Function at 0x401000
Capabilities:
Allocate thread local storage
Delete directory
Get common file path

Disassembly:
push 0x12c
push 0
push 0x413354
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x413358], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x413354], eax
call section..text
mov eax, 0x412240
mov dword [0x413390], eax
call fcn.0040ed70
call fcn.0040eb5c
call fcn.0040d063
call fcn.0040cb93
call fcn.0040c6a0
call fcn.0040c329
call fcn.0040c0a0
call fcn.0040c082
call fcn.0040bff9
call fcn.0040b761
call fcn.0040a790
call fcn.004099a1
call fcn.00409666
call fcn.004092f7
call fcn.00408361
call fcn.00407fd9
push dword [0x41346c]
call fcn.00409685
push 7
push 0x412064
lea eax, [0x41346c]
push eax
push 8
call fcn.004095d4
push 0x413464
push 0x412074
push 7
push 0x401
push 8
call fcn.0040ea5d
mov eax, 0x200
push eax
lea eax, [0x41347c]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.0040d082
push dword [0x413474]
call fcn.00409685
push 7
push 0x41206c
lea eax, [0x413474]
push eax
push 8
call fcn.004095d4
mov edx, 0x412021
lea ecx, [0x413424]
call fcn.00405068
mov ebp, 0x412240
mov ebx, ebp
mov ebp, 0x41207c
sub ebx, ebp
mov dword [0x41340c], ebx
mov ebp, 0x41207c
mov dword [0x413410], ebp
push dword [0x41340c]
call fcn.0040c110
mov dword [0x4133e8], eax
mov dword [0x4133a0], 0
mov eax, dword [0x41340c]
cmp eax, dword [0x4133a0]
jl 0x4011b1
mov ebx, dword [0x413410]
add ebx, dword [0x4133a0]
mov eax, ebx
call fcn.0040c130
mov ebx, eax
imul ebx, ebx, 0xffffffff
push ebx
mov ebx, dword [0x4133e8]
add ebx, dword [0x4133a0]
mov eax, ebx
call fcn.0040c140
inc dword [0x4133a0]
jno 0x401170
mov edx, dword [0x413950]
push edx
push edx
mov ebx, dword [0x41340c]
add ebx, 0xfffffff8
push ebx
mov ebx, dword [0x4133e8]
add ebx, 4
push ebx
call fcn.0040c150
push 0x413380
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push dword [0x413380]
call fcn.004050d0
push 0x413380
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 4
push dword [0x413380]
call fcn.004051b0
push 0x4133e0
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 5
push dword [0x413380]
call fcn.004051b0
push 0x413374
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 7
push dword [0x413380]
call fcn.004051b0
push 0x41341c
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 8
push dword [0x413380]
call fcn.004051b0
push 0x41345c
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 9
push dword [0x413380]
call fcn.004051b0
push 0x4133c4
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0xa
push dword [0x413380]
call fcn.004051b0
push 0x413460
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0xb
push dword [0x413380]
call fcn.004051b0
push 0x4133d4
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0xc
push dword [0x413380]
call fcn.004051b0
push 0x4133d8
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0xf
push dword [0x413380]
call fcn.004051b0
push 0x413370
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0x10
push dword [0x413380]
call fcn.004051b0
push 0x41344c
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0x11
push dword [0x413380]
call fcn.004051b0
push 0x41339c
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0x12
push dword [0x413380]
call fcn.004051b0
push 0x4133fc
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0x13
push dword [0x413380]
call fcn.004051b0
push 0x41342c
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0x14
push dword [0x413380]
call fcn.004051b0
push 0x4133f8
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0x15
push dword [0x413380]
call fcn.004051b0
push 0x41343c
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0x16
push dword [0x413380]
call fcn.004051b0
push 0x413428
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0x17
push dword [0x413380]
call fcn.004051b0
push 0x413440
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0x18
push dword [0x413380]
call fcn.004051b0
push 0x4133c8
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0x1a
push dword [0x413380]
call fcn.004051b0
push 0x413360
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413424]
push 0x1b
push dword [0x413380]
call fcn.004051b0
push 0x4133f4
call fcn.0040edf0
call fcn.0040a54f
mov ebx, eax
cmp ebx, 0x32
jge 0x401546
push 0x10
push dword [0x41343c]
push dword [0x41344c]
call fcn.00408010
jmp 0x40227a
mov eax, 0x412240
mov dword [0x413390], eax
mov eax, dword [0x413390]
mov eax, dword [eax]
mov dword [0x4133a0], eax
add dword [0x413390], 4
mov eax, dword [0x413390]
mov eax, dword [eax]
mov dword [0x4133a4], eax
add dword [0x413390], 4
mov eax, dword [0x413390]
mov eax, dword [eax]
mov dword [0x4133a8], eax
add dword [0x413390], 4
mov eax, dword [0x413390]
mov eax, dword [eax]
mov dword [0x4133ac], eax
add dword [0x413390], 4
mov eax, dword [0x413390]
mov eax, dword [eax]
mov dword [0x4133b0], eax
add dword [0x413390], 4
push 0x14
call fcn.0040c110
mov dword [0x4133bc], eax
push dword [0x4133a0]
mov eax, dword [0x4133bc]
call fcn.0040c1b0
push dword [0x4133a4]
mov ebx, dword [0x4133bc]
add ebx, 4
mov eax, ebx
call fcn.0040c1b0
push dword [0x4133a8]
mov ebx, dword [0x4133bc]
add ebx, 8
mov eax, ebx
call fcn.0040c1b0
push dword [0x4133ac]
mov ebx, dword [0x4133bc]
add ebx, 0xc
mov eax, ebx
call fcn.0040c1b0
push dword [0x4133b0]
mov ebx, dword [0x4133bc]
add ebx, 0x10
mov eax, ebx
call fcn.0040c1b0
mov edx, dword [0x413950]
push edx
push edx
push 0x14
push dword [0x4133bc]
call fcn.0040d640
push 0x413454
call fcn.0040edf0
call fcn.00408a16
lea eax, [0x403274]
push eax
call fcn.004093f0
call fcn.0040849f
mov dword [0x413430], eax
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x4133dc], eax
mov ebx, dword [0x413430]
and ebx, ebx
jle 0x401753
mov dword [0x4133a0], 0
mov ebx, dword [0x413430]
dec ebx
cmp ebx, dword [0x4133a0]
jl 0x401753
mov edx, dword [0x413950]
push edx
push edx
push dword [0x4133a0]
call fcn.00408451
push 0x413414
call fcn.0040edf0
push dword [0x413414]
mov edx, dword [0x413374]
pop ecx
call fcn.0040ee70
je 0x4016da
mov dword [0x413394], 1
jmp 0x401747
mov ebx, dword [0x413394]
cmp ebx, 1
jne 0x40170c
mov edx, dword [0x413414]
push dword [0x413950]
call fcn.0040eea0
push 0x413444
call fcn.0040edf0
mov dword [0x413394], 0
jmp 0x401747
push dword [0x413414]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
mov edx, dword [0x4133d0]
push dword [0x413950]
call fcn.0040eea0
mov edx, dword [0x413414]
call fcn.0040eea0
mov edx, str.__ne
call fcn.0040eea0
push 0x4133d0
call fcn.0040edf0
inc dword [0x4133a0]
jno 0x40168a
push 0x412034
push dword [0x4133dc]
call fcn.00403bee
and eax, eax
je 0x40177e
mov eax, dword [0x413364]
mov dword [0x413404], eax
push dword [0x413404]
call fcn.004033a0
jmp 0x40179e
push 0x10
push dword [0x4133f8]
push dword [0x41344c]
call fcn.00408010
push 1
jmp 0x40227f
push 0x412032
push dword [0x4133dc]
call fcn.00403bee
and eax, eax
je 0x4017d7
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413378]
push dword [0x413364]
call fcn.0040c150
push 0x4133f0
call fcn.0040edf0
jmp 0x4017f7
push 0x10
push dword [0x4133f8]
push dword [0x41344c]
call fcn.00408010
push 1
jmp 0x40227f
push 0x41202c
push dword [0x4133dc]
call fcn.00403bee
and eax, eax
je 0x40182b
mov eax, dword [0x413364]
mov dword [0x4133a4], eax
mov eax, dword [0x413378]
mov dword [0x413368], eax
mov eax, dword [0x4133a4]
mov dword [0x413438], eax
jmp 0x40184b
push 0x10
push dword [0x4133f8]
push dword [0x41344c]
call fcn.00408010
push 1
jmp 0x40227f
push 0x412030
push dword [0x4133dc]
call fcn.00403bee
and eax, eax
je 0x40187d
mov eax, dword [0x413364]
mov dword [0x4133b8], eax
mov eax, dword [0x413378]
mov dword [0x4133c0], eax
mov eax, dword [0x4133b8]
mov dword [0x413400], eax
push 0x41202e
push dword [0x4133dc]
call fcn.00403bee
and eax, eax
je 0x4018af
mov eax, dword [0x413364]
mov dword [0x4133b4], eax
mov eax, dword [0x413378]
mov dword [0x41336c], eax
mov eax, dword [0x4133b4]
mov dword [0x413450], eax
push 0x412036
push dword [0x4133dc]
call fcn.00403bee
and eax, eax
je 0x401b47
mov edx, dword [0x413444]
xor ecx, ecx
call fcn.0040ee70
jne 0x4018f6
mov edx, dword [0x413444]
push dword [0x413950]
call fcn.0040eea0
push 0x413420
call fcn.0040edf0
jmp 0x401a6a
push 0xc80001
push dword [0x413440]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.0040aaa0
push dword [0x4133c8]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.00409c83
push 0x20
push 0x41201e
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.00409e5c
push 0x412051
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.0040a169
push 4
push 0xd
push 0
call fcn.0040aac3
push 2
call fcn.0040a189
call fcn.0040acc7
push eax
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x4019d6
push dword [0x413448]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x40227f
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x401a1e
call fcn.0040cc5c
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x401a1b
mov edx, dword [0x413950]
push edx
push edx
push 2
call fcn.0040a1c4
push 0x413420
call fcn.0040edf0
push 0
call fcn.0040a663
add esp, 8
jmp 0x401a6a
pop eax
jmp 0x401a64
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x401a64
call fcn.0040cc6b
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x401a63
mov edx, dword [0x413950]
push edx
push edx
push 2
call fcn.0040a1c4
push 0x413420
call fcn.0040edf0
push 0
call fcn.0040a663
add esp, 8
jmp 0x401a6a
pop eax
pop eax
jmp 0x4019ac
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413420]
call fcn.004052c0
push eax
mov eax, dword [0x413420]
push eax
call fcn.0040d640
inc dword [0x413950]
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413378]
push dword [0x413364]
call fcn.0040c150
pop edx
pop ecx
mov dword [0x413950], ecx
add ecx, dword [0x412254]
add edx, dword [0x412254]
call fcn.0040ee70
jne 0x401aee
push 0x10
push dword [0x41342c]
push dword [0x41344c]
call fcn.00408010
push dword [0x413448]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x40227f
push 0x412038
push dword [0x4133dc]
call fcn.00403bee
and eax, eax
je 0x401b0c
mov eax, dword [0x413364]
mov dword [0x413434], eax
push dword [0x41336c]
push dword [0x4133c0]
push dword [0x413368]
push dword [0x413434]
push dword [0x4133b4]
push dword [0x4133b8]
push dword [0x4133a4]
push dword [0x413420]
push dword [0x4133dc]
call fcn.00403de9
mov edx, dword [0x413950]
push edx
push edx
push dword [0x4133c0]
push dword [0x413400]
call fcn.0040c150
push 0x413388
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push 0
call fcn.00408451
inc dword [0x413950]
mov edx, dword [0x4133f4]
pop ecx
mov dword [0x413950], ecx
add ecx, dword [0x412254]
call fcn.0040ee70
je 0x401bae
mov ebx, dword [0x413430]
cmp ebx, 1
jne 0x401bae
mov eax, 1
jmp 0x401bb0
xor eax, eax
and eax, eax
je 0x401cc7
mov edx, dword [0x413950]
push edx
push edx
mov edx, dword [0x413950]
push edx
push edx
call fcn.0040c335
inc dword [0x413950]
push dword [0x413428]
mov edx, dword [0x412254]
add dword [esp + 4], edx
call fcn.00408083
push 0x413384
call fcn.0040edf0
mov edx, dword [0x413384]
xor ecx, ecx
call fcn.0040ee70
jne 0x401c75
mov edx, dword [0x413384]
push dword [0x413950]
call fcn.0040eea0
push 0x4133ec
call fcn.0040edf0
push dword [0x4133ec]
call fcn.0040c375
mov edx, dword [0x413388]
xor ecx, ecx
call fcn.0040ee70
jne 0x401c41
push dword [0x413388]
call fcn.004034ce
push dword [0x4133f0]
push 1
call fcn.0040c840
and eax, eax
je 0x401c75
push dword [0x413368]
push dword [0x413438]
push 1
call fcn.0040c9c0
push 1
call fcn.0040c620
mov edx, dword [0x413950]
push edx
push edx
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413950]
call fcn.004084b2
mov edx, dword [0x412254]
add dword [esp], edx
call fcn.0040c387
mov edx, dword [0x412254]
add dword [esp], edx
call fcn.0040c375
pop dword [0x413950]
push dword [0x413448]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x40227f
mov edx, dword [0x413448]
push dword [0x413950]
call fcn.0040eea0
mov edx, 0x41202a
call fcn.0040eea0
mov edx, dword [0x4133f0]
call fcn.0040eea0
push 0x4133f0
call fcn.0040edf0
mov edx, dword [0x413950]
push edx
push edx
push 0x800
call fcn.004052f0
push 0x41338c
call fcn.0040edf0
push dword [0x413950]
push dword [0x41338c]
push 0
push 0x41201e
mov edx, dword [0x413448]
push dword [0x413950]
call fcn.0040eea0
mov edx, 0x41202a
call fcn.0040eea0
inc dword [0x413950]
mov edx, dword [0x412254]
add dword [esp], edx
call sub.KERNEL32.dll_GetTempFileNameA
pop dword [0x413950]
push dword [0x41338c]
call fcn.0040c42b
push 0x412025
push dword [0x41338c]
call sub.SHLWAPI.DLL_PathRenameExtensionA
mov edx, dword [0x41338c]
push dword [0x413950]
call fcn.0040eea0
push 0x4133f0
call fcn.0040edf0
push dword [0x4133f0]
push 1
call fcn.0040c840
and eax, eax
je 0x401dca
push dword [0x413368]
push dword [0x413438]
push 1
call fcn.0040c9c0
push 1
call fcn.0040c620
jmp 0x401e05
push dword [0x4133f0]
call fcn.0040c42b
call fcn.00404096
push 0x10
push dword [0x4133f8]
push dword [0x41344c]
call fcn.00408010
push dword [0x413448]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x40227f
mov edx, dword [0x413388]
xor ecx, ecx
call fcn.0040ee70
jne 0x401e1f
push dword [0x413388]
call fcn.004034ce
mov edx, dword [0x413950]
push edx
push edx
push 0x800
call fcn.004052f0
push 0x413408
call fcn.0040edf0
push dword [0x413950]
push 0x800
push dword [0x413408]
mov edx, dword [0x413950]
push edx
push edx
call fcn.004084b2
inc dword [0x413950]
mov edx, dword [0x412254]
add dword [esp], edx
call sub.KERNEL32.dll_GetShortPathNameA
pop dword [0x413950]
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413950]
call fcn.004084b2
inc dword [0x413950]
push dword [0x41341c]
mov edx, dword [0x412254]
add dword [esp + 4], edx
call fcn.0040850d
pop dword [0x413950]
mov edx, dword [0x413950]
push edx
push edx
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413950]
call fcn.004084b2
mov edx, dword [0x412254]
add dword [esp], edx
call fcn.0040c4e1
inc dword [0x413950]
push dword [0x41345c]
mov edx, dword [0x412254]
add dword [esp + 4], edx
call fcn.0040850d
pop dword [0x413950]
mov edx, dword [0x413950]
push edx
push edx
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413950]
call fcn.004084b2
mov edx, dword [0x412254]
add dword [esp], edx
call fcn.0040c387
inc dword [0x413950]
push dword [0x4133c4]
mov edx, dword [0x412254]
add dword [esp + 4], edx
call fcn.0040850d
pop dword [0x413950]
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413950]
push dword [0x413408]
call fcn.00405190
inc dword [0x413950]
push dword [0x413460]
mov edx, dword [0x412254]
add dword [esp + 4], edx
call fcn.0040850d
pop dword [0x413950]
push dword [0x4133ec]
push dword [0x4133d4]
call fcn.0040850d
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413950]
mov eax, dword [0x41337c]
cdq
push edx
push eax
call fcn.004054a0
inc dword [0x413950]
push dword [0x4133d8]
mov edx, dword [0x412254]
add dword [esp + 4], edx
call fcn.0040850d
pop dword [0x413950]
push dword [0x4133f0]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
call fcn.00403bba
and eax, eax
je 0x401fe9
call fcn.0040a54f
mov ebx, eax
cmp ebx, 0x41
je 0x401fe9
mov eax, 1
jmp 0x401feb
xor eax, eax
and eax, eax
je 0x402161
mov edx, dword [0x413950]
push edx
push edx
push 0x800
call fcn.004052f0
push 0x413458
call fcn.0040edf0
push 0x800
push dword [0x413458]
call sub.KERNEL32.dll_GetWindowsDirectoryA
push dword [0x413458]
call sub.SHLWAPI.DLL_PathAddBackslashA
mov edx, dword [0x413458]
push dword [0x413950]
call fcn.0040eea0
mov edx, 0x41203f
call fcn.0040eea0
push 0x413458
call fcn.0040edf0
push dword [0x413458]
call sub.SHLWAPI.DLL_PathAddBackslashA
mov edx, dword [0x413458]
push dword [0x413950]
call fcn.0040eea0
mov edx, dword [0x413360]
call fcn.0040eea0
push 0x4133cc
call fcn.0040edf0
mov edx, dword [0x413458]
push dword [0x413950]
call fcn.0040eea0
mov edx, dword [0x413360]
call fcn.0040eea0
mov edx, 0x412049
call fcn.0040eea0
push 0x4133e4
call fcn.0040edf0
push dword [0x4133cc]
push 0
call fcn.0040c910
and eax, eax
je 0x4020da
mov dword [0x4133a0], 1
push 0
call fcn.0040c620
jmp 0x4020e4
mov dword [0x4133a0], 0
push dword [0x4133e4]
push 0
call fcn.0040c910
and eax, eax
je 0x40210e
mov dword [0x4133a4], 1
push 0
call fcn.0040c620
jmp 0x402118
mov dword [0x4133a4], 0
mov ebx, dword [0x4133a0]
add ebx, dword [0x4133a4]
and ebx, ebx
jne 0x40215f
mov edx, dword [0x413950]
push edx
push edx
push 0x800
call fcn.004052f0
push 0x413458
call fcn.0040edf0
push 0x800
push dword [0x413458]
call sub.KERNEL32.dll_GetSystemDirectoryA
push dword [0x413458]
call sub.SHLWAPI.DLL_PathAddBackslashA
jmp 0x402198
mov edx, dword [0x413950]
push edx
push edx
push 0x800
call fcn.004052f0
push 0x413458
call fcn.0040edf0
push 0x800
push dword [0x413458]
call sub.KERNEL32.dll_GetSystemDirectoryA
push dword [0x413458]
call sub.SHLWAPI.DLL_PathAddBackslashA
push dword [0x413950]
mov edx, dword [0x4133f0]
push dword [0x413950]
call fcn.0040eea0
mov edx, str.__ne
call fcn.0040eea0
mov edx, dword [0x4133d0]
call fcn.0040eea0
inc dword [0x413950]
push dword [0x4133ec]
mov edx, dword [0x413458]
push dword [0x413950]
call fcn.0040eea0
mov edx, dword [0x413360]
call fcn.0040eea0
mov edx, dword [0x412254]
add dword [esp], edx
mov edx, dword [0x412254]
add dword [esp + 8], edx
call fcn.004032be
pop dword [0x413950]
mov dword [0x413398], eax
call fcn.00404096
push dword [0x4133f0]
call sub.SHLWAPI.DLL_PathUnquoteSpacesA
push dword [0x4133f0]
call fcn.0040c42b
mov edx, dword [0x413950]
push edx
push edx
mov edx, dword [0x413950]
push edx
push edx
push dword [0x413950]
call fcn.004084b2
mov edx, dword [0x412254]
add dword [esp], edx
call fcn.0040c387
mov edx, dword [0x412254]
add dword [esp], edx
call fcn.0040c375
pop dword [0x413950]
push dword [0x413448]
call sub.KERNEL32.dll_RemoveDirectoryA
push dword [0x413398]
jmp 0x40227f
push 0
call 0x402299
call fcn.0040edc0
push dword [0x413354]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.0040930b
call fcn.00409540
call fcn.00409a11
call fcn.0040a779
call fcn.0040b7ef
call fcn.0040bfed
call fcn.0040c4f3
call fcn.0040c690
call fcn.0040cf5e
call fcn.0040c0c0
ret