Function at 0x40e0b0
Capabilities:
Check if file exists
Get file attributes
Read .ini file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43e78f
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x348
mov eax, dword [0x44d010]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x58
lea eax, [ebp - 0x320]
push 0
push eax
call fcn.00420150
add esp, 4
lea ecx, [ebp - 0x320]
call fcn.00412510
lea eax, [ebp - 0x310]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x338]
call fcn.00407f90
mov byte [ebp - 4], 1
lea edx, [ebp - 0x338]
cmp dword [ebp - 0x324], 8
lea ecx, [ebp - 0x268]
cmovae edx, dword [ebp - 0x338]
call fcn.004099a0
cmp dword [eax + 0x14], 8
jb 0x40e153
mov eax, dword [eax]
push eax
push 0x3c29
push str.uuid
push str.xbaibrowser
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x254]
mov edi, eax
mov dword [ebp - 0x358], edi
cmp ecx, 8
jb 0x40e1b1
mov edx, dword [ebp - 0x268]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e1a7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee6a
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x324]
cmp ecx, 8
jb 0x40e1f5
mov edx, dword [ebp - 0x338]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e1eb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee6f
push ecx
push edx
call fcn.0041e43c
add esp, 8
push 0
push str.__monitor_power
lea eax, [ebp - 0x320]
push eax
call fcn.004129f0
push 0
test al, al
je 0x40e32e
push str.xbsvc_cmd_wnd
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
jne 0x40ee3a
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
xorps xmm0, xmm0
push eax
mov dword [ebp - 0x34c], eax
movlpd qword [ebp - 0x338], xmm0
movlpd qword [ebp - 0x330], xmm0
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x350], 0x30
mov dword [ebp - 0x348], 0x40b2b0
mov dword [ebp - 0x344], eax
mov dword [ebp - 0x340], eax
call esi
mov dword [ebp - 0x33c], eax
lea eax, [ebp - 0x350]
push eax
mov dword [ebp - 0x328], str.xbsvc_cmd_wnd
call dword [sym.imp.USER32.dll_RegisterClassExW]
push 0
push 0
mov dword [0x44f1e8], edi
call esi
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0x84000000
push 0
push str.xbsvc_cmd_wnd
push 0x8000000
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
lea eax, [ebp - 0x33c]
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x324], 0
push 0
push eax
movups xmmword [ebp - 0x33c], xmm0
movq qword [ebp - 0x32c], xmm0
call esi
test eax, eax
je 0x40ee3a
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
nop dword [eax]
lea eax, [ebp - 0x33c]
push eax
call edi
lea eax, [ebp - 0x33c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0
push 0
push 0
lea eax, [ebp - 0x33c]
push eax
call esi
test eax, eax
jne 0x40e300
jmp 0x40ee3a
push str.__runonce_at_poweron
lea eax, [ebp - 0x320]
mov byte [ebp - 0x352], 0
push eax
call fcn.004129f0
test al, al
jne 0x40e368
push 0
push str.__poweron
lea eax, [ebp - 0x320]
push eax
call fcn.004129f0
mov byte [ebp - 0x351], 0
test al, al
je 0x40e36f
mov byte [ebp - 0x351], 1
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0x338]
call fcn.00407f90
mov byte [ebp - 4], 2
lea eax, [ebp - 0x352]
cmp dword [ebp - 0x324], 8
lea edx, [ebp - 0x338]
push eax
cmovae edx, dword [ebp - 0x338]
lea ecx, [ebp - 0x238]
call fcn.00409ed0
add esp, 4
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x324]
cmp ecx, 8
jb 0x40e3f2
mov edx, dword [ebp - 0x338]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e3e8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee92
push ecx
push edx
call fcn.0041e43c
add esp, 8
push ecx
push 0
lea eax, [ebp - 0x250]
push eax
lea ecx, [ebp - 0x320]
call fcn.00412e60
push 0x447ed8
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 5
call fcn.00406c30
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 6
call fcn.004080a0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x324]
mov byte [ebp - 0x353], al
cmp ecx, 8
jb 0x40e47a
mov edx, dword [ebp - 0x338]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e46a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee92
push ecx
push edx
call fcn.0041e43c
mov al, byte [ebp - 0x353]
add esp, 8
test al, al
je 0x40e488
mov esi, 1
jmp 0x40e7ee
cmp byte [ebp - 0x352], 0
jne 0x40ebf8
cmp dword [ebp - 0x228], 0
je 0x40ebf8
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
mov dl, byte [ebp - 0x351]
cmovae ecx, dword [ebp - 0x238]
call fcn.0040d4e0
cmp byte [ebp - 0x351], 0
jne 0x40ec63
cmp dword [ebp - 0x224], 8
lea edx, [ebp - 0x238]
mov eax, dword [ebp - 0x228]
cmovae edx, dword [ebp - 0x238]
test eax, eax
je 0x40e513
dec eax
or ecx, 0xffffffff
cmp eax, ecx
cmovb ecx, eax
cmp word [edx + ecx*2], 0x5c
lea esi, [edx + ecx*2]
je 0x40e50d
nop
cmp esi, edx
je 0x40e513
sub esi, 2
cmp word [esi], 0x5c
jne 0x40e500
sub esi, edx
