Function at 0x402962
Capabilities:
Create process on windows
Get common file path
Terminate process

Disassembly:
mov eax, 0x44241d
call fcn.00438380
mov eax, 0x109c
call fcn.00438540
push ebx
push esi
push edi
lea ecx, [ebp - 0x48]
call fcn.0040eec0
xor ebx, ebx
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], ebx
call fcn.0040eec0
cmp dword [ebp + 8], ebx
mov byte [ebp - 4], 1
je 0x4029ad
push ebx
push 0x3e9
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov esi, 0x462d58
mov ecx, esi
call fcn.00406e80
test al, al
mov edi, 0x3e8
je 0x402a06
push dword [ebp + 8]
call fcn.0040235b
test al, al
mov eax, dword [0x463148]
pop ecx
jne 0x4029fb
cmp eax, ebx
je 0x4029e5
push str.Password_is_incorrect._r_n
push eax
call fcn.00437f37
pop ecx
pop ecx
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x402f6b
cmp eax, ebx
je 0x402a54
push str.Password_verified..._r_n
jmp 0x402a14
mov eax, dword [0x463148]
cmp eax, ebx
je 0x402a54
push str.Not_encrypted._r_n
push eax
call fcn.00437f37
cmp dword [0x463148], ebx
pop ecx
pop ecx
je 0x402a54
push edi
call fcn.00437f9c
pop ecx
mov dword [ebp - 0x14], eax
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push dword [ebp - 0x14]
push str.Current_working_directory:__s_r_n
push dword [0x463148]
call fcn.00437f37
push dword [ebp - 0x14]
call fcn.00437ed6
add esp, 0x10
lea ecx, [ebp - 0xd4]
call fcn.004058d0
lea ecx, [ebp - 0x8f8]
mov byte [ebp - 4], 2
call fcn.004094f0
lea eax, [ebp - 0x8f8]
mov ecx, esi
push eax
mov byte [ebp - 4], 3
call fcn.00406eb0
lea ecx, [ebp - 0x8f8]
call fcn.00409640
test eax, eax
je 0x402d1b
lea ecx, [ebp - 0x8f8]
call fcn.0040a920
push eax
lea ecx, [ebp - 0xd4]
call fcn.00405300
lea ecx, [ebp - 0x358]
call fcn.004058d0
lea eax, [ebp - 0xd4]
lea ecx, [ebp - 0x358]
push eax
mov byte [ebp - 4], 4
call fcn.00406460
lea ecx, [ebp - 0xd4]
call fcn.004051d0
lea eax, [ebp - 0xd4]
lea ecx, [ebp - 0x358]
push eax
call fcn.00406a70
test al, al
mov edi, 0x44f954
jne 0x402b12
push edi
lea ecx, [ebp - 0x358]
call fcn.00406850
test al, al
jne 0x402b12
push 0x44f950
push edi
lea ecx, [ebp - 0xd4]
call fcn.004061d0
push 0x2f
push 0x5c
lea ecx, [ebp - 0xd4]
call fcn.00404750
push 0x5c
push 0x2f
lea ecx, [ebp - 0xd4]
call fcn.00404750
mov dword [ebp - 0x14], ebx
push edi
lea ecx, [ebp - 0xd4]
call fcn.00406850
test al, al
je 0x402b60
push 0x44f950
push edi
lea ecx, [ebp - 0xd4]
call fcn.004061d0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x3e8
jle 0x402b33
cmp dword [0x463148], ebx
je 0x402b87
lea ecx, [ebp - 0xd4]
call fcn.004044e0
push eax
push str.unzipDir____s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
push str.Debug
mov ecx, esi
call fcn.00406cf0
test eax, eax
setne al
cmp al, bl
jne 0x402d07
cmp dword [0x463148], ebx
je 0x402bc7
lea ecx, [ebp - 0xd4]
call fcn.004044e0
push eax
push str.Check_create_extract_dir:___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
lea ecx, [ebp - 0x54]
call fcn.004104e0
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 5
call fcn.004044e0
push eax
call fcn.004107b0
add esp, 0xc
cmp al, bl
jne 0x402caf
cmp dword [0x463148], ebx
je 0x402c1e
lea ecx, [ebp - 0xd4]
call fcn.004044e0
push eax
push str.failed_to_ensure_dir_exists:___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
lea ecx, [ebp - 0x4a0]
call fcn.004094f0
push str.Failed_to_ensure_dir_exists:
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 6
call fcn.0040a7f0
