Function at 0x429ba0
Capabilities:
Copy file
Create directory

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x437464
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x7a8
mov eax, dword [0x44500c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x764], eax
push str.Process_0
mov dword [ebp - 4], 0
inc dword [eax + 0x34]
push ecx
call fcn.004168e0
add esp, 4
mov ecx, eax
call fcn.00416970
lea ecx, [ebp - 0x708]
call fcn.0042de00
sub esp, 0x18
mov byte [ebp - 4], 1
lea eax, [ebp - 0x708]
mov ecx, esp
push eax
call fcn.00407400
lea ecx, [ebp - 0x750]
call fcn.0041d520
mov ecx, esp
mov byte [ebp - 4], 2
mov dword [ebp - 0x758], esp
push 0
push 0x43a7e9
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
call fcn.00408050
sub esp, 0x18
mov byte [ebp - 4], 3
lea eax, [ebp - 0x708]
mov dword [ebp - 0x760], esp
mov ecx, esp
push eax
call fcn.00407400
sub esp, 0x18
mov byte [ebp - 4], 4
lea eax, [ebx + 8]
mov dword [ebp - 0x75c], esp
mov ecx, esp
push eax
call fcn.00407400
mov byte [ebp - 4], 5
call fcn.0041fbb0
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.00427d90
push str.Process_1
push ecx
call fcn.004168e0
add esp, 4
mov ecx, eax
call fcn.00416970
call fcn.004168e0
add eax, 8
lea ecx, [ebp - 0x770]
push eax
call fcn.0041bcb0
mov byte [ebp - 4], 6
call fcn.004168e0
add eax, 0x14
lea ecx, [ebp - 0x77c]
push eax
call fcn.0041bcb0
mov byte [ebp - 4], 7
call fcn.004168e0
mov ecx, eax
call fcn.00416f10
mov edx, eax
lea ecx, [ebp - 0x678]
call fcn.0042f4d0
mov byte [ebp - 4], 8
xorps xmm0, xmm0
lea eax, [ebp - 0x640]
push eax
movups xmmword [ebp - 0x640], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movzx eax, word [ebp - 0x634]
lea ecx, [ebp - 0x678]
add esp, 0xc
cmp dword [ebp - 0x664], 8
cmovae ecx, dword [ebp - 0x678]
push eax
movzx eax, word [ebp - 0x636]
push eax
movzx eax, word [ebp - 0x638]
push eax
movzx eax, word [ebp - 0x63a]
push eax
movzx eax, word [ebp - 0x63e]
push eax
movzx eax, word [ebp - 0x640]
push eax
push ecx
lea eax, [ebp - 0x220]
push str._s_.4d_.2d_.2d_.2d_.2d_.2d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add byte [ebx - 0x7a72db3c], al
loopne 0x429d8d
invalid
jmp [edx]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
xor eax, eax
mov dword [ebp - 0x650], 0
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x64c], 7
mov word [ebp - 0x660], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429dc1
sub ecx, edx
lea eax, [ebp - 0x220]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x660]
call fcn.00415360
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x664]
cmp edx, 8
jb 0x429e29
mov ecx, dword [ebp - 0x678]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x429e1f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x429e1f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x664], 7
mov word [ebp - 0x678], ax
sub esp, 8
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x660]
call fcn.0041be60
mov dword [ebp - 0x6e0], 0
mov dword [ebp - 0x6dc], 7
lea edx, [eax + 1]
xor eax, eax
mov word [ebp - 0x6f0], ax
mov eax, dword [ebp - 0x650]
cmp eax, edx
jb 0x42b14a
sub eax, edx
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp dword [ebp - 0x64c], 8
lea eax, [ebp - 0x660]
cmovae eax, dword [ebp - 0x660]
push ecx
lea ecx, [ebp - 0x6f0]
lea eax, [eax + edx*2]
push eax
call fcn.00415360
push 0x43b4c0
lea edx, [ebp - 0x660]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x678]
call fcn.00415510
add esp, 4
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x6f0]
cmp dword [ebp - 0x6dc], 8
push dword [ebp - 0x6e0]
cmovae ecx, dword [ebp - 0x6f0]
push ecx
mov ecx, eax
call fcn.004154a0
mov dword [ebp - 0x680], 0
xor ecx, ecx
mov dword [ebp - 0x67c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x690], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x680], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 4
push str..zip
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 0xc
call fcn.004154a0
mov dword [ebp - 0x698], 0
xor ecx, ecx
mov dword [ebp - 0x694], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x6a8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x698], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x67c]
cmp edx, 8
jb 0x429fd0
mov ecx, dword [ebp - 0x690]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x429fc6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x429fc6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov dword [ebp - 0x680], 0
