Function at 0x473180
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5665ae
mov eax, dword fs:[0]
push eax
sub esp, 0x13c
mov eax, dword [0x5b0514]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 8]
xor ecx, ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], cx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], ecx
lea ecx, [ebp - 0x3c]
push ecx
push eax
call fcn.00473720
test al, al
jne 0x473229
lea ecx, [ebp - 0x24]
call fcn.0040ca30
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x473695
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x47368b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4736b5
jmp 0x47368b
mov ecx, dword [ebp - 0x20]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x24]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x473326
cmp dword [ebp - 0x28], 8
lea esi, [ebp - 0x3c]
push str.close
cmovae esi, dword [ebp - 0x3c]
push esi
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x473272
push eax
mov ecx, edi
call fcn.004c8400
jmp 0x473649
push 0x59278c
push esi
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x47329b
push eax
push 0xf020
push 0x112
mov ecx, edi
call fcn.004c8a40
jmp 0x473649
push 0x592794
push esi
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x4732c7
push eax
mov ecx, edi
call fcn.004c8400
push 0
push 0
push 0x12
mov ecx, edi
call fcn.004c8870
jmp 0x473649
push 0x5927a0
push esi
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x4732e0
push eax
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
push str.hide
push esi
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x473300
push eax
push eax
mov ecx, edi
call fcn.004c8b80
jmp 0x473649
push 0x5926dc
push esi
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x4731e4
push 1
push 1
mov ecx, edi
call fcn.004c8b80
jmp 0x473649
cmp eax, 1
jne 0x4731e4
cmp dword [ebp - 0x28], 8
lea eax, [ebp - 0x3c]
cmovae eax, dword [ebp - 0x3c]
cmp dword [esi + 0x14], 8
mov dword [ebp - 0xc4], eax
jb 0x473348
mov esi, dword [esi]
push 0x5926dc
push eax
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x47337c
push esi
lea ecx, [edi + 0x14]
call fcn.004aa330
test eax, eax
je 0x473649
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx + 0xf8]
jmp 0x473649
push str.hide
push dword [ebp - 0xc4]
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x4733b5
push esi
lea ecx, [edi + 0x14]
call fcn.004aa330
test eax, eax
je 0x473649
mov edx, dword [eax]
mov ecx, eax
push 0
call dword [edx + 0xf8]
jmp 0x473649
push 0x5927b4
push dword [ebp - 0xc4]
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x473443
mov ecx, dword [edi + 0x7ec]
test ecx, ecx
je 0x4733e0
mov eax, dword [ecx]
push 0
call dword [eax + 0xf8]
push esi
lea ecx, [edi + 0x14]
call fcn.004aa330
mov ecx, eax
mov dword [edi + 0x7ec], ecx
test ecx, ecx
je 0x473649
mov esi, dword [ecx]
mov eax, dword [esi + 0xf4]
call eax
mov ecx, dword [edi + 0x7ec]
test al, al
sete al
movzx eax, al
push eax
call dword [esi + 0xf8]
mov ecx, dword [edi + 0x7ec]
mov eax, dword [ecx]
mov eax, dword [eax + 0xf4]
call eax
test al, al
je 0x473649
mov ecx, dword [edi + 0x7ec]
mov eax, dword [ecx]
call dword [eax + 0x11c]
jmp 0x473649
push str.retry
push dword [ebp - 0xc4]
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x47352e
test ebx, ebx
je 0x473649
mov eax, dword [ebx]
mov ecx, ebx
push str.WebBrowser
call dword [eax + 0xc]
push eax
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x473649
push str._RetryedTime
mov ecx, ebx
call fcn.004a31d0
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x4734ae
push 0x58d36c
push str._RetryedTime
mov ecx, ebx
mov dword [ebp - 0x14], 0x58d36c
call fcn.004a2520
push 0xa
lea eax, [ebp - 0xc4]
mov dword [ebp - 0xc4], 0
push eax
push esi
call fcn.00525bc3
mov esi, eax
lea eax, [ebp - 0xc4]
push 0xa
push eax
push dword [ebp - 0x14]
call fcn.00525bc3
add esp, 0x18
cmp eax, esi
jge 0x473519
push 0xa
lea ecx, [ebp - 0x18]
inc eax
push ecx
push eax
call fcn.0052da18
add esp, 0xc
mov ecx, ebx
push str._RetryedTime
call fcn.004a4650
lea eax, [ebp - 0x18]
mov ecx, ebx
push eax
push str._RetryedTime
call fcn.004a2520
mov ecx, ebx
call fcn.004b8ae0
jmp 0x473649
mov eax, dword [edi]
mov ecx, edi
push 0x5927a0
push ebx
call dword [eax + 0xb4]
jmp 0x473649
mov edi, dword [ebp - 0xc4]
push str.sleep
push edi
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x473564
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push 0xa
push eax
push esi
call fcn.00525bc3
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x473649
push str.close
push edi
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x4735b3
mov ecx, dword [0x5bab40]
test ecx, ecx
je 0x473649
push esi
call fcn.004718e0
test eax, eax
je 0x473649
mov esi, dword [eax]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x473649
push 1
mov ecx, esi
call fcn.004c8400
jmp 0x473649
push str.report
push edi
call fcn.0052a6d6
add esp, 8
test eax, eax
jne 0x4731e4
push 0x84
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.00521a60
add esp, 0xc
lea ecx, [ebp - 0xc0]
call fcn.004a0560
mov byte [ebp - 4], 1
test ebx, ebx
je 0x47361e
mov eax, dword [ebx]
lea ecx, [ebp - 0x148]
push ecx
mov ecx, ebx
call dword [eax + 4]
push eax
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 2
call fcn.004a07f0
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 1
call fcn.004a06c0
push esi
lea ecx, [ebp - 0xc0]
call fcn.004a08d0
push eax
push str.eventclickname_ssender_s
push dword [0x5ba980]
call fcn.00445510
add esp, 0x10
lea ecx, [ebp - 0xc0]
call fcn.004a06c0
lea ecx, [ebp - 0x24]
call fcn.0040ca30
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x473687
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x47367d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4736ba
push edx
push ecx
call fcn.00497d51
add esp, 8
mov al, 1
jmp 0x473697
push edx
push ecx
call fcn.00497d51
add esp, 8
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00497d40
mov esp, ebp
pop ebp
ret 8
call fcn.00524a29
call fcn.00524a29
int3