Function at 0x415470
Capabilities:
Check if file exists
Get file attributes
Move file
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b3128
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x274
mov eax, dword [0x682588]
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x10], esp
cmp eax, edi
mov dword [ebp - 0x78], ecx
mov dword [ebp - 4], edi
jne 0x4154aa
mov eax, 0x68258c
push 0x657d9c
push eax
lea eax, [ebp - 0x280]
push 0x657d90
push eax
call fcn.0058572e
add esp, 0x10
lea ecx, [ebp - 0x280]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415bf1
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x20], eax
mov word [ebp - 0x1c], di
mov esi, dword [0x6825a8]
mov byte [ebp - 4], 1
cmp esi, edi
jne 0x4154f9
mov esi, 0x6825ac
mov edx, str._s_scomponents2idmmzcc.dll
test edx, edx
je 0x4155fc
cmp esi, edi
je 0x4155fc
mov ecx, str.idmmzcc5
test ecx, ecx
je 0x4155fc
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e50
mov bl, 2
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.00403ad0
push str.idmmzcc5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00403ad0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
call fcn.00584816
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00584816
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.0059cff9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x20], edx
je 0x4155d6
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.005847a6
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.00584816
add esp, 0x18
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x415603
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415995
mov esi, dword [0x6825a8]
test esi, esi
jne 0x415622
mov esi, 0x6825ac
mov edx, str._s_scomponents2idmcchandler.dll
test edx, edx
je 0x415722
test esi, esi
je 0x415722
mov eax, str.idmmzcc5
test eax, eax
je 0x415722
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e50
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 5
call fcn.00403ad0
mov bl, 6
push str.idmmzcc5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00403ad0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 7
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
call fcn.00584816
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00584816
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.0059cff9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x20], edx
je 0x4156ff
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.005847a6
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.00584816
add esp, 0x18
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 5
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x41572c
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415995
mov esi, dword [0x6825a8]
test esi, esi
jne 0x41574b
mov esi, 0x6825ac
mov edx, str._s_schromeidmmzcc.jar
test edx, edx
je 0x41584b
test esi, esi
je 0x41584b
mov eax, str.idmmzcc5
test eax, eax
je 0x41584b
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e50
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 8
call fcn.00403ad0
mov bl, 9
push str.idmmzcc5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00403ad0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xa
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
call fcn.00584816
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00584816
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.0059cff9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x20], edx
je 0x415828
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.005847a6
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.00584816
add esp, 0x18
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 8
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x415855
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415995
mov esi, dword [0x6825a8]
test esi, esi
jne 0x415874
mov esi, 0x6825ac
mov edx, str._s_scomponents5idmmzcc.dll
test edx, edx
je 0x415974
test esi, esi
je 0x415974
mov eax, str.idmmzcc5
test eax, eax
je 0x415974
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e50
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xb
call fcn.00403ad0
mov bl, 0xc
push str.idmmzcc5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00403ad0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xd
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
call fcn.00584816
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00584816
