Function at 0x40261a
Capabilities:
Create process on windows
Delete file
Get common file path
Terminate process

Disassembly:
mov eax, 0x48b1b7
call fcn.0047db90
mov eax, 0x12c4
call fcn.0047de10
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
cmp esi, ebx
push edi
je 0x40264e
push ebx
push 0x3e9
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov edi, 0x4c4bb8
mov ecx, edi
call fcn.0040509d
test al, al
je 0x402693
push esi
call fcn.00402080
test al, al
pop ecx
jne 0x402693
mov eax, dword [0x4c4df8]
cmp eax, ebx
je 0x40267f
push str.Password_is_incorrect._r_n
push eax
call fcn.0047dc05
pop ecx
pop ecx
push ebx
push esi
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x402a9c
mov eax, dword [0x4c4df8]
cmp eax, ebx
je 0x4026e4
push str.Password_verified..._r_n
push eax
call fcn.0047dc05
cmp dword [0x4c4df8], ebx
pop ecx
pop ecx
je 0x4026e4
push 0x3e8
call fcn.0047dc6a
pop ecx
mov esi, eax
push esi
push 0x3e8
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push esi
push str.Current_working_directory:__s_r_n
push dword [0x4c4df8]
call fcn.0047dc05
push esi
call fcn.0047d7af
add esp, 0x10
lea ecx, [ebp - 0x40]
call fcn.0041d9e0
lea ecx, [ebp - 0x408]
mov dword [ebp - 4], ebx
call fcn.00420f80
lea eax, [ebp - 0x408]
mov ecx, edi
push eax
mov byte [ebp - 4], 1
call fcn.004050bf
lea ecx, [ebp - 0x408]
call fcn.004210c0
test eax, eax
je 0x4028de
lea ecx, [ebp - 0x408]
call fcn.00421e20
push eax
lea ecx, [ebp - 0x40]
call fcn.0041d4d0
lea ecx, [ebp - 0xac]
call fcn.0041d9e0
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0xac]
push eax
mov byte [ebp - 4], 2
call fcn.0041ead0
lea ecx, [ebp - 0x40]
call fcn.0041d3c0
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0xac]
push eax
call fcn.0041f120
test al, al
mov esi, 0x4a78dc
jne 0x40278f
push esi
lea ecx, [ebp - 0xac]
call fcn.0041ee90
test al, al
jne 0x40278f
push 0x4a78d8
push esi
lea ecx, [ebp - 0x40]
call fcn.0041e420
push 0x2f
push 0x5c
lea ecx, [ebp - 0x40]
call fcn.0041cbc0
push 0x5c
push 0x2f
lea ecx, [ebp - 0x40]
call fcn.0041cbc0
mov dword [ebp - 0x14], ebx
push esi
lea ecx, [ebp - 0x40]
call fcn.0041ee90
test al, al
je 0x4027d1
push 0x4a78d8
push esi
lea ecx, [ebp - 0x40]
call fcn.0041e420
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x3e8
jle 0x4027aa
cmp dword [0x4c4df8], ebx
je 0x4027f5
lea ecx, [ebp - 0x40]
call fcn.0041c940
push eax
push str.unzipDir____s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
push str.Debug
mov ecx, edi
call fcn.00404f95
test eax, eax
setne al
cmp al, bl
jne 0x4028cd
push ebx
lea ecx, [ebp - 0x40]
call fcn.0041c940
push eax
call fcn.00429190
pop ecx
cmp al, bl
pop ecx
jne 0x4028cd
cmp dword [0x4c4df8], ebx
je 0x40284b
lea ecx, [ebp - 0x40]
call fcn.0041c940
push eax
push str.failed_to_ensure_dir_exists:___s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
lea ecx, [ebp - 0x270]
call fcn.00420f80
push str.Failed_to_ensure_dir_exists:
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 3
call fcn.00421df0
lea ecx, [ebp - 0x40]
call fcn.0041c940
push eax
lea ecx, [ebp - 0x270]
call fcn.00421df0
push ebx
push 0x4a7474
lea ecx, [ebp - 0x270]
call fcn.00421380
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 2
call fcn.00421050
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 1
call fcn.0041dcd0
jmp 0x402a82
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 1
call fcn.0041dcd0
jmp 0x40290a
mov eax, dword [0x4c4df8]
cmp eax, ebx
je 0x4028f4
push str.Selecting_temp_dir_for_unzipping..._r_n
push eax
call fcn.0047dc05
pop ecx
pop ecx
lea eax, [ebp - 0x40]
push eax
push dword [ebp + 8]
call fcn.004022b9
pop ecx
test al, al
pop ecx
je 0x402a82
mov esi, 0x4a7894
lea ecx, [ebp - 0x40]
push esi
call fcn.0041d660
test al, al
je 0x40292a
push 0x4c4e28
push esi
lea ecx, [ebp - 0x40]
call fcn.0041e300
cmp dword [0x4c4df8], ebx
je 0x40294e
lea ecx, [ebp - 0x40]
call fcn.0041c940
push eax
push str.Final_unzip_dir:___s_..._r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
push str.Debug
mov ecx, edi
call fcn.00404f95
test eax, eax
lea ecx, [ebp - 0x40]
setne byte [ebp - 0xd]
call fcn.0041c950
test eax, eax
je 0x402ab2
lea ecx, [ebp - 0x270]
call fcn.00420f80
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 4
call fcn.0041c940
push eax
lea ecx, [ebp - 0x270]
call fcn.00421df0
cmp dword [0x4c4df8], ebx
je 0x4029ba
lea ecx, [ebp - 0x270]
call fcn.00421e20
push eax
push str.Setting_CWD___s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
cmp byte [ebp - 0xd], bl
jne 0x402aa3
lea eax, [ebp - 0x270]
push 0x1bbe
push eax
call fcn.004243d0
movzx eax, al
pop ecx
cmp eax, ebx
pop ecx
jne 0x402aa3
cmp dword [0x4c4df8], ebx
je 0x402a05
lea ecx, [ebp - 0x40]
call fcn.0041c940
push eax
push str.failed_to_set_current_dir:___s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
lea ecx, [ebp - 0x380]
call fcn.00420f80
push str.Failed_to_set_current_dir:
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 5
call fcn.00421df0
lea ecx, [ebp - 0x40]
call fcn.0041c940
push eax
lea ecx, [ebp - 0x380]
call fcn.00421df0
push ebx
push 0x4a7474
lea ecx, [ebp - 0x380]
call fcn.00421380
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 4
call fcn.00421050
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 1
call fcn.00421050
lea ecx, [ebp - 0x408]
mov byte [ebp - 4], bl
call fcn.00421050
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.0041dcd0
xor al, al
jmp 0x403703
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 1
call fcn.00421050
lea ecx, [ebp - 0x84]
call fcn.00426870
push str.Cleanup
mov ecx, edi
mov byte [ebp - 4], 6
call fcn.00404f95
test eax, eax
setne byte [ebp - 0x14]
cmp byte [ebp - 0x14], bl
je 0x402aee
mov eax, dword [0x4c4df8]
cmp eax, ebx
je 0x402aee
push str.cleanup_is_requested..._r_n
push eax
call fcn.0047dc05
pop ecx
pop ecx
mov ecx, edi
call fcn.00405215
test al, al
jne 0x402b12
mov eax, dword [0x4c4df8]
cmp eax, ebx
je 0x402b0f
push str.WaitForSetup_if_false__therefore_cannot_cleanup_files._r_n
push eax
call fcn.0047dc05
pop ecx
pop ecx
mov byte [ebp - 0x14], bl
push str.AutoExit
mov ecx, edi
call fcn.00404f95
test eax, eax
setne al
cmp al, bl
je 0x402b40
mov eax, dword [0x4c4df8]
cmp eax, ebx
je 0x402b3d
push str.AutoExit_if_true__therefore_cannot_cleanup_files._r_n
push eax
call fcn.0047dc05
pop ecx
pop ecx
mov byte [ebp - 0x14], bl
lea ecx, [ebp - 0x1e8]
call fcn.0041d9e0
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 7
call fcn.00420f80
lea eax, [ebp - 0x540]
mov ecx, 0x4c4bb8
push eax
mov byte [ebp - 4], 8
call fcn.004050f7
lea ecx, [ebp - 0x540]
call fcn.004210c0
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
mov esi, 0x3f0
test eax, eax
je 0x402fac
lea ecx, [ebp - 0x44]
call fcn.00428f40
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 9
call fcn.0041d9e0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0x4a7788
