Function at 0x4018c0
Capabilities:
Check if file exists
Create directory
Create process on windows
Get common file path
Get file attributes
Print debug messages
Query environment variable
Set current directory
Set environment variable

Disassembly:
sub esp, 0x734
push ebp
push esi
push edi
push str.advapi32.dll
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
push eax
call fcn.00402d70
xor ebp, ebp
push ebp
push ebp
push ebp
push 0x400
push 0x6801
mov ecx, 0x19
mov esi, str.WD_uRbO___8FUB_ll2FNl99_spsG0o2kUn_hzl__L1C6_qPS_G_QB_cEHtitO_G_V3D1Z_jPQE12oI45N_WG_sZNJIS
lea edi, [esp + 0x6f0]
rep movsd dword es:[edi], dword [esi]
push 0x80
push 0x8004
push 1
push str.Microsoft_Enhanced_Cryptographic_Provider_v1.0
lea eax, [esp + 0x700]
push 0x64
push eax
movsb byte es:[edi], byte [esi]
call fcn.0040a570
add esp, 0x30
test al, al
jne 0x401937
call dword [sym.imp.KERNEL32.DLL_GetLastError]
pop edi
pop esi
lea eax, [ebp + 0x40]
pop ebp
add esp, 0x734
ret
mov ecx, dword [0x489f94]
push ebx
lea edx, [esp + 0x10]
push edx
push 0x489f98
mov dword [esp + 0x18], ecx
call fcn.0040a620
mov eax, dword [0x48ba30]
lea ecx, [esp + 0x18]
push ecx
push 0x48b898
mov dword [esp + 0x20], eax
call fcn.0040a620
mov edx, dword [0x48b5dc]
lea eax, [esp + 0x20]
push eax
push 0x48b5e0
mov dword [esp + 0x28], edx
call fcn.0040a620
mov ecx, dword [0x48bdc4]
lea edx, [esp + 0x28]
push edx
push 0x48bb18
mov dword [esp + 0x30], ecx
call fcn.0040a620
mov eax, dword [0x48bfc8]
lea ecx, [esp + 0x30]
push ecx
push 0x48bf38
mov dword [esp + 0x38], eax
call fcn.0040a620
mov edx, dword [0x48921c]
lea eax, [esp + 0x38]
push eax
push 0x4890c8
mov dword [esp + 0x40], edx
call fcn.0040a620
mov ecx, dword [0x4896cc]
lea edx, [esp + 0x40]
push edx
push 0x489358
mov dword [esp + 0x48], ecx
call fcn.0040a620
mov eax, dword [0x48b7d8]
lea ecx, [esp + 0x48]
push ecx
push 0x48b798
mov dword [esp + 0x50], eax
call fcn.0040a620
mov ebx, dword [esp + 0x788]
mov edi, dword [sym.imp.KERNEL32.DLL_lstrcmpiA]
add esp, 0x40
xor esi, esi
cmp ebx, ebp
jle 0x401a3d
jmp 0x401a20
mov edx, dword [0x48b500]
mov eax, dword [esp + 0x74c]
mov ecx, dword [eax + esi*4]
push edx
push ecx
call edi
test eax, eax
je 0x401a79
inc esi
cmp esi, ebx
jl 0x401a20
mov edx, dword [0x48b430]
mov eax, dword [0x48b420]
mov ecx, dword [0x48b460]
push edx
push eax
push ecx
lea edx, [esp + 0x28]
push edx
mov dword [esp + 0x2c], 0xffffffff
call fcn.00404040
add esp, 0x10
test eax, eax
jne 0x401a79
mov eax, dword [esp + 0x1c]
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x734
ret
cmp ebx, ebp
jle 0x401a9c
mov esi, ebp
nop
mov eax, dword [0x48b4c0]
mov ecx, dword [esp + 0x74c]
mov edx, dword [ecx + esi*4]
push eax
push edx
call edi
test eax, eax
je 0x401aec
inc esi
cmp esi, ebx
jl 0x401a80
mov esi, dword [esp + 0x74c]
mov eax, dword [esi]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x401d8f
mov ecx, dword [esi]
push 0x48cd1c
push 0x48cc18
push 0x104
push ecx
call dword [sym.imp.KERNEL32.DLL_GetFullPathNameA]
cmp eax, ebp
je 0x401adc
cmp eax, 0x104
jbe 0x401daf
pop ebx
pop edi
pop esi
mov eax, 0x3c
pop ebp
add esp, 0x734
ret
cmp esi, ebp
mov dword [esp + 0x14], esi
jle 0x401a9c
push 0x207
lea eax, [esp + 0x4a5]
push ebp
push eax
mov byte [esp + 0x4ac], 0
call sub.msvcrt.dll_memset
add esp, 0xc
mov eax, 0x208
lea ecx, [esp + 0x4a0]
mov edi, edi
cmp byte [ecx], 0
je 0x401b2d
inc ecx
sub eax, 1
jne 0x401b20
jmp 0x401b75
cmp eax, ebp
je 0x401b75
mov edx, 0x208
sub edx, eax
mov ecx, 0x208
sub ecx, edx
lea eax, [esp + edx + 0x4a0]
je 0x401b71
mov edi, dword [0x48b500]
lea esi, [ecx + edx + 0x7ffffdf7]
sub edi, eax
cmp esi, ebp
je 0x401b6d
mov dl, byte [edi + eax]
test dl, dl
je 0x401b6d
mov byte [eax], dl
dec ecx
inc eax
dec esi
cmp ecx, ebp
jne 0x401b57
jmp 0x401b71
cmp ecx, ebp
jne 0x401b72
dec eax
mov byte [eax], 0
mov ecx, 0x208
lea eax, [esp + 0x4a0]
cmp byte [eax], 0
je 0x401b8e
inc eax
sub ecx, 1
jne 0x401b81
jmp 0x401bd5
cmp ecx, ebp
je 0x401bd5
mov edx, 0x208
sub edx, ecx
mov ecx, 0x208
sub ecx, edx
lea eax, [esp + edx + 0x4a0]
je 0x401bd1
mov edi, 0x40f5cc
lea esi, [ecx + edx + 0x7ffffdf7]
sub edi, eax
cmp esi, ebp
je 0x401bcd
mov dl, byte [edi + eax]
test dl, dl
je 0x401bcd
mov byte [eax], dl
dec ecx
inc eax
dec esi
cmp ecx, ebp
jne 0x401bb7
jmp 0x401bd1
cmp ecx, ebp
jne 0x401bd2
dec eax
mov byte [eax], 0
mov ebx, 1
cmp dword [esp + 0x748], ebx
jle 0x401cd2
jmp 0x401bf0
cmp ebx, dword [esp + 0x14]
je 0x401cc4
mov ecx, dword [esp + 0x74c]
mov edi, dword [ecx + ebx*4]
mov eax, 0x208
lea ecx, [esp + 0x4a0]
cmp byte [ecx], 0
je 0x401c1d
inc ecx
sub eax, 1
jne 0x401c10
jmp 0x401c5f
cmp eax, ebp
je 0x401c5f
mov edx, 0x208
sub edx, eax
mov ecx, 0x208
sub ecx, edx
lea eax, [esp + edx + 0x4a0]
je 0x401c5b
lea esi, [ecx + edx + 0x7ffffdf7]
sub edi, eax
cmp esi, ebp
je 0x401c57
mov dl, byte [edi + eax]
test dl, dl
je 0x401c57
mov byte [eax], dl
dec ecx
inc eax
dec esi
cmp ecx, ebp
jne 0x401c41
jmp 0x401c5b
cmp ecx, ebp
jne 0x401c5c
dec eax
mov byte [eax], 0
mov eax, 0x208
lea ecx, [esp + 0x4a0]
jmp 0x401c70
cmp byte [ecx], 0
je 0x401c7d
inc ecx
sub eax, 1
jne 0x401c70
jmp 0x401cc4
cmp eax, ebp
je 0x401cc4
mov edx, 0x208
sub edx, eax
mov ecx, 0x208
sub ecx, edx
lea eax, [esp + edx + 0x4a0]
je 0x401cc0
mov edi, 0x40f5cc
lea esi, [ecx + edx + 0x7ffffdf7]
sub edi, eax
cmp esi, ebp
je 0x401cbc
mov dl, byte [edi + eax]
test dl, dl
je 0x401cbc
mov byte [eax], dl
dec ecx
inc eax
dec esi
cmp ecx, ebp
jne 0x401ca6
jmp 0x401cc0
cmp ecx, ebp
jne 0x401cc1
dec eax
mov byte [eax], 0
inc ebx
cmp ebx, dword [esp + 0x748]
jl 0x401bf0
push 6
push ebp
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov edx, dword [0x48b498]
