Function at 0x423640
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x5e0
mov eax, dword [0x4642d0]
xor eax, esp
mov dword [esp + 0x5dc], eax
push ebx
push ebp
mov ebp, dword [esp + 0x5ec]
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edi
push 0
push 0
push 0x229
push dword [0x464d10]
call esi
mov dword [esp + 0x14], eax
test eax, eax
jne 0x42369f
push dword [esp + 0x5f8]
call fcn.0042a620
add esp, 4
test eax, eax
jne case.0x4237b0.421
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x18]
jmp 0x4236b3
push 0
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edi, eax
mov ecx, edi
call fcn.00403a90
mov ebx, eax
mov eax, dword [esp + 0x5f8]
mov edx, dword [0x470190]
movzx eax, ax
cmp eax, edx
jb 0x4237a0
mov ecx, dword [0x470194]
add ecx, edx
cmp eax, ecx
jae 0x4237a0
lea ecx, [esp + 0xa4]
sub eax, edx
push ecx
push eax
mov ecx, 0x470078
mov dword [esp + 0x1c], eax
call fcn.00433f50
test eax, eax
je case.0x4237b0.421
push 4
lea eax, [esp + 0xa8]
push str.http
push eax
call fcn.004446e0
add esp, 0xc
test eax, eax
je 0x4238fc
push 3
lea eax, [esp + 0xa8]
push 0x45428c
push eax
call fcn.004446e0
add esp, 0xc
test eax, eax
je 0x4238fc
lea eax, [esp + 0xa4]
push 0
push eax
call fcn.00444a96
add esp, 8
test eax, eax
je 0x4238fc
lea eax, [esp + 0xa4]
push eax
lea eax, [esp + 0x2ac]
push 0x454290
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0x2a8]
push 0
push 0x45353c
push eax
push dword [0x464d0c]
call dword [sym.imp.USER32.dll_MessageBoxA]
push dword [esp + 0x14]
mov ecx, 0x470078
call fcn.00434120
jmp case.0x4237b0.421
add eax, 0xfffffe70
cmp eax, 0x87
ja case.0x4237b0.421
jmp dword [eax*4 + 0x42461c]
call fcn.00423410
jmp case.0x4237b0.421
call fcn.00426fd0
jmp case.0x4237b0.421
push dword [esp + 0x14]
call fcn.004297c0
add esp, 4
jmp case.0x4237b0.421
push dword [esp + 0x14]
call fcn.00429860
add esp, 4
jmp case.0x4237b0.421
push 0
push 0
push 0x10
push dword [esp + 0x20]
call esi
jmp case.0x4237b0.421
call fcn.00429820
jmp case.0x4237b0.421
call fcn.004203f0
jmp case.0x4237b0.421
xor eax, eax
mov ecx, edi
cmp dword [edi + 0xc], eax
sete al
push eax
call fcn.00405750
jmp case.0x4237b0.421
lea eax, [edi + 0x148]
push eax
lea eax, [esp + 0x2ac]
push 0x4542d8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0x2a8]
push 4
push 0x4535a8
push eax
push dword [0x464d0c]
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne case.0x4237b0.421
push dword [esp + 0x14]
call fcn.00429750
add esp, 4
jmp case.0x4237b0.421
push 1
mov ecx, edi
call fcn.004055d0
push 0
push 0x10
call fcn.0043e220
add esp, 8
jmp case.0x4237b0.421
push 2
jmp 0x42387b
push 4
jmp 0x42387b
push 8
jmp 0x42387b
push 0x10
jmp 0x42387b
push 0x20
jmp 0x42387b
push 0x40
jmp 0x42387b
push edi
call fcn.004286f0
add esp, 4
jmp case.0x4237b0.421
lea eax, [esp + 0xa4]
push eax
push 0x42fad0
push dword [0x464d0c]
push 0xdd
push dword [0x464d08]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne case.0x4237b0.421
lea eax, [esp + 0xa4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je case.0x4237b0.421
push 0
lea eax, [esp + 0xa8]
push 0
push eax
call fcn.004272d0
add esp, 0xc
jmp case.0x4237b0.421
push 0x2710
call fcn.0044419d
add esp, 4
mov ebx, eax
push ebx
push 0x42f090
push dword [0x464d0c]
push 0xdb
push dword [0x464d08]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x4239da
push ebx
lea eax, [esp + 0x4ac]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [esp + 0x4a8]
push eax
call edi
lea esi, [eax + 1]
add esi, ebx
cmp byte [esi], 0
jne 0x423995
push 0
lea eax, [esp + 0x4ac]
push 0
push eax
call fcn.004272d0
add esp, 0xc
push ebx
call fcn.00444198
add esp, 4
jmp case.0x4237b0.421
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
nop dword [eax + eax]
push esi
lea eax, [esp + 0x4ac]
push eax
lea eax, [esp + 0xac]
push 0x454334
push eax
call ebp
add esp, 0x10
push esi
call edi
inc eax
push 0
add esi, eax
lea eax, [esp + 0xa8]
push 0
push eax
call fcn.004272d0
add esp, 0xc
cmp byte [esi], 0
jne 0x4239a0
push ebx
call fcn.00444198
add esp, 4
jmp case.0x4237b0.421
push 0
push 0x439ff0
push dword [0x464d0c]
push 0xdf
jmp 0x4245ef
cmp dword [0x46a044], 0
push dword [esp + 0x14]
je 0x423a19
call fcn.00438b40
add esp, 4
jmp case.0x4237b0.421
call fcn.00438a60
add esp, 4
jmp case.0x4237b0.421
push 0
push 0
push 0x10
push ebp
call esi
jmp case.0x4237b0.421
mov ecx, edi
call fcn.00402300
test eax, eax
je case.0x4237b0.421
mov ecx, edi
call fcn.004065e0
jmp case.0x4237b0.421
mov ecx, edi
call fcn.004022e0
test eax, eax
je case.0x4237b0.421
mov ecx, edi
call fcn.004050b0
jmp case.0x4237b0.421
push 0
push 0x9c42
push 0x111
push dword [edi + 4]
call esi
jmp case.0x4237b0.421
push 0
push 0x9c41
push 0x111
push dword [edi + 4]
call esi
jmp case.0x4237b0.421
push 0
push 0x9c43
push 0x111
push dword [edi + 4]
call esi
jmp case.0x4237b0.421
push 0
push 0x9c44
push 0x111
push dword [edi + 4]
call esi
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 0
call dword [eax + 0x104]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 1
call dword [eax + 0x104]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 2
call dword [eax + 0x104]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 3
call dword [eax + 0x104]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 4
call dword [eax + 0x104]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 0
call dword [eax + 0x108]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 1
call dword [eax + 0x108]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x10c]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 0
call dword [eax + 0x13c]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 1
call dword [eax + 0x13c]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 0
call dword [eax + 0x140]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 1
call dword [eax + 0x140]
jmp case.0x4237b0.421
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x5e]
push eax
movzx eax, word [esp + 0x5e]
push eax
movzx eax, word [esp + 0x60]
push eax
