Function at 0x421ee0
Capabilities:
Accept command line arguments
Check mutex on windows
Contain obfuscated stackstrings
Create mailslot
Delete file
Extract resource via kernel32 functions
Get comspec environment variable
Get file system object information
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1050
call fcn.00408cc0
mov eax, dword [0x4372a0]
xor eax, ebp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x914], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x910], 0
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x908], 0
xor eax, eax
mov word [ebp - 0x498], ax
push 0x45e
push 0
lea ecx, [ebp - 0x496]
push ecx
call fcn.004025c0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x8f8], dx
push 0x45e
push 0
lea eax, [ebp - 0x8f6]
push eax
call fcn.004025c0
add esp, 0xc
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0xb1e]
call fcn.00401000
lea ecx, [ebp - 0xb1d]
call fcn.00401000
mov dword [ebp - 0x14], str.ErrorInfo.log
lea ecx, [ebp - 0x8f8]
mov dword [ebp - 0xb1c], ecx
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0xc]
push edx
call fcn.0040e470
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea eax, [ebp - 0xb1e]
push eax
call fcn.00424490
mov byte [ebp - 0xb2c], 0x4d
mov byte [ebp - 0xb2b], 0x69
mov byte [ebp - 0xb2a], 0x63
mov byte [ebp - 0xb29], 0x72
mov ecx, dword [ebp - 0xb2c]
mov dword [0x437f5c], ecx
mov byte [ebp - 0xb2c], 0x6f
mov byte [ebp - 0xb2b], 0x73
mov byte [ebp - 0xb2a], 0x6f
mov byte [ebp - 0xb29], 0x66
mov edx, dword [ebp - 0xb2c]
mov dword [0x437f60], edx
mov byte [ebp - 0xb2c], 0x74
mov byte [ebp - 0xb2b], 0x2e
mov byte [ebp - 0xb2a], 0x4e
mov byte [ebp - 0xb29], 0x45
mov eax, dword [ebp - 0xb2c]
mov dword [0x437f64], eax
lea ecx, [ebp - 0xb2d]
call fcn.00401000
lea ecx, [ebp - 0xb2d]
push ecx
call fcn.00426250
lea ecx, [ebp - 0xb2d]
call fcn.00401880
push str.GlobalFileEventMultexSW
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x450ab4], eax
cmp dword [0x450ab4], 0
jne 0x422092
mov dword [ebp - 0x914], 0x270e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
jmp 0x4233e9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
cmp dword [ebp - 0x910], 0xb7
jne 0x4220c3
mov dword [ebp - 0x914], 0x270d
mov dword [ebp - 0x910], 0
jmp 0x4233e9
mov edx, dword [ebp + 8]
mov dword [0x451354], edx
push 0x118
push 0x451ae0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x904]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0xb24], eax
cmp dword [ebp - 0x904], 2
jle 0x422299
mov dword [ebp - 0xb34], 0xffffffff
lea ecx, [ebp - 0x498]
mov dword [ebp - 0xb3c], ecx
mov dword [ebp - 0xb38], 0
lea ecx, [ebp - 0xb3d]
call fcn.00401000
mov dword [ebp - 0x914], 0x270f
mov dword [ebp - 0x8fc], 0
jmp 0x422155
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x8fc]
movzx ecx, word [eax*2 + 0x451ae0]
test ecx, ecx
je 0x4221a2
mov edx, dword [ebp - 0x8fc]
movzx eax, word [edx*2 + 0x451ae0]
cmp eax, 0x5c
je 0x42218d
mov ecx, dword [ebp - 0x8fc]
movzx edx, word [ecx*2 + 0x451ae0]
cmp edx, 0x2f
jne 0x4221a0
mov eax, dword [ebp - 0x8fc]
lea ecx, [eax*2 + 0x451ae0]
mov dword [ebp - 0xb38], ecx
jmp 0x422146
cmp dword [ebp - 0xb38], 0
je 0x4221c5
xor edx, edx
mov eax, dword [ebp - 0xb38]
mov word [eax], dx
mov ecx, dword [ebp - 0xb38]
add ecx, 2
mov dword [0x437f58], ecx
mov edx, dword [ebp - 0xb3c]
push edx
mov eax, dword [ebp - 0xb24]
mov ecx, dword [eax + 4]
movzx edx, word [ecx]
sub edx, 0x30
push edx
lea eax, [ebp - 0xb3d]
push eax
call fcn.00425930
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xb34]
push ecx
mov edx, dword [ebp - 0xb3c]
push edx
lea eax, [ebp - 0xb3d]
push eax
call fcn.00424820
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0xb34]
push edx
push str._____d___d__r_n
mov eax, dword [ebp - 0xb3c]
add eax, 0x27
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x10
push 0x4321d8
mov ecx, dword [ebp - 0xb3c]
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push str.wiatrcvw.txt
push 0x451ae0
push 0x432200
lea edx, [ebp - 0x8f8]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0xb3c]
push eax
mov ecx, dword [ebp - 0xb3c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0x8f8]
push edx
call fcn.00401510
add esp, 0xc
lea ecx, [ebp - 0xb3d]
call fcn.00401880
jmp 0x4233e9
lea ecx, [ebp - 0xb25]
call fcn.00401000
lea ecx, [ebp - 0xb26]
call fcn.00401000
lea eax, [ebp - 0xb25]
push eax
call fcn.004246b0
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xb26]
push ecx
call fcn.00427a20
lea edx, [ebp - 0xb1e]
push edx
call fcn.00424460
push 1
push str.HTTP_Parser_Log.txt
call fcn.00423b90
push 0x432234
call fcn.00423a10
add esp, 4
push 0x451ae0
push 0x432238
call fcn.00423a10
add esp, 8
mov eax, dword [ebp - 0xc]
push eax
push str.__tWinMain__________________CodePage_______________________d_
call fcn.00423a10
add esp, 8
mov ecx, dword [ebp - 0x904]
push ecx
push str.__tWinMain__________________Arg_Count______________________d_
call fcn.00423a10
add esp, 8
mov edx, dword [ebp - 4]
push edx
push str.__tWinMain__________________ActUserNameInformation_________d_
call fcn.00423a10
add esp, 8
lea eax, [ebp - 0xb25]
push eax
call fcn.00424800
push eax
push str.__tWinMain__________________Logon_UserCount________________d_
call fcn.00423a10
add esp, 8
lea ecx, [ebp - 0xb25]
push ecx
call fcn.00424810
push eax
push str.__tWinMain__________________ActiveUserName_________________s_
call fcn.00423a10
add esp, 8
lea edx, [ebp - 0xb1e]
push edx
call fcn.00424330
push eax
push str.__tWinMain__________________MainGetUserName________________s_
call fcn.00423a10
add esp, 8
push str.__tWinMain__________________Start________
call fcn.00423a10
add esp, 4
lea ecx, [ebp - 0xd60]
call fcn.004242e0
push 1
lea ecx, [ebp - 0xd60]
call fcn.00424000
test eax, eax
je 0x4223cc
lea eax, [ebp - 0xd60]
push eax
call fcn.00414d80
push 1
lea ecx, [ebp - 0xd60]
call fcn.00423f20
jmp 0x4224bd
mov dword [ebp - 0x914], 0x3e2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x14]
push edx
push 0x451ae0
push 0x432638
lea eax, [ebp - 0xb18]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0x910]
push ecx
lea ecx, [ebp - 0xd60]
call fcn.00424210
push eax
movzx edx, word [ebp - 0x1c]
push edx
movzx eax, word [ebp - 0x1e]
push eax
movzx ecx, word [ebp - 0x20]
push ecx
movzx edx, word [ebp - 0x22]
push edx
movzx eax, word [ebp - 0x26]
push eax
movzx ecx, word [ebp - 0x28]
push ecx
push str._d__02d__02d__02d:_02d:_02d__s_Step___d__r_n
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xb1c]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x498]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xb1c]
push edx
mov eax, dword [ebp - 0xb1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xb18]
push ecx
call fcn.00401510
add esp, 0xc
lea ecx, [ebp - 0xd60]
call fcn.00424250
lea ecx, [ebp - 0xb26]
call fcn.00401880
lea ecx, [ebp - 0xb25]
call fcn.00401880
jmp 0x4233e9
lea ecx, [ebp - 0xd60]
call fcn.00424250
push 0x118
lea edx, [ebp - 0x8f8]
push edx
push 0xffffffffffffffff
push str.sysinfoview.xml
push 0
push 1
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0xd64], 0
mov dword [ebp - 0x18], 0x36387828
mov dword [ebp - 0x8fc], 0
jmp 0x422511
mov eax, dword [ebp - 0x8fc]
add eax, 1
mov dword [ebp - 0x8fc], eax
mov ecx, dword [ebp - 0x8fc]
movzx edx, word [ecx*2 + 0x451ae0]
test edx, edx
je 0x42255e
mov eax, dword [ebp - 0x8fc]
movzx ecx, word [eax*2 + 0x451ae0]
cmp ecx, 0x5c
je 0x422549
mov edx, dword [ebp - 0x8fc]
movzx eax, word [edx*2 + 0x451ae0]
cmp eax, 0x2f
jne 0x42255c
mov ecx, dword [ebp - 0x8fc]
lea edx, [ecx*2 + 0x451ae0]
mov dword [ebp - 0xd64], edx
jmp 0x422502
cmp dword [ebp - 0xd64], 0
je 0x422581
xor eax, eax
mov ecx, dword [ebp - 0xd64]
mov word [ecx], ax
mov edx, dword [ebp - 0xd64]
add edx, 2
mov dword [0x437f58], edx
mov eax, dword [0x437f58]
push eax
push 0x4326a8
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x4225bb
mov dword [ebp - 0x914], 0x3df
lea ecx, [ebp - 0xb26]
call fcn.00401880
lea ecx, [ebp - 0xb25]
call fcn.00401880
jmp 0x4233e9
lea ecx, [ebp - 0x8f8]
push ecx
push 0x451ae0
push 0x432644
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0x910]
push eax
lea ecx, [ebp - 0x498]
push ecx
call fcn.004010c0
add esp, 8
test eax, eax
jge 0x42261b
mov dword [ebp - 0x914], 0x3e0
lea ecx, [ebp - 0xb26]
call fcn.00401880
lea ecx, [ebp - 0xb25]
call fcn.00401880
jmp 0x4233e9
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
lea eax, [ebp - 0x498]
push eax
call fcn.00417bc0
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4226c2
cmp dword [ebp - 4], 0xc9
jne 0x42265e
mov dword [ebp - 0x914], 0x3e9
jmp 0x4226a7
cmp dword [ebp - 4], 0xca
jne 0x422673
mov dword [ebp - 0x914], 0x3ea
jmp 0x4226a7
cmp dword [ebp - 4], 0xcb
jne 0x422688
mov dword [ebp - 0x914], 0x3eb
jmp 0x4226a7
cmp dword [ebp - 4], 0x96
jl 0x42269d
mov dword [ebp - 0x914], 0x3ec
jmp 0x4226a7
mov dword [ebp - 0x914], 0x3ed
lea ecx, [ebp - 0xb26]
call fcn.00401880
lea ecx, [ebp - 0xb25]
call fcn.00401880
jmp 0x4233e9
push str.parserchk.txt
push 0x451ae0
push 0x4326e4
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea edx, [ebp - 0x910]
push edx
lea eax, [ebp - 0x498]
push eax
call fcn.004010c0
add esp, 8
test eax, eax
jl 0x422748
mov dword [0x45137c], 1
push str.parsernot.txt
push 0x451ae0
push 0x43270c
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea edx, [ebp - 0x910]
push edx
lea eax, [ebp - 0x498]
push eax
call fcn.004010c0
add esp, 8
test eax, eax
jl 0x422748
mov dword [0x45137c], 2
push 0x451ae0
push str._sHTTP_Parser.chm
push 0x451d10
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x904], 0
jle 0x4227c6
mov dword [ebp - 0x8fc], 0
jmp 0x42278f
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
mov dword [ebp - 0x8fc], ecx
mov edx, dword [ebp - 0x8fc]
cmp edx, dword [ebp - 0x904]
jge 0x4227c6
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [ebp - 0xb24]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 0x8fc]
add eax, 1
push eax
push str.__tWinMain__________________Arg_List_______________________d___s_
call fcn.00423a10
add esp, 0xc
jmp 0x422780
push 0x451ae0
push str.__tWinMain__________________Base_Folder____________________s_
call fcn.00423a10
add esp, 8
mov dword [ebp - 0xd74], 0
mov dword [ebp - 0xd68], 0
mov dword [ebp - 0xd6c], 0
mov dword [ebp - 0xd70], 0
push str.BINTYPE
push 0x12d
mov ecx, dword [0x451354]
push ecx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0xd74], eax
cmp dword [ebp - 0xd74], 0
je 0x4228cc
push 0x460
push 0
lea edx, [ebp - 0x498]
push edx
call fcn.004025c0
add esp, 0xc
cmp dword [ebp - 0xd74], 0
je 0x422860
mov eax, dword [ebp - 0xd74]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0xd68], eax
cmp dword [ebp - 0xd74], 0
je 0x422880
mov edx, dword [ebp - 0xd74]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0xd6c], eax
cmp dword [ebp - 0xd68], 0
je 0x42289c
mov ecx, dword [ebp - 0xd68]
push ecx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0xd70], eax
lea edx, [ebp - 0x498]
push edx
push str.logo.gif
mov eax, dword [ebp - 0xd6c]
push eax
mov ecx, dword [ebp - 0xd70]
push ecx
call fcn.00417af0
lea edx, [ebp - 0x498]
push edx
call fcn.0040dad0
mov dword [0x451358], eax
cmp dword [ebp - 0xd68], 0
je 0x4228e2
mov eax, dword [ebp - 0xd68]
push eax
call dword [sym.imp.KERNEL32.dll_FreeResource]
push 0x451ae0
push str._s_themes_b_good.bmp
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x451ae0
push str._s_themes_b_bad.bmp
lea edx, [ebp - 0x8f8]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x451ae0
push str._s_themes_b_desktop.bmp
lea eax, [ebp - 0xb18]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0x498]
push ecx
call fcn.0040dad0
mov dword [0x45135c], eax
lea edx, [ebp - 0x8f8]
push edx
call fcn.0040dad0
mov dword [0x451360], eax
lea eax, [ebp - 0xb18]
push eax
call fcn.0040dad0
mov dword [0x451364], eax
mov dword [ebp - 0xd78], 0xa00000
push 0
push 0
push 0x878
push str..mailslotparser_manage
call dword [sym.imp.KERNEL32.dll_CreateMailslotW]
mov dword [0x450ac0], eax
cmp dword [0x450ac0], 0xffffffff
jne 0x422a83
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
mov dword [0x450ac0], 0
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x14]
push edx
push 0x451ae0
push 0x432928
lea eax, [ebp - 0xb18]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0x910]
push ecx
push str.Mail_Handle_Create_Error
movzx edx, word [ebp - 0x1c]
push edx
movzx eax, word [ebp - 0x1e]
push eax
movzx ecx, word [ebp - 0x20]
push ecx
movzx edx, word [ebp - 0x22]
push edx
movzx eax, word [ebp - 0x26]
push eax
movzx ecx, word [ebp - 0x28]
push ecx
push 0x432968
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xb1c]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x498]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xb1c]
push edx
mov eax, dword [ebp - 0xb1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xb18]
push ecx
call fcn.00401510
add esp, 0xc
lea ecx, [ebp - 0xb26]
call fcn.00401880
lea ecx, [ebp - 0xb25]
call fcn.00401880
jmp 0x4233e9
push str.PARSER_SHARED_MAPMEMORY
mov edx, dword [ebp - 0xd78]
push edx
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [0x450ac4], eax
cmp dword [0x450ac4], 0
jne 0x422b95
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [ebp - 0x14]
push ecx
push 0x451ae0
push 0x4329e4
lea edx, [ebp - 0xb18]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0x910]
push eax
push 0x4329f0
movzx ecx, word [ebp - 0x1c]
push ecx
movzx edx, word [ebp - 0x1e]
push edx
movzx eax, word [ebp - 0x20]
push eax
movzx ecx, word [ebp - 0x22]
push ecx
movzx edx, word [ebp - 0x26]
push edx
movzx eax, word [ebp - 0x28]
push eax
push 0x432a20
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov edx, dword [ebp - 0xb1c]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x498]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, dword [ebp - 0xb1c]
push ecx
mov edx, dword [ebp - 0xb1c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0xb18]
push eax
call fcn.00401510
add esp, 0xc
lea ecx, [ebp - 0xb26]
call fcn.00401880
lea ecx, [ebp - 0xb25]
call fcn.00401880
jmp 0x4233e9
mov ecx, dword [ebp - 0xd78]
push ecx
push 0
push 0
push 2
mov edx, dword [0x450ac4]
push edx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [0x450acc], eax
cmp dword [0x450acc], 0
jne 0x422ca7
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [ebp - 0x14]
push ecx
push 0x451ae0
push 0x432a6c
lea edx, [ebp - 0xb18]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0x910]
push eax
push str.Map_Handle_Create_Error
movzx ecx, word [ebp - 0x1c]
push ecx
movzx edx, word [ebp - 0x1e]
push edx
movzx eax, word [ebp - 0x20]
push eax
movzx ecx, word [ebp - 0x22]
push ecx
movzx edx, word [ebp - 0x26]
push edx
movzx eax, word [ebp - 0x28]
push eax
push str._d__02d__02d__02d:_02d:_02d__s___d__r_n
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov edx, dword [ebp - 0xb1c]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x498]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, dword [ebp - 0xb1c]
push ecx
mov edx, dword [ebp - 0xb1c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0xb18]
push eax
call fcn.00401510
add esp, 0xc
lea ecx, [ebp - 0xb26]
call fcn.00401880
lea ecx, [ebp - 0xb25]
call fcn.00401880
jmp 0x4233e9
mov ecx, dword [0x450acc]
add ecx, 0x100000
mov dword [0x4521f0], ecx
mov dword [ebp - 0xd80], 8
mov dword [ebp - 0xd7c], 0x3ff
lea edx, [ebp - 0xd80]
push edx
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
lea ecx, [ebp - 0xb26]
call fcn.00401880
lea ecx, [ebp - 0xb25]
call fcn.00401880
push 0x100
push 0x4516b0
push str.COMSPEC
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
jne 0x422d19
push str.cmd.exe
push 0x4516b0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x5460
push 0
push 0x4499c0
call fcn.004025c0
add esp, 0xc
push 0x432b14
push 0x451ae0
push 0x432b30
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0x910]
push ecx
lea edx, [ebp - 0x498]
push edx
call fcn.004010c0
add esp, 8
test eax, eax
jl 0x422d7f
push 0x4499c0
push 0x5460
lea eax, [ebp - 0x498]
push eax
call fcn.004012c0
add esp, 0xc
push 0x437f5c
push str.sysinfoview.xml
call fcn.0040db10
mov dword [0x451368], 1
call fcn.0040dfe0
mov dword [ebp - 0x8fc], 0
jmp 0x422db8
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
mov dword [ebp - 0x8fc], ecx
mov edx, dword [ebp - 0x8fc]
shl edx, 7
movzx eax, word [edx + 0x449740]
test eax, eax
je 0x422deb
mov ecx, dword [ebp - 0x8fc]
shl ecx, 7
add ecx, 0x449740
push ecx
push str.__tWinMain__________________InstBrowser____________________s_
call fcn.00423a10
add esp, 8
jmp 0x422da9
push str._test.html
call fcn.0040db50
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x423005
mov dword [ebp - 0x8fc], 0
jmp 0x422e1d
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + eax*2]
test edx, edx
je 0x422e52
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + eax*2]
cmp edx, 0x5c
jne 0x422e50
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [ebp - 0x30]
lea edx, [ecx + eax*2 + 2]
mov dword [ebp - 0x10], edx
jmp 0x422e0e
cmp dword [ebp - 0x10], 0
jne 0x422e5f
mov dword [ebp - 0x10], 0x432bf0
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x90c], eax
mov dword [0x45136c], 0xffffffff
mov dword [ebp - 0x8fc], 0
jmp 0x422e94
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
mov dword [ebp - 0x8fc], ecx
mov edx, dword [ebp - 0x8fc]
shl edx, 7
movzx eax, word [edx + 0x4494c0]
test eax, eax
je 0x422ede
mov ecx, dword [ebp - 0x90c]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x8fc]
shl eax, 7
add eax, 0x4494c0
push eax
call fcn.00401640
add esp, 0xc
test eax, eax
jne 0x422edc
mov ecx, dword [ebp - 0x8fc]
mov dword [0x45136c], ecx
jmp 0x422ede
jmp 0x422e85
cmp dword [0x45136c], 0xffffffff
jne 0x422f71
mov dword [ebp - 0x10], str.msedge.exe
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x90c], eax
mov dword [0x45136c], 0xffffffff
mov dword [ebp - 0x8fc], 0
jmp 0x422f27
mov eax, dword [ebp - 0x8fc]
add eax, 1
mov dword [ebp - 0x8fc], eax
mov ecx, dword [ebp - 0x8fc]
shl ecx, 7
movzx edx, word [ecx + 0x4494c0]
test edx, edx
je 0x422f71
mov eax, dword [ebp - 0x90c]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x8fc]
shl edx, 7
add edx, 0x4494c0
push edx
call fcn.00401640
add esp, 0xc
test eax, eax
jne 0x422f6f
mov eax, dword [ebp - 0x8fc]
mov dword [0x45136c], eax
jmp 0x422f71
jmp 0x422f18
cmp dword [0x45136c], 0xffffffff
jne 0x423005
mov dword [ebp - 0x10], str.iexplore.exe
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x90c], eax
mov dword [0x45136c], 0xffffffff
mov dword [ebp - 0x8fc], 0
jmp 0x422fba
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x8fc]
shl eax, 7
movzx ecx, word [eax + 0x4494c0]
test ecx, ecx
je 0x423005
mov edx, dword [ebp - 0x90c]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x8fc]
shl ecx, 7
add ecx, 0x4494c0
push ecx
call fcn.00401640
add esp, 0xc
test eax, eax
jne 0x423003
mov edx, dword [ebp - 0x8fc]
mov dword [0x45136c], edx
jmp 0x423005
jmp 0x422fab
mov eax, dword [0x45136c]
shl eax, 7
add eax, 0x4494c0
push eax
mov ecx, dword [0x45136c]
shl ecx, 7
add ecx, 0x449740
push ecx
mov edx, dword [0x45136c]
push edx
push str.__tWinMain__________________DefaultBrowser_________________d___s_:__s_
call fcn.00423a10
add esp, 0x10
push str.parsercommon.data
push 0x451ae0
push 0x432cd4
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0x910]
push ecx
lea edx, [ebp - 0x498]
push edx
call fcn.004010c0
add esp, 8
test eax, eax
jl 0x4230b8
push 0x44ee20
push 0x310
lea eax, [ebp - 0x498]
push eax
call fcn.004012c0
add esp, 0xc
test eax, eax
jl 0x4230b1
mov ecx, dword [0x44ee28]
mov dword [0x45136c], ecx
mov edx, dword [0x44ee2c]
mov dword [0x437f30], edx
mov eax, dword [0x44ee24]
mov dword [0x451370], eax
jmp 0x4230b8
mov byte [0x44ee20], 0
movzx ecx, byte [0x44ee20]
test ecx, ecx
jne 0x423138
mov byte [0x44ee20], 9
mov byte [0x44ee21], 9
mov byte [0x44ee22], 3
mov byte [0x44ee23], 3
mov edx, dword [0x451370]
mov dword [0x44ee24], edx
mov eax, dword [0x45136c]
mov dword [0x44ee28], eax
mov ecx, dword [0x437f30]
mov dword [0x44ee2c], ecx
mov byte [0x44ee30], 0
mov byte [0x44ee31], 0
mov byte [0x44ee32], 0
mov byte [0x44ee34], 0
push 0
push 0x44ee20
push 0x310
lea edx, [ebp - 0x498]
push edx
call fcn.004013d0
add esp, 0x10
push 0
push 0
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [0x452190], eax
cmp dword [0x452190], 0
je 0x4231b8
mov dword [ebp - 0x1040], 0x99
jmp 0x423171
mov eax, dword [ebp - 0x1040]
add eax, 1
mov dword [ebp - 0x1040], eax
cmp dword [ebp - 0x1040], 0xb5
jg 0x4231b8
push 0
push 0x10
push 0x10
push 1
movzx ecx, word [ebp - 0x1040]
push ecx
mov edx, dword [0x451354]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp - 0x103c]
push eax
push 0xffffffffffffffff
mov ecx, dword [0x452190]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
jmp 0x423162
push 0x1000
push 0
push 0xff000000
push 0
push 0xf
push 0x14c
mov edx, dword [0x451354]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
mov dword [0x45218c], eax
push 0x4000
push 0x2b4
lea eax, [ebp - 0x1038]
push eax
push 0
push 0x432ce0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [0x451f84], eax
push 0x4001
push 0x2b4
lea ecx, [ebp - 0x1038]
push ecx
push 0
push 0x432ce8
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [0x452188], eax
push str.RICHED20.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2c], eax
push str.HHCTRL.OCX
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x42325b
push str.HtmlHelpW
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4521f8], eax
push str.imm32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x423283
push str.ImmAssociateContext
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4521f4], eax
mov ecx, dword [0x437f4c]
push ecx
mov edx, dword [0x437f48]
push edx
mov eax, dword [0x437f44]
push eax
mov ecx, dword [0x437f40]
push ecx
mov edx, dword [0x437f50]
push edx
mov eax, dword [ebp - 0x908]
push eax
push str.__tWinMain______________Run_____IDD_PARSER_BASE_____1______d___d:_d:_d:_d:_d_
call fcn.00423a10
add esp, 0x1c
mov dword [ebp - 0x1048], 8
mov dword [ebp - 0x1044], 0x3ff
lea ecx, [ebp - 0x1048]
push ecx
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0x8d
mov edx, dword [0x451354]
push edx
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov dword [0x450ab0], eax
push 0
push 0x41dff0
push 0
push 0x259
mov eax, dword [0x451354]
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov dword [0x450ad4], 0
mov dword [0x451368], 0
push 0x451ae0
push str._slist.txt
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x7530
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x450ac8], 0
je 0x423386
push 0x1388
mov edx, dword [0x450ac8]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x450ac8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call fcn.004153f0
push str.sitelink.txt
push 0x451ae0
push str._s_s
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
push 0x4499c0
push 0x5460
lea edx, [ebp - 0x498]
push edx
call fcn.004013d0
add esp, 0x10
mov dword [ebp - 4], eax
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, dword [ebp - 4]
push ecx
push str.__tWinMain__________________SITE_CHECKST_FILE______________d___d___s_
call fcn.00423a10
add esp, 0x10
mov dword [ebp - 0xc], 0x10
cmp dword [0x452194], 0
je 0x423406
mov edx, dword [0x452194]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x45218c], 0
je 0x42341b
mov eax, dword [0x45218c]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x452190], 0
je 0x423431
mov ecx, dword [0x452190]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x450acc], 0
je 0x423447
mov edx, dword [0x450acc]
push edx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
cmp dword [0x450ac4], 0
je 0x42345c
mov eax, dword [0x450ac4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x450ac0], 0
je 0x423472
mov ecx, dword [0x450ac0]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x450ab4], 0
je 0x423488
mov edx, dword [0x450ab4]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x1050], eax
cmp dword [ebp - 0x1050], 0x3df
jg 0x4234c2
cmp dword [ebp - 0x1050], 0x3df
je 0x42356e
cmp dword [ebp - 0x1050], 0
je 0x423560
jmp case.default.0x423554
cmp dword [ebp - 0x1050], 0x3e9
jg 0x423513
cmp dword [ebp - 0x1050], 0x3e9
je 0x423670
cmp dword [ebp - 0x1050], 0x3e0
je 0x4235a4
cmp dword [ebp - 0x1050], 0x3e1
je 0x4235da
cmp dword [ebp - 0x1050], 0x3e2
je 0x423633
jmp case.default.0x423554
cmp dword [ebp - 0x1050], 0x270e
jg 0x42355b
cmp dword [ebp - 0x1050], 0x270d
jge 0x4237f7
mov ecx, dword [ebp - 0x1050]
sub ecx, 0x3ea
mov dword [ebp - 0x1050], ecx
cmp dword [ebp - 0x1050], 3
ja case.default.0x423554
mov edx, dword [ebp - 0x1050]
jmp dword [edx*4 + 0x4238ec]
jmp case.default.0x423554
xor eax, eax
mov word [ebp - 0x498], ax
jmp 0x42384e
push 0
call fcn.0040e470
test eax, eax
je 0x42358d
push 0x432ec8
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42359f
push str.There_is_a_problem_with_the_contents_of_the_module._n__1___I_cannot_run_the_program.
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42384e
push 0
call fcn.0040e470
test eax, eax
je 0x4235c3
push 0x432fc8
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4235d5
push str.I_have_a_problem_with_my_module_configuration._n__2___I_cannot_run_the_program.
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42384e
push 0
call fcn.0040e470
test eax, eax
je 0x423607
mov edx, dword [ebp - 0x910]
push edx
mov eax, dword [ebp - 4]
push eax
push 0x4330c0
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x423627
mov edx, dword [ebp - 0x910]
push edx
mov eax, dword [ebp - 4]
push eax
push str.OS_state_is_unstable___d_:__d_
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0xc], 0x30
jmp 0x42384e
push 0
call fcn.0040e470
test eax, eax
je 0x423652
push 0x433188
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x423664
push str.The_operating_environment_of_the_PC_is_unknown._nAbort_program_execution.
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [ebp - 0xc], 0x30
jmp 0x42384e
push 0
call fcn.0040e470
test eax, eax
je 0x42369f
lea ecx, [ebp - 0xb1e]
push ecx
call fcn.00424340
push eax
push 0x433268
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x4236c1
lea eax, [ebp - 0xb1e]
push eax
call fcn.00424340
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__1_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42384e
push 0
call fcn.0040e470
test eax, eax
je 0x4236f5
lea edx, [ebp - 0xb1e]
push edx
call fcn.00424340
push eax
push 0x433468
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x423717
lea ecx, [ebp - 0xb1e]
push ecx
call fcn.00424340
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__2_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42384e
push 0
call fcn.0040e470
test eax, eax
je 0x42374b
lea eax, [ebp - 0xb1e]
push eax
call fcn.00424340
push eax
push 0x433668
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42376d
lea edx, [ebp - 0xb1e]
push edx
call fcn.00424340
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__3_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42384e
push 0
call fcn.0040e470
test eax, eax
je 0x423798
mov ecx, dword [ebp - 4]
push ecx
push 0x433868
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x4237b1
mov eax, dword [ebp - 4]
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__4_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42384e
push 0
call fcn.0040e470
test eax, eax
je 0x4237dc
mov edx, dword [ebp - 4]
push edx
push 0x433a68
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x4237f5
mov ecx, dword [ebp - 4]
push ecx
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__5_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42384e
push 0
call fcn.0040e470
test eax, eax
je 0x423820
mov eax, dword [ebp - 0x910]
push eax
push 0x433c68
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42383c
mov edx, dword [ebp - 0x910]
push edx
push 0x433c98
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp - 0xc], 0x30
jmp 0x42384e
xor ecx, ecx
mov word [ebp - 0x498], cx
movzx edx, word [ebp - 0x498]
test edx, edx
je 0x423876
mov eax, dword [ebp - 0xc]
push eax
push str._notification_BOX
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
push str.__tWinMain__________________End__________
call fcn.00423a10
add esp, 4
mov edx, dword [ebp - 0x910]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x914]
push ecx
push str.__tWinMain__________________fcret__________________________d_:__d___d_
call fcn.00423a10
add esp, 0x10
push 0x433c94
call fcn.00423a10
add esp, 4
call fcn.00423b60
mov edx, dword [ebp - 0x914]
mov dword [ebp - 0x104c], edx
lea ecx, [ebp - 0xb1d]
call fcn.00401880
lea ecx, [ebp - 0xb1e]
call fcn.00401880
mov eax, dword [ebp - 0x104c]
mov ecx, dword [ebp - 0x34]
xor ecx, ebp
call fcn.004025b0
mov esp, ebp
pop ebp
ret 0x10