Function at 0x4048d3
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
sub esp, 0x224
lea ebp, [esp - 4]
mov eax, dword [0x4296e0]
xor eax, ebp
mov dword [ebp + 0x224], eax
push 0x430
mov eax, 0x41f8e5
call fcn.0041007e
mov ebx, dword [ebp + 0x230]
mov edi, dword [ebp + 0x234]
xor esi, esi
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x10], ebx
mov byte [ebp - 0x29], 0
cmp ebx, esi
je 0x40549c
push esi
lea ecx, [ebp]
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x24], 1
mov dword [ebp + 0x18], 0xf
call fcn.0040156e
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x170]
push eax
lea eax, [ebp - 0x18]
push eax
push esi
push 0x420f38
mov dword [ebp - 4], esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push ebx
call esi
test eax, eax
jne 0x405490
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420f28
push ebx
call esi
cmp byte [0x42ab94], 1
mov ebx, 0x104
jne 0x404b14
push 0x410
lea eax, [ebp - 0x43c]
push 0
push eax
call fcn.0040f890
push ebx
lea eax, [ebp + 0x1c]
push 0
push eax
mov dword [ebp - 0x1c], 0x410
call fcn.0040f890
add esp, 0x18
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420b60
push dword [ebp - 0x10]
call esi
lea eax, [ebp + 0x1c]
lea ecx, [edi + 0x40]
push eax
call fcn.00401de6
push 0x410
lea eax, [ebp - 0x43c]
push 0
push eax
call fcn.0040f890
push ebx
lea eax, [ebp + 0x1c]
push 0
push eax
mov dword [ebp - 0x1c], 0x410
call fcn.0040f890
add esp, 0x18
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420b4c
push dword [ebp - 0x10]
call esi
lea eax, [ebp + 0x1c]
push eax
lea ecx, [edi + 0x9c]
call fcn.00401de6
push 0x410
lea eax, [ebp - 0x43c]
push 0
push eax
call fcn.0040f890
push ebx
lea eax, [ebp + 0x1c]
push 0
push eax
mov dword [ebp - 0x1c], 0x410
call fcn.0040f890
add esp, 0x18
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420b3c
push dword [ebp - 0x10]
call esi
lea eax, [ebp + 0x1c]
push eax
lea ecx, [edi + 0xf8]
call fcn.00401de6
push 0x410
push 0
lea eax, [ebp - 0x43c]
push eax
call fcn.0040f890
push ebx
lea eax, [ebp + 0x1c]
push 0
push eax
mov dword [ebp - 0x1c], 0x410
call fcn.0040f890
add esp, 0x18
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420b2c
push dword [ebp - 0x10]
call esi
lea eax, [ebp + 0x1c]
push eax
lea ecx, [edi + 0x154]
call fcn.00401de6
cmp dword [ebp - 0x20], 0
je 0x404b19
mov ecx, dword [ebp - 0x28]
lea eax, [ebp]
push eax
push dword [ebp - 0x20]
call fcn.00404643
cmp dword [ebp + 0x14], 0
jbe 0x404b14
lea eax, [ebp]
push eax
lea ecx, [edi + 0x40]
call fcn.00404481
test eax, eax
je 0x404b14
mov ecx, dword [ebp - 0x28]
push dword [ecx + 0x1c]
lea eax, [edi + 0x40]
push dword [ebp - 0x20]
push eax
call fcn.0040484e
test eax, eax
jbe 0x404b19
mov ecx, dword [ebp - 0x28]
mov dword [edi], eax
xor dword [ecx + 0x1c], eax
jmp 0x404b19
mov eax, dword [ebp - 0x20]
mov dword [edi], eax
and dword [ebp - 0x20], 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420f18
push dword [ebp - 0x10]
call esi
cmp byte [0x42ab94], 1
jne 0x404b90
cmp dword [ebp - 0x20], 0
je 0x404b96
mov ecx, dword [ebp - 0x28]
lea eax, [ebp]
push eax
push dword [ebp - 0x20]
call fcn.00404643
cmp dword [ebp + 0x14], 0
jbe 0x404b90
lea eax, [ebp]
lea ecx, [edi + 0x9c]
push eax
call fcn.00404481
test eax, eax
je 0x404b90
mov ecx, dword [ebp - 0x28]
push dword [ecx + 0x1c]
lea eax, [edi + 0x9c]
push dword [ebp - 0x20]
push eax
call fcn.0040484e
test eax, eax
jbe 0x404b96
mov ecx, dword [ebp - 0x28]
mov dword [edi + 0x5c], eax
xor dword [ecx + 0x1c], eax
jmp 0x404b96
mov eax, dword [ebp - 0x20]
mov dword [edi + 0x5c], eax
and dword [ebp - 0x20], 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420f0c
push dword [ebp - 0x10]
call esi
cmp byte [0x42ab94], 1
jne 0x404c10
cmp dword [ebp - 0x20], 0
je 0x404c19
mov ecx, dword [ebp - 0x28]
lea eax, [ebp]
push eax
push dword [ebp - 0x20]
call fcn.00404643
cmp dword [ebp + 0x14], 0
jbe 0x404c10
lea eax, [ebp]
lea ecx, [edi + 0xf8]
push eax
call fcn.00404481
test eax, eax
je 0x404c10
mov ecx, dword [ebp - 0x28]
push dword [ecx + 0x1c]
lea eax, [edi + 0xf8]
push dword [ebp - 0x20]
push eax
call fcn.0040484e
test eax, eax
jbe 0x404c19
mov ecx, dword [ebp - 0x28]
mov dword [edi + 0xb8], eax
xor dword [ecx + 0x1c], eax
jmp 0x404c19
mov eax, dword [ebp - 0x20]
mov dword [edi + 0xb8], eax
and dword [ebp - 0x20], 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420efc
push dword [ebp - 0x10]
call esi
cmp byte [0x42ab94], 1
jne 0x404c93
cmp dword [ebp - 0x20], 0
je 0x404c9c
mov ecx, dword [ebp - 0x28]
lea eax, [ebp]
push eax
push dword [ebp - 0x20]
call fcn.00404643
cmp dword [ebp + 0x14], 0
jbe 0x404c93
lea eax, [ebp]
lea ecx, [edi + 0x154]
push eax
call fcn.00404481
test eax, eax
je 0x404c93
mov ecx, dword [ebp - 0x28]
push dword [ecx + 0x1c]
lea eax, [edi + 0x154]
push dword [ebp - 0x20]
push eax
call fcn.0040484e
test eax, eax
jbe 0x404c9c
mov ecx, dword [ebp - 0x28]
mov dword [edi + 0x114], eax
xor dword [ecx + 0x1c], eax
jmp 0x404c9c
mov eax, dword [ebp - 0x20]
mov dword [edi + 0x114], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 4]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420ef0
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 8]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420ee4
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420ed8
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x10]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420ecc
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x60]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420ec0
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x64]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420eb4
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x68]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420ea8
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x6c]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420e98
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xbc]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420e90
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xc0]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420e88
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xc4]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420e80
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xc8]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420e74
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x118]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420e68
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x11c]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420e5c
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x120]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420e50
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x124]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420e44
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420e2c
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x70]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420e14
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xcc]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420e00
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x128]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420dec
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x38]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420dd4
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x3c]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420dbc
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x94]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420da4
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x98]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420d8c
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x18]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420d70
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x74]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420d54
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xd0]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420d3c
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x12c]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420d20
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420c8c
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x24]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420c70
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x28]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420c60
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x2c]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x420c7c
push dword [ebp - 0x10]
call esi
push ebx
push 0
lea eax, [ebp + 0x120]
push eax
call fcn.0040f890
add esp, 0xc
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x120]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420c50
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 1
call esi
lea eax, [ebp + 0x120]
push eax
call fcn.004108bc
push ebx
mov dword [edi + 0x7c], eax
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
add esp, 0x10
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x120]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420c30
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 1
call esi
lea eax, [ebp + 0x120]
push eax
call fcn.004108bc
push ebx
mov dword [edi + 0x80], eax
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
add esp, 0x10
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x120]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420c20
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 1
call esi
lea eax, [ebp + 0x120]
push eax
call fcn.004108bc
push ebx
mov dword [edi + 0x84], eax
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
add esp, 0x10
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x120]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420c40
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 1
call esi
lea eax, [ebp + 0x120]
push eax
call fcn.004108bc
push ebx
mov dword [edi + 0x88], eax
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
push ebx
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
add esp, 0x1c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x120]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420c14
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 1
call esi
lea eax, [ebp + 0x120]
push eax
call fcn.004108bc
push ebx
mov dword [edi + 0xd8], eax
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
add esp, 0x10
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x120]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420bfc
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 1
call esi
lea eax, [ebp + 0x120]
push eax
call fcn.004108bc
push ebx
mov dword [edi + 0xdc], eax
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
add esp, 0x10
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x120]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420bf0
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 1
call esi
lea eax, [ebp + 0x120]
push eax
call fcn.004108bc
push ebx
mov dword [edi + 0xe0], eax
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
add esp, 0x10
mov dword [ebp - 0x1c], ebx
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x120]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420c08
push dword [ebp - 0x10]
mov dword [ebp - 0x24], 1
call esi
lea eax, [ebp + 0x120]
push eax
call fcn.004108bc
push ebx
mov dword [edi + 0xe4], eax
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
push ebx
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
add esp, 0x1c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x120]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420be4
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 1
call esi
lea eax, [ebp + 0x120]
push eax
call fcn.004108bc
push ebx
mov dword [edi + 0x134], eax
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
add esp, 0x10
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x120]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420bc8
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 1
call esi
lea eax, [ebp + 0x120]
push eax
call fcn.004108bc
push ebx
mov dword [edi + 0x138], eax
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
add esp, 0x10
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x120]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420bbc
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 1
call esi
lea eax, [ebp + 0x120]
push eax
call fcn.004108bc
push ebx
mov dword [edi + 0x13c], eax
lea eax, [ebp + 0x120]
push 0
push eax
call fcn.0040f890
add esp, 0x10
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x120]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0x420bd4
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 1
call esi
lea eax, [ebp + 0x120]
push eax
call fcn.004108bc
push ebx
mov dword [edi + 0x140], eax
xor ebx, ebx
lea eax, [ebp + 0x120]
push ebx
push eax
call fcn.0040f890
add esp, 0x10
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x420d0c
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x78]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x420cf8
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xd4]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x420ce8
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x130]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x420cd4
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x30]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x420cc4
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x8c]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x420cb4
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xe8]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x420ca8
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x144]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x420c98
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x34]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x420ba8
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x90]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x420b94
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xec]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x420b84
push dword [ebp - 0x10]
call esi
lea eax, [ebp - 0x14]
push eax
add edi, 0x148
push edi
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x420b70
push dword [ebp - 0x10]
call esi
mov byte [ebp - 0x29], 1
push 0
push 1
lea ecx, [ebp]
call fcn.0040161a
mov al, byte [ebp - 0x29]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x224]
xor ecx, ebp
call fcn.0040f90a
add ebp, 0x228
leave
ret 8