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.0059cff9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x20], edx
je 0x415951
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.005847a6
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.00584816
add esp, 0x18
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xb
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x41597e
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x415995
mov eax, dword [ebp + 8]
test eax, eax
je 0x415b34
lea edx, [ebp - 0x280]
push edx
call fcn.00572540
mov esi, eax
add esp, 4
test esi, esi
je 0x4159f1
lea eax, [ebp - 0x64]
push eax
push esi
call fcn.00572940
mov ebx, dword [ebp - 0x78]
add esp, 8
xor edi, edi
cmp edi, dword [ebp - 0x64]
jae 0x4159e8
mov ecx, dword [ebp + 8]
push ebx
push ecx
push esi
call fcn.004144a0
add esp, 0xc
test eax, eax
jne 0x4159e8
mov eax, dword [ebp - 0x64]
inc edi
cmp edi, eax
jae 0x4159e8
push esi
call fcn.00572d90
add esp, 4
test eax, eax
je 0x4159bc
push esi
call fcn.00573340
add esp, 4
call fcn.00415200
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x54], eax
mov word [ebp - 0x58], ax
mov esi, dword [0x6825a8]
mov byte [ebp - 4], 0xe
cmp esi, eax
jne 0x415a15
mov esi, 0x6825ac
mov edx, 0x656fdc
test edx, edx
je 0x415b18
test esi, esi
je 0x415b18
mov ecx, str.idmmzcc5
test ecx, ecx
je 0x415b18
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e50
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xf
call fcn.00403ad0
mov bl, 0x10
push str.idmmzcc5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00403ad0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x11
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
call fcn.00584816
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00584816
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.0059cff9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x5c], edx
je 0x415af2
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
mov eax, dword [ebp - 0x5c]
push esi
push eax
call fcn.005847a6
mov ecx, dword [ebp - 0x5c]
push ecx
call fcn.00584816
add esp, 0x18
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xe
call fcn.00401070
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x415b1f
lea eax, [ebp - 0x58]
push eax
call fcn.00415180
add esp, 4
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 1
call fcn.00401070
lea edx, [ebp - 0x14]
push edx
push 0xf003f
push 0
push str.SoftwareMozillaFirefoxExtensions
push reloc.WSOCK32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x415c06
lea eax, [ebp - 0x14]
push 0
push eax
push 0
push 0xf003f
push 0
push 0x681f78
push 0
push str.SoftwareMozilla
push reloc.WSOCK32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x415be5
mov ecx, dword [ebp - 0x14]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
call ebx
lea edx, [ebp - 0x14]
push 0
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push edx
push 0
push 0xf003f
push 0
push 0x681f78
push 0
push str.SoftwareMozillaFirefox
push reloc.WSOCK32.dll_accept
call esi
test eax, eax
jne 0x415be5
mov eax, dword [ebp - 0x14]
push eax
call ebx
lea ecx, [ebp - 0x14]
push 0
push ecx
push 0
push 0xf003f
push 0
push 0x681f78
push 0
push str.SoftwareMozillaFirefoxExtensions
push reloc.WSOCK32.dll_accept
call esi
test eax, eax
je 0x415c0c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0
call fcn.00401070
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov dword [ebp + 8], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x48], eax
mov word [ebp - 0x4c], ax
mov ecx, dword [0x6825a8]
mov byte [ebp - 4], 0x12
cmp ecx, eax
mov esi, ecx
jne 0x415c30
mov esi, 0x6825ac
mov edx, 0x656fdc
test edx, edx
je 0x415d33
test esi, esi
je 0x415d33
mov ecx, str.idmmzcc5
test ecx, ecx
je 0x415d33
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e50
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.00403ad0
push str.idmmzcc5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00403ad0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x15
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
call fcn.00584816
add esp, 4
lea ecx, [ebp - 0x38]
mov edi, eax
call fcn.00401ed0
push eax
call fcn.00584816
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.0059cff9
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x50], edx
je 0x415d0c
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
mov eax, dword [ebp - 0x50]
push esi
push eax
call fcn.005847a6
mov ecx, dword [ebp - 0x50]
push ecx
call fcn.00584816
add esp, 0x18
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x12
call fcn.00401070
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x415df8
lea eax, [ebp - 0x4c]
lea esi, [ebp - 0x4c]
push eax
call fcn.00584816
add esp, 4
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea edx, [eax + eax + 2]
mov eax, dword [ebp - 0x14]
push edx
push esi
push 1
push 0
push str.mozilla_cc_internetdownloadmanager.com
push eax
call edi
test eax, eax
jne 0x415d70
mov dword [ebp + 8], 1
mov ecx, dword [ebp - 0x14]
push ecx
call ebx
lea edx, [ebp - 0x14]
push edx
push 0xf003f
push 0
push str.SoftwareMozillaSeaMonkeyExtensions
push reloc.WSOCK32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x415ded
lea eax, [ebp - 0x14]
push 0
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push eax
push 0
push 0xf003f
push 0
push 0x681f78
push 0
push str.SoftwareMozillaSeaMonkey
push reloc.WSOCK32.dll_accept
call esi
test eax, eax
jne 0x415e29
mov ecx, dword [ebp - 0x14]
push ecx
call ebx
lea edx, [ebp - 0x14]
push 0
push edx
push 0
push 0xf003f
push 0
push 0x681f78
push 0
push str.SoftwareMozillaSeaMonkeyExtensions
push reloc.WSOCK32.dll_accept
call esi
test eax, eax
jne 0x415e29
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x415dff
mov esi, eax
jmp 0x415e05
mov esi, eax
jmp 0x415d41
lea eax, [ebp - 0x4c]
lea esi, [ebp - 0x4c]
push eax
call fcn.00584816
mov ecx, dword [ebp - 0x14]
add esp, 4
lea eax, [eax + eax + 2]
push eax
push esi
push 1
push 0
push str.mozilla_cc_internetdownloadmanager.com
push ecx
call edi
mov edx, dword [ebp - 0x14]
push edx
call ebx
mov ebx, dword [ebp + 8]
xor esi, esi
cmp ebx, esi
je 0x415ff0
mov eax, dword [ebp - 0x50]
cmp eax, esi
jne 0x415e40
lea eax, [ebp - 0x4c]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push eax
call edi
cmp eax, 0xffffffff
je 0x415ff0
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x6c], esi
mov word [ebp - 0x70], si
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x60], esi
mov word [ebp - 0x64], si
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x54], esi
mov word [ebp - 0x58], si
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x24], esi
mov word [ebp - 0x28], si
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x30], esi
mov word [ebp - 0x34], si
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x3c], esi
mov word [ebp - 0x40], si
mov eax, dword [0x6825a8]
mov byte [ebp - 4], 0x1b
cmp eax, esi
jne 0x415ea0
mov eax, 0x6825ac
push eax
push str._sidmmzcc
lea ecx, [ebp - 0x74]
call fcn.00413150
mov eax, dword [0x6825a8]
cmp eax, esi
jne 0x415ebc
mov eax, 0x6825ac
push eax
push str._sidmmzcc2
lea ecx, [ebp - 0x68]
call fcn.00413150
mov eax, dword [0x6825a8]
cmp eax, esi
jne 0x415ed8
mov eax, 0x6825ac
push eax
push str._sidmmzcc3
lea ecx, [ebp - 0x5c]
call fcn.00413150
mov ecx, 0x6825a8
call fcn.00401ed0
push eax
push str._sidmmzcc01
lea ecx, [ebp - 0x2c]
call fcn.00413150
mov ecx, 0x6825a8
call fcn.00401ed0
push eax
push str._sidmmzcc02
lea ecx, [ebp - 0x38]
call fcn.00413150
mov ecx, 0x6825a8
call fcn.00401ed0
push eax
push str._sidmmzcc03
lea ecx, [ebp - 0x44]
call fcn.00413150
lea ecx, [ebp - 0x74]
call fcn.00401ed0
push eax
call edi
cmp eax, 0xffffffff
je 0x415f5a
lea ecx, [ebp - 0x2c]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x74]
call fcn.00401ed0
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
push eax
call esi
jmp 0x415f60
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileW]
lea ecx, [ebp - 0x68]
call fcn.00401ed0
push eax
call edi
cmp eax, 0xffffffff
je 0x415f84
lea ecx, [ebp - 0x38]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x68]
call fcn.00401ed0
push eax
call esi
lea ecx, [ebp - 0x5c]
call fcn.00401ed0
push eax
call edi
cmp eax, 0xffffffff
je 0x415fa8
lea ecx, [ebp - 0x44]
call fcn.00401ed0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00401ed0
push eax
call esi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1a
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x19
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.00401070
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x17
call fcn.00401070
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x16
call fcn.00401070
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x12
call fcn.00401070
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.00401070
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0
call fcn.00401070
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, ebx
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4