Function at 0x4577f4
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffea8
xor edx, edx
mov dword [ebp - 0x158], edx
mov dword [ebp - 0x154], edx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x2c]
mov edx, dword [0x4135a4]
call fcn.00403694
xor eax, eax
push ebp
push 0x458470
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [0x413598]
lea eax, [ebp - 0x2c]
call fcn.00414f04
cmp dword [0x489630], 1
jne 0x457a8f
mov eax, dword [ebp - 0x30]
call fcn.0048270c
mov edx, eax
shl eax, 5
add eax, edx
cmp dword [eax + 0x60850f], 0
jbe 0x457898
mov eax, dword [ebp - 0x30]
call fcn.0048270c
mov edx, eax
shl eax, 5
add eax, edx
mov ecx, dword [eax + 0x60850f]
lea eax, [ebp - 0x40]
mov edx, 0x458484
call fcn.00403270
mov eax, dword [ebp - 0x40]
call fcn.0040341c
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x45790d
inc dword [0x489624]
inc dword [0x48962c]
mov eax, dword [ebp - 0x30]
cmp eax, dword [0x48962c]
je 0x45790d
mov eax, dword [0x48962c]
call fcn.0048270c
mov edx, eax
shl eax, 5
add eax, edx
add eax, 0x60850f
push eax
mov eax, dword [ebp - 0x30]
call fcn.0048270c
mov edx, eax
shl eax, 5
add eax, edx
lea edx, [eax + 0x60850f]
pop eax
mov ecx, dword [0x42de18]
call fcn.00403968
mov eax, dword [ebp - 0x30]
call fcn.0048270c
mov edx, eax
shl eax, 5
add eax, edx
add eax, 0x60850f
mov edx, 0x21
call fcn.00404364
mov eax, dword [0x48962c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
call fcn.0048270c
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [eax + 0x608513]
lea eax, [ebp - 0x40]
call fcn.00403144
mov eax, dword [ebp - 0x40]
call fcn.00403224
test eax, eax
jle 0x457a10
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], 1
mov byte [ebp - 0x39], 0
cmp byte [ebp - 0x39], 0
jne 0x45796c
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x34]
cmp byte [eax + edx - 1], 0x30
jb 0x457968
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x34]
cmp byte [eax + edx - 1], 0x39
jbe 0x45796c
xor eax, eax
jmp 0x45796e
mov al, 1
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
jne 0x457995
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x34]
cmp byte [eax + edx - 1], 0x41
jb 0x457991
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x34]
cmp byte [eax + edx - 1], 0x5a
jbe 0x457995
xor eax, eax
jmp 0x457997
mov al, 1
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
jne 0x4579be
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x34]
cmp byte [eax + edx - 1], 0x61
jb 0x4579ba
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x34]
cmp byte [eax + edx - 1], 0x7a
jbe 0x4579be
xor eax, eax
jmp 0x4579c0
mov al, 1
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
jne 0x4579e9
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x34]
mov al, byte [eax + edx - 1]
add al, 0xe0
cmp al, 0x5f
ja 0x4579e3
and eax, 0x7f
bt dword [0x45848c], eax
jb 0x4579e9
xor eax, eax
jmp 0x4579eb
mov al, 1
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
jne 0x457a04
lea eax, [ebp - 0x40]
call fcn.00403474
mov edx, dword [ebp - 0x34]
mov byte [eax + edx - 1], 0x5f
inc dword [ebp - 0x34]
dec dword [ebp - 0x48]
jne 0x457944
lea eax, [ebp - 0x44]
mov ecx, 0x4584a0
mov edx, dword [ebp - 0x40]
call fcn.00403270
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x457a68
inc dword [ebp - 0x34]
push dword [ebp - 0x40]
push 0x4584b0
lea edx, [ebp - 0x150]
mov eax, dword [ebp - 0x34]
call fcn.00413b28
lea edx, [ebp - 0x150]
lea eax, [ebp - 0x50]
call fcn.004031dc
push dword [ebp - 0x50]
push 0x4584bc
push 0x4584a0
lea eax, [ebp - 0x44]
mov edx, 5
call fcn.004032e4
lea eax, [ebp - 0x154]
mov edx, 0x458484
mov ecx, dword [ebp - 0x44]
call fcn.00403270
mov eax, dword [ebp - 0x154]
call fcn.00414b04
test al, al
jne 0x457a27
jmp 0x457b3a
mov eax, dword [ebp - 0x30]
call fcn.0048270c
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov edx, eax
shl eax, 5
add eax, edx
cmp dword [eax + 0x60850f], 0
jbe 0x457af2
mov eax, dword [ebp - 0x34]