sar esi, 1
jmp 0x40e516
or esi, 0xffffffff
push 0x104
lea eax, [ebp - 0x11c]
push 0
push eax
call fcn.00420150
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x104
push 0
push eax
call fcn.00420150
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x40eb36
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x2c8]
call fcn.00406c30
push 9
push 0x4485a8
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 7
call fcn.004072d0
push eax
lea ecx, [ebp - 0x298]
call fcn.00407f90
mov byte [ebp - 4], 8
lea eax, [ebp - 0x298]
cmp dword [ebp - 0x284], 8
cmovae eax, dword [ebp - 0x298]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x40ea91
test al, 0x10
je 0x40ea91
mov ecx, dword [ebp - 0x2b8]
mov edi, bind
mov eax, edi
sub eax, ecx
cmp eax, 9
jb 0x40ee74
cmp dword [ebp - 0x2b4], 8
lea eax, [ebp - 0x2c8]
push 9
cmovae eax, dword [ebp - 0x2c8]
push str.userdata
push ecx
push eax
push ecx
push dword [ebp - 0x358]
lea ecx, [ebp - 0x2b0]
call fcn.00408ad0
mov byte [ebp - 4], 9
mov eax, edi
mov ecx, dword [ebp - 0x2a0]
sub eax, ecx
cmp eax, 0xa
jb 0x40ee79
cmp dword [ebp - 0x29c], 8
lea eax, [ebp - 0x2b0]
push 0xa
cmovae eax, dword [ebp - 0x2b0]
push str.First_Run
push ecx
push eax
push ecx
push dword [ebp - 0x358]
lea ecx, [ebp - 0x280]
call fcn.00408ad0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x280]
cmp dword [ebp - 0x26c], 8
cmovae eax, dword [ebp - 0x280]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x40e894
push 0x24
push 0x4485e8
push 0x4485f8
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 7
jne 0x40e894
mov ecx, dword [ebp - 0x26c]
xor esi, esi
cmp ecx, 8
jb 0x40e6e3
mov edx, dword [ebp - 0x280]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e6d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee83
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov ecx, dword [ebp - 0x29c]
xor eax, eax
mov dword [ebp - 0x270], esi
mov dword [ebp - 0x26c], 7
mov word [ebp - 0x280], ax
cmp ecx, 8
jb 0x40e73c
mov edx, dword [ebp - 0x2b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e732
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee83
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov ecx, dword [ebp - 0x284]
cmp ecx, 8
jb 0x40e77c
mov edx, dword [ebp - 0x298]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e772
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee83
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov ecx, dword [ebp - 0x2b4]
xor eax, eax
mov dword [ebp - 0x288], esi
mov dword [ebp - 0x284], 7
mov word [ebp - 0x298], ax
cmp ecx, 8
jb 0x40e7d5
mov edx, dword [ebp - 0x2c8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e7cb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee83
push ecx
push edx
call fcn.0041e43c
add esp, 8
xor eax, eax
mov dword [ebp - 0x2b8], esi
mov dword [ebp - 0x2b4], 7
mov word [ebp - 0x2c8], ax
mov ecx, dword [ebp - 0x23c]
cmp ecx, 8
jb 0x40e82e
mov edx, dword [ebp - 0x250]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e824
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee83
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov ecx, dword [ebp - 0x224]
xor eax, eax
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
cmp ecx, 8
jb 0x40ee3f
mov edx, dword [ebp - 0x238]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e885
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee83
push ecx
push edx
call fcn.0041e43c
add esp, 8
jmp 0x40ee3f
push str.___user_data_dir_
lea ecx, [ebp - 0x268]
call fcn.00406c30
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x2a0]
sub edi, ecx
cmp edi, 0xd
jb 0x40ee7e
cmp dword [ebp - 0x29c], 8
lea eax, [ebp - 0x2b0]
push 0xd
cmovae eax, dword [ebp - 0x2b0]
push str.____portable
push ecx
push eax
push ecx
push dword [ebp - 0x358]
lea ecx, [ebp - 0x338]
call fcn.00408ad0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x338]
cmp dword [ebp - 0x324], 8
lea ecx, [ebp - 0x268]
push dword [ebp - 0x328]
cmovae eax, dword [ebp - 0x338]
push eax
call fcn.004072d0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x324]
cmp ecx, 8
jb 0x40e956
mov edx, dword [ebp - 0x338]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e94c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee83
push ecx
push edx
call fcn.0041e43c
add esp, 8
cmp dword [ebp - 0x240], 0
lea eax, [ebp - 0x268]
push dword [ebp - 0x258]
jne 0x40e987
cmp dword [ebp - 0x254], 8
lea ecx, [ebp - 0x250]
cmovae eax, dword [ebp - 0x268]
push eax
call fcn.004071c0
jmp 0x40e9a2
cmp dword [ebp - 0x254], 8
cmovae eax, dword [ebp - 0x268]
push eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.0040f060
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x254]
cmp ecx, 8
jb 0x40e9e6
mov edx, dword [ebp - 0x268]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e9dc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee83
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x26c]
cmp ecx, 8
jb 0x40ea2a
mov edx, dword [ebp - 0x280]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40ea20
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee83
push ecx
push edx
call fcn.0041e43c
add esp, 8
xor eax, eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x29c]
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x26c], 7
mov word [ebp - 0x280], ax
cmp ecx, 8
jb 0x40ea8b
mov edx, dword [ebp - 0x2b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40ea81
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee83
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov edi, dword [ebp - 0x358]
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x284]
cmp ecx, 8
jb 0x40ead5
mov edx, dword [ebp - 0x298]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40eacb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee88
push ecx
push edx
call fcn.0041e43c
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x284], 7
mov word [ebp - 0x298], ax
cmp ecx, 8
jb 0x40eb36
mov edx, dword [ebp - 0x2c8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40eb2c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee88
push ecx
push edx
call fcn.0041e43c
add esp, 8
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
push 0
cmovae ecx, dword [ebp - 0x238]
lea edx, [ebp - 0x250]
cmp dword [ebp - 0x23c], 8
push 1
cmovae edx, dword [ebp - 0x250]
call fcn.00411980
test eax, eax
je 0x40ebe1
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [esi + 1]
cmp esi, 0xffffffff
je 0x40ebb6
mov esi, dword [ebp - 0x228]
lea ecx, [ebp - 0x238]
cmp esi, edx
cmovb edx, esi
cmp dword [ebp - 0x224], 8
cmovae ecx, dword [ebp - 0x238]
sub esi, edx
lea eax, [esi*2 + 2]
push eax
lea eax, [ecx + edx*2]
push eax
push ecx
call fcn.004202f0
add esp, 0xc
mov dword [ebp - 0x228], esi
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
xor edx, edx
call fcn.00411c30
jmp 0x40eda1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push edi
mov edx, 2
call fcn.00409470
jmp 0x40ed9e
push 0
push edi
mov edx, 3
call fcn.00409470
add esp, 8
cmp byte [ebp - 0x351], 0
jne 0x40ec63
cmp dword [ebp - 0x228], 0
je 0x40eda1
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
push 0
cmovae ecx, dword [ebp - 0x238]
lea edx, [ebp - 0x250]
cmp dword [ebp - 0x23c], 8
push 1
cmovae edx, dword [ebp - 0x250]
call fcn.00411980
test eax, eax
je 0x40eda1
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40eda1
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.00420150
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x103
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x220]
push 0x5c
push eax
call fcn.0041fadb
mov ecx, eax
add esp, 8
add eax, 2
test ecx, ecx
jne 0x40ecad
lea eax, [ebp - 0x220]
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x268]
call fcn.00406c30
push 5
push str.patch
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 0xd
call fcn.004072d0
xor ecx, ecx
movups xmm1, xmmword [eax]
movq xmm0, qword [eax + 0x10]
movups xmmword [ebp - 0x338], xmm1
mov dword [eax + 0x10], 0
movq qword [ebp - 0x328], xmm0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x338]
cmp dword [ebp - 0x324], 8
movd eax, xmm1
cmovae ecx, eax
call fcn.0040d3e0
mov ecx, dword [ebp - 0x324]
cmp ecx, 8
jb 0x40ed61
mov edx, dword [ebp - 0x338]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40ed57
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee8d
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov ecx, dword [ebp - 0x254]
cmp ecx, 8
jb 0x40eda1
mov edx, dword [ebp - 0x268]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40ed97
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee8d
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov ecx, dword [ebp - 0x23c]
cmp ecx, 8
jb 0x40ede1
mov edx, dword [ebp - 0x250]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40edd7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee92
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov ecx, dword [ebp - 0x224]
xor eax, eax
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
cmp ecx, 8
jb 0x40ee3a
mov edx, dword [ebp - 0x238]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40ee30
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ee92
push ecx
push edx
call fcn.0041e43c
add esp, 8
mov esi, 1
lea ecx, [ebp - 0x320]
call fcn.00409020
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e3f9
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004267cc
call fcn.004267cc
call fcn.00401320
call fcn.00401320
call fcn.00401320
call fcn.004267cc
call fcn.004267cc
call fcn.004267cc
call fcn.004267cc
int3