Function at 0x401e6b
Capabilities:
Create process on windows
Delete file
Terminate process

Disassembly:
mov eax, 0x46beb1
call fcn.0045d0a0
sub esp, 0x930
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
cmp edi, ebx
je 0x401e9b
push ebx
push 0x3e9
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov esi, 0x499c48
mov ecx, esi
call fcn.00404454
test al, al
je 0x401ee0
push edi
call fcn.00401b56
test al, al
pop ecx
jne 0x401ee0
mov eax, dword [0x499e1c]
cmp eax, ebx
je 0x401ecc
push str.Password_is_incorrect._n
push eax
call fcn.0045d115
pop ecx
pop ecx
push ebx
push edi
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x40220d
mov eax, dword [0x499e1c]
cmp eax, ebx
je 0x401ef6
push str.Password_verified..._n
push eax
call fcn.0045d115
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
call fcn.004146b0
lea ecx, [ebp - 0x284]
mov dword [ebp - 4], ebx
call fcn.00417560
lea eax, [ebp - 0x284]
mov ecx, esi
push eax
mov byte [ebp - 4], 1
call fcn.00404476
lea ecx, [ebp - 0x284]
call fcn.00417690
test eax, eax
je 0x4020bd
lea ecx, [ebp - 0x284]
call fcn.00417fe0
push eax
lea ecx, [ebp - 0x34]
call fcn.004141f0
lea ecx, [ebp - 0x74]
call fcn.004146b0
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x74]
push eax
mov byte [ebp - 4], 2
call fcn.004155b0
lea ecx, [ebp - 0x34]
call fcn.004140e0
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x74]
push eax
call fcn.00415b90
test al, al
mov edi, 0x481604
mov esi, 0x481600
jne 0x401f96
push esi
lea ecx, [ebp - 0x74]
call fcn.00415900
test al, al
jne 0x401f96
push edi
push esi
lea ecx, [ebp - 0x34]
call fcn.00415030
push 0x2f
push 0x5c
lea ecx, [ebp - 0x34]
call fcn.004139f0
push 0x5c
push 0x2f
lea ecx, [ebp - 0x34]
call fcn.004139f0
push esi
lea ecx, [ebp - 0x34]
call fcn.00415900
test al, al
je 0x401fc7
push edi
push esi
lea ecx, [ebp - 0x34]
call fcn.00415030
jmp 0x401fae
cmp dword [0x499e1c], ebx
je 0x401feb
lea ecx, [ebp - 0x34]
call fcn.00443b00
push eax
push str.unzipDir____s__n
push dword [0x499e1c]
call fcn.0045d115
add esp, 0xc
push ebx
lea ecx, [ebp - 0x34]
call fcn.00443b00
push eax
call fcn.0041d230
pop ecx
cmp al, bl
pop ecx
jne 0x4020a7
cmp dword [0x499e1c], ebx
je 0x402028
lea ecx, [ebp - 0x34]
call fcn.00443b00
push eax
push str.failed_to_ensure_dir_exists:___s__n
push dword [0x499e1c]
call fcn.0045d115
add esp, 0xc
lea ecx, [ebp - 0x1c4]
call fcn.00417560
push str.Failed_to_ensure_dir_exists:
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 3
call fcn.00417fb0
lea ecx, [ebp - 0x34]
call fcn.00443b00
push eax
lea ecx, [ebp - 0x1c4]
call fcn.00417fb0
push ebx
push 0x4812b0
lea ecx, [ebp - 0x1c4]
call fcn.00417970
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 2
call fcn.00417620
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.004149a0
jmp 0x4021f3
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.004149a0
mov edi, dword [ebp + 8]
mov esi, 0x499c48
jmp 0x4020e7
mov eax, dword [0x499e1c]
cmp eax, ebx
je 0x4020d3
push str.Selecting_temp_dir_for_unzipping..._n
push eax
call fcn.0045d115
pop ecx
pop ecx
lea eax, [ebp - 0x34]
push eax
push edi
call fcn.00401d81
pop ecx
test al, al
pop ecx
je 0x4021f3
cmp dword [0x499e1c], ebx
je 0x40210b
lea ecx, [ebp - 0x34]
call fcn.00443b00
push eax
push str.Final_unzip_dir:___s_..._n
push dword [0x499e1c]
call fcn.0045d115
add esp, 0xc
lea ecx, [ebp - 0x34]
call fcn.00443b10
test eax, eax
je 0x402223
lea ecx, [ebp - 0x224]
call fcn.00417560
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 4
call fcn.00443b00
push eax
lea ecx, [ebp - 0x224]
call fcn.00417fb0
lea eax, [ebp - 0x224]
push eax
call fcn.00419eb0
movzx eax, al
cmp eax, ebx
pop ecx
jne 0x402214
cmp dword [0x499e1c], ebx
je 0x40217a
lea ecx, [ebp - 0x34]
call fcn.00443b00
push eax
push str.failed_to_set_current_dir:___s__n
push dword [0x499e1c]
call fcn.0045d115
add esp, 0xc
lea ecx, [ebp - 0x1c4]
call fcn.00417560
push str.Failed_to_set_current_dir:
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 5
call fcn.00417fb0
lea ecx, [ebp - 0x34]
call fcn.00443b00
push eax
lea ecx, [ebp - 0x1c4]
call fcn.00417fb0
push ebx
push 0x4812b0
lea ecx, [ebp - 0x1c4]
call fcn.00417970
push eax
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push edi
