Function at 0x441fe5
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff4
cmp eax, 0xa02b
jne 0x442052
cmp dword [0x4538c8], 0
je 0x442014
push 0
push 0
push 0x300
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp dword [0x4538cc], 0
je 0x44202c
call fcn.0041f4a7
call fcn.0041f75c
jmp 0x44306d
cmp dword [0x453960], 0
je 0x44306d
push 0
push 0
push 0x300
push dword [0x453960]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp eax, 0xa02c
jne 0x4420b4
cmp dword [0x4538c8], 0
je 0x44207b
push 0
push 0
push 0x301
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp dword [0x4538cc], 0
je 0x44208e
call fcn.0041f4a7
jmp 0x44306d
cmp dword [0x453960], 0
je 0x44306d
push 0
push 0
push 0x301
push dword [0x453960]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp eax, 0xa02d
jne 0x44212c
cmp dword [0x4538c8], 0
je 0x4420e8
push dword [0x4538c8]
call sub.user32.dll_SetFocus
push 0
push 0
push 0x302
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp dword [0x4538cc], 0
je 0x4420fb
call fcn.0041f550
jmp 0x44306d
cmp dword [0x453960], 0
je 0x44306d
push dword [0x453960]
call sub.user32.dll_SetFocus
push 0
push 0
push 0x302
push dword [0x453960]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp eax, 0xa02e
jne 0x44218e
cmp dword [0x4538c8], 0
je 0x442155
push 0
push 1
push 0xc2
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp dword [0x4538cc], 0
je 0x442168
call fcn.0041f75c
jmp 0x44306d
cmp dword [0x453960], 0
je 0x44306d
push 0
push 1
push 0xc2
push dword [0x453960]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp eax, 0xa02f
jne 0x4421ef
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0xffffffff
cmp dword [0x4538c8], 0
je 0x4421c7
lea eax, [ebp - 8]
push eax
push 0
push 0x437
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp dword [0x453960], 0
je 0x44306d
lea eax, [ebp - 8]
push eax
push 0
push 0x437
push dword [0x453960]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp eax, 0xa029
jne 0x442251
cmp dword [0x4538c8], 0
je 0x442218
push 0
push 0
push 0xc7
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp dword [0x4538cc], 0
je 0x44222b
call fcn.0041f96a
jmp 0x44306d
cmp dword [0x453960], 0
je 0x44306d
push 0
push 0
push 0xc7
push dword [0x453960]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp eax, 0xa02a
jne 0x4422a0
cmp dword [0x4538c8], 0
je 0x44227a
push 0
push 0
push 0x454
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp dword [0x453960], 0
je 0x44306d
push 0
push 0
push 0x454
push dword [0x453960]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp eax, 0xa03e
jne 0x4422ef
cmp dword [0x4538c8], 0
je 0x4422c9
push 0
push 0
push 0xcd
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp dword [0x453960], 0
je 0x44306d
push 0
push 0
push 0xcd
push dword [0x453960]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp eax, 0xa030
jne 0x442384
cmp dword [0x4538c8], 0
je 0x442342
cmp dword [0x4538d0], 0
jne 0x442332
push 0x45fb1e
call fcn.00413416
push 0
push 0x411f1f
push dword [ebp + 8]
push 0x66
push dword [0x453904]
call fcn.004019db
jmp 0x44306d
push dword [0x4538d0]
call sub.user32.dll_SetFocus
jmp 0x44306d
cmp dword [0x453960], 0
je 0x44306d
cmp dword [0x4538d0], 0
jne 0x442374
push 0
push 0x412e9a
push dword [ebp + 8]
push 0x10cc
push dword [0x453904]
call fcn.004019db
jmp 0x44237f
push dword [0x4538d0]
