Function at 0x406d20
Capabilities:
Copy file
Create process on windows

Disassembly:
enter 0x1dd8, 0
push ebx
push ecx
push edx
mov esi, dword [ebp + 0xc]
lea edi, [ebp - 0x108]
call fcn.00401940
mov eax, 0
mov dword [0x41783f], eax
mov edi, 0
mov dword [0x414f5c], edi
mov eax, 0
mov dword [0x4121f3], eax
lea ebx, [ebp - 0x5d0]
push ebx
push 0x44
call fcn.00404ac0
mov dword [ebp - 0x5d0], 0x44
mov dword [ebp - 0x10c], 0x41208f
mov byte [0x410046], 0
lea eax, [ebp - 0x6d0]
push eax
lea ebx, [ebp - 0x108]
push ebx
call fcn.00404ae0
lea edi, [ebp - 0x108]
lea esi, [ebp - 0x6d0]
call fcn.00401940
push 0x411f36
mov eax, edi
push eax
call fcn.00403000
cmp eax, 1
jne 0x406dde
push 0xff
lea eax, [ebp - 0x108]
push eax
push 1
push 2
call fcn.004045d0
lea ebx, [ebp - 0x108]
push ebx
push 0x411f39
call fcn.00408dd0
jmp 0x408492
lea eax, [ebp - 0x27c]
push eax
lea ebx, [ebp - 0x108]
push ebx
call fcn.00401e60
lea ecx, [ebp - 0x27c]
push ecx
call fcn.00401ee0
mov byte [0x410046], 2
mov eax, 0
mov dword [0x414f60], eax
call fcn.00402760
test eax, eax
jne 0x40846f
lea eax, [ebp - 0x27c]
push eax
call fcn.00403d40
test al, al
jne 0x408458
lea eax, [ebp - 0x27c]
push eax
push 0xff
push 0x41208e
call fcn.00404150
call fcn.00403ca0
mov esi, 0x41208e
lea edi, [ebp - 0x6d0]
call fcn.00401b30
mov esi, 0x411f3a
call fcn.00401af0
mov edi, 0x41208e
lea esi, [ebp - 0x6d0]
call fcn.00401940
mov byte [0x41506e], 0
mov al, byte [0x411380]
mov byte [0x41506f], al
mov byte [0x41506d], 0
mov byte [0x41506c], 0
mov eax, 0
mov dword [0x414f60], eax
cmp byte [0x41208f], 0x3b
je 0x408448
mov eax, dword [ebp + 8]
mov edi, 0
mov dword [eax], edi
cmp byte [0x41208f], 0x27
jne 0x408249
push 0xff
push 0x41208e
push 1
push 1
call fcn.004045d0
push 0x411f3c
push 0x41208e
call fcn.00403000
mov dword [ebp - 0x580], eax
test eax, eax
jle 0x406eff
push 0xff
push 0x41208e
push eax
push 1
call fcn.004045d0
lea edi, [ebp - 0x37c]
mov esi, 0x41208e
call fcn.00401940
movzx eax, byte [ebp - 0x37c]
test eax, eax
jle 0x406f65
mov dword [ebp - 0x5d4], eax
mov edi, 0
mov dword [ebp - 0x580], edi
inc dword [ebp - 0x580]
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x5d8], eax
mov ebx, dword [ebp - 0x580]
mov al, byte [ebp + ebx - 0x37c]
push eax
call fcn.004047a0
mov ecx, dword [ebp - 0x5d8]
mov byte [ebp + ecx - 0x37c], al
dec dword [ebp - 0x5d4]
jne 0x406f2b
lea eax, [ebp - 0x6d4]
push eax
lea ebx, [ebp - 0x37c]
push ebx
call fcn.00404620
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x6d4]
call fcn.00401940
push 0x411f3e
mov eax, edi
push eax
call fcn.00403000
test eax, eax
jle 0x406fb9
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x411f40
push eax
call fcn.00403000
push eax
push 1
call fcn.004045d0
lea eax, [ebp - 0x6d4]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x6d4]
mov edi, 0x411f42
call fcn.004044e0
test al, al
je 0x4070cc
call fcn.00402760
mov dword [ebp - 0x580], eax
push 0
call sub.kernel32.dll_SetLastError
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 5
call fcn.004045d0
lea ebx, [ebp - 0x7d4]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404ae0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x7d4]
call fcn.00401940
push 0xff
mov eax, edi
push eax
push 0xff
lea ebx, [ebp - 0x47c]
push ebx
call fcn.00408ca0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x57c]
push ebx
call fcn.00408ca0
push 0
lea eax, [ebp - 0x57b]
push eax
lea ebx, [ebp - 0x47b]
push ebx
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x40708f
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x580], eax
jmp 0x40709a
call fcn.00402760
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x580]
mov dword [0x4121f3], eax
mov eax, dword [ebp - 0x580]
mov dword [0x414f5c], eax
push dword [0x414f5c]
push 0x411f48
call fcn.00406ac0
push 0
call sub.kernel32.dll_SetLastError
jmp 0x408189
lea eax, [ebp - 0x7d4]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0x7d4]
mov edi, 0x411f52
call fcn.004044e0
test al, al
je 0x4071d9
call fcn.00402760
mov dword [ebp - 0x580], eax
push 0
call sub.kernel32.dll_SetLastError
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 5
call fcn.004045d0
lea ebx, [ebp - 0x8d4]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404ae0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x8d4]
call fcn.00401940
push 0xff
mov eax, edi
push eax
push 0xff
lea ebx, [ebp - 0x47c]
push ebx
call fcn.00408ca0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x57c]
push ebx
call fcn.00408ca0
push 1
lea eax, [ebp - 0x57b]
push eax
lea ebx, [ebp - 0x47b]
push ebx
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x4071a2
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x580], eax
jmp 0x4071ad
call fcn.00402760
mov dword [ebp - 0x580], eax
mov eax, 0
mov dword [ebp - 0x580], eax
mov dword [0x414f5c], eax
push dword [0x414f5c]
push 0x411f59
call fcn.00406ac0
push 0
call sub.kernel32.dll_SetLastError
jmp 0x408189
lea eax, [ebp - 0x8d4]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0x8d4]
mov edi, 0x411f63
call fcn.004044e0
test al, al
je 0x407401
call fcn.00402760
mov dword [ebp - 0x580], eax
push 0
call sub.kernel32.dll_SetLastError
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.004045d0
lea ebx, [ebp - 0x9d4]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404ae0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x9d4]
call fcn.00401940
push 0xff
mov eax, edi
push eax
push 0xff
lea ebx, [ebp - 0x47c]
push ebx
call fcn.00408ca0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x57c]
push ebx
call fcn.00408ca0
push 1
lea eax, [ebp - 0x57b]
push eax
lea ebx, [ebp - 0x47b]
push ebx
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x4073ca
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x580], eax
mov edi, 0
mov dword [ebp - 0x584], edi
movzx eax, byte [ebp - 0x57c]
mov ebx, 1
sub ebx, eax
jg 0x407302
dec ebx
mov dword [ebp - 0x8d8], ebx
mov dword [ebp - 0x580], eax
jmp 0x4072e2
dec dword [ebp - 0x580]
mov eax, dword [ebp - 0x580]
cmp byte [ebp + eax - 0x57c], 0x2e
jne 0x4072fa
mov dword [ebp - 0x584], eax
jmp 0x407302
inc dword [ebp - 0x8d8]
jne 0x4072dc
push 0x411f6a
push 0xff
lea eax, [ebp - 0x57c]
push eax
push dword [ebp - 0x584]
call fcn.00405fe0
inc dword [ebp - 0x584]
lea eax, [ebp - 0x57c]
push eax
call fcn.004032b0
test al, al
je 0x40734d
mov eax, dword [ebp - 0x584]
cmp byte [ebp + eax - 0x57c], 0x39
jae 0x40734d
inc byte [ebp + eax - 0x57c]
jmp 0x407324
mov eax, dword [ebp - 0x584]
cmp byte [ebp + eax - 0x57c], 0x39
ja 0x4073c8
push 1
lea ebx, [ebp - 0x57b]
push ebx
lea ecx, [ebp - 0x47b]
push ecx
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x4073c8
mov esi, 0x411f6d
lea edi, [ebp - 0xbd8]
call fcn.00401b30
lea esi, [ebp - 0x47c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xad8]
call fcn.00401b30
mov esi, 0x411f7c
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x9d8]
