Function at 0x4027cb
Capabilities:
Create process on windows
Get common file path
Terminate process

Disassembly:
mov eax, 0x439839
call fcn.0042f7e0
sub esp, 0xfdc
push ebx
push esi
push edi
lea ecx, [ebp - 0x44]
call fcn.0040d980
xor ebx, ebx
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], ebx
call fcn.0040d980
cmp dword [ebp + 8], ebx
mov byte [ebp - 4], 1
je 0x402812
push ebx
push 0x3e9
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov esi, 0x4575e8
mov ecx, esi
call fcn.00406ba0
test al, al
mov edi, 0x3e8
je 0x40286b
push dword [ebp + 8]
call fcn.004021f4
test al, al
mov eax, dword [0x4578f8]
pop ecx
jne 0x402860
cmp eax, ebx
je 0x40284a
push str.Password_is_incorrect._r_n
push eax
call fcn.0042f3a7
pop ecx
pop ecx
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x402da9
cmp eax, ebx
je 0x4028b9
push str.Password_verified..._r_n
jmp 0x402879
mov eax, dword [0x4578f8]
cmp eax, ebx
je 0x4028b9
push str.Not_encrypted._r_n
push eax
call fcn.0042f3a7
cmp dword [0x4578f8], ebx
pop ecx
pop ecx
je 0x4028b9
push edi
call fcn.0042f7ff
pop ecx
mov dword [ebp - 0x14], eax
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push dword [ebp - 0x14]
push str.Current_working_directory:__s_r_n
push dword [0x4578f8]
call fcn.0042f3a7
push dword [ebp - 0x14]
call fcn.0042f346
add esp, 0x10
lea ecx, [ebp - 0xc4]
call fcn.00405600
lea ecx, [ebp - 0x898]
mov byte [ebp - 4], 2
call fcn.00408aa0
lea eax, [ebp - 0x898]
mov ecx, esi
push eax
mov byte [ebp - 4], 3
call fcn.00406bd0
lea ecx, [ebp - 0x898]
call fcn.00408be0
test eax, eax
je 0x402b59
lea ecx, [ebp - 0x898]
call fcn.004098a0
push eax
lea ecx, [ebp - 0xc4]
call fcn.00405070
lea ecx, [ebp - 0x338]
call fcn.00405600
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0x338]
push eax
mov byte [ebp - 4], 4
call fcn.004061a0
lea ecx, [ebp - 0xc4]
call fcn.00404f40
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0x338]
push eax
call fcn.00406790
test al, al
mov edi, 0x445954
jne 0x402977
push edi
lea ecx, [ebp - 0x338]
call fcn.00406570
test al, al
jne 0x402977
push 0x445950
push edi
lea ecx, [ebp - 0xc4]
call fcn.00405f20
push 0x2f
push 0x5c
lea ecx, [ebp - 0xc4]
call fcn.00404550
push 0x5c
push 0x2f
lea ecx, [ebp - 0xc4]
call fcn.00404550
mov dword [ebp - 0x14], ebx
push edi
lea ecx, [ebp - 0xc4]
call fcn.00406570
test al, al
je 0x4029c5
push 0x445950
push edi
lea ecx, [ebp - 0xc4]
call fcn.00405f20
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x3e8
jle 0x402998
cmp dword [0x4578f8], ebx
je 0x4029ec
lea ecx, [ebp - 0xc4]
call fcn.00404320
push eax
push str.unzipDir____s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
push str.Debug
mov ecx, esi
call fcn.00406a10
test eax, eax
setne al
cmp al, bl
jne 0x402b45
cmp dword [0x4578f8], ebx
je 0x402a2c
lea ecx, [ebp - 0xc4]
call fcn.00404320
push eax
push str.Check_create_extract_dir:___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
lea eax, [ebp - 0x2c]
push ebx
push eax
lea ecx, [ebp - 0xc4]
call fcn.00404320
push eax
call fcn.0040edd0
add esp, 0xc
cmp al, bl
jne 0x402af9
cmp dword [0x4578f8], ebx
je 0x402a74
lea ecx, [ebp - 0xc4]
call fcn.00404320
push eax
push str.failed_to_ensure_dir_exists:___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
lea ecx, [ebp - 0x470]
call fcn.00408aa0
push str.Failed_to_ensure_dir_exists:
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 5
call fcn.00409790
lea ecx, [ebp - 0xc4]
call fcn.00404320
push eax
lea ecx, [ebp - 0x470]
call fcn.00409790
push ebx
push 0x445504
lea ecx, [ebp - 0x470]
call fcn.00408fc0
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 4
call fcn.00408b70
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 3
call fcn.004056c0
jmp 0x402d8b
cmp dword [0x4578f8], ebx
je 0x402b45
lea ecx, [ebp - 0x2c]
call fcn.0040da20
test eax, eax
je 0x402b33
push ebx
lea ecx, [ebp - 0x2c]
call fcn.0040da30
mov ecx, eax
call fcn.00404320
push eax
push str.created_unzip_dir:___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
jmp 0x402b45
push str.No_top_level_directory_added_to_undo_list_r_n
push dword [0x4578f8]
call fcn.0042f3a7
pop ecx
pop ecx
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 3
call fcn.004056c0
jmp 0x402bd9
mov eax, dword [0x4578f8]
cmp eax, ebx
je 0x402b6f
push str.Selecting_temp_dir_for_unzipping..._r_n
push eax
call fcn.0042f3a7
pop ecx
pop ecx
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp + 8]
call fcn.0040242e
add esp, 0xc
test al, al
je 0x402d8b
cmp dword [0x4578f8], ebx
je 0x402bd9
lea ecx, [ebp - 0x2c]
call fcn.0040da20
test eax, eax
je 0x402bc7
push ebx
lea ecx, [ebp - 0x2c]
call fcn.0040da30
mov ecx, eax
call fcn.00404320
push eax
push str.created_unzip_dir:___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
jmp 0x402bd9
push str.No_top_level_directory_added_to_undo_list_r_n
push dword [0x4578f8]
call fcn.0042f3a7
pop ecx
pop ecx
mov edi, 0x4458a0
lea ecx, [ebp - 0xc4]
push edi
call fcn.00405190
test al, al
je 0x402bff
push 0x45792c
push edi
lea ecx, [ebp - 0xc4]
call fcn.00405b70
cmp dword [0x4578f8], ebx
je 0x402c26
lea ecx, [ebp - 0xc4]
call fcn.00404320
push eax
push str.Final_unzip_dir:___s_..._r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
push str.Debug
mov ecx, esi
call fcn.00406a10
test eax, eax
lea ecx, [ebp - 0xeb0]
setne byte [ebp - 0xd]
call fcn.00408aa0
lea eax, [ebp - 0xeb0]
mov byte [ebp - 4], 6
push eax
call fcn.0040ab90
pop ecx
lea ecx, [ebp - 0xc4]
call fcn.00404330
test eax, eax
je 0x402dd6
lea ecx, [ebp - 0x470]
call fcn.00408aa0
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 7
call fcn.00404320
push eax
lea ecx, [ebp - 0x470]
call fcn.00409790
cmp dword [0x4578f8], ebx
je 0x402cb4
lea ecx, [ebp - 0x470]
call fcn.004098a0
push eax
push str.Setting_CWD___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
cmp byte [ebp - 0xd], bl
jne 0x402dc7
lea eax, [ebp - 0x470]
push eax
call fcn.0040c510
movzx eax, al
cmp eax, ebx
pop ecx
jne 0x402dc7
cmp dword [0x4578f8], ebx
je 0x402cfc
lea ecx, [ebp - 0xc4]
call fcn.00404320
push eax
push str.failed_to_set_current_dir:___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
lea ecx, [ebp - 0x628]
call fcn.00408aa0
push str.Failed_to_set_current_dir:
lea ecx, [ebp - 0x628]
mov byte [ebp - 4], 8
call fcn.00409790
lea ecx, [ebp - 0xc4]
call fcn.00404320
push eax
lea ecx, [ebp - 0x628]
call fcn.00409790
push ebx
push 0x445504
lea ecx, [ebp - 0x628]
call fcn.00408fc0
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x628]
mov byte [ebp - 4], 7
call fcn.00408b70
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 6
call fcn.00408b70
lea ecx, [ebp - 0xeb0]
mov byte [ebp - 4], 3
call fcn.00408b70
lea ecx, [ebp - 0x898]
mov byte [ebp - 4], 2
call fcn.00408b70
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 1
call fcn.004056c0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.0040d9e0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.0040d9e0
xor al, al
jmp 0x403621
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 6
call fcn.00408b70
push str.Cleanup
mov ecx, esi
call fcn.00406a10
test eax, eax
setne byte [ebp - 0x14]
cmp byte [ebp - 0x14], bl
je 0x402e03
mov eax, dword [0x4578f8]
cmp eax, ebx
je 0x402e03
push str.cleanup_is_requested..._r_n
push eax
call fcn.0042f3a7
pop ecx
pop ecx
mov ecx, esi
call fcn.00406d60
test al, al
jne 0x402e27
mov eax, dword [0x4578f8]
cmp eax, ebx
je 0x402e24
push str.WaitForSetup_if_false__therefore_cannot_cleanup_files._r_n
push eax
call fcn.0042f3a7
pop ecx
pop ecx
mov byte [ebp - 0x14], bl
push str.AutoExit
mov ecx, esi
call fcn.00406a10
test eax, eax
setne al
cmp al, bl
je 0x402e55
mov eax, dword [0x4578f8]
cmp eax, ebx
je 0x402e52
push str.AutoExit_if_true__therefore_cannot_cleanup_files._r_n
push eax
call fcn.0042f3a7
pop ecx
pop ecx
mov byte [ebp - 0x14], bl
lea ecx, [ebp - 0x4f0]
call fcn.00405600
push dword [ebp - 0x14]
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x4f0]
push eax
call fcn.00404320
push eax
push dword [ebp + 8]
call fcn.00401fbf
mov byte [ebp - 0xe], al
mov eax, dword [0x457924]
add esp, 0x14
cmp eax, ebx
mov edi, 0x3f0
je 0x402ed0
cmp byte [ebp - 0xe], bl
je 0x40358f
push str.Finished_unzipping.
push 0x3f8
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push edi
push dword [0x457924]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp byte [ebp - 0xe], bl
je 0x40358f
push str.Debug
mov ecx, esi
call fcn.00406a10
test eax, eax
mov eax, dword [0x4578f8]
setne byte [ebp - 0xd]
cmp eax, ebx
je 0x402f01
push str.Unzip_complete..._r_n
push eax
call fcn.0042f3a7
pop ecx
pop ecx
lea ecx, [ebp - 0x9d0]
call fcn.00408aa0
lea eax, [ebp - 0x9d0]
mov ecx, esi
push eax
mov byte [ebp - 4], 0xa
call fcn.00406ce0
lea ecx, [ebp - 0x9d0]
call fcn.00408be0
test eax, eax
je 0x402f54
cmp dword [0x4578f8], ebx
je 0x402f54
lea ecx, [ebp - 0x9d0]
call fcn.004098a0
push eax
push str.setup_filename:___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
cmp byte [ebp - 0xd], bl
jne 0x403574
lea ecx, [ebp - 0x9d0]
call fcn.00408be0
test eax, eax
je 0x403574
lea ecx, [ebp - 0x180]
call fcn.00405600
lea ecx, [ebp - 0x9d0]
mov byte [ebp - 4], 0xb
call fcn.004098a0
push eax
lea ecx, [ebp - 0x180]
call fcn.00405070
lea ecx, [ebp - 0xd78]
call fcn.00408aa0
lea eax, [ebp - 0xd78]
mov ecx, esi
push eax
mov byte [ebp - 4], 0xc
call fcn.00406d00
lea ecx, [ebp - 0xd78]
mov dword [ebp - 0x14], ebx
call fcn.00408be0
test eax, eax
je 0x402fed
lea ecx, [ebp - 0xd78]
call fcn.004098a0
mov dword [ebp - 0x14], eax
mov eax, dword [0x4578f8]
cmp eax, ebx
je 0x402fed
push dword [ebp - 0x14]
push str.setup_args:___s__r_n
push eax
call fcn.0042f3a7
add esp, 0xc
push 0x2f
push 0x5c
lea ecx, [ebp - 0x180]
call fcn.00404550
push 0x445740
push 0x44573c
lea ecx, [ebp - 0x180]
call fcn.00405f20
push 0x5c
push 0x2f
lea ecx, [ebp - 0x180]
call fcn.00404550
cmp dword [0x4578f8], ebx
je 0x403066
lea ecx, [ebp - 0xc4]
call fcn.00404320
push eax
push str.working_dir:___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
lea ecx, [ebp - 0x180]
call fcn.00404320
push eax
push str.running_exe:___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
push edi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp eax, ebx
je 0x403083
push ebx
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0xc40]
call fcn.00408aa0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xc40]
mov byte [ebp - 4], 0xd
call fcn.00409790
push str.shell
lea ecx, [ebp - 0x180]
call fcn.00406830
test al, al
je 0x403200
mov ecx, esi
call fcn.00406d60
test al, al
lea ecx, [ebp - 0xc40]
je 0x4030d2
call fcn.004093e0
push eax
push ebx
jmp 0x4030da
call fcn.004093e0
push eax
push 1
call fcn.0040256d
pop ecx
mov byte [ebp - 0xd], al
pop ecx
lea ecx, [ebp - 0x760]
call fcn.00408aa0
lea eax, [ebp - 0x760]
mov ecx, esi
push eax
push str.AutoExit
mov byte [ebp - 4], 0xe
call fcn.004069e0
push 0x445284
lea ecx, [ebp - 0x760]
call fcn.00409b50
test al, al
je 0x403120
push ebx
call fcn.0042f8cf
lea eax, [ebp - 0x44]
push eax
call fcn.00402616
cmp byte [ebp - 0xd], bl
pop ecx
jne 0x4031f1
cmp dword [0x4578f8], ebx
je 0x40315a
lea ecx, [ebp - 0x180]
call fcn.00404320
push eax
push str.failed_to_run:___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
lea ecx, [ebp - 0x2b8]
call fcn.00408aa0
push str.Failed_to_run
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0xf
call fcn.00409790
lea ecx, [ebp - 0x180]
call fcn.00404320
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00409790
push str.__working_dir_
lea ecx, [ebp - 0x2b8]
call fcn.00409790
lea ecx, [ebp - 0xc4]
call fcn.00404320
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00409790
push str.__check_to_see_if_this_file_is_in_the_EXE_
lea ecx, [ebp - 0x2b8]
call fcn.00409790
push ebx
push 0x445504
lea ecx, [ebp - 0x2b8]
call fcn.00408fc0
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0xe
call fcn.00408b70
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x760]
jmp 0x403540
lea ecx, [ebp - 0xfe8]
call fcn.00408aa0
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x10
call fcn.00408aa0
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x11
call fcn.00404320
push eax
lea ecx, [ebp - 0xfe8]
call fcn.00409790
lea ecx, [ebp - 0xc4]
call fcn.00404320
push eax
lea ecx, [ebp - 0xb08]
call fcn.00409790
lea ecx, [ebp - 0x760]
call fcn.00408aa0
lea eax, [ebp - 0x760]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0xfe8]
push eax
lea eax, [ebp - 0xb08]
push eax
call fcn.0040cc20
add esp, 0xc
cmp dword [0x4578f8], ebx
je 0x4032f1
push 0x3e8
call fcn.0042f7ff
pop ecx
mov edi, eax
push edi
push 0x3e8
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push edi
push str.Current_working_directory:__s_r_n
push dword [0x4578f8]
call fcn.0042f3a7
push edi
call fcn.0042f346
add esp, 0x10
lea ecx, [ebp - 0x760]
call fcn.004098a0
push eax
push str.full_path_to_auto_run_EXE:___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
lea ecx, [ebp - 0xb08]
call fcn.004098a0
push eax
push str.unzipDir:___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
push 0x3c
lea eax, [ebp - 0x100]
pop edi
push edi
push ebx
push eax
call fcn.0042f240
add esp, 0xc
lea ecx, [ebp - 0x760]
mov dword [ebp - 0x100], edi
mov dword [ebp - 0xfc], 0x40
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], ebx
call fcn.00408fc0
lea ecx, [ebp - 0xc40]
mov dword [ebp - 0xf0], eax
call fcn.00408fc0
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0xec], eax
call fcn.00408fc0
mov dword [ebp - 0xe8], eax
lea eax, [ebp - 0x100]
push eax
mov dword [ebp - 0xe4], 5
mov dword [ebp - 0xe0], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
cmp eax, ebx
je 0x403450
lea ecx, [ebp - 0x628]
call fcn.00408aa0
lea eax, [ebp - 0x628]
mov ecx, esi
push eax
push str.AutoExit
mov byte [ebp - 4], 0x13
call fcn.004069e0
push 0x445284
lea ecx, [ebp - 0x628]
call fcn.00409b50
test al, al
je 0x4033b5
push ebx
call fcn.0042f8cf
mov ecx, esi
call fcn.00406d60
test al, al
mov eax, dword [0x4578f8]
je 0x403429
cmp eax, ebx
je 0x4033d6
push str.waiting_for_setup_EXE_to_complete..._r_n
push eax
call fcn.0042f3a7
pop ecx
pop ecx
push 0xffffffffffffffff
push dword [ebp - 0xc8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp + 8]
mov dword [ebp + 8], ebx
push eax
push dword [ebp - 0xc8]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x40341d
mov eax, dword [0x4578f8]
cmp eax, ebx
je 0x403415
push dword [ebp + 8]
push str.GetExitCodeProcess:_exitCode___d_r_n
push eax
call fcn.0042f3a7
add esp, 0xc
mov eax, dword [ebp + 8]
mov dword [0x457904], eax
lea eax, [ebp - 0x44]
push eax
call fcn.00402616
pop ecx
jmp 0x403441
cmp eax, ebx
je 0x40343a
push str.NOT_waiting_for_setup_EXE_to_complete..._r_n
push eax
call fcn.0042f3a7
pop ecx
pop ecx
mov byte [0x45791c], 1
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x628]
jmp 0x403513
lea eax, [ebp - 0x44]
push eax
call fcn.00402616
cmp dword [0x4578f8], ebx
pop ecx
je 0x403481
lea ecx, [ebp - 0x180]
call fcn.00404320
push eax
push str.failed_to_run:___s__r_n
push dword [0x4578f8]
call fcn.0042f3a7
add esp, 0xc
lea ecx, [ebp - 0x2b8]
call fcn.00408aa0
push str.Failed_to_run
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x14
call fcn.00409790
lea ecx, [ebp - 0x180]
call fcn.00404320
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00409790
push str.__working_dir_
lea ecx, [ebp - 0x2b8]
call fcn.00409790
lea ecx, [ebp - 0xc4]
call fcn.00404320
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00409790
push str.__check_to_see_if_this_file_is_in_the_EXE_
lea ecx, [ebp - 0x2b8]
call fcn.00409790
push ebx
push 0x445504
lea ecx, [ebp - 0x2b8]
call fcn.00408fc0
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2b8]
call fcn.00408b70
lea ecx, [ebp - 0x760]
mov byte [ebp - 4], 0x11
call fcn.00408b70
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x10
call fcn.00408b70
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xfe8]
call fcn.00408b70
lea ecx, [ebp - 0xc40]
mov byte [ebp - 4], 0xc
call fcn.00408b70
lea ecx, [ebp - 0xd78]
mov byte [ebp - 4], 0xb
call fcn.00408b70
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0xa
call fcn.004056c0
jmp 0x40357e
lea eax, [ebp - 0x44]
push eax
call fcn.00402616
pop ecx
lea ecx, [ebp - 0x9d0]
mov byte [ebp - 4], 9
call fcn.00408b70
jmp 0x4035b4
lea eax, [ebp - 0x44]
push eax
call fcn.00402616
pop ecx
push ebx
push str.Error
lea ecx, [ebp - 0x4f0]
call fcn.00404320
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
lea eax, [ebp - 0xeb0]
push eax
call fcn.0040c510
lea eax, [ebp - 0x2c]
push eax
call fcn.00402616
pop ecx
mov byte [ebp - 4], 6
pop ecx
lea ecx, [ebp - 0x4f0]
call fcn.004056c0
lea ecx, [ebp - 0xeb0]
mov byte [ebp - 4], 3
call fcn.00408b70
lea ecx, [ebp - 0x898]
mov byte [ebp - 4], 2
call fcn.00408b70
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 1
call fcn.004056c0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.0040d9e0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.0040d9e0
mov al, byte [ebp - 0xe]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret