Function at 0x4e29b0
Capabilities:
Check if file exists
Create directory
Delete file
Move file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fad63
mov eax, dword fs:[0]
push eax
mov eax, 0x4384
call fcn.004bb400
mov eax, dword [0x544af0]
xor eax, ebp
mov dword [ebp - 0x74], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 1
call fcn.004041b0
mov dword [ebp - 0x40b4], eax
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x40b8], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x40b0], fcn.00418510
mov dword [ebp - 0x40ac], fcn.00418530
mov dword [ebp - 0x40a8], fcn.00418510
mov dword [ebp - 0x40a4], fcn.00418530
lea ecx, [ebp + 8]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
lea eax, [ebp - 0x4098]
push eax
call fcn.00418580
add esp, 8
test eax, eax
je 0x4e2aaa
mov dword [ebp - 0x42b0], str.Can_not_open_input_file
lea ecx, [ebp - 0x42b0]
push ecx
lea ecx, [ebp - 0x42ac]
call fcn.004b645c
push 0x525c54
lea edx, [ebp - 0x42ac]
push edx
call fcn.004bbab3
mov dword [ebp - 0x42b4], 1
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.004079a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004079a0
mov eax, dword [ebp - 0x42b4]
jmp 0x4e36d4
lea eax, [ebp - 0x40a0]
push eax
call fcn.004187d0
add esp, 4
push 0
lea ecx, [ebp - 0x4094]
push ecx
call fcn.004189e0
add esp, 8
lea edx, [ebp - 0x40a0]
mov dword [ebp - 0x4084], edx
lea eax, [ebp - 0x4094]
push eax
call fcn.00418a10
add esp, 4
call fcn.00418a40
lea ecx, [ebp - 0x64]
push ecx
call fcn.00418db0
add esp, 4
lea edx, [ebp - 0x40a8]
push edx
lea eax, [ebp - 0x40b0]
push eax
lea ecx, [ebp - 0x4094]
push ecx
lea edx, [ebp - 0x64]
push edx
call fcn.0041ae10
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x4e3447
cmp dword [ebp - 0x14], 0
jne 0x4e3447
mov dword [ebp - 0x40c8], 0xffffffff
mov dword [ebp - 0x40c4], 0
mov dword [ebp - 0x40cc], 0
mov dword [ebp - 0x40c0], 0
jmp 0x4e2b67
mov eax, dword [ebp - 0x40c0]
add eax, 1
mov dword [ebp - 0x40c0], eax
mov ecx, dword [ebp - 0x40c0]
cmp ecx, dword [ebp - 0x48]
jae 0x4e3430
mov dword [ebp - 0x40dc], 0
mov dword [ebp - 0x40ec], 0
mov dword [ebp - 0x40e8], 0
mov edx, dword [ebp - 0x40c0]
shl edx, 5
add edx, dword [ebp - 0x54]
mov dword [ebp - 0x40d8], edx
push 0
mov eax, dword [ebp - 0x40c0]
push eax
lea ecx, [ebp - 0x64]
push ecx
call fcn.0041a220
add esp, 0xc
mov dword [ebp - 0x40e4], eax
mov edx, dword [ebp - 0x40e4]
cmp edx, dword [ebp - 0x40b8]
jbe 0x4e2c11
mov eax, dword [ebp - 0x6c]
push eax
push 0
call fcn.00418530
add esp, 8
mov ecx, dword [ebp - 0x40e4]
mov dword [ebp - 0x40b8], ecx
mov edx, dword [ebp - 0x40b8]
shl edx, 1
push edx
push 0
call fcn.00418510
add esp, 8
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jne 0x4e2c11
mov dword [ebp - 0x14], 2
jmp 0x4e3430
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x40c0]
push ecx
lea edx, [ebp - 0x64]
push edx
call fcn.0041a220
add esp, 0xc
cmp dword [ebp - 0x14], 0
je 0x4e2c33
jmp 0x4e3430
mov eax, dword [ebp - 0x40d8]
movzx ecx, byte [eax + 0x19]
test ecx, ecx
jne 0x4e2c9a
lea edx, [ebp - 0x40a8]
push edx
lea eax, [ebp - 0x40b0]
push eax
lea ecx, [ebp - 0x40e8]
push ecx
lea edx, [ebp - 0x40ec]
push edx
lea eax, [ebp - 0x40cc]
push eax
lea ecx, [ebp - 0x40c4]
push ecx
lea edx, [ebp - 0x40c8]
push edx
mov eax, dword [ebp - 0x40c0]
push eax
lea ecx, [ebp - 0x4094]
push ecx
lea edx, [ebp - 0x64]
push edx
call fcn.0041ae50
add esp, 0x28
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4e2c9a
jmp 0x4e3430
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x40e0], eax
mov ecx, dword [ebp - 0x40e0]
mov dword [ebp - 0x40d4], ecx
mov dword [ebp - 0x40f4], 0
jmp 0x4e2cca
mov edx, dword [ebp - 0x40f4]
add edx, 1
mov dword [ebp - 0x40f4], edx
mov eax, dword [ebp - 0x40f4]
mov ecx, dword [ebp - 0x40e0]
movzx edx, word [ecx + eax*2]
test edx, edx
je 0x4e2d2b
mov eax, dword [ebp - 0x40f4]
mov ecx, dword [ebp - 0x40e0]
movzx edx, word [ecx + eax*2]
cmp edx, 0x2f
jne 0x4e2d29
xor eax, eax
mov ecx, dword [ebp - 0x40f4]
mov edx, dword [ebp - 0x40e0]
mov word [edx + ecx*2], ax
push 0
mov eax, dword [ebp - 0x40e0]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov ecx, 0x5c
mov edx, dword [ebp - 0x40f4]
mov eax, dword [ebp - 0x40e0]
mov word [eax + edx*2], cx
jmp 0x4e2cbb
mov ecx, dword [ebp - 0x40d8]
movzx edx, byte [ecx + 0x19]
test edx, edx
je 0x4e2d52
push 0
mov eax, dword [ebp - 0x40d4]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
jmp 0x4e2b58
mov ecx, dword [ebp - 0x40d4]
push ecx
lea edx, [ebp - 0x40d0]
push edx
call fcn.004185a0
add esp, 8
test eax, eax
je 0x4e3346
lea ecx, [ebp - 0x4100]
call fcn.004032e0
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x40d4]
push eax
lea ecx, [ebp - 0x4104]
call fcn.00403ca0
mov byte [ebp - 4], 3
cmp dword [ebp - 0x40dc], 0
jne 0x4e2ffd
mov dword [ebp - 0x40dc], 1
mov dword [ebp - 0x4108], 1
jmp 0x4e2dc7
mov ecx, dword [ebp - 0x4108]
add ecx, 1
mov dword [ebp - 0x4108], ecx
cmp dword [ebp - 0x4108], 0xa
jg 0x4e2e3d
lea ecx, [ebp - 0x410c]
call fcn.004032e0
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x4108]
push edx
mov eax, dword [ebp - 0x4104]
push eax
push 0x50ffd0
lea ecx, [ebp - 0x410c]
push ecx
call fcn.00404050
add esp, 0x10
lea ecx, [ebp - 0x410c]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4e2e29
lea ecx, [ebp - 0x410c]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x410c]
call fcn.004079a0
jmp 0x4e2db8
mov dword [ebp - 0x4110], 1
jmp 0x4e2e58
mov edx, dword [ebp - 0x4110]
add edx, 1
mov dword [ebp - 0x4110], edx
cmp dword [ebp - 0x4110], 0xa
jg 0x4e2ffd
lea ecx, [ebp - 0x4118]
call fcn.004032e0
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x4110]
push eax
mov ecx, dword [ebp - 0x4104]
push ecx
push 0x50ffe4
lea edx, [ebp - 0x4118]
push edx
call fcn.00404050
add esp, 0x10
lea ecx, [ebp - 0x4118]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
lea ecx, [ebp - 0x4104]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov dword [ebp - 0x4114], eax
cmp dword [ebp - 0x4114], 0
je 0x4e2fe9
lea eax, [ebp - 0x4104]
push eax
push str.Try_rename_file:
lea ecx, [ebp - 0x42bc]
push ecx
call fcn.00404b90
add esp, 0xc
mov dword [ebp - 0x4350], eax
mov edx, dword [ebp - 0x4350]
mov dword [ebp - 0x4354], edx
mov byte [ebp - 4], 6
push str._to:
mov eax, dword [ebp - 0x4354]
push eax
lea ecx, [ebp - 0x42c0]
push ecx
call fcn.00404ae0
add esp, 0xc
mov dword [ebp - 0x4358], eax
mov edx, dword [ebp - 0x4358]
mov dword [ebp - 0x435c], edx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x4118]
push eax
mov ecx, dword [ebp - 0x435c]
push ecx
lea edx, [ebp - 0x42c4]
push edx
call fcn.00407360
add esp, 0xc
mov dword [ebp - 0x4360], eax
mov eax, dword [ebp - 0x4360]
mov dword [ebp - 0x4364], eax
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
mov dword [ebp - 0x42b8], esp
push str._successful__n
mov edx, dword [ebp - 0x4364]
push edx
push ecx
call fcn.00404ae0
add esp, 0xc
mov dword [ebp - 0x4368], eax
mov ecx, 0x549cf8
call fcn.004eb140
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x42c4]
call fcn.004079a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x42c0]
call fcn.004079a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x42bc]
call fcn.004079a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4118]
call fcn.004079a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4104]
call fcn.004079a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4100]
call fcn.004079a0
jmp 0x4e2b76
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4118]
call fcn.004079a0
jmp 0x4e2e49
cmp dword [ebp - 0x10], 0
jne 0x4e306f
mov dword [ebp - 0x10], 1
lea ecx, [ebp - 0x41d4]
call fcn.004f42b0
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x42c8], esp
push 0x510048
call fcn.00403ca0
mov dword [ebp - 0x436c], eax
lea ecx, [ebp - 0x41d4]
call fcn.004f41b0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41d4]
call fcn.004f4190
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4104]
call fcn.004079a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4100]
call fcn.004079a0
jmp 0x4e2b76
mov dword [ebp - 0x40fc], 0xb
cmp dword [0x549e08], 0
jne 0x4e3138
push 0
push str..ocx
lea ecx, [ebp - 0x4100]
call fcn.00404850
cmp eax, 0xffffffff
jne 0x4e30cb
push 0
push str..OCX
lea ecx, [ebp - 0x4100]
call fcn.00404850
cmp eax, 0xffffffff
jne 0x4e30cb
push 0
push 0x510444
lea ecx, [ebp - 0x4100]
call fcn.00404850
cmp eax, 0xffffffff
je 0x4e30ef
mov eax, dword [ebp - 0x40d4]
push eax
mov ecx, dword [0x549d9c]
push ecx
push 0x510460
lea edx, [ebp - 0x4100]
push edx
call fcn.00404050
add esp, 0x10
jmp 0x4e3111
mov eax, dword [ebp - 0x40d4]
push eax
mov ecx, dword [0x549d9c]
push ecx
push 0x5104f0
lea edx, [ebp - 0x4100]
push edx
call fcn.00404050
add esp, 0x10
push 0x45
push 0x51055c
lea ecx, [ebp - 0x4100]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
mov eax, dword [0x549cc8]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x40fc], eax
jmp 0x4e3142
mov dword [ebp - 0x40fc], 2
cmp dword [ebp - 0x40fc], 0xb
jne 0x4e31b2
mov ecx, dword [ebp - 0x40c0]
add ecx, 1
cmp ecx, dword [ebp - 0x48]
jae 0x4e318d
mov edx, dword [ebp - 0x40c0]
add edx, 1
mov dword [ebp - 0x40c0], edx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4104]
call fcn.004079a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4100]
call fcn.004079a0
jmp 0x4e2b76
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4104]
call fcn.004079a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4100]
call fcn.004079a0
jmp 0x4e3430
cmp dword [ebp - 0x40fc], 0xa
je 0x4e31c4
cmp dword [ebp - 0x40fc], 4
jne 0x4e3229
lea ecx, [ebp - 0x428c]
call fcn.004f42b0
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x42cc], esp
push str.KillAllExe_QiyiClient.exe_QyClient.exe___INSTALL_QiyiAcc.exe_QiyiPlayer.exe_QyPlayer.exe___INSTALL_QiyiKernel.exe_QyKernel.exe___KERNELOLDQiyiKernelApp_QyKernel.exe___INSTALLCommon_QiyiMediaCenter.exe_QiyiUpdate.exe_QiyiService.exe_DeskTip.exe_QiyiFragment.exe_QyFragment.exe___INSTALL_QYFollowVideo.exe_PPStream.exe___INSTALL_PPSKernel.exe___INSTALL_AndroidService.exe___INSTALLMobile_DriverInstallX32.exe___INSTALLMobile_DriverInstallX64.exe___INSTALLMobile_HCDNClient.exe___INSTALLCommon1300
call fcn.00403ca0
mov dword [ebp - 0x4370], eax
lea ecx, [ebp - 0x428c]
call fcn.004f41b0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x428c]
call fcn.004f4190
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4104]
call fcn.004079a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4100]
call fcn.004079a0
jmp 0x4e2b76
lea ecx, [ebp - 0x40f8]
call fcn.004032e0
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x40d4]
push eax
mov ecx, dword [0x549d9c]
push ecx
push str.Can_not_open_output_file_:__s_s
lea edx, [ebp - 0x40f8]
push edx
call fcn.00404050
add esp, 0x10
lea ecx, [ebp - 0x40f8]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x4e327a
mov dword [ebp - 0x4374], 0
jmp 0x4e32de
mov eax, dword [ebp - 0x70]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x3fffffff
jle 0x4e329f
mov dword [ebp - 0x4378], 0
jmp 0x4e32d2
mov eax, dword [ebp - 0x68]
shl eax, 1
call fcn.004bc060
mov dword [ebp - 0x437c], esp
mov ecx, dword [ebp - 0x40b4]
push ecx
mov edx, dword [ebp - 0x68]
shl edx, 1
push edx
mov eax, dword [ebp - 0x70]
push eax
mov ecx, dword [ebp - 0x437c]
push ecx
call fcn.004081e0
mov dword [ebp - 0x4378], eax
mov edx, dword [ebp - 0x4378]
mov dword [ebp - 0x4374], edx
mov eax, dword [ebp - 0x4374]
mov dword [ebp - 0x42dc], eax
lea ecx, [ebp - 0x42dc]
push ecx
lea ecx, [ebp - 0x42d8]
call fcn.004b645c
push 0x525c54
lea edx, [ebp - 0x42d8]
push edx
call fcn.004bbab3
mov dword [ebp - 0x14], 0xb
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40f8]
call fcn.004079a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4104]
call fcn.004079a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4100]
call fcn.004079a0
jmp 0x4e3430
mov eax, dword [ebp - 0x40e8]
mov dword [ebp - 0x40f0], eax
lea ecx, [ebp - 0x40f0]
push ecx
mov edx, dword [ebp - 0x40c4]
add edx, dword [ebp - 0x40ec]
push edx
lea eax, [ebp - 0x40d0]
push eax
call fcn.00418670
add esp, 0xc
test eax, eax
jne 0x4e3387
mov ecx, dword [ebp - 0x40f0]
cmp ecx, dword [ebp - 0x40e8]
je 0x4e33bd
mov dword [ebp - 0x42ec], str.Can_not_write_output_file__Decode7z
lea edx, [ebp - 0x42ec]
push edx
lea ecx, [ebp - 0x42e8]
call fcn.004b645c
push 0x525c54
lea eax, [ebp - 0x42e8]
push eax
call fcn.004bbab3
mov dword [ebp - 0x14], 0xb
jmp 0x4e3430
lea ecx, [ebp - 0x40d0]
push ecx
call fcn.004185c0
add esp, 4
test eax, eax
je 0x4e3406
mov dword [ebp - 0x42fc], str.Can_not_close_output_file__Decode7z
lea edx, [ebp - 0x42fc]
push edx
lea ecx, [ebp - 0x42f8]
call fcn.004b645c
push 0x525c54
lea eax, [ebp - 0x42f8]
push eax
call fcn.004bbab3
mov dword [ebp - 0x14], 0xb
jmp 0x4e3430
mov ecx, dword [ebp - 0x40d8]
movzx edx, byte [ecx + 0x1d]
test edx, edx
je 0x4e342b
mov eax, dword [ebp - 0x40d8]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [ebp - 0x40d4]
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
jmp 0x4e2b58
mov eax, dword [ebp - 0x40c4]
push eax
lea ecx, [ebp - 0x40b0]
push ecx
call dword [ebp - 0x40ac]
add esp, 8
lea edx, [ebp - 0x40b0]
push edx
lea eax, [ebp - 0x64]
push eax
call fcn.00418de0
add esp, 8
mov ecx, dword [ebp - 0x6c]
push ecx
push 0
call fcn.00418530
add esp, 8
lea edx, [ebp - 0x4098]
push edx
call fcn.004185c0
add esp, 4
cmp dword [ebp - 0x14], 0
jne 0x4e34d0
push ecx
mov ecx, esp
mov dword [ebp - 0x4300], esp
push str.Everything_is_Ok__Decode7z
call fcn.00403ca0
mov dword [ebp - 0x4380], eax
mov ecx, 0x549cf8
call fcn.004eb140
mov dword [ebp - 0x4304], 0
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.004079a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004079a0
mov eax, dword [ebp - 0x4304]
jmp 0x4e36d4
cmp dword [ebp - 0x14], 4
jne 0x4e3508
mov dword [ebp - 0x4314], str.Decoder_doesnt_support_this_archive__Decode7z
lea eax, [ebp - 0x4314]
push eax
lea ecx, [ebp - 0x4310]
call fcn.004b645c
push 0x525c54
lea ecx, [ebp - 0x4310]
push ecx
call fcn.004bbab3
jmp 0x4e36a9
cmp dword [ebp - 0x14], 2
jne 0x4e3540
mov dword [ebp - 0x4324], str.Can_not_allocate_memory__Decode7z
lea edx, [ebp - 0x4324]
push edx
lea ecx, [ebp - 0x4320]
call fcn.004b645c
push 0x525c54
lea eax, [ebp - 0x4320]
push eax
call fcn.004bbab3
jmp 0x4e36a9
cmp dword [ebp - 0x14], 3
jne 0x4e3578
mov dword [ebp - 0x4334], str.CRC_error__Decode7z
lea ecx, [ebp - 0x4334]
push ecx
lea ecx, [ebp - 0x4330]
call fcn.004b645c
push 0x525c54
lea edx, [ebp - 0x4330]
push edx
call fcn.004bbab3
jmp 0x4e36a9
lea ecx, [ebp - 0x42a0]
call fcn.004032e0
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x14]
push eax
push str.Decode7z_Failed_Erorr_Code__d
lea ecx, [ebp - 0x42a0]
push ecx
call fcn.00404050
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x4338], esp
lea edx, [ebp - 0x42a0]
push edx
call fcn.00402580
mov dword [ebp - 0x4384], eax
mov ecx, 0x549cf8
call fcn.004eb140
call fcn.004041b0
mov dword [ebp - 0x4298], eax
lea ecx, [ebp - 0x42a0]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
mov dword [ebp - 0x4294], eax
cmp dword [ebp - 0x4294], 0
jne 0x4e35f5
mov dword [ebp - 0x4388], 0
jmp 0x4e366b
mov eax, dword [ebp - 0x4294]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [ebp - 0x4290], eax
cmp dword [ebp - 0x4290], 0x3fffffff
jle 0x4e3623
mov dword [ebp - 0x438c], 0
jmp 0x4e365f
mov eax, dword [ebp - 0x4290]
shl eax, 1
call fcn.004bc060
mov dword [ebp - 0x4390], esp
mov ecx, dword [ebp - 0x4298]
push ecx
mov edx, dword [ebp - 0x4290]
shl edx, 1
push edx
mov eax, dword [ebp - 0x4294]
push eax
mov ecx, dword [ebp - 0x4390]
push ecx
call fcn.004081e0
mov dword [ebp - 0x438c], eax
mov edx, dword [ebp - 0x438c]
mov dword [ebp - 0x4388], edx
mov eax, dword [ebp - 0x4388]
mov dword [ebp - 0x4348], eax
lea ecx, [ebp - 0x4348]
push ecx
lea ecx, [ebp - 0x4344]
call fcn.004b645c
push 0x525c54
lea edx, [ebp - 0x4344]
push edx
call fcn.004bbab3
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x42a0]
call fcn.004079a0
mov dword [ebp - 0x434c], 1
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.004079a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004079a0
mov eax, dword [ebp - 0x434c]
lea esp, [ebp - 0x4394]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x74]
xor ecx, ebp
call fcn.004b5e12
mov esp, ebp
pop ebp
ret