mov dword [ebp - 0x67c], 7
mov word [ebp - 0x690], ax
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x664]
cmp edx, 8
jb 0x42a033
mov ecx, dword [ebp - 0x678]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42a029
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42a029
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
mov ecx, dword [ebp - 0x778]
xor eax, eax
sub ecx, dword [ebp - 0x77c]
mov word [ebp - 0x678], ax
mov eax, 0x92492493
imul ecx
mov eax, 0x92492493
mov dword [ebp - 0x668], 0
add edx, ecx
mov dword [ebp - 0x664], 7
mov ecx, dword [ebp - 0x76c]
sub ecx, dword [ebp - 0x770]
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
imul ecx
push esi
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push str.Process_2:__d___d
push ecx
call fcn.004168e0
add esp, 4
push eax
call fcn.00416a50
mov esi, dword [ebp - 0x770]
add esp, 0x10
cmp esi, dword [ebp - 0x76c]
je 0x42a2d9
nop dword [eax]
push esi
mov edx, 0x43c830
lea ecx, [ebp - 0x648]
call fcn.0042c0f0
add esp, 4
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x648]
cmp dword [ebp - 0x634], 8
mov edi, dword [esi + 0x18]
cmovae eax, dword [ebp - 0x648]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
je 0x42a139
sub esp, 0x18
lea eax, [ebp - 0x660]
mov ecx, esp
mov dword [ebp - 0x75c], esp
push eax
call fcn.00415280
sub esp, 0x18
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x648]
mov ecx, esp
push eax
call fcn.00415280
mov ecx, edi
mov byte [ebp - 4], 0x10
call fcn.0042e2d0
add esp, 0x30
jmp 0x42a286
cmp dword [ebp - 0x634], 8
lea eax, [ebp - 0x648]
push 0
cmovae eax, dword [ebp - 0x648]
push eax
call dword [0x438350]
add esp, 8
test eax, eax
jne 0x42a286
push 0x208
push eax
lea eax, [ebp - 0x630]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x428]
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x428]
cmp dword [ebp - 0x634], 8
lea eax, [ebp - 0x648]
cmovae eax, dword [ebp - 0x648]
push ecx
lea ecx, [ebp - 0x630]
push ecx
push 0
push 0
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wsplitpath]
add esp, 0x14
lea eax, [ebp - 0x220]
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x428]
cmp dword [ebp - 0x64c], 8
lea eax, [ebp - 0x660]
cmovae eax, dword [ebp - 0x660]
push ecx
lea ecx, [ebp - 0x630]
push ecx
push eax
lea eax, [ebp - 0x220]
push str.__s_s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
lea ecx, [ebp - 0x220]
cmp dword [ebp - 0x634], 8
lea eax, [ebp - 0x648]
cmovae eax, dword [ebp - 0x648]
push 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov edi, eax
call dword [0x4380e4]
mov dword [ebp - 0x758], eax
lea eax, [ebp - 0x220]
push 0
push eax
call dword [0x438350]
add esp, 8
test eax, eax
jne 0x42a25a
call dword [0x4380e4]
jmp 0x42a286
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x630]
push eax
push dword [ebp - 0x758]
push edi
push str.Copy_Single_File_Error:__d___d___s._s
push ecx
call fcn.004168e0
add esp, 4
push eax
call fcn.00416a50
add esp, 0x18
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x634]
cmp edx, 8
jb 0x42a2ca
mov ecx, dword [ebp - 0x648]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42a2c0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x429e19
push edx
push ecx
call fcn.00432a88
add esp, 8
add esi, 0x1c
cmp esi, dword [ebp - 0x76c]
jne 0x42a0c0
mov eax, dword fs:[0x2c]
mov edi, dword [eax]
mov eax, dword [0x44a29c]
cmp eax, dword [edi + 4]
jle 0x42a32b
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x42a32b
mov byte [ebp - 4], 0x12
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 0xf
push 0x44a29c
call fcn.00432c3a
add esp, 4
push str.Process_3
mov ecx, 0x44a108
call fcn.00416970
mov eax, dword [0x44a29c]
cmp eax, dword [edi + 4]
jle 0x42a384
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x42a384
mov byte [ebp - 4], 0x13
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 0xf
push 0x44a29c
call fcn.00432c3a
add esp, 4
push 0x44a128
lea ecx, [ebp - 0x648]
call fcn.00415280
push 6
push str.7z.exe
lea ecx, [ebp - 0x648]
mov byte [ebp - 4], 0x14
call fcn.004154a0
mov dword [ebp - 0x6c8], 0
xor ecx, ecx
mov dword [ebp - 0x6c4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x6d8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x6c8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x634]
cmp edx, 8
jb 0x42a42e
mov ecx, dword [ebp - 0x648]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42a424
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42a424
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov dword [ebp - 0x638], 0
mov word [ebp - 0x648], ax
lea ecx, [ebp - 0x720]
lea eax, [ebp - 0x6a8]
mov dword [ebp - 0x634], 7
push eax
mov edx, str._a__tzip__
call fcn.0042c0f0
add esp, 4
push 3
push 0x43c8d0
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.004154a0
mov dword [ebp - 0x668], 0
xor ecx, ecx
mov dword [ebp - 0x664], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x678], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x668], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x660]
cmp dword [ebp - 0x64c], 8
lea ecx, [ebp - 0x678]
push dword [ebp - 0x650]
cmovae eax, dword [ebp - 0x660]
push eax
call fcn.004154a0
mov dword [ebp - 0x680], 0
xor ecx, ecx
mov dword [ebp - 0x67c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x690], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x680], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 2
push 0x43c8c8
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 0x19
call fcn.004154a0
mov dword [ebp - 0x6b0], 0
xor ecx, ecx
mov dword [ebp - 0x6ac], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x6c0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x6b0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x67c]
cmp edx, 8
jb 0x42a5b7
mov ecx, dword [ebp - 0x690]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42a5ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42a5ad
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov dword [ebp - 0x680], 0
mov dword [ebp - 0x67c], 7
mov word [ebp - 0x690], ax
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x664]
cmp edx, 8
jb 0x42a61a
mov ecx, dword [ebp - 0x678]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42a610
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42a610
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x664], 7
mov word [ebp - 0x678], ax
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x70c]
cmp edx, 8
jb 0x42a67d
mov ecx, dword [ebp - 0x720]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42a673
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42a673
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov dword [ebp - 0x710], 0
cmp dword [ebp - 0x6c4], 8
xorps xmm0, xmm0
mov word [ebp - 0x720], ax
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x7ac], eax
lea eax, [ebp - 0x6d8]
cmovae eax, dword [ebp - 0x6d8]
cmp dword [ebp - 0x6ac], 8
mov dword [ebp - 0x7a8], eax
lea eax, [ebp - 0x6c0]
cmovae eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x7a4], eax
lea eax, [ebp - 0x7b8]
push eax
mov dword [ebp - 0x70c], 7
movlpd qword [ebp - 0x794], xmm0
movlpd qword [ebp - 0x78c], xmm0
movlpd qword [ebp - 0x784], xmm0
mov dword [ebp - 0x7b8], 0x3c
mov dword [ebp - 0x7b4], 0x40
mov dword [ebp - 0x7a0], 0
mov dword [ebp - 0x79c], 0
mov dword [ebp - 0x798], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
push 0xffffffffffffffff
push dword [ebp - 0x780]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [ebp - 0x694], 8
lea eax, [ebp - 0x6a8]
mov esi, dword [0x438350]
cmovae eax, dword [ebp - 0x6a8]
push 0
push eax
call esi
add esp, 8
test eax, eax
jne 0x42a971
mov eax, dword [0x44a29c]
cmp eax, dword [edi + 4]
jle 0x42a7b6
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x42a7b6
mov byte [ebp - 4], 0x1e
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 0x1d
push 0x44a29c
call fcn.00432c3a
add esp, 4
cmp byte [0x44a299], 0
jne 0x42a808
sub esp, 0x18
lea edx, [ebp - 0x6f0]
mov ecx, esp
mov dword [ebp - 0x75c], esp
push str..zip
call fcn.00415510
sub esp, 0x14
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x660]
mov byte [ebp - 0x751], 0
mov ecx, esp
push eax
call fcn.00415280
mov cl, byte [ebp - 0x751]
mov byte [ebp - 4], 0x1d
call fcn.0042edf0
add esp, 0x30
mov eax, dword [0x44a29c]
cmp eax, dword [edi + 4]
jle 0x42a852
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x42a852
mov byte [ebp - 4], 0x20
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 0x1d
push 0x44a29c
call fcn.00432c3a
add esp, 4
push str.Process_4
mov ecx, 0x44a108
call fcn.00416970
sub esp, 0x18
lea eax, [ebp - 0x708]
mov ecx, esp
mov dword [ebp - 0x75c], esp
push eax
call fcn.00407400
sub esp, 0x18
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x760], esp
lea eax, [ebp - 0x6a8]
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00415280
mov ecx, esi
call fcn.00415b30
add esp, 0x18
push 1
mov byte [ebp - 4], 0x22
call fcn.0041fbb0
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.00422cc0
test eax, eax
jne 0x42a96b
mov eax, dword [0x44a29c]
cmp eax, dword [edi + 4]
jle 0x42a90a
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x42a90a
mov byte [ebp - 4], 0x23
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 0x1d
push 0x44a29c
call fcn.00432c3a
add esp, 4
cmp byte [0x44a299], 0
jne 0x42a96b
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ebp - 0x75c], esp
push 0xb
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.___________
mov word [ecx], ax
call fcn.00415360
sub esp, 0x18
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x660]
mov byte [ebp - 0x751], 1
mov ecx, esp
push eax
call fcn.00415280
mov cl, byte [ebp - 0x751]
mov byte [ebp - 4], 0x1d
call fcn.0042edf0
add esp, 0x30
mov esi, dword [0x438350]
mov ecx, dword [ebp - 0x778]
mov eax, 0x92492493
sub ecx, dword [ebp - 0x77c]
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x42adcb
call fcn.0041fbb0
call fcn.00420100
test al, al
jne 0x42aaec
mov eax, dword [ebp - 0x764]
dec dword [eax + 0x34]
mov eax, dword [0x44a29c]
cmp eax, dword [edi + 4]
jle 0x42a9fb
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x42a9fb
mov byte [ebp - 4], 0x25
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 0x1d
push 0x44a29c
call fcn.00432c3a
add esp, 4
push str.Permit_failed_
mov ecx, 0x44a108
call fcn.00416970
mov eax, dword [0x44a29c]
cmp eax, dword [edi + 4]
jle 0x42aaa3
push 0x44a29c
call fcn.00432c84
mov eax, dword [0x44a29c]
add esp, 4
cmp eax, 0xffffffff
jne 0x42aa5e
mov byte [ebp - 4], 0x26
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 0x1d
push 0x44a29c
call fcn.00432c3a
mov eax, dword [0x44a29c]
add esp, 4
cmp eax, dword [edi + 4]
jle 0x42aaa3
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x42aaa3
mov byte [ebp - 4], 0x27
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 0x1d
push 0x44a29c
call fcn.00432c3a
add esp, 4
mov ecx, 0x44a108
call fcn.00416f10
push eax
mov ecx, 0x44a108
call fcn.00417540
mov eax, dword [0x44a29c]
cmp eax, dword [edi + 4]
jle 0x42ae77
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x42ae77
mov byte [ebp - 4], 0x28
jmp 0x42ae54
mov eax, dword [0x44a29c]
cmp eax, dword [edi + 4]
jle 0x42ab36
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x42ab36
mov byte [ebp - 4], 0x29
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 0x1d
push 0x44a29c
call fcn.00432c3a
add esp, 4
mov eax, dword [0x44a148]
mov dword [ebp - 0x758], eax
test eax, eax
jne 0x42ad39
call fcn.004137d0
call fcn.004168e0
mov ecx, eax
call fcn.00416f10
mov edx, eax
lea ecx, [ebp - 0x738]
call fcn.0042f4d0
push str._flag.wk
lea edx, [ebp - 0x738]
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x648]
call fcn.00415510
add esp, 4
lea eax, [ebp - 0x648]
cmp dword [ebp - 0x634], 8
cmovae eax, dword [ebp - 0x648]
push 0
push eax
call esi
mov edx, dword [ebp - 0x634]
add esp, 8
test eax, eax
jne 0x42ac9a
cmp edx, 8
jb 0x42abea
mov ecx, dword [ebp - 0x648]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42abe0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42abe0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x724]
mov dword [ebp - 0x638], 0
mov dword [ebp - 0x634], 7
mov word [ebp - 0x648], ax
cmp edx, 8
jb 0x42ac4d
mov ecx, dword [ebp - 0x738]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42ac43
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42ac43
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
mov eax, dword [ebp - 0x764]
push str.Multi_not_allowed_
push ecx
dec dword [eax + 0x34]
call fcn.004168e0
add esp, 4
mov ecx, eax
call fcn.00416970
call fcn.004168e0
mov ecx, eax
call fcn.00416f10
push eax
push ecx
call fcn.004168e0
add esp, 4
mov ecx, eax
call fcn.00417540
push 1
push ecx
call fcn.004168e0
add esp, 4
mov ecx, eax
jmp 0x42ae7e
cmp edx, 8
jb 0x42acd6
mov ecx, dword [ebp - 0x648]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42accc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42accc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x724]
mov dword [ebp - 0x638], 0
mov dword [ebp - 0x634], 7
mov word [ebp - 0x648], ax
cmp edx, 8
jb 0x42ad39
mov ecx, dword [ebp - 0x738]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42ad2f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42ad2f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
push str.Process_5
push ecx
call fcn.004168e0
add esp, 4
mov ecx, eax
call fcn.00416970
sub esp, 0x18
lea eax, [ebp - 0x708]
mov ecx, esp
mov dword [ebp - 0x75c], esp
push eax
call fcn.00407400
mov byte [ebp - 4], 0x2b
call fcn.004168e0
mov byte [ebp - 4], 0x1d
call fcn.004185c0
test eax, eax
jne 0x42adb6
push str.Process_6
push ecx
call fcn.004168e0
add esp, 4
mov ecx, eax
call fcn.00416970
cmp dword [ebp - 0x758], 0
jne 0x42adb6
call fcn.004168e0
mov ecx, eax
call fcn.00416f10
push eax
push ecx
call fcn.004168e0
add esp, 4
mov ecx, eax
call fcn.00417540
push str.Process_7
push ecx
call fcn.004168e0
add esp, 4
mov ecx, eax
call fcn.00416970
mov eax, dword [ebp - 0x764]
dec dword [eax + 0x34]
mov eax, dword [0x44a29c]
cmp eax, dword [edi + 4]
jle 0x42ae1e
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x42ae1e
mov byte [ebp - 4], 0x2c
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 0x1d
push 0x44a29c
call fcn.00432c3a
add esp, 4
push str.Process_8
mov ecx, 0x44a108
call fcn.00416970
mov eax, dword [0x44a29c]
cmp eax, dword [edi + 4]
jle 0x42ae77
push 0x44a29c
call fcn.00432c84
add esp, 4
cmp dword [0x44a29c], 0xffffffff
jne 0x42ae77
mov byte [ebp - 4], 0x2d
call fcn.00415c50
push 0x437cc0
call fcn.004330de
add esp, 4
mov byte [ebp - 4], 0x1d
push 0x44a29c
call fcn.00432c3a
add esp, 4
push 1
mov ecx, 0x44a108
call fcn.0041b4c0
mov edx, dword [ebp - 0x6ac]
cmp edx, 8
jb 0x42aec5
mov ecx, dword [ebp - 0x6c0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42aebb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42aebb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
mov edx, dword [ebp - 0x6c4]
xor eax, eax
mov dword [ebp - 0x6b0], 0
mov dword [ebp - 0x6ac], 7
mov word [ebp - 0x6c0], ax
cmp edx, 8
jb 0x42af24
mov ecx, dword [ebp - 0x6d8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42af1a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42af1a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
mov edx, dword [ebp - 0x694]
xor eax, eax
mov dword [ebp - 0x6c8], 0
mov dword [ebp - 0x6c4], 7
mov word [ebp - 0x6d8], ax
cmp edx, 8
jb 0x42af83
mov ecx, dword [ebp - 0x6a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42af79
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42af79
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
mov edx, dword [ebp - 0x6dc]
xor eax, eax
mov dword [ebp - 0x698], 0
mov dword [ebp - 0x694], 7
mov word [ebp - 0x6a8], ax
cmp edx, 8
jb 0x42afe2
mov ecx, dword [ebp - 0x6f0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42afd8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42afd8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
mov edx, dword [ebp - 0x64c]
cmp edx, 8
jb 0x42b024
mov ecx, dword [ebp - 0x660]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42b01a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42b01a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov dword [ebp - 0x650], 0
lea ecx, [ebp - 0x77c]
mov dword [ebp - 0x64c], 7
mov word [ebp - 0x660], ax
call fcn.0041bfa0
lea ecx, [ebp - 0x770]
call fcn.0041bfa0
mov edx, dword [ebp - 0x73c]
cmp edx, 8
jb 0x42b099
mov ecx, dword [ebp - 0x750]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42b08f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42b08f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
mov edx, dword [ebp - 0x6f4]
xor eax, eax
mov dword [ebp - 0x740], 0
mov dword [ebp - 0x73c], 7
mov word [ebp - 0x750], ax
cmp edx, 0x10
jb 0x42b0f2
mov ecx, dword [ebp - 0x708]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x42b0e8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42b0e8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
mov edx, dword [ebx + 0x1c]
cmp edx, 0x10
jb 0x42b128
mov ecx, dword [ebx + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x42b11e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42b11e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00432a88
add esp, 8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0043284c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x18
call fcn.00408440
int3