lea ecx, [ebp - 0xd4]
call fcn.004044e0
push eax
lea ecx, [ebp - 0x4a0]
call fcn.0040a7f0
push ebx
push 0x44f504
lea ecx, [ebp - 0x4a0]
call fcn.00409970
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 5
call fcn.00409580
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.00410520
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 3
call fcn.00405990
jmp 0x402f4d
cmp dword [0x463148], ebx
je 0x402cfb
lea ecx, [ebp - 0x30]
call fcn.00431130
test eax, eax
je 0x402ce9
push ebx
lea ecx, [ebp - 0x30]
call fcn.0040ef20
mov ecx, eax
call fcn.004044e0
push eax
push str.created_unzip_dir:___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
jmp 0x402cfb
push str.No_top_level_directory_added_to_undo_list_r_n
push dword [0x463148]
call fcn.00437f37
pop ecx
pop ecx
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 4
call fcn.00410520
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 3
call fcn.00405990
jmp 0x402d9b
mov eax, dword [0x463148]
cmp eax, ebx
je 0x402d31
push str.Selecting_temp_dir_for_unzipping..._r_n
push eax
call fcn.00437f37
pop ecx
pop ecx
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp + 8]
call fcn.0040259f
add esp, 0xc
test al, al
je 0x402f4d
cmp dword [0x463148], ebx
je 0x402d9b
lea ecx, [ebp - 0x30]
call fcn.00431130
test eax, eax
je 0x402d89
push ebx
lea ecx, [ebp - 0x30]
call fcn.0040ef20
mov ecx, eax
call fcn.004044e0
push eax
push str.created_unzip_dir:___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
jmp 0x402d9b
push str.No_top_level_directory_added_to_undo_list_r_n
push dword [0x463148]
call fcn.00437f37
pop ecx
pop ecx
mov edi, 0x44f8a0
lea ecx, [ebp - 0xd4]
push edi
call fcn.00405470
test al, al
je 0x402dc1
push 0x463180
push edi
lea ecx, [ebp - 0xd4]
call fcn.00405e20
cmp dword [0x463148], ebx
je 0x402de8
lea ecx, [ebp - 0xd4]
call fcn.004044e0
push eax
push str.Final_unzip_dir:___s_..._r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
push str.Debug
mov ecx, esi
call fcn.00406cf0
test eax, eax
lea ecx, [ebp - 0xf60]
setne byte [ebp - 0xd]
call fcn.004094f0
lea eax, [ebp - 0xf60]
mov byte [ebp - 4], 7
push eax
call fcn.0040c110
pop ecx
lea ecx, [ebp - 0xd4]
call fcn.004044f0
test eax, eax
je 0x402f98
lea ecx, [ebp - 0x4a0]
call fcn.004094f0
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 8
call fcn.004044e0
push eax
lea ecx, [ebp - 0x4a0]
call fcn.0040a7f0
cmp dword [0x463148], ebx
je 0x402e76
lea ecx, [ebp - 0x4a0]
call fcn.0040a920
push eax
push str.Setting_CWD___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
cmp byte [ebp - 0xd], bl
jne 0x402f89
lea eax, [ebp - 0x4a0]
push eax
call fcn.0040da10
movzx eax, al
cmp eax, ebx
pop ecx
jne 0x402f89
cmp dword [0x463148], ebx
je 0x402ebe
lea ecx, [ebp - 0xd4]
call fcn.004044e0
push eax
push str.failed_to_set_current_dir:___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
lea ecx, [ebp - 0x668]
call fcn.004094f0
push str.Failed_to_set_current_dir:
lea ecx, [ebp - 0x668]
mov byte [ebp - 4], 9
call fcn.0040a7f0
lea ecx, [ebp - 0xd4]
call fcn.004044e0
push eax
lea ecx, [ebp - 0x668]
call fcn.0040a7f0
push ebx
push 0x44f504
lea ecx, [ebp - 0x668]
call fcn.00409970
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x668]
mov byte [ebp - 4], 8
call fcn.00409580
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 7
call fcn.00409580
lea ecx, [ebp - 0xf60]
mov byte [ebp - 4], 3
call fcn.00409580
lea ecx, [ebp - 0x8f8]
mov byte [ebp - 4], 2
call fcn.00409580
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 1
call fcn.00405990
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], bl
call fcn.0040eee0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040eee0
xor al, al
jmp 0x4037ec
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 7
call fcn.00409580
push str.Cleanup
mov ecx, esi
call fcn.00406cf0
test eax, eax
setne byte [ebp - 0x14]
cmp byte [ebp - 0x14], bl
je 0x402fc5
mov eax, dword [0x463148]
cmp eax, ebx
je 0x402fc5
push str.cleanup_is_requested..._r_n
push eax
call fcn.00437f37
pop ecx
pop ecx
mov ecx, esi
call fcn.00407040
test al, al
jne 0x402fe9
mov eax, dword [0x463148]
cmp eax, ebx
je 0x402fe6
push str.WaitForSetup_if_false__therefore_cannot_cleanup_files._r_n
push eax
call fcn.00437f37
pop ecx
pop ecx
mov byte [ebp - 0x14], bl
push str.AutoExit
mov ecx, esi
call fcn.00406cf0
test eax, eax
setne al
cmp al, bl
je 0x403017
mov eax, dword [0x463148]
cmp eax, ebx
je 0x403014
push str.AutoExit_if_true__therefore_cannot_cleanup_files._r_n
push eax
call fcn.00437f37
pop ecx
pop ecx
mov byte [ebp - 0x14], bl
lea ecx, [ebp - 0x520]
call fcn.004058d0
push dword [ebp - 0x14]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x520]
push eax
call fcn.004044e0
push eax
push dword [ebp + 8]
call fcn.00402113
mov byte [ebp - 0x15], al
mov eax, dword [0x463174]
add esp, 0x14
cmp eax, ebx
mov edi, 0x3f0
je 0x403092
cmp byte [ebp - 0x15], bl
je 0x403751
push str.Finished_unzipping.
push 0x3f8
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push edi
push dword [0x463174]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp byte [ebp - 0x15], bl
je 0x403751
push str.Debug
mov ecx, esi
call fcn.00406cf0
test eax, eax
mov eax, dword [0x463148]
setne byte [ebp - 0xd]
cmp eax, ebx
je 0x4030c3
push str.Unzip_complete..._r_n
push eax
call fcn.00437f37
pop ecx
pop ecx
lea ecx, [ebp - 0xa40]
call fcn.004094f0
lea eax, [ebp - 0xa40]
mov ecx, esi
push eax
mov byte [ebp - 4], 0xb
call fcn.00406fc0
lea ecx, [ebp - 0xa40]
call fcn.00409640
test eax, eax
je 0x403116
cmp dword [0x463148], ebx
je 0x403116
lea ecx, [ebp - 0xa40]
call fcn.0040a920
push eax
push str.setup_filename:___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
cmp byte [ebp - 0xd], bl
jne 0x403736
lea ecx, [ebp - 0xa40]
call fcn.00409640
test eax, eax
je 0x403736
lea ecx, [ebp - 0x190]
call fcn.004058d0
lea ecx, [ebp - 0xa40]
mov byte [ebp - 4], 0xc
call fcn.0040a920
push eax
lea ecx, [ebp - 0x190]
call fcn.00405300
lea ecx, [ebp - 0xe18]
call fcn.004094f0
lea eax, [ebp - 0xe18]
mov ecx, esi
push eax
mov byte [ebp - 4], 0xd
call fcn.00406fe0
lea ecx, [ebp - 0xe18]
mov dword [ebp - 0x14], ebx
call fcn.00409640
test eax, eax
je 0x4031af
lea ecx, [ebp - 0xe18]
call fcn.0040a920
mov dword [ebp - 0x14], eax
mov eax, dword [0x463148]
cmp eax, ebx
je 0x4031af
push dword [ebp - 0x14]
push str.setup_args:___s__r_n
push eax
call fcn.00437f37
add esp, 0xc
push 0x2f
push 0x5c
lea ecx, [ebp - 0x190]
call fcn.00404750
push 0x44f740
push 0x44f73c
lea ecx, [ebp - 0x190]
call fcn.004061d0
push 0x5c
push 0x2f
lea ecx, [ebp - 0x190]
call fcn.00404750
cmp dword [0x463148], ebx
je 0x403228
lea ecx, [ebp - 0xd4]
call fcn.004044e0
push eax
push str.working_dir:___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
lea ecx, [ebp - 0x190]
call fcn.004044e0
push eax
push str.running_exe:___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
push edi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp eax, ebx
je 0x403245
push ebx
push 0x64
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0xcd0]
call fcn.004094f0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xcd0]
mov byte [ebp - 4], 0xe
call fcn.0040a7f0
push str.shell
lea ecx, [ebp - 0x190]
call fcn.00406b10
test al, al
je 0x4033c2
mov ecx, esi
call fcn.00407040
test al, al
lea ecx, [ebp - 0xcd0]
je 0x403294
call fcn.00409f10
push eax
push ebx
jmp 0x40329c
call fcn.00409f10
push eax
push 1
call fcn.00402704
pop ecx
mov byte [ebp - 0xd], al
pop ecx
lea ecx, [ebp - 0x7b0]
call fcn.004094f0
lea eax, [ebp - 0x7b0]
mov ecx, esi
push eax
push str.AutoExit
mov byte [ebp - 4], 0xf
call fcn.00406cc0
push 0x44f284
lea ecx, [ebp - 0x7b0]
call fcn.0040ad40
test al, al
je 0x4032e2
push ebx
call fcn.00438461
lea eax, [ebp - 0x48]
push eax
call fcn.004027ad
cmp byte [ebp - 0xd], bl
pop ecx
jne 0x4033b3
cmp dword [0x463148], ebx
je 0x40331c
lea ecx, [ebp - 0x190]
call fcn.004044e0
push eax
push str.failed_to_run:___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
lea ecx, [ebp - 0x2d8]
call fcn.004094f0
push str.Failed_to_run
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x10
call fcn.0040a7f0
lea ecx, [ebp - 0x190]
call fcn.004044e0
push eax
lea ecx, [ebp - 0x2d8]
call fcn.0040a7f0
push str.__working_dir_
lea ecx, [ebp - 0x2d8]
call fcn.0040a7f0
lea ecx, [ebp - 0xd4]
call fcn.004044e0
push eax
lea ecx, [ebp - 0x2d8]
call fcn.0040a7f0
push str.__check_to_see_if_this_file_is_in_the_EXE_
lea ecx, [ebp - 0x2d8]
call fcn.0040a7f0
push ebx
push 0x44f504
lea ecx, [ebp - 0x2d8]
call fcn.00409970
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0xf
call fcn.00409580
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x7b0]
jmp 0x403702
lea ecx, [ebp - 0x10a8]
call fcn.004094f0
lea ecx, [ebp - 0xb88]
mov byte [ebp - 4], 0x11
call fcn.004094f0
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x12
call fcn.004044e0
push eax
lea ecx, [ebp - 0x10a8]
call fcn.0040a7f0
lea ecx, [ebp - 0xd4]
call fcn.004044e0
push eax
lea ecx, [ebp - 0xb88]
call fcn.0040a7f0
lea ecx, [ebp - 0x7b0]
call fcn.004094f0
lea eax, [ebp - 0x7b0]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x10a8]
push eax
lea eax, [ebp - 0xb88]
push eax
call fcn.0040e120
add esp, 0xc
cmp dword [0x463148], ebx
je 0x4034b3
push 0x3e8
call fcn.00437f9c
pop ecx
mov edi, eax
push edi
push 0x3e8
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push edi
push str.Current_working_directory:__s_r_n
push dword [0x463148]
call fcn.00437f37
push edi
call fcn.00437ed6
add esp, 0x10
lea ecx, [ebp - 0x7b0]
call fcn.0040a920
push eax
push str.full_path_to_auto_run_EXE:___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
lea ecx, [ebp - 0xb88]
call fcn.0040a920
push eax
push str.unzipDir:___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
push 0x3c
lea eax, [ebp - 0x110]
pop edi
push edi
push ebx
push eax
call fcn.00437dd0
add esp, 0xc
lea ecx, [ebp - 0x7b0]
mov dword [ebp - 0x110], edi
mov dword [ebp - 0x10c], 0x40
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x104], ebx
call fcn.00409970
lea ecx, [ebp - 0xcd0]
mov dword [ebp - 0x100], eax
call fcn.00409970
lea ecx, [ebp - 0xb88]
mov dword [ebp - 0xfc], eax
call fcn.00409970
mov dword [ebp - 0xf8], eax
lea eax, [ebp - 0x110]
push eax
mov dword [ebp - 0xf4], 5
mov dword [ebp - 0xf0], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
cmp eax, ebx