call sub.user32.dll_SetFocus
jmp 0x44306d
cmp eax, 0xa033
jne 0x442419
cmp dword [0x4538c8], 0
je 0x4423d7
cmp dword [0x4538d0], 0
jne 0x4423c7
push 0x45fb1e
call fcn.00413416
push 1
push 0x411f1f
push dword [ebp + 8]
push 0x66
push dword [0x453904]
call fcn.004019db
jmp 0x44306d
push dword [0x4538d0]
call sub.user32.dll_SetFocus
jmp 0x44306d
cmp dword [0x453960], 0
je 0x44306d
cmp dword [0x4538d0], 0
jne 0x442409
push 1
push 0x412e9a
push dword [ebp + 8]
push 0x10cc
push dword [0x453904]
call fcn.004019db
jmp 0x442414
push dword [0x4538d0]
call sub.user32.dll_SetFocus
jmp 0x44306d
cmp eax, 0xa034
jne 0x442455
cmp dword [0x4538d4], 0
jne 0x442445
push 0
push 0x414b3c
push dword [ebp + 8]
push 0x67
push dword [0x453904]
call fcn.004019db
jmp 0x44306d
push dword [0x4538d4]
call sub.user32.dll_SetFocus
jmp 0x44306d
cmp eax, 0xa031
jne 0x442562
cmp dword [0x4538c8], 0
je 0x442542
cmp dword [0x4538d0], 0
jne 0x442495
push 0x45fb1e
call fcn.00413416
push dword [0x45ff56]
push 0x45fc1e
push 0x45fb1e
call fcn.00411e92
push 0x45fb1e
call fcn.004010ef
or eax, eax
je 0x44306d
push 0x45ff32
push 0
push 0x434
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push dword [0x45ff36]
pop dword [0x45ff32]
mov dword [0x45ff36], 0xffffffff
mov dword [0x45ff3a], 0x45fc1e
mov edx, 1
cmp dword [0x45ff4e], 0
je 0x4424ef
or edx, 4
cmp dword [0x45ff52], 0
je 0x4424fb
or edx, 2
push 0x45ff32
push edx
push 0x44f
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
cmp eax, 0xffffffff
je 0x44253d
push 0x45ff3e
push 0
push 0x437
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push 0x808
push dword [0x4538c8]
call fcn.004135da
jmp 0x44306d
cmp dword [0x453960], 0
je 0x44306d
mov eax, dword [0x44ffb9]
or eax, 1
push eax
call fcn.00412db5
jmp 0x44306d
cmp eax, 0xa032
jne 0x442660
cmp dword [0x4538c8], 0
je 0x442640
cmp dword [0x4538d0], 0
jne 0x4425a2
push 0x45fb1e
call fcn.00413416
push dword [0x45ff56]
push 0x45fc1e
push 0x45fb1e
call fcn.00411e92
push 0x45fb1e
call fcn.004010ef
or eax, eax
je 0x44306d
push 0x45ff32
push 0
push 0x434
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
mov dword [0x45ff36], 0
mov dword [0x45ff3a], 0x45fc1e
xor edx, edx
cmp dword [0x45ff4e], 0
je 0x4425ed
or edx, 4
cmp dword [0x45ff52], 0
je 0x4425f9
or edx, 2
push 0x45ff32
push edx
push 0x44f
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
cmp eax, 0xffffffff
je 0x44263b
push 0x45ff3e
push 0
push 0x437
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push 0x808
push dword [0x4538c8]
call fcn.004135da
jmp 0x44306d
cmp dword [0x453960], 0
je 0x44306d
mov eax, dword [0x44ffb9]
and eax, 0xfffffffe
push eax
call fcn.00412db5
jmp 0x44306d
cmp eax, 0xa08e
jne 0x44276c
cmp dword [0x4538c8], 0
je 0x44306d
mov eax, dword [0x4538c8]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 8]
push eax
push 0
push 0x434
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push dword [0x4538c8]
call fcn.00415e92
mov al, byte [eax]
or al, al
je 0x442767
push 0x100
push 0x46b93a
push 0x45fb1e
call sub.kernel32.dll_lstrcpynA
push 0x467936
push 0x46b93a
call fcn.0041086c
or eax, eax
je 0x4426ef
push dword [ebp - 8]
push dword [ebp - 0xc]
call fcn.004149c1
push 0x808
push dword [0x4538c8]
call fcn.004135da
jmp 0x442767
mov edx, dword [0x44f34d]
lea edx, [edx + 0x2e]
push edx
movzx eax, byte [edx]
push eax
mov byte [edx], 1
lea eax, [ebp - 8]
push eax
push 0
push 0x434
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push dword [0x4538c8]
call fcn.00415e92
push 0x100
push 0x46b93a
push 0x45fb1e
call sub.kernel32.dll_lstrcpynA
push 0x467936
push 0x46b93a
call fcn.0041086c
or eax, eax
je 0x442763
push dword [ebp - 8]
push dword [ebp - 0xc]
call fcn.004149c1
push 0x808
push dword [0x4538c8]
call fcn.004135da
pop eax
pop edx
mov byte [edx], al
jmp 0x44306d
cmp eax, 0xa08f
jne 0x4427dd
push dword [0x46000e]
call sub.user32.dll_IsWindow
or eax, eax
je 0x4427d3
mov eax, dword [0x46000e]
or eax, eax
je 0x4427d3
push eax
call sub.user32.dll_GetParent
push eax
call fcn.00413612
push dword [0x4538c8]
call sub.user32.dll_SetFocus
mov eax, dword [0x460012]
mov dword [ebp - 8], eax
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 0
push 0x437
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push 0x808
push dword [0x4538c8]
call fcn.004135da
call fcn.004149f5
jmp 0x44306d
cmp eax, 0xa08d
jne 0x442857
cmp dword [0x4538c8], 0
je 0x44306d
push dword [0x4538c8]
call fcn.00415e92
push 0x100
push 0x46b93a
push 0x45fb1e
call sub.kernel32.dll_lstrcpynA
cmp dword [0x4538d0], 0
jne 0x442832
push 0
push 0x411f1f
push dword [ebp + 8]
push 0x66
push dword [0x453904]
call fcn.004019db
jmp 0x442852
push 0x45fb1e
push 0x3e9
push dword [0x4538d0]
call sub.user32.dll_SetDlgItemTextA
push dword [0x4538d0]
call sub.user32.dll_SetFocus
jmp 0x44306d
cmp eax, 0xa03c
jne 0x442933
cmp dword [0x4538c8], 0
je 0x44306d
push dword [0x4538c8]
call fcn.00415e92
push 0x100
push 0x46b93a
push 0x45fb1e
call sub.kernel32.dll_lstrcpynA
push 0x45fb1e
call fcn.004010ef
or eax, eax
je 0x44292e
push 0x45ff32
push 0
push 0x434
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push dword [0x45ff36]
pop dword [0x45ff32]
mov dword [0x45ff36], 0xffffffff
mov dword [0x45ff3a], 0x45fc1e
mov dword [0x45ff4e], 1
mov dword [0x45ff52], 1
push 0x45ff32
push 7
push 0x44f
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
cmp eax, 0xffffffff
je 0x44292e
push 0x45ff3e
push 0
push 0x437
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push 0x808
push dword [0x4538c8]
call fcn.004135da
jmp 0x44306d
cmp eax, 0xabf7
jne 0x442a03
cmp dword [0x4538c8], 0
je 0x44306d
push dword [0x4538c8]
call fcn.00415e92
push 0x100
push 0x46b93a
push 0x45fb1e
call sub.kernel32.dll_lstrcpynA
push 0x45fb1e
call fcn.004010ef
or eax, eax
je 0x4429fe
push 0x45ff32
push 0
push 0x434
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
mov dword [0x45ff36], 0
mov dword [0x45ff3a], 0x45fc1e
mov dword [0x45ff4e], 1
mov dword [0x45ff52], 1
push 0x45ff32
push 6
push 0x44f
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
cmp eax, 0xffffffff
je 0x4429fe
push 0x45ff3e
push 0
push 0x437
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push 0x808
push dword [0x4538c8]
call fcn.004135da
jmp 0x44306d
cmp eax, 0xa090
jne 0x442a16
push 1
call fcn.0041400c
jmp 0x44306d
cmp eax, 0xa091
jne 0x442a29
push 0xffffffffffffffff
call fcn.00413eae
jmp 0x44306d
cmp eax, 0xa092
jne 0x442a3c
push 1
call fcn.00413eae
jmp 0x44306d
cmp eax, 0xa093
jne 0x442a54
call fcn.00414237
push 0xf
call fcn.00449209
jmp 0x44306d
cmp eax, 0xa154
jb 0x442a75
cmp eax, 0xa15d
ja 0x442a75
sub eax, 0xa154
or eax, 0x30
push eax
call fcn.0041443f
jmp 0x44306d
cmp eax, 0xa035
jne 0x442a86
call fcn.004141fb
jmp 0x44306d
cmp eax, 0xa036
jne 0x442a9e
call fcn.0041420a
push 0xf
call fcn.00449209
jmp 0x44306d
cmp eax, 0xa037
jne 0x442ac4
push 0
push 0x41291a
push dword [ebp + 8]
push 0xed8
push dword [0x453904]
call fcn.004019a1
jmp 0x44306d
cmp eax, 0xa038
jne 0x442b6a
mov eax, dword [0x46009e]
and eax, 0x1f
mov ebx, 0x460e2e
lea eax, [eax + eax*2]
lea ebx, [ebx + eax*4]
mov eax, dword [ebx]
or eax, eax
jne 0x442aef
mov dword [0x46009e], eax
jmp 0x442acf
cmp eax, 0
jge 0x442aff
and eax, 0x3ff
push eax
call fcn.00413e5a
push eax
call sub.user32.dll_GetParent
push eax
call fcn.00413612
mov eax, dword [ebx + 4]
push 0
push eax
push 0xbb
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
mov dword [ebp - 8], eax
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 0
push 0x437
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push 0x808
push dword [0x4538c8]
call fcn.004135da
push dword [0x4538c8]
call sub.user32.dll_SetFocus
inc dword [0x46009e]
and dword [0x46009e], 0x1f
jmp 0x44306d
cmp eax, 0xa039
jne 0x442b7b
call fcn.00414330
jmp 0x44306d
cmp eax, 0xa1b9
jb 0x442b99
cmp eax, 0xa1c2
ja 0x442b99
sub eax, 0xa1b9
push eax
call fcn.004367a2
jmp 0x44306d
cmp eax, 0xabef
jne 0x442bcf
push 0
push 0
push 0x81f
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
xor eax, 1
push 0
push eax
push 0x820
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
jmp 0x44306d
cmp eax, 0xabf4
jne 0x442bf5
push 0
push 0x43d60c
push dword [ebp + 8]
push 0x1450
push dword [0x453904]
call fcn.004019a1
jmp 0x44306d
cmp eax, 0xa03a
jne 0x442e48
call sub.user32.dll_GetFocus
cmp eax, dword [0x453910]
jne 0x442c3e
cmp dword [0x470962], 0
je 0x442c25
push 0
push dword [0x453910]
call fcn.0042b6f6
jmp 0x442c32
push 0
push dword [0x453910]
call fcn.0042b749
xor dword [0x470962], 1
jmp 0x44306d
cmp dword [0x4538c8], 0
je 0x44306d
lea eax, [ebp - 8]
push eax
push 0
push 0x434
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push 0
push dword [ebp - 8]
push 0xc9
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
mov ebx, eax
mov dword [ebp - 0xc], eax
push 0
push ebx
push 0x7f0
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
or eax, eax
jne 0x442d2d
inc ebx
push 0
push ebx
push 0x7ff
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
or eax, eax
je 0x442d2a
jmp 0x442cc4
inc ebx
push 0
push ebx
push 0x7ff
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
or eax, eax
jne 0x442cb0
dec ebx
jmp 0x442d0c
push 0
push ebx
push 0x7f0
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
cmp eax, 2
jne 0x442cf8
push 0
push ebx
push 0x7fa
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
jmp 0x442d0b
push 0
push ebx
push 0x7fe
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
dec ebx
cmp ebx, dword [ebp - 0xc]
jne 0x442ccb
push 0
push 0
push 0x809
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
jmp 0x44306d
mov ebx, dword [ebp - 0xc]
push 0
push ebx
push 0x7ff
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
or eax, eax
je 0x442d4b
or ebx, ebx
je 0x442d4b
dec ebx
jmp 0x442d2d
push 0
push ebx
push 0x7f0
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
or eax, eax
jne 0x442d69
or ebx, ebx
je 0x442d69
dec ebx
jmp 0x442d2d
cmp eax, 1
jne 0x442d8b
push 0
push ebx
push 0x7f8
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
call fcn.00443073
jmp 0x442e43
cmp eax, 2
jne 0x442db0
push 0
push ebx
push 0x7fa
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
mov ebx, dword [ebp - 0xc]
call fcn.00443073
jmp 0x442e43
cmp eax, 8
jne 0x442dfc
push 0
push ebx
push 0x7fa
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
or eax, eax
je 0x442e43
push eax
push 9
push ebx
push 0x7ef
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
pop eax
neg eax
push eax
push ebx
push 0x814
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
call fcn.00443073
jmp 0x442e43
cmp eax, 9
jne 0x442e43
push 0
push ebx
push 0x815
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push eax
push 0
push ebx
push 0x7ef
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
pop eax
neg eax
inc eax
push eax
push ebx
push 0x817
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
call fcn.00443073
jmp 0x44306d
cmp eax, 0xa801
jne 0x442e59
call fcn.00413342
jmp 0x44306d
cmp eax, 0xa03b
jne 0x443069
lea eax, [ebp - 8]
push eax
push 0
push 0x434
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push dword [ebp - 8]
push 0
push 0x436
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
push eax
mov word [0x467936], 0x3fff
push 0x467936
push eax
push 0xc4
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
mov byte [eax + 0x467936], 0
pop eax
push 0
push eax
push 0xbb
push dword [0x4538c8]
call sub.user32.dll_SendMessageA
sub eax, dword [ebp - 8]
neg eax
jmp 0x442ed2
inc eax
cmp byte [eax + 0x467936], 0x20
je 0x442eff
cmp byte [eax + 0x467936], 9
je 0x442eff
cmp byte [eax + 0x467936], 0x27
je 0x442eff
cmp byte [eax + 0x467936], 0x22
je 0x442eff
cmp byte [eax + 0x467936], 0
jne 0x442ed1
cmp byte [eax + 0x467936], 0x27
je 0x442f11
cmp byte [eax + 0x467936], 0x22
jne 0x442f12
inc eax
mov byte [eax + 0x467936], 0
mov byte [0x46b93a], 0
or eax, eax
je 0x442fd1
dec eax
jmp 0x442f33
mov byte [eax + 0x467936], 0
dec eax
or eax, eax
je 0x442f49
cmp byte [eax + 0x467936], 0x20
je 0x442f2b
cmp byte [eax + 0x467936], 9
je 0x442f2b
or eax, eax
je 0x442fd1
mov dl, byte [eax + 0x467936]
cmp dl, 0x22
je 0x442f61
cmp dl, 0x27
jne 0x442f94
mov byte [eax + 0x467936], 0
dec eax
jmp 0x442f6c
dec eax
or eax, eax
je 0x442f78
cmp dl, byte [eax + 0x467936]
jne 0x442f6b
cmp dl, byte [eax + 0x467936]
jne 0x442f81
inc eax
lea eax, [eax + 0x467936]
push eax
push 0x46b93a
call fcn.004010a7
jmp 0x442fd1
jmp 0x442f97
dec eax
or eax, eax
je 0x442fad
cmp byte [eax + 0x467936], 0x20
je 0x442fad
cmp byte [eax + 0x467936], 9
jne 0x442f96
cmp byte [eax + 0x467936], 0x20
je 0x442fbf
cmp byte [eax + 0x467936], 9
jne 0x442fc0
inc eax
lea eax, [eax + 0x467936]
push eax
push 0x46b93a
call fcn.004010a7
cmp byte [0x46b93a], 0
je 0x44306d
push 0x46b93a
call sub.kernel32.dll_GetFileAttributesA
cmp eax, 0xffffffff
je 0x44300c
lea eax, [ebp - 0xc]
push eax
push 0x45cf22
push 0x104
push 0x46b93a
call sub.kernel32.dll_GetFullPathNameA
call fcn.004154b0
jmp 0x44306d
push 0x45d846
push 0x467936
call fcn.004010a7
push 0x44ef92
push 0x467936
call fcn.004010c5
push 0x46b93a
push 0x467936
call fcn.004010c5
push 0x467936
call sub.kernel32.dll_GetFileAttributesA
cmp eax, 0xffffffff
je 0x443067
lea eax, [ebp - 0xc]
push eax
push 0x45cf22
push 0x104
push 0x467936
call sub.kernel32.dll_GetFullPathNameA
call fcn.004154b0
jmp 0x44306d
jmp 0x44306d
leave
ret 4
xor eax, eax
leave
ret 4