Function at 0x411870
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x48273a
push eax
mov eax, 0x2290
mov dword fs:[0], esp
call fcn.004660e0
push ebx
push ebp
push esi
push edi
mov ebp, ecx
call fcn.00441cf0
test eax, eax
je 0x411935
push 0
lea eax, [esp + 0xb0c]
push str.CUninstall_::_Uninstall_n
push eax
call fcn.00465850
mov edi, str.ENTRY:
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0xc08]
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0xc08]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0xb08]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00441c80
mov ecx, eax
call fcn.00441d20
lea eax, [esp + 0xc08]
push eax
call fcn.00441c80
mov ecx, eax
call fcn.00442090
mov eax, dword [0x4a6844]
mov dword [esp + 0x59c], eax
xor edi, edi
mov dword [esp + 0x5a0], eax
mov dword [esp + 0x22a8], edi
mov dword [esp + 0x5a4], eax
mov dword [esp + 0x5a8], eax
mov dword [esp + 0x5ac], eax
mov dword [esp + 0x5b0], eax
mov dword [esp + 0x5b4], eax
push 0x403560
push 0x403540
push 5
lea ecx, [esp + 0x5c4]
push 8
push ecx
mov byte [esp + 0x22bc], 6
call fcn.00466040
mov eax, dword [0x4a6844]
mov dword [esp + 0x5e0], eax
mov dword [esp + 0x5e4], eax
mov dword [esp + 0x5e8], eax
mov esi, dword [esp + 0x22b0]
mov dword [esp + 0x28], edi
mov dword [esp + 0x22a8], 7
mov edx, dword [esi]
mov eax, dword [edx + 0x5c]
test ah, 0x40
lea eax, [esp + 0x28]
jne 0x4119d8
lea eax, [esi + 4]
mov dword [ebp + 0xbc], eax
mov dword [eax], 0xa
cmp dword [ebp + 0x150c], edi
jne 0x4119f6
mov eax, dword [esi]
mov ecx, ebp
push eax
call fcn.00410e30
cmp dword [ebp + 0xc0], 5
jne 0x411bef
lea ecx, [esp + 0xf08]
call fcn.00422380
mov ecx, dword [ebp + 0xb8]
mov byte [esp + 0x22a8], 8
mov edx, dword [ecx + 0x5c]
not edx
test dh, 0x40
je 0x411b7e
mov esi, dword [ebp + 0xcc]
cmp esi, edi
je 0x411b7e
jmp 0x411a3f
mov esi, dword [esp + 0x1c]
mov eax, dword [esi]
add esi, 8
push esi
lea ecx, [esp + 0x5a0]
mov dword [esp + 0x20], eax
call fcn.00475f95
lea ecx, [esi + 4]
push ecx
lea ecx, [esp + 0x5a4]
call fcn.00475f95
lea edx, [esi + 8]
lea ecx, [esp + 0x5a4]
push edx
call fcn.00475f95
lea eax, [esi + 0xc]
lea ecx, [esp + 0x5a8]
push eax
call fcn.00475f95
lea ecx, [esi + 0x10]
push ecx
lea ecx, [esp + 0x5b0]
call fcn.00475f95
lea edx, [esi + 0x14]
lea ecx, [esp + 0x5b0]
push edx
call fcn.00475f95
lea eax, [esi + 0x18]
lea ecx, [esp + 0x5b4]
push eax
call fcn.00475f95
mov eax, esi
lea ecx, [esp + 0x59c]
sub eax, ecx
lea ebx, [esi + 0x1c]
lea edi, [esp + 0x5bc]
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], 5
push ebx
lea ecx, [edi - 4]
call fcn.00475f95
mov edx, dword [esp + 0x18]
mov ecx, edi
add edx, edi
push edx
call fcn.00475f95
mov eax, dword [esp + 0x24]
add ebx, 8
add edi, 8
dec eax
mov dword [esp + 0x24], eax
jne 0x411ad6
lea eax, [esi + 0x44]
lea ecx, [esp + 0x5e0]
push eax
call fcn.00475f95
lea ecx, [esi + 0x48]
push ecx
lea ecx, [esp + 0x5e8]
call fcn.00475f95
lea edx, [esi + 0x4c]
lea ecx, [esp + 0x5e8]
push edx
call fcn.00475f95
mov eax, dword [esi + 0x50]
add esi, 0x54
mov ecx, 0x146
lea edi, [esp + 0x5f0]
mov dword [esp + 0x5ec], eax
push 0
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x5b4]
push 0
push ecx
lea ecx, [esp + 0xf14]
call fcn.00423140
test al, 0x40
je 0x411b72
mov eax, dword [ebp + 0xb8]
or dword [eax + 0x5c], 0x2000000
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x411a3b
lea ecx, [esp + 0x20]
call fcn.0045cb90
lea ecx, [esp + 0xf08]
lea edx, [esp + 0x1178]
neg ecx
sbb ecx, ecx
mov byte [esp + 0x22a8], 0xa
and ecx, edx
call fcn.0041a660
lea ecx, [esp + 0xf08]
lea eax, [esp + 0x1148]
neg ecx
sbb ecx, ecx
mov byte [esp + 0x22a8], 9
and ecx, eax
call fcn.00414250
lea ecx, [esp + 0xf08]
lea edx, [esp + 0xf0c]
neg ecx
sbb ecx, ecx
mov byte [esp + 0x22a8], 7
and ecx, edx
call fcn.00414250
jmp 0x41246c
lea eax, [ebp + 0xc8]
lea ecx, [esp + 0x2c]
push eax
call fcn.00463e50
mov eax, dword [ebp + 0xb8]
mov dword [esp + 0x18], edi
mov ecx, dword [eax + 0x5c]
not ecx
test ch, 0x40
je 0x411f3c
mov eax, dword [0x4a6844]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
push 0x403560
push 0x403540
push 5
lea edx, [esp + 0x58]
push 8
push edx
mov byte [esp + 0x22bc], 0x11
call fcn.00466040
mov eax, dword [0x4a6844]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov ebx, dword [ebp + 0xcc]
mov byte [esp + 0x22a8], 0x12
test ebx, ebx
je 0x411e64
mov esi, ebx
mov ebx, dword [ebx]
add esi, 8
lea ecx, [esp + 0x30]
push esi
call fcn.00475f95
lea eax, [esi + 4]
lea ecx, [esp + 0x34]
push eax
call fcn.00475f95
lea ecx, [esi + 8]
push ecx
lea ecx, [esp + 0x3c]
call fcn.00475f95
lea edx, [esi + 0xc]
lea ecx, [esp + 0x3c]
push edx
call fcn.00475f95
lea eax, [esi + 0x10]
lea ecx, [esp + 0x40]
push eax
call fcn.00475f95
lea ecx, [esi + 0x14]
push ecx
lea ecx, [esp + 0x48]
call fcn.00475f95
lea edx, [esi + 0x18]
lea ecx, [esp + 0x48]
push edx
call fcn.00475f95
lea eax, [esi + 0x1c]
lea ecx, [esp + 0x30]
mov dword [esp + 0x24], eax
mov eax, esi
sub eax, ecx
lea edi, [esp + 0x50]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 5
mov edx, dword [esp + 0x24]
lea ecx, [edi - 4]
push edx
call fcn.00475f95
mov eax, dword [esp + 0x20]
mov ecx, edi
add eax, edi
push eax
call fcn.00475f95
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
add edx, 8
add edi, 8
dec eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x1c], eax
jne 0x411cfd
lea ecx, [esi + 0x44]
push ecx
lea ecx, [esp + 0x78]
call fcn.00475f95
lea edx, [esi + 0x48]
lea ecx, [esp + 0x78]
push edx
call fcn.00475f95
lea eax, [esi + 0x4c]
lea ecx, [esp + 0x7c]
push eax
call fcn.00475f95
mov ecx, dword [esi + 0x50]
add esi, 0x54
mov dword [esp + 0x80], ecx
mov ecx, 0x146
lea edi, [esp + 0x84]
rep movsd dword es:[edi], dword [esi]
cmp dword [esp + 0x80], 9
je 0x411d8a
test ebx, ebx
jne 0x411c7f
jmp 0x411e64
mov dword [esp + 0x18], 1
call fcn.00460540
test eax, eax
jne 0x411e64
mov ecx, ebp
call fcn.004131d0
lea ecx, [esp + 0xf08]
call fcn.00422380
lea edx, [esp + 0x44]
lea eax, [esp + 0x40]
push edx
push eax
lea ecx, [esp + 0xf10]
mov byte [esp + 0x22b0], 0x13
call fcn.00428950
lea ecx, [esp + 0x30]
push ecx
mov ecx, ebp
call fcn.0040f670
mov ecx, ebp
call fcn.0040fd70
lea edx, [esp + 0x44]
lea eax, [esp + 0x40]
push edx
push eax
mov ecx, ebp
call fcn.00413550
mov eax, dword [ebp + 0xb8]
or dword [eax + 0x5c], 0x4000000
lea ecx, [esp + 0xf08]
lea edx, [esp + 0x1178]
neg ecx
sbb ecx, ecx
mov byte [esp + 0x22a8], 0x15
and ecx, edx
call fcn.0041a660
lea ecx, [esp + 0xf08]
lea eax, [esp + 0x1148]
neg ecx
sbb ecx, ecx
mov byte [esp + 0x22a8], 0x14
and ecx, eax
call fcn.00414250
lea ecx, [esp + 0xf08]
lea edx, [esp + 0xf0c]
neg ecx
sbb ecx, ecx
mov byte [esp + 0x22a8], 0x12
and ecx, edx
call fcn.00414250
lea ecx, [esp + 0x7c]
mov byte [esp + 0x22a8], 0x1f
call fcn.00475ea8
lea ecx, [esp + 0x78]
mov byte [esp + 0x22a8], 0x1e
call fcn.00475ea8
lea ecx, [esp + 0x74]
mov byte [esp + 0x22a8], 0x1d
call fcn.00475ea8
push 0x403560
push 5
lea eax, [esp + 0x54]
push 8
push eax
mov byte [esp + 0x22b8], 0x1c
call fcn.00465d50
lea ecx, [esp + 0x48]
mov byte [esp + 0x22a8], 0x1b
call fcn.00475ea8
lea ecx, [esp + 0x44]
mov byte [esp + 0x22a8], 0x1a
call fcn.00475ea8
lea ecx, [esp + 0x40]
mov byte [esp + 0x22a8], 0x19
call fcn.00475ea8
lea ecx, [esp + 0x3c]
mov byte [esp + 0x22a8], 0x18
call fcn.00475ea8
lea ecx, [esp + 0x38]
mov byte [esp + 0x22a8], 0x17
call fcn.00475ea8
lea ecx, [esp + 0x34]
mov byte [esp + 0x22a8], 0x16
call fcn.00475ea8
lea ecx, [esp + 0x30]
mov byte [esp + 0x22a8], 7
call fcn.00475ea8
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x4122b7
mov esi, dword [esp + 0x22b0]
mov eax, dword [esi]
mov ecx, dword [eax + 0x5c]
test ch, 0x40
je 0x411f4e
push eax
mov ecx, ebp
call fcn.00410e30
mov eax, dword [ebp + 0xd4]
test eax, eax
jle 0x41246c
mov ecx, ebp
call fcn.00413060
mov eax, dword [ebp + 0xc4]
test eax, eax
jne 0x411f7c
lea eax, [ebp + 0xc8]
lea ecx, [ebp + 0x74]
push eax
call fcn.0044b050
mov esi, dword [ebp + 0xcc]
test esi, esi
je 0x4120b5
jmp 0x411f90
mov esi, dword [esp + 0x1c]
mov ecx, dword [esi]
add esi, 8
mov dword [esp + 0x1c], ecx
push esi
lea ecx, [esp + 0x5a0]
call fcn.00475f95
lea edx, [esi + 4]
lea ecx, [esp + 0x5a0]
push edx
call fcn.00475f95
lea eax, [esi + 8]
lea ecx, [esp + 0x5a4]
push eax
call fcn.00475f95
lea ecx, [esi + 0xc]
push ecx
lea ecx, [esp + 0x5ac]
call fcn.00475f95
lea edx, [esi + 0x10]
lea ecx, [esp + 0x5ac]
push edx
call fcn.00475f95
lea eax, [esi + 0x14]
lea ecx, [esp + 0x5b0]
push eax
call fcn.00475f95
lea ecx, [esi + 0x18]
push ecx
lea ecx, [esp + 0x5b8]
call fcn.00475f95
mov eax, esi
lea edx, [esp + 0x59c]
sub eax, edx
lea ebx, [esi + 0x1c]
lea edi, [esp + 0x5bc]
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], 5
push ebx
lea ecx, [edi - 4]
call fcn.00475f95
mov eax, dword [esp + 0x20]
mov ecx, edi
add eax, edi
push eax
call fcn.00475f95
mov eax, dword [esp + 0x18]
add ebx, 8
add edi, 8
dec eax
mov dword [esp + 0x18], eax
jne 0x412027
lea ecx, [esi + 0x44]
push ecx
lea ecx, [esp + 0x5e4]
call fcn.00475f95
lea edx, [esi + 0x48]
lea ecx, [esp + 0x5e4]
push edx
call fcn.00475f95
lea eax, [esi + 0x4c]
lea ecx, [esp + 0x5e8]
push eax
call fcn.00475f95
mov ecx, dword [esi + 0x50]
add esi, 0x54
mov dword [esp + 0x5ec], ecx
mov ecx, 0x146
lea edi, [esp + 0x5f0]
lea edx, [esp + 0x59c]
rep movsd dword es:[edi], dword [esi]
push edx
mov ecx, ebp
call fcn.004114c0
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x411f8c
call fcn.00441cf0
test eax, eax
je 0x4120f1
mov eax, dword [ebp + 0xb8]
lea edx, [esp + 0xb08]
mov ecx, dword [eax + 0x5c]
push ecx
push str.TEST_:_m_pSetupParms__dwSetupConfig___X_n
push edx
call fcn.00465850
add esp, 0xc
lea eax, [esp + 0xb08]
push eax
call fcn.00441c80
mov ecx, eax
call fcn.00442090
mov ecx, dword [ebp + 0xb8]
mov eax, dword [ecx + 0x5c]
test ah, 0x80
jne 0x41210a
not eax
test ah, 0x40
je 0x41246c
call fcn.00441cf0
test eax, eax
je 0x412124
push str.Post_Uninstall_Processing.._n
call fcn.00441c80
mov ecx, eax
call fcn.00442090
mov edx, dword [ebp + 0xb8]
mov eax, dword [edx + 0x5c]
not eax
test ah, 0x40
je 0x412142
mov ecx, ebp
call fcn.0040e760
mov ecx, ebp
call fcn.00410c10
lea ecx, [ebp + 0xb4]
call fcn.0045be30
mov ecx, dword [ebp + 0xb8]
mov eax, dword [ecx + 0x5c]
test al, 0x80
jne 0x412169
mov ecx, dword [ebp + 0xc4]
test ecx, ecx
je 0x412169
test ah, 4
je 0x412170
mov ecx, ebp
call fcn.0040de00
mov edx, dword [ebp + 0xb8]
mov eax, dword [edx + 0x5c]
test ah, 1
jne 0x412197
mov ecx, dword [ebp + 0xc4]
test ecx, ecx
je 0x412197
test ah, 4
jne 0x412197
mov eax, dword [ebp + 0x1508]
test eax, eax
je 0x41219e
mov ecx, ebp
call fcn.0040fd70
mov eax, dword [ebp + 0xc4]
test eax, eax
je 0x4121af
mov ecx, ebp
call fcn.00410030
mov eax, dword [ebp + 0xb8]
add eax, 0x5c
mov ecx, dword [eax]
mov edx, ecx
not edx
test dh, 0x40
jne 0x4121cc
test ch, 4
je 0x41246c
push eax
lea eax, [ebp + 0xc8]
push eax
lea ecx, [ebp + 0xb5]
call fcn.00456c40
mov eax, dword [ebp + 0xb8]
mov ecx, dword [eax + 0x5c]
not ecx
test cl, 8
je 0x41223e
mov cl, byte [eax + 0x58]
mov bl, 0x20
test bl, cl
jne 0x412208
mov ecx, dword [ebp + 0xc0]
cmp ecx, 0xb
je 0x412208
cmp ecx, 0xc
jne 0x41223e
mov esi, dword [eax + 0x58]
lea ecx, [esp + 0x18]
not esi
shr esi, 5
and esi, 1
call fcn.00433120
push esi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x22ac], bl
call fcn.00433170
lea ecx, [esp + 0x18]
mov byte [esp + 0x22a8], 7
call fcn.00433150
mov ecx, dword [ebp + 0xb8]
mov eax, dword [ecx + 0x5c]
test ah, 2
je 0x412258
mov edx, eax
not edx
test edx, 0x40000000
jne 0x41228c
test eax, 0x10000
je 0x41226b
mov edx, eax
not edx
test edx, 0x40000000
jne 0x41228c
test al, 0x10
je 0x41227b
mov edx, eax
not edx
test edx, 0x40000000
jne 0x41228c
test byte [ecx + 0x58], 0x40
jne 0x41228c
test eax, 0x400000
je 0x41246c
or eax, 0x200000
mov dword [ecx + 0x5c], eax
call fcn.00441cf0
test eax, eax
je 0x41246c
push str.Setting_for_Reboot_n
call fcn.00441c80
mov ecx, eax
call fcn.00442090
jmp 0x41246c
mov eax, dword [ebp + 0xb8]
mov ecx, dword [eax + 0x5c]
test ch, 0x40
je 0x41246c
mov eax, dword [ebp + 0xc4]
test eax, eax
jne 0x41246c
mov eax, dword [0x4a6844]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
push 0x403560
push 0x403540
push 5
lea ecx, [esp + 0x58]
push 8
push ecx
mov byte [esp + 0x22bc], 0x27
call fcn.00466040
mov eax, dword [0x4a6844]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov edx, dword [ebp + 0xb8]
push 0x49b19c
add edx, 0x10
lea eax, [esp + 0x1c]
push edx
push eax
mov byte [esp + 0x22b4], 0x28
call fcn.004760f1
mov ecx, dword [ebp + 0xb8]
lea edx, [esp + 0x20]
add ecx, 0x14
mov bl, 0x29
push ecx
push eax
push edx
mov byte [esp + 0x22b4], bl
call fcn.0047608b
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x22ac], 0x2a
call fcn.00475f95
lea ecx, [esp + 0x20]
mov byte [esp + 0x22a8], bl
call fcn.00475ea8
lea ecx, [esp + 0x18]
mov byte [esp + 0x22a8], 0x28
call fcn.00475ea8
lea eax, [esp + 0x30]
mov ecx, ebp
push eax
call fcn.0040eb60
lea ecx, [esp + 0x7c]
mov byte [esp + 0x22a8], 0x34
call fcn.00475ea8
lea ecx, [esp + 0x78]
mov byte [esp + 0x22a8], 0x33
call fcn.00475ea8
lea ecx, [esp + 0x74]
mov byte [esp + 0x22a8], 0x32
call fcn.00475ea8
mov byte [esp + 0x22a8], 0x31
push 0x403560
push 5
lea ecx, [esp + 0x54]
push 8
push ecx
call fcn.00465d50
lea ecx, [esp + 0x48]
mov byte [esp + 0x22a8], 0x30
call fcn.00475ea8
lea ecx, [esp + 0x44]
mov byte [esp + 0x22a8], 0x2f
call fcn.00475ea8
lea ecx, [esp + 0x40]
mov byte [esp + 0x22a8], 0x2e
call fcn.00475ea8
lea ecx, [esp + 0x3c]
mov byte [esp + 0x22a8], 0x2d
call fcn.00475ea8
lea ecx, [esp + 0x38]
mov byte [esp + 0x22a8], 0x2c
call fcn.00475ea8
lea ecx, [esp + 0x34]
mov byte [esp + 0x22a8], 0x2b
call fcn.00475ea8
lea ecx, [esp + 0x30]
mov byte [esp + 0x22a8], 7
call fcn.00475ea8
mov ecx, ebp
call fcn.00412cd0
push 0x4b0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp + 0xbc]
mov dword [edx], 0x6e
call fcn.00441cf0
test eax, eax
je 0x41252a
push 0
lea eax, [esp + 0xe0c]
push str.CUninstall_::_Uninstall_n
push eax
call fcn.00465850
mov edi, str.EXIT:
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0xd08]
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0xd08]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0xe08]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea eax, [esp + 0xd08]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.00441c80
mov ecx, eax
call fcn.00442090
call fcn.00441c80
mov ecx, eax
call fcn.00441d30
lea ecx, [esp + 0x5e8]
mov dword [esp + 0x22a8], 0x3e
call fcn.00475ea8
lea ecx, [esp + 0x5e4]
mov byte [esp + 0x22a8], 0x3d
call fcn.00475ea8
lea ecx, [esp + 0x5e0]
mov byte [esp + 0x22a8], 0x3c
call fcn.00475ea8
push 0x403560
push 5
lea ecx, [esp + 0x5c0]
push 8
push ecx
mov byte [esp + 0x22b8], 0x3b
call fcn.00465d50
lea ecx, [esp + 0x5b4]
mov byte [esp + 0x22a8], 0x3a
call fcn.00475ea8
lea ecx, [esp + 0x5b0]
mov byte [esp + 0x22a8], 0x39
call fcn.00475ea8
lea ecx, [esp + 0x5ac]
mov byte [esp + 0x22a8], 0x38
call fcn.00475ea8
lea ecx, [esp + 0x5a8]
mov byte [esp + 0x22a8], 0x37
call fcn.00475ea8
lea ecx, [esp + 0x5a4]
mov byte [esp + 0x22a8], 0x36
call fcn.00475ea8
lea ecx, [esp + 0x5a0]
mov byte [esp + 0x22a8], 0x35
call fcn.00475ea8
lea ecx, [esp + 0x59c]
mov dword [esp + 0x22a8], 0xffffffff
call fcn.00475ea8
mov ecx, dword [esp + 0x22a0]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x229c
ret 4