mov edx, eax
shl eax, 5
add eax, edx
mov ecx, dword [eax + 0x60850f]
lea eax, [ebp - 0x40]
mov edx, 0x458484
call fcn.00403270
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x34]
mov ecx, edx
shl edx, 5
add edx, ecx
mov edx, dword [edx + 0x60850f]
call fcn.00403144
mov eax, dword [ebp - 0x40]
call fcn.0040341c
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x457b3a
inc dword [0x489624]
inc dword [0x489628]
push 0x4584c8
lea edx, [ebp - 0x150]
mov eax, dword [ebp - 0x30]
call fcn.00413b28
lea edx, [ebp - 0x150]
lea eax, [ebp - 0x158]
call fcn.004031dc
push dword [ebp - 0x158]
push 0x4584a0
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.004032e4
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00403144
mov eax, dword [ebp - 0x30]
call fcn.0048270c
mov edx, eax
shl eax, 5
add eax, edx
add eax, 0x60850f
mov edx, dword [ebp - 0x40]
call fcn.00403100
lea eax, [ebp - 0x40]
mov edx, 0x458484
mov ecx, dword [ebp - 0x40]
call fcn.00403270
mov eax, dword [ebp - 0x30]
call fcn.0048270c
mov edx, eax
shl eax, 5
add eax, edx
add eax, 0x608527
push eax
call fcn.0043dd04
pop edx
mov dword [edx], eax
mov eax, dword [0xa86d10]
sub eax, 0x32
je 0x457ba4
sub eax, 0x32
je 0x457bad
sub eax, 0x64
je 0x457bb6
jmp 0x457bbd
mov dword [ebp - 0x38], 0x100000
jmp 0x457bbd
mov dword [ebp - 0x38], 0x200000
jmp 0x457bbd
mov dword [ebp - 0x38], 0x400000
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
lea eax, [ebp - 0x2c]
call fcn.0041501c
mov eax, dword [ebp - 0x30]
call fcn.0048270c
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [eax + 0x608513]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov eax, dword [ebp - 0x34]
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [eax + 0x608517]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov eax, dword [ebp - 0x34]
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [eax + 0x60851b]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov al, byte [0x489630]
mov byte [0xa86e32], al
mov edx, 0xa86d04
mov ecx, 0x12f
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x6353d4
mov ecx, 1
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x6353d4
mov ecx, 1
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x6353d4
mov ecx, 1
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x6353dc
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x6353e0
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x6353e4
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635434
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x63543c
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635440
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
neg dword [0x635420]
neg dword [0x635428]
neg dword [0x63542c]
neg dword [0x635430]
mov edx, 0x635420
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635428
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x63542c
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635430
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
neg dword [0x635420]
neg dword [0x635428]
neg dword [0x63542c]
neg dword [0x635430]
mov edx, 0x635448
mov ecx, 0x400
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635848
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x63584c
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635850
mov ecx, 0x400
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635c50
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635c54
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x703084
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635c5c
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635c60
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635c64
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635eec
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x635ef0
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
push ebp
mov eax, dword [0x635ef4]
call fcn.0045779c
pop ecx
push ebp
mov eax, dword [0x635ef8]
call fcn.0045779c
pop ecx
push ebp
mov eax, dword [0x635efc]
call fcn.0045779c
pop ecx
push ebp
mov eax, dword [0x489680]
call fcn.0045779c
pop ecx
push ebp
mov eax, dword [0x635f00]
call fcn.0045779c
pop ecx
push ebp
mov eax, dword [0x61d880]
call fcn.0045779c
pop ecx
mov edx, 0x63641c
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x636420
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov ecx, dword [0x63641c]
imul ecx, dword [0x636420]
mov edx, dword [0x636410]
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x636424
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x636428
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov eax, dword [0x636424]
imul dword [0x636428]
mov ecx, eax
add ecx, ecx
lea ecx, [ecx + ecx*8]
mov edx, dword [0x636414]
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x63642c
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x636430
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x636434
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x636438
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x63643c
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x636440
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov eax, dword [0x636434]
test eax, eax
jle 0x457fd1
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], 1
imul eax, dword [ebp - 0x34], 0xb3
mov edx, dword [0x636444]
lea edx, [edx + eax*2 - 0x166]
mov ecx, 0x166
lea eax, [ebp - 0x2c]
call fcn.00415a5c
imul eax, dword [ebp - 0x34], 0xb3
mov edx, dword [0x636444]
cmp dword [edx + eax*2 - 0x10], 0
je 0x457fc9
imul eax, dword [ebp - 0x34], 0xb3
mov edx, dword [0x636444]
mov edx, dword [edx + eax*2 - 0x10]
mov ecx, 0x380f
lea eax, [ebp - 0x2c]
call fcn.00415a5c
inc dword [ebp - 0x34]
dec dword [ebp - 0x48]
jne 0x457f76
imul ecx, dword [0x63643c], 0x63
mov edx, dword [0x63644c]
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov eax, dword [0x636440]
dec eax
test eax, eax
jl 0x458066
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], 0
imul eax, dword [ebp - 0x34], 0xab
mov edx, dword [0x636450]
add edx, eax
mov ecx, 0xab
lea eax, [ebp - 0x2c]
call fcn.00415a5c
imul eax, dword [ebp - 0x34], 0xab
mov edx, dword [0x636450]
cmp dword [edx + eax + 0xa3], 0
jle 0x45805e
imul eax, dword [ebp - 0x34], 0xab
mov edx, dword [0x636450]
mov ecx, dword [edx + eax + 0xa3]
imul eax, dword [ebp - 0x34], 0xab
mov edx, dword [0x636450]
mov edx, dword [edx + eax + 0xa7]
lea eax, [ebp - 0x2c]
call fcn.00415a5c
inc dword [ebp - 0x34]
dec dword [ebp - 0x48]
jne 0x457ffb
mov edx, 0x635ee8
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov eax, dword [0x635ee8]
dec eax
test eax, eax
jl 0x4580ae
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x34]
lea eax, [eax + eax*4]
lea edx, [eax + 0x635c68]
mov ecx, 5
lea eax, [ebp - 0x2c]
call fcn.00415a5c
inc dword [ebp - 0x34]
dec dword [ebp - 0x48]
jne 0x45808d
mov edx, dword [0x636454]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov edx, dword [0x636458]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov eax, dword [0x636434]
dec eax
test eax, eax
jl 0x45812e
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x34]
lea eax, [eax + eax*2]
mov edx, dword [0x63646c]
mov edx, dword [edx + eax*4]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov eax, dword [ebp - 0x34]
lea eax, [eax + eax*2]
mov edx, dword [0x63646c]
mov edx, dword [edx + eax*4 + 4]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov eax, dword [ebp - 0x34]
lea eax, [eax + eax*2]
mov edx, dword [0x63646c]
mov edx, dword [edx + eax*4 + 8]
lea eax, [ebp - 0x2c]
call fcn.00415bac
inc dword [ebp - 0x34]
dec dword [ebp - 0x48]
jne 0x4580df
mov eax, dword [0x636438]
dec eax
test eax, eax
jl 0x458192
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x34]
lea eax, [eax + eax*2]
mov edx, dword [0x636468]
mov edx, dword [edx + eax*4]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov eax, dword [ebp - 0x34]
lea eax, [eax + eax*2]
mov edx, dword [0x636468]
mov edx, dword [edx + eax*4 + 4]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov eax, dword [ebp - 0x34]
lea eax, [eax + eax*2]
mov edx, dword [0x636468]
mov edx, dword [edx + eax*4 + 8]
lea eax, [ebp - 0x2c]
call fcn.00415bac
inc dword [ebp - 0x34]
dec dword [ebp - 0x48]
jne 0x458143
mov eax, dword [0x636440]
dec eax
test eax, eax
jl 0x4581f6
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x34]
lea eax, [eax + eax*2]
mov edx, dword [0x636470]
mov edx, dword [edx + eax*4]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov eax, dword [ebp - 0x34]
lea eax, [eax + eax*2]
mov edx, dword [0x636470]
mov edx, dword [edx + eax*4 + 4]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov eax, dword [ebp - 0x34]
lea eax, [eax + eax*2]
mov edx, dword [0x636470]
mov edx, dword [edx + eax*4 + 8]
lea eax, [ebp - 0x2c]
call fcn.00415bac
inc dword [ebp - 0x34]
dec dword [ebp - 0x48]
jne 0x4581a7
xor eax, eax
mov al, byte [0xa86df2]
test eax, eax
jle 0x458225
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], 1
mov eax, dword [ebp - 0x34]
mov edx, dword [eax*4 + 0xa873c8]
lea eax, [ebp - 0x2c]
call fcn.00415bac
inc dword [ebp - 0x34]
dec dword [ebp - 0x48]
jne 0x45820b
mov edx, 0x7011c4
mov ecx, 0x400
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0x7015c4
mov ecx, 0x400
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov eax, dword [0x636438]
inc eax
imul ecx, eax, 0x380f
mov edx, 0x7019c4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, dword [0x635438]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov edx, dword [0x63645c]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov edx, dword [0x636460]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov edx, dword [0x636464]
lea eax, [ebp - 0x2c]
call fcn.00415bac
imul eax, dword [0x636438], 0x380f
lea edx, [eax + 0x7051d3]
mov ecx, 0x380f
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, dword [0xa82a64]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov edx, 0xa82a6c
mov ecx, 0x380f
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0xa82a68
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0xa8627c
mov ecx, 0x400
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0xa8667c
mov ecx, 0x400
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0xa86a7c
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0xa86a80
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0xa86a84
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, 0xa86a88
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
mov edx, dword [0xa86a8c]
lea eax, [ebp - 0x2c]
call fcn.00415bac
mov edx, 0x6196e8
mov ecx, 4
lea eax, [ebp - 0x2c]
call fcn.00415a5c
call fcn.004236e0
cmp dword [0x489630], 1
jne 0x4583d6
xor eax, eax
mov dword [0x4898b0], eax
mov eax, dword [ebp - 5]
test eax, eax
jns 0x458396
add eax, 0xffff
sar eax, 0x10
mov dword [0x4898b4], eax
call dword [0x499414]
mov dword [0x4898bc], eax
mov ecx, 0x457764
mov edx, 0x40
lea eax, [ebp - 0x2c]
call fcn.0041585c
xor ecx, ecx
mov edx, 0x51
lea eax, [ebp - 0x2c]
call fcn.00415544
mov eax, dword [0x4898b4]
call fcn.004575a8
jmp 0x4583f7
mov ecx, 0x45778c
mov edx, 0x40
lea eax, [ebp - 0x2c]
call fcn.0041585c
xor ecx, ecx
mov edx, 0x51
lea eax, [ebp - 0x2c]
call fcn.00415544
lea eax, [ebp - 0x2c]
call fcn.00414f74
mov eax, dword [ebp - 0x30]
call fcn.0048270c
mov edx, eax
shl eax, 5
add eax, edx
add eax, 0x60850f
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
lea ecx, [eax + 0x14]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x10]
mov eax, dword [ebp - 0x40]
call fcn.00414b40
call fcn.004598e8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x458477
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.004030d0
lea eax, [ebp - 0x50]
call fcn.004030ac
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.004030d0
lea eax, [ebp - 0x2c]
mov edx, dword [0x4135a4]
call fcn.00403758
ret