Function at 0x403f1e
Capabilities:
Create process on windows
Delete registry value
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x68]
mov eax, 0x3858
call fcn.0040aae0
mov eax, dword [0x425250]
xor eax, ebp
mov dword [ebp + 0x64], eax
mov eax, dword [ebp + 0x78]
push ebx
xor ebx, ebx
push esi
mov dword [ebp - 0x37b8], eax
push edi
mov edi, dword [ebp + 0x70]
xor eax, eax
inc eax
push str.Setup_has_been_started
mov dword [ebp - 0x379c], ebx
mov dword [ebp - 0x37b4], ebx
mov dword [ebp - 0x3794], ebx
mov dword [ebp - 0x3798], ebx
mov byte [ebp - 0x375d], 1
mov byte [ebp - 0x3772], bl
mov byte [ebp - 0x3771], bl
mov dword [ebp - 0x37bc], ebx
mov dword [ebp - 0x3768], ebx
mov dword [ebp - 0x37ec], ebx
mov dword [ebp - 0x37d4], ebx
mov dword [ebp - 0x37b0], ebx
mov dword [ebp - 0x37c4], ebx
mov dword [ebp - 0x37d8], ebx
mov dword [ebp - 0x37c0], ebx
mov byte [ebp - 0x375e], bl
mov dword [ebp - 0x37f0], eax
mov dword [ebp - 0x3780], ebx
mov byte [ebp - 0x3769], bl
mov dword [ebp - 0x37ac], ebx
mov byte [ebp - 0x3761], bl
mov byte [ebp - 0x3760], bl
mov dword [ebp - 0x37cc], ebx
mov byte [ebp - 0x3762], bl
mov dword [ebp - 0x3790], eax
mov dword [0x426798], edi
call fcn.00402950
add esp, 4
mov byte [ebp - 0xfe8], bl
mov byte [ebp - 0x11f0], bl
mov byte [ebp - 0x10ec], bl
mov byte [ebp - 0x10], bl
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push 0x1d
push 0x426774
mov esi, 0x3fd
push esi
push dword [0x426798]
call dword [sym.imp.USER32.dll_LoadStringA]
push 0x1d
push 0x426524
push esi
push dword [0x426798]
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x7f00
push ebx
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
mov dword [0x426664], eax
call dword [sym.imp.USER32.dll_SetCursor]
push ebx
call fcn.004029c6
pop ecx
test eax, eax
je 0x4059e3
push ebx
call fcn.004036e6
pop ecx
test eax, eax
je 0x4059e3
call fcn.0040366f
cmp dword [0x4268dc], ebx
jne 0x4040a8
call fcn.004035b8
test eax, eax
je 0x4040a8
push str.Setup_detected_user_has_limited_access
call fcn.00402950
push 0x10
push 0x421
push ebx
call fcn.004033e3
add esp, 0x10
jmp 0x4059e3
cmp dword [ebp + 0x74], ebx
je 0x4040c0
push str.Setup_detected_another_instance_of_itself_already_running
call fcn.00402950
push 0x10
push 0x401
jmp 0x40409a
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
push ebx
push str.WinZip2WClass
call esi
test eax, eax
jne 0x4040de
push ebx
push str.WinZipWClass
call esi
test eax, eax
je 0x404109
push str.Setup_detected_that_WinZip_is_runnning
call fcn.00402950
mov dword [esp], 0x42267c
push 0x45
push 0x401
push ebx
call fcn.004033e3
add esp, 0x10
cmp eax, 2
jne 0x4040c6
jmp 0x4059e3
push 0x12b
lea eax, [ebp - 0x5e0]
push eax
push 0x3fe
push dword [0x426798]
call dword [sym.imp.USER32.dll_LoadStringA]
jmp 0x404152
push str.Setup_detected_that_WinZip_Self_Extractor_Personal_Edition_is_runnning
call fcn.00402950
mov dword [esp], 0x42267c
push 0x45
push 0x402
push ebx
call fcn.004033e3
add esp, 0x10
cmp eax, 2
je 0x4059e3
lea eax, [ebp - 0x5e0]
push eax
push ebx
call esi
test eax, eax
jne 0x404128
mov esi, dword [ebp - 0x37b8]
jmp 0x40416d
cmp al, 0x20
jne 0x404173
inc esi
mov al, byte [esi]
cmp al, bl
jne 0x404168
cmp byte [esi], bl
je 0x404192
push 8
push esi
push str._nocandy
call fcn.0040ace7
add esp, 0xc
test eax, eax
jne 0x404192
mov byte [0x4268b4], 1
cmp byte [0x4268b4], bl
je 0x4041a1
push str.Argument_says_NOT_to_use_OpenCandy
jmp 0x4041a6
push str.Did_not_find__NOCANDY_argument_in_arg_list.
call fcn.00402950
add esp, 4
cmp byte [esi], bl
je 0x4041cd
push 4
push esi
push str._chd
call fcn.0040ace7
add esp, 0xc
test eax, eax
jne 0x4041cd
mov byte [0x4268b5], 1
push str.Determining_source_directory
call fcn.00402950
mov dword [esp], 0x104
mov esi, 0x4267a0
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push esi
call fcn.004059f9
pop ecx
cmp eax, ebx
je 0x4041f9
mov byte [eax + 1], bl
push esi
push str.Source_Directory_is:__s
call fcn.00402950
add esp, 8
call fcn.00403611
mov byte [ebp - 0x375f], al
mov edi, 0x104
push edi
lea eax, [ebp - 0x7e8]
push eax
push 0x43b
push dword [0x426798]
call dword [sym.imp.USER32.dll_LoadStringA]
push edi
mov dword [ebp - 0x3778], eax
lea eax, [ebp - 0x3724]
push eax
push 0x43c
push dword [0x426798]
call dword [sym.imp.USER32.dll_LoadStringA]
cmp dword [ebp - 0x3778], ebx
jbe 0x404280
cmp eax, ebx
jbe 0x404280
cmp dword [ebp - 0x3778], eax
jne 0x404280
lea eax, [ebp - 0x3724]
push eax
lea eax, [ebp - 0x7e8]
push eax
call fcn.0040a8db
neg eax
pop ecx
sbb al, al
pop ecx
inc al
jmp 0x404282
mov al, bl
cmp byte [ebp - 0x375f], bl
je 0x4042c8
cmp al, bl
jne 0x4042c8
push str.osbits64
push 0xf
lea eax, [ebp + 0x2c]
push eax
call fcn.00402889
mov dword [ebp - 0x378c], 0x43c
mov dword [ebp - 0x37e4], str.CD95F661_A5C4_44F5_A6AA_ECDD91C24016
mov dword [ebp - 0x3778], str.WINZIP64.EXE
mov dword [ebp - 0x37b8], str.winzip64.exe.mui
jmp 0x404318
push str.osbits32
push 0xf
lea eax, [ebp + 0x2c]
push eax
call fcn.00402889
cmp byte [ebp - 0x375f], bl
je 0x4042f0
push str.osbits64
push 0xf
lea eax, [ebp + 0x2c]
push eax
call fcn.00402889
mov dword [ebp - 0x378c], 0x43b
mov dword [ebp - 0x37e4], str.CD95F661_A5C4_44F5_A6AA_ECDD91C24015
mov dword [ebp - 0x3778], str.WINZIP32.EXE
mov dword [ebp - 0x37b8], str.winzip32.exe.mui
push ebx
push ebx
lea ebx, [ebp - 0x37e0]
call fcn.004039e1
lea eax, [ebp - 0x6e4]
push edi
push eax
lea ebx, [ebp + 0x5c]
mov dword [ebp - 0x3770], 1
mov byte [ebp - 0x6e4], 0
call fcn.004039e1
xor ebx, ebx
add esp, 0x10
mov edi, 0x12c
cmp dword [ebp + 0x5c], ebx
je 0x40440a
cmp dword [ebp + 0x60], ebx
je 0x40440a
push 0x3f
lea eax, [ebp - 0xb4]
push eax
xor eax, eax
cmp byte [ebp - 0x375f], bl
mov dword [ebp - 0x37a0], ebx
setne al
mov dword [ebp - 0x37a8], ebx
mov dword [ebp - 0x37a4], ebx
add eax, 0x43b
push eax
push dword [0x426798]
call dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0xb4]
push eax
push esi
push str._s_s
lea eax, [ebp - 0x5e0]
push edi
push eax
call fcn.00402923
lea eax, [ebp - 0x37a4]
push eax
lea eax, [ebp - 0x37a8]
push eax
lea eax, [ebp - 0x37a0]
push eax
push dword [ebp - 0x3778]
lea eax, [ebp - 0x5e0]
push eax
call fcn.00402dcf
add esp, 0x28
test eax, eax
jne 0x40440a
mov eax, dword [ebp - 0x37a0]
shl eax, 0x10
add eax, dword [ebp - 0x37a8]
cmp dword [ebp + 0x5c], eax
jne 0x40440a
mov eax, dword [ebp - 0x37a4]
shl eax, 0x10
cmp dword [ebp + 0x60], eax
jne 0x40440a
mov dword [ebp - 0x3770], ebx
cmp byte [0x4268b5], bl
je 0x40442e
cmp dword [ebp - 0x3770], 1
je 0x40443b
push 0x10
push 0x426774
push str.Running_in_Maintenance_mode___will_not_do_Call_Home
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp - 0x3770], 1
jne 0x404555
push 0x3f
lea eax, [ebp - 0xb4]
push eax
push 0x43a
push dword [0x426798]
call dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0xb4]
push eax
push esi
push str._s_s
lea eax, [ebp - 0x5e0]
push edi
push eax
call fcn.00402923
lea eax, [ebp - 0x375c]
push eax
lea eax, [ebp - 0x5e0]
push ebx
push eax
call fcn.004029a5
add esp, 0x20
test eax, eax
je 0x404495
mov byte [ebp - 0x375d], bl
jmp 0x404555
lea eax, [ebp - 0x7ec]
mov byte [ebp - 0x7ec], bl
push 0x105
push eax
lea ebx, [ebp - 0x377c]
call fcn.00403b94
xor ebx, ebx
pop ecx
pop ecx
cmp dword [ebp - 0x377c], ebx
jne 0x4044d2
cmp dword [ebp - 0x3778], ebx
jne 0x4044d2
cmp byte [ebp - 0x7ec], bl
je 0x404553
lea eax, [ebp - 0x37a0]
push eax
lea eax, [ebp - 0x37a8]
push eax
lea eax, [ebp - 0x37a4]
push eax
lea eax, [ebp - 0x5e0]
push str.wzofcsvc.dll
push eax
mov dword [ebp - 0x37a4], ebx
mov dword [ebp - 0x37a8], ebx
mov dword [ebp - 0x37a0], ebx
call fcn.00402dcf
add esp, 0x14
mov dword [ebp - 0x37bc], eax
cmp eax, ebx
jne 0x40454d
mov eax, dword [ebp - 0x37a4]
shl eax, 0x10
add eax, dword [ebp - 0x37a8]
cmp dword [ebp - 0x377c], eax
ja 0x404543
jne 0x404553
mov eax, dword [ebp - 0x37a0]
shl eax, 0x10
cmp dword [ebp - 0x3778], eax
jb 0x404553
xor ebx, ebx
mov dword [ebp - 0x37bc], 0x64
mov byte [ebp - 0x375d], bl
xor ebx, ebx
push 0x7f02
push ebx
call dword [sym.imp.USER32.dll_LoadCursorA]
cmp dword [ebp - 0x3770], 1
mov dword [0x426664], eax
mov dword [ebp - 0x37d0], ebx
mov dword [ebp - 0x3788], ebx
jne 0x404635
push 0x1ff
lea eax, [ebp - 0x1df8]
push eax
push 0x442
push dword [0x426798]
call dword [sym.imp.USER32.dll_LoadStringA]
test eax, eax
jbe 0x4045e7
lea eax, [ebp - 0x1df8]
push 0x31
push eax
call fcn.00409e20
pop ecx
pop ecx
test eax, eax
je 0x4045e7
call fcn.00406edb
test al, al
je 0x4045e7
xor eax, eax
inc eax
push str.__wztb11
mov dword [ebp - 0x3788], eax
mov dword [ebp - 0x37d0], eax
lea eax, [ebp + 0x3c]
push 0x14
push eax
mov dword [ebp - 0x37c8], ebx
call fcn.0040a6dc
add esp, 0xc
jmp 0x404635
lea eax, [ebp - 0x37c8]
push eax
lea eax, [ebp - 0x37d0]
push eax
push 0x14
lea eax, [ebp + 0x3c]
push eax
lea eax, [ebp - 0x3788]
push eax
mov dword [ebp - 0x37c8], ebx
mov byte [ebp + 0x3c], bl
call fcn.004072d7
add esp, 0x14
mov dword [ebp - 0x3790], eax
cmp eax, 2
jne 0x40462a
push 0x40
push 0x3ee
jmp 0x4059da
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x379c], ebx
call fcn.0040366f
cmp dword [ebp - 0x3770], 1
jne 0x4049b4
cmp dword [0x4268cc], ebx
je 0x40465d
cmp dword [0x4268d0], ebx
je 0x4046c7
push 0x200
lea eax, [ebp - 0x1bf8]
push eax
lea eax, [ebp - 0x37f0]
push eax
lea eax, [ebp - 0x37d4]
push eax
lea eax, [ebp - 0x379c]
push eax
mov byte [ebp - 0x1bf8], bl
call fcn.004061f7
mov dword [ebp - 0x3790], eax
lea eax, [ebp - 0x1bf8]
push eax
call fcn.00409f90
add esp, 0x18
test eax, eax
jbe 0x4046ba
lea eax, [ebp - 0x1bf8]
push eax
push 0x400
lea eax, [ebp - 0xfe8]
push eax
call fcn.00402889
cmp dword [ebp - 0x3790], 2
je 0x40461e
cmp dword [ebp - 0x379c], ebx
jne 0x4049b4
cmp dword [0x4268cc], ebx
je 0x4046e7
cmp dword [0x4268d0], ebx
je 0x404810
mov dword [ebp - 0x37e8], ebx
cmp byte [ebp - 0x375d], bl
je 0x404708
push str.__cour
lea eax, [ebp - 0x10]
push 0x3c
push eax
call fcn.0040a6dc
add esp, 0xc
cmp dword [ebp - 0x3788], ebx
je 0x404737
lea eax, [ebp - 0x10]
push eax
call fcn.00409f90
pop ecx
test eax, eax
lea eax, [ebp + 0x3c]
push eax
push 0x3c
lea eax, [ebp - 0x10]
push eax
jbe 0x40472f
call fcn.0040a668
jmp 0x404734
call fcn.0040a6dc
add esp, 0xc
lea eax, [ebp - 0x3769]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x37e8]
push eax
lea eax, [ebp - 0x3794]
push eax
lea eax, [ebp - 0x37b4]
push eax
call fcn.00406904
add esp, 0x14
mov dword [ebp - 0x3790], eax
cmp eax, 2
je 0x40461e
cmp dword [ebp - 0x37b4], ebx
jne 0x4047e3
push dword [ebp - 0x37e8]
lea eax, [ebp - 0x74]
push str.gchr__3A_d
push 0x64
push eax
call fcn.00402923
lea eax, [ebp - 0xfe8]
push eax
call fcn.00409f90
add esp, 0x14
test eax, eax
jbe 0x4047cc
push 0x41c620
push 0x400
lea eax, [ebp - 0xfe8]
push eax
call fcn.004028b9
lea eax, [ebp - 0x74]
push eax
push 0x400
lea eax, [ebp - 0xfe8]
push eax
call fcn.004028b9
jmp 0x4047ed
lea eax, [ebp - 0x74]
push eax
push 0x400
lea eax, [ebp - 0xfe8]
push eax
call fcn.00402889
jmp 0x4047ed
mov dword [ebp - 0x37d8], 1
cmp byte [ebp - 0x375d], bl
je 0x404804
cmp dword [ebp - 0x3794], ebx
je 0x404804
mov byte [ebp - 0x3769], 1
cmp dword [ebp - 0x37d8], ebx
jne 0x4049b4
lea eax, [ebp - 0x3778]
push eax
lea eax, [ebp - 0x37b0]
push eax
lea eax, [ebp - 0x37c4]
push eax
mov dword [ebp - 0x3778], ebx
call fcn.004078e9
add esp, 0xc
cmp eax, 2
je 0x40461e
cmp dword [ebp - 0x37b0], ebx
jne 0x4049b4
cmp dword [ebp - 0x3778], ebx
je 0x4048c7
push dword [ebp - 0x3778]
lea eax, [ebp - 0x74]
push str.kav__3A_d
push 0x64
push eax
call fcn.00402923
lea eax, [ebp - 0xfe8]
push eax
call fcn.00409f90
add esp, 0x14
test eax, eax
jbe 0x4048a6
push 0x41c620
push 0x400
lea eax, [ebp - 0xfe8]
push eax
call fcn.004028b9
lea eax, [ebp - 0x74]
push eax
push 0x400
lea eax, [ebp - 0xfe8]
push eax
call fcn.004028b9
jmp 0x4048bb
lea eax, [ebp - 0x74]
push eax
push 0x400
lea eax, [ebp - 0xfe8]
push eax
call fcn.00402889
cmp dword [ebp - 0x37b0], ebx
jne 0x4049b4
cmp byte [0x4268b4], bl
jne 0x4049b4
push esi
push ebx
call fcn.00407fcd
pop ecx
pop ecx
mov byte [ebp - 0x3761], al
call fcn.004080ac
test al, al
je 0x404919
call fcn.004086a2
cmp eax, 2
jne 0x404914
push 0x40
push 0x3ee
push ebx
call fcn.004033e3
add esp, 0xc
call fcn.0040813b
call fcn.00408670
jmp 0x4059e3
cmp eax, 1
jne 0x404940
call fcn.0040811b
test al, al
je 0x404940
lea eax, [ebp - 0x3760]
push eax
call fcn.004086c6
pop ecx
cmp eax, 2
je 0x4048f5
mov dword [ebp - 0x37ac], 1
jmp 0x4049b4
push str.can_3A
push 0x64
lea eax, [ebp - 0x74]
push eax
call fcn.00402889
call fcn.004080d8
push eax
push 0x64
lea eax, [ebp - 0x74]
push eax
call fcn.004028b9
lea eax, [ebp - 0xfe8]
push eax
call fcn.00409f90
pop ecx
test eax, eax
jbe 0x40499f
push 0x41c620
push 0x400
lea eax, [ebp - 0xfe8]
push eax
call fcn.004028b9
lea eax, [ebp - 0x74]
push eax
push 0x400
lea eax, [ebp - 0xfe8]
push eax
call fcn.004028b9
jmp 0x4049b4
lea eax, [ebp - 0x74]
push eax
push 0x400
lea eax, [ebp - 0xfe8]
push eax
call fcn.00402889
push 0x3f
lea eax, [ebp - 0xb4]
push eax
push dword [ebp - 0x378c]
push dword [0x426798]
call dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0xb4]
push eax
push esi
push str.msiexec__i___s_s_
lea eax, [ebp - 0x5e0]
push edi
push eax
call fcn.00402923
add esp, 0x14
push str._SETUPRUNWZYes
push edi
lea eax, [ebp - 0x5e0]
push eax
call fcn.004028b9
push dword [0x426664]
mov edi, dword [sym.imp.USER32.dll_SetCursor]
call edi
push 0x44
mov dword [ebp - 0x378c], eax
lea eax, [ebp - 0x54]
push ebx
push eax
call fcn.00409ef0
push 0x10
lea eax, [ebp + 0x54]
push ebx
push eax
mov dword [ebp - 0x54], 0x44
call fcn.00409ef0
add esp, 0x18
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp - 0x54]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x5e0]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x404a94
push 0xffffffffffffffff
push dword [ebp + 0x54]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x37cc]
push eax
push dword [ebp + 0x54]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x404a7a
mov byte [ebp - 0x3762], 1
push dword [ebp + 0x58]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp + 0x54]
call esi
push dword [ebp - 0x378c]
call edi
jmp 0x404ad2
push dword [ebp - 0x378c]
call edi
lea eax, [ebp - 0xb4]
push eax
push esi
push 0x30
push 0x428
push ebx
call fcn.004033e3
add esp, 0x14
cmp byte [ebp - 0x3761], bl
je 0x404ad2
call fcn.0040813b
call fcn.00408670
mov byte [ebp - 0x3761], bl
mov byte [ebp - 0x3760], bl
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x3770], ecx
jne 0x404d3b
mov edi, 0x669
mov esi, 0xbc2
cmp byte [ebp - 0x375d], bl
je 0x404b61
cmp byte [ebp - 0x3762], bl
je 0x404b18
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x5c], edi
mov dword [ebp + 0x60], esi
xor eax, eax
mov edx, dword [ebp + eax*4 + 0x58]
cmp edx, dword [ebp - 0x37cc]
je 0x404b2d
inc eax
cmp eax, 3
jb 0x404b06
mov byte [ebp - 0x375d], bl
mov dword [ebp - 0x3770], 2
jmp 0x404d3b
lea eax, [ebp - 0x375f]
push eax
mov byte [ebp - 0x375f], bl
mov dword [ebp - 0x3768], ecx
call fcn.00406e9f
pop ecx
lea eax, [ebp - 0x10]
cmp byte [ebp - 0x375f], bl
je 0x404b88
push str.__cournowait
push 0x3c
push eax
call fcn.0040a6dc
add esp, 0xc
cmp dword [ebp - 0x3788], ebx
je 0x404bb2
lea eax, [ebp - 0x10]
push eax
call fcn.00409f90
pop ecx
test eax, eax
lea eax, [ebp + 0x3c]
push eax
push 0x3c
lea eax, [ebp - 0x10]
push eax
jbe 0x404baa
call fcn.0040a668
jmp 0x404baf
push 0x42267c
push 0x3c
push eax
mov dword [ebp - 0x3768], 2
call fcn.0040a6dc
add esp, 0xc
mov byte [ebp - 0x375d], bl
jmp 0x404b61
call fcn.0040a6dc
add esp, 0xc
cmp dword [ebp - 0x379c], ebx
je 0x404be7
lea eax, [ebp - 0x3780]
push eax
lea eax, [ebp - 0x37ec]
push eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x37f0]
push dword [ebp - 0x37d4]
call fcn.00405d7c
add esp, 0x14
mov byte [ebp - 0x375e], 1
cmp dword [ebp - 0x37c4], ebx
je 0x404c08
lea eax, [ebp - 0x3780]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0040748b
pop ecx
pop ecx
mov byte [ebp - 0x375e], 1
cmp byte [ebp - 0x3761], bl
je 0x404c3f
cmp byte [ebp - 0x3762], bl
je 0x404c35
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x5c], edi
mov dword [ebp + 0x60], esi
xor eax, eax
mov ecx, dword [ebp + eax*4 + 0x58]
cmp ecx, dword [ebp - 0x37cc]
je 0x404c73
inc eax
cmp eax, 3
jb 0x404c23
call fcn.0040813b
call fcn.00408670
cmp dword [ebp - 0x37b4], ebx
je 0x404ca2
cmp dword [ebp - 0x3794], ebx
je 0x404ca2
cmp byte [ebp - 0x3769], bl
je 0x404ca2
cmp byte [ebp - 0x375d], bl
je 0x404c9d
call fcn.0040653e
mov dword [ebp - 0x3780], eax
mov byte [ebp - 0x375e], 1
jmp 0x404ca2
cmp byte [ebp - 0x3760], bl
je 0x404c96
lea eax, [ebp - 0x3780]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00408184
pop ecx
pop ecx
mov byte [ebp - 0x375e], 1
jmp 0x404c3a
call fcn.00408159
jmp 0x404c3a
call fcn.00406596
cmp byte [ebp - 0x375d], bl
je 0x404d08
cmp byte [ebp - 0x375e], bl
jne 0x404d08
cmp dword [ebp - 0x3788], ebx
je 0x404cee
push str._cournowait
lea eax, [ebp - 0x74]
push 0x64
push eax
call fcn.0040a6dc
lea eax, [ebp + 0x3c]
push eax
lea eax, [ebp - 0x74]
push 0x64
push eax
call fcn.0040a668
lea eax, [ebp - 0x3780]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00403e17
add esp, 0x20
jmp 0x404d01
lea eax, [ebp - 0x3780]
push eax
push str._cournowait
call fcn.00403e17
pop ecx
pop ecx
mov byte [ebp - 0x375e], 1
cmp dword [ebp - 0x3788], ebx
je 0x404d3b
cmp byte [ebp - 0x375e], bl
jne 0x404d3b
lea eax, [ebp - 0x378c]
push eax
call fcn.00406ed0
pop ecx
test eax, eax
je 0x404d3b
lea eax, [ebp - 0x37d8]
push eax
lea eax, [ebp + 0x3c]
push eax
call fcn.00403e17
pop ecx
pop ecx
lea eax, [ebp - 0x6e4]
mov byte [ebp - 0x6e4], bl
push 0x104
push eax
lea ebx, [ebp + 0x5c]
call fcn.004039e1
mov eax, dword [ebp + 0x60]
mov edi, dword [ebp + 0x5c]
xor esi, esi
inc esi
pop ecx
pop ecx
cmp dword [ebp - 0x3770], esi
jne 0x405810
xor ebx, ebx
cmp edi, ebx
je 0x405812
cmp eax, ebx
je 0x405812
cmp edi, dword [ebp - 0x37e0]
ja 0x404d98
jne 0x405812
cmp eax, dword [ebp - 0x37dc]
jbe 0x405812
lea eax, [ebp - 0x6e4]
push eax
call fcn.00409f90
pop ecx
test eax, eax
jbe 0x405812
mov dword [ebp - 0x3778], esi
cmp byte [0x4268b5], bl
je 0x404dce
push 0x40
push 0x426774
push str.Starting_Call_Home_determinations.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
mov word [ebp - 0x341c], ax
mov esi, 0x411
push esi
lea eax, [ebp - 0x341c]
push eax
push dword [ebp - 0x37e4]
call fcn.00403737
lea eax, [ebp - 0x341c]
call fcn.004033b4
call fcn.00408a13
push 0x105
lea ecx, [ebp - 0x15fc]
push ecx
movzx eax, ax
push str.SOFTWARENico_Mak_ComputingWinZipLangs
push eax
call fcn.004087d6
lea eax, [ebp - 0x15fc]
push eax
lea eax, [ebp - 0x341c]
push esi
push eax
call fcn.0040a47e
lea eax, [ebp - 0x341c]
call fcn.004033b4
push dword [ebp - 0x37b8]
lea eax, [ebp - 0x341c]
push esi
push eax
call fcn.0040a47e
add esp, 0x34
push 2
push ebx
lea eax, [ebp - 0x341c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov esi, eax
cmp esi, 0x20
jbe 0x404efa
mov edi, 0x200
push edi
lea eax, [ebp - 0x361c]
push eax
push str.ProductID
push esi
call fcn.00402c13
add esp, 0x10
test al, al
je 0x404ed7
push edi
lea eax, [ebp - 0x23f8]
push eax
push 0x41c624
push esi
call fcn.00402c13
add esp, 0x10
test al, al
je 0x404ed7
push edi
lea eax, [ebp - 0x27f8]
push eax
push 0x41c644
push esi
call fcn.00402c13
add esp, 0x10
test al, al
je 0x404ed7
lea eax, [ebp - 0x2bf8]
push eax
push 0x9bdf
push esi
mov eax, edi
call fcn.00402a82
add esp, 0xc
test eax, eax
jne 0x404f20
mov dword [ebp - 0x3778], ebx
cmp byte [0x4268b5], bl
je 0x404f20
push 0x40
push 0x426774
push str.Cant_do_Call_Home_because_failed_to_load_strings_from_MUI_file.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x404f20
mov dword [ebp - 0x3778], ebx
cmp byte [0x4268b5], bl
je 0x404f1b
push 0x40
push 0x426774
push str.Cant_do_Call_Home_because_failed_to_load_MUI_file_with_resources.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edi, 0x200
push esi
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
cmp byte [ebp - 0x375d], bl
je 0x405025
cmp byte [ebp - 0x375e], bl
je 0x405025
cmp dword [ebp - 0x3780], ebx
jne 0x4052c0
lea eax, [ebp - 0x3724]
mov byte [ebp - 0x3724], bl
push 0x104
push eax
lea ebx, [ebp + 0x5c]
mov byte [ebp - 0x3772], 1
call fcn.00403b94
cmp dword [ebp + 0x5c], 0
pop ecx
pop ecx
je 0x405023
cmp dword [ebp + 0x60], 0
je 0x405023
lea eax, [ebp - 0x3724]
push eax
call fcn.00409f90
pop ecx
test eax, eax
jbe 0x405023
lea eax, [ebp - 0x3724]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
cmp ebx, 0x20
jbe 0x405020
lea eax, [ebp - 0x1ff8]
push eax
push 0x9bdd
push ebx
mov eax, edi
call fcn.00402a82
add esp, 0xc
test eax, eax
je 0x405020
lea eax, [ebp - 0x21f8]
push eax
push 0x9bde
push ebx
mov eax, edi
call fcn.00402a82
add esp, 0xc
test eax, eax
je 0x405020
lea eax, [ebp - 0x25f8]
push eax
push 0x9bdf
push ebx
mov eax, edi
call fcn.00402a82
add esp, 0xc
test eax, eax
je 0x405020
lea eax, [ebp - 0x29f8]
push eax
push 0x9be0
push ebx
mov eax, edi
call fcn.00402a82
add esp, 0xc
test eax, eax
je 0x405020
mov byte [ebp - 0x3771], 1
push ebx
call esi
xor ebx, ebx
cmp dword [ebp - 0x3778], ebx
je 0x40588f
push 0x42267c
push edi
lea eax, [ebp - 0x13f0]
push eax
call fcn.00402889
cmp dword [ebp - 0x379c], ebx
je 0x405074
mov eax, str.gglf
cmp dword [ebp - 0x37d4], ebx
jne 0x40505d
mov eax, str.ggle
push dword [ebp - 0x37ec]
push eax
lea eax, [ebp - 0x13f0]
push edi
push eax
call fcn.00402aaa
add esp, 0x10
cmp dword [ebp - 0x37b4], ebx
je 0x405097
push dword [ebp - 0x3794]
lea eax, [ebp - 0x13f0]
push str.gchr
push edi
push eax
call fcn.00402aaa
add esp, 0x10
cmp dword [ebp - 0x37b0], ebx
je 0x4050cc
cmp dword [ebp - 0x37c4], ebx
je 0x4050b1
mov dword [ebp - 0x37c0], 1
push dword [ebp - 0x37c0]
lea eax, [ebp - 0x13f0]
push 0x41ccbc
push edi
push eax
call fcn.00402aaa
add esp, 0x10
cmp dword [ebp - 0x37ac], ebx
je 0x405101
cmp byte [ebp - 0x3760], bl
je 0x4050e6
mov dword [ebp - 0x3798], 1
push dword [ebp - 0x3798]
lea eax, [ebp - 0x13f0]
push 0x41ccb8
push edi
push eax
call fcn.00402aaa
add esp, 0x10
push str.https:__www.winzip.com_instcmplt.cgi
mov esi, 0x400
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.00402889
push str._pid
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0x361c]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
push str.ver
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0x23f8]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
push str.lang
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0x2bf8]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
push str.vid
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0x27f8]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp + 0x2c]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
cmp byte [ebp - 0x3771], bl
je 0x405265
push str.pid2
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0x1ff8]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
push str.ver2
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0x21f8]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
push str.lang2
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0x25f8]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
push str.vid2
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0x29f8]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
push str.3pa
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0x13f0]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
cmp byte [ebp - 0x375d], bl
je 0x4052f5
cmp byte [ebp - 0x3772], bl
jne 0x4052f5
cmp dword [ebp - 0x3780], ebx
lea eax, [ebp - 0x8e4]
jle 0x4052d5
push dword [ebp - 0x3780]
push str.cfr_d
push edi
push eax
call fcn.00402923
add esp, 0x10
jmp 0x4052e1
push 0x30
push 0x43d
push ebx
call fcn.004033e3
add esp, 0xc
jmp 0x405025
push str.cfrunk
push edi
push eax
call fcn.00402889
lea eax, [ebp - 0x8e4]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0xfe8]
push eax
call fcn.00409f90
pop ecx
test eax, eax
jbe 0x40532c
push str.ofr
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0xfe8]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
cmp dword [ebp - 0x37bc], ebx
jle 0x40536d
push str.cofr
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
push 0xa
push 0x14
lea eax, [ebp + 0x50]
push eax
push dword [ebp - 0x37bc]
call fcn.0040abe8
add esp, 0x10
lea eax, [ebp + 0x50]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
mov eax, dword [ebp - 0x3768]
dec eax
je 0x405380
dec eax
jne 0x405392
push str.cask0
jmp 0x405385
push str.cask1
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
push 0x41c618
push edi
lea eax, [ebp - 0x18f4]
push eax
call fcn.00402889
lea eax, [ebp - 0x3770]
push eax
push str.SoftwareNico_Mak_ComputingWinZipWinZip
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x4054aa
lea eax, [ebp - 0x3768]
push eax
lea eax, [ebp - 0x8e4]
push eax
lea eax, [ebp - 0x3778]
push eax
push ebx
push str.DefaultCompressionMethod
push dword [ebp - 0x3770]
mov dword [ebp - 0x3768], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40542c
cmp dword [ebp - 0x3778], 1
jne 0x40542c
lea eax, [ebp - 0x8e4]
push eax
call fcn.00409f90
pop ecx
cmp eax, 1
jne 0x40542c
cmp byte [ebp - 0x8e4], 0x30
jne 0x40542c
lea eax, [ebp - 0x8e4]
push eax
push edi
lea eax, [ebp - 0x18f4]
push eax
call fcn.00402889
lea eax, [ebp - 0x3768]
push eax
lea eax, [ebp - 0x8e4]
push eax
lea eax, [ebp - 0x3778]
push eax
push ebx
push str.ExeBits
push dword [ebp - 0x3770]
mov dword [ebp - 0x3768], edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40549e
cmp dword [ebp - 0x3778], 1
jne 0x40549e
lea eax, [ebp - 0x8e4]
push eax
call fcn.00409f90
pop ecx
cmp eax, 4
jae 0x40549e
push str.wzbits
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0x8e4]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
push dword [ebp - 0x3770]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.bm
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0x18f4]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
lea eax, [ebp - 0x4b4]
cmp dword [ebp - 0x37d0], ebx
je 0x40561a
cmp dword [ebp - 0x3788], ebx
je 0x405613
push str.wzt41
push esi
push eax
call fcn.004028b9
lea eax, [ebp + 0x3c]
push eax
call fcn.00409f90
cmp eax, 2
pop ecx
jle 0x405510
lea eax, [ebp + eax + 0x3a]
push eax
jmp 0x405515
push 0x41cbf8
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
push str.SoftwareNico_Mak_ComputingWinZipWinZip
push 0x3e8
lea eax, [ebp - 0xacc]
push eax
call fcn.00402889
lea eax, [ebp - 0x3768]
push eax
push 0x2001b
push ebx
lea eax, [ebp - 0xacc]
push eax
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40560c
lea eax, [ebp - 0x37ac]
push eax
lea eax, [ebp - 0x3798]
push eax
lea eax, [ebp - 0x37c0]
push eax
push ebx
mov edi, str.TBRC
push edi
push dword [ebp - 0x3768]
mov dword [ebp - 0x37ac], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4055df
cmp dword [ebp - 0x37c0], 4
jne 0x4055df
push 0xa
push 0x14
lea eax, [ebp + 0x50]
push eax
push dword [ebp - 0x3798]
call fcn.0040abe8
add esp, 0x10
lea eax, [ebp + 0x50]
push eax
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
cmp dword [ebp - 0x3798], ebx
je 0x4055f1
push 0x30
push 0x43e
push ebx
call fcn.004033e3
add esp, 0xc
jmp 0x4055f1
push 0x41cbec
push esi
lea eax, [ebp - 0x4b4]
push eax
call fcn.004028b9
push edi
push dword [ebp - 0x3768]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push dword [ebp - 0x3768]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x40564d
push 0x41cbec
jmp 0x405640
push str.wzt4000
jmp 0x405646
push str.wztbofr
push esi
push eax
call fcn.004028b9
push 0xa
push 0x14
lea eax, [ebp + 0x50]
push eax
push dword [ebp - 0x37c8]
call fcn.0040abe8
add esp, 0x10
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp - 0x4b4]
push esi
push eax
call fcn.004028b9
cmp dword [ebp - 0x3794], ebx
je 0x4056ae
push str.Waiting_for_App_Path_to_indicate_Chrome_is_ready_n
mov edi, 0xf0
call fcn.00402950
lea esi, [edi + 0x14]
jmp 0x405683
cmp edi, ebx
jle 0x40569f
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.Another_sleep_waiting_for_Chrome_App_Path_n
call fcn.00402950
dec edi
push esi
lea eax, [ebp - 0x10ec]
push eax
lea eax, [ebp - 0x11f0]
push esi
push eax
call fcn.004030fc
add esp, 0x14
cmp eax, ebx
je 0x405669
push str.Finished_Chrome_App_Path_wait_loop_n
call fcn.00402950
add esp, 4
jmp 0x4056b0
xor eax, eax
cmp eax, ebx
je 0x4057ea
mov edi, 0x41cb4c
push edi
mov esi, 0x504
push esi
lea eax, [ebp - 0xbe8]
push eax
call fcn.00402889
lea eax, [ebp - 0x11f0]
push eax
push esi
lea eax, [ebp - 0xbe8]
push eax
call fcn.004028b9
push 0x41cb48
push esi
lea eax, [ebp - 0xbe8]
push eax
call fcn.004028b9
lea eax, [ebp - 0x4b4]
push eax
push esi
lea eax, [ebp - 0xbe8]
push eax
call fcn.004028b9
push edi
push esi
lea eax, [ebp - 0xbe8]
push eax
call fcn.004028b9
push 0x41cb44
push esi
lea eax, [ebp - 0xbe8]
push eax
call fcn.004028b9
push 0x435
call fcn.00408f47
pop ecx
push eax
push esi
lea eax, [ebp - 0xbe8]
push eax
call fcn.004028b9
push edi
push esi
lea eax, [ebp - 0xbe8]
push eax
call fcn.004028b9
push 0x44
pop esi
push esi
lea eax, [ebp - 0x54]
push ebx
push eax
call fcn.00409ef0
push 0x10
lea eax, [ebp + 0x54]
push ebx
push eax
mov dword [ebp - 0x54], esi
call fcn.00409ef0
push str.Using_Chrome_for_call_home_n
call fcn.00402950
lea eax, [ebp - 0x4b4]
push eax
push str.URL_passed_to_Chrome_is__s_n
call fcn.00402950
add esp, 0x24
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x10ec]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0xbe8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x40588f
push str.Gotta_wait_for_Chrome_Window_n
call fcn.00402950
push 0x28
push 0x1f4
push ebx
push 0x4032cd
call fcn.0040332d
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0x14
push dword [ebp + 0x58]
call esi
push dword [ebp + 0x54]
call esi
jmp 0x40588f
push str.NOT_Using_Chrome_for_call_home_n
call fcn.00402950
add esp, 4
push 1
push ebx
push ebx
lea eax, [ebp - 0x4b4]
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x40588f
xor ebx, ebx
cmp byte [0x4268b5], bl
je 0x405882
cmp edi, ebx
jne 0x405839
cmp dword [ebp + 0x60], ebx
jne 0x405839
push 0x40
mov esi, 0x426774
push esi
push str.Not_doing_Call_Home_because_file_versions_retrieved_from_current_installed_WinZip_were_zero.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x40583e
mov esi, 0x426774
lea eax, [ebp - 0x6e4]
push eax
call fcn.00409f90
pop ecx
test eax, eax
jne 0x40585e
push 0x40
push esi
push str.Not_doing_Call_Home_because_WinZip_filename_retrieval_failed.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp edi, dword [ebp - 0x37e0]
ja 0x405882
jne 0x405873
mov eax, dword [ebp - 0x37dc]
cmp dword [ebp + 0x60], eax
ja 0x405882
push 0x40
push esi
push str.Not_doing_Call_Home_because_WinZip_version_is_not_newer_than_previous.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp - 0x3770], 1
jne 0x4059e3
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.About_to_start_WinZip_n
call fcn.00402950
add esp, 4
mov edi, 0x41cb4c
push edi
mov esi, 0x304
push esi
lea eax, [ebp - 0x19f8]
push eax
call fcn.00402889
lea eax, [ebp - 0x6e4]
push eax
push esi
lea eax, [ebp - 0x19f8]
push eax
call fcn.004028b9
push edi
push esi
lea eax, [ebp - 0x19f8]
push eax
call fcn.004028b9
push 0x44
pop edi
push edi
lea eax, [ebp - 0x54]
push ebx
push eax
call fcn.00409ef0
push 0x10
lea eax, [ebp + 0x54]
push ebx
push eax
mov dword [ebp - 0x54], edi
call fcn.00409ef0
add esp, 0x18
lea eax, [ebp - 0x6e4]
push eax
push esi
lea eax, [ebp - 0x16f4]
push eax
call fcn.00402889
lea eax, [ebp - 0x16f4]
push eax
call fcn.00409f90
pop ecx
lea ecx, [ebp - 0x16f4]
dec ecx
add eax, ecx
jmp 0x405935
cmp byte [eax], 0x5c
je 0x40593f
mov byte [eax], bl
dec eax
lea ecx, [ebp - 0x16f4]
cmp eax, ecx
ja 0x40592d
mov byte [eax], bl
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x16f4]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x19f8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x4059ca
push dword [ebp + 0x58]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp + 0x54]
call esi
push 0x50
mov edi, 0xfa
push edi
lea eax, [ebp - 0x3768]
push eax
push 0x4031ff
mov dword [ebp - 0x3768], ebx
call fcn.0040332d
add esp, 0x10
test eax, eax
je 0x4059ca
mov esi, dword [sym.imp.USER32.dll_SetWindowPos]
push 0x43
push ebx
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x3768]
call esi
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x43
push ebx
push ebx
push ebx
push ebx
push 0xfffffffffffffffe
push dword [ebp - 0x3768]
call esi
cmp dword [ebp - 0x3790], 7
jne 0x4059e3
push 0x30
push 0x42e
push ebx
call fcn.004033e3
add esp, 0xc
mov ecx, dword [ebp + 0x64]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.00409ede
add ebp, 0x68
leave
ret 0x10