Function at 0x40e1f0
Capabilities:
Check if file exists
Copy file
Create process on windows
Delete file
Delete registry key
Get common file path
Get session user name
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x67d7b7
mov eax, dword fs:[0]
push eax
mov eax, 0x163c
call fcn.006593f0
mov eax, dword [0x70af2c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x15e0], edi
call fcn.0065f04c
cmp dword [eax], 1
jle 0x40f9f9
call fcn.0065f052
lea ecx, [ebp - 0x15d0]
mov eax, dword [eax]
push dword [eax + 4]
call fcn.00409260
push 8
lea eax, [ebp - 0x15f0]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x15d0]
call fcn.0040cf90
mov esi, dword [ebp - 0x15f0]
push str._writer:
push esi
call fcn.0065ed14
add esp, 8
test eax, eax
jne 0x40f9b7
mov eax, dword [ebp - 0x15d0]
add eax, 8
push eax
call fcn.0065fc4d
lea edx, [esi - 0x10]
mov dword [edi + 0xcc], eax
or esi, 0xffffffff
mov byte [ebp - 4], 0
add esp, 4
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40e2b9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov eax, esi
mov edx, dword [ebp - 0x15d0]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40e2dd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [edi + 0xcc]
dec eax
cmp eax, 0x3e6
ja 0x40fa0d
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fa2a
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c8], eax
mov dword [ebp - 4], 2
lea eax, [ebp - 0x15c8]
push dword [edi + 0xcc]
push str._03d
push eax
call fcn.00410020
add esp, 0xc
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fa34
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov eax, str.SoftwareAcro_Software_IncCPW_
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x15c4]
test eax, 0xffff0000
jne 0x40e36f
movzx eax, ax
push eax
call fcn.00409070
jmp 0x40e37b
push 0x1f
push str.SoftwareAcro_Software_IncCPW_
call fcn.004087a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x15c4]
mov esi, dword [ebp - 0x15c8]
push dword [esi - 0xc]
push esi
call fcn.0040d6b0
mov edi, dword [ebp - 0x15c4]
lea eax, [ebp - 0x15d8]
push eax
push 0x20019
push 0
push edi
push SysReAllocString
mov dword [ebp - 0x15d8], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40f97b
mov eax, dword [ebp - 0x15e0]
lea ecx, [ebp - 0x15d0]
push ecx
add eax, 0x4d0
mov dword [ebp - 0x15e4], 1
push eax
mov dword [ebp - 0x15f4], eax
lea eax, [ebp - 0x15e4]
push eax
push 0
push str.Current_File
push dword [ebp - 0x15d8]
mov dword [ebp - 0x15d0], 0x400
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [ebp - 0x15e0]
lea ecx, [ebp - 0x15d0]
push ecx
add eax, 0xd0
mov dword [ebp - 0x15d0], 0x400
push eax
lea eax, [ebp - 0x15e4]
push eax
push 0
push str.Document_Name
push dword [ebp - 0x15d8]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [ebp - 0x15d8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edi
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
push dword [ebp - 0x15f4]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x40f97b
mov byte [ebp - 4], 2
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x40e48c
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
mov dword [ebp - 4], 0xffffffff
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40e4ad
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1604]
mov dword [ebp - 0x1604], 8
push eax
mov dword [ebp - 0x1600], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov edi, dword [ebp - 0x15e0]
mov ecx, edi
call fcn.0052def0
push 0xc
call fcn.0051d816
add esp, 4
mov dword [ebp - 0x15fc], eax
mov dword [ebp - 4], 5
test eax, eax
je 0x40e4ff
mov ecx, eax
call fcn.0052e818
jmp 0x40e501
xor eax, eax
push 0x6a831c
mov dword [ebp - 0x15f0], eax
mov dword [ebp - 4], 0xffffffff
call fcn.00536e73
push str.Acro_Software_Inc
mov ecx, edi
call fcn.0053a37d
push 0x64
lea eax, [ebp - 0xa8]
push 0
push eax
call fcn.0065b560
add esp, 0xc
mov dword [ebp - 0x15d4], 0x64
lea eax, [ebp - 0x15d4]
push eax
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [ebp - 0xa8]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40e560
sub ecx, edx
lea eax, [ebp - 0xa8]
push ecx
push eax
lea ecx, [edi + 0x914]
call fcn.004087a0
lea ecx, [edi + 0xd0]
lea eax, [edi + 0x910]
test ecx, ecx
jne 0x40e590
xor edx, edx
jmp 0x40e5b3
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 0x15dc], eax
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x40e5a0
sub edx, dword [ebp - 0x15dc]
lea eax, [edi + 0x910]
push edx
push ecx
mov ecx, eax
call fcn.004087a0
lea eax, [edi + 0x948]
push 0
push 0x6dadd8
mov ecx, eax
mov dword [ebp - 0x15fc], eax
call fcn.004087a0
push 0x3e8
lea eax, [ebp - 0xa98]
push 0
push eax
call fcn.0065b560
add esp, 0xc
lea eax, [ebp - 0x15e4]
push eax
push 0x20219
push 0
push str.SOFTWAREAcro_SoftwareCutePDF
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40e698
lea eax, [ebp - 0x15d4]
mov dword [ebp - 0x15dc], 1
push eax
lea eax, [ebp - 0xa98]
mov dword [ebp - 0x15d4], 0x3e8
push eax
lea eax, [ebp - 0x15dc]
push eax
push 0
push 0x6db478
push dword [ebp - 0x15e4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40e68c
lea eax, [ebp - 0xa98]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x40e68c
lea ecx, [ebp - 0xa98]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40e670
sub ecx, edx
lea eax, [ebp - 0xa98]
push ecx
push eax
lea ecx, [edi + 0x948]
call fcn.004087a0
push dword [ebp - 0x15e4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [edi]
mov ecx, edi
push 0
push str.Open_the_output_file_after_creation
push str.Preferences
mov eax, dword [eax + 0x7c]
call eax
dec eax
mov ecx, edi
neg eax
push 0
sbb eax, eax
inc eax
mov dword [edi + 0x934], eax
mov eax, dword [edi]
push str.Open_destination_folder_after_creation
push str.Preferences
mov eax, dword [eax + 0x7c]
call eax
dec eax
mov ecx, edi
neg eax
push 0
sbb eax, eax
inc eax
mov dword [edi + 0x938], eax
mov eax, dword [edi]
push str.Open_in
push str.Preferences
mov eax, dword [eax + 0x7c]
call eax
mov dword [edi + 0x944], eax
mov ecx, edi
mov eax, dword [edi]
push 0
push str.Edit_with_CutePDF_Editor
push str.Preferences
mov eax, dword [eax + 0x7c]
call eax
dec eax
mov ecx, edi
neg eax
push 0
sbb eax, eax
inc eax
mov dword [edi + 0x93c], eax
mov eax, dword [edi]
push 0x6db564
push str.Preferences
mov eax, dword [eax + 0x7c]
call eax
dec eax
neg eax
sbb eax, eax
inc eax
mov dword [edi + 0x940], eax
mov eax, dword [edi + 0x948]
cmp dword [eax - 0xc], 0
jne 0x40e74d
mov dword [edi + 0x944], 1
movups xmm0, xmmword [str.PDF_Document__.pdf_.pdfAll_Files__._.]
mov al, byte [0x6db5a4]
lea ecx, [ebp - 0x15c0]
push 1
push 0
push 0
mov byte [ebp - 0x14], al
lea eax, [ebp - 0x44]
push eax
movups xmmword [ebp - 0x44], xmm0
push 0x80006
movups xmm0, xmmword [0x6db584]
push 0
push 0x6db5a8
movups xmmword [ebp - 0x34], xmm0
push 0
movups xmm0, xmmword [0x6db594]
movups xmmword [ebp - 0x24], xmm0
call fcn.0051d932
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x12e0]
mov dword [ebp - method.CCPWFileDialog.virtual_0], vtable.CCPWFileDialog.0
call fcn.00409380
push 0x400
lea eax, [ebp - 0xe98]
mov dword [ebp - 4], 7
push 0
push eax
call fcn.0065b560
lea edx, [ebp - 0xe98]
add esp, 0xc
lea ecx, [edi + 0xd0]
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x40e7e0
lea ecx, [ebp - 0xe98]
call fcn.0040dbf0
lea ecx, [ebp - 0x15c0]
call fcn.0051e9d0
lea ecx, [ebp - 0xe98]
mov dword [ebp - 0x15d8], eax
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x30], 0x6db478
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fa3e
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov eax, 0x6db5ac
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x15c4]
test eax, 0xffff0000
jne 0x40e859
movzx eax, ax
push eax
call fcn.00409070
jmp 0x40e863
push 0x6db5ac
call fcn.0040d520
lea eax, [ebp - 0x15c4]
mov byte [ebp - 4], 9
push eax
push 0x3e9
lea ecx, [ebp - 0x15c0]
call fcn.0051defe
mov byte [ebp - 4], 7
mov eax, esi
mov edx, dword [ebp - 0x15c4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40e89f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fa48
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov eax, str.Add_Passwords...
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x15c4]
test eax, 0xffff0000
jne 0x40e8df
movzx eax, ax
push eax
call fcn.00409070
jmp 0x40e8e9
push str.Add_Passwords...
call fcn.0040d520
lea eax, [ebp - 0x15c4]
mov byte [ebp - 4], 0xb
push eax
push 0x3ea
lea ecx, [ebp - 0x15c0]
call fcn.0051defe
mov byte [ebp - 4], 7
mov eax, esi
mov edx, dword [ebp - 0x15c4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40e925
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fa52
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov eax, 0x6dadd8
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x15c4]
test eax, 0xffff0000
jne 0x40e965
movzx eax, ax
push eax
call fcn.00409070
jmp 0x40e971
push 0
push 0x6dadd8
call fcn.004087a0
lea eax, [ebp - 0x15c4]
mov byte [ebp - 4], 0xd
push eax
push 0x7d2
lea ecx, [ebp - 0x15c0]
call fcn.0051f490
mov byte [ebp - 4], 7
mov eax, esi
mov edx, dword [ebp - 0x15c4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40e9ad
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fa5c
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov eax, str.Open_saved_PDF_with
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x15c4]
test eax, 0xffff0000
jne 0x40e9ed
movzx eax, ax
push eax
call fcn.00409070
jmp 0x40e9f7
push str.Open_saved_PDF_with
call fcn.0040d520
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x15c4]
push dword [edi + 0x934]
lea ecx, [ebp - 0x15c0]
push eax
push 0x3eb
call fcn.0051de18
mov byte [ebp - 4], 7
mov eax, esi
mov edx, dword [ebp - 0x15c4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ea39
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xbb8
lea ecx, [ebp - 0x15c0]
call fcn.0051df6f
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fa66
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov eax, str.CutePDF_Professional
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x15c4]
test eax, 0xffff0000
jne 0x40ea89
movzx eax, ax
push eax
call fcn.00409070
jmp 0x40ea93
push str.CutePDF_Professional
call fcn.0040d520
lea eax, [ebp - 0x15c4]
mov byte [ebp - 4], 0x11
push eax
push 0x3ec
push 0xbb8
lea ecx, [ebp - 0x15c0]
call fcn.0051de8b
mov byte [ebp - 4], 7
mov eax, esi
mov edx, dword [ebp - 0x15c4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ead4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [edi + 0x948]
cmp dword [eax - 0xc], 0
jne 0x40eb6a
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fa70
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov eax, str.Get_CutePDF_Pro_nfor_more_Tools
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x15c4]
test eax, 0xffff0000
jne 0x40eb24
movzx eax, ax
push eax
call fcn.00409070
jmp 0x40eb2e
push str.Get_CutePDF_Pro_nfor_more_Tools
call fcn.0040d520
lea eax, [ebp - 0x15c4]
mov byte [ebp - 4], 0x13
push eax
push 0x3f1
lea ecx, [ebp - 0x15c0]
call fcn.0051defe
mov byte [ebp - 4], 7
mov eax, esi
mov edx, dword [ebp - 0x15c4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40eb6a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xbb9
lea ecx, [ebp - 0x15c0]
call fcn.0051df6f
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fa7a
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov eax, str.Default_PDF_Viewer
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x15c4]
test eax, 0xffff0000
jne 0x40ebba
movzx eax, ax
push eax
call fcn.00409070
jmp 0x40ebc4
push str.Default_PDF_Viewer
call fcn.0040d520
lea eax, [ebp - 0x15c4]
mov byte [ebp - 4], 0x15
push eax
push 0x3ed
push 0xbb9
lea ecx, [ebp - 0x15c0]
call fcn.0051de8b
mov byte [ebp - 4], 7
mov eax, esi
mov edx, dword [ebp - 0x15c4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ec05
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x15c0]
call fcn.0051e879
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fa84
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov eax, str.Edit_with_FREE_nCutePDF_Editor
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x15c4]
test eax, 0xffff0000
jne 0x40ec50
movzx eax, ax
push eax
call fcn.00409070
jmp 0x40ec5a
push str.Edit_with_FREE_nCutePDF_Editor
call fcn.0040d520
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x15c4]
push dword [edi + 0x93c]
lea ecx, [ebp - 0x15c0]
push eax
push 0x3ee
call fcn.0051de18
mov byte [ebp - 4], 7
mov eax, esi
mov edx, dword [ebp - 0x15c4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ec9c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fa8e
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov eax, str.Show_in_folder
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x15c4]
test eax, 0xffff0000
jne 0x40ecdc
movzx eax, ax
push eax
call fcn.00409070
jmp 0x40ece6
push str.Show_in_folder
call fcn.0040d520
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x15c4]
push dword [edi + 0x938]
lea ecx, [ebp - 0x15c0]
push eax
push 0x3ef
call fcn.0051de18
mov byte [ebp - 4], 7
mov eax, esi
mov edx, dword [ebp - 0x15c4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ed28
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fa98
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov eax, str.Attach_to_Email
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x15c4]
test eax, 0xffff0000
jne 0x40ed68
movzx eax, ax
push eax
call fcn.00409070
jmp 0x40ed72
push str.Attach_to_Email
call fcn.0040d520
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x15c4]
push dword [edi + 0x940]
lea ecx, [ebp - 0x15c0]
push eax
push 0x3f0
call fcn.0051de18
mov byte [ebp - 4], 7
mov eax, esi
mov edx, dword [ebp - 0x15c4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40edb4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40faa2
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov eax, 0x6db738
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x15c4]
test eax, 0xffff0000
jne 0x40edf4
movzx eax, ax
push eax
call fcn.00409070
jmp 0x40edfe
push 0x6db738
call fcn.0040d520
lea eax, [ebp - 0x15c4]
mov byte [ebp - 4], 0x1d
push eax
push 0x3f2
lea ecx, [ebp - 0x15c0]
call fcn.0051defe
mov byte [ebp - 4], 7
mov eax, esi
mov edx, dword [ebp - 0x15c4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ee3a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x3f2
lea ecx, [ebp - 0x15c0]
call fcn.0051ec44
xor eax, eax
lea ecx, [ebp - 0x15c0]
cmp dword [edi + 0x934], eax
setne al
add eax, 2
push eax
push 0xbb9
call fcn.0051f32b
mov eax, dword [edi + 0x948]
lea ecx, [ebp - 0x15c0]
cmp dword [eax - 0xc], 0
jne 0x40ef2d
push 2
push 0xbb8
call fcn.0051f32b
push 0x3ed
push 0xbb9
lea ecx, [ebp - 0x15c0]
call fcn.0051f3a4
mov edx, dword [edi + 0x914]
mov ecx, dword [ebp - 0x12bc]
add ecx, 0xfffffff0
mov dword [ebp - 0x15e8], ecx
lea eax, [edx - 0x10]
mov dword [ebp - 0x15d4], eax
lea eax, [edx - 0x10]
cmp eax, ecx
je 0x40ef71
cmp dword [ecx + 0xc], 0
lea edi, [ecx + 0xc]
mov dword [ebp - 0x15dc], edi
mov edi, dword [ebp - 0x15e0]
jl 0x40ef62
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x40ef62
mov eax, dword [ebp - 0x15d4]
push eax
call fcn.00408950
mov dword [ebp - 0x15d4], eax
add esp, 4
mov eax, dword [ebp - 0x15dc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x40ef1c
mov eax, dword [ebp - 0x15e8]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x15d4]
add eax, 0x10
mov dword [ebp - 0x12bc], eax
jmp 0x40ef71
xor eax, eax
cmp dword [edi + 0x934], eax
setne al
add eax, 2
push eax
push 0xbb8
call fcn.0051f32b
cmp dword [edi + 0x944], 0
jne 0x40ee8b
push 0x3ec
push 0xbb8
jmp 0x40ee95
push dword [edx - 0xc]
lea ecx, [ebp - 0x12bc]
push edx
call fcn.004087a0
mov edx, dword [edi + 0x910]
mov ecx, dword [ebp - 0x12c0]
add ecx, 0xfffffff0
mov dword [ebp - 0x15e8], ecx
lea eax, [edx - 0x10]
mov dword [ebp - 0x15d4], eax
lea eax, [edx - 0x10]
cmp eax, ecx
je 0x40f005
cmp dword [ecx + 0xc], 0
lea edi, [ecx + 0xc]
mov dword [ebp - 0x15dc], edi
mov edi, dword [ebp - 0x15e0]
jl 0x40eff6
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x40eff6
mov eax, dword [ebp - 0x15d4]
push eax
call fcn.00408950
mov dword [ebp - 0x15d4], eax
add esp, 4
mov eax, dword [ebp - 0x15dc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x40efe5
mov esi, dword [ebp - 0x15e8]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x15d4]
add eax, 0x10
mov dword [ebp - 0x12c0], eax
jmp 0x40f005
push dword [edx - 0xc]
lea ecx, [ebp - 0x12c0]
push edx
call fcn.004087a0
mov ecx, 0x7160d0
call fcn.00528e55
lea ecx, [ebp - 0x15c0]
call fcn.0051e6e8
mov ecx, 0x7160d0
mov esi, eax
call fcn.00529195
cmp esi, 1
jne 0x40f929
mov eax, dword [ebp - 0x15d8]
lea esi, [edi + 0x4d0]
push 0
push dword [eax + 0x1c]
push esi
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [ebp - 0x15c8], eax
test eax, eax
jne 0x40f09e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0
lea ecx, [ebp - 0x15e4]
push ecx
push 0x400
push eax
push 0
push 0x1300
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
mov eax, dword [ebp - 0x15e4]
test eax, eax
je 0x40f929
push 0
push 0x10
push eax
call fcn.0052ceab
push dword [ebp - 0x15e4]
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x40f929
mov eax, dword [edi + 0x8d4]
cmp dword [eax - 0xc], 0
jg 0x40f0dc
mov eax, dword [edi + 0x8d0]
cmp dword [eax - 0xc], 0
jg 0x40f0dc
lea eax, [ebp - 0x12e0]
mov dword [ebp - 0x15d0], 0
push eax
lea ecx, [edi + 0x8f0]
call fcn.004095d0
test eax, eax
jne 0x40f602
jmp 0x40f0e6
mov dword [ebp - 0x15d0], 1
push 0x20c
call fcn.0051d816
add esp, 4
mov dword [ebp - 0x15f8], eax
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x40f110
mov ecx, eax
call fcn.00409790
mov dword [ebp - 0x15cc], eax
jmp 0x40f11a
mov dword [ebp - 0x15cc], 0
mov byte [ebp - 4], 7
lea edi, [ebp - 0x6b0]
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x6b0]
call fcn.0040df10
mov ecx, dword [ebp - 0x15cc]
lea edx, [ebp - 0x6b0]
lea esi, [edx + 1]
lea ecx, [ecx + 0x64]
mov al, byte [edx]
inc edx
test al, al
jne 0x40f148
sub edx, esi
lea eax, [ebp - 0x6b0]
push edx
push eax
call fcn.004087a0
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40faac
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
lea eax, [ebp - 0x6b0]
mov byte [ebp - 4], 0x1f
test eax, 0xffff0000
jne 0x40f19f
movzx eax, ax
lea ecx, [ebp - 0x15c4]
push eax
call fcn.00409070
jmp 0x40f1c4
lea ecx, [ebp - 0x6b0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40f1a8
sub ecx, edx
lea eax, [ebp - 0x6b0]
push ecx
push eax
lea ecx, [ebp - 0x15c4]
call fcn.004087a0
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x20
mov esi, dword [ebp - 0x15c4]
push eax
push 0
push 0x6db0dc
push esi
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
push dword [ebp - 0x15f4]
lea ecx, [ebp - 0x15d4]
call fcn.00409260
lea ecx, [ebp - 0x15d4]
mov byte [ebp - 4], 0x21
call fcn.0040cf40
mov edi, eax
mov dword [ebp - 0x15e4], 0
mov eax, dword [ebp - 0x15cc]
lea edx, [ebp - 0x15e4]
push edx
push 0
push edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
xor eax, eax
lea ecx, [ebp - 0x1648]
cmp dword [ebp - 0x15e4], 1
sete al
mov dword [ebp - 0x15c8], eax
call fcn.00409380
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0x1648]
mov ecx, dword [ebp - 0x15cc]
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x54]
cmp dword [ebp - 0x15c8], 0
mov edi, dword [ebp - 0x15e0]
je 0x40f583
lea eax, [ebp - 0x12e0]
push eax
lea ecx, [edi + 0x8f0]
call fcn.004095d0
test eax, eax
jne 0x40f2ca
mov edx, dword [ebp - 0x15cc]
mov eax, dword [ebp - 0x15d0]
xor eax, 1
push eax
mov ecx, dword [edx]
lea eax, [ebp - 0x12e0]
push eax
push edx
call dword [ecx + 0x50]
mov ecx, dword [ebp - 0x15cc]
mov eax, dword [ecx + 0x11c]
cmp dword [eax - 0xc], 0
je 0x40f2d0
mov dword [ebp - 0x15c8], 0
jmp 0x40f583
mov ecx, dword [ebp - 0x15cc]
cmp dword [ebp - 0x15c8], 0
je 0x40f583
cmp dword [ebp - 0x15d0], 0
jne 0x40f2f9
mov eax, dword [ebp - 0x15d8]
push dword [eax + 0x1c]
call fcn.0040ac00
jmp 0x40f583
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fab6
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15d0], eax
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x23
test eax, 0xffff0000
jne 0x40f33a
movzx eax, ax
lea ecx, [ebp - 0x15d0]
push eax
call fcn.00409070
jmp 0x40f35f
lea ecx, [ebp - 0x1b0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40f343
sub ecx, edx
lea eax, [ebp - 0x1b0]
push ecx
push eax
lea ecx, [ebp - 0x15d0]
call fcn.004087a0
lea ecx, [ebp - 0x15d0]
mov byte [ebp - 4], 0x24
call fcn.0040cf40
mov edi, eax
mov eax, dword [ebp - 0x15cc]
push edi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x78]
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [ebp - 0x15cc]
mov edi, dword [ebp - 0x15e0]
mov eax, dword [ecx]
push dword [edi + 0x8e0]
push ecx
call dword [eax + 0x6c]
mov ecx, dword [ebp - 0x15cc]
push dword [edi + 0x8e4]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x68]
mov ecx, dword [ebp - 0x15cc]
push dword [edi + 0x8e8]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x64]
mov ecx, dword [ebp - 0x15cc]
push dword [edi + 0x8ec]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x60]
cmp dword [edi + 0x8d8], 0
jle 0x40f3ed
mov ecx, dword [ebp - 0x15cc]
push dword [edi + 0x8dc]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x5c]
mov eax, dword [edi + 0x8d0]
mov dword [ebp - 0x15ec], eax
cmp dword [eax - 0xc], 0
jne 0x40f491
mov eax, dword [edi + 0x8d4]
lea ecx, [eax - 0x10]
mov dword [ebp - 0x15c8], ecx
mov ecx, dword [ebp - 0x15ec]
add ecx, 0xfffffff0
cmp dword [ebp - 0x15c8], ecx
je 0x40f491
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
jl 0x40f482
mov eax, dword [ebp - 0x15c8]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x40f47c
push dword [ebp - 0x15c8]
call fcn.00408950
mov dword [ebp - 0x15c8], eax
add esp, 4
or ecx, 0xffffffff
mov eax, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x40f46b
mov eax, dword [ebp - 0x15ec]
add eax, 0xfffffff0
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x15c8]
add eax, 0x10
mov dword [edi + 0x8d0], eax
jmp 0x40f491
mov eax, dword [edi + 0x8d4]
push dword [eax - 0xc]
lea ecx, [edi + 0x8d0]
push eax
call fcn.004087a0
lea ecx, [edi + 0x8d4]
call fcn.0040cf40
lea ecx, [edi + 0x8d0]
mov dword [ebp - 0x15ec], eax
call fcn.0040cf40
mov ecx, dword [edi + 0x8d4]
lea esi, [ebp - 0x15e8]
xor edx, edx
mov dword [ebp - 0x15e8], 0
push esi
push 1
cmp dword [ecx - 0xc], edx
mov dword [ebp - 0x15dc], eax
mov eax, dword [ebp - 0x15cc]
setg dl
push edx
push dword [edi + 0x8d8]
push dword [ebp - 0x15dc]
mov ecx, dword [eax]
push dword [ebp - 0x15ec]
push eax
call dword [ecx + 0x58]
cmp dword [ebp - 0x15e8], 1
mov esi, dword [ebp - 0x15c4]
jne 0x40f51e
mov eax, dword [ebp - 0x15cc]
mov dword [ebp - 0x15c8], 1
mov eax, dword [eax + 0x11c]
cmp dword [eax - 0xc], 0
je 0x40f528
mov dword [ebp - 0x15c8], 0
push dword [ebp - 0x15ec]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x15dc]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x15c8], 0
je 0x40f561
mov eax, dword [ebp - 0x15d8]
push 0
push dword [eax + 0x1c]
lea eax, [ebp - 0x1b0]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov byte [ebp - 4], 0x22
or eax, 0xffffffff
mov edx, dword [ebp - 0x15d0]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40f583
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1b0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x40f5a1
lea eax, [ebp - 0x1b0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp - 0x15cc]
call fcn.0040aa40
mov ecx, dword [ebp - 0x15cc]
push 1
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x1648]
call fcn.00409520
mov byte [ebp - 4], 0x20
or eax, 0xffffffff
mov edx, dword [ebp - 0x15d4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40f5e6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x40f602
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [edi]
xor eax, eax
cmp dword [edi + 0x934], eax
mov ecx, edi
setne al
push eax
push str.Open_the_output_file_after_creation
push str.Preferences
call dword [edx + 0x80]
mov edx, dword [edi]
xor eax, eax
cmp dword [edi + 0x938], eax
mov ecx, edi
setne al
push eax
push str.Open_destination_folder_after_creation
push str.Preferences
call dword [edx + 0x80]
push dword [edi + 0x944]
mov eax, dword [edi]
mov ecx, edi
push str.Open_in
push str.Preferences
call dword [eax + 0x80]
mov edx, dword [edi]
xor eax, eax
cmp dword [edi + 0x93c], eax
mov ecx, edi
setne al
push eax
push str.Edit_with_CutePDF_Editor
push str.Preferences
call dword [edx + 0x80]
mov edx, dword [edi]
xor eax, eax
cmp dword [edi + 0x940], eax
mov ecx, edi
setne al
push eax
push 0x6db564
push str.Preferences
call dword [edx + 0x80]
cmp dword [ebp - 0x15c8], 0
je 0x40f929
cmp dword [edi + 0x934], 0
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
je 0x40f85d
cmp dword [edi + 0x944], 1
jne 0x40f6e2
mov eax, dword [ebp - 0x15d8]
push 5
push 0
push 0
push dword [eax + 0x1c]
push str.open
push 0
call esi
jmp 0x40f85d
mov eax, dword [edi + 0x948]
cmp dword [eax - 0xc], 0
jle 0x40f965
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40fac0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c8], eax
mov esi, 0x6db74c
mov byte [ebp - 4], 0x25
shr esi, 0x10
lea ecx, [ebp - 0x15c8]
test esi, esi
jne 0x40f737
mov eax, 0x6db74c
movzx edi, ax
push edi
call fcn.00409070
jmp 0x40f74b
push 1
push 0x6db74c
call fcn.004087a0
mov eax, 0x6db74c
movzx edi, ax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x15c8]
mov eax, dword [ebp - 0x15fc]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.0040d6b0
push 1
push 0x6db74c
lea ecx, [ebp - 0x15c8]
call fcn.0040d6b0
call fcn.00529f92
mov ecx, eax
test ecx, ecx
je 0x40faca
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x15c4], eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x15c4]
test esi, esi
jne 0x40f7ad
push edi
call fcn.00409070
jmp 0x40f7b9
push 1
push 0x6db74c
call fcn.004087a0
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x15d8]
mov edx, dword [eax + 0x1c]
test edx, edx
jne 0x40f7ce
xor ecx, ecx
jmp 0x40f7dc
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40f7d3
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x15c4]
call fcn.0040d6b0
push 1
push 0x6db74c
lea ecx, [ebp - 0x15c4]
call fcn.0040d6b0
mov esi, dword [ebp - 0x15c4]
mov edi, dword [ebp - 0x15c8]
push 5
push 0
push esi
push edi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea edx, [esi - 0x10]
mov byte [ebp - 4], 0x26
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40f838
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], esi
dec esi
test esi, esi
jg 0x40f851
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edi, dword [ebp - 0x15e0]
cmp dword [edi + 0x938], 0
je 0x40f8f8
push 0
push 0
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x15cc]
push eax
mov eax, dword [ebp - 0x15d8]
push dword [eax + 0x1c]
call fcn.0065e7a7
add esp, 0x14
xor ecx, ecx
nop
mov al, byte [ebp + ecx - 0x15cc]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x1299], al
test al, al
jne 0x40f890
lea edx, [ebp - 0x2b0]
mov esi, edx
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x40f8b0
lea edi, [ebp - 0x1298]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x40f8c0
mov ecx, edx
lea eax, [ebp - 0x1298]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 5
push 0
push 0
mov ecx, edx
push eax
and ecx, 3
push str.explore
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
call esi
mov edi, dword [ebp - 0x15e0]
cmp dword [edi + 0x93c], 0
je 0x40f912
push 5
push 0
push 0
push str.https:__www.cutepdf_editor.com_editor.asp
push 0
push 0
call esi
cmp dword [edi + 0x940], 0
je 0x40f929
mov eax, dword [ebp - 0x15d8]
mov ecx, dword [eax + 0x1c]
call fcn.0040dfb0
push dword [ebp - 0x15f4]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp - 0x15f0]
test ecx, ecx
je 0x40f946
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov ecx, 0x7160d0
call fcn.00528f9a
call fcn.0053ad62
lea ecx, [ebp - 0x15c0]
call fcn.00407c70
jmp 0x40fa0d
push 5
push 0
push 0
push str.https:__www.cutepdf.com_Products_CutePDF_Pro.asp
push 0
push 0
call esi
jmp 0x40f85d
lea edx, [edi - 0x10]
mov byte [ebp - 4], 2
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40f999
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], edi
dec edi
test edi, edi
jg 0x40fa0d
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x40fa0d
lea edx, [esi - 0x10]
mov byte [ebp - 4], 0
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40f9d5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x15d0]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x40fa0d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x40fa0d
push 0x30
push 0x6db478
push str.This_program_must_be_used_with_PDF_Writer.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006588a1
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
push 0x80004005
call fcn.004088a0
int3