Function at 0x47b573
Capabilities:
Accept command line arguments
Check http status code

Disassembly:
push 0x1dc
mov eax, 0x4824af
call fcn.004364bb
xor ebx, ebx
mov dword [ebp - 0x9c], ebx
mov edi, 0x4d14e8
mov dword [ebp - 0x98], edi
mov byte [ebp - 0x89], bl
mov dword [ebp - 0xa8], ebx
mov byte [0x4d1734], bl
mov dword [ebp - 4], ebx
call fcn.0047b33d
mov eax, dword [str.q.0W]
cmp eax, dword [0x4d16ac]
je 0x47b618
push 0x16
lea esi, [ebp - 0x4c]
mov ecx, 0x4acaf8
call fcn.0040c6e0
lea esi, [ebp - 0x60]
mov byte [ebp - 4], 1
call fcn.0040a0f0
push ebx
push 1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 3
call fcn.00407b75
mov eax, esi
push eax
lea ecx, [ebp - 0x14c]
call fcn.0042ff53
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x14c], 0x495164
push 0x49de9c
lea eax, [ebp - 0x14c]
push eax
call fcn.004358ef
cmp dword [0x4d1630], ebx
je 0x47b633
call fcn.0047a5c6
mov byte [ebp - 0x89], al
cmp al, 1
je 0x47b7d1
mov esi, 0x4d1790
push esi
push 0x451
push edi
call fcn.00479393
cmp dword [0x4d17a0], 2
jbe 0x47b676
cmp dword [0x4d173c], ebx
jne 0x47b676
push dword [0x4d1750]
mov ecx, esi
push dword [0x4d1754]
call fcn.0047a754
mov byte [ebp - 0x89], al
cmp al, 1
je 0x47b7d1
call fcn.00478f2f
cmp dword [0x4d1738], 0xe
jl 0x47b702
call fcn.00478fdc
cmp al, bl
je 0x47b702
mov ecx, 0x4d16f0
call fcn.0040affd
push 0x37
push str.This_application_can_only_be_started_with_Excel_32_bit.
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x38], 0xf
mov dword [ebp - 0x3c], ebx
mov byte [ebp - 0x4c], bl
call fcn.00405872
lea eax, [ebp - 0x4c]
lea esi, [ebp - 0x60]
mov byte [ebp - 4], 4
call fcn.0040a0f0
push ebx
push 1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 6
call fcn.00407b75
mov eax, esi
push eax
lea ecx, [ebp - 0x138]
call fcn.0042ff53
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x138], 0x495164
push 0x49de9c
lea eax, [ebp - 0x138]
jmp 0x47b612
call fcn.0047a112
cmp byte [0x4d15f8], 1
mov dword [ebp - 0xa8], eax
jne 0x47b881
cmp dword [0x4d1738], 9
jg 0x47b881
push 7
pop esi
xor eax, eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
mov word [ebp - 0x4c], ax
mov byte [ebp - 4], 7
mov eax, dword [0x4d1744]
cmp eax, ebx
je 0x47b751
push ebx
push ebx
push 0x502
push eax
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push esi
push 8
pop ecx
lea edx, [ebp - 0x6c]
call fcn.00479de0
mov ebx, eax
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.004029e2
push 1
xor edi, edi
lea esi, [ebp - 0x6c]
mov byte [ebp - 4], 7
call fcn.00401000
push 0x1c
lea edx, [ebp - 0x6c]
mov ecx, 0x4acaf8
call fcn.0040c4d0
cmp dword [ebp - 0x38], 8
mov ecx, dword [ebp - 0x4c]
jae 0x47b796
lea ecx, [ebp - 0x4c]
cmp dword [eax + 0x14], 8
jb 0x47b79e
mov eax, dword [eax]
push 0x30
push ecx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
xor edi, edi
lea esi, [ebp - 0x6c]
call fcn.00401000
mov byte [ebp - 0x89], 1
lea esi, [ebp - 0x4c]
xor edi, edi
push 1
call fcn.00401000
mov edi, dword [ebp - 0x98]
xor ebx, ebx
mov al, byte [ebp - 0x89]
mov dword [ebp - 4], 0x3b
mov byte [edi + 0x24c], al
call fcn.0047981d
cmp byte [edi + 0x24c], bl
jne 0x47b816
push str.SwitchToThisWindow
push str.User32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x47b816
push 1
push dword [edi + 0x228]
call eax
call fcn.00430e0f
push ebx
push dword [edi + 0x260]
mov esi, eax
sub esi, dword [ebp - 0xa8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x47b879
mov eax, 0x1388
cmp esi, eax
jge 0x47b846
sub eax, esi
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push ebx
mov esi, 0x502
push esi
push dword [edi + 0x25c]
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push ebx
push esi
push dword [edi + 0x25c]
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 1
call fcn.00436517
ret
mov eax, dword [0x4d16f0]
mov esi, 0x4d16f0
mov ecx, esi
mov dword [ebp - 0x94], ebx
call dword [eax + 0x14]
cmp eax, ebx
je 0x47b8c9
lea eax, [ebp - 0xd8]
mov ecx, esi
call fcn.0040b82f
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.0040c364
movzx eax, al
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], bl
call fcn.00402059
push ebx
call fcn.0040b059
call fcn.0047a1df
xor eax, eax
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x78], ebx
mov word [ebp - 0x88], ax
push 0xf
lea eax, [ebp - 0x88]
pop ebx
mov byte [ebp - 4], 0xa
call fcn.0040dfe6
cmp dword [ebp - 0x74], 8
mov eax, dword [ebp - 0x88]
jae 0x47b90b
lea eax, [ebp - 0x88]
push ecx
mov edi, esp
mov dword [ebp - 0xa0], esp
push eax
call fcn.0040a040
mov ebx, 0x4d16f0
mov esi, ebx
call fcn.0040b7ee
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xa0], esp
push 0xa
pop ecx
mov word [eax], cx
mov dword [eax + 8], 0x80020004
lea eax, [ebp - 0x19c]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xb
call fcn.0040af8e
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xf8]
push ecx
push eax
mov byte [ebp - 4], 0xd
call fcn.0040bc86
lea ecx, [ebp - 0x19c]
mov byte [ebp - 4], 0xf
call fcn.00402059
mov eax, dword [ebp - 0xf8]
lea ecx, [ebp - 0xf8]
call dword [eax + 0x14]
test eax, eax
je 0x47ba3c
push 0
call fcn.0040b059
mov byte [ebp - 4], 0x10
cmp byte [0x4d15f7], 0
jne 0x47ba15
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0xf8]
call fcn.0040aeb9
sub esp, 0x10
mov edx, esp
mov byte [ebp - 4], 0x11
mov dword [ebp - 0xa0], esp
push 3
pop ecx
mov word [edx], cx
lea ecx, [ebp - 0xd8]
mov dword [edx + 8], 1
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 0x28]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x13
call fcn.00402059
push 0xffffefd7
push 3
push 0x18c
push dword [ebp - 0xd0]
call fcn.0042e6e0
add esp, 0x10
push 0
mov dword [ebp - 0xcc], eax
call fcn.0040b059
lea ecx, [ebp - 0xd8]
call fcn.00402059
mov dword [ebp - 4], 0xf
cmp byte [0x4d172c], 0
je 0x47ba3c
cmp dword [0x4d1738], 0xf
jge 0x47ba3c
call fcn.0047b49e
push 0
mov esi, ebx
call fcn.0040b059
cmp dword [0x4d1738], 0xe
jl 0x47ba67
mov ecx, ebx
call fcn.00479f6d
mov dword [0x4d1710], eax
jmp 0x47bac5
lea eax, [ebp - 0xa0]
mov esi, ebx
call fcn.0040b7bb
mov esi, eax
push 0x18
lea edx, [ebp - 0x4c]
mov ecx, 0x4acaf8
mov byte [ebp - 4], 0x15
call fcn.0040c4d0
mov ecx, dword [esi]
test ecx, ecx
je 0x47ba93
mov ecx, dword [ecx]
jmp 0x47ba95
xor ecx, ecx
cmp dword [eax + 0x14], 8
jb 0x47ba9d
mov eax, dword [eax]
push ecx
push eax
call dword [sym.imp.USER32.dll_FindWindowW]
push 1
xor edi, edi
lea esi, [ebp - 0x4c]
mov dword [0x4d1710], eax
call fcn.00401000
lea edi, [ebp - 0xa0]
mov byte [ebp - 4], 0xf
call fcn.004019ac
push dword [0x4d1710]
mov edi, 0x4acaf8
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x47c70d
lea eax, [ebp - 0x90]
push eax
push dword [0x4d1710]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp dword [0x4d156c], 8
mov eax, dword [0x4d1558]
jae 0x47bb04
mov eax, 0x4d1558
push eax
push dword [ebp - 0x90]
call fcn.00413aa1
test eax, eax
jne 0x47bbdc
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xa0], esp
mov esi, 0x4acb30
push esi
push eax
call fcn.00401b0d
sub esp, 0x10
mov byte [ebp - 4], 0x16
mov eax, esp
mov dword [ebp - 0x94], esp
push esi
push eax
call fcn.00401b0d
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xa0], esp
push 0xb
pop ecx
mov word [eax], cx
xor ecx, ecx
mov word [eax + 8], cx
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0xf
call fcn.0040ac30
mov eax, dword [ebp - 0xf8]
push 0
lea ecx, [ebp - 0xf8]
call dword [eax + 0xc]
mov ecx, ebx
call fcn.0040affd
push 0x14
lea esi, [ebp - 0x4c]
mov ecx, edi
call fcn.0040c6e0
lea esi, [ebp - 0x60]
mov byte [ebp - 4], 0x17
call fcn.0040a0f0
push 0
push 1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x19
call fcn.00407b75
mov eax, esi
push eax
lea ecx, [ebp - 0x170]
call fcn.0042ff53
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x170], 0x495164
push 0x49de9c
lea eax, [ebp - 0x170]
jmp 0x47b612
lea esi, [ebp - 0xf8]
call fcn.0040ae4a
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xa0], esp
mov esi, 0x4acb30
push esi
push eax
call fcn.00401b0d
sub esp, 0x10
mov byte [ebp - 4], 0x1e
mov eax, esp
mov dword [ebp - 0xa4], esp
push esi
push eax
call fcn.00401b0d
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xa4], esp
push 0xb
pop ecx
mov word [eax], cx
xor ecx, ecx
mov word [eax + 8], cx
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0xf
call fcn.0040ac30
mov eax, dword [ebp - 0xf8]
push 0
lea ecx, [ebp - 0xf8]
call dword [eax + 0xc]
push 0x17
lea edx, [ebp - 0x4c]
mov ecx, edi
call fcn.0040c4d0
mov byte [ebp - 4], 0x1f
cmp dword [eax + 0x14], 8
jb 0x47bc63
mov eax, dword [eax]
push ecx
mov edi, esp
mov dword [ebp - 0xa4], esp
push eax
call fcn.0040a040
mov esi, ebx
call fcn.0040b7ee
push 1
xor edi, edi
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00401000
mov eax, dword [0x4d1750]
test eax, eax
je 0x47bcaa
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 1
push 0x80
push dword [0x4d1710]
call edi
jmp 0x47bccd
mov eax, dword [0x4d1754]
test eax, eax
je 0x47bcc7
push eax
push 1
push 0x80
push dword [0x4d1710]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp - 0x94]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push 0x487
push dword [0x4d1710]
call edi
push 0
mov esi, ebx
call fcn.0040b059
lea eax, [ebp - 0x94]
push eax
push 3
push 0x4b9
push dword [0x4d16f8]
xor ebx, ebx
mov dword [ebp - 0x94], ebx
call fcn.0042e6b0
push ebx
push dword [ebp - 0x94]
mov dword [0x4d16fc], eax
push 0x49d
push dword [0x4d1710]
call edi
mov eax, dword [0x4d173c]
cmp eax, ebx
je 0x47bd42
push ebx
push eax
push 0x49a
push dword [0x4d1710]
call edi
mov dword [ebp - 0x1c], 0xf
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
mov byte [ebp - 4], 0x20
mov eax, dword [0x4d1514]
cmp eax, ebx
je 0x47bd96
cmp dword [0x4d1518], 8
mov ecx, dword [0x4d1504]
jae 0x47bd70
mov ecx, 0x4d1504
add eax, eax
push eax
push ecx
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [0x4d1514]
push eax
push 0x488
push dword [0x4d1710]
call edi
push 0x413
lea ecx, [ebp - 0x30]
call fcn.00479313
test al, al
je 0x47bde3
cmp dword [ebp - 0x1c], 0x10
mov eax, dword [ebp - 0x30]
jae 0x47bdb3
lea eax, [ebp - 0x30]
push dword [ebp - 0x20]
push eax
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [ebp - 0x20]
push eax
push 0x484
push dword [0x4d1710]
call edi
or ecx, 0xffffffff
xor eax, eax
lea esi, [ebp - 0x30]
call fcn.00408f87
push 0x415
lea ecx, [ebp - 0x30]
call fcn.00479313
test al, al
je 0x47be30
cmp dword [ebp - 0x1c], 0x10
mov eax, dword [ebp - 0x30]
jae 0x47be00
lea eax, [ebp - 0x30]
push dword [ebp - 0x20]
push eax
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [ebp - 0x20]
push eax
push 0x486
push dword [0x4d1710]
call edi
or ecx, 0xffffffff
xor eax, eax
lea esi, [ebp - 0x30]
call fcn.00408f87
mov eax, dword [0x4d154c]
cmp eax, ebx
je 0x47be73
cmp dword [0x4d1550], 8
mov ecx, dword [0x4d153c]
jae 0x47be4d
mov ecx, 0x4d153c
add eax, eax
push eax
push ecx
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [0x4d154c]
push eax
push 0x48d
push dword [0x4d1710]
call edi
mov eax, dword [0x4d1568]
cmp eax, ebx
je 0x47beb6
cmp dword [0x4d156c], 8
mov ecx, dword [0x4d1558]
jae 0x47be90
mov ecx, 0x4d1558
add eax, eax
push eax
push ecx
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [0x4d1568]
push eax
push 0x48e
push dword [0x4d1710]
call edi
mov eax, dword [0x4d1768]
cmp eax, ebx
je 0x47bf06
cmp dword [0x4d176c], 0x10
mov ecx, dword [0x4d1758]
jae 0x47bed3
mov ecx, 0x4d1758
push eax
push ecx
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [0x4d1768]
push eax
push 0x483
push dword [0x4d1710]
call edi
or ecx, 0xffffffff
xor eax, eax
mov esi, 0x4d1758
call fcn.00408f87
mov eax, dword [0x4d1784]
cmp eax, ebx
je 0x47bf56
cmp dword [0x4d1788], 0x10
mov ecx, dword [0x4d1774]
jae 0x47bf23
mov ecx, 0x4d1774
push eax
push ecx
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [0x4d1784]
push eax
push 0x482
push dword [0x4d1710]
call edi
or ecx, 0xffffffff
xor eax, eax
mov esi, 0x4d1774
call fcn.00408f87
mov eax, dword [0x4d1684]
cmp eax, ebx
je 0x47bf99
cmp dword [0x4d1688], 8
mov ecx, dword [0x4d1674]
jae 0x47bf73
mov ecx, 0x4d1674
add eax, eax
push eax
push ecx
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [0x4d1684]
push eax
push 0x489
push dword [0x4d1710]
call edi
mov eax, dword [0x4d16a0]
cmp eax, ebx
je 0x47bfdc
cmp dword [0x4d16a4], 8
mov ecx, dword [0x4d1690]
jae 0x47bfb6
mov ecx, 0x4d1690
add eax, eax
push eax
push ecx
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [0x4d16a0]
push eax
push 0x48a
push dword [0x4d1710]
call edi
and dword [ebp - 0x94], 0
mov ebx, 0x485
mov eax, dword [ebp - 0x94]
cmp eax, 0xc8
jge 0x47c062
add eax, 0x4b0
push eax
lea ecx, [ebp - 0x30]
call fcn.00479313
test al, al
je 0x47c04d
cmp dword [ebp - 0x1c], 0x10
mov eax, dword [ebp - 0x30]
jae 0x47c013
lea eax, [ebp - 0x30]
push dword [ebp - 0x20]
push eax
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x98]
push ebx
push dword [eax + 0x228]
call edi
or ecx, 0xffffffff
xor eax, eax
lea esi, [ebp - 0x30]
call fcn.00408f87
inc dword [ebp - 0x94]
jmp 0x47bfe8
push 0
push 0
push ebx
mov ebx, dword [ebp - 0x98]
push dword [ebx + 0x228]
call edi
jmp 0x47c068
mov ebx, dword [ebp - 0x98]
or ecx, 0xffffffff
xor eax, eax
lea esi, [ebp - 0x30]
call fcn.00408f87
push 0x453
mov ecx, esi
call fcn.00479313
test al, al
je 0x47c0c0
cmp dword [ebp - 0x1c], 0x10
mov eax, dword [ebp - 0x30]
jae 0x47c090
mov eax, esi
push dword [ebp - 0x20]
push eax
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [ebp - 0x20]
push eax
push 0x48c
push dword [ebx + 0x228]
call edi
or ecx, 0xffffffff
xor eax, eax
lea esi, [ebp - 0x30]
call fcn.00408f87
or ecx, 0xffffffff
xor eax, eax
lea esi, [ebp - 0x30]
call fcn.00408f87
push 0x40b
mov ecx, esi
call fcn.00479313
test al, al
je 0x47c11e
cmp dword [ebp - 0x20], 2
jbe 0x47c11e
cmp dword [ebp - 0x1c], 0x10
mov eax, dword [ebp - 0x30]
jae 0x47c0ee
mov eax, esi
push dword [ebp - 0x20]
push eax
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [ebp - 0x20]
push eax
push 0x490
push dword [ebx + 0x228]
call edi
or ecx, 0xffffffff
xor eax, eax
lea esi, [ebp - 0x30]
call fcn.00408f87
mov ecx, dword [ebx + 0x2b8]
test ecx, ecx
je 0x47c167
lea eax, [ebx + 0x2a8]
cmp dword [eax + 0x14], 0x10
jb 0x47c136
mov eax, dword [eax]
push ecx
push eax
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [ebx + 0x2b8]
push eax
push 0x48b
push dword [ebx + 0x228]
call edi
or ecx, 0xffffffff
xor eax, eax
lea esi, [ebp - 0x30]
call fcn.00408f87
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea esi, [ebp - 0x4c]
call fcn.00402a60
cmp dword [ebp - 0x38], 8
mov eax, dword [ebp - 0x4c]
jae 0x47c181
mov eax, esi
mov ecx, dword [ebp - 0x3c]
add ecx, ecx
push ecx
push eax
push dword [ebp - 0x90]
call fcn.00413d06
add esp, 0xc
push dword [ebp - 0x20]
push eax
push 0x49b
push dword [ebx + 0x228]
call edi
push 1
xor edi, edi
lea esi, [ebp - 0x4c]
call fcn.00401000
cmp dword [ebx + 0x250], 0xf
jl 0x47c1c5
cmp byte [ebx + 0x244], 0
jne 0x47c204
xor edi, edi
lea esi, [ebx + 0x208]
cmp dword [ebx + 0x254], edi
jne 0x47c1e7
call fcn.0040b080
cmp byte [ebx + 0x10f], 0
jne 0x47c204
push 1
jmp 0x47c1ff
mov eax, dword [esi + 8]
push edi
push 0xb
push 0x157
push eax
call fcn.0042e6e0
add esp, 0x10
mov dword [esi + 0xc], eax
push edi
call fcn.0040b059
mov byte [ebp - 4], 0x21
cmp dword [ebx + 0x250], 0xe
jl 0x47c21c
lea ecx, [ebx + 0x208]
call fcn.0040b8a7
cmp byte [ebx + 0x110], 0
je 0x47c2ce
cmp dword [ebx + 0x250], 0xc
jge 0x47c2ce
mov eax, dword [ebx + 0x248]
cmp eax, 0x34
je 0x47c24a
cmp eax, 0x32
jne 0x47c2ce
push 0x22
lea edx, [ebp - 0x4c]
mov ecx, 0x4acaf8
call fcn.0040c4d0
cmp dword [eax + 0x14], 8
jb 0x47c261
mov eax, dword [eax]
push 0x10
push str.Error
push eax
push dword [ebx + 0x228]
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
xor edi, edi
lea esi, [ebp - 0x4c]
call fcn.00401000
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebx + 0x208]
call fcn.0040af8e
mov esi, eax
mov byte [ebp - 4], 0x22
call fcn.0040c00d
lea ecx, [ebp - 0x19c]
mov byte [ebp - 4], 0x21
call fcn.00402059
lea ecx, [ebx + 0x208]
call fcn.0040affd
and dword [ebp - 0xb4], edi
push 0x49defc
lea eax, [ebp - 0xb4]
jmp 0x47b612
lea esi, [ebp - 0xd8]
mov dword [ebp - 0x94], 0xa
call fcn.00401ba4
mov dword [ebp - 0xd8], 0x490b38
mov byte [ebp - 4], 0x23
jmp 0x47c2f9
mov ebx, dword [ebp - 0x98]
cmp byte [ebx + 0x110], 0
mov edi, 0x4acb30
je 0x47c32b
lea eax, [ebx + 0x170]
cmp dword [eax + 0x14], 8
jb 0x47c315
mov eax, dword [eax]
push eax
lea esi, [ebp - 0x40]
call fcn.00401adf
mov byte [ebp - 4], 0x24
or dword [ebp - 0x9c], 1
jmp 0x47c343
push edi
lea eax, [ebp - 0x60]
push eax
call fcn.00401b0d
mov dword [ebp - 4], 0x25
or dword [ebp - 0x9c], 2
sub esp, 0x10
mov esi, eax
mov eax, esp
mov dword [ebp - 0xa4], esp
push edi
push eax
call fcn.00401b0d
sub esp, 0x10
mov dword [ebp - 4], 0x26
mov eax, esp
mov dword [ebp - 0x178], esp
push edi
push eax
call fcn.00401b0d
sub esp, 0x10
mov byte [ebp - 4], 0x27
mov eax, esp
mov dword [ebp - 0x114], esp
push edi
push eax
call fcn.00401b0d
sub esp, 0x10
mov byte [ebp - 4], 0x28
mov eax, esp
mov dword [ebp - 0x128], esp
push edi
push eax
call fcn.00401b0d
sub esp, 0x10
mov byte [ebp - 4], 0x29
mov eax, esp
mov dword [ebp - 0x110], esp
push edi
push eax
call fcn.00401b0d
sub esp, 0x10
mov byte [ebp - 4], 0x2a
mov eax, esp
mov dword [ebp - 0x118], esp
push edi
push eax
call fcn.00401b0d
sub esp, 0x10
mov byte [ebp - 4], 0x2b
mov eax, esp
mov dword [ebp - 0x160], esp
push edi
push eax
call fcn.00401b0d
sub esp, 0x10
mov byte [ebp - 4], 0x2c
mov eax, esp
mov dword [ebp - 0x174], esp
push edi
push eax
call fcn.00401b0d
sub esp, 0x10
mov byte [ebp - 4], 0x2d
mov eax, esp
mov dword [ebp - 0x17c], esp
push esi
push eax
call fcn.00401b0d
sub esp, 0x10
mov byte [ebp - 4], 0x2e
mov eax, esp
mov dword [ebp - 0x13c], esp
push edi
push eax
call fcn.00401b0d
mov byte [ebp - 4], 0x2f
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xfc], esp
push edi
push eax
call fcn.00401b0d
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xb8], esp
push 3
pop ecx
mov edx, ecx
mov word [eax], dx
mov dword [eax + 8], ecx
lea eax, [ebx + 0x54]
mov byte [ebp - 4], 0x31
cmp dword [eax + 0x14], 8
jb 0x47c45b
mov eax, dword [eax]
push ecx
mov edi, esp
mov dword [ebp - 0xac], esp
push eax
call fcn.0040a040
lea eax, [ebp - 0x1cc]
lea ecx, [ebx + 0x208]
mov byte [ebp - 4], 0x32
push eax
mov dword [ebp - 0xa0], ecx
call fcn.0040af8e
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x19c]
mov byte [ebp - 4], 0x34
call fcn.0040bdaa
push eax
lea ebx, [ebp - 0xd8]
mov byte [ebp - 4], 0x35
call fcn.00401952
lea ecx, [ebp - 0x19c]
call fcn.00402059
lea ecx, [ebp - 0x1cc]
call fcn.00402059
test byte [ebp - 0x9c], 2
je 0x47c4da
and dword [ebp - 0x9c], 0xfffffffd
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0x23
test byte [ebp - 0x9c], 1
je 0x47c4fb
and dword [ebp - 0x9c], 0xfffffffe
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edi, dword [ebp - 0x98]
cmp dword [edi + 0x250], 0xf
jl 0x47c539
mov eax, dword [ebp - 0xd8]
lea ecx, [ebp - 0xd8]
