Function at 0x4026a3
Capabilities:
Create process on windows
Get common file path
Terminate process

Disassembly:
mov eax, 0x44d5b2
call fcn.004291c0
sub esp, 0x6f0
push ebx
push esi
push edi
lea ecx, [ebp - 0x70]
call fcn.0040cb70
xor ebx, ebx
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], ebx
call fcn.0040cb70
cmp dword [ebp + 8], ebx
mov byte [ebp - 4], 1
je 0x4026ea
push ebx
push 0x3e9
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov esi, 0x472498
mov ecx, esi
call fcn.00404992
test al, al
mov edi, 0x3e8
je 0x402743
push dword [ebp + 8]
call fcn.004020e2
test al, al
mov eax, dword [0x4726e0]
pop ecx
jne 0x402738
cmp eax, ebx
je 0x402722
push str.Password_is_incorrect._r_n
push eax
call fcn.00429235
pop ecx
pop ecx
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x402c0e
cmp eax, ebx
je 0x402791
push str.Password_verified..._r_n
jmp 0x402751
mov eax, dword [0x4726e0]
cmp eax, ebx
je 0x402791
push str.Not_encrypted._r_n
push eax
call fcn.00429235
cmp dword [0x4726e0], ebx
pop ecx
pop ecx
je 0x402791
push edi
call fcn.0042929a
pop ecx
mov dword [ebp - 0x14], eax
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push dword [ebp - 0x14]
push str.Current_working_directory:__s_r_n
push dword [0x4726e0]
call fcn.00429235
push dword [ebp - 0x14]
call fcn.00428ddf
add esp, 0x10
lea ecx, [ebp - 0x40]
call fcn.00406110
lea ecx, [ebp - 0x3cc]
mov byte [ebp - 4], 2
call fcn.00408bb0
lea eax, [ebp - 0x3cc]
mov ecx, esi
push eax
mov byte [ebp - 4], 3
call fcn.004049b4
lea ecx, [ebp - 0x3cc]
call fcn.00408cf0
test eax, eax
je 0x4029ed
lea ecx, [ebp - 0x3cc]
call fcn.004097d0
push eax
lea ecx, [ebp - 0x40]
call fcn.00405cb0
lea ecx, [ebp - 0xfc]
call fcn.00406110
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0xfc]
push eax
mov byte [ebp - 4], 4
call fcn.00406940
lea ecx, [ebp - 0x40]
call fcn.00405ba0
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0xfc]
push eax
call fcn.00406e30
test al, al
mov edi, 0x45c8fc
jne 0x40283d
push edi
lea ecx, [ebp - 0xfc]
call fcn.00406c20
test al, al
jne 0x40283d
push 0x45c8f8
push edi
lea ecx, [ebp - 0x40]
call fcn.00406710
push 0x2f
push 0x5c
lea ecx, [ebp - 0x40]
call fcn.00405590
push 0x5c
push 0x2f
lea ecx, [ebp - 0x40]
call fcn.00405590
mov dword [ebp - 0x14], ebx
push edi
lea ecx, [ebp - 0x40]
call fcn.00406c20
test al, al
je 0x40287f
push 0x45c8f8
push edi
lea ecx, [ebp - 0x40]
call fcn.00406710
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x3e8
jle 0x402858
cmp dword [0x4726e0], ebx
je 0x4028a3
lea ecx, [ebp - 0x40]
call fcn.00446f00
push eax
push str.unzipDir____s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
push str.Debug
mov ecx, esi
call fcn.0040488a
test eax, eax
setne al
cmp al, bl
jne 0x4029dc
cmp dword [0x4726e0], ebx
je 0x4028e0
lea ecx, [ebp - 0x40]
call fcn.00446f00
push eax
push str.Check_create_extract_dir:___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
lea eax, [ebp - 0x58]
push ebx
push eax
lea ecx, [ebp - 0x40]
call fcn.00446f00
push eax
call fcn.0040eeb0
add esp, 0xc
cmp al, bl
jne 0x4029a4
cmp dword [0x4726e0], ebx
je 0x402922
lea ecx, [ebp - 0x40]
call fcn.00446f00
push eax
push str.failed_to_ensure_dir_exists:___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
lea ecx, [ebp - 0x234]
call fcn.00408bb0
push str.Failed_to_ensure_dir_exists:
