Function at 0x428ee0
Capabilities:
Create thread
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b3736
mov eax, dword fs:[0]
push eax
sub esp, 0xbb8
mov eax, dword [0x4d84d0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
push 1
call fcn.0040c580
add esp, 4
push 0
lea eax, [ebp - 0xb58]
push eax
call fcn.0040b690
add esp, 8
lea ecx, [ebp - 0xb58]
call fcn.004048f0
mov eax, 0x20
test eax, eax
je 0x4290c5
push 0xb0
lea ecx, [ebp - 0xc4]
call fcn.00424830
push 1
push 3
lea ecx, [ebp - 0xc4]
call fcn.00412600
mov dword [ebp - 4], 0
lea eax, [ebp - 0xcc]
push eax
call fcn.0042ee10
add esp, 4
lea eax, [ebp - 0xcc]
push eax
call fcn.0042fb80
add esp, 4
mov dword [ebp - 0xd0], eax
mov byte [ebp - 0x110], 0
push 0x3f
push 0
lea eax, [ebp - 0x10f]
push eax
call fcn.00490e10
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0xd0]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ecx + 8]
push edx
push str._02d:_02d:_02d__u._u_
push 0x40
lea eax, [ebp - 0x110]
push eax
call fcn.00493cad
add esp, 0x20
lea eax, [ebp - 0xc4]
test eax, eax
je 0x429004
lea ecx, [ebp - 0xc4]
add ecx, 0x10
mov dword [ebp - 0xbbc], ecx
jmp 0x42900e
mov dword [ebp - 0xbbc], 0
push 0x4b8100
push 0x4b7674
push str.CMainFrame
push 0x4b768c
lea edx, [ebp - 0x110]
push edx
mov eax, dword [ebp - 0xbbc]
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push 0x411690
lea eax, [ebp - 0xb40]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041d910
mov dword [ebp - 0xbbc], eax
mov ecx, dword [ebp - 0xbbc]
mov dword [ebp - 0xbc0], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xbc0]
push edx
push 0x4db630
call fcn.0040d090
add esp, 8
mov ecx, eax
call fcn.00413d80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb40]
call fcn.004048f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc4]
call fcn.00414570
xor eax, eax
jne 0x428f37
mov byte [ebp - 0x214], 0
push 0x103
push 0
lea eax, [ebp - 0x213]
push eax
call fcn.00490e10
add esp, 0xc
push 0
push 0x1a
lea eax, [ebp - 0x214]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
mov byte [ebp - 0x318], 0
push 0x103
push 0
lea eax, [ebp - 0x317]
push eax
call fcn.00490e10
add esp, 0xc
push str.HaiYuInstDXInst
lea eax, [ebp - 0x214]
push eax
push 0x4b7ac4
lea ecx, [ebp - 0x318]
push ecx
call fcn.0041ec50
add esp, 0x10
xor eax, eax
mov word [ebp - 0x520], ax
push 0x206
push 0
lea eax, [ebp - 0x51e]
push eax
call fcn.00490e10
add esp, 0xc
push 0x104
lea eax, [ebp - 0x520]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x318]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [ebp - 0x520]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x8c0
call fcn.00404a50
lea eax, [ebp - 0x520]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x8d8
call fcn.00404a50
push str.Setup.exe
mov ecx, dword [ebp - 0x14]
add ecx, 0x8c0
call fcn.00402c70
mov eax, 0x20
test eax, eax
je 0x4293b8
push 0xb0
lea ecx, [ebp - 0x5d0]
call fcn.00424830
push 1
push 3
lea ecx, [ebp - 0x5d0]
call fcn.00412600
mov dword [ebp - 4], 2
lea eax, [ebp - 0x5d8]
push eax
call fcn.0042ee10
add esp, 4
lea eax, [ebp - 0x5d8]
push eax
call fcn.0042fb80
add esp, 4
mov dword [ebp - 0x5dc], eax
mov byte [ebp - 0x61c], 0
push 0x3f
push 0
lea eax, [ebp - 0x61b]
push eax
call fcn.00490e10
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov eax, dword [ebp - 0x5dc]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x5dc]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x5dc]
mov edx, dword [ecx + 8]
push edx
push str._02d:_02d:_02d__u._u_
push 0x40
lea eax, [ebp - 0x61c]
push eax
call fcn.00493cad
add esp, 0x20
lea eax, [ebp - 0x5d0]
test eax, eax
je 0x429282
lea ecx, [ebp - 0x5d0]
add ecx, 0x10
mov dword [ebp - 0xbbc], ecx
jmp 0x42928c
mov dword [ebp - 0xbbc], 0
lea edx, [ebp - 0xaf8]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x8c0
call fcn.004072b0
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xaf4]
push ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0x8c0
call fcn.00406f10
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0xb28]
call fcn.00404610
mov dword [ebp - 0xbc0], eax
mov eax, dword [ebp - 0xbc0]
mov dword [ebp - 0xbc4], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xbc4]
call fcn.00410d80
push eax
push str.dest_path:
push 0x4b7674
push str.CMainFrame
push 0x4b768c
lea ecx, [ebp - 0x61c]
push ecx
mov edx, dword [ebp - 0xbbc]
push edx
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d090
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb28]
call fcn.004048f0
push 0x411690
lea eax, [ebp - 0xb10]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.0041d910
mov dword [ebp - 0xbbc], eax
mov ecx, dword [ebp - 0xbbc]
mov dword [ebp - 0xbc0], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0xbc0]
push edx
push 0x4db630
call fcn.0040d090
add esp, 8
mov ecx, eax
call fcn.00413d80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb10]
call fcn.004048f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5d0]
call fcn.00414570
xor eax, eax
jne 0x4291b5
push 4
lea ecx, [ebp - 0x620]
call fcn.00424830
lea eax, [ebp - 0x620]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x880
call fcn.00425c40
mov ecx, eax
call fcn.00424800
jmp 0x4293f6
lea eax, [ebp - 0xaf0]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x880
call fcn.00425c40
mov ecx, eax
call fcn.004256b0
push eax
lea ecx, [ebp - 0x620]
call fcn.0041fb00
movzx ecx, al
test ecx, ecx
je 0x429b4c
mov eax, dword [ebp - 0x14]
add eax, 0x8c0
push eax
lea ecx, [ebp - 0x638]
push ecx
call fcn.0040a800
add esp, 8
mov dword [ebp - 4], 5
push 0
lea ecx, [ebp - 0x638]
call fcn.00406f40
push eax
call fcn.00495ff0
add esp, 8
cmp eax, 0xffffffff
je 0x4298f5
lea ecx, [ebp - 0x620]
call fcn.0041fb70
add eax, 0x18
push eax
lea ecx, [ebp - 0x650]
call fcn.00408130
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x638]
call fcn.00406f40
push eax
lea eax, [ebp - 0x668]
push eax
call fcn.0042aff0
add esp, 8
mov byte [ebp - 4], 7
push fcn.00491f32
lea eax, [ebp - 0xaec]
push eax
lea ecx, [ebp - 0x650]
call fcn.00409f80
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0xae8]
push edx
lea ecx, [ebp - 0x650]
call fcn.0040a010
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xae4]
push ecx
lea ecx, [ebp - 0x650]
call fcn.00409f80
mov edx, dword [eax]
push edx
lea eax, [ebp - 0xae0]
push eax
call fcn.0041ece0
add esp, 0x14
push fcn.00491f32
lea eax, [ebp - 0xadc]
push eax
lea ecx, [ebp - 0x668]
call fcn.00409f80
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0xad8]
push edx
lea ecx, [ebp - 0x668]
call fcn.0040a010
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xad4]
push ecx
lea ecx, [ebp - 0x668]
call fcn.00409f80
mov edx, dword [eax]
push edx
lea eax, [ebp - 0xad0]
push eax
call fcn.0041ece0
add esp, 0x14
lea eax, [ebp - 0x668]
push eax
lea ecx, [ebp - 0x650]
push ecx
call fcn.0041e990
add esp, 8
movzx edx, al
test edx, edx
je 0x429712
mov eax, 0x20
test eax, eax
je 0x4296f3
push 0xb0
lea ecx, [ebp - 0x718]
call fcn.00424830
push 1
push 3
lea ecx, [ebp - 0x718]
call fcn.00412600
mov byte [ebp - 4], 8
lea eax, [ebp - 0x720]
push eax
call fcn.0042ee10
add esp, 4
lea eax, [ebp - 0x720]
push eax
call fcn.0042fb80
add esp, 4
mov dword [ebp - 0x724], eax
mov byte [ebp - 0x764], 0
push 0x3f
push 0
lea eax, [ebp - 0x763]
push eax
call fcn.00490e10
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov eax, dword [ebp - 0x724]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x724]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ecx + 8]
push edx
push str._02d:_02d:_02d__u._u_
push 0x40
lea eax, [ebp - 0x764]
push eax
call fcn.00493cad
add esp, 0x20
lea eax, [ebp - 0x718]
test eax, eax
je 0x429635
lea ecx, [ebp - 0x718]
add ecx, 0x10
mov dword [ebp - 0xbbc], ecx
jmp 0x42963f
mov dword [ebp - 0xbbc], 0
push str.md5_is_wrong__that_will_be_deleted_
push 0x4b7674
push str.CMainFrame
push 0x4b768c
lea edx, [ebp - 0x764]
push edx
mov eax, dword [ebp - 0xbbc]
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push 0x411690
lea eax, [ebp - 0xac8]
push eax
lea ecx, [ebp - 0x718]
call fcn.0041d910
mov dword [ebp - 0xbbc], eax
mov ecx, dword [ebp - 0xbbc]
mov dword [ebp - 0xbc0], ecx
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0xbc0]
push edx
push 0x4db630
call fcn.0040d090
add esp, 8
mov ecx, eax
call fcn.00413d80
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xac8]
call fcn.004048f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x718]
call fcn.00414570
xor eax, eax
jne 0x42956b
lea ecx, [ebp - 0x638]
call fcn.00406f40
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x4298d7
mov eax, 0x20
test eax, eax
je 0x42989a
push 0xb0
lea ecx, [ebp - 0x814]
call fcn.00424830
push 1
push 3
lea ecx, [ebp - 0x814]
call fcn.00412600
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x81c]
push eax
call fcn.0042ee10
add esp, 4
lea eax, [ebp - 0x81c]
push eax
call fcn.0042fb80
add esp, 4
mov dword [ebp - 0x820], eax
mov byte [ebp - 0x860], 0
push 0x3f
push 0
lea eax, [ebp - 0x85f]
push eax
call fcn.00490e10
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov eax, dword [ebp - 0x820]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x820]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x820]
mov edx, dword [ecx + 8]
push edx
push str._02d:_02d:_02d__u._u_
push 0x40
lea eax, [ebp - 0x860]
push eax
call fcn.00493cad
add esp, 0x20
lea eax, [ebp - 0x814]
test eax, eax
je 0x4297dc
lea ecx, [ebp - 0x814]
add ecx, 0x10
mov dword [ebp - 0xbbc], ecx
jmp 0x4297e6
mov dword [ebp - 0xbbc], 0
push str.file_is_exist_md5_is_right_
push 0x4b7674
push str.CMainFrame
push 0x4b768c
lea edx, [ebp - 0x860]
push edx
mov eax, dword [ebp - 0xbbc]
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push 0x411690
lea eax, [ebp - 0xbb8]
push eax
lea ecx, [ebp - 0x814]
call fcn.0041d910
mov dword [ebp - 0xbbc], eax
mov ecx, dword [ebp - 0xbbc]
mov dword [ebp - 0xbc0], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0xbc0]
push edx
push 0x4db630
call fcn.0040d090
add esp, 8
mov ecx, eax
call fcn.00413d80
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xbb8]
call fcn.004048f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x814]
call fcn.00414570
xor eax, eax
jne 0x429712
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x668]
call fcn.004048f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x650]
call fcn.004048f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x638]
call fcn.004048f0
jmp 0x429b4c
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x668]
call fcn.004048f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x650]
call fcn.004048f0
lea ecx, [ebp - 0x620]
call fcn.0041fb70
push eax
lea eax, [ebp - 0x878]
push eax
call fcn.0040a680
add esp, 8
mov byte [ebp - 4], 0xc
push 1
push str.Setup.exebk
mov ecx, dword [ebp - 0x14]
add ecx, 0x8d8
call fcn.00403a30
push eax
lea ecx, [ebp - 0x878]
call fcn.00403a30
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2c
call fcn.004027e0
test eax, eax
jne 0x429b24
mov eax, 0x20
test eax, eax
je 0x429b1c
push 0xb0
lea ecx, [ebp - 0x928]
call fcn.00424830
push 1
push 3
lea ecx, [ebp - 0x928]
call fcn.00412600
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x930]
push eax
call fcn.0042ee10
add esp, 4
lea eax, [ebp - 0x930]
push eax
call fcn.0042fb80
add esp, 4
mov dword [ebp - 0x934], eax
mov byte [ebp - 0x974], 0
push 0x3f
push 0
lea eax, [ebp - 0x973]
push eax
call fcn.00490e10
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov eax, dword [ebp - 0x934]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x934]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x934]
mov edx, dword [ecx + 8]
push edx
push str._02d:_02d:_02d__u._u_
push 0x40
lea eax, [ebp - 0x974]
push eax
call fcn.00493cad
add esp, 0x20
lea eax, [ebp - 0x928]
test eax, eax
je 0x429a13
lea ecx, [ebp - 0x928]
add ecx, 0x10
mov dword [ebp - 0xbbc], ecx
jmp 0x429a1d
mov dword [ebp - 0xbbc], 0
lea edx, [ebp - 0x878]
push edx
lea eax, [ebp - 0xba0]
push eax
call fcn.0040a800
add esp, 8
mov dword [ebp - 0xbc0], eax
mov ecx, dword [ebp - 0xbc0]
mov dword [ebp - 0xbc4], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0xbc4]
push edx
push str.add_download_task_failed:
push 0x4b7674
push str.CMainFrame
push 0x4b768c
lea eax, [ebp - 0x974]
push eax
mov ecx, dword [ebp - 0xbbc]
push ecx
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d090
add esp, 8
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xba0]
call fcn.004048f0
push 0x411690
lea eax, [ebp - 0xb88]
push eax
lea ecx, [ebp - 0x928]
call fcn.0041d910
mov dword [ebp - 0xbbc], eax
mov ecx, dword [ebp - 0xbbc]
mov dword [ebp - 0xbc0], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0xbc0]
push edx
push 0x4db630
call fcn.0040d090
add esp, 8
mov ecx, eax
call fcn.00413d80
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xb88]
call fcn.004048f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x928]
call fcn.00414570
xor eax, eax
jne 0x429949
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x878]
call fcn.00402c50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x638]
call fcn.004048f0
jmp 0x429b4c
mov ecx, dword [ebp - 0x14]
add ecx, 0x2c
call fcn.00402b40
test eax, eax
jle 0x429b66
mov ecx, dword [ebp - 0x14]
add ecx, 0x2c
call fcn.00402a60
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xacc], esp
lea eax, [ebp - 0x520]
push eax
call fcn.00404750
mov dword [ebp - 0xbbc], eax
call fcn.00402cd0
add esp, 0x18
push 0
push 0
mov eax, dword [ebp - 0x14]
push eax
push 0x426390
push 0
push 0
call fcn.00496050
add esp, 0x18
mov eax, 0x20
test eax, eax
je 0x429d32
push 0xb0
lea ecx, [ebp - 0xa24]
call fcn.00424830
push 1
push 3
lea ecx, [ebp - 0xa24]
call fcn.00412600
mov dword [ebp - 4], 0x10
lea eax, [ebp - 0xa2c]
push eax
call fcn.0042ee10
add esp, 4
lea eax, [ebp - 0xa2c]
push eax
call fcn.0042fb80
add esp, 4
mov dword [ebp - 0xa30], eax
mov byte [ebp - 0xa70], 0
push 0x3f
push 0
lea eax, [ebp - 0xa6f]
push eax
call fcn.00490e10
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov eax, dword [ebp - 0xa30]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0xa30]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0xa30]
mov edx, dword [ecx + 8]
push edx
push str._02d:_02d:_02d__u._u_
push 0x40
lea eax, [ebp - 0xa70]
push eax
call fcn.00493cad
add esp, 0x20
lea eax, [ebp - 0xa24]
test eax, eax
je 0x429c71
lea ecx, [ebp - 0xa24]
add ecx, 0x10
mov dword [ebp - 0xbbc], ecx
jmp 0x429c7b
mov dword [ebp - 0xbbc], 0
push str.startDownload__
push 0x4b7674
push str.CMainFrame
push 0x4b768c
lea edx, [ebp - 0xa70]
push edx
mov eax, dword [ebp - 0xbbc]
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push eax
call fcn.0040d3d0
add esp, 8
push 0x411690
lea eax, [ebp - 0xb70]
push eax
lea ecx, [ebp - 0xa24]
call fcn.0041d910
mov dword [ebp - 0xbbc], eax
mov ecx, dword [ebp - 0xbbc]
mov dword [ebp - 0xbc0], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0xbc0]
push edx
push 0x4db630
call fcn.0040d090
add esp, 8
mov ecx, eax
call fcn.00413d80
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb70]
call fcn.004048f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa24]
call fcn.00414570
xor eax, eax
jne 0x429ba4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004909b2
mov esp, ebp
pop ebp
ret