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 4
call fcn.00417620
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 1
call fcn.00417620
lea ecx, [ebp - 0x284]
mov byte [ebp - 4], bl
call fcn.00417620
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.004149a0
xor al, al
jmp 0x402b6a
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 1
call fcn.00417620
lea ecx, [ebp - 0x2e4]
call fcn.00417560
lea eax, [ebp - 0x2e4]
mov ecx, esi
push eax
mov byte [ebp - 4], 6
call fcn.004044ae
lea ecx, [ebp - 0x2e4]
call fcn.00417690
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
mov esi, 0x3f0
test eax, eax
je 0x402668
lea ecx, [ebp - 0x38]
call fcn.0041bf90
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 7
call fcn.004146b0
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0xcc]
push eax
push 0x481564
call fcn.0041aee0
add esp, 0xc
lea ecx, [ebp - 0xcc]
push str..zip
push str..tmp
call fcn.00414f10
lea ecx, [ebp - 0x93c]
call fcn.0040461e
push ebx
lea ecx, [ebp - 0x93c]
mov byte [ebp - 4], 9
call fcn.004048c5
push ebx
lea ecx, [ebp - 0x93c]
call fcn.004048cf
push 1
lea ecx, [ebp - 0x93c]
call fcn.0040478f
push ebx
lea ecx, [ebp - 0x93c]
call fcn.004045ee
lea ecx, [ebp - 0x93c]
call fcn.0040479c
push 1
lea ecx, [ebp - 0x93c]
call fcn.004048d9
lea ecx, [ebp - 0x14]
call fcn.0041d4d0
mov dword [ebp - 0x14], 0x472324
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0xa
call fcn.00417560
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0xb
call fcn.00443b00
push eax
lea ecx, [ebp - 0x148]
call fcn.00417fb0
cmp dword [0x499e1c], ebx
je 0x40237d
lea ecx, [ebp - 0x2e4]
call fcn.00417fe0
push eax
push str.download_from___s__n
push dword [0x499e1c]
call fcn.0045d115
add esp, 0xc
lea ecx, [ebp - 0x148]
call fcn.00417fe0
push eax
push str.download_to___s__n
push dword [0x499e1c]
call fcn.0045d115
add esp, 0xc
lea ecx, [ebp - 0x54]
call fcn.004146b0
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0xc
call fcn.004146b0
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0xd
call fcn.004146b0
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 0xe
call fcn.00417fe0
push eax
lea ecx, [ebp - 0x164]
call fcn.004141f0
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x164]
push eax
call fcn.0041d641
pop ecx
pop ecx
lea ecx, [ebp - 0xe8]
call fcn.00443b10
test eax, eax
je 0x402405
push str.Downloading_from
lea ecx, [ebp - 0x54]
call fcn.004141f0
lea eax, [ebp - 0xe8]
lea ecx, [ebp - 0x54]
push eax
call fcn.004155b0
push str._...
jmp 0x40240a
push str.Downloading_...
lea ecx, [ebp - 0x54]
call fcn.004141f0
cmp dword [ebp + 8], ebx
je 0x40242b
push esi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push ebx
push 0x402
push eax
call edi
lea ecx, [ebp - 0x54]
call fcn.00443b00
push eax
push 0x3f8
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x93c]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x2e4]
push eax
mov byte [ebp - 0xd], bl
call fcn.004047ab
cmp al, bl
je 0x4025d9
cmp dword [ebp + 8], ebx
je 0x402489
push esi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push ebx
push 0x402
push eax
call edi
mov dword [0x499e40], ebx
lea ecx, [ebp - 0x3f4]
call fcn.004048f2
push str.Test
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0xf
call fcn.00404aef
push 1
lea ecx, [ebp - 0x3f4]
call fcn.004048e8
lea ecx, [ebp - 0x148]
call fcn.00417fe0
push eax
lea ecx, [ebp - 0x3f4]
call fcn.00404a93
cmp al, bl
jne 0x4024e9
push ebx
push str.Error
push str.Failed_to_open_.zip
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4025b6
lea ecx, [ebp - 0x18]
call fcn.00404afe
mov dword [ebp - 0x18], 0x4722e0
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x10
call fcn.00443b00
push eax
lea ecx, [ebp - 0x3f4]
call fcn.004049df
cmp eax, ebx
mov dword [ebp - 0x58], eax
jge 0x402531
push ebx
push str.Error
push str.Failed_to_unzip
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4025a3
cmp dword [ebp + 8], ebx
je 0x40259f
push esi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push 0x64
push 0x402
push eax
call edi
lea ecx, [ebp - 0x74]
call fcn.004146b0
push str.Unzipped
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x11
call fcn.004141f0
push dword [ebp - 0x58]
lea ecx, [ebp - 0x74]
call fcn.00413ef0
push str._files.
