push dword [ebp - 0x18]
lea ecx, [ebp - 0x178]
call fcn.00401379
mov dword [eax], 0xfffffffd
jmp 0x4726dd
mov eax, 0x2601c8d5
test eax, eax
je 0x47279b
push 1
lea ecx, [ebp - 0x10c]
call fcn.00401379
mov esi, dword [eax]
inc esi
push 1
lea ecx, [ebp - 0x10c]
call fcn.00401379
sub esi, dword [eax]
mov dword [ebp - 0xe4], esi
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1f0], eax
push 1
lea ecx, [ebp - 0x10c]
call fcn.00401379
mov eax, dword [eax]
neg eax
add eax, dword [ebp - 0x94]
mov dword [ebp - 0xcc], eax
push 0
lea ecx, [ebp - 0x178]
call fcn.00401379
mov ecx, dword [ebp - 0xcc]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x10c]
call fcn.00401379
push 0
lea ecx, [ebp - 0x178]
call fcn.00401379
cmp dword [eax], 0
jne 0x4727ad
mov eax, 0xa2f7
test eax, eax
jne 0x4727ad
and dword [ebp - 0x9c], 0
jmp 0x4727b7
mov dword [ebp - 0x9c], 1
mov eax, dword [ebp - 0x9c]
add eax, 5
je 0x4727e0
push 0
lea ecx, [ebp - 0x178]
call fcn.00401379
cmp dword [eax], 0
je 0x4727e0
mov dword [ebp - 0xf4], 1
jmp 0x4727e7
and dword [ebp - 0xf4], 0
push 0
lea ecx, [ebp - 0x5c]
call fcn.00401379
mov ecx, dword [ebp - 0xf4]
imul ecx, dword [eax]
test ecx, ecx
je 0x472811
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x472811
mov dword [ebp - 0xa4], 1
jmp 0x472818
and dword [ebp - 0xa4], 0
cmp dword [ebp - 0xa4], 6
jle 0x47282d
mov dword [ebp - 0xd4], 1
jmp 0x472834
and dword [ebp - 0xd4], 0
push 0
lea ecx, [ebp - 0x5c]
call fcn.00401379
mov esi, dword [ebp - 0xd4]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x5c]
call fcn.00401379
cmp esi, dword [eax]
jge 0x472860
mov dword [ebp - 0xac], 1
jmp 0x472867
and dword [ebp - 0xac], 0
cmp dword [ebp - 0xac], 0x72b4
jge 0x47287f
mov dword [ebp - 0xec], 1
jmp 0x472886
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x168], eax
lea ecx, [ebp - 0x178]
call fcn.00401a1f
lea ecx, [ebp - 0x10c]
call fcn.00401a1f
jmp 0x4728c7
mov dword [ebp - 0x68], 0x4b76fef6
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x68]
mov dword [ebp + eax - 0x22c], ecx
lea ecx, [ebp - 0x5c]
call fcn.00401a1f
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0xbc], 0xfffffff8
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0040194d
mov dword [ebp - 0x1c], 0xde574131
mov dword [ebp - 0x4c], 0
jmp 0x472914
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x472930
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x1a4]
call fcn.00401379
mov dword [eax], 0x858f9c25
jmp 0x47290d
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], eax
je 0x47294d
mov dword [ebp - 0xb4], 1
jmp 0x472954
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0xb4]
lea eax, [ecx + eax - 0xa]
cmp eax, dword [ebp - 0xbc]
jne 0x472975
mov dword [ebp - 0xdc], 1
jmp 0x47297c
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0xdc]
jge 0x4729f2
mov dword [ebp - 0x34], 0
jmp 0x472997
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x4729ad
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x220], 9
jmp 0x472990
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x220], 0
jne 0x4729cb
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x220], 0
push 0
lea ecx, [ebp - 0x1a4]
call fcn.00401379
push 4
pop ecx
imul ecx, ecx, 3
xor edx, edx
sub edx, dword [ebp + ecx - 0x220]
imul edx, dword [eax]
mov dword [ebp - 0xbc], edx
jmp 0x472a5c
mov dword [ebp - 0x14c], 7
mov byte [ebp - 0x22], 0
movzx eax, byte [ebp - 0x22]
test eax, eax
je 0x472a0e
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp dword [ebp - 0x70], 0
je 0x472a48
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14c]
add eax, dword [ebp - 0x1c]
je 0x472a48
mov dword [ebp - 0xc], 0xfffffff5
jmp 0x472a36
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x22
jne 0x472a46
cmp dword [ebp - 0x1c], 0
je 0x472a44
jmp 0x472a46
jmp 0x472a2f
jmp 0x472a5c
mov dword [ebp - 0x124], 0xb4af
mov dword [ebp - 0x124], 0
mov dword [ebp - 0xc], 0
jmp 0x472a6c
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jg 0x472abc
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x472a8b
push 0x19cb
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 0x1c], 0
jmp 0x472a9b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x472aba
mov byte [ebp - 0x27], 0
movzx eax, byte [ebp - 0x27]
test eax, eax
je 0x472ab8
push 0xea
call dword [sym.imp.GDI32.dll_GetStockObject]
jmp 0x472a94
jmp 0x472a65
lea ecx, [ebp - 0x1a4]
call fcn.00401a1f
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x20], 0xa72c25fc
mov dword [ebp - 0xfc], 0x2e1dfe00
push 2
lea ecx, [ebp - 0x184]
call fcn.0040194d
mov dword [ebp - 0x120], 0x874be76d
mov dword [ebp - 0x1c8], 0xba4d3ec9
mov dword [ebp - 0x148], 0xfffffffe
mov dword [ebp - 0x50], 0
jmp 0x472b1c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x472b38
push dword [ebp - 0x50]
lea ecx, [ebp - 0x184]
call fcn.00401379
mov dword [eax], 0xfffffff6
jmp 0x472b15
cmp dword [ebp - 0x20], 1
jg 0x472b47
mov dword [ebp - 0x7c], 1
jmp 0x472b4b
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x88], eax
push 1
lea ecx, [ebp - 0x184]
call fcn.00401379
mov ecx, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x20]
je 0x472b93
mov dword [ebp - 0x90], 1
jmp 0x472b9a
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x90], eax
jg 0x472bb1
mov dword [ebp - 0x98], 1
jmp 0x472bb8
and dword [ebp - 0x98], 0
cmp dword [ebp - 0x98], 0x54fd
jge 0x472bd9
cmp dword [ebp - 0x120], 0
je 0x472bd9
mov dword [ebp - 0xa0], 1
jmp 0x472be0
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xa0], eax
jle 0x472c06
push 1
lea ecx, [ebp - 0x184]
call fcn.00401379
cmp dword [eax], 0
jne 0x472c06
and dword [ebp - 0xa8], 0
jmp 0x472c10
mov dword [ebp - 0xa8], 1
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xa8]
mov dword [ebp - 0x148], eax
lea ecx, [ebp - 0x184]
call fcn.00401a1f
mov dword [ebp - 4], 0
cmp dword [ebp - 4], 0
je 0x472cca
mov dword [ebp - 4], 0
jmp 0x472c4b
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jl 0x472c7e
mov dword [ebp - 0x128], 0x6e6
mov byte [ebp - 0x24], 0
movzx eax, byte [ebp - 0x24]
test eax, eax
je 0x472c71
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
cmp dword [ebp - 0x128], 0
je 0x472c7c
jmp 0x472c44
jmp 0x472c44
mov dword [ebp - 4], 0
jmp 0x472c8e
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 5
jge 0x472cc5
mov dword [ebp - 0x158], 0x693e93
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x472cb8
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
cmp dword [ebp - 0x158], 0
je 0x472cc3
jmp 0x472cc5
jmp 0x472c87
jmp 0x472e35
mov dword [ebp - 0x198], 6
mov dword [ebp - 0x194], 6
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x18c], 6
lea ecx, [ebp - 0x5d]
call fcn.00401a3b
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x244]
call fcn.00401a3e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x200]
call fcn.004019f9
mov dword [ebp - 0x110], 0xd99ea7eb
mov dword [ebp - 0x48], 0
jmp 0x472d3e
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x472d51
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x64], 1
jmp 0x472d37
mov dword [ebp - 4], 0xffffffff
jmp 0x472d61
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 8
jge 0x472e2a
mov dword [ebp - 0xb0], 1
cmp dword [ebp - 0xb0], 0
je 0x472d8d
cmp dword [ebp - 4], 0
je 0x472d8d
cmp dword [ebp - 0xb0], 0
jne 0x472da3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
jne 0x472da3
and dword [ebp - 0xb8], 0
jmp 0x472dad
mov dword [ebp - 0xb8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x64]
cmp eax, 0xb0ae
je 0x472dd2
mov dword [ebp - 0x78], 1
jmp 0x472dd6
and dword [ebp - 0x78], 0
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x78]
jne 0x472dea
mov dword [ebp - 0x6c], 1
jmp 0x472dee
and dword [ebp - 0x6c], 0
push 0
lea ecx, [ebp - 0x200]
call fcn.00401379
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
cmp dword [ebp - 0x6c], 0xfffffffd
jne 0x472e12
mov dword [ebp - 0xc8], 1
jmp 0x472e19
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x110], eax
jmp 0x472d5a
lea ecx, [ebp - 0x200]
call fcn.00401a1f
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ecx]
mov dword [eax + 0xc], ecx
jmp 0x473196
lea eax, [ebp + 8]
mov dword [ebp - 0x13c], eax
push 1
lea ecx, [ebp - 0x164]
call fcn.0040194d
mov dword [ebp - 0x1f4], 0x4ddb
mov dword [ebp - 0x40], 0
jmp 0x472e95
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x472eae
push dword [ebp - 0x40]
lea ecx, [ebp - 0x164]
call fcn.00401379
and dword [eax], 0
jmp 0x472e8e
push 0
lea ecx, [ebp - 0x164]
call fcn.00401379
and dword [eax], 0
jmp 0x472ee4
push 0
lea ecx, [ebp - 0x164]
call fcn.00401379
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x164]
call fcn.00401379
cmp dword [eax], 0x11
jge 0x472f4e
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x44], 0
jmp 0x472f0d
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x472f23
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1e4], 0x5683c8fc
jmp 0x472f06
mov dword [ebp - 0x2c], 0
jmp 0x472f33
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x472f49
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1e4], 0xd214c405
jmp 0x472f2c
jmp 0x472ec0
lea ecx, [ebp - 0x164]
call fcn.00401a1f
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x118], 0xe125d16d
push 4
lea ecx, [ebp - 0x1bc]
call fcn.0040194d
mov dword [ebp - 0x38], 0
jmp 0x472f89
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x472fa5
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1bc]
call fcn.00401379
mov dword [eax], 0xf4288a13
jmp 0x472f82
mov esi, dword [ebp - 0x118]
push 1
lea ecx, [ebp - 0x1bc]
call fcn.00401379
mov dword [eax], esi
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x472fd5
push 0
push 0x20dd
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
lea ecx, [ebp - 0x1bc]
call fcn.00401a1f
mov dword [ebp - 8], 0x173bf38c
mov dword [ebp - 0x30], 0xf0d3ecf0
mov dword [ebp - 0x3c], 0x41b44adc
mov dword [ebp - 0x134], 3
cmp dword [ebp - 8], 0
je 0x4730d3
mov eax, dword [ebp - 8]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 8], 0xfc36fe5
jge 0x473036
mov dword [ebp - 0xd8], 1
jmp 0x47303d
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x473052
cmp dword [ebp - 0x3c], 0
jne 0x473061
cmp dword [ebp - 0x3c], 0
jne 0x473061
and dword [ebp - 0xe0], 0
jmp 0x47306b
mov dword [ebp - 0xe0], 1
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0xe0]
jge 0x473082
mov dword [ebp - 0x11c], 1
jmp 0x473089
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1d8], eax
mov eax, 0x3bc1
test eax, eax
jne 0x4730aa
cmp dword [ebp - 0x30], 0
jne 0x4730aa
and dword [ebp - 0x114], 0
jmp 0x4730b4
mov dword [ebp - 0x114], 1
mov eax, dword [ebp - 8]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 8]
neg eax
cmp dword [ebp - 8], eax
jne 0x4730d3
mov dword [ebp - 0xe8], 1
jmp 0x4730da
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 8]
cmp eax, dword [ebp - 8]
jne 0x4730f7
cmp dword [ebp - 0x30], 0
jne 0x4730f7
and dword [ebp - 0xf0], 0
jmp 0x473101
mov dword [ebp - 0xf0], 1
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xf0], eax
jg 0x473118
mov dword [ebp - 0xf8], 1
jmp 0x47311f
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0xfffffff7
jb 0x473134
mov dword [ebp - 0x12c], 1
jmp 0x47313b
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x134], eax
mov byte [ebp - 0x23], 0
movzx eax, byte [ebp - 0x23]
test eax, eax
je 0x473165
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov eax, dword [ebp - 0x13c]
push dword [eax]
push dword [ebp - 0x144]
push 0x277c
push 0x3670
push 0x824
push 0x2185
push 0x255c
push 0
call fcn.00473874
add esp, 0x20
pop esi
mov esp, ebp
pop ebp
ret