push ebp
push edx
call dword [sym.imp.KERNEL32.DLL_SetEnvironmentVariableA]
push 0x38
lea eax, [esp + 0x44]
push ebp
push eax
call sub.msvcrt.dll_memset
mov ecx, dword [esp + 0x758]
mov edx, dword [ecx]
add esp, 0xc
lea ecx, [esp + 0x3c]
lea eax, [esp + 0x4a0]
push ecx
mov dword [esp + 0x40], 0x3c
mov dword [esp + 0x44], 0x40
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], str.open
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], ebp
mov dword [esp + 0x5c], 5
mov dword [esp + 0x60], ebp
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
je 0x401a9c
mov edx, dword [esp + 0x74]
push 0xffffffffffffffff
push edx
mov dword [esp + 0x1c], 0x41
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
mov ecx, dword [esp + 0x74]
lea eax, [esp + 0x14]
push eax
push ecx
call dword [sym.imp.KERNEL32.DLL_GetExitCodeProcess]
mov edx, dword [esp + 0x74]
push edx
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, dword [esp + 0x14]
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x734
ret
mov edx, dword [sym.imp.msvcrt.dll__pgmptr]
mov byte [0x48cd1b], 0
mov eax, dword [edx]
push 0x103
push eax
push 0x48cc18
call dword [sym.imp.KERNEL32.DLL_lstrcpynA]
push ebp
call dword [sym.imp.msvcrt.dll__time64]
push eax
call dword [sym.imp.msvcrt.dll_srand]
push 0x103
lea ecx, [esp + 0x3a9]
push ebp
push ecx
mov byte [esp + 0x3b0], 0
call sub.msvcrt.dll_memset
add esp, 0x14
mov eax, 0x104
lea ecx, [esp + 0x39c]
cmp byte [ecx], 0
je 0x401df4
inc ecx
sub eax, 1
jne 0x401de7
jmp 0x401e3e
cmp eax, ebp
je 0x401e3e
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx + 0x39c]
je 0x401e3a
mov edi, dword [0x48b438]
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
mov edi, edi
cmp esi, ebp
je 0x401e36
mov dl, byte [edi + eax]
test dl, dl
je 0x401e36
mov byte [eax], dl
dec ecx
inc eax
dec esi
cmp ecx, ebp
jne 0x401e20
jmp 0x401e3a
cmp ecx, ebp
jne 0x401e3b
dec eax
mov byte [eax], 0
push 0x48cd20
push 0x104
call dword [sym.imp.KERNEL32.DLL_GetCurrentDirectoryA]
lea eax, [esp + 0x39c]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x401e58
mov ebx, dword [sym.imp.KERNEL32.DLL_ExpandEnvironmentStringsA]
sub eax, edx
mov dword [esp + 0x14], ebp
lea edi, [esp + eax + 0x39c]
lea ebp, [esp + 0x4a0]
sub ebp, edi
jmp 0x401e80
xor esi, esi
cmp esi, 0x14
jge 0x401ea7
call dword [sym.imp.msvcrt.dll_rand]
xor edx, edx
div dword [0x48b44c]
mov eax, dword [0x48b448]
inc esi
cmp esi, 0x14
mov cl, byte [edx + eax]
mov byte [esp + esi + 0x77], cl
jl 0x401e87
push ebp
lea edx, [esp + 0x7c]
push edx
push edi
mov byte [esp + 0x97], 0
call dword [sym.imp.KERNEL32.DLL_lstrcpynA]
push 0x104
push 0x48c900
lea eax, [esp + 0x3a4]
push eax
call ebx
test eax, eax
jbe 0x401ee3
push 0x48c900
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test al, 0x10
jne 0x401ef1
mov eax, dword [esp + 0x14]
inc eax
cmp eax, 0x64
mov dword [esp + 0x14], eax
jl 0x401e80
push 0x48c900
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test al, 0x10
je 0x401f20
push 0
push 0x48c900
call dword [sym.imp.KERNEL32.DLL_CreateDirectoryA]
test eax, eax
je 0x401f20
push 0x48c900
call dword [sym.imp.KERNEL32.DLL_SetCurrentDirectoryA]
test eax, eax
jne 0x401f30
pop ebx
pop edi
pop esi
mov eax, 0x3b
pop ebp
add esp, 0x734
ret
push 0x103
lea ecx, [esp + 0x29d]
push 0
push ecx
mov byte [esp + 0x2a4], 0
call sub.msvcrt.dll_memset
push 0x103
lea edx, [esp + 0x1a5]
push 0
push edx
mov byte [esp + 0x1ac], 0
call sub.msvcrt.dll_memset
push 0x103
lea eax, [esp + 0xad]
push 0
push eax
mov byte [esp + 0xb4], 0
call sub.msvcrt.dll_memset
add esp, 0x24
mov eax, 0x104
lea ecx, [esp + 0x298]
cmp byte [ecx], 0
je 0x401fa0
inc ecx
sub eax, 1
jne 0x401f93
jmp 0x401fee
test eax, eax
je 0x401fee
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx + 0x298]
je 0x401fea
mov edi, 0x48c900
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
lea esp, [esp]
test esi, esi
je 0x401fe6
mov dl, byte [edi + eax]
test dl, dl
je 0x401fe6
mov byte [eax], dl
dec ecx
inc eax
dec esi
test ecx, ecx
jne 0x401fd0
jmp 0x401fea
test ecx, ecx
jne 0x401feb
dec eax
mov byte [eax], 0
mov eax, 0x104
lea ecx, [esp + 0x298]
lea ebx, [ebx]
cmp byte [ecx], 0
je 0x40200d
inc ecx
sub eax, 1
jne 0x402000
jmp 0x402054
test eax, eax
je 0x402054
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx + 0x298]
je 0x402050
mov edi, 0x40f5c0
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
test esi, esi
je 0x40204c
mov dl, byte [eax + edi]
test dl, dl
je 0x40204c
mov byte [eax], dl
dec ecx
inc eax
dec esi
test ecx, ecx
jne 0x402036
jmp 0x402050
test ecx, ecx
jne 0x402051
dec eax
mov byte [eax], 0
mov eax, 0x104
lea ecx, [esp + 0x298]
cmp byte [ecx], 0
je 0x40206d
inc ecx
sub eax, 1
jne 0x402060
jmp 0x4020b5
test eax, eax
je 0x4020b5
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx + 0x298]
je 0x4020b1
mov edi, dword [0x48b358]
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
test esi, esi
je 0x4020ad
mov dl, byte [eax + edi]
test dl, dl
je 0x4020ad
mov byte [eax], dl
dec ecx
inc eax
dec esi
test ecx, ecx
jne 0x402097
jmp 0x4020b1
test ecx, ecx
jne 0x4020b2
dec eax
mov byte [eax], 0
mov ecx, dword [0x489020]
mov edx, dword [0x48901c]
mov eax, dword [0x489018]
push ecx
push edx
push eax
lea ecx, [esp + 0x2a4]
push 0x48c7f8
push ecx
call fcn.00404530
mov dword [0x48ca04], eax
add esp, 0x14
mov eax, 0x104
lea ecx, [esp + 0x194]
nop
cmp byte [ecx], 0
je 0x4020fd
inc ecx
sub eax, 1
jne 0x4020f0
jmp 0x402144
test eax, eax
je 0x402144
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx + 0x194]
je 0x402140
mov edi, 0x48c900
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
