Function at 0x477bd4
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
mov eax, 0x6c953b
call fcn.006b9c3c
sub esp, 0x564
push ebx
push esi
push edi
xor ebx, ebx
xor eax, eax
push 7
pop ecx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x7c], ebx
mov word [ebp - 0x8c], ax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x64], ebx
mov word [ebp - 0x74], ax
mov byte [ebp - 4], 1
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xc0], 0xf
mov dword [ebp - 0xc4], ebx
mov byte [ebp - 0xd4], bl
mov byte [ebp - 4], 2
mov byte [0x7a1088], 1
cmp byte [ebp + 8], al
je 0x477c4f
call fcn.0047cae2
cmp byte [0x7a00f1], 0
je 0x477c5d
call fcn.0047e8a8
movaps xmm0, xmmword [0x745fa0]
mov ecx, ebx
push 0x7f
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x28], bl
movups xmmword [ebp - 0x24], xmm0
pop esi
mov eax, dword [ebp + ecx*4 - 0x24]
sub eax, 0x55
imul eax, eax, 0x37
cdq
idiv esi
lea eax, [esi + edx]
cdq
idiv esi
mov byte [ebp + ecx - 0x2c], dl
inc ecx
cmp ecx, 4
jb 0x477c73
lea eax, [ebp - 0x2c]
mov byte [ebp - 0x28], bl
push eax
lea ecx, [ebp - 0xa4]
call fcn.00411aae
mov byte [ebp - 4], 3
lea edx, [ebp - 0xa4]
lea ecx, [ebp - 0x44]
call fcn.00461060
mov edi, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xbc]
push 8
pop edx
call fcn.0044e381
mov byte [ebp - 4], 5
mov edx, eax
lea ecx, [ebp - 0x104]
call fcn.00461060
mov esi, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xec]
call fcn.0046073e
mov byte [ebp - 4], 7
mov edx, eax
push esi
lea ecx, [ebp - 0x5c]
call fcn.004b0769
pop ecx
mov byte [ebp - 4], 8
mov edx, eax
push edi
lea ecx, [ebp - 0x11c]
call fcn.004b0769
pop ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x74]
push eax
call fcn.004a638e
mov byte [ebp - 4], 8
xor edi, edi
push ebx
inc edi
lea ecx, [ebp - 0x11c]
push edi
call fcn.004ab703
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5c]
push ebx
push edi
call fcn.004ab703
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xec]
push ebx
push edi
call fcn.004ab703
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x104]
push ebx
push edi
call fcn.004ab703
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xbc]
push ebx
push edi
call fcn.00411bc8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x44]
push ebx
push edi
call fcn.004ab703
mov byte [ebp - 4], 2
push ebx
push edi
lea ecx, [ebp - 0xa4]
call fcn.00411bc8
push 8
pop edx
lea ecx, [ebp - 0xec]
call fcn.0044e381
mov byte [ebp - 4], 0xa
mov edx, eax
lea ecx, [ebp - 0x104]
call fcn.00461060
mov esi, eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xbc]
call fcn.0046073e
mov byte [ebp - 4], 0xc
mov edx, eax
push esi
lea ecx, [ebp - 0x44]
call fcn.004b0769
pop ecx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x8c]
push eax
call fcn.004a638e
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x44]
push ebx
push edi
call fcn.004ab703
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xbc]
push ebx
push edi
call fcn.004ab703
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x104]
push ebx
push edi
call fcn.004ab703
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xec]
push ebx
push edi
call fcn.00411bc8
call fcn.00477972
test al, al
je 0x478684
movaps xmm0, xmmword [0x744dc0]
mov ecx, ebx
push 0x7f
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x28], bl
movups xmmword [ebp - 0x24], xmm0
pop esi
mov eax, dword [ebp + ecx*4 - 0x24]
sub eax, 0x4b
imul eax, eax, 0x29
cdq
idiv esi
lea eax, [esi + edx]
cdq
idiv esi
mov byte [ebp + ecx - 0x2c], dl
inc ecx
cmp ecx, 4
jb 0x477e42
lea eax, [ebp - 0x2c]
mov byte [ebp - 0x28], bl
push eax
lea ecx, [ebp - 0x5c]
call fcn.00411aae
mov byte [ebp - 4], 0xe
push ecx
lea ecx, [ebp - 0x478]
call fcn.00487b44
mov esi, eax
mov edi, ebx
lea ebx, [esi + 0x44]
push 0x18
pop ecx
sub ecx, dword [ebx]
lea ebx, [ebx + 4]
imul eax, ecx, 0x2d
push 0x7f
pop ecx
cdq
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc edi
cmp edi, 0x40
jb 0x477e85
xor ebx, ebx
lea ecx, [ebp - 0xa4]
push esi
mov byte [esi + 0x40], bl
call fcn.00411aae
mov byte [ebp - 4], 0xf
sub esp, 0x18
lea edx, [ebp - 0x5c]
mov dword [ebp + 8], esp
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x10
sub esp, 0x18
lea edx, [ebp - 0xa4]
mov dword [ebp - 0x10], esp
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x11
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x44]
call fcn.00431033
add esp, 0x30
lea ecx, [ebp - 0x44]
push ebx
push 1
call fcn.00411bc8
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa4]
push ebx
push 1
call fcn.00411bc8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5c]
push ebx
push 1
call fcn.00411bc8
movaps xmm0, xmmword [0x748300]
mov ecx, ebx
push 0x7f
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x28], bl
movups xmmword [ebp - 0x24], xmm0
pop esi
mov eax, dword [ebp + ecx*4 - 0x24]
sub eax, 0x33
imul eax, eax, 0xf
cdq
idiv esi
lea eax, [esi + edx]
cdq
idiv esi
mov byte [ebp + ecx - 0x2c], dl
inc ecx
cmp ecx, 4
jb 0x477f36
lea eax, [ebp - 0x2c]
mov byte [ebp - 0x28], bl
push eax
lea ecx, [ebp - 0xa4]
call fcn.00411aae
mov byte [ebp - 4], 0x12
push ecx
lea ecx, [ebp - 0x478]
call fcn.0048792b
mov esi, eax
mov edi, ebx
lea ebx, [esi + 0x44]
mov ecx, dword [ebx]
lea ebx, [ebx + 4]
sub ecx, 0x1c
imul eax, ecx, 0x13
push 0x7f
pop ecx
cdq
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc edi
cmp edi, 0x40
jb 0x477f7c
xor ebx, ebx
lea ecx, [ebp - 0x5c]
push esi
mov byte [esi + 0x40], bl
call fcn.00411aae
mov byte [ebp - 4], 0x13
sub esp, 0x18
lea edx, [ebp - 0xa4]
mov dword [ebp + 8], esp
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x14
sub esp, 0x18
lea edx, [ebp - 0x5c]
mov dword [ebp - 0x10], esp
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x44]
call fcn.00431033
add esp, 0x30
lea ecx, [ebp - 0x44]
push ebx
push 1
call fcn.00411bc8
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x5c]
push ebx
push 1
call fcn.00411bc8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa4]
push ebx
push 1
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x454]
call fcn.00487764
mov edi, eax
mov esi, ebx
lea ebx, [edi + 0x3c]
push 0x3c
pop ecx
sub ecx, dword [ebx]
lea ebx, [ebx + 4]
imul eax, ecx, 0x3e
push 0x7f
pop ecx
cdq
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
cmp esi, 0x39
jb 0x478027
xor ebx, ebx
lea ecx, [ebp - 0x11c]
push edi
mov byte [edi + 0x39], bl
call fcn.00411aae
mov byte [ebp - 4], 0x16
sub esp, 0x18
mov ecx, esp
mov dword [ebp + 8], esp
push 0x73a418
call fcn.00411aae
mov byte [ebp - 4], 0x17
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x10], esp
push str..exe
call fcn.00411aae
mov byte [ebp - 4], 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x790994
call fcn.00411add
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x104]
call fcn.00460e77
mov byte [ebp - 4], 0x1a
add esp, 0x30
mov edx, eax
mov dword [ebp + 8], esp
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x1b
sub esp, 0x18
lea edx, [ebp - 0x11c]
mov dword [ebp - 0x10], esp
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xbc]
call fcn.00431033
add esp, 0x30
lea ecx, [ebp - 0xbc]
push ebx
push 1
call fcn.00411bc8
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x104]
push ebx
push 1
call fcn.00411bc8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x11c]
push ebx
push 1
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x454]
call fcn.00487594
mov edi, eax
mov esi, ebx
lea ebx, [edi + 0x3c]
mov ecx, dword [ebx]
lea ebx, [ebx + 4]
sub ecx, 0x61
imul eax, ecx, 0x1f
push 0x7f
pop ecx
cdq
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
cmp esi, 0x39
jb 0x478132
xor ebx, ebx
lea ecx, [ebp - 0x5c]
push edi
mov byte [edi + 0x39], bl
call fcn.00411aae
mov byte [ebp - 4], 0x1d
sub esp, 0x18
mov ecx, esp
mov dword [ebp + 8], esp
push 0x73a418
call fcn.00411aae
mov byte [ebp - 4], 0x1e
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x10], esp
push str..exe
call fcn.00411aae
mov byte [ebp - 4], 0x1f
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x790994
call fcn.00411add
mov byte [ebp - 4], 0x20
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xec]
call fcn.00460e77
mov byte [ebp - 4], 0x21
add esp, 0x30
mov edx, eax
mov dword [ebp + 8], esp
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x22
sub esp, 0x18
lea edx, [ebp - 0x5c]
mov dword [ebp - 0x10], esp
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x44]
call fcn.00431033
add esp, 0x30
lea ecx, [ebp - 0x44]
push ebx
push 1
call fcn.00411bc8
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xec]
push ebx
push 1
call fcn.00411bc8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5c]
push ebx
push 1
call fcn.00411bc8
push 0x73ba8c
lea edx, [ebp - 0x74]
lea ecx, [ebp - 0x284]
call fcn.00461197
mov byte [ebp - 4], 0x24
push eax
push ecx
lea ecx, [ebp - 0x334]
call fcn.0048728e
mov edi, eax
mov esi, ebx
lea ebx, [edi + 0x18]
push 0x1e
pop ecx
sub ecx, dword [ebx]
lea ebx, [ebx + 4]
imul eax, ecx, 0x2a
push 0x7f
pop ecx
cdq
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
cmp esi, 0x15
jb 0x478246
push edi
lea edx, [ebp - 0x8c]
mov byte [edi + 0x15], 0
lea ecx, [ebp - 0x26c]
call fcn.00461197
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x2c8]
push eax
push str.__r_nIf_Exist__
call fcn.004a0584
mov ecx, eax
call fcn.004a0552
push eax
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x254]
call fcn.00461197
mov byte [ebp - 4], 0x26
push eax
push ecx
lea ecx, [ebp - 0x4ec]
call fcn.00487310
mov edi, eax
xor esi, esi
lea ebx, [edi + 0x18]
mov ecx, dword [ebx]
lea ebx, [ebx + 4]
sub ecx, 0x28
imul eax, ecx, 0xc
push 0x7f
pop ecx
cdq
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
cmp esi, 0x17
jb 0x4782c2
push edi
push 8
push 0
lea eax, [ebp - 0x224]
mov byte [edi + 0x17], 0
push eax
sub esp, 0x18
mov edx, 0x7909ac
mov ecx, esp
mov dword [ebp + 8], esp
push 0x78ff14
call fcn.004b175e
pop ecx
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x23c]
call fcn.00508a2b
add esp, 0x18
mov byte [ebp - 4], 0x28
mov ecx, eax
call fcn.004a6530
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x20c]
call fcn.00476add
mov byte [ebp - 4], 0x2a
mov edx, eax
lea ecx, [ebp - 0x1f4]
call fcn.00461197
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1dc]
call fcn.00476add
mov byte [ebp - 4], 0x2c
mov edx, eax
lea ecx, [ebp - 0x1c4]
call fcn.00461197
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x2d
push ecx
lea ecx, [ebp - 0x418]
call fcn.0048743e
mov edi, eax
xor esi, esi
lea ebx, [edi + 0x30]
push 0x4e
pop ecx
sub ecx, dword [ebx]
lea ebx, [ebx + 4]
imul eax, ecx, 0x23
push 0x7f
pop ecx
cdq
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
cmp esi, 0x2d
jb 0x47838b
push dword [ebp + 8]
mov edx, edi
mov byte [edi + 0x2d], 0
lea ecx, [ebp - 0x1ac]
call fcn.004b09c3
mov byte [ebp - 4], 0x2e
mov edx, eax
lea ecx, [ebp - 0x194]
mov dword [esp], 0x73bb04
call fcn.0041cdde
mov byte [ebp - 4], 0x2f
mov edx, eax
lea ecx, [ebp - 0x17c]
mov dword [esp], 0x79097c
call fcn.0041ce76
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x56c]
call fcn.004873a0
mov ebx, eax
xor esi, esi
lea edi, [ebx + 0x1c]
mov ecx, dword [edi]
lea edi, [edi + 4]
sub ecx, 0x2d
imul eax, ecx, 7
push 0x7f
pop ecx
cdq
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [ebx + esi], dl
inc esi
cmp esi, 0x19
jb 0x478408
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x164]
push ebx
mov byte [ebx + 0x19], 0
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x31
mov edx, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x14c]
call fcn.004b1821
mov byte [ebp - 4], 0x32
mov edx, eax
lea ecx, [ebp - 0x134]
mov dword [esp], 0x73bb04
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x33
mov edx, eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2c]
call fcn.004b1821
pop ecx
mov byte [ebp - 4], 0x34
mov edx, eax
lea ecx, [ebp - 0xa4]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x35
mov edx, eax
lea ecx, [ebp - 0x5c]
call fcn.004b1821
pop ecx
mov byte [ebp - 4], 0x36
mov edx, eax
lea ecx, [ebp - 0x11c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x37
mov edx, eax
lea ecx, [ebp - 0xec]
call fcn.004b1821
pop ecx
mov byte [ebp - 4], 0x38
mov edx, eax
lea ecx, [ebp - 0x104]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x39
mov edx, eax
lea ecx, [ebp - 0xbc]
call fcn.004b1821
pop ecx
mov byte [ebp - 4], 0x3a
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xd4]
push eax
call fcn.0041b490
mov byte [ebp - 4], 0x3a
xor ebx, ebx
xor esi, esi
lea ecx, [ebp - 0x44]
push ebx
inc esi
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xbc]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x104]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xec]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x11c]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x5c]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xa4]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x2c]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x134]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x14c]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x164]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x17c]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x194]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1ac]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1c4]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1dc]
push ebx
push esi
call fcn.004ab703
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1f4]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x29
push ebx
push esi
lea ecx, [ebp - 0x20c]
call fcn.004ab703
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x224]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x23c]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x254]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x26c]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x284]
jmp 0x478a2f
sub esp, 0x18
lea eax, [ebp - 0x8c]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.004a6481
mov byte [ebp - 4], 0x3c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x10], esp
call fcn.00477584
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 2
call fcn.0044eb2c
add esp, 0x30
lea edx, [ebp - 0x74]
lea ecx, [ebp - 0xbc]
push 0x73ba8c
call fcn.00461197
mov byte [ebp - 4], 0x3e
push eax
push ecx
lea ecx, [ebp - 0x334]
call fcn.00486fc6
mov esi, eax
mov edi, ebx
lea ebx, [esi + 0x18]
push 0x34
pop ecx
sub ecx, dword [ebx]
lea ebx, [ebx + 4]
imul eax, ecx, 0x12
push 0x7f
pop ecx
cdq
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [esi + edi], dl
inc edi
cmp edi, 0x15
jb 0x4786e4
push esi
lea edx, [ebp - 0x8c]
mov byte [esi + 0x15], 0
lea ecx, [ebp - 0x44]
call fcn.00461197
mov byte [ebp - 4], 0x3f
push eax
push ecx
lea ecx, [ebp - 0x2c8]
call fcn.00487048
mov esi, eax
xor edi, edi
lea ebx, [esi + 0x10]
mov ecx, dword [ebx]
lea ebx, [ebx + 4]
sub ecx, 0xf
imul eax, ecx, 0x1c
push 0x7f
pop ecx
cdq
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [esi + edi], dl
inc edi
cmp edi, 0xd
jb 0x47872f
push esi
lea edx, [ebp - 0x8c]
mov byte [esi + 0xd], 0
lea ecx, [ebp - 0x134]
call fcn.00461197
mov byte [ebp - 4], 0x40
push eax
push ecx
lea ecx, [ebp - 0x4ec]
call fcn.004870a9
mov edi, eax
xor esi, esi
lea ebx, [edi + 0x18]
mov ecx, dword [ebx]
lea ebx, [ebx + 4]
sub ecx, 6
imul eax, ecx, 0x13
push 0x7f
pop ecx
cdq
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
cmp esi, 0x17
jb 0x47877d
push edi
push 8
push 0
lea eax, [ebp - 0x164]
mov byte [edi + 0x17], 0
push eax
sub esp, 0x18
mov edx, 0x7909ac
mov ecx, esp
mov dword [ebp + 8], esp
push 0x78ff14
call fcn.004b175e
pop ecx
mov byte [ebp - 4], 0x41
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x14c]
call fcn.00508a2b
add esp, 0x18
mov byte [ebp - 4], 0x42
mov ecx, eax
call fcn.004a6530
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x17c]
call fcn.00476add
mov byte [ebp - 4], 0x44
mov edx, eax
lea ecx, [ebp - 0x194]
call fcn.00461197
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x45
push ecx
lea ecx, [ebp - 0x418]
call fcn.00487136
mov ebx, eax
xor esi, esi
lea edi, [ebx + 0x30]
push 0x6d
pop ecx
sub ecx, dword [edi]
lea edi, [edi + 4]
imul eax, ecx, 0x3f
push 0x7f
pop ecx
cdq
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [ebx + esi], dl
inc esi
cmp esi, 0x2d
jb 0x478823
push dword [ebp + 8]
mov edx, ebx
mov byte [ebx + 0x2d], 0
lea ecx, [ebp - 0x1ac]
call fcn.004b09c3
mov byte [ebp - 4], 0x46
mov edx, eax
lea ecx, [ebp - 0x1c4]
mov dword [esp], 0x73bb04
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x47
mov edx, eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1dc]
call fcn.004b1821
pop ecx
mov byte [ebp - 4], 0x48
mov edx, eax
lea ecx, [ebp - 0x1f4]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x49
mov edx, eax
lea ecx, [ebp - 0x20c]
call fcn.004b1821
pop ecx
mov byte [ebp - 4], 0x4a
mov edx, eax
lea ecx, [ebp - 0x224]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x4b
mov edx, eax
lea ecx, [ebp - 0x23c]
call fcn.004b1821
pop ecx
mov byte [ebp - 4], 0x4c
mov edx, eax
lea ecx, [ebp - 0x254]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x4d
mov edx, eax
lea ecx, [ebp - 0x26c]
call fcn.004b1821
pop ecx
mov byte [ebp - 4], 0x4e
mov edx, eax
lea ecx, [ebp - 0x284]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0xd4]
push eax
call fcn.0041b490
mov byte [ebp - 4], 0x4e
xor ebx, ebx
xor esi, esi
lea ecx, [ebp - 0x284]
push ebx
inc esi
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x26c]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x4c
push ebx
push esi
lea ecx, [ebp - 0x254]
call fcn.00411bc8
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x23c]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x224]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x20c]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x1f4]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1dc]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x1c4]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x1ac]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x194]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x17c]
push ebx
push esi
call fcn.004ab703
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x164]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x14c]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x134]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x44]
push ebx
push esi
call fcn.00411bc8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xbc]
push ebx
push esi
call fcn.00411bc8
sub esp, 0x18
lea eax, [ebp - 0xd4]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.00411add
mov byte [ebp - 4], 0x50
sub esp, 0x18
lea eax, [ebp - 0x74]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.004a6481
mov byte [ebp - 4], 0x51
mov byte [ebp - 4], 2
xor cl, cl
call fcn.004734ee
add esp, 0x30
lea eax, [ebp - 0x74]
cmp dword [ebp - 0x60], 8
cmovae eax, dword [ebp - 0x74]
push ebx
push ebx
push ebx
push eax
push str.Open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [0x7a01b0]
test eax, eax
je 0x478a9c
push eax
call dword [0x6e002c]
xor edx, edx
call fcn.0044dd47
push ebx
call dword [0x6e01cc]
int3