Function at 0x415550
Capabilities:
Check if file exists
Get file attributes
Move file
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ad198
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x274
mov eax, dword [0x67a008]
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x10], esp
cmp eax, edi
mov dword [ebp - 0x78], ecx
mov dword [ebp - 4], edi
jne 0x41558a
mov eax, 0x67a00c
push 0x64fdec
push eax
lea eax, [ebp - 0x280]
push 0x64fde0
push eax
call fcn.0057f81e
add esp, 0x10
lea ecx, [ebp - 0x280]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415cd1
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x20], eax
mov word [ebp - 0x1c], di
mov esi, dword [0x67a028]
mov byte [ebp - 4], 1
cmp esi, edi
jne 0x4155d9
mov esi, 0x67a02c
mov edx, 0x650a4c
test edx, edx
je 0x4156dc
cmp esi, edi
je 0x4156dc
mov ecx, 0x650a6c
test ecx, ecx
je 0x4156dc
push edx
lea ecx, [ebp - 0x44]
call fcn.00401f30
mov bl, 2
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.00403bb0
push 0x650a6c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00403bb0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401fb0
push eax
call fcn.0057e90a
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005970d9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x20], edx
je 0x4156b6
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401fb0
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.0057e90a
add esp, 0x18
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4156e3
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415a75
mov esi, dword [0x67a028]
test esi, esi
jne 0x415702
mov esi, 0x67a02c
mov edx, 0x650a08
test edx, edx
je 0x415802
test esi, esi
je 0x415802
mov eax, 0x650a6c
test eax, eax
je 0x415802
push edx
lea ecx, [ebp - 0x44]
call fcn.00401f30
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 5
call fcn.00403bb0
mov bl, 6
push 0x650a6c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00403bb0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 7
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401fb0
push eax
call fcn.0057e90a
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005970d9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x20], edx
je 0x4157df
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401fb0
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.0057e90a
add esp, 0x18
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 5
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x41580c
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415a75
mov esi, dword [0x67a028]
test esi, esi
jne 0x41582b
mov esi, 0x67a02c
mov edx, 0x65094c
test edx, edx
je 0x41592b
test esi, esi
je 0x41592b
mov eax, 0x650a6c
test eax, eax
je 0x41592b
push edx
lea ecx, [ebp - 0x44]
call fcn.00401f30
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 8
call fcn.00403bb0
mov bl, 9
push 0x650a6c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00403bb0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xa
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401fb0
push eax
call fcn.0057e90a
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005970d9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x20], edx
je 0x415908
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401fb0
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.0057e90a
add esp, 0x18
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x415935
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415a75
mov esi, dword [0x67a028]
test esi, esi
jne 0x415954
mov esi, 0x67a02c
mov edx, 0x6509c4
test edx, edx
je 0x415a54
test esi, esi
je 0x415a54
mov eax, 0x650a6c
test eax, eax
je 0x415a54
push edx
lea ecx, [ebp - 0x44]
call fcn.00401f30
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xb
call fcn.00403bb0
mov bl, 0xc
push 0x650a6c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00403bb0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xd
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401fb0
push eax
call fcn.0057e90a
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005970d9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x20], edx
je 0x415a31
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401fb0
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.0057e90a
add esp, 0x18
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xb
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x415a5e
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415a75
mov eax, dword [ebp + 8]
test eax, eax
je 0x415c14
lea edx, [ebp - 0x280]
push edx
call fcn.0056c370
mov esi, eax
add esp, 4
test esi, esi
je 0x415ad1
lea eax, [ebp - 0x64]
push eax
push esi
call fcn.0056c770
mov ebx, dword [ebp - 0x78]
add esp, 8
xor edi, edi
cmp edi, dword [ebp - 0x64]
jae 0x415ac8
mov ecx, dword [ebp + 8]
push ebx
push ecx
push esi
call fcn.00414580
add esp, 0xc
test eax, eax
jne 0x415ac8
mov eax, dword [ebp - 0x64]
inc edi
cmp edi, eax
jae 0x415ac8
push esi
call fcn.0056cbc0
add esp, 4
test eax, eax
je 0x415a9c
push esi
call fcn.0056d170
add esp, 4
call fcn.004152e0
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x54], eax
mov word [ebp - 0x58], ax
mov esi, dword [0x67a028]
mov byte [ebp - 4], 0xe
cmp esi, eax
jne 0x415af5
mov esi, 0x67a02c
mov edx, 0x64f030
test edx, edx
je 0x415bf8
test esi, esi
je 0x415bf8
mov ecx, 0x650a6c
test ecx, ecx
je 0x415bf8
push edx
lea ecx, [ebp - 0x44]
call fcn.00401f30
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xf
call fcn.00403bb0
mov bl, 0x10
push 0x650a6c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00403bb0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x11
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401fb0
push eax
call fcn.0057e90a
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005970d9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x5c], edx
je 0x415bd2
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401fb0
push eax
mov eax, dword [ebp - 0x5c]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [ebp - 0x5c]
push ecx
call fcn.0057e90a
add esp, 0x18
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xe
call fcn.00401070
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x415bff
lea eax, [ebp - 0x58]
push eax
call fcn.00415260
add esp, 4
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 1
call fcn.00401070
lea edx, [ebp - 0x14]
push edx
push 0xf003f
push 0
push 0x651288
push reloc.WSOCK32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x415ce6
lea eax, [ebp - 0x14]
push 0
push eax
push 0
push 0xf003f
push 0
push 0x679a28
push 0
push 0x651274
push reloc.WSOCK32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x415cc5
mov ecx, dword [ebp - 0x14]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
call ebx
lea edx, [ebp - 0x14]
push 0
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push edx
push 0
push 0xf003f
push 0
push 0x679a28
push 0
push 0x651258
push reloc.WSOCK32.dll_accept
call esi
test eax, eax
jne 0x415cc5
mov eax, dword [ebp - 0x14]
push eax
call ebx
lea ecx, [ebp - 0x14]
push 0
push ecx
push 0
push 0xf003f
push 0
push 0x679a28
push 0
push 0x651288
push reloc.WSOCK32.dll_accept
call esi
test eax, eax
je 0x415cec
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0
call fcn.00401070
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov dword [ebp + 8], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x48], eax
mov word [ebp - 0x4c], ax
mov ecx, dword [0x67a028]
mov byte [ebp - 4], 0x12
cmp ecx, eax
mov esi, ecx
jne 0x415d10
mov esi, 0x67a02c
mov edx, 0x64f030
test edx, edx
je 0x415e13
test esi, esi
je 0x415e13
mov ecx, 0x650a6c
test ecx, ecx
je 0x415e13
push edx
lea ecx, [ebp - 0x44]
call fcn.00401f30
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.00403bb0
push 0x650a6c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00403bb0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x15
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
call fcn.0057e90a
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401fb0
push eax
call fcn.0057e90a
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005970d9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x50], edx
je 0x415dec
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401fb0
push eax
mov eax, dword [ebp - 0x50]
push esi
push eax
call fcn.0057e89a
mov ecx, dword [ebp - 0x50]
push ecx
call fcn.0057e90a
add esp, 0x18
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x12
call fcn.00401070
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x415ed8
lea eax, [ebp - 0x4c]
lea esi, [ebp - 0x4c]
push eax
call fcn.0057e90a
add esp, 4
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea edx, [eax + eax + 2]
mov eax, dword [ebp - 0x14]
push edx
push esi
push 1
push 0
push 0x651208
push eax
call edi
test eax, eax
jne 0x415e50
mov dword [ebp + 8], 1
mov ecx, dword [ebp - 0x14]
push ecx
call ebx
lea edx, [ebp - 0x14]
push edx
push 0xf003f
push 0
push 0x6511e0
push reloc.WSOCK32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x415ecd
lea eax, [ebp - 0x14]
push 0
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push eax
push 0
push 0xf003f
push 0
push 0x679a28
push 0
push 0x6511c4
push reloc.WSOCK32.dll_accept
call esi
test eax, eax
jne 0x415f09
mov ecx, dword [ebp - 0x14]
push ecx
call ebx
lea edx, [ebp - 0x14]
push 0
push edx
push 0
push 0xf003f
push 0
push 0x679a28
push 0
push 0x6511e0
push reloc.WSOCK32.dll_accept
call esi
test eax, eax
jne 0x415f09
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x415edf
mov esi, eax
jmp 0x415ee5
mov esi, eax
jmp 0x415e21
lea eax, [ebp - 0x4c]
lea esi, [ebp - 0x4c]
push eax
call fcn.0057e90a
mov ecx, dword [ebp - 0x14]
add esp, 4
lea eax, [eax + eax + 2]
push eax
push esi
push 1
push 0
push 0x651208
push ecx
call edi
mov edx, dword [ebp - 0x14]
push edx
call ebx
mov ebx, dword [ebp + 8]
xor esi, esi
cmp ebx, esi
je 0x4160d0
mov eax, dword [ebp - 0x50]
cmp eax, esi
jne 0x415f20
lea eax, [ebp - 0x4c]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push eax
call edi
cmp eax, 0xffffffff
je 0x4160d0
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x6c], esi
mov word [ebp - 0x70], si
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x60], esi
mov word [ebp - 0x64], si
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x54], esi
mov word [ebp - 0x58], si
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x24], esi
mov word [ebp - 0x28], si
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x30], esi
mov word [ebp - 0x34], si
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x3c], esi
mov word [ebp - 0x40], si
mov eax, dword [0x67a028]
mov byte [ebp - 4], 0x1b
cmp eax, esi
jne 0x415f80
mov eax, 0x67a02c
push eax
push 0x6511b8
lea ecx, [ebp - 0x74]
call fcn.00413230
mov eax, dword [0x67a028]
cmp eax, esi
jne 0x415f9c
mov eax, 0x67a02c
push eax
push 0x6511ac
lea ecx, [ebp - 0x68]
call fcn.00413230
mov eax, dword [0x67a028]
cmp eax, esi
jne 0x415fb8
mov eax, 0x67a02c
push eax
push 0x6511a0
lea ecx, [ebp - 0x5c]
call fcn.00413230
mov ecx, 0x67a028
call fcn.00401fb0
push eax
push 0x651194
lea ecx, [ebp - 0x2c]
call fcn.00413230
mov ecx, 0x67a028
call fcn.00401fb0
push eax
push 0x651188
lea ecx, [ebp - 0x38]
call fcn.00413230
mov ecx, 0x67a028
call fcn.00401fb0
push eax
push 0x65117c
lea ecx, [ebp - 0x44]
call fcn.00413230
lea ecx, [ebp - 0x74]
call fcn.00401fb0
push eax
call edi
cmp eax, 0xffffffff
je 0x41603a
lea ecx, [ebp - 0x2c]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x74]
call fcn.00401fb0
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
push eax
call esi
jmp 0x416040
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
lea ecx, [ebp - 0x68]
call fcn.00401fb0
push eax
call edi
cmp eax, 0xffffffff
je 0x416064
lea ecx, [ebp - 0x38]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x68]
call fcn.00401fb0
push eax
call esi
lea ecx, [ebp - 0x5c]
call fcn.00401fb0
push eax
call edi
cmp eax, 0xffffffff
je 0x416088
lea ecx, [ebp - 0x44]
call fcn.00401fb0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00401fb0
push eax
call esi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1a
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x19
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.00401070
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x17
call fcn.00401070
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x16
call fcn.00401070
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.00401070
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0
call fcn.00401070
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, ebx
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4