Function at 0x41aa30
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x23c
mov eax, dword [0x633754]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x22c], 0
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
push esi
mov dword [ebp - 0x230], esi
call ebx
test eax, eax
je 0x41b84d
push edi
push esi
call fcn.00416190
add esp, 4
push esi
call ebx
lea eax, [eax*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edi, eax
push esi
mov dword [ebp - 0x23c], edi
call ebx
lea eax, [eax*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push esi
mov dword [ebp - 0x220], eax
call ebx
lea eax, [eax*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push eax
push edi
push esi
mov dword [ebp - 0x224], eax
call fcn.004160a0
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
add esp, 0xc
mov esi, dword [sym.imp.USER32.dll_CharUpperW]
nop word [eax + eax]
push dword [ebp - 0x220]
push edi
push dword [ebp - 0x224]
call fcn.004160a0
add esp, 0xc
test eax, eax
je 0x41b833
cmp dword [ebp - 0x228], 0
jne 0x41b6d0
push 0x5e18dc
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x41ab52
push dword [ebp - 0x220]
mov dword [0x63943c], 2
push dword [ebp - 0x224]
mov dword [ebp - 0x228], 1
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push 0x5e18e0
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x41ab8d
push dword [ebp - 0x220]
mov dword [0x63943c], 1
push dword [ebp - 0x224]
mov dword [ebp - 0x228], 1
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
movzx eax, word [edi]
cmp eax, 0x2f
je 0x41ab9e
cmp eax, 0x2d
jne 0x41b6d0
push 0x5e18e4
push edi
call fcn.00415fb0
add esp, 8
push 0x5e18ec
push edi
call ebx
test eax, eax
je 0x41b6af
push 0x5e18f8
push edi
call ebx
test eax, eax
je 0x41b6af
push 0x5e18fc
push edi
call ebx
test eax, eax
je 0x41b6af
push str.UNICODE
push edi
call ebx
test eax, eax
je 0x41b68e
push 0x5e1918
push edi
call ebx
test eax, eax
je 0x41b68e
push 0x5e191c
push edi
call ebx
test eax, eax
je 0x41b66d
push str.UNICODE_BE
push edi
call ebx
test eax, eax
je 0x41b66d
push str.UTF8
push edi
call ebx
test eax, eax
je 0x41b64c
push 0x5e1954
push edi
call ebx
test eax, eax
je 0x41b64c
push str.UTF8SIG
push edi
call ebx
test eax, eax
je 0x41b62b
push str.UTF_8SIG
push edi
call ebx
test eax, eax
je 0x41b62b
push str.UTF8SIGNATURE
push edi
call ebx
test eax, eax
je 0x41b62b
push str.UTF_8SIGNATURE
push edi
call ebx
test eax, eax
je 0x41b62b
push str.UTF8_SIGNATURE
push edi
call ebx
test eax, eax
je 0x41b62b
push str.UTF_8_SIGNATURE
push edi
call ebx
test eax, eax
je 0x41b62b
push 0x5e1a00
push edi
call ebx
test eax, eax
je 0x41b60a
push 0x5e1a0c
push edi
call ebx
test eax, eax
je 0x41b60a
push 0x5e1a18
push edi
call ebx
test eax, eax
jne 0x41ace9
push dword [ebp - 0x220]
mov dword [0x639480], 2
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push 0x5e1a20
push edi
call ebx
test eax, eax
jne 0x41ad16
push dword [ebp - 0x220]
mov dword [0x639480], 3
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push 6
push str.appid
push edi
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x41ad84
push 0x20
lea eax, [edi + 0xc]
push eax
push 0x6391f0
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push 0x5e1a38
push 0x6391f0
call dword [sym.imp.SHLWAPI.dll_StrTrimW]
push 0x6391f0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne case.0x41adee.64
mov eax, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x5e1a3c
push 0x6391f0
call eax
push dword [ebp - 0x220]
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push 7
push str.sysmru
push edi
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x41addc
push 8
lea eax, [edi + 0xe]
push eax
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push 0x5e1a60
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.SHLWAPI.dll_StrTrimW]