test esi, esi
je 0x40213c
mov dl, byte [eax + edi]
test dl, dl
je 0x40213c
mov byte [eax], dl
dec ecx
inc eax
dec esi
test ecx, ecx
jne 0x402126
jmp 0x402140
test ecx, ecx
jne 0x402141
dec eax
mov byte [eax], 0
mov eax, 0x104
lea ecx, [esp + 0x194]
cmp byte [ecx], 0
je 0x40215d
inc ecx
sub eax, 1
jne 0x402150
jmp 0x4021a4
test eax, eax
je 0x4021a4
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx + 0x194]
je 0x4021a0
mov edi, 0x40f5bc
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
test esi, esi
je 0x40219c
mov dl, byte [eax + edi]
test dl, dl
je 0x40219c
mov byte [eax], dl
dec ecx
inc eax
dec esi
test ecx, ecx
jne 0x402186
jmp 0x4021a0
test ecx, ecx
jne 0x4021a1
dec eax
mov byte [eax], 0
mov ebx, dword [sym.imp.msvcrt.dll_rand]
xor esi, esi
lea esp, [esp]
cmp esi, 0xc
jge 0x4021d1
call ebx
xor edx, edx
div dword [0x48b44c]
mov eax, dword [0x48b448]
inc esi
cmp esi, 8
mov cl, byte [edx + eax]
mov byte [esp + esi + 0x1f], cl
jl 0x4021b0
mov byte [esp + 0x28], 0
mov eax, 0x104
lea ecx, [esp + 0x194]
cmp byte [ecx], 0
je 0x4021ef
inc ecx
sub eax, 1
jne 0x4021e2
jmp 0x402235
test eax, eax
je 0x402235
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx + 0x194]
je 0x402231
lea edi, [esp + 0x20]
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
test esi, esi
je 0x40222d
mov dl, byte [eax + edi]
test dl, dl
je 0x40222d
mov byte [eax], dl
dec ecx
inc eax
dec esi
test ecx, ecx
jne 0x402217
jmp 0x402231
test ecx, ecx
jne 0x402232
dec eax
mov byte [eax], 0
mov eax, 0x104
lea ecx, [esp + 0x194]
cmp byte [ecx], 0
je 0x40224e
inc ecx
sub eax, 1
jne 0x402241
jmp 0x402296
test eax, eax
je 0x402296
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx + 0x194]
je 0x402292
mov edi, dword [0x48b450]
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
test esi, esi
je 0x40228e
mov dl, byte [eax + edi]
test dl, dl
je 0x40228e
mov byte [eax], dl
dec ecx
inc eax
dec esi
test ecx, ecx
jne 0x402278
jmp 0x402292
test ecx, ecx
jne 0x402293
dec eax
mov byte [eax], 0
mov edx, dword [0x489050]
mov eax, dword [0x48904c]
mov ecx, dword [0x489048]
push edx
push eax
push ecx
lea edx, [esp + 0x1a0]
push 0x48ca08
push edx
call fcn.00404530
mov dword [0x48c8fc], eax
add esp, 0x14
mov eax, 0x104
lea ecx, [esp + 0x90]
cmp byte [ecx], 0
je 0x4022dd
inc ecx
sub eax, 1
jne 0x4022d0
jmp 0x402324
test eax, eax
je 0x402324
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx + 0x90]
je 0x402320
mov edi, 0x48c900
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
test esi, esi
je 0x40231c
mov dl, byte [edi + eax]
test dl, dl
je 0x40231c
mov byte [eax], dl
dec ecx
inc eax
dec esi
test ecx, ecx
jne 0x402306
jmp 0x402320
test ecx, ecx
jne 0x402321
dec eax
mov byte [eax], 0
mov eax, 0x104
lea ecx, [esp + 0x90]
cmp byte [ecx], 0
je 0x40233d
inc ecx
sub eax, 1
jne 0x402330
jmp 0x402384
test eax, eax
je 0x402384
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx + 0x90]
je 0x402380
mov edi, 0x40f5b8
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
test esi, esi
je 0x40237c
mov dl, byte [edi + eax]
test dl, dl
je 0x40237c
mov byte [eax], dl
dec ecx
inc eax
dec esi
test ecx, ecx
jne 0x402366
jmp 0x402380
test ecx, ecx
jne 0x402381
dec eax
mov byte [eax], 0
xor esi, esi
cmp esi, 0xc
jge 0x4023a7
call ebx
xor edx, edx
div dword [0x48b44c]
mov eax, dword [0x48b448]
inc esi
cmp esi, 9
mov cl, byte [edx + eax]
mov byte [esp + esi + 0x1f], cl
jl 0x402386
mov byte [esp + 0x29], 0
mov eax, 0x104
lea ecx, [esp + 0x90]
cmp byte [ecx], 0
je 0x4023c5
inc ecx
sub eax, 1
jne 0x4023b8
jmp 0x40240e
test eax, eax
je 0x40240e
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx + 0x90]
je 0x40240a
lea edi, [esp + 0x20]
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
lea ecx, [ecx]
test esi, esi
je 0x402406
mov dl, byte [edi + eax]
test dl, dl
je 0x402406
mov byte [eax], dl
dec ecx
inc eax
dec esi
test ecx, ecx
jne 0x4023f0
jmp 0x40240a
test ecx, ecx
jne 0x40240b
dec eax
mov byte [eax], 0
mov eax, 0x104
lea ecx, [esp + 0x90]
lea ebx, [ebx]
cmp byte [ecx], 0
je 0x40242d
inc ecx
sub eax, 1
jne 0x402420
jmp 0x402475
test eax, eax
je 0x402475
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx + 0x90]
je 0x402471
mov edi, dword [0x48b450]
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
test esi, esi
je 0x40246d
mov dl, byte [edi + eax]
test dl, dl
je 0x40246d
mov byte [eax], dl
dec ecx
inc eax
dec esi
test ecx, ecx
jne 0x402457
jmp 0x402471
test ecx, ecx
jne 0x402472
dec eax
mov byte [eax], 0
mov edx, dword [0x48902c]
mov eax, dword [0x489028]
mov ecx, dword [0x489024]
push edx
push eax
push ecx
lea edx, [esp + 0x9c]
push edx
mov eax, edx
push eax
call fcn.00404530
mov ecx, dword [0x48ca04]
push ecx
mov dword [0x48cb0c], eax
call fcn.00403430
mov edx, dword [0x48c8fc]
push edx
call fcn.00402a00
mov eax, dword [0x48cb0c]
push eax
call fcn.004053c0
add esp, 0x20
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
push eax
call fcn.004053b0
call fcn.004033c0
mov esi, eax
test esi, esi
jne 0x4024f8
push 0x48c900
call section..text
add esp, 4
pop ebx
pop edi
lea eax, [esi + 0x37]
pop esi
pop ebp
add esp, 0x734
ret
push 0x100
push 0
push esi
call fcn.00403420
push esi
call fcn.004032c0
mov ebx, dword [esp + 0x758]
push 0
push ebx
push esi
call fcn.00403230
xor edi, edi
add esp, 0x1c
mov dword [esp + 0x14], edi
test ebx, ebx
jle 0x40255f
mov ebp, dword [esp + 0x74c]
nop
fild dword [esp + 0x14]
sub esp, 8
fstp qword [esp]
push esi
call fcn.00403190
mov ecx, dword [ebp + edi*4]
push ecx
push esi
call fcn.004031c0
push 0xfffffffffffffffd
push esi
call fcn.00403260
inc edi
add esp, 0x1c
cmp edi, ebx
mov dword [esp + 0x14], edi
jl 0x402530
mov edx, dword [0x48b4a0]
push edx
push 0xffffd8ee
push esi
call fcn.00403270
push esi
push 0x40f5a6
call fcn.004045f0
push fcn.004045f0
push 0
push 0
push 0
call fcn.004029c0
add esp, 0x24
mov ecx, 0x10
lea eax, [esp + 0x2c]
mov byte [eax], 0
inc eax
sub ecx, 1
jne 0x402598
lea eax, [esp + 0x2c]
push eax
push esi
call fcn.00403200
mov ecx, dword [0x48b418]
push ecx
push 0xffffd8ee
push esi
call fcn.00403270
mov edx, dword [0x48b380]
push edx
push esi
call fcn.004033b0
add esp, 0x1c
push 0
test eax, eax
je 0x4025ed
push 0xffffffffffffffff
push esi
call fcn.00403140
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.DLL_OutputDebugStringA]
mov ebx, 0x38
jmp 0x402626
push 1
push 0
push esi
call fcn.004032b0
add esp, 0x10
test eax, eax
je 0x402619
push 0
push 0xffffffffffffffff
push esi
call fcn.00403140
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.DLL_OutputDebugStringA]
mov ebx, 0x39
jmp 0x402626
push 0xffffffffffffffff
push esi
call fcn.00403120
add esp, 8
mov ebx, eax
mov edi, 1
jmp 0x402630
cmp ebx, 0x63
jne 0x402643
push 0
call fcn.004029e0
add esp, 4
mov ebx, eax
jmp 0x402630
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4026b6
mov ecx, dword [esp + 0x30]
test ecx, ecx
jne 0x4026b6
mov edx, dword [0x48b390]
push edx
push esi
call fcn.004033b0
add esp, 8
push 0
test eax, eax
jne 0x402683
push edi
push eax
push esi
call fcn.004032b0
add esp, 0x10
test eax, eax
jne 0x402681
mov dword [esp + 0x30], edi
lea ebx, [eax + 0x63]
jmp 0x402630
push 0
push 0xffffffffffffffff
push esi
call fcn.00403140
push 0xffffffffffffffff
push esi
mov ebp, eax
call fcn.00403150
add esp, 0x14
test eax, eax
jbe 0x4026b6
lea edi, [eax + 1]
push edi
call dword [sym.imp.msvcrt.dll_malloc]
add esp, 4
test eax, eax
je 0x4026b6
push edi
push ebp
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpynA]
mov edi, dword [esp + 0x34]
mov eax, dword [0x48b508]
push eax
call fcn.004029d0
add esp, 4
cmp edi, 0xffffffff
je 0x4026d9
push 0x1388
push edi
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
call fcn.004018a0
push esi
call fcn.00403070
mov ecx, dword [esp + 0x3c]
add esp, 4
test ecx, ecx
je 0x402743
mov esi, dword [sym.imp.KERNEL32.DLL_GetStdHandle]
push 0xfffffffffffffff6
call esi
push 0xfffffffffffffff5
mov edi, eax
call esi
mov esi, dword [0x48b490]
mov ecx, esi
mov dword [esp + 0x18], 0
lea ebp, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x402712
push 0
lea edx, [esp + 0x1c]
push edx
sub ecx, ebp
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.DLL_WriteConsoleA]
push 0
lea eax, [esp + 0x1c]
push eax
push 0x31
lea ecx, [esp + 0x6b4]
push ecx
push edi
call dword [sym.imp.KERNEL32.DLL_ReadConsoleA]
push 0x48c900
call section..text
push 0x48c900
call fcn.00401490
add esp, 8
mov eax, ebx
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x734
ret