Function at 0x4022c0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x455579
mov eax, dword fs:[0]
push eax
sub esp, 0x340
mov eax, dword [0x46f008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x33c], ecx
mov ecx, dword [ebp + 0x14]
mov edi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x330], ecx
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x340], ecx
mov dword [ebp - 0xbc], 0
xor ecx, ecx
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], cx
mov dword [ebp - 4], 1
xor ebx, ebx
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x348], ebx
mov dword [ebp - 0x338], ecx
mov dword [ebp - 0x344], ecx
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 2
call fcn.00403b00
push esi
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 3
call fcn.00403b00
push edi
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 4
call fcn.00403820
mov dword [ebp - 0x2c], ebx
mov ecx, dword [ebp - 0x330]
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 4], 5
call fcn.004039b0
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4023eb
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4023e1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402f0a
push edx
push ecx
call fcn.0041fbbf
add esp, 8
mov dword [ebp - 0x2c], 0
mov esi, dword [ebp - 0x340]
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov byte [ebp - 4], 5
call fcn.00403700
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x40244f
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402445
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402f0a
push edx
push ecx
call fcn.0041fbbf
add esp, 8
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x402470
push 0x23
push str.No_localization_directory_specified
mov ecx, esi
call fcn.00401680
mov byte [ebp - 0x325], 0
jmp 0x402d53
cmp dword [ebp - 0x94], 0
jne 0x40248e
push 2
push 0x465b70
lea ecx, [ebp - 0xa4]
call fcn.00401940
mov eax, dword [ebp - 0x7c]
mov edi, dword [ebp - 0x78]
lea ecx, [ebp - 0x8c]
mov esi, dword [ebp - 0x8c]
cmp edi, 8
setae byte [ebp - 0x325]
jb 0x4024ab
mov ecx, esi
cmp word [ecx + eax*2 - 2], 0x2f
lea edx, [eax*2 - 2]
je 0x4024e8
cmp byte [ebp - 0x325], 0
lea eax, [ebp - 0x8c]
je 0x4024cb
mov eax, esi
cmp word [eax + edx], 0x5c
je 0x4024e8
push 0x2f
lea ecx, [ebp - 0x8c]
call fcn.004035d0
mov edi, dword [ebp - 0x78]
mov esi, dword [ebp - 0x8c]
lea edx, [ebp - 0xa4]
lea ecx, [ebp - 0x5c]
call fcn.00406ae0
mov ecx, eax
mov byte [ebp - 4], 8
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x32c], 1
cmp edi, 8
jb 0x402513
mov eax, esi
push dword [ebp - 0x7c]
push eax
push ecx
call fcn.004047a0
mov ecx, eax
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov eax, dword [ecx]
mov dword [ebp - 0x74], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x70], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x64], eax
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x60], eax
xor eax, eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
mov dword [ebp - 4], 0xb
lea edx, [ebp - 0x74]
push 0x465b74
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x32c], 0xb
call fcn.00403fb0
add esp, 4
mov dword [ebp - 4], 0xc
cmp dword [eax + 0x14], 8
mov dword [ebp - 0x32c], 0xf
jb 0x4025a7
mov eax, dword [eax]
lea ecx, [ebp - 0x324]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x40272b
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
jmp 0x4025d0
cmp word [ebp - 0x2f8], 0x2e
je 0x4026fb
test byte [ebp - 0x324], 0x10
jne 0x4026fb
mov dword [ebp - 0x44], 0
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x2f8]
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
lea edx, [ecx + 2]
mov word [ebp - 0x44], ax
mov byte [ebp - 4], 0xc
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x402620
sub ecx, edx
lea eax, [ebp - 0x2f8]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x44]
call fcn.00401680
mov dword [ebp - 4], 0xe
cmp ebx, dword [ebp - 0x338]
je 0x40269b
mov eax, dword [ebp - 0x44]
mov dword [ebx], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0
mov dword [ebx], eax
mov eax, dword [ebp - 0x40]
mov dword [ebx + 4], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x38]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x34]
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x30]
mov dword [ebx + 0x14], eax
xor eax, eax
mov edx, 7
add ebx, 0x18
mov word [ebp - 0x44], ax
mov dword [ebp - 0x348], ebx
jmp 0x4026c0
lea eax, [ebp - 0x44]
push eax
push ebx
lea ecx, [ebp - 0x34c]
call fcn.00401ad0
mov eax, dword [ebp - 0x344]
mov ebx, dword [ebp - 0x348]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x338], eax
mov byte [ebp - 4], 0xc
cmp edx, 8
jb 0x4026fb
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4026f1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402edd
push edx
push ecx
call fcn.0041fbbf
add esp, 8
lea eax, [ebp - 0x324]
push eax
push esi
call edi
test eax, eax
jne 0x4025d0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x334], eax
mov byte [ebp - 0x325], 1
cmp eax, ebx
jne 0x402732
mov byte [ebp - 0x325], 0
mov dword [ebp - 4], 0xb
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x402773
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402769
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402edd
push edx
push ecx
call fcn.0041fbbf
add esp, 8
xor eax, eax
mov dword [ebp - 4], 8
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp edx, 8
jb 0x4027c8
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4027be
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402edd
push edx
push ecx
call fcn.0041fbbf
add esp, 8
xor eax, eax
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
cmp edx, 8
jb 0x40281d
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402813
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402edd
push edx
push ecx
call fcn.0041fbbf
add esp, 8
cmp byte [ebp - 0x325], 0
je 0x402c9d
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x74]
call fcn.00403b00
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0xc4], 0
je 0x4028a2
lea eax, [ebp - 0xd4]
mov edx, 0x465b80
push eax
lea ecx, [ebp - 0x5c]
call fcn.004040b0
add esp, 4
push eax
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x14
call fcn.00403940
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x4028a2
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402898
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402ee2
push edx
push ecx
call fcn.0041fbbf
add esp, 8
push 0x465b84
lea ecx, [ebp - 0x74]
call fcn.004038d0
cmp dword [ebp - 0x60], 0x10
lea esi, [ebp - 0x74]
jb 0x4028c4
mov edx, dword [ebp - 0x74]
mov esi, edx
mov edi, dword [ebp - 0x64]
add edi, edx
jmp 0x4028cd
lea edi, [ebp - 0x74]
add edi, dword [ebp - 0x64]
lea edx, [ebp - 0x74]
cmp edx, edi
je 0x4028eb
sub esi, edx
mov cl, byte [edx]
movsx eax, cl
add eax, 0xffffffbf
cmp eax, 0x19
ja 0x4028e3
or cl, 0x20
mov byte [edx + esi], cl
inc edx
cmp edx, edi
jne 0x4028d3
lea edx, [ebp - 0x74]
lea ecx, [ebp - 0x5c]
call fcn.00406ae0
mov edi, dword [ebp - 0x334]
lea ecx, [ebp - 0x32c]
push ebx
push edi
mov edx, eax
call fcn.004041d0
mov edx, dword [ebp - 0x48]
add esp, 8
cmp edx, 8
jb 0x402948
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40293e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402ee7
push edx
push ecx
call fcn.0041fbbf
add esp, 8
mov esi, dword [ebp - 0x32c]
cmp esi, ebx
jne 0x402a20
lea edx, [ebp - 0xa4]
lea ecx, [ebp - 0x5c]
call fcn.00406ae0
push str..cfg
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2c]
call fcn.00403fb0
add esp, 4
lea ecx, [ebp - 0x32c]
mov edx, eax
push ebx
push edi
call fcn.004041d0
mov edx, dword [ebp - 0x18]
add esp, 8
mov esi, dword [eax]
cmp edx, 8
jb 0x4029c8
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4029be
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402eec
push edx
push ecx
call fcn.0041fbbf
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp edx, 8
jb 0x402a1a
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402a10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402eec
push edx
push ecx
call fcn.0041fbbf
add esp, 8
cmp esi, ebx
jne 0x402a20
mov esi, edi
push esi
lea ecx, [ebp - 0x44]
call fcn.00403820
mov byte [ebp - 4], 0x16
mov eax, 0x7ffffffe
mov edx, dword [ebp - 0x7c]
sub eax, edx
mov esi, dword [ebp - 0x34]
cmp eax, esi
jb 0x402ef1
cmp dword [ebp - 0x78], 8
lea ecx, [ebp - 0x8c]
jb 0x402a54
mov ecx, dword [ebp - 0x8c]
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
jb 0x402a60
mov eax, dword [ebp - 0x44]
push esi
push eax
push edx
push ecx
push ecx
push dword [ebp - 0x33c]
lea ecx, [ebp - 0x5c]
call fcn.00404700
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0xbc]
call fcn.00403700
mov edx, dword [ebp - 0x48]
cmp edx, 8
jb 0x402abc
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402ab2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402f00
push edx
push ecx
call fcn.0041fbbf
add esp, 8
cmp dword [ebp - 0x30], 8
lea ecx, [ebp - 0x44]
mov edi, dword [ebp - 0x44]
setae byte [ebp - 0x325]
jb 0x402ad1
mov ecx, edi
mov esi, dword [ebp - 0x34]
mov edx, esi
push 4
sub esp, 8
call fcn.00404280
add esp, 0xc
cmp eax, 0xffffffff
je 0x402bbf
mov dword [ebp - 0x2c], 0
xor ecx, ecx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], cx
mov byte [ebp - 4], 0x16
cmp esi, eax
jb 0x402b11
mov esi, eax
lea eax, [ebp - 0x44]
cmp byte [ebp - 0x325], cl
je 0x402b1e
mov eax, edi
push esi
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401680
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x5c]
call fcn.00406940
mov ecx, dword [ebp - 0x330]
push eax
call fcn.004039b0
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x402b77
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402b6d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402ef6
push edx
push ecx
call fcn.0041fbbf
add esp, 8
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 8
jb 0x402c0a
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402c00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402ef6
jmp 0x402c00
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x5c]
call fcn.00406940
mov ecx, dword [ebp - 0x330]
push eax
call fcn.004039b0
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x402c0a
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402c00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402efb
push edx
push ecx
call fcn.0041fbbf
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x402c48
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402c3e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402f00
push edx
push ecx
call fcn.0041fbbf
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp edx, 0x10
jb 0x402d35
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402c8e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402f00
push edx
push ecx
call fcn.0041fbbf
add esp, 8
jmp 0x402d35
mov ecx, dword [ebp - 0x7c]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 9
jb 0x402f05
cmp dword [ebp - 0x78], 8
lea eax, [ebp - 0x8c]
jb 0x402cc2
mov eax, dword [ebp - 0x8c]
push 9
push str.en_us.cfg
push ecx
push eax
push ecx
push dword [ebp - 0x33c]
lea ecx, [ebp - 0x5c]
call fcn.00404700
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0xbc]
call fcn.00403700
mov edx, dword [ebp - 0x48]
cmp edx, 8
jb 0x402d23
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402d19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402f0a
push edx
push ecx
call fcn.0041fbbf
add esp, 8
mov ecx, dword [ebp - 0x330]
push 5
push str.en_us
call fcn.00401940
push dword [ebp - 0x340]
mov ecx, dword [ebp - 0x33c]
lea eax, [ebp - 0xbc]
push eax
call fcn.00404b10
mov byte [ebp - 0x325], al
mov edx, dword [ebp - 0x78]
cmp edx, 8
jb 0x402d90
mov ecx, dword [ebp - 0x8c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402d86
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402f0a
push edx
push ecx
call fcn.0041fbbf
add esp, 8
mov edx, dword [ebp - 0xc0]
cmp edx, 0x10
jb 0x402dca
mov ecx, dword [ebp - 0xd4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402dc0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402f0a
push edx
push ecx
call fcn.0041fbbf
add esp, 8
mov edx, dword [ebp - 0x90]
cmp edx, 0x10
jb 0x402e04
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x402dfa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402f0a
push edx
push ecx
call fcn.0041fbbf
add esp, 8
mov esi, dword [ebp - 0x334]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
test esi, esi
je 0x402e7d
push ecx
mov edx, ebx
mov ecx, esi
call fcn.00401ea0
mov ecx, dword [ebp - 0x338]
mov eax, 0x2aaaaaab
sub ecx, esi
add esp, 4
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x402e73
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402f0a
push ecx
push esi
call fcn.0041fbbf
add esp, 8
mov edx, dword [ebp - 0xa8]
cmp edx, 8
jb 0x402eb9
mov ecx, dword [ebp - 0xbc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402eaf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402f0a
push edx
push ecx
call fcn.0041fbbf
add esp, 8
mov al, byte [ebp - 0x325]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041fb7c
mov esp, ebp
pop ebp
ret 0x14
call fcn.00439d3f
call fcn.00439d3f
call fcn.00439d3f
call fcn.00439d3f
call fcn.00401360
call fcn.00439d3f
call fcn.00439d3f
call fcn.00439d3f
call fcn.00401360
call fcn.00439d3f
int3