Function at 0x47cafd
Capabilities:
Copy file
Move file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x22
push 0
push 0
dec ecx
jne 0x47c930
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x47d917
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x14]
call fcn.004770c0
mov edx, dword [ebp - 0x14]
mov eax, 0x488ce4
call fcn.00404ae4
lea eax, [ebp - 0x18]
call fcn.00477128
mov edx, dword [ebp - 0x18]
mov eax, 0x488ce8
call fcn.00404ae4
mov eax, 0x488cec
mov ecx, 0x47d930
mov edx, dword [0x488ce4]
call fcn.00404da8
lea eax, [ebp - 0x20]
call fcn.0047c590
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.004086b0
mov eax, dword [ebp - 0x1c]
mov edx, 0x47d944
call fcn.00404eb8
je 0x47c9d0
call fcn.004791e0
test al, al
jne 0x47c9d0
push 0
mov eax, dword [0x4823a4]
mov eax, dword [eax]
push eax
mov eax, dword [0x482358]
mov eax, dword [eax]
push eax
push 0
call sub.user32.dll_MessageBoxA_1
jmp 0x47d8e9
mov byte [0x488cfc], 0
lea eax, [ebp - 0x24]
mov ecx, 0x47d954
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0x24]
call fcn.00408fe0
test al, al
je 0x47c9fb
call fcn.0047bfdc
lea eax, [ebp - 0x28]
mov ecx, 0x47d96c
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0x28]
call fcn.00408fe0
test al, al
je 0x47cbba
mov edx, dword [0x4825a4]
mov edx, dword [edx]
lea eax, [ebp - 0x2c]
mov ecx, 0x47d988
call fcn.00404da8
mov eax, dword [ebp - 0x2c]
call fcn.00408fe0
test al, al
jne 0x47cafd
mov dl, 1
mov eax, dword [0x412d98]
call fcn.00403b80
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x47caf6
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, 0x47d96c
lea eax, [ebp - 0x30]
mov edx, dword [0x488ce4]
call fcn.00404da8
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x34]
mov eax, 0x47d9a0
call fcn.0040506c
dec eax
jne 0x47cae0
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x38]
push eax
mov ecx, 0x47d988
mov edx, dword [0x4825a4]
mov edx, dword [edx]
lea eax, [ebp - 0x3c]
call fcn.00404da8
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, 0x47d96c
mov edx, dword [0x482648]
mov edx, dword [edx]
lea eax, [ebp - 0x40]
call fcn.00404da8
mov eax, dword [ebp - 0x40]
pop edx
pop ecx
call fcn.00477cb8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47cafd
mov eax, dword [ebp - 0x10]
call fcn.00403bb0
ret
lea eax, [ebp - 0x44]
push eax
mov ecx, 0x47d9b0
mov edx, 0x47d9bc
mov eax, 0x47d9bc
call fcn.00477190
mov edx, dword [ebp - 0x44]
mov eax, 0x488cf8
call fcn.00404ae4
mov eax, dword [0x488cf8]
mov edx, 0x47d9b0
call fcn.00404eb8
je 0x47cbba
mov eax, dword [0x488cf8]
call fcn.00408c70
mov ebx, eax
mov eax, 0x47d9cc
call fcn.00408c70
cmp ebx, eax
jg 0x47cb90
mov byte [0x488cfc], 1
mov eax, dword [0x488cf8]
mov edx, 0x47d9dc
call fcn.00404eb8
jne 0x47cbba
push dword [0x488ce4]
push 0x47d9ec
push 0x47da04
lea eax, [ebp - 0x48]
mov edx, 3
call fcn.00404e24
mov eax, dword [ebp - 0x48]
call fcn.0047c4ac
jmp 0x47cbba
push 0
mov eax, dword [0x4823a4]
mov eax, dword [eax]
push eax
mov eax, dword [0x4825c8]
mov eax, dword [eax]
push eax
push 0
call sub.user32.dll_MessageBoxA_1
mov eax, dword [0x4825c0]
mov eax, dword [eax]
call fcn.0045fd60
jmp 0x47d8e9
cmp byte [0x488cfc], 0
jne 0x47cbfc
mov eax, dword [0x482420]
cmp byte [eax], 0
je 0x47cbfc
mov eax, dword [0x482708]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0xfc]
mov eax, dword [0x4825c0]
mov eax, dword [eax]
cmp byte [eax + 0xa4], 0
jne 0x47d8e9
mov eax, dword [0x4825c0]
mov eax, dword [eax]
call fcn.0045f9f4
lea eax, [ebp - 0x50]
push eax
call fcn.0047903c
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x4c]
call fcn.004086b0
mov edx, dword [ebp - 0x4c]
mov eax, 0x488ce0
call fcn.00404ae4
mov edx, dword [0x488ce0]
mov eax, 0x47da14
call fcn.0040506c
test eax, eax
jle 0x47cc45
mov eax, 0x488ce0
mov edx, 0x47da14
call fcn.00404ae4
jmp 0x47ccff
mov edx, dword [0x488ce0]
mov eax, 0x47da24
call fcn.0040506c
test eax, eax
jle 0x47cc6d
mov eax, 0x488ce0
mov edx, 0x47da24
call fcn.00404ae4
jmp 0x47ccff
mov edx, dword [0x488ce0]
mov eax, 0x47da30
call fcn.0040506c
test eax, eax
jle 0x47cc92
mov eax, 0x488ce0
mov edx, 0x47da30
call fcn.00404ae4
jmp 0x47ccff
mov edx, dword [0x488ce0]
mov eax, 0x47da40
call fcn.0040506c
test eax, eax
jle 0x47ccb7
mov eax, 0x488ce0
mov edx, 0x47da40
call fcn.00404ae4
jmp 0x47ccff
mov edx, dword [0x488ce0]
mov eax, 0x47da50
call fcn.0040506c
test eax, eax
jle 0x47ccdc
mov eax, 0x488ce0
mov edx, 0x47da50
call fcn.00404ae4
jmp 0x47ccff
mov edx, dword [0x488ce0]
mov eax, 0x47da60
call fcn.0040506c
test eax, eax
jle 0x47ccff
mov eax, 0x488ce0
mov edx, 0x47da6c
call fcn.00404ae4
mov edx, dword [0x488ce0]
mov eax, 0x47da7c
call fcn.0040506c
test eax, eax
jle 0x47cd22
mov eax, 0x488ce0
mov edx, 0x47da88
call fcn.00404ae4
mov eax, 0x47da98
call fcn.00478d50
mov eax, 0x47daac
call fcn.00478d50
push 0x47dabc
push 0
push 0
call fcn.00406d88
mov dword [ebp - 0xc], eax
push 0x12c
call sub.kernel32.dll_Sleep_1
push 0x47dacc
push 0
push 0
call fcn.00406d88
mov dword [ebp - 8], eax
xor edx, edx
push ebp
push 0x47d6f5
push dword fs:[edx]
mov dword fs:[edx], esp
xor eax, eax
push ebp
push 0x47cd8d
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004792ec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47cdbf
call fcn.0047922c
test al, al
jne 0x47cef9
lea eax, [ebp - 0x54]
mov ecx, 0x47dae4
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0x54]
call fcn.00404f20
push eax
call sub.kernel32.dll_LoadLibraryA
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jbe 0x47cfde
xor edx, edx
push ebp
push 0x47cef2
push dword fs:[edx]
mov dword fs:[edx], esp
push 0x47daf0
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov ebx, eax
test ebx, ebx
je 0x47cedb
mov eax, ebx
xor edx, edx
push ebp
push 0x47ce3e
push dword fs:[edx]
mov dword fs:[edx], esp
call eax
mov ebx, eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47ce4d
cmp ebx, 1
je 0x47ce97
cmp ebx, 2
je 0x47ce97
push 0
push 0x47daf8
lea edx, [ebp - 0x5c]
mov eax, ebx
call fcn.00408b34
mov ecx, dword [ebp - 0x5c]
lea eax, [ebp - 0x58]
mov edx, 0x47db08
call fcn.00404da8
mov eax, dword [ebp - 0x58]
call fcn.00404f20
push eax
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004044d0
call fcn.004044d0
jmp 0x47d8e9
cmp ebx, 2
jne 0x47cedb
push 0
lea eax, [ebp - 0x60]
mov ecx, 0x47db28
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0x60]
call fcn.00404f20
push eax
lea eax, [ebp - 0x64]
mov ecx, 0x47db44
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0x64]
call fcn.00404f20
push eax
call sub.kernel32.dll_CopyFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47cfde
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_FreeLibrary_1
ret
push dword [0x488ce4]
push 0x47db58
push 0x47db74
lea eax, [ebp - 0x68]
mov edx, 3
call fcn.00404e24
mov eax, dword [ebp - 0x68]
call fcn.0047c4ac
lea eax, [ebp - 0x6c]
mov ecx, 0x47dae4
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0x6c]
call fcn.00404f20
push eax
call sub.kernel32.dll_LoadLibraryA
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jbe 0x47cfde
xor edx, edx
push ebp
push 0x47cfd7
push dword fs:[edx]
mov dword fs:[edx], esp
push 0x47db7c
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov ebx, eax
test ebx, ebx
je 0x47cfc0
mov eax, ebx
xor edx, edx
push ebp
push 0x47cf8c
push dword fs:[edx]
mov dword fs:[edx], esp
call eax
mov ebx, eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47cf9b
dec ebx
je 0x47cfc0
push 0
push 0x47daf8
push 0x47db88
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004044d0
call fcn.004044d0
jmp 0x47d8e9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47cfde
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_FreeLibrary_1
ret
mov eax, dword [0x4826d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, 0x37
call fcn.00462b50
call fcn.0047922c
test al, al
je 0x47d028
push dword [0x488ce4]
push 0x47dba0
push 0x47db74
lea eax, [ebp - 0x70]
mov edx, 3
call fcn.00404e24
mov eax, dword [ebp - 0x70]
call fcn.0047c4ac
jmp 0x47d0b0
lea eax, [ebp - 0x74]
mov ecx, 0x47dbbc
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0x74]
call fcn.00404f20
push eax
call sub.kernel32.dll_LoadLibraryA
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jbe 0x47d0b0
xor eax, eax
push ebp
push 0x47d0a9
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x47dbc8
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov ebx, eax
test ebx, ebx
je 0x47d092
lea eax, [ebp - 0x78]
mov ecx, 0x47dbbc
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0x78]
call fcn.00404f20
push eax
call ebx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47d0b0
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_FreeLibrary_1
ret
mov eax, dword [0x4826d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, 0x3c
call fcn.00462b50
call fcn.0047922c
test al, al
je 0x47d11b
jmp 0x47d0fa
push 5
mov eax, dword [0x4823a4]
mov eax, dword [eax]
push eax
mov eax, dword [0x482378]
mov eax, dword [eax]
push eax
push 0
call sub.user32.dll_MessageBoxA_1
cmp eax, 4
je 0x47d0fa
call fcn.004044d0
jmp 0x47d8e9
lea eax, [ebp - 0x7c]
mov ecx, 0x47dbdc
mov edx, dword [0x488ce8]
call fcn.00404da8
mov eax, dword [ebp - 0x7c]
call fcn.0047c650
test al, al
je 0x47d0d2
jmp 0x47d166
call fcn.0047ba14
test al, al
jne 0x47d166
mov edx, 0x47dbfc
mov eax, 0x80000002
call fcn.00478ef8
jmp 0x47d15d
push 5
mov eax, dword [0x4823a4]
mov eax, dword [eax]
push eax
mov eax, dword [0x482378]
mov eax, dword [eax]
push eax
push 0
call sub.user32.dll_MessageBoxA_1
cmp eax, 4
je 0x47d15d
call fcn.004044d0
jmp 0x47d8e9
call fcn.0047ba14
test al, al
je 0x47d135
mov eax, dword [0x4825c0]
mov eax, dword [eax]
call fcn.0045f9f4
mov eax, dword [0x4826d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, 0x41
call fcn.00462b50
mov cl, 1
mov dl, 1
mov eax, dword [0x478e94]
call fcn.0041adf0
mov dword [0x488d00], eax
mov eax, dword [0x488d00]
mov byte [eax + 0xf], 1
mov eax, dword [0x488d00]
call fcn.0041b280
mov eax, dword [0x4825c0]
mov eax, dword [eax]
call fcn.0045f9f4
mov eax, 0x47d9cc
cmp byte [eax + 6], 0x32
je 0x47d376
call fcn.0047922c
test al, al
jne 0x47d1fa
push dword [0x488ce4]
push 0x47dc3c
push 0x47db74
lea eax, [ebp - 0x80]
mov edx, 3
call fcn.00404e24
mov eax, dword [ebp - 0x80]
call fcn.0047c4ac
jmp 0x47d225
push dword [0x488ce4]
push 0x47dc54
push 0x47db74
lea eax, [ebp - 0x84]
mov edx, 3
call fcn.00404e24
mov eax, dword [ebp - 0x84]
call fcn.0047c4ac
mov eax, dword [0x4826d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, 0x50
call fcn.00462b50
call fcn.0047922c
test al, al
jne 0x47d272
push dword [0x488ce4]
push 0x47dc70
push 0x47db74
lea eax, [ebp - 0x88]
mov edx, 3
call fcn.00404e24
mov eax, dword [ebp - 0x88]
call fcn.0047c4ac
jmp 0x47d29d
push dword [0x488ce4]
push 0x47dc8c
push 0x47db74
lea eax, [ebp - 0x8c]
mov edx, 3
call fcn.00404e24
mov eax, dword [ebp - 0x8c]
call fcn.0047c4ac
mov eax, dword [0x4826d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, 0x5a
call fcn.00462b50
call fcn.0047922c
test al, al
jne 0x47d2ea
push dword [0x488ce4]
push 0x47dca8
push 0x47db74
lea eax, [ebp - 0x90]
mov edx, 3
call fcn.00404e24
mov eax, dword [ebp - 0x90]
call fcn.0047c4ac
jmp 0x47d315
push dword [0x488ce4]
push 0x47dcc0
push 0x47db74
lea eax, [ebp - 0x94]
mov edx, 3
call fcn.00404e24
mov eax, dword [ebp - 0x94]
call fcn.0047c4ac
call fcn.0047922c
test al, al
jne 0x47d34b
push dword [0x488ce4]
push 0x47dcd8
push 0x47db74
lea eax, [ebp - 0x98]
mov edx, 3
call fcn.00404e24
mov eax, dword [ebp - 0x98]
call fcn.0047c4ac
jmp 0x47d376
push dword [0x488ce4]
push 0x47dcf0
push 0x47db74
lea eax, [ebp - 0x9c]
mov edx, 3
call fcn.00404e24
mov eax, dword [ebp - 0x9c]
call fcn.0047c4ac
mov eax, dword [0x488d00]
call fcn.0041b2a8
mov eax, dword [0x4825c0]
mov eax, dword [eax]
call fcn.0045f9f4
cmp dword [0x488cf0], 0
je 0x47d3aa
mov ecx, dword [0x488cf0]
mov edx, 0x47dd08
mov eax, 0x47dd1c
call fcn.004775a4
cmp dword [0x488cf4], 0
je 0x47d3c8
mov ecx, dword [0x488cf4]
mov edx, 0x47dd28
mov eax, 0x47dd1c
call fcn.004775a4
mov ecx, 0x47d9cc
mov edx, 0x47d9bc
mov eax, 0x47d9bc
call fcn.004775a4
call fcn.0047922c
test al, al
je 0x47d4d5
lea eax, [ebp - 0xa0]
mov ecx, 0x47dd3c
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0xa0]
call fcn.00408fe0
test al, al
je 0x47d485
mov ebx, 1
push 1
push dword [0x488ce4]
push 0x47d930
lea edx, [ebp - 0xa8]
mov eax, ebx
call fcn.00408b34
push dword [ebp - 0xa8]
push 0x47dd50
lea eax, [ebp - 0xa4]
mov edx, 4
call fcn.00404e24
mov eax, dword [ebp - 0xa4]
call fcn.00404f20
push eax
lea eax, [ebp - 0xac]
mov ecx, 0x47dd3c
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0xac]
call fcn.00404f20
push eax
call sub.kernel32.dll_MoveFileExA
test eax, eax
jne 0x47d485
inc ebx
cmp ebx, 0x65
jne 0x47d413
push 0
lea eax, [ebp - 0xb0]
mov ecx, 0x47dd3c
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0xb0]
call fcn.00404f20
push eax
mov ecx, 0x47dd3c
lea eax, [ebp - 0xb4]
mov edx, dword [0x488cec]
call fcn.00404da8
mov eax, dword [ebp - 0xb4]
call fcn.00404f20
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x47d5bc
lea eax, [ebp - 0xb8]
mov ecx, 0x47dd60
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0xb8]
call fcn.00408fe0
test al, al
je 0x47d571
mov ebx, 1
push 1
push dword [0x488ce4]
push 0x47d930
lea edx, [ebp - 0xc0]
mov eax, ebx
call fcn.00408b34
push dword [ebp - 0xc0]
push 0x47dd50
lea eax, [ebp - 0xbc]
mov edx, 4
call fcn.00404e24
mov eax, dword [ebp - 0xbc]
call fcn.00404f20
push eax
lea eax, [ebp - 0xc4]
mov ecx, 0x47dd60
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0xc4]
call fcn.00404f20
push eax
call sub.kernel32.dll_MoveFileExA
test eax, eax
jne 0x47d571
inc ebx
cmp ebx, 0x65
jne 0x47d4ff
push 0
lea eax, [ebp - 0xc8]
mov ecx, 0x47dd60
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0xc8]
call fcn.00404f20
push eax
mov ecx, 0x47dd60
lea eax, [ebp - 0xcc]
mov edx, dword [0x488cec]
call fcn.00404da8
mov eax, dword [ebp - 0xcc]
call fcn.00404f20
push eax
call sub.kernel32.dll_CopyFileA
lea eax, [ebp - 0xd0]
mov ecx, 0x47dd74
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0xd0]
call fcn.00408fe0
test al, al
je 0x47d6a7
mov ebx, 1
push 1
push dword [0x488ce4]
push 0x47d930
lea edx, [ebp - 0xd8]
mov eax, ebx
call fcn.00408b34
push dword [ebp - 0xd8]
push 0x47dd50
lea eax, [ebp - 0xd4]
mov edx, 4
call fcn.00404e24
mov eax, dword [ebp - 0xd4]
call fcn.00404f20
push eax
lea eax, [ebp - 0xdc]
mov ecx, 0x47dd74
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0xdc]
call fcn.00404f20
push eax
call sub.kernel32.dll_MoveFileExA
test eax, eax
jne 0x47d65c
inc ebx
cmp ebx, 0x65
jne 0x47d5ea
push 0
lea eax, [ebp - 0xe0]
mov ecx, 0x47dd74
mov edx, dword [0x488ce4]
call fcn.00404da8
mov eax, dword [ebp - 0xe0]
call fcn.00404f20
push eax
mov ecx, 0x47dd74
lea eax, [ebp - 0xe4]
mov edx, dword [0x488cec]
call fcn.00404da8
mov eax, dword [ebp - 0xe4]
call fcn.00404f20
push eax
call sub.kernel32.dll_CopyFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47d6fc
push 0x47dacc
call fcn.0047c5fc
test eax, eax
je 0x47d6d4
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_ReleaseMutex
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_CloseHandle
push 0x47dabc
call fcn.0047c5fc
test eax, eax
je 0x47d6f4
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_ReleaseMutex
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_CloseHandle
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47d91e
lea eax, [ebp - 0x110]
mov edx, 8
call fcn.00404ab4
lea eax, [ebp - 0xec]
mov edx, 0x37
call fcn.00404ab4
ret