lea ecx, [ebp - 0x74]
call fcn.004141f0
lea ecx, [ebp - 0x74]
call fcn.00443b00
push eax
push 0x3f8
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x10
call fcn.004149a0
mov byte [ebp - 0xd], 1
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x18], 0x4722e0
call fcn.00404b23
lea ecx, [ebp - 0x148]
call fcn.00417cf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0xe
call fcn.00404984
jmp 0x4025f0
push ebx
push str.Error
push str.Failed_to_download_Zip
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [ebp - 0xd], bl
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0xd
call fcn.004149a0
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0xc
call fcn.004149a0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xb
call fcn.004149a0
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0xa
call fcn.00417620
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 9
mov dword [ebp - 0x14], 0x472324
call fcn.0041d500
lea ecx, [ebp - 0x93c]
mov byte [ebp - 4], 8
call fcn.004046ac
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 7
call fcn.004149a0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 6
call fcn.0041bfd0
jmp 0x4026b9
lea ecx, [ebp - 0x34]
call fcn.00443b00
push eax
push dword [ebp + 8]
call fcn.00401ad5
mov byte [ebp - 0xd], al
mov eax, dword [0x499e48]
pop ecx
cmp eax, ebx
pop ecx
je 0x4026b9
cmp byte [ebp - 0xd], bl
je 0x402b2a
push str.Finished_unzipping.
push 0x3f8
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push esi
push dword [0x499e48]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push 0x64
push 0x402
push eax
call edi
cmp byte [ebp - 0xd], bl
je 0x402b2a
mov eax, dword [0x499e1c]
cmp eax, ebx
je 0x4026d8
push str.Unzip_complete..._n
push eax
call fcn.0045d115
pop ecx
pop ecx
lea ecx, [ebp - 0x344]
call fcn.00417560
lea eax, [ebp - 0x344]
mov ecx, 0x499c48
push eax
mov byte [ebp - 4], 0x12
call fcn.00404566
lea ecx, [ebp - 0x344]
call fcn.00417690
test eax, eax
je 0x402b19
cmp dword [0x499e1c], ebx
je 0x402732
lea ecx, [ebp - 0x344]
call fcn.00417fe0
push eax
push str.setup_filename:___s__n
push dword [0x499e1c]
call fcn.0045d115
add esp, 0xc
lea ecx, [ebp - 0x54]
call fcn.004146b0
lea ecx, [ebp - 0x344]
mov byte [ebp - 4], 0x13
call fcn.00417fe0
push eax
lea ecx, [ebp - 0x54]
call fcn.004141f0
lea ecx, [ebp - 0x4b4]
call fcn.00417560
lea eax, [ebp - 0x4b4]
mov ecx, 0x499c48
push eax
mov byte [ebp - 4], 0x14
call fcn.00404580
lea ecx, [ebp - 0x4b4]
mov dword [ebp - 0x14], ebx
call fcn.00417690
test eax, eax
je 0x4027ac
lea ecx, [ebp - 0x4b4]
call fcn.00417cf0
mov dword [ebp - 0x14], eax
mov eax, dword [0x499e1c]
cmp eax, ebx
je 0x4027ac
push dword [ebp - 0x14]
push str.setup_args:___s__n
push eax
call fcn.0045d115
add esp, 0xc
push 0x2f
push 0x5c
lea ecx, [ebp - 0x54]
call fcn.004139f0
push 0x481450
push 0x48144c
lea ecx, [ebp - 0x54]
call fcn.00415030
push 0x5c
push 0x2f
lea ecx, [ebp - 0x54]
call fcn.004139f0
cmp dword [0x499e1c], ebx
je 0x402816
lea ecx, [ebp - 0x34]
call fcn.00443b00
push eax
push str.working_dir:___s__n
push dword [0x499e1c]
call fcn.0045d115
add esp, 0xc
lea ecx, [ebp - 0x54]
call fcn.00443b00
push eax
push str.running_exe:___s__n
push dword [0x499e1c]
call fcn.0045d115
add esp, 0xc
push esi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp eax, ebx
je 0x40282f
push ebx
push 0x64
push 0x402
push eax
call edi
lea ecx, [ebp - 0x3a4]
call fcn.00417560
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0x15
call fcn.00417560
lea ecx, [ebp - 0x574]
mov byte [ebp - 4], 0x16
call fcn.00417560
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x17
call fcn.00443b00
push eax
lea ecx, [ebp - 0x3a4]
call fcn.00417fb0
lea ecx, [ebp - 0x34]
call fcn.00443b00
push eax
lea ecx, [ebp - 0x514]
call fcn.00417fb0
lea ecx, [ebp - 0x454]
call fcn.00417560
lea eax, [ebp - 0x454]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x3a4]
push eax
lea eax, [ebp - 0x514]
push eax
call fcn.0041ab30
add esp, 0xc
cmp dword [0x499e1c], ebx
je 0x4028d7
lea ecx, [ebp - 0x454]
call fcn.00417fe0
push eax
push str.full_path_to_auto_run_EXE:___s__n
push dword [0x499e1c]
call fcn.0045d115
add esp, 0xc
push dword [ebp - 0x14]
lea ecx, [ebp - 0x574]
call fcn.00417fb0
push 0x3c
lea eax, [ebp - 0xb0]
pop esi
push esi
push ebx
push eax
call fcn.0045cb40
add esp, 0xc
lea ecx, [ebp - 0x454]
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xac], 0x40
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], ebx
call fcn.00417970
lea ecx, [ebp - 0x574]
mov dword [ebp - 0xa0], eax
call fcn.00417970
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], 5
mov dword [ebp - 0x90], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
cmp eax, ebx
je 0x402a0d
lea ecx, [ebp - 0x224]
call fcn.00417560
lea eax, [ebp - 0x224]
mov esi, 0x499c48
push eax
push str.AutoExit
mov ecx, esi
mov byte [ebp - 4], 0x19
call fcn.00404342
push 0x4813f0
lea ecx, [ebp - 0x224]
call fcn.00418270
test al, al
je 0x4029a3
push ebx
call fcn.0045d1a7
mov ecx, esi
call fcn.004045cc
test al, al
mov eax, dword [0x499e1c]
je 0x4029ed
cmp eax, ebx
je 0x4029c4
push str.waiting_for_setup_EXE_to_complete..._n
push eax
call fcn.0045d115
pop ecx
pop ecx
push 0xffffffffffffffff
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp + 8]
mov dword [ebp + 8], ebx
push eax
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x4029fe
mov eax, dword [ebp + 8]
mov dword [0x499e28], eax
jmp 0x4029fe
cmp eax, ebx
je 0x4029fe
push str.NOT_waiting_for_setup_EXE_to_complete..._n
push eax
call fcn.0045d115
pop ecx
pop ecx
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x224]
jmp 0x402abd
cmp dword [0x499e1c], ebx
je 0x402a31
lea ecx, [ebp - 0x54]
call fcn.00443b00
push eax
push str.failed_to_run:___s__n
push dword [0x499e1c]
call fcn.0045d115
add esp, 0xc
lea ecx, [ebp - 0x148]
call fcn.00417560
push str.Failed_to_run
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x1a
call fcn.00417fb0
lea ecx, [ebp - 0x54]
call fcn.00443b00
push eax
lea ecx, [ebp - 0x148]
call fcn.00417fb0
push str.__working_dir_
lea ecx, [ebp - 0x148]
call fcn.00417fb0
lea ecx, [ebp - 0x34]
call fcn.00443b00
push eax
lea ecx, [ebp - 0x148]
call fcn.00417fb0
push str.__check_to_see_if_this_file_is_in_the_EXE_
lea ecx, [ebp - 0x148]
call fcn.00417fb0
push ebx
push 0x4812b0
lea ecx, [ebp - 0x148]
call fcn.00417970
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x148]
call fcn.00417620
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0x17
call fcn.00417620
lea ecx, [ebp - 0x574]
mov byte [ebp - 4], 0x16
call fcn.00417620
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0x15
call fcn.00417620
lea ecx, [ebp - 0x3a4]
mov byte [ebp - 4], 0x14
call fcn.00417620
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 4], 0x13
call fcn.00417620
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x12
call fcn.004149a0
lea ecx, [ebp - 0x344]
mov byte [ebp - 4], 6
call fcn.00417620
jmp 0x402b3e
push ebx
push str.Error
push str.Failed_to_extract_archive.
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 1
call fcn.00417620
lea ecx, [ebp - 0x284]
mov byte [ebp - 4], bl
call fcn.00417620
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.004149a0
mov al, byte [ebp - 0xd]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret