Function at 0x406840
Capabilities:
Copy file
Create process on windows

Disassembly:
enter 0x20d4, 1
push ebx
push ecx
push edx
mov esi, dword [ebp + 0xc]
lea edi, [ebp - 0x108]
call fcn.00401940
mov dword [ebp - 8], esp
mov edi, 0
mov dword [0x454e7e], edi
mov eax, 0
mov dword [0x454e79], eax
mov edi, 0
mov dword [0x427909], edi
lea eax, [ebp - 0x5d0]
push eax
push 0x44
call fcn.0040c6d0
mov dword [ebp - 0x5d0], 0x44
mov dword [ebp - 0x10c], 0x42699f
mov byte [0x425046], 0
push 0x43074c
push 0xe
push 0x42659c
push 0
call fcn.00403350
mov al, byte [0x426cba]
push eax
push 0
call fcn.00408f40
push 9
push 0x4265aa
push 0
call fcn.00403350
lea eax, [ebp - 0x108]
push eax
push 0
call fcn.00402790
push 5
push 0x4265b3
push 0
call fcn.00403350
call fcn.00402770
push eax
push 0
call fcn.00404230
call fcn.00403330
lea eax, [ebp - 0x6d0]
push eax
lea ebx, [ebp - 0x108]
push ebx
call fcn.004094c0
lea edi, [ebp - 0x108]
lea esi, [ebp - 0x6d0]
call fcn.00401940
push 0x43074c
push 0xe
push 0x4265b8
push 0
call fcn.00403350
mov al, byte [0x426cba]
push eax
push 0
call fcn.00408f40
push 9
push 0x4265c6
push 0
call fcn.00403350
lea eax, [ebp - 0x108]
push eax
push 0
call fcn.00402790
call fcn.00403330
push 0x4265cf
lea eax, [ebp - 0x108]
push eax
call fcn.004033b0
cmp eax, 1
jne 0x4069a3
push 0xff
lea eax, [ebp - 0x108]
push eax
push 1
push 2
call fcn.00404fd0
lea ebx, [ebp - 0x108]
push ebx
push 0x4265d2
call fcn.0040c580
jmp 0x408c63
lea eax, [ebp - 0x27c]
push eax
lea ebx, [ebp - 0x108]
push ebx
call fcn.00401e60
lea ecx, [ebp - 0x27c]
push ecx
call fcn.00401ee0
mov byte [0x425046], 2
mov eax, 0
mov dword [0x454e86], eax
call fcn.00402770
test eax, eax
jne 0x408c28
lea eax, [ebp - 0x27c]
push eax
call fcn.004034b0
test al, al
jne 0x408c11
lea eax, [ebp - 0x27c]
push eax
push 0xff
push 0x42699e
call fcn.00403930
call fcn.00403410
mov esi, 0x42699e
lea edi, [ebp - 0x6d0]
call fcn.00401b30
mov esi, 0x4265d3
call fcn.00401af0
mov edi, 0x42699e
lea esi, [ebp - 0x6d0]
call fcn.00401940
mov byte [0x454e7d], 0
mov al, byte [0x426cba]
mov byte [0x454f94], al
mov byte [0x454e8a], 0
mov byte [0x454f93], 0
mov eax, 0
mov dword [0x454e86], eax
cmp byte [0x42699f], 0x3b
je 0x408c01
mov eax, dword [ebp + 8]
mov edi, 0
mov dword [eax], edi
push 0x43074c
push 0xe
push 0x4265d5
push 0
call fcn.00403350
mov al, byte [0x454f94]
push eax
push 0
call fcn.00408f40
push 5
push 0x4265e3
push 0
call fcn.00403350
push 0x42699e
push 0
call fcn.00402790
call fcn.00403330
cmp byte [0x42699f], 0x27
jne 0x40880b
push 0xff
push 0x42699e
push 1
push 1
call fcn.00404fd0
push 0x4265e8
push 0x42699e
call fcn.004033b0
mov dword [ebp - 0x580], eax
test eax, eax
jle 0x406b03
push 0xff
push 0x42699e
push eax
push 1
call fcn.00404fd0
lea edi, [ebp - 0x37c]
mov esi, 0x42699e
call fcn.00401940
movzx eax, byte [ebp - 0x37c]
test eax, eax
jle 0x406b69
mov dword [ebp - 0x5d4], eax
mov edi, 0
mov dword [ebp - 0x580], edi
inc dword [ebp - 0x580]
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x5d8], eax
mov ebx, dword [ebp - 0x580]
mov al, byte [ebp + ebx - 0x37c]
push eax
call fcn.004094a0
mov ecx, dword [ebp - 0x5d8]
mov byte [ebp + ecx - 0x37c], al
dec dword [ebp - 0x5d4]
jne 0x406b2f
lea eax, [ebp - 0x6d4]
push eax
lea ebx, [ebp - 0x37c]
push ebx
call fcn.00404f50
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x6d4]
call fcn.00401940
push 0x4265ea
mov eax, edi
push eax
call fcn.004033b0
test eax, eax
jle 0x406bbd
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x4265ec
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
push 0x43074c
push 0x12
push 0x4265ee
push 0
call fcn.00403350
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00403330
lea ebx, [ebp - 0x6d4]
push ebx
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0x6d4]
mov edi, 0x426600
call fcn.004065d0
test al, al
je 0x406e5f
call fcn.00402770
mov dword [ebp - 0x580], eax
push 0
call sub.kernel32.dll_SetLastError
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00404fd0
push 0x43074c
push 0x18
push 0x426607
push 0
call fcn.00403350
mov al, byte [0x454f94]
push eax
push 0
call fcn.00408f40
push 3
push 0x42661f
push 0
call fcn.00403350
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00403330
lea ebx, [ebp - 0x7d4]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004094c0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x7d4]
call fcn.00401940
push 0x43074c
push 0x15
push 0x426622
push 0
call fcn.00403350
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00403330
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x47c]
push ebx
call fcn.0040c2a0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040c2a0
lea ecx, [ebp - 0x7d4]
push ecx
lea eax, [ebp - 0x47c]
push eax
call fcn.0040c120
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0x7d4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x7d4]
call fcn.00401b30
mov esi, 0x426637
call fcn.00401af0
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0x7d4]
call fcn.00401940
mov eax, esi
push eax
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040c120
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0x7d4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x7d4]
call fcn.00401b30
mov esi, 0x426639
call fcn.00401af0
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0x7d4]
call fcn.00401940
push 0x42663b
lea eax, [ebp - 0x47c]
push eax
call fcn.004033b0
test eax, eax
jle 0x406dc8
push 0xff
lea eax, [ebp - 0x47c]
push eax
push 0x42663d
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
jmp 0x406d92
push 0x42663f
lea eax, [ebp - 0x57c]
push eax
call fcn.004033b0
test eax, eax
jle 0x406dfe
push 0xff
lea eax, [ebp - 0x57c]
push eax
push 0x426641
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
jmp 0x406dc8
lea eax, [ebp - 0x47c]
push eax
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040c410
test al, al
jne 0x406e22
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x580], eax
jmp 0x406e2d
call fcn.00402770
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x580]
mov dword [0x427909], eax
mov eax, dword [ebp - 0x580]
mov dword [0x454e79], eax
push dword [0x454e79]
push 0x426643
call fcn.00403e30
push 0
call sub.kernel32.dll_SetLastError
jmp 0x40874b
lea eax, [ebp - 0x7d4]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x7d4]
mov edi, 0x42664d
call fcn.004065d0
test al, al
je 0x4070dd
call fcn.00402770
mov dword [ebp - 0x580], eax
push 0
call sub.kernel32.dll_SetLastError
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 5
call fcn.00404fd0
push 0x43074c
push 0x18
push 0x426653
push 0
call fcn.00403350
mov al, byte [0x454f94]
push eax
push 0
call fcn.00408f40
push 3
push 0x42666b
push 0
call fcn.00403350
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00403330
lea ebx, [ebp - 0x8d4]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004094c0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x8d4]
call fcn.00401940
push 0x43074c
push 0x15
push 0x42666e
push 0
call fcn.00403350
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00403330
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x47c]
push ebx
call fcn.0040c2a0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040c2a0
lea ecx, [ebp - 0x8d4]
push ecx
lea eax, [ebp - 0x47c]
push eax
call fcn.0040c120
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0x8d4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x8d4]
call fcn.00401b30
mov esi, 0x426683
call fcn.00401af0
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0x8d4]
call fcn.00401940
mov eax, esi
push eax
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040c120
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0x8d4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x8d4]
call fcn.00401b30
mov esi, 0x426685
call fcn.00401af0
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0x8d4]
call fcn.00401940
push 0x426687
lea eax, [ebp - 0x47c]
push eax
call fcn.004033b0
test eax, eax
jle 0x407044
push 0xff
lea eax, [ebp - 0x47c]
push eax
push 0x426689
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
jmp 0x40700e
push 0x42668b
lea eax, [ebp - 0x57c]
push eax
call fcn.004033b0
test eax, eax
jle 0x40707a
push 0xff
lea eax, [ebp - 0x57c]
push eax
push 0x42668d
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
jmp 0x407044
push 0
lea eax, [ebp - 0x57b]
push eax
lea ebx, [ebp - 0x47b]
push ebx
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x4070a0
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x580], eax
jmp 0x4070ab
call fcn.00402770
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x580]
mov dword [0x427909], eax
mov eax, dword [ebp - 0x580]
mov dword [0x454e79], eax
push dword [0x454e79]
push 0x42668f
call fcn.00403e30
push 0
call sub.kernel32.dll_SetLastError
jmp 0x40874b
lea eax, [ebp - 0x8d4]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0x8d4]
mov edi, 0x426699
call fcn.004065d0
test al, al
je 0x407355
call fcn.00402770
mov dword [ebp - 0x580], eax
push 0
call sub.kernel32.dll_SetLastError
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00404fd0
push 0x43074c
push 0x18
push 0x4266a0
push 0
call fcn.00403350
mov al, byte [0x454f94]
push eax
push 0
call fcn.00408f40
push 3
push 0x4266b8
push 0
call fcn.00403350
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00403330
lea ebx, [ebp - 0x9d4]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004094c0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x9d4]
call fcn.00401940
push 0x43074c
push 0x15
push 0x4266bb
push 0
call fcn.00403350
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00403330
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x47c]
push ebx
call fcn.0040c2a0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040c2a0
lea ecx, [ebp - 0x9d4]
push ecx
lea eax, [ebp - 0x47c]
push eax
call fcn.0040c120
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0x9d4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x9d4]
call fcn.00401b30
mov esi, 0x4266d0
call fcn.00401af0
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0x9d4]
call fcn.00401940
mov eax, esi
push eax
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040c120
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0x9d4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x9d4]
call fcn.00401b30
mov esi, 0x4266d2
call fcn.00401af0
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0x9d4]
call fcn.00401940
push 0x4266d4
lea eax, [ebp - 0x47c]
push eax
call fcn.004033b0
test eax, eax
jle 0x4072c2
push 0xff
lea eax, [ebp - 0x47c]
push eax
push 0x4266d6
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
jmp 0x40728c
push 0x4266d8
lea eax, [ebp - 0x57c]
push eax
call fcn.004033b0
test eax, eax
jle 0x4072f8
push 0xff
lea eax, [ebp - 0x57c]
push eax
push 0x4266da
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
jmp 0x4072c2
push 1
lea eax, [ebp - 0x57b]
push eax
lea ebx, [ebp - 0x47b]
push ebx
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x40731e
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x580], eax
jmp 0x407329
call fcn.00402770
mov dword [ebp - 0x580], eax
mov eax, 0
mov dword [ebp - 0x580], eax
mov dword [0x454e79], eax
push dword [0x454e79]
push 0x4266dc
call fcn.00403e30
push 0
call sub.kernel32.dll_SetLastError
jmp 0x40874b
lea eax, [ebp - 0x9d4]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0x9d4]
mov edi, 0x4266e6
call fcn.004065d0
test al, al
je 0x4076e8
call fcn.00402770
mov dword [ebp - 0x580], eax
push 0
call sub.kernel32.dll_SetLastError
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00404fd0
push 0x43074c
push 0x18
push 0x4266ed
push 0
call fcn.00403350
mov al, byte [0x454f94]
push eax
push 0
call fcn.00408f40
push 3
push 0x426705
push 0
call fcn.00403350
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00403330
lea ebx, [ebp - 0xad4]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004094c0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xad4]
call fcn.00401940
push 0x43074c
push 0x15
push 0x426708
push 0
call fcn.00403350
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
call fcn.00403330
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x47c]
push ebx
call fcn.0040c2a0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0xff
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040c2a0
lea ecx, [ebp - 0xad4]
push ecx
lea eax, [ebp - 0x47c]
push eax
call fcn.0040c120
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0xad4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0xad4]
call fcn.00401b30
mov esi, 0x42671d
call fcn.00401af0
lea edi, [ebp - 0x47c]
lea esi, [ebp - 0xad4]
call fcn.00401940
mov eax, esi
push eax
lea ebx, [ebp - 0x57c]
push ebx
call fcn.0040c120
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0xad4]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0xad4]
call fcn.00401b30
mov esi, 0x42671f
call fcn.00401af0
lea edi, [ebp - 0x57c]
lea esi, [ebp - 0xad4]
call fcn.00401940
push 0x426721
lea eax, [ebp - 0x47c]
push eax
call fcn.004033b0
test eax, eax
jle 0x40753a
push 0xff
lea eax, [ebp - 0x47c]
push eax
push 0x426723
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
jmp 0x407504
push 0x426725
lea eax, [ebp - 0x57c]
push eax
call fcn.004033b0
test eax, eax
jle 0x407570
push 0xff
lea eax, [ebp - 0x57c]
push eax
push 0x426727
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
jmp 0x40753a
push 1
lea eax, [ebp - 0x57b]
push eax
lea ebx, [ebp - 0x47b]
push ebx
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x4076b1
call sub.kernel32.dll_GetLastError
mov dword [ebp - 0x580], eax
mov edi, 0
mov dword [ebp - 0x584], edi
movzx eax, byte [ebp - 0x57c]
mov ebx, 1
sub ebx, eax
jg 0x4075e9
dec ebx
mov dword [ebp - 0x9d8], ebx
mov dword [ebp - 0x580], eax
jmp 0x4075c9
dec dword [ebp - 0x580]
mov eax, dword [ebp - 0x580]
cmp byte [ebp + eax - 0x57c], 0x2e
jne 0x4075e1
mov dword [ebp - 0x584], eax
jmp 0x4075e9
inc dword [ebp - 0x9d8]
jne 0x4075c3
push 0x426729
push 0xff
lea eax, [ebp - 0x57c]
push eax
push dword [ebp - 0x584]
call fcn.00409380
inc dword [ebp - 0x584]
lea eax, [ebp - 0x57c]
push eax
call fcn.0040c080
test al, al
je 0x407634
mov eax, dword [ebp - 0x584]
cmp byte [ebp + eax - 0x57c], 0x39
jae 0x407634
inc byte [ebp + eax - 0x57c]
jmp 0x40760b
mov eax, dword [ebp - 0x584]
cmp byte [ebp + eax - 0x57c], 0x39
ja 0x4076af
push 1
lea ebx, [ebp - 0x57b]
push ebx
lea ecx, [ebp - 0x47b]
push ecx
call sub.kernel32.dll_CopyFileA
test al, al
jne 0x4076af
mov esi, 0x42672c
lea edi, [ebp - 0xcd8]
call fcn.00401b30
lea esi, [ebp - 0x47c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xbd8]
call fcn.00401b30
mov esi, 0x42673b
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xad8]
call fcn.00401b30
lea esi, [ebp - 0x57c]
call fcn.00401af0
mov eax, edi
push eax
call fcn.004032a0
jmp 0x4076bc
call fcn.00402770
mov dword [ebp - 0x580], eax
mov eax, 0
mov dword [ebp - 0x580], eax
mov dword [0x454e79], eax
push dword [0x454e79]
push 0x42673f
call fcn.00403e30
push 0
call sub.kernel32.dll_SetLastError
jmp 0x40874b
lea eax, [ebp - 0xad8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 2
call fcn.00401cd0
lea esi, [ebp - 0xad8]
mov edi, 0x426749
call fcn.004065d0
test al, al
je 0x4077b2
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 3
call fcn.00404fd0
lea ebx, [ebp - 0xbd8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004094c0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xbd8]
call fcn.00401940
push 0x42674c
lea eax, [ebp - 0x37c]
push eax
call fcn.004033b0
test eax, eax
jle 0x407786
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x42674e
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
jmp 0x407750
lea eax, [ebp - 0x37c]
push eax
call fcn.0040c020
call fcn.00402770
mov dword [ebp - 0x580], eax
mov dword [0x454e79], eax
mov eax, dword [ebp - 0x580]
mov dword [0x427909], eax
jmp 0x40874b
lea eax, [ebp - 0xbd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 2
call fcn.00401cd0
lea esi, [ebp - 0xbd8]
mov edi, 0x426750
call fcn.004065d0
test al, al
je 0x407888
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 3
call fcn.00404fd0
lea ebx, [ebp - 0xcd8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004094c0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xcd8]
call fcn.00401940
push 0x426753
lea eax, [ebp - 0x37c]
push eax
call fcn.004033b0
test eax, eax
jle 0x407850
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x426755
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
jmp 0x40781a
lea eax, [ebp - 0x37c]
push eax
call fcn.0040bfa0
call fcn.00402770
mov dword [ebp - 0x580], eax
mov edi, 0
mov dword [ebp - 0x580], edi
mov dword [0x454e79], edi
mov eax, dword [ebp - 0x580]
mov dword [0x427909], eax
jmp 0x40874b
lea eax, [ebp - 0xcd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 2
call fcn.00401cd0
lea esi, [ebp - 0xcd8]
mov edi, 0x426757
call fcn.004065d0
test al, al
je 0x407952
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 3
call fcn.00404fd0
lea ebx, [ebp - 0xdd8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004094c0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xdd8]
call fcn.00401940
push 0x42675a
lea eax, [ebp - 0x37c]
push eax
call fcn.004033b0
test eax, eax
jle 0x407926
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x42675c
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
jmp 0x4078f0
lea eax, [ebp - 0x37c]
push eax
call fcn.0040bf20
call fcn.00402770
mov dword [ebp - 0x580], eax
mov dword [0x454e79], eax
mov eax, dword [ebp - 0x580]
mov dword [0x427909], eax
jmp 0x40874b
lea eax, [ebp - 0xdd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 3
call fcn.00401cd0
lea esi, [ebp - 0xdd8]
mov edi, 0x42675e
call fcn.004065d0
test al, al
je 0x407a1c
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 4
call fcn.00404fd0
lea ebx, [ebp - 0xed8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004094c0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xed8]
call fcn.00401940
push 0x426762
lea eax, [ebp - 0x37c]
push eax
call fcn.004033b0
test eax, eax
jle 0x4079f0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x426764
push eax
call fcn.004033b0
push eax
push 1
call fcn.00404fd0
jmp 0x4079ba
lea eax, [ebp - 0x37c]
push eax
call fcn.0040bec0
call fcn.00402770
mov dword [ebp - 0x580], eax
mov dword [0x454e79], eax
mov eax, dword [ebp - 0x580]
mov dword [0x427909], eax
jmp 0x40874b
lea eax, [ebp - 0xed8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0xed8]
mov edi, 0x426766
call fcn.004065d0
test al, al
je 0x407aa4
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 7
call fcn.00404fd0
lea ebx, [ebp - 0xfd8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004094c0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0xfd8]
call fcn.00401940
mov eax, edi
push eax
call fcn.004032a0
push 0
call sub.kernel32.dll_SetLastError
call fcn.00402770
mov dword [ebp - 0x580], eax
jmp 0x4069e0
lea eax, [ebp - 0xfd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 7
call fcn.00401cd0
lea esi, [ebp - 0xfd8]
mov edi, 0x42676d
call fcn.004065d0
test al, al
je 0x407b3f
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 8
call fcn.00404fd0
lea ebx, [ebp - 0x10d8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004094c0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x10d8]
call fcn.00401940
mov eax, edi
push eax
call fcn.0040be50
test al, al
je 0x407b23
jmp 0x408c63
push 0
call sub.kernel32.dll_SetLastError
call fcn.00402770
mov dword [ebp - 0x580], eax
jmp 0x4069e0
lea eax, [ebp - 0x10d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x10d8]
mov edi, 0x426775
call fcn.004065d0
test al, al
je 0x407bc7
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00404fd0
lea ebx, [ebp - 0x11d8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.004094c0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x11d8]
call fcn.00401940
mov eax, edi
push eax
call fcn.0040bd30
push 0
call sub.kernel32.dll_SetLastError
call fcn.00402770
mov dword [ebp - 0x580], eax
jmp 0x4069e0
lea eax, [ebp - 0x11d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 7
call fcn.00401cd0
lea esi, [ebp - 0x11d8]
mov edi, 0x42677b
call fcn.004065d0
test al, al
je 0x407c28
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 8
call fcn.00404fd0
call fcn.0040bcf0
push 0
call sub.kernel32.dll_SetLastError
call fcn.00402770
mov dword [ebp - 0x580], eax
jmp 0x4069e0
lea eax, [ebp - 0x12d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x12d8]
mov edi, 0x426783
call fcn.004065d0
test al, al
je 0x407cc8
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00404fd0
movzx ebx, byte [ebp - 0x37c]
cmp byte [ebp + ebx - 0x37c], 0
jne 0x407c90
push 0xff
lea eax, [ebp - 0x37c]
push eax
movzx ecx, bl
push ecx
push 1
call fcn.00404fd0
lea eax, [ebp - 0x37c]
push eax
lea ebx, [ebp - 0x580]
push ebx
call fcn.00406470
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x580], 0
jne 0x407cb8
push eax
call fcn.0040bc90
mov eax, dword [ebp - 0x580]
mov dword [0x454e79], eax
jmp 0x40874b
lea eax, [ebp - 0x13d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 4
call fcn.00401cd0
lea esi, [ebp - 0x13d8]
mov edi, 0x426789
call fcn.004065d0
test al, al
je 0x407dab
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x42678e
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
push 0x426790
lea eax, [ebp - 0x37c]
push eax
call fcn.004033b0
dec eax
mov dword [ebp - 0x588], eax
test eax, eax
jg 0x407d40
movzx ebx, byte [ebp - 0x37c]
mov dword [ebp - 0x588], ebx
lea eax, [ebp - 0x14d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push dword [ebp - 0x588]
call fcn.00401cd0
lea ecx, [ebp - 0x14d8]
push ecx
lea eax, [ebp - 0x580]
push eax
call fcn.00406470
mov dword [ebp - 0x58c], eax
lea edi, [ebp - 0x37c]
mov esi, 0x426792
call fcn.00401940
cmp dword [ebp - 0x580], 0
jne 0x407d9b
push dword [ebp - 0x58c]
mov eax, edi
push eax
call fcn.0040bbd0
mov eax, dword [ebp - 0x580]
mov dword [0x454e79], eax
jmp 0x40874b
lea eax, [ebp - 0x14d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 4
call fcn.00401cd0
lea esi, [ebp - 0x14d8]
mov edi, 0x426793
call fcn.004065d0
test al, al
je 0x407dec
lea eax, [ebp - 0x27c]
push eax
call fcn.00401d90
jmp 0x408c63
lea eax, [ebp - 0x15d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x15d8]
mov edi, 0x426798
call fcn.004065d0
test al, al
je 0x407e9d
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x42679e
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
lea eax, [ebp - 0x16d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
call fcn.004094c0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x16d8]
call fcn.00401940
mov eax, edi
push eax
push dword [ebp + 8]
call fcn.00406840
mov ebx, 0
mov dword [ebp - 0x580], ebx
mov edi, 0x42699e
mov esi, 0x4267a0
call fcn.00401940
lea edi, [ebp - 0x37c]
mov esi, 0x4267a1
call fcn.00401940
jmp 0x4069e0
lea eax, [ebp - 0x16d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0xc
call fcn.00401cd0
lea esi, [ebp - 0x16d8]
mov edi, 0x4267a2
call fcn.004065d0
test al, al
je 0x407ffd
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x4267af
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x4267b1
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
lea eax, [ebp - 0x17d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
call fcn.00404f50
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x17d8]
call fcn.00401940
push 0x4267b3
mov eax, edi
push eax
call fcn.004033b0
dec eax
mov dword [ebp - 0x588], eax
test eax, eax
jg 0x407f54
movzx ebx, byte [ebp - 0x37c]
mov dword [ebp - 0x588], ebx
lea eax, [ebp - 0x17d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push dword [ebp - 0x588]
call fcn.00401cd0
lea ecx, [ebp - 0x17d8]
push ecx
lea eax, [ebp - 0x580]
push eax
call fcn.00406470
mov dword [0x454e82], eax
push 0xff
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0x4267b5
push ebx
call fcn.004033b0
push eax
call fcn.00404fd0
cmp dword [ebp - 0x580], 0
jne 0x407fe8
mov eax, dword [0x454e79]
cmp dword [0x454e82], eax
jg 0x407fe8
mov edi, 0x42699e
lea esi, [ebp - 0x37c]
call fcn.00401940
mov edi, esi
mov esi, 0x4267b7
call fcn.00401940
mov ebx, 0
mov dword [ebp - 0x580], ebx
jmp 0x406a62
lea edi, [ebp - 0x37c]
mov esi, 0x4267b8
call fcn.00401940
jmp 0x40874b
lea eax, [ebp - 0x17d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x17d8]
mov edi, 0x4267b9
call fcn.004065d0
test al, al
je 0x4081b4
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 5
call fcn.00404fd0
lea ebx, [ebp - 0x19d8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404f50
lea esi, [ebp - 0x19d8]
lea edi, [ebp - 0x18d8]
call fcn.00401b30
mov esi, 0x4267bf
call fcn.00401af0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x18d8]
call fcn.00401940
cmp byte [ebp - 0x37b], 0x2d
jne 0x4080aa
lea eax, [ebp - 0x27c]
push eax
call fcn.00401ee0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 1
call fcn.00404fd0
push 0x43074c
push 0x17
push 0x4267c1
push 0
call fcn.00403350
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.00402790
push 2
push 0x4267d8
push 0
call fcn.00403350
call fcn.00403330
lea eax, [ebp - 0x27c]
push eax
call fcn.004034b0
test al, al
jne 0x40819a
lea eax, [ebp - 0x27c]
push eax
push 0xff
push 0x42699e
call fcn.00403930
call fcn.00403410
lea ebx, [ebp - 0x37c]
push ebx
push 0x42699e
call fcn.004033b0
test eax, eax
jle 0x408195
push 0xff
push 0x42699e
push 1
lea eax, [ebp - 0x37c]
push eax
push 0x42699e
call fcn.004033b0
push eax
call fcn.00404fd0
push 0xff
push 0x42699e
push 1
push 0x4267da
push 0x42699e
call fcn.004033b0
push eax
call fcn.00404fd0
mov esi, 0x42699e
lea edi, [ebp - 0x18d8]
call fcn.00401b30
mov esi, 0x4267dc
call fcn.00401af0
mov edi, 0x42699e
lea esi, [ebp - 0x18d8]
call fcn.00401940
jmp 0x406a62
jmp 0x4080de
mov dword [ebp - 0x580], 0x3e7
mov eax, dword [ebp - 0x580]
mov dword [0x454e79], eax
jmp 0x40874b
lea eax, [ebp - 0x18d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 5
call fcn.00401cd0
lea esi, [ebp - 0x18d8]
mov edi, 0x4267de
call fcn.004065d0
test al, al
je 0x408213
mov byte [0x426944], 1
lea eax, [ebp - 0x27c]
push eax
call fcn.00401d90
call fcn.00402770
test eax, eax
je 0x4081fb
push 0
call sub.user32.dll_PostQuitMessage
push 0
call fcn.00404e20
jmp 0x408c63
lea eax, [ebp - 0x19d8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 6
call fcn.00401cd0
lea esi, [ebp - 0x19d8]
mov edi, 0x4267e4
call fcn.004065d0
test al, al
je 0x408331
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 6
call fcn.00404fd0
lea ebx, [ebp - 0x1ad8]
push ebx
lea eax, [ebp - 0x37c]
push eax
call fcn.00404f50
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x1ad8]
call fcn.00401940
cmp byte [ebp - 0x37b], 0x22
jne 0x408300
push 0xff
mov eax, edi
push eax
push 1
push 1
call fcn.00404fd0
push 0x4267eb
lea eax, [ebp - 0x37c]
push eax
call fcn.004033b0
test eax, eax
jle 0x4082cc
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 0x4267ed
push eax
call fcn.004033b0
push eax
push 0xff
call fcn.00404fd0
lea esi, [ebp - 0x37c]
mov edi, 0x4267ef
call fcn.004066c0
test al, al
je 0x408300
lea eax, [ebp - 0x1ad8]
push eax
mov ebx, esi
push ebx
call fcn.0040ac60
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x1ad8]
call fcn.00401940
mov edi, 0x42699e
lea esi, [ebp - 0x37c]
call fcn.00401940
mov edi, esi
mov esi, 0x4267f0
call fcn.00401940
mov eax, 0
mov dword [ebp - 0x580], eax
jmp 0x406a62
lea eax, [ebp - 0x1ad8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0xa
call fcn.00401cd0
lea esi, [ebp - 0x1ad8]
mov edi, 0x4267f1
call fcn.004065d0
test al, al
je 0x408411
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x4267fc
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
lea eax, [ebp - 0x1bd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
call fcn.00404f50
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x1bd8]
call fcn.00401940
push 0x4267fe
mov eax, edi
push eax
call fcn.004033b0
dec eax
mov dword [ebp - 0x588], eax
test eax, eax
jg 0x4083c9
movzx ebx, byte [ebp - 0x37c]
mov dword [ebp - 0x588], ebx
lea eax, [ebp - 0x1bd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push dword [ebp - 0x588]
call fcn.00401cd0
lea ecx, [ebp - 0x1bd8]
push ecx
lea eax, [ebp - 0x580]
push eax
call fcn.00406470
mov dword [0x454e7e], eax
lea edi, [ebp - 0x37c]
mov esi, 0x426800
call fcn.00401940
jmp 0x40874b
lea eax, [ebp - 0x1bd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 9
call fcn.00401cd0
lea esi, [ebp - 0x1bd8]
mov edi, 0x426801
call fcn.004065d0
test al, al
je 0x40859b
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x42680b
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x42680d
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
push 0x42680f
lea eax, [ebp - 0x37c]
push eax
call fcn.004033b0
test eax, eax
jle 0x4084c8
lea eax, [ebp - 0x1cd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0x426811
push ebx
call fcn.004033b0
dec eax
push eax
call fcn.00401cd0
mov edi, 0x454f95
lea esi, [ebp - 0x1cd8]
call fcn.00401940
jmp 0x4084d8
mov edi, 0x454f95
lea esi, [ebp - 0x37c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
movzx ebx, byte [0x454f95]
inc ebx
push ebx
call fcn.00404fd0
lea ebx, [ebp - 0x1cd8]
push ebx
push 0x454f95
call fcn.004094c0
mov edi, 0x454f95
lea esi, [ebp - 0x1cd8]
call fcn.00401940
mov eax, esi
push eax
push edi
call fcn.00408eb0
mov edi, 0x454f95
lea esi, [ebp - 0x1cd8]
call fcn.00401940
push edi
call fcn.0040bb00
test al, al
je 0x408567
mov edi, 0x42699e
lea esi, [ebp - 0x37c]
call fcn.00401940
mov edi, esi
mov esi, 0x426813
call fcn.00401940
mov eax, 0
mov dword [ebp - 0x580], eax
jmp 0x406a62
mov eax, 0
mov dword [ebp - 0x580], eax
mov edi, 0x42699e
mov esi, 0x426814
call fcn.00401940
lea edi, [ebp - 0x37c]
mov esi, 0x426815
call fcn.00401940
jmp 0x4069e0
lea eax, [ebp - 0x1cd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0xd
call fcn.00401cd0
lea esi, [ebp - 0x1cd8]
mov edi, 0x426816
call fcn.004065d0
test al, al
je 0x408741
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x426824
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x426826
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
push 0x426828
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
push 0x42682a
lea eax, [ebp - 0x37c]
push eax
call fcn.004033b0
test eax, eax
jle 0x408671
lea eax, [ebp - 0x1dd8]
push eax
lea ebx, [ebp - 0x37c]
push ebx
push 1
push 0x42682c
push ebx
call fcn.004033b0
dec eax
push eax
call fcn.00401cd0
mov edi, 0x454f95
lea esi, [ebp - 0x1dd8]
call fcn.00401940
jmp 0x408681
mov edi, 0x454f95
lea esi, [ebp - 0x37c]
call fcn.00401940
lea eax, [ebp - 0x1dd8]
push eax
push 0x454f95
call fcn.004094c0
mov edi, 0x454f95
lea esi, [ebp - 0x1dd8]
call fcn.00401940
mov eax, esi
push eax
push edi
call fcn.00408eb0
mov edi, 0x454f95
lea esi, [ebp - 0x1dd8]
call fcn.00401940
push edi
call fcn.0040bb00
test al, al
jne 0x408710
push 0xff
lea eax, [ebp - 0x37c]
push eax
push 1
movzx ebx, byte [0x454f95]
inc ebx
push ebx
call fcn.00404fd0
mov edi, 0x42699e
lea esi, [ebp - 0x37c]
call fcn.00401940
mov edi, esi
mov esi, 0x42682e
call fcn.00401940
mov eax, 0
mov dword [ebp - 0x580], eax
jmp 0x406a62
mov eax, 0
mov dword [ebp - 0x580], eax
mov edi, 0x42699e
mov esi, 0x42682f
call fcn.00401940
lea edi, [ebp - 0x37c]
mov esi, 0x426830
call fcn.00401940
jmp 0x4069e0
mov dword [ebp - 0x580], 0x3e7
cmp dword [ebp - 0x580], 0
je 0x408806
push 0xff
lea eax, [ebp - 0x37c]
mov byte [eax], 0
push eax
push dword [ebp - 0x580]
push 0
call fcn.00403a00
add esp, 8
mov esi, 0x426831
lea edi, [ebp - 0x20d8]
call fcn.00401b30
lea esi, [ebp - 0x37c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1fd8]
call fcn.00401b30
mov esi, 0x42683e
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1ed8]
call fcn.00401b30
mov esi, 0x426840
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1dd8]
call fcn.00401b30
mov esi, 0x426842
call fcn.00401af0
lea edi, [ebp - 0x37c]
lea esi, [ebp - 0x1dd8]
call fcn.00401940
cmp dword [0x454e7e], 0
jne 0x408806
push 0
push 0x42699f
lea eax, [ebp - 0x37b]
push eax
push 0
call sub.user32.dll_MessageBoxA
jmp 0x4069e0
mov esi, 0x42699e
lea edi, [ebp - 0x1dd8]
call fcn.00401b30
mov esi, 0x426844
call fcn.00401af0
mov edi, 0x42699e
lea esi, [ebp - 0x1dd8]
call fcn.00401940
mov eax, esi
push eax
push edi
call fcn.004094c0
mov edi, 0x42699e
lea esi, [ebp - 0x1dd8]
call fcn.00401940
push 0x426846
push edi
call fcn.004033b0
cmp eax, 1
je 0x408872
push 0x42684b
push 0x42699e
call fcn.004033b0
cmp eax, 1
jne 0x408877
jmp 0x4069e0
mov dword [ebp - 0x580], 1
movzx eax, byte [0x42699e]
test eax, eax
jl 0x408892
cmp dword [ebp - 0x580], eax
jg 0x4088c0
mov eax, dword [ebp - 0x580]
cmp byte [eax + 0x42699e], 0
jne 0x4088b8
push 0xff
push 0x42699e
push eax
push 1
call fcn.00404fd0
jmp 0x4088be
inc dword [ebp - 0x580]
jmp 0x408881
lea eax, [ebp - 0x1dd8]
push eax
push 0x42699e
call fcn.00404f50
lea esi, [ebp - 0x1dd8]
mov edi, 0x426850
call fcn.004065d0
test al, al
je 0x4088ea
jmp 0x4069e0
push 0x426851
push 0x42699e
call fcn.004033b0
cmp eax, 1
jne 0x408937
push 0xff
push 0x42699e
call fcn.00408fa0
lea eax, [ebp - 0x1ed8]
push eax
push 0x42699e
call fcn.00404f50
lea esi, [ebp - 0x1ed8]
mov edi, 0x42685e
call fcn.004065d0
test al, al
je 0x408937
jmp 0x4069e0
mov esi, 0x42699e
lea edi, [ebp - 0x1fd8]
call fcn.00401b30
mov esi, 0x42685f
call fcn.00401af0
mov edi, 0x42699e
lea esi, [ebp - 0x1fd8]
call fcn.00401940
push 0x43074c
push 0x10
push 0x426861
push 0
call fcn.00403350
push 0x42699e
push 0
call fcn.00402790
push 1
push 0x426871
push 0
call fcn.00403350
mov al, byte [0x454e8a]
push eax
push 0
call fcn.00408f40
call fcn.00403330
push 0x43074c
push 0x19
push 0x426872
push 0
call fcn.00403350
lea eax, [ebp - 0x1ee8]
push eax
push dword [0x454e86]
call fcn.00401b50
lea ebx, [ebp - 0x1ee8]
push ebx
push 0
call fcn.00402790
push 9
push 0x42688b
push 0
call fcn.00403350
push 0x42699e
push 0
call fcn.00402790
call fcn.00403330
lea eax, [ebp - 0x1fd8]
push eax
push 0x42699e
call fcn.00408eb0
mov edi, 0x42699e
lea esi, [ebp - 0x1fd8]
call fcn.00401940
push dword [ebp + 8]
lea eax, [ebp - 0x5d0]
push eax
push 0
push 0
push dword [0x454e86]
push 0
push 0
push 0
push 0x42699f
push 0
call sub.kernel32.dll_CreateProcessA
test al, al
jne 0x408b13
cmp dword [0x454e7e], 1
jg 0x408b13
push 0x43074c
push 0x21
push 0x426894
push 0
call fcn.00403350
lea eax, [ebp - 0x1ee8]
push eax
push dword [0x454e7e]
call fcn.00401b50
lea ebx, [ebp - 0x1ee8]
push ebx
push 0
call fcn.00402790
push 9
push 0x4268b5
push 0
call fcn.00403350
push 0x42699e
push 0
call fcn.00402790
push 1
push 0x4268be
push 0
call fcn.00403350
call fcn.00403330
push 0
push 0x4268bf
push dword [ebp - 0x10c]
push 0
call sub.user32.dll_MessageBoxA
lea esi, [ebp - 0x108]
lea edi, [ebp - 0x1fd8]
call fcn.00401b30
mov esi, 0x4268d4
call fcn.00401af0
lea edi, [ebp - 0x108]
lea esi, [ebp - 0x1fd8]
call fcn.00401940
push 0
lea eax, [ebp - 0x107]
push eax
push 0x42699f
push 0
call sub.user32.dll_MessageBoxA
cmp dword [0x454e7e], 0
jne 0x408b13
push 0
call fcn.00404e20
push 0x43074c
push 0x17
push 0x4268d6
push 0
call fcn.00403350
lea eax, [ebp - 0x1ee8]
push eax
mov edi, dword [ebp + 8]
push dword [edi]
call fcn.00401b50
lea ebx, [ebp - 0x1ee8]
push ebx
push 0
call fcn.00402790
push 1
push 0x4268ed
push 0
call fcn.00403350
push 0x42699e
push 0
call fcn.00402790
call fcn.00403330
mov al, byte [0x454e7d]
test al, al
je 0x408c01
push 0x43074c
push 0x1a
push 0x4268ee
push 0
call fcn.00403350
lea ebx, [ebp - 0x1ee8]
push ebx
mov eax, dword [ebp + 8]
push dword [eax]
call fcn.00401b50
lea ecx, [ebp - 0x1ee8]
push ecx
push 0
call fcn.00402790
push 1
push 0x426908
push 0
call fcn.00403350
push 0x42699e
push 0
call fcn.00402790
call fcn.00403330
push dword [ebp + 8]
call fcn.00408c70
push 0x43074c
push 0x1e
push 0x426909
push 0
call fcn.00403350
lea eax, [ebp - 0x1ee8]
push eax
mov edi, dword [ebp + 8]
push dword [edi]
call fcn.00401b50
lea ebx, [ebp - 0x1ee8]
push ebx
push 0
call fcn.00402790
call fcn.00403330
mov al, byte [0x426944]
test al, al
je 0x408c0c
jmp 0x408c63
jmp 0x4069e0
lea eax, [ebp - 0x27c]
push eax
call fcn.00401d90
call fcn.00402770
test eax, eax
je 0x408c26
jmp 0x408c4b
mov esi, 0x426927
lea edi, [ebp - 0x1fd8]
call fcn.00401b30
lea esi, [ebp - 0x108]
call fcn.00401af0
mov eax, edi
push eax
call fcn.004032a0
push 0x43074c
push 0xd
push 0x426937
push 0
call fcn.00403350
call fcn.00403330
pop edx
pop ecx
pop ebx
leave
ret 8