Function at 0x47770c
Capabilities:
Check for peb beingdebugged flag
Copy file
Extract resource via kernel32 functions
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd30
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x168], edx
mov dword [ebp - 0x16c], edx
mov dword [ebp - 0x194], edx
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x1c0], edx
mov dword [ebp - 0x1c4], edx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4786ac
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x478613
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e8]
xor edx, edx
call fcn.0041f6b8
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x220]
call fcn.0041f720
mov eax, dword [ebp - 0x168]
call fcn.00407600
test al, al
jne 0x4777cb
push 0
mov cx, word [0x4786bc]
mov dl, 3
mov eax, 0x4786c8
call fcn.0043c5c8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e8]
mov dl, 1
call fcn.0041f6b8
call fcn.00403550
jmp 0x47865b
mov eax, dword [0x481440]
mov eax, dword [eax]
call fcn.0042f2fc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1f4]
mov eax, dword [eax + 0x118]
xor edx, edx
call fcn.0045f6ac
mov edx, 0x4786f8
call fcn.0045f638
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x284]
cmp byte [eax + 0x45], 0
je 0x47782b
push 0
mov cx, word [0x478714]
mov dl, 3
mov eax, 0x478720
call fcn.0043c5c8
cmp eax, 6
jne 0x47782b
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
call fcn.0047720c
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
call fcn.0041f720
mov eax, dword [ebp - 0x168]
call fcn.00407600
test al, al
je 0x4778f6
push 0
lea eax, [ebp - 0x16c]
push eax
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
call fcn.0041f720
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x174], eax
mov byte [ebp - 0x170], 0xb
lea edx, [ebp - 0x174]
xor ecx, ecx
mov eax, 0x4787b4
call fcn.00408320
mov eax, dword [ebp - 0x16c]
mov cx, word [0x478714]
mov dl, 3
call fcn.0043c5c8
cmp eax, 6
jne 0x4778dc
push 0xffff
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
call fcn.0041f720
mov ecx, dword [ebp - 0x168]
mov dl, 1
mov eax, dword [0x40cf6c]
call fcn.004102dc
mov ebx, eax
jmp 0x477923
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e8]
mov dl, 1
call fcn.0041f6b8
call fcn.00403550
jmp 0x47865b
push 0xffff
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
call fcn.0041f720
mov ecx, dword [ebp - 0x168]
mov dl, 1
mov eax, dword [0x40cf6c]
call fcn.004102dc
mov ebx, eax
push 0x4787cc
mov eax, dword [0x484ce8]
call fcn.00403e14
push eax
mov eax, dword [0x481404]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_FindResourceA
mov edi, eax
test edi, edi
jne 0x477950
call fcn.00403550
jmp 0x47865b
push edi
mov eax, dword [0x481404]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_SizeofResource
mov esi, eax
test esi, esi
jne 0x47796e
call fcn.00403550
jmp 0x47865b
push edi
mov eax, dword [0x481404]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_LoadResource
test eax, eax
jne 0x47798a
call fcn.00403550
jmp 0x47865b
push eax
call sub.kernel32.dll_LockResource
test eax, eax
jne 0x47799e
call fcn.00403550
jmp 0x47865b
mov edx, eax
mov ecx, esi
mov eax, ebx
call fcn.004101b4
mov eax, dword [0x484ce8]
mov edx, 0x4787e0
call fcn.00403d60
jne 0x477ea6
mov eax, ebx
call fcn.00402f00
xor eax, eax
push ebp
push 0x477e65
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [0x481440]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x44fce4]
call fcn.0044fd90
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov byte [eax + 0x30], 0
mov eax, dword [ebp - 0x18]
mov byte [eax + 0x31], 2
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
call fcn.0041f720
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x18]
add eax, 0x34
call fcn.00403a28
mov eax, 0x104
call fcn.00407e94
mov ebx, eax
push ebx
push 0x104
call sub.kernel32.dll_GetTempPathA
push ebx
push 0
push 0x4787ec
push ebx
call sub.kernel32.dll_GetTempFileNameA
lea edx, [ebp - 0x16c]
mov eax, ebx
call fcn.00407e80
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x18]
add eax, 0x38
call fcn.00403a28
mov eax, ebx
call fcn.00407ee0
lea eax, [ebp - 0x178]
mov edx, dword [0x484ce0]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x178]
lea eax, [ebp - 0x17c]
call fcn.00402aec
lea eax, [ebp - 0x180]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 1]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x180]
lea eax, [ebp - 0x17c]
mov cl, 2
call fcn.00402abc
lea edx, [ebp - 0x17c]
lea eax, [ebp - 0x188]
call fcn.00402aec
mov edx, 0x4787f0
lea eax, [ebp - 0x188]
mov cl, 5
call fcn.00402abc
lea edx, [ebp - 0x188]
lea eax, [ebp - 0x190]
call fcn.00402aec
lea eax, [ebp - 0x180]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 3]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x180]
lea eax, [ebp - 0x190]
mov cl, 6
call fcn.00402abc
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x174]
call fcn.00402aec
mov edx, 0x4787f4
lea eax, [ebp - 0x174]
mov cl, 7
call fcn.00402abc
lea edx, [ebp - 0x174]
lea eax, [ebp - 0x16c]
call fcn.00403bf4
push dword [ebp - 0x16c]
lea eax, [ebp - 0x180]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 4]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x180]
lea eax, [ebp - 0x19c]
call fcn.00402aec
lea eax, [ebp - 0x1a0]
mov edx, dword [0x484ce0]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x1a0]
lea eax, [ebp - 0x19c]
mov cl, 2
call fcn.00402abc
lea edx, [ebp - 0x19c]
lea eax, [ebp - 0x1a4]
call fcn.00402aec
lea eax, [ebp - 0x1a0]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 8]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x1a0]
lea eax, [ebp - 0x1a4]
mov cl, 3
call fcn.00402abc
lea edx, [ebp - 0x1a4]
lea eax, [ebp - 0x1ac]
call fcn.00402aec
lea eax, [ebp - 0x1a0]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 3]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x1a0]
lea eax, [ebp - 0x1ac]
mov cl, 4
call fcn.00402abc
lea edx, [ebp - 0x1ac]
lea eax, [ebp - 0x1b4]
call fcn.00402aec
lea eax, [ebp - 0x1a0]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 1]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x1a0]
lea eax, [ebp - 0x1b4]
mov cl, 5
call fcn.00402abc
lea edx, [ebp - 0x1b4]
lea eax, [ebp - 0x1bc]
call fcn.00402aec
lea eax, [ebp - 0x1a0]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 6]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x1a0]
lea eax, [ebp - 0x1bc]
mov cl, 6
call fcn.00402abc
lea edx, [ebp - 0x1bc]
lea eax, [ebp - 0x198]
call fcn.00403bf4
mov edx, dword [ebp - 0x198]
lea ecx, [ebp - 0x194]
mov eax, dword [ebp - 4]
call fcn.004770f4
push dword [ebp - 0x194]
push 0x478800
lea eax, [ebp - 0x198]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 2]
call fcn.00403b78
push dword [ebp - 0x198]
lea eax, [ebp - 0x1c0]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 1]
call fcn.00403b78
push dword [ebp - 0x1c0]
push 0x478810
lea eax, [ebp - 0x1c4]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 4]
call fcn.00403b78
push dword [ebp - 0x1c4]
push 0x47882c
mov eax, dword [ebp - 0x18]
add eax, 0x2c
mov edx, 8
call fcn.00403d10
lea eax, [ebp - 0x178]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 6]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x178]
lea eax, [ebp - 0x17c]
call fcn.00402aec
lea eax, [ebp - 0x180]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 7]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x180]
lea eax, [ebp - 0x17c]
mov cl, 2
call fcn.00402abc
lea edx, [ebp - 0x17c]
lea eax, [ebp - 0x1a4]
call fcn.00402aec
lea eax, [ebp - 0x180]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 8]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x180]
lea eax, [ebp - 0x1a4]
mov cl, 3
call fcn.00402abc
lea edx, [ebp - 0x1a4]
lea eax, [ebp - 0x1ac]
call fcn.00402aec
lea eax, [ebp - 0x180]
mov edx, dword [0x484ce0]
mov dl, byte [edx + 9]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x180]
lea eax, [ebp - 0x1ac]
mov cl, 4
call fcn.00402abc
lea edx, [ebp - 0x1ac]
lea eax, [ebp - 0x1d0]
call fcn.00402aec
mov edx, 0x478838
lea eax, [ebp - 0x1d0]
mov cl, 8
call fcn.00402abc
lea edx, [ebp - 0x1d0]
mov eax, dword [ebp - 0x18]
add eax, 0x24
call fcn.00403bf4
xor edx, edx
mov eax, dword [ebp - 0x18]
call fcn.0044f5fc
push 0
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
call fcn.0041f720
mov eax, dword [ebp - 0x168]
call fcn.00403e14
push eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
call fcn.00403e14
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
call fcn.004077d8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x477e6c
mov eax, dword [ebp - 0x18]
call fcn.00402f00
ret
push 0x478840
push 0x47884c
mov eax, dword [0x481404]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_FindResourceA
mov edi, eax
test edi, edi
jne 0x477ecd
call fcn.00403550
jmp 0x47865b
push edi
mov eax, dword [0x481404]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_SizeofResource
mov esi, eax
test esi, esi
jne 0x477eeb
call fcn.00403550
jmp 0x47865b
push edi
mov eax, dword [0x481404]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_LoadResource
test eax, eax
jne 0x477f07
call fcn.00403550
jmp 0x47865b
push eax
call sub.kernel32.dll_LockResource
test eax, eax
jne 0x477f1b
call fcn.00403550
jmp 0x47865b
mov edx, eax
mov ecx, esi
mov eax, ebx
call fcn.004101b4
mov eax, ebx
call fcn.00402f00
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1f4]
mov eax, dword [eax + 0x118]
xor edx, edx
call fcn.0045f6ac
mov edx, 0x478864
call fcn.0045f638
mov eax, dword [0x481440]
mov eax, dword [eax]
call fcn.0042f2fc
mov dl, 1
mov eax, dword [0x45ac18]
call fcn.0045ad14
mov esi, eax
mov edx, 0x80000002
mov eax, esi
call fcn.0045ada8
xor ecx, ecx
mov edx, 0x478898
mov eax, esi
call fcn.0045ae0c
push 0x252b05
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x16c]
mov edx, 0x4788c8
mov eax, esi
call fcn.0045affc
mov eax, dword [ebp - 0x16c]
mov ecx, 0x13361
mov edx, 0x12ea
call fcn.0045b330
push 0x2697
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x16c]
mov edx, 0x4788d8
mov eax, esi
call fcn.0045affc
mov eax, dword [ebp - 0x16c]
mov ecx, 0x140ec
mov edx, 0xdcb1
call fcn.0045b330
push 0x116e
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x16c]
mov edx, 0x4788e8
mov eax, esi
call fcn.0045affc
mov eax, dword [ebp - 0x16c]
mov ecx, 0x2637
mov edx, 0x1c8
call fcn.0045b330
mov eax, 0x32
call fcn.00407e94
mov ebx, eax
mov eax, dword [ebp - 0xc]
call fcn.00403c50
push eax
mov eax, dword [ebp - 0xc]
call fcn.00403e14
mov ecx, ebx
pop edx
call fcn.0045b40c
lea edx, [ebp - 0x16c]
mov eax, ebx
call fcn.00407e80
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x2d0]
mov ecx, 0xff
call fcn.00403c2c
lea edx, [ebp - 0x2d0]
mov eax, 0x484a48
mov cl, 0x32
call fcn.00402b08
mov eax, dword [ebp - 0x10]
call fcn.00403c50
push eax
mov eax, dword [ebp - 0x10]
call fcn.00403e14
mov ecx, ebx
pop edx
call fcn.0045b40c
lea edx, [ebp - 0x16c]
mov eax, ebx
call fcn.00407e80
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x2d0]
mov ecx, 0xff
call fcn.00403c2c
lea edx, [ebp - 0x2d0]
mov eax, 0x484a7b
mov cl, 0x32
call fcn.00402b08
mov eax, dword [ebp - 0x14]
call fcn.00403c50
push eax
mov eax, dword [ebp - 0x14]
call fcn.00403e14
mov ecx, ebx
pop edx
call fcn.0045b40c
lea edx, [ebp - 0x16c]
mov eax, ebx
call fcn.00407e80
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x2d0]
mov ecx, 0xff
call fcn.00403c2c
lea edx, [ebp - 0x2d0]
mov eax, 0x484aae
mov cl, 0x32
call fcn.00402b08
mov eax, 0xff
call fcn.00407e94
mov ebx, eax
push ebx
push 0xff
call sub.kernel32.dll_GetTempPathA
lea edx, [ebp - 0x16c]
mov eax, ebx
call fcn.00407e80
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 8]
mov ecx, 0x4788f8
call fcn.00403c9c
mov eax, dword [0x481494]
mov eax, dword [eax]
mov eax, dword [eax + 0x208]
mov edx, dword [eax + 0xe8]
mov dword [0x484ae1], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xe0]
mov dword [0x484ae5], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xd8]
mov dword [0x484ae9], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xf4]
mov dword [0x484aed], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xe4]
mov dword [0x484af1], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xdc]
mov dword [0x484af5], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xd4]
mov dword [0x484af9], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xc4]
mov dword [0x484afd], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xc0]
mov dword [0x484b01], edx
mov edx, dword [0x481494]
mov edx, dword [eax + 0xbc]
mov dword [0x484b05], edx
mov edx, dword [0x481494]
mov eax, dword [eax + 0xf0]
mov dword [0x484b09], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
call fcn.00436d14
mov byte [0x484b0d], al
mov eax, dword [0x481494]
mov eax, dword [eax]
mov eax, dword [eax + 0x1dc]
mov eax, dword [eax + 0x54]
mov dword [0x484b0e], eax
mov dword [0x484b12], 0x32
mov dword [0x484b16], 0x32
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2ec]
call fcn.00436d14
mov byte [0x484b1a], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00436d14
mov byte [0x484b1b], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
call fcn.00436d14
mov byte [0x484b1c], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2e4]
call fcn.00436d14
mov byte [0x484b1d], al
mov eax, dword [0x484a44]
mov eax, dword [eax + 0x34c]
cmp byte [eax + 0x120], 0
je 0x4782bd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x35c]
call fcn.00462784
fstp qword [0x484b98]
wait
jmp 0x4782cb
xor eax, eax
mov dword [0x484b98], eax
mov dword [0x484b9c], eax
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
call fcn.0041f720
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x2d0]
mov ecx, 0xff
call fcn.00403c2c
lea edx, [ebp - 0x2d0]
mov eax, 0x484ba5
mov cl, 0xa0
call fcn.00402b08
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x364]
call fcn.00436d14
mov byte [0x484c46], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x344]
call fcn.00436d14
test al, al
jne 0x47833c
mov byte [0x484b1e], 0
mov byte [0x484b5b], 0
jmp 0x4783b4
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
call fcn.0041f720
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x2d0]
mov ecx, 0xff
call fcn.00403c2c
lea edx, [ebp - 0x2d0]
mov eax, 0x484b1e
mov cl, 0x3c
call fcn.00402b08
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
call fcn.0041f720
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x2d0]
mov ecx, 0xff
call fcn.00403c2c
lea edx, [ebp - 0x2d0]
mov eax, 0x484b5b
mov cl, 0x3c
call fcn.00402b08
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x320]
call fcn.00436d14
mov byte [0x484ba0], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x32c]
call fcn.00436d14
mov byte [0x484ba1], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x328]
call fcn.00436d14
mov byte [0x484ba2], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
call fcn.00436d14
mov byte [0x484ba3], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x360]
call fcn.00436d14
mov byte [0x484ba4], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2e8]
mov eax, dword [eax + 0x124]
sub eax, 1
jb 0x47842b
je 0x478441
jmp 0x47846d
mov dword [0x484b12], 0xffffffff
mov dword [0x484b16], 0xffffffff
jmp 0x47846d
mov eax, dword [0x484a44]
mov eax, dword [eax + 0x2dc]
mov eax, dword [eax + 0x17c]
mov dword [0x484b12], eax
mov eax, dword [0x484a44]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x17c]
mov dword [0x484b16], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2e4]
call fcn.00436d14
mov byte [0x484b1d], al
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x164]
call fcn.00404ee6
mov edx, 1
lea eax, [ebp - 0x164]
call fcn.00405234
call fcn.0040276c
push 0
mov edx, 0x484a48
mov ecx, 0x1ff
lea eax, [ebp - 0x164]
call fcn.00404fec
call fcn.0040276c
lea eax, [ebp - 0x164]
call fcn.00405050
call fcn.0040276c
mov eax, ebx
call fcn.00407ee0
mov eax, esi
call fcn.00402f00
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x208]
mov dl, 1
call fcn.0041f67c
mov eax, dword [0x481440]
mov eax, dword [eax]
call fcn.0042f2fc
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x1e4]
mov eax, dword [ebp - 4]
mov dword [ebx + 0x22c], eax
mov dword [ebx + 0x228], 0x47a780
mov dword [ebx + 0x1e8], 0x38800
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
call fcn.0041f720
mov edx, dword [ebp - 0x168]
mov eax, ebx
call fcn.0044481c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
call fcn.004459bc
cmp dword [0x484cdc], 0
je 0x47856d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
mov edx, dword [0x484cdc]
call fcn.0044ece4
jmp 0x478595
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x220]
call fcn.0041f720
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
call fcn.0044ece4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
mov edx, dword [ebp - 8]
call fcn.0044ece4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e4]
call fcn.00445b8c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47861a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x208]
xor edx, edx
call fcn.0041f67c
mov eax, dword [0x481440]
mov eax, dword [eax]
call fcn.0042f2fc
mov eax, dword [ebp - 8]
call fcn.004077d8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1f4]
mov eax, dword [eax + 0x118]
xor edx, edx
call fcn.0045f6ac
xor edx, edx
call fcn.0045f638
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1e8]
mov dl, 1
call fcn.0041f6b8
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4786b3
lea eax, [ebp - 0x1c4]
mov edx, 2
call fcn.004039f8
lea eax, [ebp - 0x198]
mov edx, 2
call fcn.004039f8
lea eax, [ebp - 0x16c]
call fcn.004039d4
lea eax, [ebp - 0x168]
call fcn.004039d4
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.004039f8
ret