call fcn.00425790
add esp, 0xc
lea ecx, [ebp - 0x1c0]
push str..zip
push str..tmp
call fcn.0041e300
lea ecx, [ebp - 0x12d0]
call fcn.004052a9
push ebx
lea ecx, [ebp - 0x12d0]
mov byte [ebp - 4], 0xb
call fcn.00408eb4
push ebx
lea ecx, [ebp - 0x12d0]
call fcn.00408ec1
push 1
lea ecx, [ebp - 0x12d0]
call fcn.004054fb
push ebx
lea ecx, [ebp - 0x12d0]
call fcn.00405237
lea ecx, [ebp - 0x12d0]
call fcn.00405508
push 1
lea ecx, [ebp - 0x12d0]
call fcn.00408ece
lea ecx, [ebp - 0x14]
call fcn.004295b0
mov dword [ebp - 0x14], 0x4942f4
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0xc
call fcn.00420f80
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0xd
call fcn.0041c940
push eax
lea ecx, [ebp - 0x170]
call fcn.00421df0
cmp dword [0x4c4df8], ebx
je 0x402cac
lea ecx, [ebp - 0x540]
call fcn.00421e20
push eax
push str.download_from___s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
lea ecx, [ebp - 0x170]
call fcn.00421e20
push eax
push str.download_to___s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
lea ecx, [ebp - 0x70]
call fcn.0041d9e0
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xe
call fcn.0041d9e0
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0xf
call fcn.0041d9e0
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0x10
call fcn.00421e20
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041d4d0
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.0042967c
pop ecx
pop ecx
lea ecx, [ebp - 0x198]
call fcn.0041c950
test eax, eax
je 0x402d34
push str.Downloading_from
lea ecx, [ebp - 0x70]
call fcn.0041d4d0
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x70]
push eax
call fcn.0041ead0
push str._...
jmp 0x402d39
push str.Downloading_...
lea ecx, [ebp - 0x70]
call fcn.0041d4d0
cmp dword [ebp + 8], ebx
je 0x402d5a
push esi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push ebx
push 0x402
push eax
call edi
lea ecx, [ebp - 0x70]
call fcn.0041c940
push eax
push 0x3f8
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x12d0]
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x540]
push eax
mov byte [ebp - 0xe], bl
call fcn.004060ad
cmp al, bl
je 0x402f1d
cmp dword [ebp + 8], ebx
je 0x402db8
push esi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push ebx
push 0x402
push eax
call edi
mov dword [0x4c4e18], ebx
lea ecx, [ebp - 0x4b8]
call fcn.00408efd
push str.Test
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x11
call fcn.0040911b
push 1
lea ecx, [ebp - 0x4b8]
call fcn.00408ef3
lea ecx, [ebp - 0x170]
call fcn.00421e20
push eax
lea ecx, [ebp - 0x4b8]
call fcn.004090b0
cmp al, bl
jne 0x402e18
push ebx
push str.Error
push str.Failed_to_open_.zip
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x402efa
lea ecx, [ebp - 0x18]
call fcn.0040912a
mov dword [ebp - 0x18], 0x4942b0
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x12
call fcn.0041c940
push eax
lea ecx, [ebp - 0x4b8]
call fcn.00408fea
cmp eax, ebx
mov dword [ebp - 0x48], eax
jge 0x402e63
push ebx
push str.Error
push str.Failed_to_unzip
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x402ee7
cmp dword [ebp + 8], ebx
je 0x402ee3
push esi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push 0x64
push 0x402
push eax
call edi
lea ecx, [ebp - 0xac]
call fcn.0041d9e0
push str.Unzipped
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x13
call fcn.0041d4d0
push dword [ebp - 0x48]
lea ecx, [ebp - 0xac]
call fcn.0041d190
push str._files.
lea ecx, [ebp - 0xac]
call fcn.0041d4d0
lea ecx, [ebp - 0xac]
call fcn.0041c940
push eax
push 0x3f8
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x12
call fcn.0041dcd0
mov byte [ebp - 0xe], 1
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x18], 0x4942b0
call fcn.0040914f
lea ecx, [ebp - 0x170]
call fcn.00421970
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x10
call fcn.00408f8f
jmp 0x402f34
push ebx
push str.Error
push str.Failed_to_download_Zip
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [ebp - 0xe], bl
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0xf
call fcn.0041dcd0
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xe
call fcn.0041dcd0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xd
call fcn.0041dcd0
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0xc
call fcn.00421050
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x14], 0x4942f4
call fcn.004295e0
lea ecx, [ebp - 0x12d0]
mov byte [ebp - 4], 0xa
call fcn.00405375
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 9
call fcn.0041dcd0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 8
call fcn.00428f80
jmp 0x40300f
push dword [ebp - 0x14]
lea eax, [ebp - 0x84]
lea ecx, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1e8]
push eax
call fcn.0041c940
push eax
push dword [ebp + 8]
call fcn.00401e7a
mov byte [ebp - 0xe], al
mov eax, dword [0x4c4e20]
add esp, 0x14
cmp eax, ebx
je 0x40300f
cmp byte [ebp - 0xe], bl
je 0x403691
push str.Finished_unzipping.
push 0x3f8
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push esi
push dword [0x4c4e20]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push 0x64
push 0x402
push eax
call edi
cmp byte [ebp - 0xe], bl
je 0x403691
push str.Debug
mov ecx, 0x4c4bb8
call fcn.00404f95
test eax, eax
mov eax, dword [0x4c4df8]
setne byte [ebp - 0xd]
cmp eax, ebx
je 0x403043
push str.Unzip_complete..._r_n
push eax
call fcn.0047dc05
pop ecx
pop ecx
lea ecx, [ebp - 0x5c8]
call fcn.00420f80
lea eax, [ebp - 0x5c8]
mov ecx, 0x4c4bb8
push eax
mov byte [ebp - 4], 0x14
call fcn.004051af
lea ecx, [ebp - 0x5c8]
call fcn.004210c0
test eax, eax
je 0x403099
cmp dword [0x4c4df8], ebx
je 0x403099
lea ecx, [ebp - 0x5c8]
call fcn.00421e20
push eax
push str.setup_filename:___s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
cmp byte [ebp - 0xd], bl
jne 0x403673
lea ecx, [ebp - 0x5c8]
call fcn.004210c0
test eax, eax
je 0x403673
lea ecx, [ebp - 0x70]
call fcn.0041d9e0
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 0x15
call fcn.00421e20
push eax
lea ecx, [ebp - 0x70]
call fcn.0041d4d0
lea ecx, [ebp - 0x760]
call fcn.00420f80
lea eax, [ebp - 0x760]
mov ecx, 0x4c4bb8
push eax
mov byte [ebp - 4], 0x16
call fcn.004051c9
lea ecx, [ebp - 0x760]
mov dword [ebp - 0x14], ebx
call fcn.004210c0
test eax, eax
je 0x40312f
lea ecx, [ebp - 0x760]
call fcn.00421970
mov dword [ebp - 0x14], eax
mov eax, dword [0x4c4df8]
cmp eax, ebx
je 0x40312f
push dword [ebp - 0x14]
push str.setup_args:___s__r_n
push eax
call fcn.0047dc05
add esp, 0xc
push 0x2f
push 0x5c
lea ecx, [ebp - 0x70]
call fcn.0041cbc0
push 0x4a7670
push 0x4a766c
lea ecx, [ebp - 0x70]
call fcn.0041e420
push 0x5c
push 0x2f
lea ecx, [ebp - 0x70]
call fcn.0041cbc0
cmp dword [0x4c4df8], ebx
je 0x403199
lea ecx, [ebp - 0x40]
call fcn.0041c940
push eax
push str.working_dir:___s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
lea ecx, [ebp - 0x70]
call fcn.0041c940
push eax
push str.running_exe:___s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
push esi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp eax, ebx
je 0x4031b2
push ebx
push 0x64
push 0x402
push eax
call edi
lea ecx, [ebp - 0x650]
call fcn.00420f80
push dword [ebp - 0x14]
lea ecx, [ebp - 0x650]
mov byte [ebp - 4], 0x17
call fcn.00421df0
push str.shell
lea ecx, [ebp - 0x70]
call fcn.0041f1c0
test al, al
je 0x40332b
mov esi, 0x4c4bb8
mov ecx, esi
call fcn.00405215
test al, al
lea ecx, [ebp - 0x650]
je 0x403203
call fcn.00421970
push eax
push ebx
jmp 0x40320b
call fcn.00421970
push eax
push 1
call fcn.004023d1
pop ecx
mov byte [ebp - 0xd], al
pop ecx
lea ecx, [ebp - 0x2f8]
call fcn.00420f80
lea eax, [ebp - 0x2f8]
mov ecx, esi
push eax
push str.AutoExit
mov byte [ebp - 4], 0x18
call fcn.00404f7c
push 0x4a71e8
lea ecx, [ebp - 0x2f8]
call fcn.004220d0
test al, al
je 0x403251
push ebx
call fcn.0047dd3a
lea eax, [ebp - 0x84]
push eax
call fcn.00402465
cmp byte [ebp - 0xd], bl
pop ecx
jne 0x40331c
cmp dword [0x4c4df8], ebx
je 0x40328b
lea ecx, [ebp - 0x70]
call fcn.0041c940
push eax
push str.failed_to_run:___s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
lea ecx, [ebp - 0x170]
call fcn.00420f80
push str.Failed_to_run
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x19
call fcn.00421df0
lea ecx, [ebp - 0x70]
call fcn.0041c940
push eax
lea ecx, [ebp - 0x170]
call fcn.00421df0
push str.__working_dir_
lea ecx, [ebp - 0x170]
call fcn.00421df0
lea ecx, [ebp - 0x40]
call fcn.0041c940
push eax
lea ecx, [ebp - 0x170]
call fcn.00421df0
push str.__check_to_see_if_this_file_is_in_the_EXE_
lea ecx, [ebp - 0x170]
call fcn.00421df0
push ebx
push 0x4a7474
lea ecx, [ebp - 0x170]
call fcn.00421380
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x18
call fcn.00421050
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x2f8]
jmp 0x403642
lea ecx, [ebp - 0x490]
call fcn.00420f80
lea ecx, [ebp - 0x6d8]
mov byte [ebp - 4], 0x1a
call fcn.00420f80
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x1b
call fcn.0041c940
push eax
lea ecx, [ebp - 0x490]
call fcn.00421df0
lea ecx, [ebp - 0x40]
call fcn.0041c940
push eax
lea ecx, [ebp - 0x6d8]
call fcn.00421df0
lea ecx, [ebp - 0x2f8]
call fcn.00420f80
lea eax, [ebp - 0x2f8]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x490]
push eax
lea eax, [ebp - 0x6d8]
push eax
call fcn.004252f0
add esp, 0xc
cmp dword [0x4c4df8], ebx
je 0x403413
mov edi, 0x3e8
push edi
call fcn.0047dc6a
pop ecx
mov esi, eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push esi
push str.Current_working_directory:__s_r_n
push dword [0x4c4df8]
call fcn.0047dc05
push esi
call fcn.0047d7af
add esp, 0x10
lea ecx, [ebp - 0x2f8]
call fcn.00421e20
push eax
push str.full_path_to_auto_run_EXE:___s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
lea ecx, [ebp - 0x6d8]
call fcn.00421e20
push eax
push str.unzipDir:___s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
push 0x3c
lea eax, [ebp - 0xe8]
pop esi
push esi
push ebx
push eax
call fcn.0047d630
add esp, 0xc
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 0xe8], esi
mov dword [ebp - 0xe4], 0x40
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
call fcn.00421380
lea ecx, [ebp - 0x650]
mov dword [ebp - 0xd8], eax
call fcn.00421380
lea ecx, [ebp - 0x6d8]
mov dword [ebp - 0xd4], eax
call fcn.00421380
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xe8]
push eax
mov dword [ebp - 0xcc], 5
mov dword [ebp - 0xc8], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
cmp eax, ebx
je 0x403558
lea ecx, [ebp - 0x380]
call fcn.00420f80
lea eax, [ebp - 0x380]
mov esi, 0x4c4bb8
push eax
push str.AutoExit
mov ecx, esi
mov byte [ebp - 4], 0x1d
call fcn.00404f7c
push 0x4a71e8
lea ecx, [ebp - 0x380]
call fcn.004220d0
test al, al
je 0x4034dc
push ebx
call fcn.0047dd3a
mov ecx, esi
call fcn.00405215
test al, al
mov eax, dword [0x4c4df8]
je 0x403538
cmp eax, ebx
je 0x4034fd
push str.waiting_for_setup_EXE_to_complete..._r_n
push eax
call fcn.0047dc05
pop ecx
pop ecx
push 0xffffffffffffffff
push dword [ebp - 0xb0]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp + 8]
mov dword [ebp + 8], ebx
push eax
push dword [ebp - 0xb0]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x40352a
mov eax, dword [ebp + 8]
mov dword [0x4c4e04], eax
lea eax, [ebp - 0x84]
push eax
call fcn.00402465
jmp 0x403548
cmp eax, ebx
je 0x403549
push str.NOT_waiting_for_setup_EXE_to_complete..._r_n
push eax
call fcn.0047dc05
pop ecx
pop ecx
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x380]
jmp 0x403615
lea eax, [ebp - 0x84]
push eax
call fcn.00402465
cmp dword [0x4c4df8], ebx
pop ecx
je 0x403589
lea ecx, [ebp - 0x70]
call fcn.0041c940
push eax
push str.failed_to_run:___s__r_n
push dword [0x4c4df8]
call fcn.0047dc05
add esp, 0xc
lea ecx, [ebp - 0x170]
call fcn.00420f80
push str.Failed_to_run
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x1e
call fcn.00421df0
lea ecx, [ebp - 0x70]
call fcn.0041c940
push eax
lea ecx, [ebp - 0x170]
call fcn.00421df0
push str.__working_dir_
lea ecx, [ebp - 0x170]
call fcn.00421df0
lea ecx, [ebp - 0x40]
call fcn.0041c940
push eax
lea ecx, [ebp - 0x170]
call fcn.00421df0
push str.__check_to_see_if_this_file_is_in_the_EXE_
lea ecx, [ebp - 0x170]
call fcn.00421df0
push ebx
push 0x4a7474
lea ecx, [ebp - 0x170]
call fcn.00421380
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x170]
call fcn.00421050
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 4], 0x1b
call fcn.00421050
lea ecx, [ebp - 0x6d8]
mov byte [ebp - 4], 0x1a
call fcn.00421050
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x490]
call fcn.00421050
lea ecx, [ebp - 0x650]
mov byte [ebp - 4], 0x16
call fcn.00421050
lea ecx, [ebp - 0x760]
mov byte [ebp - 4], 0x15
call fcn.00421050
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x14
call fcn.0041dcd0
jmp 0x403680
lea eax, [ebp - 0x84]
push eax
call fcn.00402465
pop ecx
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 8
call fcn.00421050
jmp 0x4036b9
lea eax, [ebp - 0x84]
push eax
call fcn.00402465
pop ecx
push ebx
push str.Error
lea ecx, [ebp - 0x1e8]
call fcn.0041c940
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 7
call fcn.00421050
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 6
call fcn.0041dcd0
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 1
call fcn.00426890
lea ecx, [ebp - 0x408]
mov byte [ebp - 4], bl
call fcn.00421050
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.0041dcd0
mov al, byte [ebp - 0xe]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret