Function at 0x42465a
Capabilities:
Accept command line arguments
Check os version
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x27c
mov eax, dword [0x44daa0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push 0x443a20
mov ecx, 0x44da50
call fcn.00401410
mov eax, dword [ebp + 8]
mov dword [0x44fe24], eax
lea eax, [ebp - 0xd0]
push eax
mov dword [ebp - 0xd0], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
xor ebx, ebx
test eax, eax
je 0x4246b3
cmp dword [ebp - 0xc0], 2
mov byte [0x44fe28], 1
je 0x4246b9
mov byte [0x44fe28], bl
push edi
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0xd8], ebx
call fcn.00417f09
lea ecx, [ebp - 0x1b4]
call fcn.00417f09
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
call fcn.00417f09
lea ecx, [ebp - 0x184]
call fcn.00417f09
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x10c]
call fcn.00417f2d
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004176ac
push dword [ebp - 0x10c]
call fcn.0041ff8a
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00417809
add esp, 0x18
lea ecx, [ebp - 0x190]
call fcn.00417f09
lea eax, [ebp - 0x190]
push eax
call fcn.00418dbd
pop ecx
lea ecx, [ebp - 0x128]
call fcn.00417f09
xor esi, esi
push 8
mov byte [ebp - 0xd1], bl
pop edi
cmp dword [ebp - 0x144], ebx
jbe 0x424874
mov eax, dword [ebp - 0x148]
mov eax, dword [eax + esi*4]
push 0x441440
push dword [eax]
call fcn.00427b88
pop ecx
pop ecx
test eax, eax
jne 0x4247ac
mov byte [ebp - 0xd1], 1
jmp 0x424867
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax + esi*4]
push str._sp_
call fcn.00417aad
test al, al
je 0x424867
mov eax, dword [ebp - 0x148]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
add eax, edi
push eax
lea ecx, [ebp - 0x128]
call fcn.00417f89
lea ecx, [ebp - 0x128]
call fcn.004182d6
lea ecx, [ebp - 0x128]
call fcn.0041829d
cmp dword [ebp - 0x124], ebx
je 0x424816
dec dword [ebp - 0x124]
mov ecx, dword [ebp - 0x128]
mov edx, dword [ebp - 0x124]
xor eax, eax
mov word [ecx + edx*2], ax
push 0x445504
lea ecx, [ebp - 0xe8]
call fcn.00417f2d
push 0x441430
lea ecx, [ebp - 0x10c]
call fcn.00417f2d
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x128]
call fcn.004184c2
push dword [ebp - 0x10c]
call fcn.0041ff8a
push dword [ebp - 0xe8]
call fcn.0041ff8a
pop ecx
pop ecx
inc esi
cmp esi, dword [ebp - 0x144]
jb 0x424785
push 7
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x12c], ebx
pop esi
cmp byte [ebp - 0xd1], bl
jne 0x42498f
push ebx
call fcn.00403ac0
add eax, 0xfffffff5
pop ecx
cmp eax, 5
ja 0x42498f
push ebx
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x24], esi
call fcn.00402040
lea eax, [ebp - 0x3c]
push eax
push ebx
call fcn.004011b0
pop ecx
pop ecx
test al, al
je 0x42496b
push ebx
lea ecx, [ebp - 0x20]
mov dword [ebp - 8], esi
call fcn.00402040
lea eax, [ebp - 0x3c]
push 0x443a68
push eax
call fcn.00402570
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x20]
call fcn.00401940
push str.dwmapi.dll
lea ecx, [ebp - 0x20]
call fcn.00401440
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 8], edi
jae 0x424905
lea eax, [ebp - 0x1c]
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
push edi
push ebx
push eax
call esi
push 0xffffffffffffffff
mov dword [ebp - 0x12c], eax
push ebx
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x20]
call fcn.00401940
push str.CRYPTBASE.dll
lea ecx, [ebp - 0x20]
call fcn.00401440
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 8], edi
jae 0x42493d
lea eax, [ebp - 0x1c]
push edi
push ebx
push eax
call esi
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x12c], ebx
je 0x424954
cmp eax, ebx
jne 0x42495e
mov dword [ebp - 0xd8], 0xf
push ebx
push 1
lea ecx, [ebp - 0x20]
call fcn.00401bd0
jmp 0x424975
mov dword [ebp - 0xd8], 0xf
cmp dword [ebp - 0xd8], ebx
je 0x424984
mov byte [ebp - 0xd1], 1
push ebx
push 1
lea ecx, [ebp - 0x3c]
call fcn.00401bd0
lea ecx, [ebp - 0x19c]
call fcn.00417c2b
push 0x44098c
lea ecx, [ebp - 0x1c0]
call fcn.00417f2d
lea ecx, [ebp - 0x118]
call fcn.00417f09
lea ecx, [ebp - 0x178]
call fcn.00417f09
mov edi, dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 0x11c], 1
cmp dword [ebp - 0xd8], ebx
jne 0x424d5e
mov ecx, dword [ebp - 0x190]
lea eax, [ebp - 0x19c]
push eax
push str.___InstallEnd__
mov edx, str.___Install__UTF_8_
call fcn.004243b8
pop ecx
pop ecx
test al, al
jne 0x424a0a
mov dword [ebp - 0xd8], 0xe
jmp 0x424d5e
cmp dword [ebp - 0x198], ebx
je 0x424d5e
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x19c]
push eax
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
call fcn.00418914
pop ecx
pop ecx
test al, al
jne 0x424a50
mov dword [ebp - 0xd8], 0xb
jmp 0x424d53
push str.Title
lea ecx, [ebp - 0xf4]
call fcn.00417f2d
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.004188d8
push dword [ebp - 0xf4]
call fcn.0041ff8a
add esp, 0x10
push str.BeginPrompt
lea ecx, [ebp - 0xf4]
call fcn.00417f2d
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004188d8
push dword [ebp - 0xf4]
call fcn.0041ff8a
add esp, 0x10
push str.Silent
lea ecx, [ebp - 0xf4]
call fcn.00417f2d
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.004188d8
push dword [ebp - 0xf4]
call fcn.0041ff8a
add esp, 0x10
cmp dword [ebp - 0x15c], ebx
je 0x424b07
mov byte [ebp - 0xd1], 1
push 0x4413b4
lea ecx, [ebp - 0xf4]
call fcn.00417f2d
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.004188d8
push dword [ebp - 0xf4]
call fcn.0041ff8a
add esp, 0x10
cmp byte [ebp - 0xd1], bl
jne 0x424b5d
push 0x4413b0
push dword [ebp - 0x16c]
call fcn.00417af8
pop ecx
pop ecx
test al, al
je 0x424b63
mov byte [ebp - 0x11c], bl
push str.Directory
lea ecx, [ebp - 0xf4]
call fcn.00417f2d
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.004188a4
push dword [ebp - 0xf4]
mov esi, eax
call fcn.0041ff8a
add esp, 0xc
cmp esi, ebx
jl 0x424bb2
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax + esi*4]
add eax, 0xc
push eax
lea ecx, [ebp - 0x1c0]
call fcn.00417fe3
cmp dword [ebp - 0x108], ebx
je 0x424be2
cmp byte [ebp - 0xd1], bl
jne 0x424be2
push 0x24
push dword [ebp - 0x100]
push dword [ebp - 0x10c]
push ebx
call edi
cmp eax, 6
je 0x424be2
mov dword [ebp - 0xd8], 3
push str.RunProgram
lea ecx, [ebp - 0xf4]
call fcn.00417f2d
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.004188d8
add esp, 0xc
push eax
lea ecx, [ebp - 0x118]
call fcn.00417fe3
push dword [ebp - 0x138]
call fcn.0041ff8a
push dword [ebp - 0xf4]
call fcn.0041ff8a
pop ecx
pop ecx
push str.RunProgramParameters
lea ecx, [ebp - 0xf4]
call fcn.00417f2d
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.004188d8
add esp, 0xc
push eax
lea ecx, [ebp - 0x178]
call fcn.00417fe3
push dword [ebp - 0x138]
call fcn.0041ff8a
push dword [ebp - 0xf4]
call fcn.0041ff8a
pop ecx
pop ecx
push str.ExecuteFile
lea ecx, [ebp - 0xf4]
call fcn.00417f2d
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.004188d8
add esp, 0xc
push eax
lea ecx, [ebp - 0x1a8]
call fcn.00417fe3
push dword [ebp - 0x138]
call fcn.0041ff8a
push dword [ebp - 0xf4]
call fcn.0041ff8a
pop ecx
pop ecx
push str.ExecuteParameters
lea ecx, [ebp - 0xf4]
call fcn.00417f2d
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.004188d8
add esp, 0xc
push eax
lea ecx, [ebp - 0x184]
call fcn.00417fe3
push dword [ebp - 0x138]
call fcn.0041ff8a
push dword [ebp - 0xf4]
call fcn.0041ff8a
push dword [ebp - 0x16c]
call fcn.0041ff8a
push dword [ebp - 0x160]
call fcn.0041ff8a
push dword [ebp - 0x10c]
call fcn.0041ff8a
push dword [ebp - 0x100]
call fcn.0041ff8a
add esp, 0x18
lea ecx, [ebp - 0xe8]
call fcn.004245a8
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 0x1d0], bl
call fcn.00417f09
cmp dword [ebp - 0xd8], ebx
jne 0x424dab
push dword [0x44da28]
lea ecx, [ebp - 0x1d0]
call fcn.00419921
test al, al
jne 0x424dab
cmp byte [ebp - 0xd1], bl
jne 0x424da1
push str.Can_not_create_temp_folder_archive
push ebx
call fcn.0041cd74
pop ecx
pop ecx
mov dword [ebp - 0xd8], 0xd
xor esi, esi
cmp dword [ebp - 0xd8], ebx
jne 0x424e08
push 0x18
call fcn.0041852d
pop ecx
cmp eax, ebx
je 0x424dca
mov ecx, eax
call fcn.004245fa
jmp 0x424dcc
xor eax, eax
mov esi, eax
cmp eax, ebx
je 0x424de9
mov ecx, eax
call fcn.0041d658
test eax, eax
je 0x424e08
mov dword [ebp - 0xd8], 0xa
jmp 0x424df3
mov dword [ebp - 0xd8], 9
cmp byte [ebp - 0xd1], bl
jne 0x424e08
push str.Can_not_load_codecs
push ebx
call fcn.0041cd74
pop ecx
pop ecx
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x154]
call fcn.00417f5e
cmp dword [ebp - 0xd8], ebx
jne 0x424f0d
lea ecx, [ebp - 0xe8]
mov byte [ebp - 0xd9], bl
call fcn.00417f09
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xd9]
push eax
push dword [ebp - 0x11c]
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x190]
push eax
push esi
call fcn.00424100
add esp, 0x18
cmp eax, ebx
je 0x424f01
cmp byte [ebp - 0xd1], bl
jne 0x424ef7
cmp eax, 1
je 0x424e83
cmp byte [ebp - 0xd9], bl
je 0x424e98
lea eax, [ebp - 0xe8]
push eax
push 8
call fcn.0041b220
pop ecx
pop ecx
mov eax, 0x80004005
cmp eax, 0x80004004
je 0x424ef7
cmp dword [ebp - 0xe4], ebx
jne 0x424ece
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.00418f55
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0xe8]
call fcn.00417fe3
push dword [ebp - 0x138]
call fcn.0041ff8a
pop ecx
lea eax, [ebp - 0x138]
push 7
push eax
call fcn.0041b0a5
pop ecx
pop ecx
push 0x10
push dword [eax]
push dword [ebp - 0xe8]
push ebx
call edi
push dword [ebp - 0x138]
call fcn.0041ff8a
pop ecx
mov dword [ebp - 0xd8], 0xf
push dword [ebp - 0xe8]
call fcn.0041ff8a
pop ecx
lea ecx, [ebp - 0x238]
call fcn.004242be
cmp dword [ebp - 0xd8], ebx
jne 0x424f4f
push dword [ebp - 0x154]
call fcn.004191de
pop ecx
test al, al
jne 0x424f4f
cmp byte [ebp - 0xd1], bl
jne 0x424f45
push str.Invalid_Current_Directory
push ebx
call fcn.0041cd74
pop ecx
pop ecx
mov dword [ebp - 0xd8], 8
xor edi, edi
cmp dword [ebp - 0xd8], ebx
jne 0x4253a3
cmp dword [ebp - 0x1a4], ebx
je 0x425063
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.0041b239
mov eax, dword [ebp - 0x100]
pop ecx
pop ecx
mov dword [ebp - 0x218], 0x3c
mov dword [ebp - 0x214], 0x140
mov dword [ebp - 0x210], ebx
mov dword [ebp - 0x20c], ebx
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x124], ebx
je 0x424fcf
lea ecx, [ebp - 0x184]
call fcn.0041847d
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x184]
call fcn.004180d4
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.0041b239
mov eax, dword [ebp - 0x108]
neg eax
sbb eax, eax
and eax, dword [ebp - 0x10c]
pop ecx
mov dword [ebp - 0x204], eax
pop ecx
lea eax, [ebp - 0x218]
push eax
mov dword [ebp - 0x200], ebx
mov dword [ebp - 0x1fc], 1
mov dword [ebp - 0x1e0], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x1f8], 0x20
ja 0x425047
cmp byte [ebp - 0xd1], bl
jne 0x42503b
push str.Can_not_open_file
push ebx
call fcn.0041cd74
pop ecx
pop ecx
mov dword [ebp - 0xd8], 4
jmp 0x42504d
mov edi, dword [ebp - 0x1e0]
push dword [ebp - 0x10c]
call fcn.0041ff8a
push dword [ebp - 0x100]
jmp 0x425340
cmp dword [ebp - 0x114], ebx
jne 0x4250aa
push str.setup.exe
lea ecx, [ebp - 0x118]
call fcn.00417f89
push dword [ebp - 0x118]
call fcn.0041a26b
pop ecx
test al, al
jne 0x4250aa
cmp byte [ebp - 0xd1], bl
jne 0x4250a0
push str.Can_not_find_setup.exe
push ebx
call fcn.0041cd74
pop ecx
pop ecx
mov dword [ebp - 0xd8], 5
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00417f5e
lea eax, [ebp - 0xe8]
push eax
call fcn.0041a699
pop ecx
mov esi, str.__T_
push esi
lea ecx, [ebp - 0x100]
call fcn.00417f2d
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x118]
call fcn.004184c2
push dword [ebp - 0x100]
call fcn.0041ff8a
pop ecx
push esi
lea ecx, [ebp - 0x100]
call fcn.00417f2d
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x178]
call fcn.004184c2
push dword [ebp - 0x100]
call fcn.0041ff8a
push dword [ebp - 0xe8]
call fcn.0041ff8a
pop ecx
pop ecx
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x16c]
call fcn.00417f5e
mov esi, 0x44120c
push esi
lea ecx, [ebp - 0x100]
call fcn.00417f2d
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x118]
call fcn.004184c2
push dword [ebp - 0x100]
call fcn.0041ff8a
pop ecx
push esi
lea ecx, [ebp - 0x100]
call fcn.00417f2d
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x178]
call fcn.004184c2
push dword [ebp - 0x100]
call fcn.0041ff8a
pop ecx
mov esi, 0x445504
push esi
lea ecx, [ebp - 0xe8]
call fcn.00417f2d
push eax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x1c0]
push eax
push esi
lea ecx, [ebp - 0x10c]
call fcn.00417f2d
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.00417eba
add esp, 0xc
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00417eba
add esp, 0xc
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.00417eba
add esp, 0xc
push eax
lea ecx, [ebp - 0x118]
call fcn.00417fe3
push dword [ebp - 0x138]
call fcn.0041ff8a
push dword [ebp - 0x100]
call fcn.0041ff8a
push dword [ebp - 0xf4]
call fcn.0041ff8a
push dword [ebp - 0x10c]
call fcn.0041ff8a
push dword [ebp - 0xe8]
call fcn.0041ff8a
add esp, 0x14
lea ecx, [ebp - 0x118]
cmp dword [ebp - 0x124], ebx
je 0x425272
call fcn.00418475
lea eax, [ebp - 0x128]
jmp 0x42527d
call fcn.00418475
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x118]
call fcn.004180d4
xor eax, eax
mov word [ebp - 0x24a], ax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x160]
push eax
mov dword [ebp - 0x27c], 0x44
mov dword [ebp - 0x278], ebx
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x270], ebx
mov dword [ebp - 0x250], ebx
mov dword [ebp - 0x248], ebx
call fcn.0041b239
pop ecx
pop ecx
cmp dword [ebp - 0xd8], ebx
jne 0x42532f
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x27c]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x160]
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x42531d
cmp byte [ebp - 0xd1], bl
jne 0x425311
lea eax, [ebp - 0x16c]
push eax
call fcn.0042434f
pop ecx
mov dword [ebp - 0xd8], 0x28
jmp 0x42532f
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [ebp - 0x228]
push dword [ebp - 0x160]
call fcn.0041ff8a
push dword [ebp - 0x16c]
call fcn.0041ff8a
pop ecx
pop ecx
cmp dword [ebp - 0xd8], ebx
jne 0x4253a3
cmp edi, ebx
je 0x425399
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x11c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x425386
mov eax, dword [ebp - 0x11c]
test eax, 0xffff0000
jne 0x425386
shl eax, 0x10
mov dword [ebp - 0xd8], eax
jmp 0x425390
mov dword [ebp - 0xd8], 7
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4253a3
mov dword [ebp - 0xd8], 7
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
pop edi
cmp dword [ebp - 0x13c], ebx
je 0x4253ba
push dword [ebp - 0x13c]
call esi
cmp dword [ebp - 0x12c], ebx
je 0x4253ca
push dword [ebp - 0x12c]
call esi
lea ecx, [ebp - 0x238]
call fcn.004242eb
push dword [ebp - 0x154]
call fcn.0041ff8a
pop ecx
lea ecx, [ebp - 0x1d0]
call fcn.00424295
push dword [ebp - 0x178]
call fcn.0041ff8a
push dword [ebp - 0x118]
call fcn.0041ff8a
push dword [ebp - 0x1c0]
call fcn.0041ff8a
push dword [ebp - 0x19c]
call fcn.0041ff8a
push dword [ebp - 0x128]
call fcn.0041ff8a
push dword [ebp - 0x190]
call fcn.0041ff8a
push dword [ebp - 0x184]
call fcn.0041ff8a
push dword [ebp - 0x1a8]
call fcn.0041ff8a
add esp, 0x20
lea ecx, [ebp - 0x148]
call fcn.00412cd2
push dword [ebp - 0x1b4]
call fcn.0041ff8a
push dword [ebp - 0x1dc]
call fcn.0041ff8a
mov eax, dword [ebp - 0xd8]
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.00425c4b
leave
ret 0x10