push dword [ebp - 0x220]
xor eax, eax
cmp word [ebp - 0x14], 0x31
push dword [ebp - 0x224]
sete al
inc eax
mov dword [0x639498], eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push edi
call esi
movzx eax, word [eax]
add eax, 0xffffffc1
cmp eax, 0x1b
ja case.0x41adee.64
jmp dword [eax*4 + 0x41b860]
mov dword [0x639438], 0
mov dword [0x6391ec], 1
lea eax, [edi + 2]
push eax
call esi
push dword [ebp - 0x220]
xor ecx, ecx
push dword [ebp - 0x224]
cmp word [eax], 0x53
sete cl
mov dword [0x639440], ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
mov dword [0x639438], 1
mov dword [0x6391ec], 0
jmp 0x41ae09
cmp word [edi + 2], 0x30
lea eax, [edi + 2]
je 0x41aeb7
push eax
call esi
cmp word [eax], 0x4f
je 0x41aeb7
mov eax, dword [ebp - 0x220]
push eax
push edi
push eax
call fcn.004160a0
add esp, 0xc
test eax, eax
je case.0x41adee.64
push 0x104
push edi
push 0x637260
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push 0x637260
call fcn.00416020
add esp, 4
push 0x637260
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
mov eax, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x5e1a64
push 0x637260
call eax
push dword [ebp - 0x220]
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x220]
mov dword [0x639444], 1
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
movzx eax, word [edi + 2]
lea ecx, [edi + 2]
cmp eax, 0x30
je 0x41af1f
cmp eax, 0x2d
je 0x41af1f
push ecx
call esi
cmp word [eax], 0x4f
mov eax, 2
jne 0x41af24
mov eax, 1
push dword [ebp - 0x220]
mov dword [0x639448], eax
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push 4
push str.POS:
push edi
mov esi, edi
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x41aff5
lea esi, [edi + 6]
add esi, 2
cmp word [esi], 0x30
je 0x41b1c6
push esi
call dword [sym.imp.USER32.dll_CharUpperW]
cmp word [eax], 0x4f
je 0x41b1c6
push esi
call dword [sym.imp.USER32.dll_CharUpperW]
cmp word [eax], 0x44
je 0x41b1a0
push esi
call dword [sym.imp.USER32.dll_CharUpperW]
cmp word [eax], 0x53
je 0x41b1a0
movzx eax, word [esi]
push eax
push str.FLTRBM
call dword [sym.imp.SHLWAPI.dll_StrChrIW]
test eax, eax
je 0x41b0d3
mov dword [0x63946c], 1
mov dword [0x639470], 0
cmp word [esi], 0
je 0x41b043
mov ebx, 0x40
push esi
call dword [sym.imp.USER32.dll_CharUpperW]
movzx eax, word [eax]
add eax, 0xffffffbe
cmp eax, 0x12
ja case.0x41afee.67
movzx eax, byte [eax + 0x41b8ec]
jmp dword [eax*4 + 0x41b8d0]
push 3
push 0x5e1a78
push edi
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x41b00f
lea esi, [edi + 4]
jmp 0x41af5b
movzx ecx, word [edi + 2]
cmp ecx, 0x3a
jne 0x41b020
lea esi, [edi + 2]
jmp 0x41af5b
cmp dword [ebp - 0x22c], 0
je 0x41af5b
cmp ecx, 0x54
jne 0x41b043
mov eax, dword [ebp - 0x220]
push eax
push edi
push eax
call fcn.004160a0
add esp, 0xc
mov esi, dword [sym.imp.USER32.dll_CharUpperW]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
mov eax, dword [0x639470]
and eax, 0xffffffc3
or eax, 0x40
jmp 0x41b0b0
mov eax, dword [0x639470]
and eax, 0xffffffb7
or eax, 4
jmp 0x41b0b0
mov eax, dword [0x639470]
and eax, 0xffffffbb
or eax, 8
jmp 0x41b0b0
mov eax, dword [0x639470]
and eax, 0xffffff9f
or eax, 0x10
jmp 0x41b0b0
mov eax, dword [0x639470]
and eax, 0xffffffaf
or eax, 0x20
jmp 0x41b0b0
mov eax, dword [0x639470]
test eax, eax
cmove eax, ebx
or eax, 0x80
mov dword [0x639470], eax
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
cmp word [esi], 0
jne 0x41afd1
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
jmp 0x41b043
mov eax, dword [ebp - 0x220]
push eax
push edi
push eax
call fcn.004160a0
add esp, 0xc
test eax, eax
je 0x41b043
push 0x63c730
push 0x63c72c
push 0x63c728
push 0x63c724
push 0x63c720
push str._i__i__i__i__i
push edi
call fcn.004177b0
mov ecx, eax
add esp, 0x1c
cmp ecx, 4
je 0x41b123
cmp ecx, 5
jne 0x41b043
mov eax, dword [0x63c728]
mov edx, SysReAllocString
mov esi, dword [sym.imp.USER32.dll_CharUpperW]
cmp eax, 1
mov dword [0x63946c], 1
cmovl eax, edx
mov dword [0x639470], 0
mov dword [0x63c728], eax
mov eax, dword [0x63c72c]
cmp eax, 1
cmovl eax, edx
mov edx, 1
mov dword [0x63c72c], eax
mov eax, dword [0x63c730]
test eax, eax
cmovne eax, edx
mov dword [0x63c730], eax
cmp ecx, 4
jne case.0x41adee.64
push dword [ebp - 0x220]
mov dword [0x63c730], 0
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push 0x4c
push esi
mov dword [0x63946c], 1
call dword [sym.imp.SHLWAPI.dll_StrChrIW]
neg eax
sbb eax, eax
neg eax
add eax, 2
mov dword [0x639470], eax
jmp 0x41b043
mov dword [0x63946c], 1
mov dword [0x639470], 1
jmp 0x41b043
mov eax, dword [ebp - 0x220]
push eax
push edi
push eax
call fcn.004160a0
add esp, 0xc
test eax, eax
je case.0x41adee.64
push 0x80
push edi
push 0x6378a8
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push dword [ebp - 0x220]
mov dword [0x6378a4], 1
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x220]
mov dword [0x639474], 1
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x220]
mov dword [0x639478], 1
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
mov eax, dword [ebp - 0x220]
push eax
push edi
push eax
call fcn.004160a0
add esp, 0xc
test eax, eax
je case.0x41adee.64
mov eax, dword [0x637898]
test eax, eax
je 0x41b295
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
push edi
call dword [sym.imp.SHLWAPI.dll_StrDupW]
push dword [ebp - 0x220]
mov dword [0x637898], eax
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
mov eax, dword [ebp - 0x220]
push eax
push edi
push eax
call fcn.004160a0
add esp, 0xc
test eax, eax
je case.0x41adee.64
push 0x63c338
push 0x63c33c
push str._i__i
push edi
call fcn.004177b0
add esp, 0x10
cmp eax, 1
je 0x41b2f7
cmp eax, 2
jne case.0x41adee.64
push dword [ebp - 0x220]
mov dword [0x639484], 1
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push 0x2d
push edi
xor esi, esi
call dword [sym.imp.SHLWAPI.dll_StrChrW]
test eax, eax
mov eax, 1
push 0x52
push edi
cmovne esi, eax
call dword [sym.imp.SHLWAPI.dll_StrChrW]
test eax, eax
mov ecx, 1
mov eax, 0
push 0x42
cmovne eax, ecx
push edi
mov dword [ebp - 0x234], eax
call dword [sym.imp.SHLWAPI.dll_StrChrW]
test eax, eax
mov ecx, 1
mov eax, 0
cmovne eax, ecx
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x220]
push eax
push edi
push eax
call fcn.004160a0
add esp, 0xc
test eax, eax
je 0x41b043
mov eax, dword [0x637894]
test eax, eax
je 0x41b392
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push edi
call dword [sym.imp.SHLWAPI.dll_StrDupW]
mov dword [0x637894], eax
mov eax, 1
mov dword [0x639488], 1
test esi, esi
je 0x41b3c0
mov dword [0x639488], 3
mov eax, 3
cmp dword [ebp - 0x234], 0
je 0x41b3d1
or eax, 4
mov dword [0x639488], eax
cmp dword [ebp - 0x238], 0
mov esi, dword [sym.imp.USER32.dll_CharUpperW]
je case.0x41adee.64
push dword [ebp - 0x220]
and eax, 0xfffffffb
push dword [ebp - 0x224]
or eax, 8
mov dword [0x639488], eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
movzx eax, word [edi + 2]
lea ecx, [edi + 2]
cmp eax, 0x30
je 0x41b425
cmp eax, 0x2d
je 0x41b425
push ecx
call esi
cmp word [eax], 0x4f
mov eax, 2
jne 0x41b42a
mov eax, 1
push dword [ebp - 0x220]
mov dword [0x63948c], eax
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x220]
mov dword [0x639494], 1
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
mov eax, dword [ebp - 0x220]
push eax
push edi
push eax
call fcn.004160a0
add esp, 0xc
test eax, eax
je case.0x41adee.64
mov eax, dword [0x637890]
test eax, eax
je 0x41b490
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
push edi
call dword [sym.imp.SHLWAPI.dll_StrDupW]
push dword [ebp - 0x220]
mov dword [0x637890], eax
push dword [ebp - 0x224]
mov dword [0x639490], 1
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
mov eax, dword [0x637890]
test eax, eax
je 0x41b4d7
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [0x637890], 0
push dword [ebp - 0x220]
mov dword [0x63c334], 0
push dword [ebp - 0x224]
mov dword [0x639490], 1
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
mov eax, dword [0x637890]
test eax, eax
je 0x41b51c
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [0x637890], 0
push dword [ebp - 0x220]
mov dword [0x63c334], 0x22
push dword [ebp - 0x224]
mov dword [0x639490], 1
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
mov eax, dword [0x637890]
test eax, eax
je 0x41b561
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [0x637890], 0
push dword [ebp - 0x220]
mov dword [0x63c334], 0x23
push dword [ebp - 0x224]
mov dword [0x639490], 1
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x220]
mov dword [0x63949c], 1
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
mov eax, dword [ebp - 0x220]
push eax
push edi
push eax
call fcn.004160a0
add esp, 0xc
mov dword [0x63943c], 1
mov dword [ebp - 0x22c], 1
push dword [ebp - 0x220]
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x220]
mov dword [0x6394a0], 1
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x220]
mov dword [0x639480], 1
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x220]
mov dword [0x63947c], 5
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x220]
mov dword [0x63947c], 4
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x220]
mov dword [0x63947c], 3
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x220]
mov dword [0x63947c], 2
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x220]
mov dword [0x63947c], 1
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x41aaf0
push dword [ebp - 0x230]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
call esi
lea eax, [eax*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push dword [ebp - 0x224]
mov ebx, eax
call esi
push dword [ebp - 0x230]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
sub eax, esi
mov dword [0x637888], eax
mov eax, dword [0x63788c]
test eax, eax
je 0x41b71d
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0x20c
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x104
push dword [ebp - 0x224]
mov dword [0x63788c], eax
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push dword [0x63788c]
call fcn.004161d0
add esp, 4
push dword [0x63788c]
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
jne 0x41b7c3
push dword [0x63788c]
call dword [sym.imp.SHLWAPI.dll_PathIsUNCW]
test eax, eax
jne 0x41b7c3
push dword [0x63788c]
call dword [sym.imp.SHLWAPI.dll_PathGetDriveNumberW]
cmp eax, 0xffffffff
jne 0x41b7c3
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x21c]
push 0x639230
push eax
call esi
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathStripToRootW]
push dword [0x63788c]
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x21c]
push eax
push dword [0x63788c]
call esi
push 0x5e1abc
push dword [0x63788c]
call dword [sym.imp.SHLWAPI.dll_StrTrimW]
cmp dword [0x637884], 0x20
jge 0x41b828
mov esi, dword [sym.imp.SHLWAPI.dll_PathQuoteSpacesW]
mov edi, dword [ebp - 0x224]
nop dword [eax]
push edi
push ebx
push edi
call fcn.004160a0
add esp, 0xc
test eax, eax
je 0x41b822
push ebx
call esi
push ebx
call dword [sym.imp.SHLWAPI.dll_StrDupW]
mov ecx, dword [0x637884]
mov dword [ecx*4 + 0x63c640], eax
inc ecx
mov dword [0x637884], ecx
cmp ecx, 0x20
jl 0x41b7f0
mov edi, dword [ebp - 0x23c]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_LocalFree]
call ebx
jmp 0x41b839
mov ebx, dword [sym.imp.KERNEL32.dll_LocalFree]
push edi
call ebx
push dword [ebp - 0x220]
call ebx
push dword [ebp - 0x224]
call ebx
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.0052a352
mov esp, ebp
pop ebp
ret