Function at 0x4056e0
Capabilities:
Delete file
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x43ed84
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1104
call fcn.00427010
mov eax, dword [0x44fb64]
xor eax, esp
mov dword [esp + 0x1100], eax
push ebx
push esi
push edi
mov eax, dword [0x44fb64]
xor eax, esp
push eax
lea eax, [esp + 0x1118]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor esi, esi
push 0x208
lea edx, [esp + 0x4c8]
push esi
push edx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x30], esi
call fcn.00424c40
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
add esp, 0xc
push 0x208
lea eax, [esp + 0x4c8]
push eax
push esi
call ebx
lea eax, [esp + 0x4c4]
lea ecx, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x405770
sub eax, ecx
dec eax
cmp eax, esi
jl 0x40578f
mov edi, edi
cmp byte [esp + eax + 0x4c4], 0x5c
je 0x40578f
sub eax, 1
jns 0x405780
mov byte [esp + eax + 0x4c4], 0
lea eax, [esp + 0x4c4]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4057a0
mov ecx, dword [0x4479b0]
mov edx, dword [0x4479b4]
mov dword [eax], ecx
mov ecx, dword [0x4479b8]
mov dword [eax + 4], edx
mov dl, byte [0x4479bc]
mov dword [eax + 8], ecx
push 0xa
lea ecx, [esp + 0x48]
mov byte [eax + 0xc], dl
mov dword [esp + 0x2c], esi
call fcn.00413b93
mov dword [esp + 0x1120], esi
call fcn.004133f1
xor ecx, ecx
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x4057fb
push 0x80004005
call fcn.00409d60
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov byte [esp + 0x1120], 1
call fcn.004133f1
xor ecx, ecx
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x40582d
push 0x80004005
call fcn.00409d60
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
lea ecx, [esp + 0x4c4]
push 0x447a7c
push ecx
mov byte [esp + 0x1128], 2
xor edi, edi
call fcn.00422167
mov esi, eax
add esp, 8
mov dword [esp + 0x38], esi
test esi, esi
je 0x405c68
push 0x10e
lea edx, [esp + 0x98]
push edi
push edx
call fcn.00424c40
add esp, 0xc
push esi
push 1
lea eax, [esp + 0x9c]
push 0x10e
push eax
call fcn.00422af3
movzx ecx, word [esp + 0x1b0]
push esi
mov dword [esp + 0x40], ecx
call fcn.004227eb
add esp, 0x14
test eax, eax
jne 0x405c51
push 0x118
lea edx, [esp + 0x1a8]
push 0
push edx
call fcn.00424c40
mov esi, dword [esp + 0x44]
add esp, 0xc
push esi
push 1
lea eax, [esp + 0x1ac]
push 0x118
push eax
call fcn.00422af3
add esp, 0x10
cmp eax, 1
je 0x4058fb
push esi
call fcn.0042281f
add esp, 4
test eax, eax
jne 0x405bc0
push 0x140
lea ecx, [esp + 0x2c0]
push 0
push ecx
call fcn.00424c40
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x2c8]
add esp, 0xc
sub edx, eax
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x405920
lea edi, [esp + 0x2bc]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x405932
mov bx, word [0x4478d8]
mov word [edi], bx
lea ecx, [esp + 0xa0]
mov eax, 0x448368
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x405970
test dl, dl
je 0x40596c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x405970
add eax, 2
add ecx, 2
test dl, dl
jne 0x405950
xor eax, eax
jmp 0x405975
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4059be
lea eax, [esp + 0xa0]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x405982
lea edi, [esp + 0x2bc]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x405993
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x2bc]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4059b3
mov word [edi], bx
lea eax, [esp + 0x1a4]
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4059c7
lea edi, [esp + 0x2bc]
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4059d8
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor edi, edi
push edi
lea edx, [esp + 0x2c0]
push edx
mov ebx, edi
call dword [sym.imp.KERNEL32.dll__lopen]
mov esi, eax
test esi, esi
je 0x405a41
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x88]
push ecx
lea edx, [esp + 0x84]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x405a3a
lea eax, [esp + 0x8c]
test eax, eax
je 0x405a3a
mov edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x40]
push esi
call dword [sym.imp.KERNEL32.dll__lclose]
cmp dword [esp + 0x2ac], ebx
jne 0x405c49
cmp dword [esp + 0x2a8], edi
jne 0x405c49
push str..sec
lea ecx, [esp + 0x18]
call fcn.004098c0
lea ecx, [esp + 0x1a4]
push ecx
lea ecx, [esp + 0x20]
mov byte [esp + 0x1124], 3
call fcn.004098c0
mov byte [esp + 0x1120], 4
mov edx, dword [esp + 0x14]
mov esi, dword [edx - 0xc]
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, esi
or eax, ecx
jge 0x405ab0
push esi
lea ecx, [esp + 0x18]
call fcn.00409bc0
mov edx, dword [esp + 0x14]
lea eax, [esi + 1]
push eax
push edx
call fcn.00423331
push eax
call fcn.00409510
add esp, 0xc
test esi, esi
jl 0x405c3f
mov eax, dword [esp + 0x14]
cmp esi, dword [eax - 8]
jg 0x405c3f
mov dword [eax - 0xc], esi
mov ecx, dword [esp + 0x14]
mov byte [esi + ecx], 0
mov edx, dword [esp + 0x1c]
mov esi, dword [edx - 0xc]
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, esi
or eax, ecx
jge 0x405b09
push esi
lea ecx, [esp + 0x20]
call fcn.00409bc0
mov edx, dword [esp + 0x1c]
lea eax, [esi + 1]
push eax
push edx
call fcn.00423331
push eax
call fcn.00409510
add esp, 0xc
test esi, esi
jl 0x405c3f
mov eax, dword [esp + 0x1c]
cmp esi, dword [eax - 8]
jg 0x405c3f
mov dword [eax - 0xc], esi
mov ecx, dword [esp + 0x1c]
mov byte [esi + ecx], 0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
push edx
push eax
call fcn.00422c00
add esp, 8
or edx, 0xffffffff
mov byte [esp + 0x1120], 3
test eax, eax
mov eax, dword [esp + 0x1c]
jne 0x405bf4
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405b7e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1120], 2
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405ba6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x38]
push ecx
call fcn.004227eb
add esp, 4
test eax, eax
je 0x4058b2
jmp 0x405c51
mov dword [esp + 0x24], 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea edx, [esp + 0x38]
push str.UpdateLdxFile_when_fread_FileSummary_struct_with_error_code:__d
push edx
call fcn.00409670
mov eax, dword [esp + 0x40]
add esp, 0xc
push 0
push eax
push 0x453d09
call fcn.0040d390
jmp 0x405c51
add eax, 0xfffffff0
mov dword [esp + 0x28], 1
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405c15
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1120], 2
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405c51
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x405c51
push 0x80070057
call fcn.00409d60
mov dword [esp + 0x28], 1
mov ecx, dword [esp + 0x38]
push ecx
call fcn.004221f5
mov edi, dword [esp + 0x30]
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
add esp, 4
push 0xa
lea ecx, [esp + 0x64]
call fcn.00413b93
lea edx, [esp + 0x60]
mov byte [esp + 0x1120], 5
mov ecx, dword [esp + 0x18]
push edx
call fcn.0040a1f0
add esp, 4
cmp dword [esp + 0x6c], edi
jg 0x405c9d
cmp dword [esp + 0x28], 0
je 0x4062f0
push 0x208
lea eax, [esp + 0x6d1]
push 0
push eax
mov byte [esp + 0x6d8], 0
call fcn.00424c40
add esp, 0xc
push 0x208
lea ecx, [esp + 0x6d0]
push ecx
push 0
call ebx
lea eax, [esp + 0x6cc]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x405cd7
sub eax, edx
add eax, 0xffffffff
js 0x405cf4
cmp byte [esp + eax + 0x6cc], 0x5c
je 0x405cf4
sub eax, 1
jns 0x405ce5
lea edi, [esp + 0x6cc]
mov byte [esp + eax + 0x6cc], 0
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x405d04
mov dx, word [0x4478d8]
push 0x208
mov byte [esp + 0xcf0], al
lea eax, [esp + 0xcf1]
push 0
push eax
mov word [edi], dx
call fcn.00424c40
add esp, 0xc
xor eax, eax
jmp 0x405d40
mov cl, byte [esp + eax + 0x6cc]
mov byte [esp + eax + 0xcec], cl
inc eax
test cl, cl
jne 0x405d40
lea eax, [esp + 0xcec]
dec eax
jmp 0x405d60
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x405d60
mov ecx, dword [str.ldcab.ldx.tmp]
mov edx, dword [0x447ba8]
mov dword [eax], ecx
mov ecx, dword [0x447bac]
mov dword [eax + 4], edx
mov dx, word [0x447bb0]
mov dword [eax + 8], ecx
mov word [eax + 0xc], dx
lea eax, [esp + 0xcec]
push eax
call fcn.00409e30
add esp, 4
test eax, eax
je 0x405e08
push 0x208
lea ecx, [esp + 0xf01]
push 0
push ecx
mov byte [esp + 0xf08], 0
call fcn.00424c40
add esp, 0xc
xor eax, eax
jmp 0x405dd0
mov cl, byte [esp + eax + 0x6cc]
mov byte [esp + eax + 0xefc], cl
inc eax
test cl, cl
jne 0x405dd0
lea eax, [esp + 0xefc]
dec eax
jmp 0x405df0
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x405df0
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0x6cc]
call fcn.00407e30
push 0x208
lea eax, [esp + 0x2c0]
push 0
push eax
call fcn.00424c40
add esp, 0xc
push 0x208
lea ecx, [esp + 0x2c0]
push ecx
push 0
call ebx
lea eax, [esp + 0x2bc]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x405e40
sub eax, edx
add eax, 0xffffffff
js 0x405e5f
mov edi, edi
cmp byte [esp + eax + 0x2bc], 0x5c
je 0x405e5f
sub eax, 1
jns 0x405e50
mov byte [esp + eax + 0x2bc], 0
lea eax, [esp + 0x2bc]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x405e70
mov edx, dword [0x447bc0]
mov ecx, dword [0x447bc4]
mov dword [eax], edx
mov edx, dword [0x447bc8]
mov dword [eax + 4], ecx
mov cl, byte [0x447bcc]
mov dword [eax + 8], edx
lea edx, [esp + 0x2bc]
push edx
mov byte [eax + 0xc], cl
call fcn.00409e30
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
add esp, 4
test eax, eax
je 0x405ebf
lea eax, [esp + 0x2bc]
push eax
call esi
lea ecx, [esp + 0x4c4]
push ecx
call fcn.00409e30
add esp, 4
test eax, eax
je 0x405edd
lea edx, [esp + 0x4c4]
push edx
call esi
push 0x208
lea eax, [esp + 0xae8]
push 0
push eax
call fcn.00424c40
add esp, 0xc
push 0x208
lea ecx, [esp + 0xae8]
push ecx
push 0
call ebx
lea eax, [esp + 0xae4]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x405f10
sub eax, edx
add eax, 0xffffffff
js 0x405f2f
mov edi, edi
cmp byte [esp + eax + 0xae4], 0x5c
je 0x405f2f
sub eax, 1
jns 0x405f20
push 0x208
lea edx, [esp + 0x8e0]
push 0
push edx
mov byte [esp + eax + 0xaf0], 0
call fcn.00424c40
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x8e8]
add esp, 0xc
sub edx, eax
jmp 0x405f60
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x405f60
lea ecx, [esp + 0xa0]
mov eax, 0x448368
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x405f96
test dl, dl
je 0x405f92
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x405f96
add eax, 2
add ecx, 2
test dl, dl
jne 0x405f76
xor eax, eax
jmp 0x405f9b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x405fea
lea edi, [esp + 0x8dc]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x405fa7
mov ax, word [0x4478d8]
mov word [edi], ax
lea eax, [esp + 0xa0]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x405fc1
lea edi, [esp + 0x8dc]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x405fd2
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.004133f1
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x406004
push 0x80004005
call fcn.00409d60
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x8dc]
push ecx
lea edx, [esp + 0x18]
push str.GetFilesInTree:_s
mov bl, 6
push edx
mov byte [esp + 0x112c], bl
call fcn.00409670
mov esi, dword [esp + 0x20]
add esp, 0xc
push 0
push esi
push 0x453d09
call fcn.0040d390
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x8e0]
call fcn.0040a1f0
add esp, 4
lea ecx, [esp + 0x8dc]
push ecx
lea edx, [esp + 0x48]
push edx
lea ecx, [esp + 0xa8]
lea edx, [esp + 0xaec]
call fcn.00406fc0
movzx eax, al
add esp, 8
test eax, eax
je 0x406124
lea eax, [esp + 0x4c4]
push eax
lea ecx, [esp + 0x1c]
call fcn.004098c0
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1124], 7
call fcn.0040a710
add esp, 4
mov byte [esp + 0x1120], 9
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4060dc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x30]
push ecx
lea edx, [esp + 0x8e0]
push edx
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x4c]
call fcn.004069d0
mov dword [esp + 0x2c], eax
mov byte [esp + 0x1128], bl
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
add esp, 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406124
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x24], 0
je 0x4062cc
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLCID]
cmp eax, 0x404
je 0x40621e
cmp eax, 0xc04
je 0x40621e
mov eax, dword [esp + 0x24]
sub eax, 1
je 0x4061e2
sub eax, 1
je 0x4061a3
sub eax, 1
jne 0x40625b
lea ecx, [esp + 0x2c]
push ecx
lea edi, [eax + 0xb]
call fcn.0040ec10
add esp, 4
mov byte [esp + 0x1120], 0xc
mov eax, dword [eax]
push eax
lea edx, [esp + 0x24]
push edx
call fcn.00409670
add esp, 8
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1120], bl
call fcn.00409da0
jmp 0x40625b
lea eax, [esp + 0x30]
push eax
mov edi, 0xa
call fcn.0040ec10
add esp, 4
mov byte [esp + 0x1120], 0xb
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x24]
push ecx
call fcn.00409670
add esp, 8
lea ecx, [esp + 0x30]
mov byte [esp + 0x1120], bl
call fcn.00409da0
jmp 0x40625b
lea edx, [esp + 0x18]
push edx
mov edi, 9
call fcn.0040ec10
add esp, 4
mov byte [esp + 0x1120], 0xa
mov eax, dword [eax]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.00409670
add esp, 8
lea ecx, [esp + 0x18]
mov byte [esp + 0x1120], bl
call fcn.00409da0
jmp 0x40625b
mov eax, dword [esp + 0x24]
sub eax, 1
je 0x406249
sub eax, 1
je 0x40623d
sub eax, 1
jne 0x40625b
push 0x447cb0
lea ecx, [esp + 0x24]
push ecx
jmp 0x406253
push 0x447bf4
lea edx, [esp + 0x24]
push edx
jmp 0x406253
push 0x447be4
lea eax, [esp + 0x24]
push eax
call fcn.00409670
add esp, 8
mov ecx, dword [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push str.UpdateLdxFile_in_WriteFileSummaryToLdf_function__failed_with_result_code:__d
push edx
call fcn.00409670
mov esi, dword [esp + 0x20]
add esp, 0xc
push 0
push esi
push 0x453d09
call fcn.0040d390
lea eax, [esp + 0x2c]
push eax
mov edi, 7
call fcn.0040ec10
mov eax, dword [eax]
mov ecx, dword [esp + 0x24]
add esp, 4
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4062cc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esi - 0x10]
mov byte [esp + 0x1120], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4062f0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x1120], 2
call fcn.00413caa
mov byte [esp + 0x1120], 1
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406329
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1120], 0
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406351
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x44]
mov dword [esp + 0x1120], 0xffffffff
call fcn.00413caa
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x1118]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1100]
xor ecx, esp
call fcn.0042179d
mov esp, ebp
pop ebp
ret