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 5
call fcn.00409700
lea ecx, [ebp - 0x40]
call fcn.00446f00
push eax
lea ecx, [ebp - 0x234]
call fcn.00409700
push ebx
push 0x45c4d8
lea ecx, [ebp - 0x234]
call fcn.00409030
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 4
call fcn.00408c80
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 3
call fcn.00406400
jmp 0x402bf3
cmp dword [0x4726e0], ebx
je 0x4029dc
lea ecx, [ebp - 0x58]
call fcn.00428a90
test eax, eax
je 0x4029dc
push ebx
lea ecx, [ebp - 0x58]
call fcn.0040cbd0
mov ecx, eax
call fcn.00446f00
push eax
push str.created_unzip_dir:___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 3
call fcn.00406400
jmp 0x402a56
mov eax, dword [0x4726e0]
cmp eax, ebx
je 0x402a03
push str.Selecting_temp_dir_for_unzipping..._r_n
push eax
call fcn.00429235
pop ecx
pop ecx
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x58]
push eax
push dword [ebp + 8]
call fcn.0040231b
add esp, 0xc
test al, al
je 0x402bf3
cmp dword [0x4726e0], ebx
je 0x402a56
lea ecx, [ebp - 0x58]
call fcn.00428a90
test eax, eax
je 0x402a56
push ebx
lea ecx, [ebp - 0x58]
call fcn.0040cbd0
mov ecx, eax
call fcn.00446f00
push eax
push str.created_unzip_dir:___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
mov edi, 0x45c874
lea ecx, [ebp - 0x40]
push edi
call fcn.00405e40
test al, al
je 0x402a76
push 0x472714
push edi
lea ecx, [ebp - 0x40]
call fcn.004065f0
cmp dword [0x4726e0], ebx
je 0x402a9a
lea ecx, [ebp - 0x40]
call fcn.00446f00
push eax
push str.Final_unzip_dir:___s_..._r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
push str.Debug
mov ecx, esi
call fcn.0040488a
test eax, eax
lea ecx, [ebp - 0x674]
setne byte [ebp - 0xd]
call fcn.00408bb0
lea eax, [ebp - 0x674]
mov byte [ebp - 4], 6
push eax
call fcn.00409fe0
pop ecx
lea ecx, [ebp - 0x40]
call fcn.0040ce50
test eax, eax
je 0x402c3b
lea ecx, [ebp - 0x234]
call fcn.00408bb0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 7
call fcn.00446f00
push eax
lea ecx, [ebp - 0x234]
call fcn.00409700
cmp dword [0x4726e0], ebx
je 0x402b22
lea ecx, [ebp - 0x234]
call fcn.004097d0
push eax
push str.Setting_CWD___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
cmp byte [ebp - 0xd], bl
jne 0x402c2c
lea eax, [ebp - 0x234]
push eax
call fcn.0040b4f0
movzx eax, al
cmp eax, ebx
pop ecx
jne 0x402c2c
cmp dword [0x4726e0], ebx
je 0x402b67
lea ecx, [ebp - 0x40]
call fcn.00446f00
push eax
push str.failed_to_set_current_dir:___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
lea ecx, [ebp - 0x344]
call fcn.00408bb0
push str.Failed_to_set_current_dir:
lea ecx, [ebp - 0x344]
mov byte [ebp - 4], 8
call fcn.00409700
lea ecx, [ebp - 0x40]
call fcn.00446f00
push eax
lea ecx, [ebp - 0x344]
call fcn.00409700
push ebx
push 0x45c4d8
lea ecx, [ebp - 0x344]
call fcn.00409030
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x344]
mov byte [ebp - 4], 7
call fcn.00408c80
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 6
call fcn.00408c80
lea ecx, [ebp - 0x674]
mov byte [ebp - 4], 3
call fcn.00408c80
lea ecx, [ebp - 0x3cc]
mov byte [ebp - 4], 2
call fcn.00408c80
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 1
call fcn.00406400
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], bl
call fcn.0040cb90
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.0040cb90
xor al, al
jmp 0x403474
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 6
call fcn.00408c80
push str.Cleanup
mov ecx, esi
call fcn.0040488a
test eax, eax
setne byte [ebp - 0x14]
cmp byte [ebp - 0x14], bl
je 0x402c68
mov eax, dword [0x4726e0]
cmp eax, ebx
je 0x402c68
push str.cleanup_is_requested..._r_n
push eax
call fcn.00429235
pop ecx
pop ecx
mov ecx, esi
call fcn.00404af0
test al, al
jne 0x402c8c
mov eax, dword [0x4726e0]
cmp eax, ebx
je 0x402c89
push str.WaitForSetup_if_false__therefore_cannot_cleanup_files._r_n
push eax
call fcn.00429235
pop ecx
pop ecx
mov byte [ebp - 0x14], bl
push str.AutoExit
mov ecx, esi
call fcn.0040488a
test eax, eax
setne al
cmp al, bl
je 0x402cba
mov eax, dword [0x4726e0]
cmp eax, ebx
je 0x402cb7
push str.AutoExit_if_true__therefore_cannot_cleanup_files._r_n
push eax
call fcn.00429235
pop ecx
pop ecx
mov byte [ebp - 0x14], bl
lea ecx, [ebp - 0x1ac]
call fcn.00406110
push dword [ebp - 0x14]
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x1ac]
push eax
call fcn.00446f00
push eax
push dword [ebp + 8]
call fcn.00401ecc
mov byte [ebp - 0x15], al
mov eax, dword [0x47270c]
add esp, 0x14
cmp eax, ebx
mov edi, 0x3f0
je 0x402d32
cmp byte [ebp - 0x15], bl
je 0x4033e5
push str.Finished_unzipping.
push 0x3f8
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push edi
push dword [0x47270c]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp byte [ebp - 0x15], bl
je 0x4033e5
push str.Debug
mov ecx, esi
call fcn.0040488a
test eax, eax
mov eax, dword [0x4726e0]
setne byte [ebp - 0xd]
cmp eax, ebx
je 0x402d63
push str.Unzip_complete..._r_n
push eax
call fcn.00429235
pop ecx
pop ecx
lea ecx, [ebp - 0x454]
call fcn.00408bb0
lea eax, [ebp - 0x454]
mov ecx, esi
push eax
mov byte [ebp - 4], 0xa
call fcn.00404a8a
lea ecx, [ebp - 0x454]
call fcn.00408cf0
test eax, eax
je 0x402db6
cmp dword [0x4726e0], ebx
je 0x402db6
lea ecx, [ebp - 0x454]
call fcn.004097d0
push eax
push str.setup_filename:___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
cmp byte [ebp - 0xd], bl
jne 0x4033ca
lea ecx, [ebp - 0x454]
call fcn.00408cf0
test eax, eax
je 0x4033ca
lea ecx, [ebp - 0x98]
call fcn.00406110
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0xb
call fcn.004097d0
push eax
lea ecx, [ebp - 0x98]
call fcn.00405cb0
lea ecx, [ebp - 0x5ec]
call fcn.00408bb0
lea eax, [ebp - 0x5ec]
mov ecx, esi
push eax
mov byte [ebp - 4], 0xc
call fcn.00404aa4
lea ecx, [ebp - 0x5ec]
mov dword [ebp - 0x14], ebx
call fcn.00408cf0
test eax, eax
je 0x402e4f
lea ecx, [ebp - 0x5ec]
call fcn.004093b0
mov dword [ebp - 0x14], eax
mov eax, dword [0x4726e0]
cmp eax, ebx
je 0x402e4f
push dword [ebp - 0x14]
push str.setup_args:___s__r_n
push eax
call fcn.00429235
add esp, 0xc
push 0x2f
push 0x5c
lea ecx, [ebp - 0x98]
call fcn.00405590
push 0x45c714
push 0x45c710
lea ecx, [ebp - 0x98]
call fcn.00406710
push 0x5c
push 0x2f
lea ecx, [ebp - 0x98]
call fcn.00405590
cmp dword [0x4726e0], ebx
je 0x402ec5
lea ecx, [ebp - 0x40]
call fcn.00446f00
push eax
push str.working_dir:___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
lea ecx, [ebp - 0x98]
call fcn.00446f00
push eax
push str.running_exe:___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
push edi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp eax, ebx
je 0x402ee2
push ebx
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x4dc]
call fcn.00408bb0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 0xd
call fcn.00409700
push str.shell
lea ecx, [ebp - 0x98]
call fcn.00406ed0
test al, al
je 0x40305c
mov ecx, esi
call fcn.00404af0
test al, al
lea ecx, [ebp - 0x4dc]
je 0x402f31
call fcn.004093b0
push eax
push ebx
jmp 0x402f39
call fcn.004093b0
push eax
push 1
call fcn.0040245a
pop ecx
mov byte [ebp - 0xd], al
pop ecx
lea ecx, [ebp - 0x2bc]
call fcn.00408bb0
lea eax, [ebp - 0x2bc]
mov ecx, esi
push eax
push str.AutoExit
mov byte [ebp - 4], 0xe
call fcn.00404871
push 0x45c254
lea ecx, [ebp - 0x2bc]
call fcn.00409a60
test al, al
je 0x402f7f
push ebx
call fcn.0042936a
lea eax, [ebp - 0x70]
push eax
call fcn.004024ee
cmp byte [ebp - 0xd], bl
pop ecx
jne 0x40304d
cmp dword [0x4726e0], ebx
je 0x402fb9
lea ecx, [ebp - 0x98]
call fcn.00446f00
push eax
push str.failed_to_run:___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
lea ecx, [ebp - 0x184]
call fcn.00408bb0
push str.Failed_to_run
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0xf
call fcn.00409700
lea ecx, [ebp - 0x98]
call fcn.00446f00
push eax
lea ecx, [ebp - 0x184]
call fcn.00409700
push str.__working_dir_
lea ecx, [ebp - 0x184]
call fcn.00409700
lea ecx, [ebp - 0x40]
call fcn.00446f00
push eax
lea ecx, [ebp - 0x184]
call fcn.00409700
push str.__check_to_see_if_this_file_is_in_the_EXE_
lea ecx, [ebp - 0x184]
call fcn.00409700
push ebx
push 0x45c4d8
lea ecx, [ebp - 0x184]
call fcn.00409030
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0xe
call fcn.00408c80
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2bc]
jmp 0x403396
lea ecx, [ebp - 0x6fc]
call fcn.00408bb0
lea ecx, [ebp - 0x564]
mov byte [ebp - 4], 0x10
call fcn.00408bb0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x11
call fcn.00446f00
push eax
lea ecx, [ebp - 0x6fc]
call fcn.00409700
lea ecx, [ebp - 0x40]
call fcn.00446f00
push eax
lea ecx, [ebp - 0x564]
call fcn.00409700
lea ecx, [ebp - 0x2bc]
call fcn.00408bb0
lea eax, [ebp - 0x2bc]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x6fc]
push eax
lea eax, [ebp - 0x564]
push eax
call fcn.0040bbd0
add esp, 0xc
cmp dword [0x4726e0], ebx
je 0x40314a
push 0x3e8
call fcn.0042929a
pop ecx
mov edi, eax
push edi
push 0x3e8
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push edi
push str.Current_working_directory:__s_r_n
push dword [0x4726e0]
call fcn.00429235
push edi
call fcn.00428ddf
add esp, 0x10
lea ecx, [ebp - 0x2bc]
call fcn.004097d0
push eax
push str.full_path_to_auto_run_EXE:___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
lea ecx, [ebp - 0x564]
call fcn.004097d0
push eax
push str.unzipDir:___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
push 0x3c
lea eax, [ebp - 0xd4]
pop edi
push edi
push ebx
push eax
call fcn.00428c60
add esp, 0xc
lea ecx, [ebp - 0x2bc]
mov dword [ebp - 0xd4], edi
mov dword [ebp - 0xd0], 0x40
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], ebx
call fcn.00409030
lea ecx, [ebp - 0x4dc]
mov dword [ebp - 0xc4], eax
call fcn.00409030
lea ecx, [ebp - 0x564]
mov dword [ebp - 0xc0], eax
call fcn.00409030
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0xd4]
push eax
mov dword [ebp - 0xb8], 5
mov dword [ebp - 0xb4], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
cmp eax, ebx
je 0x4032a9
lea ecx, [ebp - 0x344]
call fcn.00408bb0
lea eax, [ebp - 0x344]
mov ecx, esi
push eax
push str.AutoExit
mov byte [ebp - 4], 0x13
call fcn.00404871
push 0x45c254
lea ecx, [ebp - 0x344]
call fcn.00409a60
test al, al
je 0x40320e
push ebx
call fcn.0042936a
mov ecx, esi
call fcn.00404af0
test al, al
mov eax, dword [0x4726e0]
je 0x403282
cmp eax, ebx
je 0x40322f
push str.waiting_for_setup_EXE_to_complete..._r_n
push eax
call fcn.00429235
pop ecx
pop ecx
push 0xffffffffffffffff
push dword [ebp - 0x9c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp + 8]
mov dword [ebp + 8], ebx
push eax
push dword [ebp - 0x9c]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x403276
mov eax, dword [0x4726e0]
cmp eax, ebx
je 0x40326e
push dword [ebp + 8]
push str.GetExitCodeProcess:_exitCode___d_r_n
push eax
call fcn.00429235
add esp, 0xc
mov eax, dword [ebp + 8]
mov dword [0x4726ec], eax
lea eax, [ebp - 0x70]
push eax
call fcn.004024ee
pop ecx
jmp 0x40329a
cmp eax, ebx
je 0x403293
push str.NOT_waiting_for_setup_EXE_to_complete..._r_n
push eax
call fcn.00429235
pop ecx
pop ecx
mov byte [0x472704], 1
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x344]
jmp 0x403369
lea eax, [ebp - 0x70]
push eax
call fcn.004024ee
cmp dword [0x4726e0], ebx
pop ecx
je 0x4032da
lea ecx, [ebp - 0x98]
call fcn.00446f00
push eax
push str.failed_to_run:___s__r_n
push dword [0x4726e0]
call fcn.00429235
add esp, 0xc
lea ecx, [ebp - 0x184]
call fcn.00408bb0
push str.Failed_to_run
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x14
call fcn.00409700
lea ecx, [ebp - 0x98]
call fcn.00446f00
push eax
lea ecx, [ebp - 0x184]
call fcn.00409700
push str.__working_dir_
lea ecx, [ebp - 0x184]
call fcn.00409700
lea ecx, [ebp - 0x40]
call fcn.00446f00
push eax
lea ecx, [ebp - 0x184]
call fcn.00409700
push str.__check_to_see_if_this_file_is_in_the_EXE_
lea ecx, [ebp - 0x184]
call fcn.00409700
push ebx
push 0x45c4d8
lea ecx, [ebp - 0x184]
call fcn.00409030
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x184]
call fcn.00408c80
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x11
call fcn.00408c80
lea ecx, [ebp - 0x564]
mov byte [ebp - 4], 0x10
call fcn.00408c80
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x6fc]
call fcn.00408c80
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 0xc
call fcn.00408c80
lea ecx, [ebp - 0x5ec]
mov byte [ebp - 4], 0xb
call fcn.00408c80
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0xa
call fcn.00406400
jmp 0x4033d4
lea eax, [ebp - 0x70]
push eax
call fcn.004024ee
pop ecx
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 9
call fcn.00408c80
jmp 0x40340a
lea eax, [ebp - 0x70]
push eax
call fcn.004024ee
pop ecx
push ebx
push str.Error
lea ecx, [ebp - 0x1ac]
call fcn.00446f00
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
lea eax, [ebp - 0x674]
push eax
call fcn.0040b4f0
lea eax, [ebp - 0x58]
push eax
call fcn.004024ee
pop ecx
mov byte [ebp - 4], 6
pop ecx
lea ecx, [ebp - 0x1ac]
call fcn.00406400
lea ecx, [ebp - 0x674]
mov byte [ebp - 4], 3
call fcn.00408c80
lea ecx, [ebp - 0x3cc]
mov byte [ebp - 4], 2
call fcn.00408c80
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 1
call fcn.00406400
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], bl
call fcn.0040cb90
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.0040cb90
mov al, byte [ebp - 0x15]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret