Function at 0x40a200
Capabilities:
Copy file
Create process on windows

Disassembly:
enter 0x20d4, 1
push ebx
push ecx
push edx
mov esi, dword [ebp + 0xc]
lea edi, [ebp - 0x108]
call fcn.00401940
mov dword [ebp - 8], esp
mov edi, 0
mov dword [0x42e9e7], edi
mov eax, 0
mov dword [0x42b7e0], eax
mov edi, 0
mov dword [0x417a0b], edi
lea eax, [ebp - 0x5d0]
push eax
push 0x44
call fcn.00406b40
mov dword [ebp - 0x5d0], 0x44
mov dword [ebp - 0x10c], 0x417811
mov byte [0x415046], 0
push 0x41974c
push 0xe
push 0x417468
push 0
call fcn.00402d20
mov al, byte [0x41672b]
push eax
push 0
call fcn.00404cf0
push 9
push 0x417476
push 0
call fcn.00402d20
lea eax, [ebp - 0x108]
push eax
push 0
call fcn.00402790
push 5
push 0x41747f
push 0
call fcn.00402d20
call fcn.00402770
push eax
push 0
call fcn.00403d20
call fcn.00402d00
lea eax, [ebp - 0x6d0]
push eax
lea ebx, [ebp - 0x108]
push ebx
call fcn.00406b60
lea edi, [ebp - 0x108]
lea esi, [ebp - 0x6d0]
call fcn.00401940
push 0x41974c
push 0xe
push 0x417484
push 0
call fcn.00402d20
mov al, byte [0x41672b]
push eax
push 0
call fcn.00404cf0
push 9
push 0x417492
push 0
call fcn.00402d20
lea eax, [ebp - 0x108]
push eax
push 0
call fcn.00402790
call fcn.00402d00
push 0x41749b
lea eax, [ebp - 0x108]
push eax
call fcn.00404e80
cmp eax, 1
jne 0x40a363
push 0xff
lea eax, [ebp - 0x108]
push eax
push 1
push 2
call fcn.00404550
lea ebx, [ebp - 0x108]
push ebx
push 0x41749e
call fcn.0040d460
jmp 0x40c623
lea eax, [ebp - 0x27c]
push eax
lea ebx, [ebp - 0x108]
push ebx
call fcn.00401e60
lea ecx, [ebp - 0x27c]
push ecx
call fcn.00401ee0
mov byte [0x415046], 2
mov eax, 0
mov dword [0x42b7e4], eax
call fcn.00402770
test eax, eax
jne 0x40c5e8
lea eax, [ebp - 0x27c]
push eax
call fcn.00405b40
test al, al
jne 0x40c5d1
lea eax, [ebp - 0x27c]
push eax
push 0xff
push 0x417810
call fcn.00405fc0
call fcn.00405aa0
mov esi, 0x417810
lea edi, [ebp - 0x6d0]
call fcn.00401b30
mov esi, 0x41749f
call fcn.00401af0
mov edi, 0x417810
lea esi, [ebp - 0x6d0]
call fcn.00401940
mov byte [0x42b8f2], 0
mov al, byte [0x41672b]
mov byte [0x42b8f3], al
mov byte [0x42b8f1], 0
mov byte [0x42b8f0], 0
mov eax, 0
mov dword [0x42b7e4], eax
cmp byte [0x417811], 0x3b
je 0x40c5c1
mov eax, dword [ebp + 8]
mov edi, 0
mov dword [eax], edi
push 0x41974c
push 0xe
push 0x4174a1
push 0
call fcn.00402d20
mov al, byte [0x42b8f3]
push eax
push 0
call fcn.00404cf0
push 5
push 0x4174af
push 0
call fcn.00402d20
push 0x417810
push 0
call fcn.00402790
call fcn.00402d00
cmp byte [0x417811], 0x27
jne 0x40c1cb
push 0xff
push 0x417810
push 1
push 1
call fcn.00404550
push 0x4174b4
push 0x417810
call fcn.00404e80
mov dword [ebp - 0x580], eax
test eax, eax
jle 0x40a4c3
push 0xff
push 0x417810
push eax
push 1
call fcn.00404550
lea edi, [ebp - 0x37c]
mov esi, 0x417810
call fcn.00401940
movzx eax, byte [ebp - 0x37c]
test eax, eax
jle 0x40a529
mov dword [ebp - 0x5d4], eax
mov edi, 0
mov dword [ebp - 0x580], edi
inc dword [ebp - 0x580]
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x5d8], eax
mov ebx, dword [ebp - 0x580]
mov al, byte [ebp + ebx - 0x37c]
push eax
call fcn.00406470
mov ecx, dword [ebp - 0x5d8]
mov byte [ebp + ecx - 0x37c], al
dec dword [ebp - 0x5d4]
jne 0x40a4ef
lea eax, [ebp - 0x6d4]
push eax
lea ebx, [ebp - 0x37c]
push ebx
call fcn.004044d0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x6d4]
call fcn.00401940
push 0x4174b6
mov eax, edi
push eax
call fcn.00404e80
test eax, eax
jle 0x40a57d
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x4174b8
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
push 0x41974c
push 0x12
push 0x4174ba
push 0
call fcn.00402d20
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00402d00
lea ebx, [ebp - 0x6d4]
push ebx
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0x6d4]
mov edi, 0x4174cc
call fcn.00408a40
test al, al
je 0x40a81f
call fcn.00402770
mov dword [ebp - 0x580], eax
push 0
call sub.kernel32.dll_SetLastError
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00404550
push 0x41974c
push 0x18
push 0x4174d3
push 0
call fcn.00402d20
mov al, byte [0x42b8f3]
push eax
push 0
call fcn.00404cf0
push 3
push 0x4174eb
push 0
call fcn.00402d20
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00402d00
lea ebx, [ebp - 0x7d4]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00406b60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x7d4]
call fcn.00401940
push 0x41974c
push 0x15
push 0x4174ee
push 0
call fcn.00402d20
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00402d00
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x47c]
push ebx
call fcn.0040d180
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040d180
lea ecx, [ebp - 0x7d4]
push ecx
lea eax, [ebp - 0x47c]
push eax
call fcn.0040d000
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0x7d4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x7d4]
call fcn.00401b30
mov esi, 0x417503
call fcn.00401af0
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0x7d4]
call fcn.00401940
mov eax, esi
push eax
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040d000
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0x7d4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x7d4]
call fcn.00401b30
mov esi, 0x417505
call fcn.00401af0
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0x7d4]
call fcn.00401940
push 0x417507
lea eax, [ebp - 0x47c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40a788
push 0xff
lea eax, [ebp - 0x47c]
push eax
push 0x417509
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
jmp 0x40a752
push 0x41750b
lea eax, [ebp - 0x57c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40a7be
push 0xff
lea eax, [ebp - 0x57c]
push eax
push 0x41750d
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
jmp 0x40a788
lea eax, [ebp - 0x47c]
push eax
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040d2f0
test al, al
jne 0x40a7e2
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x580], eax
jmp 0x40a7ed
call fcn.00402770
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x580]
mov dword [0x417a0b], eax
mov eax, dword [ebp - 0x580]
mov dword [0x42b7e0], eax
push dword [0x42b7e0]
push 0x41750f
call fcn.004031a0
push 0
call sub.kernel32.dll_SetLastError
jmp 0x40c10b
lea eax, [ebp - 0x7d4]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x7d4]
mov edi, 0x417519
call fcn.00408a40
test al, al
je 0x40aa9d
call fcn.00402770
mov dword [ebp - 0x580], eax
push 0
call sub.kernel32.dll_SetLastError
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 5
call fcn.00404550
push 0x41974c
push 0x18
push 0x41751f
push 0
call fcn.00402d20
mov al, byte [0x42b8f3]
push eax
push 0
call fcn.00404cf0
push 3
push 0x417537
push 0
call fcn.00402d20
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00402d00
lea ebx, [ebp - 0x8d4]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00406b60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x8d4]
call fcn.00401940
push 0x41974c
push 0x15
push 0x41753a
push 0
call fcn.00402d20
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00402d00
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x47c]
push ebx
call fcn.0040d180
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040d180
lea ecx, [ebp - 0x8d4]
push ecx
lea eax, [ebp - 0x47c]
push eax
call fcn.0040d000
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0x8d4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x8d4]
call fcn.00401b30
mov esi, 0x41754f
call fcn.00401af0
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0x8d4]
call fcn.00401940
mov eax, esi
push eax
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040d000
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0x8d4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x8d4]
call fcn.00401b30
mov esi, 0x417551
call fcn.00401af0
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0x8d4]
call fcn.00401940
push 0x417553
lea eax, [ebp - 0x47c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40aa04
push 0xff
lea eax, [ebp - 0x47c]
push eax
push 0x417555
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
jmp 0x40a9ce
push 0x417557
lea eax, [ebp - 0x57c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40aa3a
push 0xff
lea eax, [ebp - 0x57c]
push eax
push 0x417559
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
jmp 0x40aa04
push 0
lea eax, [ebp - 0x57b]
push eax
lea ebx, [ebp - 0x47b]
push ebx
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x40aa60
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x580], eax
jmp 0x40aa6b
call fcn.00402770
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x580]
mov dword [0x417a0b], eax
mov eax, dword [ebp - 0x580]
mov dword [0x42b7e0], eax
push dword [0x42b7e0]
push 0x41755b
call fcn.004031a0
push 0
call sub.kernel32.dll_SetLastError
jmp 0x40c10b
lea eax, [ebp - 0x8d4]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0x8d4]
mov edi, 0x417565
call fcn.00408a40
test al, al
je 0x40ad15
call fcn.00402770
mov dword [ebp - 0x580], eax
push 0
call sub.kernel32.dll_SetLastError
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00404550
push 0x41974c
push 0x18
push 0x41756c
push 0
call fcn.00402d20
mov al, byte [0x42b8f3]
push eax
push 0
call fcn.00404cf0
push 3
push 0x417584
push 0
call fcn.00402d20
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00402d00
lea ebx, [ebp - 0x9d4]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00406b60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x9d4]
call fcn.00401940
push 0x41974c
push 0x15
push 0x417587
push 0
call fcn.00402d20
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00402d00
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x47c]
push ebx
call fcn.0040d180
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040d180
lea ecx, [ebp - 0x9d4]
push ecx
lea eax, [ebp - 0x47c]
push eax
call fcn.0040d000
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0x9d4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x9d4]
call fcn.00401b30
mov esi, 0x41759c
call fcn.00401af0
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0x9d4]
call fcn.00401940
mov eax, esi
push eax
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040d000
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0x9d4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x9d4]
call fcn.00401b30
mov esi, 0x41759e
call fcn.00401af0
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0x9d4]
call fcn.00401940
push 0x4175a0
lea eax, [ebp - 0x47c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40ac82
push 0xff
lea eax, [ebp - 0x47c]
push eax
push 0x4175a2
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
jmp 0x40ac4c
push 0x4175a4
lea eax, [ebp - 0x57c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40acb8
push 0xff
lea eax, [ebp - 0x57c]
push eax
push 0x4175a6
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
jmp 0x40ac82
push 1
lea eax, [ebp - 0x57b]
push eax
lea ebx, [ebp - 0x47b]
push ebx
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x40acde
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x580], eax
jmp 0x40ace9
call fcn.00402770
mov dword [ebp - 0x580], eax
mov eax, 0
mov dword [ebp - 0x580], eax
mov dword [0x42b7e0], eax
push dword [0x42b7e0]
push 0x4175a8
call fcn.004031a0
push 0
call sub.kernel32.dll_SetLastError
jmp 0x40c10b
lea eax, [ebp - 0x9d4]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0x9d4]
mov edi, 0x4175b2
call fcn.00408a40
test al, al
je 0x40b0a8
call fcn.00402770
mov dword [ebp - 0x580], eax
push 0
call sub.kernel32.dll_SetLastError
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00404550
push 0x41974c
push 0x18
push 0x4175b9
push 0
call fcn.00402d20
mov al, byte [0x42b8f3]
push eax
push 0
call fcn.00404cf0
push 3
push 0x4175d1
push 0
call fcn.00402d20
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00402d00
lea ebx, [ebp - 0xad4]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00406b60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xad4]
call fcn.00401940
push 0x41974c
push 0x15
push 0x4175d4
push 0
call fcn.00402d20
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00402d00
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x47c]
push ebx
call fcn.0040d180
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040d180
lea ecx, [ebp - 0xad4]
push ecx
lea eax, [ebp - 0x47c]
push eax
call fcn.0040d000
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0xad4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0xad4]
call fcn.00401b30
mov esi, 0x4175e9
call fcn.00401af0
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0xad4]
call fcn.00401940
mov eax, esi
push eax
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040d000
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0xad4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0xad4]
call fcn.00401b30
mov esi, 0x4175eb
call fcn.00401af0
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0xad4]
call fcn.00401940
push 0x4175ed
lea eax, [ebp - 0x47c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40aefa
push 0xff
lea eax, [ebp - 0x47c]
push eax
push 0x4175ef
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
jmp 0x40aec4
push 0x4175f1
lea eax, [ebp - 0x57c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40af30
push 0xff
lea eax, [ebp - 0x57c]
push eax
push 0x4175f3
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
jmp 0x40aefa
push 1
lea eax, [ebp - 0x57b]
push eax
lea ebx, [ebp - 0x47b]
push ebx
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x40b071
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x580], eax
mov edi, 0
mov dword [ebp - 0x584], edi
movzx eax, byte [ebp - 0x57c]
mov ebx, 1
sub ebx, eax
jg 0x40afa9
dec ebx
mov dword [ebp - 0x9d8], ebx
mov dword [ebp - 0x580], eax
jmp 0x40af89
dec dword [ebp - 0x580]
mov eax, dword [ebp - 0x580]
cmp byte [ebp + eax - 0x57c], 0x2e
jne 0x40afa1
mov dword [ebp - 0x584], eax
jmp 0x40afa9
inc dword [ebp - 0x9d8]
jne 0x40af83
push 0x4175f5
push 0xff
lea eax, [ebp - 0x57c]
push eax
push dword [ebp - 0x584]
call fcn.00408300
inc dword [ebp - 0x584]
lea eax, [ebp - 0x57c]
push eax
call fcn.0040cf60
test al, al
je 0x40aff4
mov eax, dword [ebp - 0x584]
cmp byte [ebp + eax - 0x57c], 0x39
jae 0x40aff4
inc byte [ebp + eax - 0x57c]
jmp 0x40afcb
mov eax, dword [ebp - 0x584]
cmp byte [ebp + eax - 0x57c], 0x39
ja 0x40b06f
push 1
lea ebx, [ebp - 0x57b]
push ebx
lea ecx, [ebp - 0x47b]
push ecx
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x40b06f
mov esi, 0x4175f8
lea edi, [ebp - 0xcd8]
call fcn.00401b30
lea esi, [ebp - 0x47c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xbd8]
call fcn.00401b30
mov esi, 0x417607
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xad8]
call fcn.00401b30
lea esi, [ebp - 0x57c]
call fcn.00401af0
mov eax, edi
push eax
call fcn.00403f80
jmp 0x40b07c
call fcn.00402770
mov dword [ebp - 0x580], eax
mov eax, 0
mov dword [ebp - 0x580], eax
mov dword [0x42b7e0], eax
push dword [0x42b7e0]
push 0x41760b
call fcn.004031a0
push 0
call sub.kernel32.dll_SetLastError
jmp 0x40c10b
lea eax, [ebp - 0xad8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 2
call fcn.00401cd0
lea esi, [ebp - 0xad8]
mov edi, 0x417615
call fcn.00408a40
test al, al
je 0x40b172
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 3
call fcn.00404550
lea ebx, [ebp - 0xbd8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00406b60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xbd8]
call fcn.00401940
push 0x417618
lea eax, [ebp - 0x37c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40b146
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x41761a
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
jmp 0x40b110
lea eax, [ebp - 0x37c]
push eax
call fcn.0040cf00
call fcn.00402770
mov dword [ebp - 0x580], eax
mov dword [0x42b7e0], eax
mov eax, dword [ebp - 0x580]
mov dword [0x417a0b], eax
jmp 0x40c10b
lea eax, [ebp - 0xbd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 2
call fcn.00401cd0
lea esi, [ebp - 0xbd8]
mov edi, 0x41761c
call fcn.00408a40
test al, al
je 0x40b248
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 3
call fcn.00404550
lea ebx, [ebp - 0xcd8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00406b60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xcd8]
call fcn.00401940
push 0x41761f
lea eax, [ebp - 0x37c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40b210
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x417621
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
jmp 0x40b1da
lea eax, [ebp - 0x37c]
push eax
call fcn.00404d50
call fcn.00402770
mov dword [ebp - 0x580], eax
mov edi, 0
mov dword [ebp - 0x580], edi
mov dword [0x42b7e0], edi
mov eax, dword [ebp - 0x580]
mov dword [0x417a0b], eax
jmp 0x40c10b
lea eax, [ebp - 0xcd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 2
call fcn.00401cd0
lea esi, [ebp - 0xcd8]
mov edi, 0x417623
call fcn.00408a40
test al, al
je 0x40b312
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 3
call fcn.00404550
lea ebx, [ebp - 0xdd8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00406b60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xdd8]
call fcn.00401940
push 0x417626
lea eax, [ebp - 0x37c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40b2e6
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x417628
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
jmp 0x40b2b0
lea eax, [ebp - 0x37c]
push eax
call fcn.0040cea0
call fcn.00402770
mov dword [ebp - 0x580], eax
mov dword [0x42b7e0], eax
mov eax, dword [ebp - 0x580]
mov dword [0x417a0b], eax
jmp 0x40c10b
lea eax, [ebp - 0xdd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 3
call fcn.00401cd0
lea esi, [ebp - 0xdd8]
mov edi, 0x41762a
call fcn.00408a40
test al, al
je 0x40b3dc
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 4
call fcn.00404550
lea ebx, [ebp - 0xed8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00406b60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xed8]
call fcn.00401940
push 0x41762e
lea eax, [ebp - 0x37c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40b3b0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x417630
push eax
call fcn.00404e80
push eax
push 1
call fcn.00404550
jmp 0x40b37a
lea eax, [ebp - 0x37c]
push eax
call fcn.0040ce40
call fcn.00402770
mov dword [ebp - 0x580], eax
mov dword [0x42b7e0], eax
mov eax, dword [ebp - 0x580]
mov dword [0x417a0b], eax
jmp 0x40c10b
lea eax, [ebp - 0xed8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0xed8]
mov edi, 0x417632
call fcn.00408a40
test al, al
je 0x40b464
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 7
call fcn.00404550
lea ebx, [ebp - 0xfd8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00406b60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xfd8]
call fcn.00401940
mov eax, edi
push eax
call fcn.00403f80
push 0
call sub.kernel32.dll_SetLastError
call fcn.00402770
mov dword [ebp - 0x580], eax
jmp 0x40a3a0
lea eax, [ebp - 0xfd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 7
call fcn.00401cd0
lea esi, [ebp - 0xfd8]
mov edi, 0x417639
call fcn.00408a40
test al, al
je 0x40b4ff
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 8
call fcn.00404550
lea ebx, [ebp - 0x10d8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00406b60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x10d8]
call fcn.00401940
mov eax, edi
push eax
call fcn.00406490
test al, al
je 0x40b4e3
jmp 0x40c623
push 0
call sub.kernel32.dll_SetLastError
call fcn.00402770
mov dword [ebp - 0x580], eax
jmp 0x40a3a0
lea eax, [ebp - 0x10d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x10d8]
mov edi, 0x417641
call fcn.00408a40
test al, al
je 0x40b587
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00404550
lea ebx, [ebp - 0x11d8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00406b60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x11d8]
call fcn.00401940
mov eax, edi
push eax
call fcn.0040cd20
push 0
call sub.kernel32.dll_SetLastError
call fcn.00402770
mov dword [ebp - 0x580], eax
jmp 0x40a3a0
lea eax, [ebp - 0x11d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 7
call fcn.00401cd0
lea esi, [ebp - 0x11d8]
mov edi, 0x417647
call fcn.00408a40
test al, al
je 0x40b5e8
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 8
call fcn.00404550
call fcn.0040cce0
push 0
call sub.kernel32.dll_SetLastError
call fcn.00402770
mov dword [ebp - 0x580], eax
jmp 0x40a3a0
lea eax, [ebp - 0x12d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x12d8]
mov edi, 0x41764f
call fcn.00408a40
test al, al
je 0x40b688
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00404550
movzx ebx, byte [ebp - 0x37c]
cmp byte [ebp + ebx - 0x37c], 0
jne 0x40b650
push 0xff
lea eax, [ebp - 0x37c]
push eax
movzx ecx, bl
push ecx
push 1
call fcn.00404550
lea eax, [ebp - 0x37c]
push eax
lea ebx, [ebp - 0x580]
push ebx
call fcn.00409700
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x580], 0
jne 0x40b678
push eax
call fcn.0040cc80
mov eax, dword [ebp - 0x580]
mov dword [0x42b7e0], eax
jmp 0x40c10b
lea eax, [ebp - 0x13d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 4
call fcn.00401cd0
lea esi, [ebp - 0x13d8]
mov edi, 0x417655
call fcn.00408a40
test al, al
je 0x40b76b
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x41765a
push eax
call fcn.00404e80
push eax
call fcn.00404550
push 0x41765c
lea eax, [ebp - 0x37c]
push eax
call fcn.00404e80
dec eax
mov dword [ebp - 0x588], eax
test eax, eax
jg 0x40b700
movzx ebx, byte [ebp - 0x37c]
mov dword [ebp - 0x588], ebx
lea eax, [ebp - 0x14d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push dword [ebp - 0x588]
call fcn.00401cd0
lea ecx, [ebp - 0x14d8]
push ecx
lea eax, [ebp - 0x580]
push eax
call fcn.00409700
mov dword [ebp - 0x58c], eax
lea edi, [ebp - 0x37c]
mov esi, 0x41765e
call fcn.00401940
cmp dword [ebp - 0x580], 0
jne 0x40b75b
push dword [ebp - 0x58c]
mov eax, edi
push eax
call fcn.0040cbc0
mov eax, dword [ebp - 0x580]
mov dword [0x42b7e0], eax
jmp 0x40c10b
lea eax, [ebp - 0x14d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 4
call fcn.00401cd0
lea esi, [ebp - 0x14d8]
mov edi, 0x41765f
call fcn.00408a40
test al, al
je 0x40b7ac
lea eax, [ebp - 0x27c]
push eax
call fcn.00401d90
jmp 0x40c623
lea eax, [ebp - 0x15d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x15d8]
mov edi, 0x417664
call fcn.00408a40
test al, al
je 0x40b85d
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x41766a
push eax
call fcn.00404e80
push eax
call fcn.00404550
lea eax, [ebp - 0x16d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
call fcn.00406b60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x16d8]
call fcn.00401940
mov eax, edi
push eax
push dword [ebp + 8]
call fcn.0040a200
mov ebx, 0
mov dword [ebp - 0x580], ebx
mov edi, 0x417810
mov esi, 0x41766c
call fcn.00401940
lea edi, [ebp - 0x37c]
mov esi, 0x41766d
call fcn.00401940
jmp 0x40a3a0
lea eax, [ebp - 0x16d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0xc
call fcn.00401cd0
lea esi, [ebp - 0x16d8]
mov edi, 0x41766e
call fcn.00408a40
test al, al
je 0x40b9bd
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x41767b
push eax
call fcn.00404e80
push eax
call fcn.00404550
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x41767d
push eax
call fcn.00404e80
push eax
call fcn.00404550
lea eax, [ebp - 0x17d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
call fcn.004044d0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x17d8]
call fcn.00401940
push 0x41767f
mov eax, edi
push eax
call fcn.00404e80
dec eax
mov dword [ebp - 0x588], eax
test eax, eax
jg 0x40b914
movzx ebx, byte [ebp - 0x37c]
mov dword [ebp - 0x588], ebx
lea eax, [ebp - 0x17d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push dword [ebp - 0x588]
call fcn.00401cd0
lea ecx, [ebp - 0x17d8]
push ecx
lea eax, [ebp - 0x580]
push eax
call fcn.00409700
mov dword [0x42e9eb], eax
push 0xff
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0x417681
push ebx
call fcn.00404e80
push eax
call fcn.00404550
cmp dword [ebp - 0x580], 0
jne 0x40b9a8
mov eax, dword [0x42b7e0]
cmp dword [0x42e9eb], eax
jg 0x40b9a8
mov edi, 0x417810
lea esi, [ebp - 0x37c]
call fcn.00401940
mov edi, esi
mov esi, 0x417683
call fcn.00401940
mov ebx, 0
mov dword [ebp - 0x580], ebx
jmp 0x40a422
lea edi, [ebp - 0x37c]
mov esi, 0x417684
call fcn.00401940
jmp 0x40c10b
lea eax, [ebp - 0x17d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x17d8]
mov edi, 0x417685
call fcn.00408a40
test al, al
je 0x40bb74
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 5
call fcn.00404550
lea ebx, [ebp - 0x19d8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004044d0
lea esi, [ebp - 0x19d8]
lea edi, [ebp - 0x18d8]
call fcn.00401b30
mov esi, 0x41768b
call fcn.00401af0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x18d8]
call fcn.00401940
cmp byte [ebp - 0x37b], 0x2d
jne 0x40ba6a
lea eax, [ebp - 0x27c]
push eax
call fcn.00401ee0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 1
call fcn.00404550
push 0x41974c
push 0x17
push 0x41768d
push 0
call fcn.00402d20
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
push 2
push 0x4176a4
push 0
call fcn.00402d20
call fcn.00402d00
lea eax, [ebp - 0x27c]
push eax
call fcn.00405b40
test al, al
jne 0x40bb5a
lea eax, [ebp - 0x27c]
push eax
push 0xff
push 0x417810
call fcn.00405fc0
call fcn.00405aa0
lea ebx, [ebp - 0x37c]
push ebx
push 0x417810
call fcn.00404e80
test eax, eax
jle 0x40bb55
push 0xff
push 0x417810
push 1
lea eax, [ebp - 0x37c]
push eax
push 0x417810
call fcn.00404e80
push eax
call fcn.00404550
push 0xff
push 0x417810
push 1
push 0x4176a6
push 0x417810
call fcn.00404e80
push eax
call fcn.00404550
mov esi, 0x417810
lea edi, [ebp - 0x18d8]
call fcn.00401b30
mov esi, 0x4176a8
call fcn.00401af0
mov edi, 0x417810
lea esi, [ebp - 0x18d8]
call fcn.00401940
jmp 0x40a422
jmp 0x40ba9e
mov dword [ebp - 0x580], 0x3e7
mov eax, dword [ebp - 0x580]
mov dword [0x42b7e0], eax
jmp 0x40c10b
lea eax, [ebp - 0x18d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x18d8]
mov edi, 0x4176aa
call fcn.00408a40
test al, al
je 0x40bbd3
mov byte [0x417467], 1
lea eax, [ebp - 0x27c]
push eax
call fcn.00401d90
call fcn.00402770
test eax, eax
je 0x40bbbb
push 0
call sub.user32.dll_PostQuitMessage
push 0
call fcn.00403170
jmp 0x40c623
lea eax, [ebp - 0x19d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0x19d8]
mov edi, 0x4176b0
call fcn.00408a40
test al, al
je 0x40bcf1
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00404550
lea ebx, [ebp - 0x1ad8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004044d0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x1ad8]
call fcn.00401940
cmp byte [ebp - 0x37b], 0x22
jne 0x40bcc0
push 0xff
mov eax, edi
push eax
push 1
push 1
call fcn.00404550
push 0x4176b7
lea eax, [ebp - 0x37c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40bc8c
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x4176b9
push eax
call fcn.00404e80
push eax
push 0xff
call fcn.00404550
lea esi, [ebp - 0x37c]
mov edi, 0x4176bb
call fcn.00408a00
test al, al
je 0x40bcc0
lea eax, [ebp - 0x1ad8]
push eax
mov ebx, esi
push ebx
call fcn.00408390
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x1ad8]
call fcn.00401940
mov edi, 0x417810
lea esi, [ebp - 0x37c]
call fcn.00401940
mov edi, esi
mov esi, 0x4176bc
call fcn.00401940
mov eax, 0
mov dword [ebp - 0x580], eax
jmp 0x40a422
lea eax, [ebp - 0x1ad8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0xa
call fcn.00401cd0
lea esi, [ebp - 0x1ad8]
mov edi, 0x4176bd
call fcn.00408a40
test al, al
je 0x40bdd1
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x4176c8
push eax
call fcn.00404e80
push eax
call fcn.00404550
lea eax, [ebp - 0x1bd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
call fcn.004044d0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x1bd8]
call fcn.00401940
push 0x4176ca
mov eax, edi
push eax
call fcn.00404e80
dec eax
mov dword [ebp - 0x588], eax
test eax, eax
jg 0x40bd89
movzx ebx, byte [ebp - 0x37c]
mov dword [ebp - 0x588], ebx
lea eax, [ebp - 0x1bd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push dword [ebp - 0x588]
call fcn.00401cd0
lea ecx, [ebp - 0x1bd8]
push ecx
lea eax, [ebp - 0x580]
push eax
call fcn.00409700
mov dword [0x42e9e7], eax
lea edi, [ebp - 0x37c]
mov esi, 0x4176cc
call fcn.00401940
jmp 0x40c10b
lea eax, [ebp - 0x1bd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 9
call fcn.00401cd0
lea esi, [ebp - 0x1bd8]
mov edi, 0x4176cd
call fcn.00408a40
test al, al
je 0x40bf5b
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x4176d7
push eax
call fcn.00404e80
push eax
call fcn.00404550
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x4176d9
push eax
call fcn.00404e80
push eax
call fcn.00404550
push 0x4176db
lea eax, [ebp - 0x37c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40be88
lea eax, [ebp - 0x1cd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0x4176dd
push ebx
call fcn.00404e80
dec eax
push eax
call fcn.00401cd0
mov edi, 0x42b8f4
lea esi, [ebp - 0x1cd8]
call fcn.00401940
jmp 0x40be98
mov edi, 0x42b8f4
lea esi, [ebp - 0x37c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
movzx ebx, byte [0x42b8f4]
inc ebx
push ebx
call fcn.00404550
lea ebx, [ebp - 0x1cd8]
push ebx
push 0x42b8f4
call fcn.00406b60
mov edi, 0x42b8f4
lea esi, [ebp - 0x1cd8]
call fcn.00401940
mov eax, esi
push eax
push edi
call fcn.0040c660
mov edi, 0x42b8f4
lea esi, [ebp - 0x1cd8]
call fcn.00401940
push edi
call fcn.0040cad0
test al, al
je 0x40bf27
mov edi, 0x417810
lea esi, [ebp - 0x37c]
call fcn.00401940
mov edi, esi
mov esi, 0x4176df
call fcn.00401940
mov eax, 0
mov dword [ebp - 0x580], eax
jmp 0x40a422
mov eax, 0
mov dword [ebp - 0x580], eax
mov edi, 0x417810
mov esi, 0x4176e0
call fcn.00401940
lea edi, [ebp - 0x37c]
mov esi, 0x4176e1
call fcn.00401940
jmp 0x40a3a0
lea eax, [ebp - 0x1cd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0xd
call fcn.00401cd0
lea esi, [ebp - 0x1cd8]
mov edi, 0x4176e2
call fcn.00408a40
test al, al
je 0x40c101
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x4176f0
push eax
call fcn.00404e80
push eax
call fcn.00404550
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x4176f2
push eax
call fcn.00404e80
push eax
call fcn.00404550
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x4176f4
push eax
call fcn.00404e80
push eax
call fcn.00404550
push 0x4176f6
lea eax, [ebp - 0x37c]
push eax
call fcn.00404e80
test eax, eax
jle 0x40c031
lea eax, [ebp - 0x1dd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0x4176f8
push ebx
call fcn.00404e80
dec eax
push eax
call fcn.00401cd0
mov edi, 0x42b8f4
lea esi, [ebp - 0x1dd8]
call fcn.00401940
jmp 0x40c041
mov edi, 0x42b8f4
lea esi, [ebp - 0x37c]
call fcn.00401940
lea eax, [ebp - 0x1dd8]
push eax
push 0x42b8f4
call fcn.00406b60
mov edi, 0x42b8f4
lea esi, [ebp - 0x1dd8]
call fcn.00401940
mov eax, esi
push eax
push edi
call fcn.0040c660
mov edi, 0x42b8f4
lea esi, [ebp - 0x1dd8]
call fcn.00401940
push edi
call fcn.0040cad0
test al, al
jne 0x40c0d0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
movzx ebx, byte [0x42b8f4]
inc ebx
push ebx
call fcn.00404550
mov edi, 0x417810
lea esi, [ebp - 0x37c]
call fcn.00401940
mov edi, esi
mov esi, 0x4176fa
call fcn.00401940
mov eax, 0
mov dword [ebp - 0x580], eax
jmp 0x40a422
mov eax, 0
mov dword [ebp - 0x580], eax
mov edi, 0x417810
mov esi, 0x4176fb
call fcn.00401940
lea edi, [ebp - 0x37c]
mov esi, 0x4176fc
call fcn.00401940
jmp 0x40a3a0
mov dword [ebp - 0x580], 0x3e7
cmp dword [ebp - 0x580], 0
je 0x40c1c6
push 0xff
lea eax, [ebp - 0x37c]
mov byte [eax], 0
push eax
push dword [ebp - 0x580]
push 0
call fcn.00403010
add esp, 8
mov esi, 0x4176fd
lea edi, [ebp - 0x20d8]
call fcn.00401b30
lea esi, [ebp - 0x37c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1fd8]
call fcn.00401b30
mov esi, 0x41770a
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1ed8]
call fcn.00401b30
mov esi, 0x41770c
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1dd8]
call fcn.00401b30
mov esi, 0x41770e
call fcn.00401af0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x1dd8]
call fcn.00401940
cmp dword [0x42e9e7], 0
jne 0x40c1c6
push 0
push 0x417811
lea eax, [ebp - 0x37b]
push eax
push 0
call sub.user32.dll_MessageBoxA
jmp 0x40a3a0
mov esi, 0x417810
lea edi, [ebp - 0x1dd8]
call fcn.00401b30
mov esi, 0x417710
call fcn.00401af0
mov edi, 0x417810
lea esi, [ebp - 0x1dd8]
call fcn.00401940
mov eax, esi
push eax
push edi
call fcn.00406b60
mov edi, 0x417810
lea esi, [ebp - 0x1dd8]
call fcn.00401940
push 0x417712
push edi
call fcn.00404e80
cmp eax, 1
je 0x40c232
push 0x417717
push 0x417810
call fcn.00404e80
cmp eax, 1
jne 0x40c237
jmp 0x40a3a0
mov dword [ebp - 0x580], 1
movzx eax, byte [0x417810]
test eax, eax
jl 0x40c252
cmp dword [ebp - 0x580], eax
jg 0x40c280
mov eax, dword [ebp - 0x580]
cmp byte [eax + 0x417810], 0
jne 0x40c278
push 0xff
push 0x417810
push eax
push 1
call fcn.00404550
jmp 0x40c27e
inc dword [ebp - 0x580]
jmp 0x40c241
lea eax, [ebp - 0x1dd8]
push eax
push 0x417810
call fcn.004044d0
lea esi, [ebp - 0x1dd8]
mov edi, 0x41771c
call fcn.00408a40
test al, al
je 0x40c2aa
jmp 0x40a3a0
push 0x41771d
push 0x417810
call fcn.00404e80
cmp eax, 1
jne 0x40c2f7
push 0xff
push 0x417810
call fcn.0040c6f0
lea eax, [ebp - 0x1ed8]
push eax
push 0x417810
call fcn.004044d0
lea esi, [ebp - 0x1ed8]
mov edi, 0x41772a
call fcn.00408a40
test al, al
je 0x40c2f7
jmp 0x40a3a0
mov esi, 0x417810
lea edi, [ebp - 0x1fd8]
call fcn.00401b30
mov esi, 0x41772b
call fcn.00401af0
mov edi, 0x417810
lea esi, [ebp - 0x1fd8]
call fcn.00401940
push 0x41974c
push 0x10
push 0x41772d
push 0
call fcn.00402d20
push 0x417810
push 0
call fcn.00402790
push 1
push 0x41773d
push 0
call fcn.00402d20
mov al, byte [0x42b8f1]
push eax
push 0
call fcn.00404cf0
call fcn.00402d00
push 0x41974c
push 0x19
push 0x41773e
push 0
call fcn.00402d20
lea eax, [ebp - 0x1ee8]
push eax
push dword [0x42b7e4]
call fcn.00401b50
lea ebx, [ebp - 0x1ee8]
push ebx
push 0
call fcn.00402790
push 9
push 0x417757
push 0
call fcn.00402d20
push 0x417810
push 0
call fcn.00402790
call fcn.00402d00
lea eax, [ebp - 0x1fd8]
push eax
push 0x417810
call fcn.0040c660
mov edi, 0x417810
lea esi, [ebp - 0x1fd8]
call fcn.00401940
push dword [ebp + 8]
lea eax, [ebp - 0x5d0]
push eax
push 0
push 0
push dword [0x42b7e4]
push 0
push 0
push 0
push 0x417811
push 0
call sub.kernel32.dll_CreateProcessA
test al, al
jne 0x40c4d3
cmp dword [0x42e9e7], 1
jg 0x40c4d3
push 0x41974c
push 0x21
push 0x417760
push 0
call fcn.00402d20
lea eax, [ebp - 0x1ee8]
push eax
push dword [0x42e9e7]
call fcn.00401b50
lea ebx, [ebp - 0x1ee8]
push ebx
push 0
call fcn.00402790
push 9
push 0x417781
push 0
call fcn.00402d20
push 0x417810
push 0
call fcn.00402790
push 1
push 0x41778a
push 0
call fcn.00402d20
call fcn.00402d00
push 0
push 0x41778b
push dword [ebp - 0x10c]
push 0
call sub.user32.dll_MessageBoxA
lea esi, [ebp - 0x108]
lea edi, [ebp - 0x1fd8]
call fcn.00401b30
mov esi, 0x4177a0
call fcn.00401af0
lea edi, [ebp - 0x108]
lea esi, [ebp - 0x1fd8]
call fcn.00401940
push 0
lea eax, [ebp - 0x107]
push eax
push 0x417811
push 0
call sub.user32.dll_MessageBoxA
cmp dword [0x42e9e7], 0
jne 0x40c4d3
push 0
call fcn.00403170
push 0x41974c
push 0x17
push 0x4177a2
push 0
call fcn.00402d20
lea eax, [ebp - 0x1ee8]
push eax
mov edi, dword [ebp + 8]
push dword [edi]
call fcn.00401b50
lea ebx, [ebp - 0x1ee8]
push ebx
push 0
call fcn.00402790
push 1
push 0x4177b9
push 0
call fcn.00402d20
push 0x417810
push 0
call fcn.00402790
call fcn.00402d00
mov al, byte [0x42b8f2]
test al, al
je 0x40c5c1
push 0x41974c
push 0x1a
push 0x4177ba
push 0
call fcn.00402d20
lea ebx, [ebp - 0x1ee8]
push ebx
mov eax, dword [ebp + 8]
push dword [eax]
call fcn.00401b50
lea ecx, [ebp - 0x1ee8]
push ecx
push 0
call fcn.00402790
push 1
push 0x4177d4
push 0
call fcn.00402d20
push 0x417810
push 0
call fcn.00402790
call fcn.00402d00
push dword [ebp + 8]
call fcn.0040c630
push 0x41974c
push 0x1e
push 0x4177d5
push 0
call fcn.00402d20
lea eax, [ebp - 0x1ee8]
push eax
mov edi, dword [ebp + 8]
push dword [edi]
call fcn.00401b50
lea ebx, [ebp - 0x1ee8]
push ebx
push 0
call fcn.00402790
call fcn.00402d00
mov al, byte [0x417467]
test al, al
je 0x40c5cc
jmp 0x40c623
jmp 0x40a3a0
lea eax, [ebp - 0x27c]
push eax
call fcn.00401d90
call fcn.00402770
test eax, eax
je 0x40c5e6
jmp 0x40c60b
mov esi, 0x4177f3
lea edi, [ebp - 0x1fd8]
call fcn.00401b30
lea esi, [ebp - 0x108]
call fcn.00401af0
mov eax, edi
push eax
call fcn.00403f80
push 0x41974c
push 0xd
push 0x417803
push 0
call fcn.00402d20
call fcn.00402d00
pop edx
pop ecx
pop ebx
leave
ret 8