Function at 0x401220
Capabilities:
Accept command line arguments
Copy file
Create process on windows
Create thread
Delete file
Resolve function by parsing pe exports
Set registry value
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x8dc
mov eax, dword [0x42f370]
xor eax, esp
mov dword [esp + 0x8d8], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
lea eax, [esp + 0x48]
xor ebx, ebx
mov dword [esp + 0x4c], ebx
push eax
mov dword [esp + 0x54], edi
mov dword [esp + 0x4c], 8
mov dword [esp + 0x50], 0x4101
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push ebx
push str.reg_add__HKEY_CURRENT_USERSoftwareAdobeAcrobat_Reader10.0Privileged___v_bProtectedMode__t_REG_DWORD__d_0__f
call dword [sym.imp.KERNEL32.dll_WinExec]
lea ecx, [esp + 0x3c]
push ecx
mov dword [esp + 0x40], ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
push ebx
push ebx
push 3
push ebx
push 7
mov dword [esp + 0x2c], eax
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov eax, dword [eax]
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4012d0
lea edx, [esp + 0x40]
push edx
push ebx
lea eax, [esp + 0x6c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
push ecx
push edx
push str._08x_08x
mov edx, 0x4321c0
call fcn.00401000
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
add esp, 0xc
push 0x104
push 0x431d88
push ebx
call esi
push 0x5c
push 0x431d88
call fcn.0041252d
add esp, 8
cmp eax, ebx
je 0x401315
mov word [eax], bx
call fcn.0040c590
call fcn.0040c660
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
cmp dword [esp + 0x3c], 1
jle 0x401e94
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 4]
push ecx
push 0x104
push 0x431f90
call fcn.00411bf4
add esp, 0xc
push 0x431f90
call fcn.004044b0
add esp, 4
test eax, eax
jne 0x401363
push 1
call fcn.00411846
call fcn.0040f410
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
push 0x64
push 0x4315d0
push 0x67
push edi
call esi
push 0x64
push 0x4316a0
push 0x6d
push edi
call esi
call fcn.0040cb60
test eax, eax
jne 0x401402
push str._tWinMain__:_IgAgent.dll_version_is_too_old.
call fcn.0040c4d0
add esp, 4
push str.MIXIN_TITLE_CAPTION_INFO
push 0x4307e4
mov ecx, 0x433620
call fcn.0040b560
push str.MIXIN_TITLE_VER_NOT_SUPPORT
push 0x4307c8
mov ecx, 0x433620
call fcn.0040b560
mov ecx, dword [0x4307e8]
mov eax, 8
add esp, 0x10
cmp dword [0x4307fc], eax
jae 0x4013df
mov ecx, 0x4307e8
cmp dword [0x4307e0], eax
mov eax, dword [0x4307cc]
jae 0x4013f1
mov eax, 0x4307cc
push 0x10
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
call fcn.00411846
call fcn.0040cb20
test eax, eax
je 0x4014a4
push 0x4315d0
push 0x4316a0
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowExW]
mov esi, eax
cmp esi, ebx
je 0x401430
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x401490
push str.MIXIN_TITLE_CAPTION_INFO
push 0x4307e4
mov ecx, 0x433620
call fcn.0040b560
push str.MIXIN_TITLE_MUTEX
push 0x4307c8
mov ecx, 0x433620
call fcn.0040b560
mov ecx, dword [0x4307e8]
mov eax, 8
add esp, 0x10
cmp dword [0x4307fc], eax
jae 0x401473
mov ecx, 0x4307e8
cmp dword [0x4307e0], eax
mov eax, dword [0x4307cc]
jae 0x401485
mov eax, 0x4307cc
push 0x40
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
push str._tWinMain__:_Application_is_running__hWnd:_0x_p.
