Function at 0x4726e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dd883
mov eax, dword fs:[0]
push eax
sub esp, 0x13c
mov eax, dword [0x50f52c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
mov dword [ebp - 0x4c], edi
test byte [0x510a48], 1
mov ebx, ecx
jne 0x472743
or dword [0x510a48], 1
mov dword [ebp - 4], edi
push edi
call fcn.004b4a6b
add esp, 4
mov dword [0x510a40], eax
mov dword [0x510a44], edx
mov dword [ebp - 4], 0xffffffff
push edi
xor eax, eax
push 0x4e25d8
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], edi
mov word [ebp - 0x28], ax
call fcn.00401860
mov dword [ebp - 4], 1
mov eax, dword [ebp + 8]
add eax, 0xffff6fee
cmp eax, 0x28
ja case.0x472780.36883
movzx ecx, byte [eax + 0x472f28]
jmp dword [ecx*4 + 0x472f14]
push edi
call fcn.004b4a6b
add esp, 4
push edi
mov ecx, ebx
mov dword [0x510a40], eax
mov dword [0x510a44], edx
call fcn.00472570
mov ecx, dword [0x510a34]
mov esi, dword [ecx + 0x10]
sub esi, dword [ecx + 0xc]
mov eax, 0x8a42f871
imul esi
add edx, esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jne 0x472810
push edi
call fcn.00463630
sub esp, 0x1c
mov esi, eax
mov edi, esp
add esi, 0x1b8
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x88]
push 0x42e
push ecx
call fcn.004285a0
add esp, 0x24
mov byte [ebp - 4], 2
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00409f50
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x88]
jmp 0x472849
sub esp, 0x1c
mov edi, esp
lea esi, [ecx + 0x84]
lea edx, [ebp - 0x6c]
push 0x42e
mov ecx, 7
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.004285a0
add esp, 0x24
mov byte [ebp - 4], 3
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00409f50
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
call fcn.0041c0e0
cmp dword [ebp - 0x14], 8
mov esi, dword [ebp - 0x28]
jae 0x47285a
lea esi, [ebp - 0x28]
mov eax, dword [ebx + 4]
push 0x3fb
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
jmp case.0x472780.36883
push 0x64
mov ecx, ebx
call fcn.00472570
lea ecx, [ebp - 0x94]
push 0x410
push ecx
call fcn.004285a0
add esp, 8
mov byte [ebp - 4], 4
mov edx, dword [eax]
mov eax, dword [ebx + 4]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
lea esi, [ebx + 4]
push 0x3fb
push eax
mov dword [ebp - 0x50], edx
call edi
mov ecx, dword [ebp - 0x50]
push ecx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x94]
call fcn.0041c0e0
lea edx, [ebp - 0x80]
push 0
push edx
call fcn.004285a0
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [esi]
mov eax, dword [eax]
push 0x448
push ecx
mov dword [ebp - 0x50], eax
call edi
mov edx, dword [ebp - 0x50]
push edx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x80]
call fcn.0041c0e0
mov eax, dword [esi]
push eax
call dword [sym.imp.USER32.dll_GetParent]
push 2
push eax
call edi
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, ebx
call fcn.00472170
test eax, eax
je 0x472949
mov ecx, dword [esi]
push 0x3fe
push ecx
call fcn.00454ee0
mov ecx, dword [0x510a34]
push 0xff
call fcn.0041ebe0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov edx, dword [0x510a34]
cmp dword [edx + 0x260], 0
je 0x472974
push 2
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
call fcn.00463500
mov ecx, eax
call fcn.00464e20
jmp case.0x472780.36883
push 1
lea ecx, [ebp - 0x9c]
push ecx
mov ecx, esi
call fcn.00463500
mov ecx, eax
call fcn.00464e20
jmp case.0x472780.36883
mov edx, dword [0x510a34]
add edx, 0x3a8
push 0x4e25d8
push edx
call fcn.00402620
add esp, 8
test al, al
je 0x472b5a
mov eax, dword [ebx + 4]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x3fb
push eax
call esi
push edi
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call edi
mov ecx, dword [ebx + 4]
push 0x3fa
push ecx
call esi
push 0
push eax
call edi
mov edx, dword [ebx + 4]
push 0x447
push edx
call esi
push 0
push eax
call edi
mov eax, dword [ebx + 4]
push 0x448
push eax
call esi
push 0
push eax
call edi
mov ecx, dword [ebx + 4]
push 0x476
push ecx
call esi
push 5
push eax
call edi
mov edx, dword [ebx + 4]
push 0x477
push edx
call esi
push 5
push eax
call edi
mov eax, dword [ebx + 4]
push 0x478
push eax
call esi
push 5
push eax
call edi
mov ecx, dword [ebx + 4]
push 0x479
push ecx
call esi
push 5
push eax
call edi
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x84]
push eax
call fcn.004285a0
add esp, 8
mov byte [ebp - 4], 6
mov ecx, dword [ebx + 4]
mov edi, dword [eax]
push 0x478
push ecx
call esi
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x84]
call fcn.0041c0e0
mov esi, dword [0x510a34]
add esi, 0x84
sub esp, 0x1c
mov ecx, 7
mov edi, esp
lea edx, [ebp - 0x8c]
push 0x43c
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.004285a0
add esp, 0x24
mov byte [ebp - 4], 7
mov edi, dword [eax]
mov eax, dword [ebx + 4]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x479
push eax
call esi
push edi
mov edi, dword [sym.imp.USER32.dll_SetWindowTextW]
push eax
call edi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
call fcn.0041c0e0
lea ecx, [ebp - 0x70]
push 0x43d
push ecx
call fcn.004285a0
add esp, 8
mov byte [ebp - 4], 8
mov edx, dword [eax]
mov eax, dword [ebx + 4]
push 0x476
push eax
mov dword [ebp - 0x50], edx
call esi
mov ecx, dword [ebp - 0x50]
push ecx
push eax
call edi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x70]
call fcn.0041c0e0
lea edx, [ebp - 0x90]
push 0xcb
push edx
call fcn.004285a0
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebx + 4]
mov eax, dword [eax]
push ecx
mov dword [ebp - 0x50], eax
call dword [sym.imp.USER32.dll_GetParent]
push 2
push eax
call esi
mov edx, dword [ebp - 0x50]
push edx
push eax
call edi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x90]
call fcn.0041c0e0
mov dword [ebx + 0x6c], 1
jmp case.0x472780.36883
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebx + 4]
push eax
push ecx
call fcn.00454ee0
push edi
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov esi, dword [ebp + 0x10]
cmp esi, edi
jbe case.0x472780.36883
cmp dword [0x510a38], edi
jne 0x472b87
mov dword [0x510a38], esi
push edi
call fcn.004b4a6b
add esp, 4
sub eax, dword [0x510a40]
sbb edx, dword [0x510a44]
mov dword [ebp - 0x64], edx
js case.0x472780.36883
jg 0x472bb0
cmp eax, 3
jbe case.0x472780.36883
push edi
call fcn.004b4a6b
add esp, 4
sub eax, dword [0x510a40]
sbb edx, dword [0x510a44]
mov dword [ebp - 0x64], edx
js 0x472c0c
jg 0x472bd0
cmp eax, edi
jbe 0x472c0c
push edi
call fcn.004b4a6b
add esp, 4
mov ecx, esi
sub ecx, dword [0x510a38]
sub eax, dword [0x510a40]
sbb edx, dword [0x510a44]
push edx
push eax
push edi
push ecx
call fcn.004b5dc0
mov ecx, eax
mov dword [ebp - 0x54], ecx
cmp ecx, edi
je 0x472c11
mov eax, dword [ebp + 0xc]
sub eax, esi
xor edx, edx
div ecx
mov edi, eax
jmp 0x472c14
xor ecx, ecx
mov dword [ebp - 0x54], ecx
or edi, 0xffffffff
xor edx, edx
cmp edi, 0x3c
setle dl
mov eax, 0x1000
mov dword [ebp - 0x50], edi
add edx, 0x43e
cmp eax, ecx
sbb eax, eax
neg eax
add eax, 0x440
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x58], eax
cmp ecx, 0x1000
jbe 0x472c68
shr ecx, 0xa
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x54]
push ecx
lea edx, [ebp - 0x148]
push edx
call fcn.00427c90
mov esi, eax
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x4c], 1
jmp 0x472c88
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x110]
push ecx
call fcn.00427c90
mov esi, eax
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x4c], 2
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
shr edx, 0xa
shr eax, 0xa
cmp edi, 0x3c
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x78], eax
jle 0x472cd5
mov eax, 0x88888889
imul edi
add edx, edi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0xd8]
push eax
mov dword [ebp - 0x50], ecx
call fcn.004101e0
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], 0xc
or dword [ebp - 0x4c], 4
jmp 0x472cf3
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x12c]
push edx
call fcn.004101e0
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], 0xd
or dword [ebp - 0x4c], 8
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call fcn.00427c90
mov dword [ebp - 0x54], eax
mov dword [ebp - 4], 0xe
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0xf4]
push eax
call fcn.00427c90
mov byte [ebp - 4], 0xf
sub esp, 0x1c
mov edi, esp
sub esp, 0x1c
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x54]
mov edi, esp
sub esp, 0x1c
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
mov edi, esp
mov esi, eax
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x58]
push ecx
lea edx, [ebp - 0x60]
push edx
call fcn.004285a0
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 0x10
mov esi, dword [ebp - 0x50]
mov eax, dword [ebp - 0x64]
add esp, 0x40
mov edi, esp
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
push eax
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004285a0
add esp, 0x24
mov byte [ebp - 4], 0x11
push 0x4e3c64
push eax
lea edx, [ebp - 0x74]
push edx
call fcn.00471fa0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x58]
push ecx
push eax
lea edx, [ebp - 0x5c]
push edx
call fcn.00471ef0
mov byte [ebp - 4], 0x13
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x48]
call fcn.004019e0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x5c]
call fcn.0041c0e0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x74]
call fcn.0041c0e0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x7c]
call fcn.0041c0e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x60]
call fcn.0041c0e0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xf4]
call fcn.00490320
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xbc]
call fcn.00490320
mov byte [ebp - 4], 0x1b
test byte [ebp - 0x4c], 8
je 0x472e18
and dword [ebp - 0x4c], 0xfffffff7
lea ecx, [ebp - 0x12c]
call fcn.00490320
mov byte [ebp - 4], 0x1c
test byte [ebp - 0x4c], 4
je 0x472e31
and dword [ebp - 0x4c], 0xfffffffb
lea ecx, [ebp - 0xd8]
call fcn.00490320
mov byte [ebp - 4], 0x1d
test byte [ebp - 0x4c], 2
je 0x472e4a
and dword [ebp - 0x4c], 0xfffffffd
lea ecx, [ebp - 0x110]
call fcn.00490320
mov byte [ebp - 4], 0x1e
test byte [ebp - 0x4c], 1
je 0x472e63
and dword [ebp - 0x4c], 0xfffffffe
lea ecx, [ebp - 0x148]
call fcn.00490320
cmp dword [ebp - 0x30], 8
mov eax, dword [ebp - 0x44]
jae 0x472e6f
lea eax, [ebp - 0x44]
push eax
push 0x448
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebx + 4]
call fcn.004621b0
mov ecx, eax
call fcn.00462190
mov esi, dword [ebp + 0x10]
mov eax, esi
imul eax, eax, 0x64
xor edx, edx
div dword [ebp + 0xc]
mov ecx, ebx
push eax
call fcn.00472570
push 0
call fcn.004b4a6b
add esp, 4
mov dword [0x510a40], eax
mov dword [0x510a44], edx
mov dword [0x510a38], esi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x48]
call fcn.00490320
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 8
jb 0x472ee0
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.004b29fa
add esp, 4
xor edx, edx
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], dx
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b3057
mov esp, ebp
pop ebp
ret 0x10