call dword [eax + 0x14]
test eax, eax
je 0x47c539
lea esi, [ebp - 0xd8]
call fcn.0040ae4a
mov esi, dword [ebp - 0xa0]
call fcn.0040b883
mov dword [edi + 0x228], eax
xor ebx, ebx
push ebx
push ebx
push 0x49c
push dword [edi + 0x228]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0xc8
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, ebx
jne 0x47c571
dec dword [ebp - 0x94]
cmp dword [ebp - 0x94], ebx
jg 0x47c2f3
cmp byte [edi + 0x244], bl
je 0x47c5f8
cmp dword [edi + 0x250], 0xf
jl 0x47c5f8
call fcn.0047b49e
cmp byte [edi + 0x10f], bl
jne 0x47c5ab
lea ebx, [edi + 0x208]
push 1
mov esi, ebx
call fcn.0040b059
lea esi, [ebp - 0xd8]
call fcn.0040ae4a
jmp 0x47c5bc
lea esi, [ebp - 0xd8]
call fcn.0040ae4a
lea ebx, [edi + 0x208]
mov esi, ebx
call fcn.0040b883
push eax
mov dword [edi + 0x228], eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
cmp dword [edi + 0x254], 0
jne 0x47c5e0
call fcn.0040b080
jmp 0x47c5f8
mov eax, dword [ebx + 8]
push 0
push 0xb
push 0x157
push eax
call fcn.0042e6e0
add esp, 0x10
mov dword [ebx + 0xc], eax
mov eax, dword [edi + 0x1c8]
mov ecx, 0xffffeff7
cmp eax, ecx
je 0x47c619
cmp eax, 0xffffefd9
je 0x47c619
cmp eax, 2
je 0x47c619
mov dword [edi + 0x1c8], ecx
push dword [edi + 0x1c8]
lea ecx, [edi + 0x208]
call fcn.0040b0e6
mov eax, dword [edi + 0x208]
push 0
lea ecx, [edi + 0x208]
call dword [eax + 0xc]
lea ecx, [ebp - 0xd8]
call fcn.00402059
mov dword [ebp - 4], 0x20
jmp 0x47c669
xor ebx, ebx
cmp byte [ebp - 0x89], bl
je 0x47c6c0
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [edi + 0x208]
call fcn.0040af8e
mov esi, eax
mov byte [ebp - 4], 0x37
call fcn.0040c00d
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x20
call fcn.00402059
lea ecx, [edi + 0x208]
call fcn.0040affd
mov dword [ebp - 0xb0], ebx
push 0x49defc
lea eax, [ebp - 0xb0]
jmp 0x47b612
mov eax, dword [edi + 0x25c]
cmp eax, ebx
je 0x47c6d8
push ebx
push ebx
push 0x501
push eax
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push ebx
push ebx
push 0x48f
push dword [edi + 0x228]
call dword [sym.imp.USER32.dll_PostMessageW]
push 1
xor edi, edi
lea esi, [ebp - 0x30]
call fcn.00407b2e
lea ecx, [ebp - 0xf8]
call fcn.00402059
lea esi, [ebp - 0x88]
jmp 0x47b7c0
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xac], esp
mov esi, 0x4acb30
push esi
push eax
call fcn.00401b0d
sub esp, 0x10
mov byte [ebp - 4], 0x1a
mov eax, esp
mov dword [ebp - 0xb8], esp
push esi
push eax
call fcn.00401b0d
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xac], esp
push 0xb
pop ecx
mov word [eax], cx
xor ecx, ecx
mov word [eax + 8], cx
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0xf
call fcn.0040ac30
mov eax, dword [ebp - 0xf8]
push 0
lea ecx, [ebp - 0xf8]
call dword [eax + 0xc]
mov ecx, ebx
call fcn.0040affd
push 0x16
lea esi, [ebp - 0x4c]
mov ecx, edi
call fcn.0040c6e0
lea esi, [ebp - 0x60]
mov byte [ebp - 4], 0x1b
call fcn.0040a0f0
push 0
push 1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x1d
call fcn.00407b75
mov eax, esi
push eax
lea ecx, [ebp - 0x15c]
call fcn.0042ff53
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x15c], 0x495164
push 0x49de9c
lea eax, [ebp - 0x15c]
jmp 0x47b612