Function at 0x401140
Capabilities:
Copy file
Delete file
Get common file path
Move file
Read .ini file
Resolve function by parsing pe exports
Set current directory

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x40fb7f
push eax
mov eax, 0x3ad8
mov dword fs:[0], esp
call fcn.0040f4f0
mov eax, dword [esp + 0x3ae8]
push ebx
push ebp
push esi
push edi
push eax
lea ecx, [esp + 0x2c]
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x24]
mov dword [esp + 0x3af0], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x20]
mov byte [esp + 0x3af0], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x30]
mov byte [esp + 0x3af0], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x44]
mov byte [esp + 0x3af0], 3
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0x28]
or ebx, 0xffffffff
mov byte [esp + 0x3af0], 4
mov eax, dword [ecx - 8]
test eax, eax
jle 0x40160b
push 0
push 0x41441c
lea ecx, [esp + 0x30]
call sub.MFC42.DLL_CString::Find
push 0
push 0x414418
lea ecx, [esp + 0x30]
mov esi, eax
call sub.MFC42.DLL_CString::Find
sub eax, esi
add esi, 3
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
lea edi, [eax - 3]
push edi
push esi
push edx
call sub.MFC42.DLL_CString::Mid
lea ecx, [esp + 0x14]
mov byte [esp + 0x3af0], 5
call sub.MFC42.DLL_CString::TrimLeft
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::TrimRight
push 0
push 0x414414
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Find
cmp eax, ebx
je 0x4012e0
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x1c]
mov ecx, dword [ecx - 8]
sub ecx, eax
push ecx
push edx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Right
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x3af4], 6
call fcn.0040f28e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3af0], 5
call fcn.0040f288
push 0x414414
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::TrimLeft_1
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::TrimLeft
push 0
push 0x20
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Find_1
push eax
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Left
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x3af4], 7
call fcn.0040f28e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3af0], 5
call fcn.0040f288
mov ecx, dword [esp + 0x24]
push ecx
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::TrimLeft_1
push edi
lea edx, [esp + 0x20]
push esi
push edx
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CString::Mid
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x3af4], 8
call fcn.0040f28e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3af0], 5
call fcn.0040f288
push 0
push 0x414410
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Find
cmp eax, ebx
je 0x4013d3
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x1c]
mov ecx, dword [ecx - 8]
sub ecx, eax
push ecx
push edx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Right
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x3af4], 9
call fcn.0040f28e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3af0], 5
call fcn.0040f288
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::TrimLeft
push 0x414410
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::TrimLeft_1
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::TrimLeft
push 0
push 0x20
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Find_1
push eax
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Left
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x3af4], 0xa
call fcn.0040f28e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3af0], 5
call fcn.0040f288
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::TrimLeft_1
push edi
lea edx, [esp + 0x20]
push esi
push edx
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CString::Mid
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x3af4], 0xb
call fcn.0040f28e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3af0], 5
call fcn.0040f288
push 0
push 0x41440c
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Find
cmp eax, ebx
je 0x4014c6
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x1c]
mov ecx, dword [ecx - 8]
sub ecx, eax
push ecx
push edx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Right
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x3af4], 0xc
call fcn.0040f28e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3af0], 5
call fcn.0040f288
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::TrimLeft
push 0x41440c
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::TrimLeft_1
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::TrimLeft
push 0
push 0x20
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Find_1
push eax
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Left
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x3af4], 0xd
call fcn.0040f28e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3af0], 5
call fcn.0040f288
mov ecx, dword [esp + 0x20]
push ecx
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::TrimLeft_1
push edi
lea edx, [esp + 0x20]
push esi
push edx
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CString::Mid
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x3af4], 0xe
call fcn.0040f28e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3af0], 5
call fcn.0040f288
push 0
push 0x414408
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Find
cmp eax, ebx
je 0x401576
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x1c]
mov ecx, dword [ecx - 8]
sub ecx, eax
push ecx
push edx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Right
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x3af4], 0xf
call fcn.0040f28e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3af0], 5
call fcn.0040f288
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::TrimLeft
push 0x414408
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::TrimLeft_1
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::TrimLeft
lea eax, [esp + 0x14]
lea ecx, [esp + 0x44]
push eax
call fcn.0040f28e
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::TrimLeft
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::TrimRight
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::TrimLeft
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::TrimRight
lea ecx, [esp + 0x30]
call sub.MFC42.DLL_CString::TrimLeft
lea ecx, [esp + 0x30]
call sub.MFC42.DLL_CString::TrimRight
mov ecx, dword [esp + 0x24]
mov esi, dword [sym.imp.WS2_32.dll_inet_addr]
push ecx
call esi
cmp eax, ebx
je 0x4015c8
mov edx, dword [esp + 0x24]
mov eax, dword [edx - 8]
test eax, eax
jg 0x4015d5
lea eax, [esp + 0x24]
push eax
call fcn.00403a50
add esp, 4
mov ecx, dword [esp + 0x20]
push ecx
call esi
cmp eax, ebx
je 0x4015eb
mov edx, dword [esp + 0x20]
mov eax, dword [edx - 8]
test eax, eax
jg 0x4015f8
lea eax, [esp + 0x20]
push eax
call fcn.00403a50
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x3af0], 4
call fcn.0040f288
jmp 0x401635
push 0x416340
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CString::operator_1
push 0x416340
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::operator_1
push 0x416340
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CString::operator_1
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x281c]
mov byte [esp + 0x3af0], 0x10
call fcn.0040b3b0
lea ecx, [esp + 0x10]
mov byte [esp + 0x3af0], 0x11
call fcn.0040bdf0
lea ecx, [esp + 0x10]
mov byte [esp + 0x3af0], 0x12
call fcn.0040bef0
push 0x4143ec
lea ecx, [esp + 0x14]
push 1
push ecx
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x40]
call fcn.00403b00
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0xcd1]
mov byte [esp + 0xcd0], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea edx, [esp + 0xcd0]
mov byte [esp + 0x3af0], 0x13
push edx
push 0x104
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0xac9]
mov byte [esp + 0xac8], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0xac8]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
jne 0x401724
lea ecx, [esp + 0x18]
push 0x4143d0
push ecx
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x20]
add esp, 8
lea eax, [esp + 0x10]
push edx
push 0
push eax
call fcn.0040be50
add esp, 0xc
jmp 0x4022ec
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0xfdd]
mov byte [esp + 0xfdc], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0xfdc]
push 0x104
push ecx
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
jne 0x401781
lea edx, [esp + 0x18]
push 0x4143b8
push edx
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x20]
add esp, 8
lea ecx, [esp + 0x10]
push eax
push 0
push ecx
call fcn.0040be50
add esp, 0xc
jmp 0x4022ec
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x95]
mov byte [esp + 0x94], 0
rep stosd dword es:[edi], eax
mov ebx, dword [sym.imp.MSVCRT.dll_strncpy]
lea edx, [esp + 0xac8]
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x104
lea eax, [esp + 0x98]
push edx
push eax
call ebx
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x9d1]
mov byte [esp + 0x9d0], 0
rep stosd dword es:[edi], eax
add esp, 0xc
lea ecx, [esp + 0x1c]
stosw word es:[edi], ax
push ecx
lea ecx, [esp + 0x14]
stosb byte es:[edi], al
call fcn.0040c110
mov eax, dword [eax]
push 0x104
lea edx, [esp + 0x9c8]
push eax
push edx
call ebx
add esp, 0xc
lea ecx, [esp + 0x1c]
call fcn.0040f288
lea eax, [esp + 0x9c4]
push 0x5c
push eax
call dword [sym.imp.MSVCRT.dll_strrchr]
mov ebp, eax
add esp, 8
test ebp, ebp
mov dword [esp + 0x88], ebp
jne 0x401836
lea ecx, [esp + 0x9c4]
push 0x104
push ecx
push eax
call ebx
add esp, 0xc
mov edi, 0x4143b4
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x94]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push str.winsxsx86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x_ww_6b128700msvcp80.dll
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [esp + 0x98]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, ebp
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebp
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x40
lea edi, [esp + 0xedd]
mov byte [esp + 0xedc], al
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0xacc]
lea ecx, [esp + 0xedc]
push eax
push 0x414354
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
mov ebp, dword [sym.imp.MSVCRT.dll__access]
lea edx, [esp + 0xee8]
push 0
push edx
call ebp
add esp, 0x18
cmp eax, 0xffffffff
jne 0x401abd
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0xdd5]
mov byte [esp + 0xdd4], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0xfdc]
push 0x104
lea ecx, [esp + 0xdd8]
push eax
push ecx
call ebx
mov edi, str.msiexec.exe
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0xde0]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov byte [esp + 0x5b4], al
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [esp + 0x5b4]
and ecx, 3
mov byte [esp + 0x4b0], 0
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x40
lea edi, [esp + 0x5b5]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, str.__i
or ecx, 0xffffffff
xor eax, eax
push 0x104
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x4b4]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x40
lea edi, [esp + 0x4b5]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0xce0]
push ecx
push edx
stosb byte es:[edi], al
call ebx
mov edi, str._vcredist.msi
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x4bc]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push eax
and ecx, 3
lea eax, [esp + 0x4c0]
rep movsb byte es:[edi], byte [esi]
push eax
call ebp
add esp, 0x20
cmp eax, 0xffffffff
je 0x401abd
lea edi, [esp + 0x4a4]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x5a8]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebp
lea edx, [esp + 0x5a8]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.__quiet__norestart
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebp
lea eax, [esp + 0x5a8]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
push 0xffffffffffffffff
lea ecx, [esp + 0xddc]
push 1
push ecx
lea ecx, [esp + 0x50]
call fcn.00403bd0
test eax, eax
jne 0x401abd
lea edx, [esp + 0x4a4]
lea eax, [esp + 0x18]
push edx
push 0x4142fc
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x24]
add esp, 0xc
lea edx, [esp + 0x10]
push ecx
push 0
push edx
call fcn.0040be50
add esp, 0xc
jmp 0x4035c7
push 0x4142e8
lea eax, [esp + 0x14]
push 1
push eax
call fcn.0040be50
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x8cd]
mov byte [esp + 0x8cc], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0xcdc]
push 0x104
lea edx, [esp + 0x8d0]
push ecx
push edx
stosb byte es:[edi], al
call ebx
mov edi, str.hostaudit.xml
or ecx, 0xffffffff
xor eax, eax
add esp, 0x18
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x8c0]
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x38]
call fcn.0040c1f0
lea eax, [esp + 0x8c0]
push 0
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x3af8], 0x14
call fcn.0040c280
test eax, eax
jne 0x401bb6
push 0x4142c8
lea ecx, [esp + 0x1c]
push 0x4142ac
push ecx
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x24]
add esp, 0xc
lea eax, [esp + 0x10]
push edx
push 0
push eax
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x14]
call fcn.0040c110
mov eax, dword [eax]
lea edx, [esp + 0x94]
push 0
push edx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x1c]
call fcn.0040f288
jmp 0x4035b6
push 0x41429c
lea eax, [esp + 0x14]
push 1
push eax
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x38]
push 0xa
call fcn.0040dc10
mov ebx, eax
mov dword [esp + 0x64], ebx
lea edi, [ebx*4 + 4]
push edi
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [esp + 0x34], eax
test eax, eax
mov byte [esp + 0x3af0], 0x15
je 0x401c15
push fcn.0040f288
push sub.MFC42.DLL_CString::CString
lea esi, [eax + 4]
push ebx
push 4
push esi
mov dword [eax], ebx
call fcn.0040f460
jmp 0x401c17
xor esi, esi
test esi, esi
mov dword [esp + 0x14], esi
mov byte [esp + 0x3af0], 0x14
jne 0x401c88
push 0x4142c8
lea ecx, [esp + 0x1c]
push 0x414280
push ecx
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x24]
add esp, 0xc
lea eax, [esp + 0x10]
push edx
push esi
push eax
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x38]
call fcn.0040dbf0
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x14]
call fcn.0040c110
mov eax, dword [eax]
lea edx, [esp + 0x94]
push esi
push edx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x1c]
call fcn.0040f288
jmp 0x4035b6
push edi
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [esp + 0x34], eax
test eax, eax
mov byte [esp + 0x3af0], 0x16
je 0x401cbb
push fcn.0040f288
push sub.MFC42.DLL_CString::CString
lea esi, [eax + 4]
push ebx
push 4
push esi
mov dword [eax], ebx
call fcn.0040f460
jmp 0x401cbd
xor esi, esi
test esi, esi
mov dword [esp + 0x4c], esi
mov byte [esp + 0x3af0], 0x14
jne 0x401d2e
push 0x4142c8
lea eax, [esp + 0x1c]
push 0x414280
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x24]
add esp, 0xc
lea edx, [esp + 0x10]
push ecx
push esi
push edx
call fcn.0040be50
add esp, 0xc
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
call fcn.0040c110
mov eax, dword [eax]
lea ecx, [esp + 0x94]
push esi
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x1c]
call fcn.0040f288
lea ecx, [esp + 0x38]
call fcn.0040dbf0
jmp 0x4035b6
xor ebp, ebp
test ebx, ebx
jbe 0x401da6
mov esi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x14]
sub ebx, esi
mov ecx, 0x59
xor eax, eax
lea edi, [esp + 0x17f4]
lea edx, [esp + 0x17f4]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push edx
push 0xa
push ebp
lea ecx, [esp + 0x44]
stosb byte es:[edi], al
call fcn.0040e0b0
test eax, eax
je 0x401d9a
lea eax, [esp + 0x1827]
lea ecx, [ebx + esi]
push eax
call sub.MFC42.DLL_CString::operator_1
lea ecx, [esp + 0x185b]
push ecx
mov ecx, esi
call sub.MFC42.DLL_CString::operator_1
push 0x5c
mov ecx, esi
call sub.MFC42.DLL_CString::TrimRight_1
push 0x2f
mov ecx, esi
call sub.MFC42.DLL_CString::TrimRight_1
mov eax, dword [esp + 0x64]
inc ebp
add esi, 4
cmp ebp, eax
jb 0x401d3e
push 0x414274
lea edx, [esp + 0x14]
push 1
push edx
or ebx, 0xffffffff
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x54]
call fcn.00408850
push 3
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3af4], 0x17
xor ebp, ebp
call fcn.0040dc10
test eax, eax
jbe 0x401ef6
mov ecx, 0x85
xor eax, eax
lea edi, [esp + 0x6ac]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x6ac]
lea ecx, [esp + 0x38]
push eax
push 3
push ebp
call fcn.0040e0b0
test eax, eax
je 0x401ee2
mov edi, 1
mov esi, str.PROCESS
lea eax, [esp + 0x8b6]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x401e44
test cl, cl
je 0x401e40
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x401e44
add eax, 2
add esi, 2
test cl, cl
jne 0x401e20
xor eax, eax
jmp 0x401e48
sbb eax, eax
sbb eax, ebx
test eax, eax
jne 0x401e62
lea eax, [esp + 0x851]
push eax
call fcn.00408890
add esp, 4
test eax, eax
jne 0x401ed9
jmp 0x401ebb
mov esi, str.SERVER
lea eax, [esp + 0x8b6]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x401e92
test cl, cl
je 0x401e8e
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x401e92
add eax, 2
add esi, 2
test cl, cl
jne 0x401e6e
xor eax, eax
jmp 0x401e96
sbb eax, eax
sbb eax, ebx
test eax, eax
jne 0x401ebb
push ecx
lea eax, [esp + 0x855]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x44]
call fcn.00404070
test eax, eax
jne 0x401ec9
mov ecx, edi
inc edi
cmp ecx, 3
jl 0x401e14
jmp 0x401ed9
lea edx, [esp + 0x851]
push edx
call fcn.00403930
add esp, 4
cmp edi, 4
je 0x402002
push 3
lea ecx, [esp + 0x3c]
inc ebp
call fcn.0040dc10
cmp ebp, eax
jb 0x401de3
push 0x414250
lea eax, [esp + 0x14]
push 1
push eax
call fcn.0040be50
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0xbd9]
mov byte [esp + 0xbd8], 0
rep stosd dword es:[edi], eax
add esp, 0xc
lea ecx, [esp + 0xbcc]
stosw word es:[edi], ax
push 0x104
push ecx
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov edi, str.config_environment.21EC2020_3AEA_1069_A2DD_08002B30309D
mov ecx, ebx
xor eax, eax
lea edx, [esp + 0xbcc]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, edx
mov ecx, ebx
repne scasb al, byte es:[edi]
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebp
lea eax, [esp + 0xbcc]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call sub.MFC42.DLL_CString::CString_1
call fcn.004037c0
mov ecx, esp
mov dword [esp + 0x38], esp
push str.C:Program_Files_rzxhostprober
call sub.MFC42.DLL_CString::CString_1
call fcn.004037c0
add esp, 4
lea ecx, [esp + 0x10]
push 0x4141e8
push 1
push ecx
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x38]
push 5
call fcn.0040dc10
mov esi, eax
mov dword [esp + 0x34], esi
lea ebp, [esi*4 + 4]
push ebp
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [esp + 0x74], eax
test eax, eax
mov byte [esp + 0x3af0], 0x18
je 0x4020a1
push fcn.0040f288
push sub.MFC42.DLL_CString::CString
lea edi, [eax + 4]
push esi
push 4
push edi
mov dword [eax], esi
call fcn.0040f460
mov dword [esp + 0x70], edi
jmp 0x4020a9
lea eax, [esp + 0x851]
lea ecx, [esp + 0x18]
push eax
push 0x4141d4
push ecx
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x24]
add esp, 0xc
lea eax, [esp + 0x10]
push edx
push 0
push eax
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x14]
call fcn.0040c110
mov eax, dword [eax]
lea edx, [esp + 0x94]
push 0
push edx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x1c]
call fcn.0040f288
mov eax, dword [esp + 0x14]
push fcn.0040f288
mov ecx, dword [eax - 4]
lea esi, [eax - 4]
push ecx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0x50]
add esp, 4
mov edx, dword [eax - 4]
lea esi, [eax - 4]
push fcn.0040f288
push edx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
add esp, 4
jmp 0x4022c1
mov dword [esp + 0x70], 0
mov eax, dword [esp + 0x70]
mov byte [esp + 0x3af0], 0x17
test eax, eax
jne 0x402111
lea edx, [esp + 0x851]
lea eax, [esp + 0x18]
push edx
push 0x4141c4
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x24]
add esp, 0xc
lea edx, [esp + 0x10]
push ecx
push 0
push edx
call fcn.0040be50
add esp, 0xc
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
call fcn.0040c110
mov eax, dword [eax]
lea ecx, [esp + 0x94]
push 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x1c]
jmp 0x4022bc
push ebp
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [esp + 0x74], eax
test eax, eax
mov byte [esp + 0x3af0], 0x19
je 0x402148
push fcn.0040f288
push sub.MFC42.DLL_CString::CString
lea edi, [eax + 4]
push esi
push 4
push edi
mov dword [eax], esi
call fcn.0040f460
mov dword [esp + 0x7c], edi
jmp 0x402150
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x7c]
mov byte [esp + 0x3af0], 0x17
test eax, eax
jne 0x402254
lea edx, [esp + 0x851]
lea eax, [esp + 0x18]
push edx
push 0x4141c4
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x24]
add esp, 0xc
lea edx, [esp + 0x10]
push ecx
push 0
push edx
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x38]
call fcn.0040dbf0
lea ecx, [esp + 0x54]
mov byte [esp + 0x3af0], 0x14
call fcn.00408880
lea ecx, [esp + 0x38]
mov byte [esp + 0x3af0], 0x13
call fcn.0040c250
lea ecx, [esp + 0x40]
mov byte [esp + 0x3af0], 0x12
call fcn.00403b30
lea ecx, [esp + 0x10]
mov byte [esp + 0x3af0], 0x11
call fcn.0040be40
lea ecx, [esp + 0x281c]
mov byte [esp + 0x3af0], 0x10
call fcn.0040b480
lea ecx, [esp + 0x18]
mov byte [esp + 0x3af0], 4
call fcn.0040f288
lea ecx, [esp + 0x44]
mov byte [esp + 0x3af0], 3
call fcn.0040f288
lea ecx, [esp + 0x30]
mov byte [esp + 0x3af0], 2
call fcn.0040f288
lea ecx, [esp + 0x20]
mov byte [esp + 0x3af0], 1
call fcn.0040f288
lea ecx, [esp + 0x24]
mov byte [esp + 0x3af0], 0
call fcn.0040f288
mov dword [esp + 0x3af0], ebx
jmp 0x40365d
push esi
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x402383
lea eax, [esp + 0x851]
lea ecx, [esp + 0x18]
push eax
push 0x4141c4
push ecx
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x24]
add esp, 0xc
lea eax, [esp + 0x10]
push edx
push 0
push eax
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x14]
call fcn.0040c110
mov eax, dword [eax]
lea edx, [esp + 0x94]
push 0
push edx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x1c]
call fcn.0040f288
lea ecx, [esp + 0x38]
call fcn.0040dbf0
lea ecx, [esp + 0x54]
mov byte [esp + 0x3af0], 0x14
call fcn.00408880
lea ecx, [esp + 0x38]
mov byte [esp + 0x3af0], 0x13
call fcn.0040c250
lea ecx, [esp + 0x40]
mov byte [esp + 0x3af0], 0x12
call fcn.00403b30
lea ecx, [esp + 0x10]
mov byte [esp + 0x3af0], 0x11
call fcn.0040be40
lea ecx, [esp + 0x281c]
mov byte [esp + 0x3af0], 0x10
call fcn.0040b480
lea ecx, [esp + 0x18]
mov byte [esp + 0x3af0], 4
call fcn.0040f288
lea ecx, [esp + 0x44]
mov byte [esp + 0x3af0], 3
call fcn.0040f288
lea ecx, [esp + 0x30]
mov byte [esp + 0x3af0], 2
call fcn.0040f288
lea ecx, [esp + 0x20]
mov byte [esp + 0x3af0], 1
call fcn.0040f288
lea ecx, [esp + 0x24]
mov byte [esp + 0x3af0], 0
call fcn.0040f288
mov dword [esp + 0x3af0], ebx
jmp 0x40365d
xor ebp, ebp
test esi, esi
jbe 0x4023fb
mov ebx, dword [esp + 0x7c]
mov eax, dword [esp + 0x70]
sub eax, ebx
mov dword [esp + 0x78], eax
mov ecx, 0xf6
xor eax, eax
lea edi, [esp + 0x370c]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x370c]
lea ecx, [esp + 0x38]
push eax
push 5
push ebp
call fcn.0040e0b0
test eax, eax
je 0x4023f3
mov edx, dword [esp + 0x78]
lea ecx, [esp + 0x370c]
push ecx
lea ecx, [edx + ebx]
call sub.MFC42.DLL_CString::operator_1
lea eax, [esp + 0x39e3]
mov ecx, ebx
push eax
call sub.MFC42.DLL_CString::operator_1
mov edx, dword [esp + 0x1c]
mov cl, byte [esp + 0x3ae5]
mov byte [edx + ebp], cl
inc ebp
add ebx, 4
cmp ebp, esi
jb 0x402397
push 0x4141b8
lea eax, [esp + 0x14]
push 1
push eax
call fcn.0040be50
add esp, 0xc
xor ebx, ebx
lea ecx, [esp + 0x38]
mov dword [esp + 0x68], ebx
push 6
call fcn.0040dc10
test eax, eax
jbe 0x402809
mov ecx, 0x183
xor eax, eax
lea edi, [esp + 0x11e4]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x11e4]
push ecx
push 6
push ebx
lea ecx, [esp + 0x44]
stosb byte es:[edi], al
call fcn.0040e0b0
test eax, eax
je 0x4027f1
test esi, esi
jbe 0x4027f1
mov edx, dword [esp + 0x70]
mov dword [esp + 0x78], esi
mov dword [esp + 0x84], edx
mov eax, dword [esp + 0x84]
lea ecx, [esp + 0x11e4]
push ecx
mov eax, dword [eax]
push eax
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
test eax, eax
jne 0x4027cd
lea edx, [esp + 0x16bb]
lea ecx, [esp + 0x2c]
push edx
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [esp + 0x64]
mov byte [esp + 0x3af0], 0x1a
test eax, eax
jbe 0x40255d
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x4c]
sub ebx, ebp
mov dword [esp + 0x6c], eax
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push eax
call sub.MFC42.DLL_CString::Find_2
cmp eax, 0xffffffff
je 0x40254b
mov eax, dword [ebp]
mov esi, dword [ebx + ebp]
mov ecx, dword [eax - 8]
push ecx
push eax
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CString::Find_2
lea ecx, [esp + 0x94]
push eax
push ecx
lea ecx, [esp + 0x38]
call sub.MFC42.DLL_CString::Mid
mov eax, dword [eax]
push esi
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x3af8], 0x1b
call sub.MFC42.DLL_CString::Replace
lea ecx, [esp + 0x90]
mov byte [esp + 0x3af0], 0x1a
call fcn.0040f288
mov edi, dword [esp + 0x2c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x16bb]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x6c]
add ebp, 4
dec eax
mov dword [esp + 0x6c], eax
jne 0x4024c2
lea ecx, [esp + 0x16bb]
push 0x104
push ecx
lea ecx, [esp + 0x2824]
call fcn.0040b640
lea edx, [esp + 0x14bb]
lea ecx, [esp + 0x2c]
push edx
call sub.MFC42.DLL_CString::operator_1
mov eax, dword [esp + 0x64]
test eax, eax
jbe 0x40263c
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x4c]
sub ebx, ebp
mov dword [esp + 0x6c], eax
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push eax
call sub.MFC42.DLL_CString::Find_2
cmp eax, 0xffffffff
je 0x40262a
mov eax, dword [ebp]
mov esi, dword [ebx + ebp]
mov ecx, dword [eax - 8]
push ecx
push eax
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CString::Find_2
lea ecx, [esp + 0x90]
push eax
push ecx
lea ecx, [esp + 0x38]
call sub.MFC42.DLL_CString::Mid
mov eax, dword [eax]
push esi
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x3af8], 0x1c
call sub.MFC42.DLL_CString::Replace
lea ecx, [esp + 0x8c]
mov byte [esp + 0x3af0], 0x1a
call fcn.0040f288
mov edi, dword [esp + 0x2c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x14bb]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x6c]
add ebp, 4
dec eax
mov dword [esp + 0x6c], eax
jne 0x4025a1
lea ecx, [esp + 0x14bb]
push 0x104
push ecx
lea ecx, [esp + 0x2824]
call fcn.0040b640
lea edx, [esp + 0x14bb]
lea ecx, [esp + 0x80]
push edx
call sub.MFC42.DLL_CString::CString_1
push 0x5c
lea ecx, [esp + 0x84]
mov byte [esp + 0x3af4], 0x1d
call sub.MFC42.DLL_CString::ReverseFind
push eax
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x88]
call sub.MFC42.DLL_CString::Left
mov eax, dword [0x414020]
mov byte [esp + 0x3af0], 0x1e
test eax, eax
je 0x4026ac
mov dword [0x414020], 0
mov ecx, dword [esp + 0x48]
push ecx
call fcn.00403690
mov edi, dword [sym.imp.KERNEL32.dll_CopyFileA]
add esp, 4
lea edx, [esp + 0x14bb]
lea eax, [esp + 0x16bb]
push 0
push edx
push eax
call edi
test eax, eax
jne 0x402793
lea ecx, [esp + 0x14bb]
push ecx
lea ecx, [esp + 0x4c]
call sub.MFC42.DLL_CString::operator_1
lea edx, [esp + 0x48]
push 0x4141b4
lea eax, [esp + 0x78]
push edx
push eax
call sub.MFC42.DLL_operator
mov esi, dword [eax]
push 0
mov byte [esp + 0x3af4], 0x1f
call dword [sym.imp.MSVCRT.dll_time]
add esp, 4
lea ecx, [esp + 0x48]
push eax
push esi
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
lea ecx, [esp + 0x74]
mov byte [esp + 0x3af0], 0x1e
call fcn.0040f288
mov edx, dword [esp + 0x48]
push 0
lea eax, [esp + 0x14bf]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
test eax, eax
je 0x402771
mov ecx, dword [esp + 0x48]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea edx, [esp + 0x14bb]
push 0
lea eax, [esp + 0x16bf]
push edx
push eax
call edi
test eax, eax
jne 0x402793
lea ecx, [esp + 0x14bb]
lea edx, [esp + 0x16bb]
push ecx
push edx
lea eax, [esp + 0x20]
push 0x41419c
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0x10
lea ecx, [esp + 0x48]
mov byte [esp + 0x3af0], 0x1d
call fcn.0040f288
lea ecx, [esp + 0x80]
mov byte [esp + 0x3af0], 0x1a
call fcn.0040f288
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3af0], 0x17
call fcn.0040f288
mov esi, dword [esp + 0x34]
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x78]
add ecx, 4
dec eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0x78], eax
jne 0x40246c
mov ebx, dword [esp + 0x68]
inc ebx
push 6
lea ecx, [esp + 0x3c]
mov dword [esp + 0x6c], ebx
call fcn.0040dc10
cmp ebx, eax
jb 0x402428
mov eax, dword [esp + 0x70]
push fcn.0040f288
mov ecx, dword [eax - 4]
lea esi, [eax - 4]
push ecx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0x80]
add esp, 4
mov edx, dword [eax - 4]
lea esi, [eax - 4]
push fcn.0040f288
push edx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0x20]
push eax
call sub.MFC42.DLL_operatordelete
add esp, 8
lea ecx, [esp + 0x10]
push 0x41418c
push 1
push ecx
call fcn.0040be50
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1d79]
mov byte [esp + 0x1d78], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
add esp, 0xc
lea ecx, [esp + 0x50]
stosb byte es:[edi], al
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x58]
mov byte [esp + 0x3af0], 0x20
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x60]
mov byte [esp + 0x3af0], 0x21
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x5c]
mov byte [esp + 0x3af0], 0x22
call sub.MFC42.DLL_CString::CString
xor esi, esi
push 0xb
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3af4], 0x23
mov dword [esp + 0x6c], esi
call fcn.0040dc10
test eax, eax
jbe 0x402bbb
mov ecx, 0x229
xor eax, eax
lea edi, [esp + 0x1f74]
lea edx, [esp + 0x1f74]
rep stosd dword es:[edi], eax
push edx
push 0xb
push esi
lea ecx, [esp + 0x44]
stosb byte es:[edi], al
call fcn.0040e0b0
test eax, eax
je 0x402b9f
lea eax, [esp + 0x2719]
lea ecx, [esp + 0x2c]
push eax
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [esp + 0x64]
mov byte [esp + 0x3af0], 0x24
test eax, eax
jbe 0x4029db
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x4c]
mov ecx, eax
sub ebx, ebp
mov dword [esp + 0x1c], ecx
mov eax, dword [ebp]
lea ecx, [esp + 0x2c]
push eax
call sub.MFC42.DLL_CString::Find_2
cmp eax, 0xffffffff
je 0x4029c9
mov eax, dword [ebp]
mov esi, dword [ebx + ebp]
mov ecx, dword [eax - 8]
push ecx
push eax
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CString::Find_2
lea edx, [esp + 0x38]
push eax
push edx
lea ecx, [esp + 0x38]
call sub.MFC42.DLL_CString::Mid
mov eax, dword [eax]
push esi
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x3af8], 0x25
call sub.MFC42.DLL_CString::Replace
lea ecx, [esp + 0x34]
mov byte [esp + 0x3af0], 0x24
call fcn.0040f288
mov edi, dword [esp + 0x2c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x2719]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x1c]
add ebp, 4
dec eax
mov dword [esp + 0x1c], eax
jne 0x402946
lea ecx, [esp + 0x2719]
push 0x104
push ecx
lea ecx, [esp + 0x2824]
call fcn.0040b640
lea edx, [esp + 0x2719]
lea eax, [esp + 0x1d6c]
push edx
push 0x208
push eax
lea ecx, [esp + 0x2225]
push 0
lea edx, [esp + 0x2129]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp eax, 0xffffffff
je 0x402b8e
lea eax, [esp + 0x2319]
lea ecx, [esp + 0x5c]
push eax
call sub.MFC42.DLL_CString::operator_1
mov ecx, dword [esp + 0x5c]
mov esi, dword [sym.imp.MSVCRT.dll__mbsicmp]
push str.Logger
push ecx
call esi
add esp, 8
test eax, eax
jne 0x402a5b
lea edx, [esp + 0x24]
push edx
jmp 0x402a77
mov eax, dword [esp + 0x5c]
push str.Manager
push eax
call esi
add esp, 8
test eax, eax
jne 0x402b58
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x64]
call fcn.0040f28e
lea edx, [esp + 0x1d6c]
lea ecx, [esp + 0x50]
push edx
call sub.MFC42.DLL_CString::operator_1
push 0
push 0x414178
lea ecx, [esp + 0x58]
call sub.MFC42.DLL_CString::Find
push 0
push 0x414174
lea ecx, [esp + 0x58]
mov esi, eax
call sub.MFC42.DLL_CString::Find
cmp esi, 0xffffffff
je 0x402b8e
cmp eax, 0xffffffff
je 0x402b8e
sub eax, esi
add esi, 2
sub eax, 2
lea ecx, [esp + 0x50]
push eax
lea eax, [esp + 0x78]
push esi
push eax
call sub.MFC42.DLL_CString::Mid
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x3af4], 0x26
call fcn.0040f28e
lea ecx, [esp + 0x74]
mov byte [esp + 0x3af0], 0x24
call fcn.0040f288
lea ecx, [esp + 0x58]
call sub.MFC42.DLL_CString::TrimLeft
lea ecx, [esp + 0x58]
call sub.MFC42.DLL_CString::TrimRight
mov eax, dword [esp + 0x60]
cmp dword [eax - 8], 7
jl 0x402b2b
mov ecx, dword [esp + 0x58]
push eax
push ecx
lea ecx, [esp + 0x58]
call sub.MFC42.DLL_CString::Replace
mov eax, dword [esp + 0x50]
lea edx, [esp + 0x2719]
push edx
lea ecx, [esp + 0x221d]
push eax
lea edx, [esp + 0x2121]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
test eax, eax
je 0x402d80
jmp 0x402b8e
mov eax, dword [esp + 0x5c]
push str.Center
push eax
call esi
add esp, 8
test eax, eax
jne 0x402b8e
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x2719]
push ecx
lea eax, [esp + 0x221d]
push edx
lea ecx, [esp + 0x2121]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3af0], 0x23
call fcn.0040f288
mov esi, dword [esp + 0x68]
push 0xb
inc esi
lea ecx, [esp + 0x3c]
mov dword [esp + 0x6c], esi
call fcn.0040dc10
cmp esi, eax
jb 0x4028e4
push 0x414158
lea edx, [esp + 0x14]
push 1
push edx
call fcn.0040be50
add esp, 0xc
lea eax, [esp + 0x10]
push str.COM
push 1
push eax
call fcn.0040be50
add esp, 0xc
xor esi, esi
lea ecx, [esp + 0x38]
mov dword [esp + 0x68], esi
push 9
call fcn.0040dc10
test eax, eax
jbe 0x402ef2
mov ecx, 0x103
xor eax, eax
lea edi, [esp + 0x195c]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x195c]
push ecx
push 9
push esi
lea ecx, [esp + 0x44]
stosb byte es:[edi], al
call fcn.0040e0b0
test eax, eax
je 0x402d63
lea edx, [esp + 0x1b66]
lea ecx, [esp + 0x48]
push edx
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [esp + 0x64]
mov byte [esp + 0x3af0], 0x27
test eax, eax
jbe 0x402cf1
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x4c]
sub ebx, ebp
mov dword [esp + 0x1c], eax
mov eax, dword [ebp]
lea ecx, [esp + 0x48]
push eax
call sub.MFC42.DLL_CString::Find_2
cmp eax, 0xffffffff
je 0x402cdf
mov eax, dword [ebp]
mov esi, dword [ebx + ebp]
mov ecx, dword [eax - 8]
push ecx
push eax
lea ecx, [esp + 0x50]
call sub.MFC42.DLL_CString::Find_2
lea ecx, [esp + 0x38]
push eax
push ecx
lea ecx, [esp + 0x54]
call sub.MFC42.DLL_CString::Mid
mov eax, dword [eax]
push esi
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x3af8], 0x28
call sub.MFC42.DLL_CString::Replace
lea ecx, [esp + 0x34]
mov byte [esp + 0x3af0], 0x27
call fcn.0040f288
mov edi, dword [esp + 0x48]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x1b66]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x1c]
add ebp, 4
dec eax
mov dword [esp + 0x1c], eax
jne 0x402c5c
lea ecx, [esp + 0x1b66]
push 0x104
push ecx
lea ecx, [esp + 0x2824]
call fcn.0040b640
mov esi, 1
mov bl, byte [esp + 0x1d66]
push 0xffffffffffffffff
test bl, bl
lea edx, [esp + 0x1c6a]
push 0
sete al
push edx
lea ecx, [esp + 0x1b72]
push eax
push ecx
lea ecx, [esp + 0x54]
call fcn.00403d80
test eax, eax
jne 0x402d45
mov edx, esi
inc esi
cmp edx, 0xa
jl 0x402d0f
cmp esi, 0xb
je 0x402e39
lea ecx, [esp + 0x48]
mov byte [esp + 0x3af0], 0x23
call fcn.0040f288
mov esi, dword [esp + 0x68]
inc esi
push 9
lea ecx, [esp + 0x3c]
mov dword [esp + 0x6c], esi
call fcn.0040dc10
cmp esi, eax
jb 0x402bfc
jmp 0x402ef2
lea edx, [esp + 0x2719]
lea eax, [esp + 0x18]
push edx
push 0x414130
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x24]
add esp, 0xc
lea edx, [esp + 0x10]
push ecx
push 0
push edx
call fcn.0040be50
add esp, 0xc
lea eax, [esp + 0x34]
lea ecx, [esp + 0x10]
push eax
call fcn.0040c110
mov eax, dword [eax]
lea ecx, [esp + 0x94]
push 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x34]
call fcn.0040f288
mov eax, dword [esp + 0x14]
push fcn.0040f288
mov edx, dword [eax - 4]
lea esi, [eax - 4]
push edx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0x50]
add esp, 4
mov ecx, dword [eax - 4]
lea esi, [eax - 4]
push fcn.0040f288
push ecx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
add esp, 4
lea ecx, [esp + 0x38]
call fcn.0040dbf0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3af0], 0x23
call fcn.0040f288
jmp 0x403561
lea eax, [esp + 0x1b66]
lea ecx, [esp + 0x18]
push eax
push 0x414114
push ecx
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x24]
add esp, 0xc
lea eax, [esp + 0x10]
push edx
push 0
push eax
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x14]
call fcn.0040c110
mov eax, dword [eax]
lea edx, [esp + 0x94]
push 0
push edx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x34]
call fcn.0040f288
mov eax, dword [esp + 0x14]
push fcn.0040f288
mov ecx, dword [eax - 4]
lea esi, [eax - 4]
push ecx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0x50]
add esp, 4
mov edx, dword [eax - 4]
lea esi, [eax - 4]
push fcn.0040f288
push edx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
add esp, 4
lea ecx, [esp + 0x38]
call fcn.0040dbf0
lea ecx, [esp + 0x48]
mov byte [esp + 0x3af0], 0x23
call fcn.0040f288
jmp 0x403561
push 0x414104
lea eax, [esp + 0x14]
push 1
push eax
call fcn.0040be50
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x1a5]
mov byte [esp + 0x1a4], 0
rep stosd dword es:[edi], eax
mov ebx, dword [sym.imp.MSVCRT.dll_strncpy]
lea ecx, [esp + 0x14c7]
stosw word es:[edi], ax
push 0x104
lea edx, [esp + 0x1a8]
push ecx
push edx
stosb byte es:[edi], al
call ebx
lea eax, [esp + 0x1b0]
push 0x5c
push eax
call dword [sym.imp.MSVCRT.dll_strrchr]
mov esi, eax
add esp, 0x20
test esi, esi
je 0x402f88
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edi, [esp + 0x198]
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x198]
mov edi, ecx
sub edi, edx
push edi
push eax
push esi
call ebx
add esp, 0xc
mov byte [edi + esi], 0
push esi
lea ecx, [esp + 0x19c]
push 0x414100
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x2a9]
mov byte [esp + 0x2a8], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea edx, [esp + 0x1a4]
push 0x104
lea eax, [esp + 0x2ac]
push edx
push eax
call ebx
add esp, 0x18
lea ecx, [esp + 0x29c]
push 0x104
push ecx
lea ecx, [esp + 0x2824]
call fcn.0040b640
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x3a1]
mov byte [esp + 0x3a0], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea edx, [esp + 0x29c]
push 0x104
lea eax, [esp + 0x3a4]
push edx
push eax
call ebx
mov esi, dword [sym.imp.MSVCRT.dll_strncat]
push 2
lea ecx, [esp + 0x3b0]
push 0x4143b4
push ecx
call esi
push 0xc
lea edx, [esp + 0x3bc]
push str.environment
push edx
call esi
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x1105]
mov byte [esp + 0x1104], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
add esp, 0x24
stosb byte es:[edi], al
lea eax, [esp + 0x10e0]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov ebp, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea ecx, [esp + 0x29c]
push ecx
call ebp
lea edx, [esp + 0x3a0]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
jne 0x403129
lea eax, [esp + 0x3a0]
lea ecx, [esp + 0x18]
push eax
push 0x4140e4
push ecx
call sub.MFC42.DLL_CString::Format
mov edx, dword [esp + 0x24]
add esp, 0xc
lea eax, [esp + 0x10]
push edx
push esi
push eax
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x14]
call fcn.0040c110
mov eax, dword [eax]
lea edx, [esp + 0x94]
push esi
push edx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x34]
call fcn.0040f288
mov eax, dword [esp + 0x14]
push fcn.0040f288
mov ecx, dword [eax - 4]
lea esi, [eax - 4]
push ecx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0x50]
add esp, 4
mov edx, dword [eax - 4]
lea esi, [eax - 4]
push fcn.0040f288
push edx
jmp 0x403547
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.environment_init
push esi
call ebx
push str.environment_write
push esi
mov edi, eax
call ebx
push str.environment_fini
push esi
mov dword [esp + 0x24], eax
call ebx
test edi, edi
mov ebx, eax
je 0x4034bf
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4034bf
test ebx, ebx
je 0x4034bf
call edi
cmp eax, 0xffffffff
jne 0x4031c9
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea eax, [esp + 0x18]
push 0x414090
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x20]
add esp, 8
lea edx, [esp + 0x10]
push ecx
push 0
push edx
call fcn.0040be50
add esp, 0xc
lea eax, [esp + 0x34]
lea ecx, [esp + 0x10]
push eax
call fcn.0040c110
mov eax, dword [eax]
lea ecx, [esp + 0x94]
push 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x34]
jmp 0x403511
lea edi, [esp + 0x29c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x29c]
repne scasb al, byte es:[edi]
not ecx
push ecx
push edx
push str.Audit.System.Install.Path
call dword [esp + 0x28]
add esp, 0xc
cmp eax, 0xffffffff
jne 0x403251
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push str.Audit.System.Install.Path
lea eax, [esp + 0x1c]
push 0x41405c
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x24]
add esp, 0xc
lea edx, [esp + 0x10]
push ecx
push 0
push edx
call fcn.0040be50
add esp, 0xc
lea eax, [esp + 0x34]
lea ecx, [esp + 0x10]
push eax
call fcn.0040c110
mov eax, dword [eax]
lea ecx, [esp + 0x94]
push 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x34]
jmp 0x403511
call ebx
cmp eax, 0xffffffff
push esi
jne 0x4032af
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea edx, [esp + 0x18]
push 0x414044
push edx
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x20]
add esp, 8
lea ecx, [esp + 0x10]
push eax
push 0
push ecx
call fcn.0040be50
add esp, 0xc
lea edx, [esp + 0x34]
lea ecx, [esp + 0x10]
push edx
call fcn.0040c110
mov eax, dword [eax]
lea ecx, [esp + 0x94]
push 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x34]
jmp 0x403511
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea edx, [esp + 0x10e0]
push edx
call ebp
mov eax, dword [esp + 0x14]
push fcn.0040f288
mov ecx, dword [eax - 4]
lea esi, [eax - 4]
push ecx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0x50]
add esp, 4
mov edx, dword [eax - 4]
lea esi, [eax - 4]
push fcn.0040f288
push edx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
add esp, 4
lea ecx, [esp + 0x38]
call fcn.0040dbf0
mov edi, 0x4143b4
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x198]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x414038
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [esp + 0x19c]
and ecx, 3
push 1
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x90]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea eax, [esp + 0x18]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x88]
push ecx
lea ecx, [esp + 0x14]
call fcn.0040c110
mov eax, dword [eax]
lea edx, [esp + 0x198]
push 0
push edx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x88]
call fcn.0040f288
lea ecx, [esp + 0x5c]
mov byte [esp + 0x3af0], 0x22
call fcn.0040f288
lea ecx, [esp + 0x60]
mov byte [esp + 0x3af0], 0x21
call fcn.0040f288
lea ecx, [esp + 0x58]
mov byte [esp + 0x3af0], 0x20
call fcn.0040f288
lea ecx, [esp + 0x50]
mov byte [esp + 0x3af0], 0x17
call fcn.0040f288
lea ecx, [esp + 0x54]
mov byte [esp + 0x3af0], 0x14
call fcn.00408880
lea ecx, [esp + 0x38]
mov byte [esp + 0x3af0], 0x13
call fcn.0040c250
lea ecx, [esp + 0x40]
mov byte [esp + 0x3af0], 0x12
call fcn.00403b30
lea ecx, [esp + 0x10]
mov byte [esp + 0x3af0], 0x11
call fcn.0040be40
lea ecx, [esp + 0x281c]
mov byte [esp + 0x3af0], 0x10
call fcn.0040b480
lea ecx, [esp + 0x18]
mov byte [esp + 0x3af0], 4
call fcn.0040f288
lea ecx, [esp + 0x44]
mov byte [esp + 0x3af0], 3
call fcn.0040f288
lea ecx, [esp + 0x30]
mov byte [esp + 0x3af0], 2
call fcn.0040f288
lea ecx, [esp + 0x20]
mov byte [esp + 0x3af0], 1
call fcn.0040f288
lea ecx, [esp + 0x24]
mov byte [esp + 0x3af0], 0
call fcn.0040f288
lea ecx, [esp + 0x28]
mov dword [esp + 0x3af0], 0xffffffff
call fcn.0040f288
mov eax, 1
jmp 0x403668
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea eax, [esp + 0x18]
push 0x414024
push eax
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x20]
add esp, 8
lea edx, [esp + 0x10]
push ecx
push 0
push edx
call fcn.0040be50
add esp, 0xc
lea eax, [esp + 0x34]
lea ecx, [esp + 0x10]
push eax
call fcn.0040c110
mov eax, dword [eax]
lea ecx, [esp + 0x94]
push 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [esp + 0x34]
call fcn.0040f288
mov eax, dword [esp + 0x14]
push fcn.0040f288
mov edx, dword [eax - 4]
lea esi, [eax - 4]
push edx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0x50]
add esp, 4
mov ecx, dword [eax - 4]
lea esi, [eax - 4]
push fcn.0040f288
push ecx
push 4
push eax
call fcn.0040f36c
push esi
call sub.MFC42.DLL_operatordelete
add esp, 4
lea ecx, [esp + 0x38]
call fcn.0040dbf0
lea ecx, [esp + 0x5c]
mov byte [esp + 0x3af0], 0x22
call fcn.0040f288
lea ecx, [esp + 0x60]
mov byte [esp + 0x3af0], 0x21
call fcn.0040f288
lea ecx, [esp + 0x58]
mov byte [esp + 0x3af0], 0x20
call fcn.0040f288
lea ecx, [esp + 0x50]
mov byte [esp + 0x3af0], 0x17
call fcn.0040f288
lea ecx, [esp + 0x54]
mov byte [esp + 0x3af0], 0x14
call fcn.00408880
lea ecx, [esp + 0x38]
mov byte [esp + 0x3af0], 0x13
call fcn.0040c250
lea ecx, [esp + 0x40]
mov byte [esp + 0x3af0], 0x12
call fcn.00403b30
lea ecx, [esp + 0x10]
mov byte [esp + 0x3af0], 0x11
call fcn.0040be40
lea ecx, [esp + 0x281c]
mov byte [esp + 0x3af0], 0x10
call fcn.0040b480
lea ecx, [esp + 0x18]
mov byte [esp + 0x3af0], 4
call fcn.0040f288
lea ecx, [esp + 0x44]
mov byte [esp + 0x3af0], 3
call fcn.0040f288
lea ecx, [esp + 0x30]
mov byte [esp + 0x3af0], 2
call fcn.0040f288
lea ecx, [esp + 0x20]
mov byte [esp + 0x3af0], 1
call fcn.0040f288
lea ecx, [esp + 0x24]
mov byte [esp + 0x3af0], 0
call fcn.0040f288
mov dword [esp + 0x3af0], 0xffffffff
lea ecx, [esp + 0x28]
call fcn.0040f288
xor eax, eax
mov ecx, dword [esp + 0x3ae8]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x3ae4
ret 4