je 0x403612
lea ecx, [ebp - 0x668]
call fcn.004094f0
lea eax, [ebp - 0x668]
mov ecx, esi
push eax
push str.AutoExit
mov byte [ebp - 4], 0x14
call fcn.00406cc0
push 0x44f284
lea ecx, [ebp - 0x668]
call fcn.0040ad40
test al, al
je 0x403577
push ebx
call fcn.00438461
mov ecx, esi
call fcn.00407040
test al, al
mov eax, dword [0x463148]
je 0x4035eb
cmp eax, ebx
je 0x403598
push str.waiting_for_setup_EXE_to_complete..._r_n
push eax
call fcn.00437f37
pop ecx
pop ecx
push 0xffffffffffffffff
push dword [ebp - 0xd8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp + 8]
mov dword [ebp + 8], ebx
push eax
push dword [ebp - 0xd8]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x4035df
mov eax, dword [0x463148]
cmp eax, ebx
je 0x4035d7
push dword [ebp + 8]
push str.GetExitCodeProcess:_exitCode___d_r_n
push eax
call fcn.00437f37
add esp, 0xc
mov eax, dword [ebp + 8]
mov dword [0x463154], eax
lea eax, [ebp - 0x48]
push eax
call fcn.004027ad
pop ecx
jmp 0x403603
cmp eax, ebx
je 0x4035fc
push str.NOT_waiting_for_setup_EXE_to_complete..._r_n
push eax
call fcn.00437f37
pop ecx
pop ecx
mov byte [0x46316c], 1
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x668]
jmp 0x4036d5
lea eax, [ebp - 0x48]
push eax
call fcn.004027ad
cmp dword [0x463148], ebx
pop ecx
je 0x403643
lea ecx, [ebp - 0x190]
call fcn.004044e0
push eax
push str.failed_to_run:___s__r_n
push dword [0x463148]
call fcn.00437f37
add esp, 0xc
lea ecx, [ebp - 0x2d8]
call fcn.004094f0
push str.Failed_to_run
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x15
call fcn.0040a7f0
lea ecx, [ebp - 0x190]
call fcn.004044e0
push eax
lea ecx, [ebp - 0x2d8]
call fcn.0040a7f0
push str.__working_dir_
lea ecx, [ebp - 0x2d8]
call fcn.0040a7f0
lea ecx, [ebp - 0xd4]
call fcn.004044e0
push eax
lea ecx, [ebp - 0x2d8]
call fcn.0040a7f0
push str.__check_to_see_if_this_file_is_in_the_EXE_
lea ecx, [ebp - 0x2d8]
call fcn.0040a7f0
push ebx
push 0x44f504
lea ecx, [ebp - 0x2d8]
call fcn.00409970
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x2d8]
call fcn.00409580
lea ecx, [ebp - 0x7b0]
mov byte [ebp - 4], 0x12
call fcn.00409580
lea ecx, [ebp - 0xb88]
mov byte [ebp - 4], 0x11
call fcn.00409580
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x10a8]
call fcn.00409580
lea ecx, [ebp - 0xcd0]
mov byte [ebp - 4], 0xd
call fcn.00409580
lea ecx, [ebp - 0xe18]
mov byte [ebp - 4], 0xc
call fcn.00409580
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0xb
call fcn.00405990
jmp 0x403740
lea eax, [ebp - 0x48]
push eax
call fcn.004027ad
pop ecx
lea ecx, [ebp - 0xa40]
mov byte [ebp - 4], 0xa
call fcn.00409580
jmp 0x40377f
lea eax, [ebp - 0x48]
push eax
call fcn.004027ad
pop ecx
call fcn.00401237
test al, al
jne 0x40377f
push ebx
push str.Error
lea ecx, [ebp - 0x520]
call fcn.004044e0
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
lea eax, [ebp - 0xf60]
push eax
call fcn.0040da10
lea eax, [ebp - 0x30]
push eax
call fcn.004027ad
pop ecx
mov byte [ebp - 4], 7
pop ecx
lea ecx, [ebp - 0x520]
call fcn.00405990
lea ecx, [ebp - 0xf60]
mov byte [ebp - 4], 3
call fcn.00409580
lea ecx, [ebp - 0x8f8]
mov byte [ebp - 4], 2
call fcn.00409580
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 1
call fcn.00405990
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], bl
call fcn.0040eee0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0040eee0
mov al, byte [ebp - 0x15]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret