Function at 0x4797f0
Capabilities:
Terminate process

Disassembly:
mov eax, dword [0x47679c]
test eax, eax
jne case.0x479d9b.0
push ebp
push esi
mov dword [0x47679c], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add dword [0x477a58], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor eax, dword [0x477a58]
and eax, 0x3fdffffe
or eax, 0x200001
mov dword [0x477a58], eax
xor eax, eax
push eax
mov dword [eax*4 + 0x477a80], 0
call fcn.0047a600
add esp, 4
cmp eax, 0x64
jl 0x479832
push 0x477a40
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x46c7e4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov eax, dword [0x46c778]
mov ebp, dword [0x46c77c]
mov cx, word [ebp]
add ebp, 8
mov word [0x476d50], cx
mov si, word [ebp - 6]
mov ecx, dword [0x476d50]
mov word [0x476d52], si
mov edx, dword [ebp - 4]
and ecx, 0xffff
cmp ecx, 0x5910
mov dword [0x476d48], edx
mov dword [0x46c77c], ebp
jg 0x479ae9
je 0x479d1f
cmp ecx, 0x1992
jg 0x479a1c
je 0x4799fd
cmp ecx, 0x704
jg 0x4799a5
je 0x479981
cmp ecx, 0xe4
je 0x47994d
cmp ecx, 0x342
je 0x479940
cmp ecx, 0x611
jne 0x479866
xor ecx, ecx
mov cx, si
cmp ecx, 0x68
je 0x47990e
cmp ecx, 0x28e
jne 0x479923
mov ecx, dword [eax]
and ecx, 0xffff
jmp 0x479916
mov ecx, dword [eax]
and ecx, 0xff
mov dword [eax], ecx
mov edx, dword [0x476d48]
mov eax, dword [0x46c778]
mov ecx, dword [eax]
add eax, 4
test ecx, ecx
mov dword [0x46c778], eax
je 0x479866
mov dword [0x46c77c], edx
jmp 0x479866
xor ecx, ecx
mov cx, si
mov dword [eax + ecx*4], edx
jmp 0x479861
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [eax + 0xc]
push ecx
mov ecx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
push ecx
push eax
call edx
mov ecx, dword [0x46c778]
mov dword [ecx + 0x14], eax
mov eax, dword [0x46c778]
add eax, 0x14
mov dword [0x46c778], eax
jmp 0x479866
push esi
push edx
call fcn.00479740
mov dx, word [0x476d52]
inc eax
push eax
mov eax, dword [0x476d48]
push edx
push eax
call fcn.004796e0
add esp, 0x14
jmp 0x479861
sub ecx, 0x96f
je 0x479d82
sub ecx, 0x723
je 0x4799e6
sub ecx, 0x77
jne 0x479866
mov ecx, dword [eax]
mov eax, dword [eax + 4]
push ecx
push eax
call edx
mov ecx, dword [0x46c778]
mov dword [ecx + 4], eax
mov eax, dword [0x46c778]
add eax, 4
mov dword [0x46c778], eax
jmp 0x479866
push esi
push edx
call fcn.00479740
mov ecx, dword [0x46c778]
add esp, 8
add dword [ecx], eax
jmp 0x479861
mov eax, dword [eax]
push eax
push esi
push edx
call fcn.004796e0
mov eax, dword [0x46c778]
add esp, 0xc
add eax, 4
mov dword [0x46c778], eax
jmp 0x479866
cmp ecx, 0x3345
jg 0x479a9e
je 0x479a87
sub ecx, 0x1a44
je 0x479a70
sub ecx, 0x801
je 0x479a56
sub ecx, 0x72
jne 0x479866
push esi
push edx
call fcn.00479740
mov ecx, dword [0x46c778]
add esp, 8
sub dword [ecx], eax
jmp 0x479861
mov ecx, dword [eax]
xor edx, edx
mov dx, si
mov dword [0x46c77c], ecx
lea eax, [eax + edx*4]
mov dword [0x46c778], eax
jmp 0x479866
sub eax, 4
mov dword [0x46c778], eax
call edx
mov ecx, dword [0x46c778]
mov dword [ecx], eax
jmp 0x479861
push esi
push edx
call fcn.00479740
mov ecx, dword [0x46c778]
add esp, 8
and dword [ecx], eax
jmp 0x479861
cmp ecx, 0x3dc8
je 0x479ac4
cmp ecx, 0x5211
jne 0x479866
mov eax, dword [eax]
push eax
push esi
push edx
call fcn.004796e0
add esp, 0xc
jmp 0x479861
push esi
push edx
call fcn.00479740
mov cx, word [0x476d52]
mov edx, dword [0x476d48]
dec eax
push eax
push ecx
push edx
call fcn.004796e0
add esp, 0x14
jmp 0x479861
cmp ecx, 0x9b73
jg 0x479c76
je 0x479c46
cmp ecx, 0x7123
jg 0x479bc8
je 0x479b7a
sub ecx, 0x654d
je 0x479b63
sub ecx, 0x5e
je 0x479b33
sub ecx, 0x3df
jne 0x479866
push 0
push esi
push edx
call fcn.004796e0
add esp, 0xc
jmp 0x479861
mov edx, dword [eax]
xor ecx, ecx
mov cx, si
add eax, 4
cmp edx, ecx
mov dword [0x46c778], eax
je 0x479866
sub eax, 4
mov dword [0x46c778], eax
mov dword [eax], ebp
mov eax, dword [0x476d48]
mov dword [0x46c77c], eax
jmp 0x479861
push esi
push edx
call fcn.00479740
mov ecx, dword [0x46c778]
add esp, 8
or dword [ecx], eax
jmp 0x479861
xor ecx, ecx
mov cx, si
cmp ecx, 0x68
je 0x479b96
cmp ecx, 0x28e
jne 0x479bab
mov ecx, dword [eax]
and ecx, 0xffff
jmp 0x479b9e
mov ecx, dword [eax]
and ecx, 0xff
mov dword [eax], ecx
mov edx, dword [0x476d48]
mov eax, dword [0x46c778]
mov ecx, dword [eax]
add eax, 4
test ecx, ecx
mov dword [0x46c778], eax
jne 0x479866
mov dword [0x46c77c], edx
jmp 0x479866
cmp ecx, 0x74bb
je 0x479c2f
cmp ecx, 0x8109
je 0x479bff
cmp ecx, 0x9104
jne 0x479866
push esi
push edx
call fcn.00479740
mov edx, eax
mov eax, dword [0x46c778]
add esp, 8
imul edx, dword [eax]
mov dword [eax], edx
jmp 0x479861
mov edx, dword [eax]
xor ecx, ecx
mov cx, si
add eax, 4
cmp edx, ecx
mov dword [0x46c778], eax
jne 0x479866
sub eax, 4
mov dword [0x46c778], eax
mov dword [eax], ebp
mov eax, dword [0x476d48]
mov dword [0x46c77c], eax
jmp 0x479861
push esi
push edx
call fcn.00479740
mov ecx, dword [0x46c778]
add esp, 8
xor dword [ecx], eax
jmp 0x479861
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
push ecx
push eax
call edx
mov ecx, dword [0x46c778]
mov dword [ecx + 0x10], eax
mov eax, dword [0x46c778]
add eax, 0x10
mov dword [0x46c778], eax
jmp 0x479866
cmp ecx, 0xbed7
jg 0x479d2a
je 0x479d0a
cmp ecx, 0xaa61
je 0x479cde
cmp ecx, 0xb323
je 0x479cb6
cmp ecx, 0xba51
jne 0x479866
mov eax, dword [eax]
push eax
call edx
mov ecx, dword [0x46c778]
mov dword [ecx], eax
jmp 0x479861
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
push ecx
push eax
call edx
mov ecx, dword [0x46c778]
mov dword [ecx + 8], eax
mov eax, dword [0x46c778]
add eax, 8
mov dword [0x46c778], eax
jmp 0x479866
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
push ecx
push eax
call edx
mov ecx, dword [0x46c778]
mov dword [ecx + 0xc], eax
mov eax, dword [0x46c778]
add eax, 0xc
mov dword [0x46c778], eax
jmp 0x479866
sub eax, 4
mov dword [0x46c778], eax
mov dword [eax], ebp
mov edx, dword [0x476d48]
mov eax, dword [0x46c778]
mov dword [0x46c77c], edx
jmp 0x479866
cmp ecx, 0xcd03
je 0x479d5d
cmp ecx, 0xfb52
jne 0x479866
push esi
push edx
call fcn.00479740
mov ecx, dword [0x46c778]
mov esi, eax
xor edx, edx
add esp, 8
mov eax, dword [ecx]
div esi
mov dword [ecx], eax
jmp 0x479861
push esi
push edx
call fcn.00479740
mov ecx, dword [0x46c778]
add esp, 8
sub ecx, 4
mov dword [0x476d48], eax
mov dword [0x46c778], ecx
mov dword [ecx], eax
jmp 0x479861
xor eax, eax
mov ax, si
pop esi
cmp eax, 0xb
mov dword [0x476884], eax
pop ebp
ja case.default.0x479d9b
xor edx, edx
mov dl, byte [eax + 0x479e20]
jmp dword [edx*4 + 0x479e10]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 4]
push eax
push ecx
push edx
call dword [0x46bba0]
ret 0xc
push 1
call dword [sym.imp.MSVCRT.dll_exit]
mov dword [0x476884], 2
and word [0x469004], 0xfffe
push 0
push 0
push 0x4768bc
call fcn.0047c140
push 0x2010
call fcn.00479060
push eax
call fcn.0047aaf0
mov al, byte [0x469004]
add esp, 8
test al, 1
jne 0x479e0b
mov eax, dword [0x476884]
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
ret 0xc