call fcn.00401b30
lea esi, [ebp - 0x57c]
call fcn.00401af0
mov eax, edi
push eax
call fcn.00403250
jmp 0x4073d5
call fcn.00402760
mov dword [ebp - 0x580], eax
mov eax, 0
mov dword [ebp - 0x580], eax
mov dword [0x414f5c], eax
push dword [0x414f5c]
push 0x411f80
call fcn.00406ac0
push 0
call sub.kernel32.dll_SetLastError
jmp 0x408189
lea eax, [ebp - 0x9d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 2
call fcn.00401cd0
lea esi, [ebp - 0x9d8]
mov edi, 0x411f8a
call fcn.004044e0
test al, al
je 0x40748d
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 3
call fcn.004045d0
lea ebx, [ebp - 0xad8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404ae0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xad8]
call fcn.00401940
mov eax, edi
push eax
call fcn.00408c40
call fcn.00402760
mov dword [ebp - 0x580], eax
mov dword [0x414f5c], eax
mov eax, dword [ebp - 0x580]
mov dword [0x4121f3], eax
jmp 0x408189
lea eax, [ebp - 0xad8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 2
call fcn.00401cd0
lea esi, [ebp - 0xad8]
mov edi, 0x411f8d
call fcn.004044e0
test al, al
je 0x407525
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 3
call fcn.004045d0
lea ebx, [ebp - 0xbd8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404ae0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xbd8]
call fcn.00401940
mov eax, edi
push eax
call fcn.00408bc0
call fcn.00402760
mov dword [ebp - 0x580], eax
mov edi, 0
mov dword [ebp - 0x580], edi
mov dword [0x414f5c], edi
mov eax, dword [ebp - 0x580]
mov dword [0x4121f3], eax
jmp 0x408189
lea eax, [ebp - 0xbd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 2
call fcn.00401cd0
lea esi, [ebp - 0xbd8]
mov edi, 0x411f90
call fcn.004044e0
test al, al
je 0x4075b1
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 3
call fcn.004045d0
lea ebx, [ebp - 0xcd8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404ae0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xcd8]
call fcn.00401940
mov eax, edi
push eax
call fcn.00408b40
call fcn.00402760
mov dword [ebp - 0x580], eax
mov dword [0x414f5c], eax
mov eax, dword [ebp - 0x580]
mov dword [0x4121f3], eax
jmp 0x408189
lea eax, [ebp - 0xcd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 3
call fcn.00401cd0
lea esi, [ebp - 0xcd8]
mov edi, 0x411f93
call fcn.004044e0
test al, al
je 0x40763d
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 4
call fcn.004045d0
lea ebx, [ebp - 0xdd8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404ae0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xdd8]
call fcn.00401940
mov eax, edi
push eax
call fcn.00408ae0
call fcn.00402760
mov dword [ebp - 0x580], eax
mov dword [0x414f5c], eax
mov eax, dword [ebp - 0x580]
mov dword [0x4121f3], eax
jmp 0x408189
lea eax, [ebp - 0xdd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0xdd8]
mov edi, 0x411f97
call fcn.004044e0
test al, al
je 0x4076c5
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 7
call fcn.004045d0
lea ebx, [ebp - 0xed8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404ae0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xed8]
call fcn.00401940
mov eax, edi
push eax
call fcn.00403250
push 0
call sub.kernel32.dll_SetLastError
call fcn.00402760
mov dword [ebp - 0x580], eax
jmp 0x406e1b
lea eax, [ebp - 0xed8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 7
call fcn.00401cd0
lea esi, [ebp - 0xed8]
mov edi, 0x411f9e
call fcn.004044e0
test al, al
je 0x407760
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 8
call fcn.004045d0
lea ebx, [ebp - 0xfd8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404ae0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xfd8]
call fcn.00401940
mov eax, edi
push eax
call fcn.00408a70
test al, al
je 0x407744
jmp 0x408492
push 0
call sub.kernel32.dll_SetLastError
call fcn.00402760
mov dword [ebp - 0x580], eax
jmp 0x406e1b
lea eax, [ebp - 0xfd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0xfd8]
mov edi, 0x411fa6
call fcn.004044e0
test al, al
je 0x4077e8
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.004045d0
lea ebx, [ebp - 0x10d8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404ae0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x10d8]
call fcn.00401940
mov eax, edi
push eax
call fcn.00408990
push 0
call sub.kernel32.dll_SetLastError
call fcn.00402760
mov dword [ebp - 0x580], eax
jmp 0x406e1b
lea eax, [ebp - 0x10d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 7
call fcn.00401cd0
lea esi, [ebp - 0x10d8]
mov edi, 0x411fac
call fcn.004044e0
test al, al
je 0x407849
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 8
call fcn.004045d0
call fcn.00406a80
push 0
call sub.kernel32.dll_SetLastError
call fcn.00402760
mov dword [ebp - 0x580], eax
jmp 0x406e1b
lea eax, [ebp - 0x11d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x11d8]
mov edi, 0x411fb4
call fcn.004044e0
test al, al
je 0x4078e9
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.004045d0
movzx ebx, byte [ebp - 0x37c]
cmp byte [ebp + ebx - 0x37c], 0
jne 0x4078b1
push 0xff
lea eax, [ebp - 0x37c]
push eax
movzx ecx, bl
push ecx
push 1
call fcn.004045d0
lea eax, [ebp - 0x37c]
push eax
lea ebx, [ebp - 0x580]
push ebx
call fcn.00404380
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x580], 0
jne 0x4078d9
push eax
call fcn.00408930
mov eax, dword [ebp - 0x580]
mov dword [0x414f5c], eax
jmp 0x408189
lea eax, [ebp - 0x12d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 4
call fcn.00401cd0
lea esi, [ebp - 0x12d8]
mov edi, 0x411fba
call fcn.004044e0
test al, al
je 0x4079cc
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x411fbf
push eax
call fcn.00403000
push eax
call fcn.004045d0
push 0x411fc1
lea eax, [ebp - 0x37c]
push eax
call fcn.00403000
dec eax
mov dword [ebp - 0x588], eax
test eax, eax
jg 0x407961
movzx ebx, byte [ebp - 0x37c]
mov dword [ebp - 0x588], ebx
lea eax, [ebp - 0x13d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push dword [ebp - 0x588]
call fcn.00401cd0
lea ecx, [ebp - 0x13d8]
push ecx
lea eax, [ebp - 0x580]
push eax
call fcn.00404380
mov dword [ebp - 0x58c], eax
lea edi, [ebp - 0x37c]
mov esi, 0x411fc3
call fcn.00401940
cmp dword [ebp - 0x580], 0
jne 0x4079bc
push dword [ebp - 0x58c]
mov eax, edi
push eax
call fcn.00408870
mov eax, dword [ebp - 0x580]
mov dword [0x414f5c], eax
jmp 0x408189
lea eax, [ebp - 0x13d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 4
call fcn.00401cd0
lea esi, [ebp - 0x13d8]
mov edi, 0x411fc4
call fcn.004044e0
test al, al
je 0x407a0d
lea eax, [ebp - 0x27c]
push eax
call fcn.00401d90
jmp 0x408492
lea eax, [ebp - 0x14d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x14d8]
mov edi, 0x411fc9
call fcn.004044e0
test al, al
je 0x407abe
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x411fcf
push eax
call fcn.00403000
push eax
call fcn.004045d0
lea eax, [ebp - 0x15d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
call fcn.00404ae0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x15d8]
call fcn.00401940
mov eax, edi
push eax
push dword [ebp + 8]
call fcn.00406d20
mov ebx, 0
mov dword [ebp - 0x580], ebx
mov edi, 0x41208e
mov esi, 0x411fd1
call fcn.00401940
lea edi, [ebp - 0x37c]
mov esi, 0x411fd2
call fcn.00401940
jmp 0x406e1b
lea eax, [ebp - 0x15d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0xc
call fcn.00401cd0
lea esi, [ebp - 0x15d8]
mov edi, 0x411fd3
call fcn.004044e0
test al, al
je 0x407c1e
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x411fe0
push eax
call fcn.00403000
push eax
call fcn.004045d0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x411fe2
push eax
call fcn.00403000
push eax
call fcn.004045d0
lea eax, [ebp - 0x16d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
call fcn.00404620
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x16d8]
call fcn.00401940
push 0x411fe4
mov eax, edi
push eax
call fcn.00403000
dec eax
mov dword [ebp - 0x588], eax
test eax, eax
jg 0x407b75
movzx ebx, byte [ebp - 0x37c]
mov dword [ebp - 0x588], ebx
lea eax, [ebp - 0x16d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push dword [ebp - 0x588]
call fcn.00401cd0
lea ecx, [ebp - 0x16d8]
push ecx
lea eax, [ebp - 0x580]
push eax
call fcn.00404380
mov dword [0x417843], eax
push 0xff
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0x411fe6
push ebx
call fcn.00403000
push eax
call fcn.004045d0
cmp dword [ebp - 0x580], 0
jne 0x407c09
mov eax, dword [0x414f5c]
cmp dword [0x417843], eax
jg 0x407c09
mov edi, 0x41208e
lea esi, [ebp - 0x37c]
call fcn.00401940
mov edi, esi
mov esi, 0x411fe8
call fcn.00401940
mov ebx, 0
mov dword [ebp - 0x580], ebx
jmp 0x406e9d
lea edi, [ebp - 0x37c]
mov esi, 0x411fe9
call fcn.00401940
jmp 0x408189
lea eax, [ebp - 0x16d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x16d8]
mov edi, 0x411fea
call fcn.004044e0
test al, al
je 0x407da1
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 5
call fcn.004045d0
lea ebx, [ebp - 0x18d8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404620
lea esi, [ebp - 0x18d8]
lea edi, [ebp - 0x17d8]
call fcn.00401b30
mov esi, 0x411ff0
call fcn.00401af0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x17d8]
call fcn.00401940
cmp byte [ebp - 0x37b], 0x2d
jne 0x407ccb
lea eax, [ebp - 0x27c]
push eax
call fcn.00401ee0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 1
call fcn.004045d0
lea eax, [ebp - 0x27c]
push eax
call fcn.00403d40
test al, al
jne 0x407d87
lea eax, [ebp - 0x27c]
push eax
push 0xff
push 0x41208e
call fcn.00404150
call fcn.00403ca0
lea ebx, [ebp - 0x37c]
push ebx
push 0x41208e
call fcn.00403000
test eax, eax
jle 0x407d82
push 0xff
push 0x41208e
push 1
lea eax, [ebp - 0x37c]
push eax
push 0x41208e
call fcn.00403000
push eax
call fcn.004045d0
push 0xff
push 0x41208e
push 1
push 0x411ff2
push 0x41208e
call fcn.00403000
push eax
call fcn.004045d0
mov esi, 0x41208e
lea edi, [ebp - 0x17d8]
call fcn.00401b30
mov esi, 0x411ff4
call fcn.00401af0
mov edi, 0x41208e
lea esi, [ebp - 0x17d8]
call fcn.00401940
jmp 0x406e9d
jmp 0x407ccb
mov dword [ebp - 0x580], 0x3e7
mov eax, dword [ebp - 0x580]
mov dword [0x414f5c], eax
jmp 0x408189
lea eax, [ebp - 0x17d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0xa
call fcn.00401cd0
lea esi, [ebp - 0x17d8]
mov edi, 0x411ff6
call fcn.004044e0
test al, al
je 0x407e81
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x412001
push eax
call fcn.00403000
push eax
call fcn.004045d0
lea eax, [ebp - 0x18d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
call fcn.00404620
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x18d8]
call fcn.00401940
push 0x412003
mov eax, edi
push eax
call fcn.00403000
dec eax
mov dword [ebp - 0x588], eax
test eax, eax
jg 0x407e39
movzx ebx, byte [ebp - 0x37c]
mov dword [ebp - 0x588], ebx
lea eax, [ebp - 0x18d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push dword [ebp - 0x588]
call fcn.00401cd0
lea ecx, [ebp - 0x18d8]
push ecx
lea eax, [ebp - 0x580]
push eax
call fcn.00404380
mov dword [0x41783f], eax
lea edi, [ebp - 0x37c]
mov esi, 0x412005
call fcn.00401940
jmp 0x408189
lea eax, [ebp - 0x18d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 9
call fcn.00401cd0
lea esi, [ebp - 0x18d8]
mov edi, 0x412006
call fcn.004044e0
test al, al
je 0x407ff2
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x412010
push eax
call fcn.00403000
push eax
call fcn.004045d0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x412012
push eax
call fcn.00403000
push eax
call fcn.004045d0
push 0x412014
lea eax, [ebp - 0x37c]
push eax
call fcn.00403000
test eax, eax
jle 0x407f38
lea eax, [ebp - 0x19d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0x412016
push ebx
call fcn.00403000
dec eax
push eax
call fcn.00401cd0
mov edi, 0x415070
lea esi, [ebp - 0x19d8]
call fcn.00401940
jmp 0x407f48
mov edi, 0x415070
lea esi, [ebp - 0x37c]
call fcn.00401940
lea eax, [ebp - 0x19d8]
push eax
push 0x415070
call fcn.00404ae0
mov edi, 0x415070
lea esi, [ebp - 0x19d8]
call fcn.00401940
push edi
call fcn.004047c0
test al, al
je 0x407fbe
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
movzx ebx, byte [0x415070]
inc ebx
push ebx
call fcn.004045d0
mov edi, 0x41208e
lea esi, [ebp - 0x37c]
call fcn.00401940
mov edi, esi
mov esi, 0x412018
call fcn.00401940
mov eax, 0
mov dword [ebp - 0x580], eax
jmp 0x406e9d
mov eax, 0
mov dword [ebp - 0x580], eax
mov edi, 0x41208e
mov esi, 0x412019
call fcn.00401940
lea edi, [ebp - 0x37c]
mov esi, 0x41201a
call fcn.00401940
jmp 0x406e1b
lea eax, [ebp - 0x19d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0xd
call fcn.00401cd0
lea esi, [ebp - 0x19d8]
mov edi, 0x41201b
call fcn.004044e0
test al, al
je 0x40817f
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x412029
push eax
call fcn.00403000
push eax
call fcn.004045d0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x41202b
push eax
call fcn.00403000
push eax
call fcn.004045d0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x41202d
push eax
call fcn.00403000
push eax
call fcn.004045d0
push 0x41202f
lea eax, [ebp - 0x37c]
push eax
call fcn.00403000
test eax, eax
jle 0x4080c8
lea eax, [ebp - 0x1ad8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0x412031
push ebx
call fcn.00403000
dec eax
push eax
call fcn.00401cd0
mov edi, 0x415070
lea esi, [ebp - 0x1ad8]
call fcn.00401940
jmp 0x4080d8
mov edi, 0x415070
lea esi, [ebp - 0x37c]
call fcn.00401940
lea eax, [ebp - 0x1ad8]
push eax
push 0x415070
call fcn.00404ae0
mov edi, 0x415070
lea esi, [ebp - 0x1ad8]
call fcn.00401940
push edi
call fcn.004047c0
test al, al
jne 0x40814e
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
movzx ebx, byte [0x415070]
inc ebx
push ebx
call fcn.004045d0
mov edi, 0x41208e
lea esi, [ebp - 0x37c]
call fcn.00401940
mov edi, esi
mov esi, 0x412033
call fcn.00401940
mov eax, 0
mov dword [ebp - 0x580], eax
jmp 0x406e9d
mov eax, 0
mov dword [ebp - 0x580], eax
mov edi, 0x41208e
mov esi, 0x412034
call fcn.00401940
lea edi, [ebp - 0x37c]
mov esi, 0x412035
call fcn.00401940
jmp 0x406e1b
mov dword [ebp - 0x580], 0x3e7
cmp dword [ebp - 0x580], 0
je 0x408244
push 0xff
lea eax, [ebp - 0x37c]
mov byte [eax], 0
push eax
push dword [ebp - 0x580]
push 0
call fcn.004060b0
add esp, 8
mov esi, 0x412036
lea edi, [ebp - 0x1dd8]
call fcn.00401b30
lea esi, [ebp - 0x37c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1cd8]
call fcn.00401b30
mov esi, 0x412043
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1bd8]
call fcn.00401b30
mov esi, 0x412045
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1ad8]
call fcn.00401b30
mov esi, 0x412047
call fcn.00401af0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x1ad8]
call fcn.00401940
cmp dword [0x41783f], 0
jne 0x408244
push 0
push 0x41208f
lea eax, [ebp - 0x37b]
push eax
push 0
call sub.user32.dll_MessageBoxA
jmp 0x406e1b
mov esi, 0x41208e
lea edi, [ebp - 0x1ad8]
call fcn.00401b30
mov esi, 0x412049
call fcn.00401af0
mov edi, 0x41208e
lea esi, [ebp - 0x1ad8]
call fcn.00401940
mov eax, esi
push eax
push edi
call fcn.00404ae0
mov edi, 0x41208e
lea esi, [ebp - 0x1ad8]
call fcn.00401940
push 0x41204b
push edi
call fcn.00403000
cmp eax, 1
je 0x4082b0
push 0x412050
push 0x41208e
call fcn.00403000
cmp eax, 1
jne 0x4082b5
jmp 0x406e1b
mov dword [ebp - 0x580], 1
movzx eax, byte [0x41208e]
test eax, eax
jl 0x4082d0
cmp dword [ebp - 0x580], eax
jg 0x4082fe
mov eax, dword [ebp - 0x580]
cmp byte [eax + 0x41208e], 0
jne 0x4082f6
push 0xff
push 0x41208e
push eax
push 1
call fcn.004045d0
jmp 0x4082fc
inc dword [ebp - 0x580]
jmp 0x4082bf
lea eax, [ebp - 0x1ad8]
push eax
push 0x41208e
call fcn.00404620
lea esi, [ebp - 0x1ad8]
mov edi, 0x412055
call fcn.004044e0
test al, al
je 0x408328
jmp 0x406e1b
push 0x412056
push 0x41208e
call fcn.00403000
cmp eax, 1
jne 0x408375
push 0xff
push 0x41208e
call fcn.00408570
lea eax, [ebp - 0x1bd8]
push eax
push 0x41208e
call fcn.00404620
lea esi, [ebp - 0x1bd8]
mov edi, 0x412063
call fcn.004044e0
test al, al
je 0x408375
jmp 0x406e1b
mov esi, 0x41208e
lea edi, [ebp - 0x1cd8]
call fcn.00401b30
mov esi, 0x412064
call fcn.00401af0
mov edi, 0x41208e
lea esi, [ebp - 0x1cd8]
call fcn.00401940
push dword [ebp + 8]
lea eax, [ebp - 0x5d0]
push eax
push 0
push 0
push dword [0x414f60]
push 0
push 0
push 0
push 0x41208f
push 0
call sub.kernel32.dll_CreateProcessA
test al, al
jne 0x408437
cmp dword [0x41783f], 1
jg 0x408437
push 0
push 0x412066
push dword [ebp - 0x10c]
push 0
call sub.user32.dll_MessageBoxA
lea esi, [ebp - 0x108]
lea edi, [ebp - 0x1cd8]
call fcn.00401b30
mov esi, 0x41207b
call fcn.00401af0
lea edi, [ebp - 0x108]
lea esi, [ebp - 0x1cd8]
call fcn.00401940
push 0
lea eax, [ebp - 0x107]
push eax
push 0x41208f
push 0
call sub.user32.dll_MessageBoxA
cmp dword [0x41783f], 0
jne 0x408437
push 0
call fcn.00403220
mov al, byte [0x41506e]
test al, al
je 0x408448
push dword [ebp + 8]
call fcn.004084a0
mov al, byte [0x41208d]
test al, al
je 0x408453
jmp 0x408492
jmp 0x406e1b
lea eax, [ebp - 0x27c]
push eax
call fcn.00401d90
call fcn.00402760
test eax, eax
je 0x40846d
jmp 0x408492
mov esi, 0x41207d
lea edi, [ebp - 0x1cd8]
call fcn.00401b30
lea esi, [ebp - 0x108]
call fcn.00401af0
mov eax, edi
push eax
call fcn.00403250
pop edx
pop ecx
pop ebx
leave
ret 8