Function at 0x4157b0
Capabilities:
Check if file exists
Get file attributes
Move file
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b7d48
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x274
mov eax, dword [0x687b08]
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x10], esp
cmp eax, edi
mov dword [ebp - 0x78], ecx
mov dword [ebp - 4], edi
jne 0x4157ea
mov eax, 0x687b0c
push 0x65cdbc
push eax
lea eax, [ebp - 0x280]
push 0x65cdb0
push eax
call fcn.0058a33e
add esp, 0x10
lea ecx, [ebp - 0x280]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415f31
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x20], eax
mov word [ebp - 0x1c], di
mov esi, dword [0x687b28]
mov byte [ebp - 4], 1
cmp esi, edi
jne 0x415839
mov esi, 0x687b2c
mov edx, str._s_scomponents2idmmzcc.dll
test edx, edx
je 0x41593c
cmp esi, edi
je 0x41593c
mov ecx, str.idmmzcc5
test ecx, ecx
je 0x41593c
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e50
mov bl, 2
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.00403af0
push str.idmmzcc5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00403af0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
call fcn.00589432
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00589432
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005a1be9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x20], edx
je 0x415916
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.005893c2
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.00589432
add esp, 0x18
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x415943
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415cd5
mov esi, dword [0x687b28]
test esi, esi
jne 0x415962
mov esi, 0x687b2c
mov edx, str._s_scomponents2idmcchandler.dll
test edx, edx
je 0x415a62
test esi, esi
je 0x415a62
mov eax, str.idmmzcc5
test eax, eax
je 0x415a62
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e50
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 5
call fcn.00403af0
mov bl, 6
push str.idmmzcc5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00403af0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 7
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
call fcn.00589432
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00589432
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005a1be9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x20], edx
je 0x415a3f
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.005893c2
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.00589432
add esp, 0x18
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 5
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x415a6c
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415cd5
mov esi, dword [0x687b28]
test esi, esi
jne 0x415a8b
mov esi, 0x687b2c
mov edx, str._s_schromeidmmzcc.jar
test edx, edx
je 0x415b8b
test esi, esi
je 0x415b8b
mov eax, str.idmmzcc5
test eax, eax
je 0x415b8b
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e50
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 8
call fcn.00403af0
mov bl, 9
push str.idmmzcc5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00403af0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xa
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
call fcn.00589432
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00589432
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005a1be9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x20], edx
je 0x415b68
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.005893c2
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.00589432
add esp, 0x18
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x415b95
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415cd5
mov esi, dword [0x687b28]
test esi, esi
jne 0x415bb4
mov esi, 0x687b2c
mov edx, str._s_scomponents5idmmzcc.dll
test edx, edx
je 0x415cb4
test esi, esi
je 0x415cb4
mov eax, str.idmmzcc5
test eax, eax
je 0x415cb4
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e50
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xb
call fcn.00403af0
mov bl, 0xc
push str.idmmzcc5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00403af0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xd
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
call fcn.00589432
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00589432
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005a1be9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x20], edx
je 0x415c91
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.005893c2
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.00589432
add esp, 0x18
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xb
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x415cbe
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415cd5
mov eax, dword [ebp + 8]
test eax, eax
je 0x415e74
lea edx, [ebp - 0x280]
push edx
call fcn.00577140
mov esi, eax
add esp, 4
test esi, esi
je 0x415d31
lea eax, [ebp - 0x64]
push eax
push esi
call fcn.00577540
mov ebx, dword [ebp - 0x78]
add esp, 8
xor edi, edi
cmp edi, dword [ebp - 0x64]
jae 0x415d28
mov ecx, dword [ebp + 8]
push ebx
push ecx
push esi
call fcn.004147e0
add esp, 0xc
test eax, eax
jne 0x415d28
mov eax, dword [ebp - 0x64]
inc edi
cmp edi, eax
jae 0x415d28
push esi
call fcn.00577990
add esp, 4
test eax, eax
je 0x415cfc
push esi
call fcn.00577f40
add esp, 4
call fcn.00415540
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x54], eax
mov word [ebp - 0x58], ax
mov esi, dword [0x687b28]
mov byte [ebp - 4], 0xe
cmp esi, eax
jne 0x415d55
mov esi, 0x687b2c
mov edx, 0x65bff8
test edx, edx
je 0x415e58
test esi, esi
je 0x415e58
mov ecx, str.idmmzcc5
test ecx, ecx
je 0x415e58
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e50
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xf
call fcn.00403af0
mov bl, 0x10
push str.idmmzcc5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00403af0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x11
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
call fcn.00589432
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00589432
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005a1be9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x5c], edx
je 0x415e32
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
mov eax, dword [ebp - 0x5c]
push esi
push eax
call fcn.005893c2
mov ecx, dword [ebp - 0x5c]
push ecx
call fcn.00589432
add esp, 0x18
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xe
call fcn.00401070
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x415e5f
lea eax, [ebp - 0x58]
push eax
call fcn.004154c0
add esp, 4
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 1
call fcn.00401070
lea edx, [ebp - 0x14]
push edx
push 0xf003f
push 0
push str.SoftwareMozillaFirefoxExtensions
push reloc.WSOCK32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x415f46
lea eax, [ebp - 0x14]
push 0
push eax
push 0
push 0xf003f
push 0
push 0x6874e8
push 0
push str.SoftwareMozilla
push reloc.WSOCK32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x415f25
mov ecx, dword [ebp - 0x14]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
call ebx
lea edx, [ebp - 0x14]
push 0
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push edx
push 0
push 0xf003f
push 0
push 0x6874e8
push 0
push str.SoftwareMozillaFirefox
push reloc.WSOCK32.dll_accept
call esi
test eax, eax
jne 0x415f25
mov eax, dword [ebp - 0x14]
push eax
call ebx
lea ecx, [ebp - 0x14]
push 0
push ecx
push 0
push 0xf003f
push 0
push 0x6874e8
push 0
push str.SoftwareMozillaFirefoxExtensions
push reloc.WSOCK32.dll_accept
call esi
test eax, eax
je 0x415f4c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0
call fcn.00401070
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov dword [ebp + 8], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x48], eax
mov word [ebp - 0x4c], ax
mov ecx, dword [0x687b28]
mov byte [ebp - 4], 0x12
cmp ecx, eax
mov esi, ecx
jne 0x415f70
mov esi, 0x687b2c
mov edx, 0x65bff8
test edx, edx
je 0x416073
test esi, esi
je 0x416073
mov ecx, str.idmmzcc5
test ecx, ecx
je 0x416073
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e50
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.00403af0
push str.idmmzcc5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00403af0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x15
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
call fcn.00589432
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00589432
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005a1be9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x50], edx
je 0x41604c
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
mov eax, dword [ebp - 0x50]
push esi
push eax
call fcn.005893c2
mov ecx, dword [ebp - 0x50]
push ecx
call fcn.00589432
add esp, 0x18
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x12
call fcn.00401070
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x416138
lea eax, [ebp - 0x4c]
lea esi, [ebp - 0x4c]
push eax
call fcn.00589432
add esp, 4
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea edx, [eax + eax + 2]
mov eax, dword [ebp - 0x14]
push edx
push esi
push 1
push 0
push str.mozilla_cc_internetdownloadmanager.com
push eax
call edi
test eax, eax
jne 0x4160b0
mov dword [ebp + 8], 1
mov ecx, dword [ebp - 0x14]
push ecx
call ebx
lea edx, [ebp - 0x14]
push edx
push 0xf003f
push 0
push str.SoftwareMozillaSeaMonkeyExtensions
push reloc.WSOCK32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x41612d
lea eax, [ebp - 0x14]
push 0
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push eax
push 0
push 0xf003f
push 0
push 0x6874e8
push 0
push str.SoftwareMozillaSeaMonkey
push reloc.WSOCK32.dll_accept
call esi
test eax, eax
jne 0x416169
mov ecx, dword [ebp - 0x14]
push ecx
call ebx
lea edx, [ebp - 0x14]
push 0
push edx
push 0
push 0xf003f
push 0
push 0x6874e8
push 0
push str.SoftwareMozillaSeaMonkeyExtensions
push reloc.WSOCK32.dll_accept
call esi
test eax, eax
jne 0x416169
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x41613f
mov esi, eax
jmp 0x416145
mov esi, eax
jmp 0x416081
lea eax, [ebp - 0x4c]
lea esi, [ebp - 0x4c]
push eax
call fcn.00589432
mov ecx, dword [ebp - 0x14]
add esp, 4
lea eax, [eax + eax + 2]
push eax
push esi
push 1
push 0
push str.mozilla_cc_internetdownloadmanager.com
push ecx
call edi
mov edx, dword [ebp - 0x14]
push edx
call ebx
mov ebx, dword [ebp + 8]
xor esi, esi
cmp ebx, esi
je 0x416330
mov eax, dword [ebp - 0x50]
cmp eax, esi
jne 0x416180
lea eax, [ebp - 0x4c]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push eax
call edi
cmp eax, 0xffffffff
je 0x416330
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x6c], esi
mov word [ebp - 0x70], si
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x60], esi
mov word [ebp - 0x64], si
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x54], esi
mov word [ebp - 0x58], si
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x24], esi
mov word [ebp - 0x28], si
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x30], esi
mov word [ebp - 0x34], si
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x3c], esi
mov word [ebp - 0x40], si
mov eax, dword [0x687b28]
mov byte [ebp - 4], 0x1b
cmp eax, esi
jne 0x4161e0
mov eax, 0x687b2c
push eax
push str._sidmmzcc
lea ecx, [ebp - 0x74]
call fcn.00413490
mov eax, dword [0x687b28]
cmp eax, esi
jne 0x4161fc
mov eax, 0x687b2c
push eax
push str._sidmmzcc2
lea ecx, [ebp - 0x68]
call fcn.00413490
mov eax, dword [0x687b28]
cmp eax, esi
jne 0x416218
mov eax, 0x687b2c
push eax
push str._sidmmzcc3
lea ecx, [ebp - 0x5c]
call fcn.00413490
mov ecx, 0x687b28
call fcn.00401ed0
push eax
push str._sidmmzcc01
lea ecx, [ebp - 0x2c]
call fcn.00413490
mov ecx, 0x687b28
call fcn.00401ed0
push eax
push str._sidmmzcc02
lea ecx, [ebp - 0x38]
call fcn.00413490
mov ecx, 0x687b28
call fcn.00401ed0
push eax
push str._sidmmzcc03
lea ecx, [ebp - 0x44]
call fcn.00413490
lea ecx, [ebp - 0x74]
call fcn.00401ed0
push eax
call edi
cmp eax, 0xffffffff
je 0x41629a
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x74]
call fcn.00401ed0
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
push eax
call esi
jmp 0x4162a0
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
lea ecx, [ebp - 0x68]
call fcn.00401ed0
push eax
call edi
cmp eax, 0xffffffff
je 0x4162c4
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x68]
call fcn.00401ed0
push eax
call esi
lea ecx, [ebp - 0x5c]
call fcn.00401ed0
push eax
call edi
cmp eax, 0xffffffff
je 0x4162e8
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00401ed0
push eax
call esi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1a
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x19
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.00401070
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x17
call fcn.00401070
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x16
call fcn.00401070
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.00401070
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0
call fcn.00401070
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, ebx
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4