push 0x45433c
lea eax, [esp + 0x1b8]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [ebx]
lea ecx, [esp + 0x1bc]
add esp, 0x14
push ecx
mov ecx, ebx
call dword [eax + 0x144]
jmp case.0x4237b0.421
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x64]
push eax
movzx eax, word [esp + 0x66]
push eax
movzx eax, word [esp + 0x68]
push eax
push 0x45434c
jmp 0x423bae
mov eax, dword [ebx]
mov ecx, ebx
push 0
call dword [eax + 0x148]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 1
call dword [eax + 0x148]
jmp case.0x4237b0.421
push 0
push 0x9c45
push 0x111
push dword [edi + 4]
call esi
jmp case.0x4237b0.421
push 0
push 0x9c46
push 0x111
push dword [edi + 4]
call esi
jmp case.0x4237b0.421
cmp dword [ebx + 0x994], 1
je case.0x4237b0.421
mov esi, dword [ebx]
mov ecx, ebx
call dword [esi + 0x188]
neg eax
mov ecx, ebx
sbb eax, eax
inc eax
push eax
call dword [esi + 0x18c]
jmp case.0x4237b0.421
cmp dword [ebx + 0x994], 1
je case.0x4237b0.421
mov esi, dword [ebx]
mov ecx, ebx
call dword [esi + 0x198]
neg eax
mov ecx, ebx
sbb eax, eax
inc eax
push eax
call dword [esi + 0x19c]
jmp case.0x4237b0.421
xor eax, eax
cmp dword [0x464e9c], eax
sete al
mov dword [0x464e9c], eax
jmp case.0x4237b0.421
push ebx
call fcn.00422430
add esp, 4
jmp case.0x4237b0.421
push ebx
push 0x42a290
push ebp
push 0xee
jmp 0x4245ef
mov ecx, edi
call fcn.00403da0
xor ecx, ecx
test eax, eax
cmove ecx, dword [0x464f20]
push ecx
mov ecx, edi
call fcn.00405cd0
jmp case.0x4237b0.421
cmp dword [ebx + 0x994], 1
mov ecx, edi
jne 0x423d08
push 0
push 0xffffffffffffffff
call fcn.00402400
jmp case.0x4237b0.421
push 1
push 0xffffffffffffffff
call fcn.00402400
jmp case.0x4237b0.421
mov eax, dword [edi + 0xd8]
mov ecx, edi
test eax, 0x20000
je 0x423d5b
and eax, 0xfffdffff
push eax
call fcn.00405810
mov eax, dword [edi + 0xd8]
mov ecx, edi
and eax, 0xfffbffff
push eax
call fcn.00405810
mov eax, dword [edi + 0xd8]
mov ecx, edi
and eax, 0xfff7ffff
push eax
call fcn.00405810
jmp case.0x4237b0.421
or eax, 0x20000
push eax
call fcn.00405810
mov eax, dword [edi + 0xd8]
mov ecx, edi
or eax, 0x40000
push eax
call fcn.00405810
mov eax, dword [edi + 0xd8]
mov ecx, edi
or eax, 0x80000
push eax
call fcn.00405810
jmp case.0x4237b0.421
push 0x4629d0
mov ecx, edi
call fcn.004055a0
jmp case.0x4237b0.421
push 0x462a0c
mov ecx, edi
call fcn.004055a0
jmp case.0x4237b0.421
push 0x462a48
mov ecx, edi
call fcn.004055a0
jmp case.0x4237b0.421
push 0x462a84
mov ecx, edi
call fcn.004055a0
jmp case.0x4237b0.421
push 0x462ac0
mov ecx, edi
call fcn.004055a0
jmp case.0x4237b0.421
push 0x462afc
mov ecx, edi
call fcn.004055a0
jmp case.0x4237b0.421
push 0x462b38
mov ecx, edi
call fcn.004055a0
jmp case.0x4237b0.421
push 0x462b74
mov ecx, edi
call fcn.004055a0
jmp case.0x4237b0.421
push 0x462bb0
mov ecx, edi
call fcn.004055a0
jmp case.0x4237b0.421
push 0x462bec
mov ecx, edi
call fcn.004055a0
jmp case.0x4237b0.421
push 0x3c
lea eax, [esp + 0x20]
push 0
push eax
call fcn.004421e0
add esp, 0xc
mov dword [esp + 0x1c], 0x3c
lea eax, [esp + 0x68]
mov dword [esp + 0x20], ebp
mov ecx, edi
push eax
call fcn.00403ac0
lea eax, [esp + 0x68]
mov dword [esp + 0x30], 0x101
mov dword [esp + 0x28], eax
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.COMDLG32.dll_ChooseFontA]
test eax, eax
je case.0x4237b0.421
lea eax, [esp + 0x68]
mov ecx, edi
push eax
call fcn.004055a0
jmp case.0x4237b0.421
push 0x64
mov ecx, edi
call fcn.004056c0
jmp case.0x4237b0.421
push 0x78
mov ecx, edi
call fcn.004056c0
jmp case.0x4237b0.421
push 0x96
mov ecx, edi
call fcn.004056c0
jmp case.0x4237b0.421
push 0xc8
mov ecx, edi
call fcn.004056c0
jmp case.0x4237b0.421
push 0x12c
mov ecx, edi
call fcn.004056c0
jmp case.0x4237b0.421
push 0
mov ecx, edi
call fcn.00405720
jmp case.0x4237b0.421
push 1
mov ecx, edi
call fcn.00405720
mov ecx, edi
call fcn.00403b40
push eax
mov ecx, 0x464ea8
call fcn.00436b40
jmp case.0x4237b0.421
push 2
mov ecx, edi
call fcn.00405720
mov ecx, edi
call fcn.00403b40
push eax
mov ecx, 0x464ea8
call fcn.00436b40
jmp case.0x4237b0.421
push 3
mov ecx, edi
call fcn.00405720
mov ecx, edi
call fcn.00403b40
push eax
mov ecx, 0x464ea8
call fcn.00436b40
jmp case.0x4237b0.421
push 4
mov ecx, edi
call fcn.00405720
mov ecx, edi
call fcn.00403b40
push eax
mov ecx, 0x464ea8
call fcn.00436b40
jmp case.0x4237b0.421
push 5
mov ecx, edi
call fcn.00405720
mov ecx, edi
call fcn.00403b40
push eax
mov ecx, 0x464ea8
call fcn.00436b40
jmp case.0x4237b0.421
xor eax, eax
cmp dword [0x464e88], eax
sete al
mov dword [0x464e88], eax
call fcn.004293e0
jmp case.0x4237b0.421
xor eax, eax
cmp dword [0x464ee0], eax
sete al
mov dword [0x464ee0], eax
call fcn.004293e0
jmp case.0x4237b0.421
xor eax, eax
cmp dword [0x464ee4], eax
sete al
mov dword [0x464ee4], eax
call fcn.004293e0
jmp case.0x4237b0.421
xor eax, eax
cmp dword [0x464ee8], eax
sete al
mov dword [0x464ee8], eax
call fcn.004293e0
jmp case.0x4237b0.421
xor eax, eax
cmp dword [0x464ef0], eax
sete al
mov dword [0x464ef0], eax
call fcn.004293e0
jmp case.0x4237b0.421
xor eax, eax
cmp dword [0x46a4fc], eax
sete al
mov dword [0x46a4fc], eax
call fcn.004293e0
jmp case.0x4237b0.421
push dword [0x464d2c]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x42406c
push eax
push 0x42d330
push ebp
push 0xd5
push dword [0x464d08]
call dword [sym.imp.USER32.dll_CreateDialogParamA]
push 5
push eax
mov dword [0x464d2c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.0x4237b0.421
push 0x711
push dword [0x464d2c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4240a6
push 0
push 2
push 0x111
push dword [0x464d2c]
call esi
push 0
push 0x1f4
push 0x111
push ebp
call esi
jmp case.0x4237b0.421
push dword [0x464d2c]
call dword [sym.imp.USER32.dll_SetFocus]
jmp case.0x4237b0.421
push dword [0x464d2c]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x4240f2
push eax
push 0x42d330
push ebp
push 0xd6
push dword [0x464d08]
call dword [sym.imp.USER32.dll_CreateDialogParamA]
push 5
push eax
mov dword [0x464d2c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.0x4237b0.421
push 0x711
push dword [0x464d2c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
jne 0x4240a6
push eax
push 2
push 0x111
push dword [0x464d2c]
call esi
push 0
push 0x1f9
push 0x111
push ebp
call esi
jmp case.0x4237b0.421
cmp dword [0x464edc], 0
push 0
je 0x424148
push 0x1f7
push 0x111
push ebp
call esi
jmp case.0x4237b0.421
mov ecx, 0x470198
call fcn.00433f40
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je case.0x4237b0.421
mov eax, dword [0x464d30]
and eax, 0xfffffffe
push eax
push 0
mov ecx, 0x470198
call fcn.00433f40
push eax
push 0xffffffffffffffff
mov ecx, edi
call fcn.00403a10
test eax, eax
jne case.0x4237b0.421
push eax
mov ecx, 0x470198
call fcn.00433f40
push eax
lea eax, [esp + 0x2ac]
push 0x45435c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
cmp dword [0x464f08], 0
je 0x4241bb
push 0x40
call dword [sym.imp.USER32.dll_MessageBeep]
lea eax, [esp + 0x2a8]
push eax
push 1
call fcn.0043e220
add esp, 8
jmp case.0x4237b0.421
cmp dword [0x464edc], 0
push 0
je 0x4241ef
push 0x1f8
push 0x111
push ebp
call esi
jmp case.0x4237b0.421
mov ecx, 0x470198
call fcn.00433f40
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je case.0x4237b0.421
mov eax, dword [0x464d30]
or eax, 1
jmp 0x424169
push 1
lea eax, [esp + 0x1c]
mov ecx, edi
push eax
lea eax, [esp + 0x18]
push eax
call fcn.00403bc0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
cmp ecx, edx
jne 0x424258
mov esi, dword [ebx]
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x14]
mov ecx, edi
push eax
call fcn.00403b30
push eax
mov ecx, ebx
call dword [esi + 0x94]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, edx
sub eax, ecx
cmp eax, 0xff
jg case.0x4237b0.421
test eax, eax
jle case.0x4237b0.421
push edx
push ecx
push 0x100
lea eax, [esp + 0x1b4]
mov ecx, edi
push eax
call fcn.00403bd0
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x10]
cmp eax, 0x100
jae 0x424614
mov byte [esp + eax + 0x1a8], 0
mov ecx, 0x470198
lea eax, [esp + 0x1a8]
push eax
call fcn.00433ca0
mov ecx, dword [0x464d30]
mov eax, 0x1f7
mov esi, dword [esp + 0x18]
and ecx, 0xfffffffd
or ecx, 8
cmp word [esp + 0x5f8], ax
jne 0x4242df
and ecx, 0xfffffffe
cmp dword [esp + 0x10], esi
cmovg esi, dword [esp + 0x10]
jmp 0x4242eb
or ecx, 1
cmp dword [esp + 0x10], esi
cmovl esi, dword [esp + 0x10]
push ecx
push 0
mov ecx, 0x470198
call fcn.00433f40
push eax
push esi
mov ecx, edi
call fcn.00403a10
jmp case.0x4237b0.421
push 0x64
push 0xffffffffffffffff
mov ecx, edi
call fcn.00405f90
jmp case.0x4237b0.421
push 0xa
mov ecx, edi
call fcn.00403db0
jmp case.0x4237b0.421
push 0xb
mov ecx, edi
call fcn.00403db0
jmp case.0x4237b0.421
mov ecx, edi
call fcn.00402490
jmp case.0x4237b0.421
push 0
push 0x42de30
push ebp
push 0xd9
push dword [0x464d08]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov dword [esp + 0x10], eax
cmp eax, 0xffffffff
je case.0x4237b0.421
mov ecx, edi
call fcn.00403a90
mov ecx, edi
cmp dword [eax + 0x994], 1
mov eax, dword [esp + 0x10]
je 0x42438a
push 1
push 0
dec eax
push eax
call fcn.00403dd0
jmp case.0x4237b0.421
push 0
push 0
dec eax
push eax
call fcn.00403dd0
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 0
call dword [eax + 0xf4]
jmp case.0x4237b0.421
mov eax, dword [ebx]
mov ecx, ebx
push 1
call dword [eax + 0xf4]
jmp case.0x4237b0.421
mov ecx, edi
call fcn.00403dc0
jmp case.0x4237b0.421
call fcn.0042ead0
cmp eax, 1
jne case.0x4237b0.421
push 0
push 0x42cc60
push ebp
push 0xd7
push dword [0x464d08]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne case.0x4237b0.421
push 0
call fcn.0042dc20
add esp, 4
jmp case.0x4237b0.421
call fcn.0042ead0
cmp eax, 1
jne case.0x4237b0.421
push 0
push 0x42cc60
push ebp
push 0xd8
push dword [0x464d08]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne case.0x4237b0.421
push eax
call fcn.0042dc20
add esp, 4
jmp case.0x4237b0.421
xor eax, eax
cmp dword [0x470270], eax
sete al
push eax
call fcn.00422770
add esp, 4
jmp case.0x4237b0.421
call fcn.0041ae80
jmp case.0x4237b0.421
cmp dword [0x464d18], 0
push 0
je 0x42448e
push 0x45353c
push 0x454378
push dword [0x464d0c]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp case.0x4237b0.421
push 0x42aab0
push dword [0x464d0c]
push 0xda
push dword [0x464d08]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne case.0x4237b0.421
push dword [0x464d0c]
mov dword [0x464d28], eax
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp case.0x4237b0.421
push 0
push 0x432aa0
push ebp
mov dword [0x4701e4], 1
mov dword [0x4701ec], 1
push 0xe4
jmp 0x4245ef
push 0
push 0x43cb50
push ebp
mov dword [0x4701ec], 1
push 0xe9
jmp 0x4245ef
push 0
push 0x417730
push ebp
push 0xea
jmp 0x4245ef
call fcn.00435a90
jmp case.0x4237b0.421
cmp dword [ebx + 0x994], 1
je case.0x4237b0.421
push 0
push 0x427e70
push ebp
push 0xef
jmp 0x4245ef
push 0
push 0
push 0x226
push dword [0x464d10]
call esi
jmp case.0x4237b0.421
push 0
push 1
push 0x226
push dword [0x464d10]
call esi
jmp case.0x4237b0.421
push 1
push ebx
mov ecx, edi
call fcn.00402330
jmp case.0x4237b0.421
push 2
push ebx
mov ecx, edi
call fcn.00402330
jmp case.0x4237b0.421
push 0
push 2
push 0x227
push dword [0x464d10]
call esi
jmp case.0x4237b0.421
push 0
push 0
push 0x228
push dword [0x464d10]
call esi
jmp case.0x4237b0.421
push 5
push 0
push 0
push str.http:__www.soen.kr_project_dangeun_dangeun.htm
push str.open
push ebp
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x4237b0.421
push 5
push 0
push 0
push str.http:__www.soen.kr_project_dangeun_manual_manual.htm
push str.open
push ebp
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x4237b0.421
push 0
push 0x4201a0
push ebp
push 0xc8
push dword [0x464d08]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov ecx, dword [esp + 0x5ec]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0043fe9e
add esp, 0x5e0
ret
call fcn.004402ce
nop dword [eax]
mov bh, 0x37
inc edx
add cl, al
aaa
inc edx
add bl, cl
aaa
inc edx
add ah, bl
aaa
inc edx
add ch, ch
aaa
inc edx
add dh, bh
aaa
inc edx
add byte [eax], cl
cmp byte [edx], al
adc eax, 0xb9004239
cmp byte [edx], al
jns 0x42467a
inc edx
add byte [ebx - 0x68ffbdc8], dl
cmp byte [edx], al
wait
cmp byte [edx], al
lahf
cmp byte [edx], al
mov dword [0xa7004238], eax
cmp byte [edx], al
adc bh, byte [eax]
inc edx
add byte [edi], ah
cmp byte [edx], al
invalid
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add byte [edx + edi], dh
inc edx
add byte [edi + 0x3a], cl
inc edx
add byte [edx + 0x3a], ch
inc edx
add byte [eax - 0x69ffbdc6], al
cmp al, byte [edx]
lodsb al, byte [esi]
cmp al, byte [edx]
sbb al, 0x3c
inc edx
add byte [edx], dh
cmp al, 0x42
add dl, al
cmp al, byte [edx]
sar dword [edx], cl
inc edx
add ah, ah
cmp al, byte [edx]
cmc
cmp al, byte [edx]
push es
cmp eax, dword [edx]
pop ss
cmp eax, dword [edx]
sub byte [ebx], bh
inc edx
add byte [ecx], bh
cmp eax, dword [edx]
dec eax
cmp eax, dword [edx]
pop ecx
cmp eax, dword [edx]
push 0x3b
inc edx
add byte [ebx + 0x3b], bh
inc edx
add byte [ebx + edi + 0x3bd60042], cl
inc edx
add dl, bh
cmp eax, dword [edx]
or edi, dword [edx + eax*2]
add byte [ecx - 1090502084], dh
cmp al, 0x42
add byte [eax + 0x3c], cl
inc edx
add byte [edx + 0x3c], dh
inc edx
add byte [esp + edi + 0x45fb0042], bl
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add al, dl
cmp al, 0x42
add byte [esi], dl
cmp eax, 0x3d910042
inc edx
add byte [edx - 0x4cffbdc3], ah
cmp eax, 0x3dc40042
inc edx
add ch, dl
cmp eax, 0x3de60042
inc edx
add bh, dh
cmp eax, 0x3e080042
inc edx
add byte [ecx], bl
inc edx
add byte [edx], ch
inc edx
add byte [ebx], bh
inc edx
add byte [eax - 0x59ffbdc2], bl
inc edx
add byte [esi + edi + 0x3ec50042], dh
inc edx
add dh, dl
inc edx
add bh, ah
inc edx
add ch, dh
inc edx
add byte [0x3500423f], dl
aas
inc edx
add byte [ebp + 0x3f], dl
inc edx
add byte [ebp + 0x3f], dh
inc edx
add bh, ch
cmp al, 0x42
add byte [edi - 0x36ffbdc1], ch
aas
inc edx
add bl, ah
aas
inc edx
add ch, bh
aas
inc edx
add byte [ebp + 0x1700423f], dl
inc eax
inc edx
add byte [ecx], dh
inc eax
inc edx
add byte [ebx], ch
inc ecx
inc edx
add dl, dl
inc ecx
inc edx
add byte [0x15004242], dl
inc edx
inc edx
add byte [edi + 0x6004240], dh
inc ebx
inc edx
add byte [esi], dl
inc ebx
inc edx
add byte [ebx + eax*2], ah
inc edx
add byte [edx], dh
inc ebx
inc edx
add byte [esi], bh
inc ebx
inc edx
add byte [edx - 0x54ffbdbd], bl
inc ebx
inc edx
add byte [ebx + eax*2 + 0x43c80042], bh
inc edx
add byte [edi], al
inc esp
inc edx
add byte [ebp + 0x44], al
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add bl, bh
inc ebp
inc edx
add byte [esi + 0x44], bl
inc edx
add byte [eax + 0x44], ch
inc edx
add cl, cl
inc esp
inc edx
add bh, ch
inc esp
inc edx
add byte [ebx], cl
inc ebp
inc edx
add byte [0x27004245], bl
inc ebp
inc edx
add byte [edx + 0x5c004245], cl
inc ebp
inc edx
add byte [esi + 0x45], al
inc edx
add byte [ebp - 0x1dffbdbb], bl
inc ebp
inc edx
add cl, cl
inc ebp
inc edx
add byte [eax + 0x72004245], dh
inc ebp
inc edx
add byte [esi + 0x45], bh
inc edx
add ah, cl
int3