call fcn.0040c4d0
add esp, 8
push ebx
call fcn.00411846
push str.MXTERM
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
push eax
push str.SetMutex_0x_p_
mov dword [0x43360c], eax
call fcn.0040c420
add esp, 8
mov eax, edi
call fcn.00402080
mov eax, edi
call fcn.00402110
test eax, eax
je 0x401df5
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x18]
push eax
mov eax, 0x431f90
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], ebx
call fcn.004035f0
add esp, 8
test eax, eax
jne 0x40151d
mov ecx, dword [0x4315c8]
push 0x10
push 0x4254c0
push 0x42562c
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
call fcn.00411846
cmp dword [esp + 0x10], 0x7f4
je 0x401547
mov edx, dword [0x4315c8]
push 0x10
push 0x4254c0
push str.penc
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
call fcn.00411846
mov eax, dword [esp + 0x14]
push 0x7f4
push eax
push 0x4325d8
call fcn.00413e60
add esp, 0xc
push 0x425648
push 0x4325e8
call fcn.00411ba4
add esp, 8
test eax, eax
je 0x4016f0
mov ecx, dword [0x4315cc]
push ebx
push 0x402be0
push ebx
push 0x81
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x401df5
xor eax, eax
lea edi, [esp + 0x88]
mov edx, 0x4323c8
mov byte [esp + 0x88], bl
mov dword [esp + 0x89], eax
mov dword [esp + 0x8d], eax
mov dword [esp + 0x91], eax
mov dword [esp + 0x95], eax
mov dword [esp + 0x99], eax
mov dword [esp + 0x9d], eax
mov dword [esp + 0xa1], eax
mov dword [esp + 0xa5], eax
call fcn.0040c030
mov edx, edi
push 0x4325e8
push edx
call fcn.00411ba4
add esp, 8
test eax, eax
je 0x4016f0
cmp dword [0x432620], ebx
je 0x401672
push 0x3ff
lea eax, [esp + 0xd5]
push ebx
push eax
mov dword [esp + 0x24], ebx
mov byte [esp + 0xdc], bl
call fcn.004145e0
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0xd4]
push ecx
push 1
mov edi, 0xfffffffc
call fcn.00404fb0
add esp, 0xc
lea edx, [esp + 0x18]
lea ecx, [esp + 0xd0]
call fcn.00405270
test eax, eax
jne 0x401672
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x40166b
push eax
call fcn.00410f70
add esp, 4
push 1
call fcn.00411846
push str.MIXIN_TITLE_CAPTION_ERROR
push 0x4307e4
mov ecx, 0x433620
call fcn.0040b560
push str.MIXIN_TITLE_PASSWORD_WRONG
push 0x4307c8
mov ecx, 0x433620
call fcn.0040b560
mov ecx, dword [0x4307e8]
mov eax, 8
add esp, 0x10
cmp dword [0x4307fc], eax
jae 0x4016b5
mov ecx, 0x4307e8
cmp dword [0x4307e0], eax
mov eax, dword [0x4307cc]
jae 0x4016c7
mov eax, 0x4307cc
mov edx, dword [0x4315c8]
push 0x10
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4016e9
push eax
call fcn.00410f70
add esp, 4
push 1
call fcn.00411846
cmp dword [0x432628], ebx
je 0x401869
xor eax, eax
lea esi, [esp + 0x88]
mov byte [esp + 0x88], bl
mov dword [esp + 0x89], eax
mov dword [esp + 0x8d], eax
mov dword [esp + 0x91], eax
mov dword [esp + 0x95], eax
mov dword [esp + 0x99], eax
mov dword [esp + 0x9d], eax
mov dword [esp + 0xa1], eax
mov dword [esp + 0xa5], eax
call fcn.0040b350
mov ecx, 0x432630
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401770
cmp dl, bl
je 0x40176c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401770
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x401750
xor eax, eax
jmp 0x401775
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x401869
cmp dword [0x432620], ebx
je 0x4017eb
push 0x3ff
lea eax, [esp + 0xd5]
push ebx
push eax
mov dword [esp + 0x24], ebx
mov byte [esp + 0xdc], bl
call fcn.004145e0
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0xd4]
push ecx
push 1
mov edi, 0xfffffffb
call fcn.00404fb0
add esp, 0xc
lea edx, [esp + 0x18]
lea ecx, [esp + 0xd0]
call fcn.00405270
test eax, eax
jne 0x4017eb
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x4017e4
push eax
call fcn.00410f70
add esp, 4
push 1
call fcn.00411846
push str.MIXIN_TITLE_CAPTION_ERROR
push 0x4307e4
mov ecx, 0x433620
call fcn.0040b560
push str.MIXIN_TITLE_BINDID_WRONG
push 0x4307c8
mov ecx, 0x433620
call fcn.0040b560
mov ecx, dword [0x4307e8]
mov eax, 8
add esp, 0x10
cmp dword [0x4307fc], eax
jae 0x40182e
mov ecx, 0x4307e8
cmp dword [0x4307e0], eax
mov eax, dword [0x4307cc]
jae 0x401840
mov eax, 0x4307cc
mov edx, dword [0x4315c8]
push 0x10
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x401862
push eax
call fcn.00410f70
add esp, 4
push 1
call fcn.00411846
mov esi, dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
or edi, 0xffffffff
cmp dword [0x432620], ebx
mov dword [esp + 0x30], edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x38], edi
je 0x401c27
push 0x3ff
lea eax, [esp + 0xd5]
push ebx
push eax
mov dword [esp + 0x1c], ebx
mov byte [esp + 0xdc], bl
call fcn.004145e0
add esp, 0xc
push 1
lea ecx, [esp + 0xd4]
push ecx
push 2
xor edi, edi
call fcn.00404fb0
add esp, 0xc
lea edx, [esp + 0x10]
lea ecx, [esp + 0xd0]
call fcn.00405270
test eax, eax
jne 0x401904
push 0xffffffffffffffff
lea edx, [esp + 0xd4]
push edx
push 1
lea edi, [eax - 2]
call fcn.00404fb0
mov eax, dword [esp + 0x20]
add esp, 0xc
cmp eax, ebx
je 0x4018fd
push eax
call fcn.00410f70
add esp, 4
push 1
call fcn.00411846
push 0x31
lea eax, [esp + 0x8d]
push ebx
push eax
mov byte [esp + 0x94], bl
call fcn.004145e0
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0x8c]
push 0x4256d8
push ecx
call fcn.00411287
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x44]
add esp, 0xc
push edx
mov ebx, str.verify
call fcn.00407800
mov ecx, dword [0x432dcc]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*4]
mov edi, ecx
sub edi, eax
mov eax, 0xa57eb503
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x63
mov edx, ecx
sub edx, eax
add edi, 1
imul edi, edx
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xb
sub edi, eax
add esp, 4
add edi, ecx
push edi
lea ecx, [esp + 0x8c]
push 0x4256d8
push ecx
call fcn.00411287
add esp, 0xc
cmp edi, dword [esp + 0x38]
mov dword [esp + 0x10], 0
je 0x401a89
push 0xffffffffffffffff
lea edx, [esp + 0xd4]
push edx
push 1
mov edi, 0xfffffffe
call fcn.00404fb0
add esp, 0xc
lea edx, [esp + 0x10]
lea ecx, [esp + 0xd0]
call fcn.00405270
test eax, eax
jne 0x401a0c
mov eax, dword [esp + 0x14]
test eax, eax
je 0x401a05
push eax
call fcn.00410f70
add esp, 4
push 1
call fcn.00411846
push str.MIXIN_TITLE_CAPTION_ERROR
push 0x4307e4
mov ecx, 0x433620
call fcn.0040b560
push str.MIXIN_TITLE_CONN_FAILED
push 0x4307c8
mov ecx, 0x433620
call fcn.0040b560
mov ecx, dword [0x4307e8]
mov eax, 8
add esp, 0x10
cmp dword [0x4307fc], eax
jae 0x401a4f
mov ecx, 0x4307e8
cmp dword [0x4307e0], eax
mov eax, dword [0x4307cc]
jae 0x401a61
mov eax, 0x4307cc
push 0x10
push ecx
push eax
mov eax, dword [0x4315c8]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x401a82
push eax
call fcn.00410f70
add esp, 4
push 1
call fcn.00411846
push 1
lea ecx, [esp + 0xd4]
push ecx
push 0
xor edi, edi
call fcn.00404fb0
add esp, 0xc
lea edx, [esp + 0x10]
lea ecx, [esp + 0xd0]
call fcn.00405270
test eax, eax
jne 0x401acb
mov eax, dword [esp + 0x14]
test eax, eax
je 0x401ac4
push eax
call fcn.00410f70
add esp, 4
push 1
call fcn.00411846
mov edi, dword [esp + 0x10]
lea edx, [esp + 0x30]
push edx
mov ebx, str.remaining
mov ecx, edi
call fcn.00407800
lea eax, [esp + 0x1c]
add esp, 4
push eax
mov ebx, str.not_expired
mov ecx, edi
call fcn.00407800
mov eax, dword [esp + 0x34]
xor ebx, ebx
add esp, 4
cmp dword [esp + 0x18], ebx
mov dword [0x43261c], eax
jle 0x401b56
cmp eax, ebx
jle 0x401b56
push 1
lea ecx, [esp + 0xd4]
push ecx
push 1
xor edi, edi
mov dword [esp + 0x1c], ebx
call fcn.00404fb0
add esp, 0xc
lea edx, [esp + 0x10]
lea ecx, [esp + 0xd0]
call fcn.00405270
test eax, eax
jne 0x401d19
mov eax, dword [esp + 0x14]
test eax, eax
je 0x401b4f
push eax
call fcn.00410f70
add esp, 4
push 1
call fcn.00411846
push 0xffffffffffffffff
lea edx, [esp + 0xd4]
push edx
push 1
mov edi, 0xfffffffd
mov dword [esp + 0x1c], ebx
call fcn.00404fb0
add esp, 0xc
lea edx, [esp + 0x10]
lea ecx, [esp + 0xd0]
call fcn.00405270
test eax, eax
jne 0x401b9f
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x401b98
push eax
call fcn.00410f70
add esp, 4
push 1
call fcn.00411846
push 0x431f90
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push str.MIXIN_TITLE_CAPTION_INFO
push 0x4307e4
mov ecx, 0x433620
call fcn.0040b560
push str.MIXIN_TITLE_INVALID
push 0x4307c8
mov ecx, 0x433620
call fcn.0040b560
mov ecx, dword [0x4307e8]
mov eax, 8
add esp, 0x10
cmp dword [0x4307fc], eax
jae 0x401bed
mov ecx, 0x4307e8
cmp dword [0x4307e0], eax
mov eax, dword [0x4307cc]
jae 0x401bff
mov eax, 0x4307cc
push 0x40
push ecx
push eax
mov eax, dword [0x4315c8]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x401c20
push eax
call fcn.00410f70
add esp, 4
push 1
call fcn.00411846
lea ecx, [esp + 0x20]
push ecx
mov word [esp + 0x24], bx
mov dword [esp + 0x26], ebx
mov dword [esp + 0x2a], ebx
mov dword [esp + 0x2e], ebx
mov word [esp + 0x32], bx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x24]
push eax
call esi
lea ecx, [esp + 0x30]
push ecx
push 0x43260a
call esi
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
cmp eax, edi
je 0x401c90
cmp dword [0x43261c], ebx
jne 0x401d1b
push 0x431f90
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push str.MIXIN_TITLE_CAPTION_INFO
push 0x4307e4
mov ecx, 0x433620
call fcn.0040b560
push str.MIXIN_TITLE_INVALID
push 0x4307c8
mov ecx, 0x433620
call fcn.0040b560
mov ecx, dword [0x4307e8]
mov eax, 8
add esp, 0x10
cmp dword [0x4307fc], eax
jae 0x401cde
mov ecx, 0x4307e8
cmp dword [0x4307e0], eax
mov eax, dword [0x4307cc]
jae 0x401cf0
mov eax, 0x4307cc
push 0x40
push ecx
mov ecx, dword [0x4315c8]
push eax
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x401d12
push eax
call fcn.00410f70
add esp, 4
push 1
call fcn.00411846
xor ebx, ebx
mov ecx, dword [0x4315c8]
push 5
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [0x4315c8]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
xor eax, eax
mov dword [esp + 0x56], eax
mov dword [esp + 0x5a], eax
mov dword [esp + 0x5e], eax
mov word [esp + 0x62], ax
lea eax, [esp + 0x54]
push eax
mov word [esp + 0x58], bx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 0x431d80
lea ecx, [esp + 0x58]
push ecx
call esi
push ebx
push ebx
push ebx
push 0x4037e0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, ebx
jne 0x401e0e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateThread___fail__error:__lu.
call fcn.0040c4d0
push str.MIXIN_TITLE_CAPTION_ERROR
push 0x4307e4
mov ecx, 0x433620
call fcn.0040b560
push str.MIXIN_TITLE_CREATE_THREAD_FAILED
push 0x4307c8
mov ecx, 0x433620
call fcn.0040b560
mov ecx, dword [0x4307e8]
mov eax, 8
add esp, 0x18
cmp dword [0x4307fc], eax
jae 0x401dd2
mov ecx, 0x4307e8
cmp dword [0x4307e0], eax
mov eax, dword [0x4307cc]
jae 0x401de4
mov eax, 0x4307cc
mov edx, dword [0x4315c8]
push 0x10
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x8d8]
xor ecx, esp
call fcn.004110f4
mov esp, ebp
pop ebp
ret 0x10
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x50]
push 0x6d
push eax
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov edi, dword [sym.imp.USER32.dll_GetMessageW]
push ebx
push ebx
push ebx
lea ecx, [esp + 0x78]
push ecx
mov esi, eax
call edi
test eax, eax
je 0x401e79
jmp 0x401e40
mov eax, dword [esp + 0x6c]
lea edx, [esp + 0x6c]
push edx
push esi
push eax
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x401e6b
lea ecx, [esp + 0x6c]
push ecx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea edx, [esp + 0x6c]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageW]
push ebx
push ebx
push ebx
lea eax, [esp + 0x78]
push eax
call edi
test eax, eax
jne 0x401e40
mov ecx, dword [esp + 0x8e4]
mov eax, dword [esp + 0x74]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004110f4
mov esp, ebp
pop ebp
ret 0x10
push 0x206
lea edx, [esp + 0x6de]
push ebx
push edx
mov word [esp + 0x6e4], bx
call fcn.004145e0
add esp, 0xc
push 0x104
lea eax, [esp + 0x6dc]
push eax
push ebx
call esi
push 0x206
lea ecx, [esp + 0x4d6]
push ebx
push ecx
mov word [esp + 0x4dc], bx
call fcn.004145e0
add esp, 0xc
push str..tmp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x431768
push str._s_08X_s
lea edx, [esp + 0x4e0]
call fcn.00401000
add esp, 0x10
push 1
lea edx, [esp + 0x4d4]
push edx
lea eax, [esp + 0x6e0]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x401f88
push str.MIXIN_TITLE_CAPTION_ERROR
push 0x4307e4
mov ecx, 0x433620
call fcn.0040b560
push str.MIXIN_TITLE_SERIOUS_ERROR
push 0x4307c8
mov ecx, 0x433620
call fcn.0040b560
mov ecx, dword [0x4307e8]
mov eax, 8
add esp, 0x10
cmp dword [0x4307fc], eax
jae 0x401f64
mov ecx, 0x4307e8
cmp dword [0x4307e0], eax
mov eax, dword [0x4307cc]
jae 0x401f76
mov eax, 0x4307cc
push 0x10
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
call fcn.00411846
lea ecx, [esp + 0x4d0]
push ecx
call fcn.004044b0
add esp, 4
test eax, eax
jne 0x401fa3
push 1
call fcn.00411846
call fcn.0040f410
push 0x206
lea edx, [esp + 0xd6]
push ebx
push edx
mov word [esp + 0xdc], bx
call fcn.004145e0
add esp, 0xc
lea eax, [esp + 0x6d8]
push eax
lea ecx, [esp + 0x4d4]
push ecx
push str.__s____s_
lea edx, [esp + 0xdc]
push 0x104
push edx
call fcn.004110d8
add esp, 0x14
push 0x40
lea eax, [esp + 0x90]
push ebx
push eax
call fcn.004145e0
add esp, 0xc
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x8c]
push edx
push 0x431d88
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [esp + 0xf0]
push eax
push ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0xb0], 0x44
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x402062
push 0x10
push 0x4254c0
push 0x4254c8
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
call fcn.00411846
mov ecx, dword [esp + 0x24]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ecx
call esi
mov edx, dword [esp + 0x20]
push edx
call esi
push ebx
call fcn.00411846
int3