Function at 0x419425
Capabilities:
Create directory
Delete directory
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x45fe9b
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x47b570]
xor eax, esp
mov dword [esp + 0xd8], eax
push ebx
push esi
push edi
mov eax, dword [0x47b570]
xor eax, esp
push eax
lea eax, [esp + 0xf0]
mov dword fs:[0], eax
mov ebx, ecx
lea eax, [ebx + 0x140]
cmp dword [eax + 0x14], 8
mov dword [esp + 0x34], ebx
mov byte [esp + 0x26], 1
mov dword [esp + 0x30], eax
jb 0x419482
mov eax, dword [eax]
push eax
push dword [ebx + 0x198]
mov ecx, str.Zb30_BLbgc5Cw6HCEsSazkqVu_gI1pzbQ5275iPeipIDnbv4FNic22iY9u5Bkr2l
push 0x530b
call fcn.00420467
pop ecx
push eax
call fcn.0041f822
add esp, 0xc
push 6
pop edi
mov esi, ebx
call fcn.0041a59e
lea eax, [ebx + 0x124]
cmp dword [eax + 0x14], 8
mov byte [esp + 0x27], 0
mov dword [esp + 0x1c], eax
mov esi, eax
jb 0x4194c5
mov eax, dword [esi]
push eax
call dword [0x47f490]
test eax, eax
jne 0x4196d4
call dword [0x47f4ec]
mov dword [ebx + 0x84], eax
cmp eax, 2
je 0x4196d4
cmp dword [esi + 0x14], 8
jb 0x4194f3
mov ecx, dword [esi]
jmp 0x4194f5
mov ecx, esi
push eax
push ecx
push 0x74ee
mov ecx, str.Zb30_BLbgc5Cw6HCEsSazkqVu80d3oLKQtnv5FzTi8NDjf6rGt6CygbcyKtQl4vdVJbpq1nT5A
call fcn.00420467
pop ecx
push eax
call fcn.0041f822
lea edi, [ebx + 0xec]
add esp, 0xc
mov eax, edi
mov ecx, esi
mov dword [esp + 0x18], edi
call fcn.0041b232
test al, al
je 0x4196d4
and dword [esp + 0x28], 0
push 0x46df38
push edi
call fcn.0041a7ff
mov esi, eax
push 0
mov dword [esp + 0x30], esi
call fcn.00430451
pop ecx
push eax
call fcn.00432663
inc esi
pop ecx
mov dword [esp + 0x20], esi
push dword [esp + 0x20]
lea eax, [esp + 0x80]
push 0
push dword [esp + 0x20]
call fcn.00408dd1
and dword [esp + 0xf8], 0
mov ebx, eax
mov eax, dword [esp + 0x1c]
call fcn.00409812
or dword [esp + 0xf8], 0xffffffff
push 1
xor edi, edi
lea esi, [esp + 0x80]
call fcn.00402342
lea eax, [esp + 0xb4]
push 0xa
push eax
call fcn.00432675
push eax
call fcn.0043175d
mov ebx, dword [esp + 0x28]
add esp, 0xc
push eax
push ebx
call fcn.00408d24
lea eax, [esp + 0xb4]
push 0xa
push eax
call fcn.00432675
push eax
call fcn.0043175d
add esp, 0xc
push eax
push ebx
call fcn.00408d24
inc dword [esp + 0x28]
cmp dword [ebx + 0x14], 8
jb 0x4195e6
mov eax, dword [ebx]
jmp 0x4195e8
mov eax, ebx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x41965a
call dword [0x47f4ec]
mov esi, dword [esp + 0x34]
mov dword [esi + 0x84], eax
cmp dword [ebx + 0x14], 8
jb 0x41960d
mov ebx, dword [ebx]
push eax
push ebx
mov ecx, str.Zb30_BLbgc5Cw6HCEsSazkqVu84OxYHdBpb1qz_Fi85SnN_iDtKN20mL4qtZ5M6DBpzpRPFzopC8w
call fcn.00420467
push eax
call fcn.0041f822
add esp, 0xc
push 5
pop edi
cmp dword [esp + 0x28], edi
jle 0x419555
call fcn.0041a59e
xor al, al
mov ecx, dword [esp + 0xf0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xd8]
xor ecx, esp
call fcn.0042fd59
mov esp, ebp
pop ebp
ret
push 0xffffffffffffffff
push dword [esp + 0x30]
lea eax, [esp + 0x84]
push dword [esp + 0x20]
mov byte [esp + 0x33], 1
call fcn.00408dd1
push 0
xor edi, edi
push eax
inc edi
or eax, 0xffffffff
mov esi, ebx
mov dword [esp + 0x100], edi
call fcn.00409865
or dword [esp + 0xf8], 0xffffffff
push edi
xor edi, edi
lea esi, [esp + 0x80]
call fcn.00402342
mov ecx, dword [esp + 0x18]
push 0xffffffffffffffff
push edi
mov eax, ebx
call fcn.00401feb
cmp dword [ebx + 0x14], 8
jb 0x4196b9
mov ebx, dword [ebx]
push ebx
mov ecx, str.Zb30_BLbgc5Cw6HCEsSazkqVu8gU1oDIQ9n94hDSzsFHlP6rWeTk
call fcn.00420467
push eax
call fcn.0041f822
mov ebx, dword [esp + 0x3c]
mov esi, dword [esp + 0x24]
pop ecx
pop ecx
cmp dword [esi + 0x14], 8
jb 0x4196de
mov ecx, dword [esi]
jmp 0x4196e0
mov ecx, esi
lea edi, [ebx + 0x24]
cmp dword [edi + 0x14], 8
jb 0x4196ed
mov eax, dword [edi]
jmp 0x4196ef
mov eax, edi
push ecx
push eax
call dword [0x47f494]
test eax, eax
jne 0x419743
call dword [0x47f4ec]
mov dword [ebx + 0x84], eax
cmp dword [esi + 0x14], 8
jb 0x41970f
mov esi, dword [esi]
cmp dword [edi + 0x14], 8
jb 0x419717
mov edi, dword [edi]
push eax
push esi
push edi
push 0x3aea
push 0x296e
mov ecx, str.Zb30_BLbgc5Cw6HCEsSazkqVu80d3oLKQtnv5FzagdlD2e_uEcfOyUV_qtbkr2IBo30q1nkzoMGnOn5E8XOikLz
call fcn.00420467
pop ecx
pop ecx
push eax
call fcn.0041f822
add esp, 0x10
push 5
pop edi
mov esi, ebx
jmp 0x41962f
and dword [esp + 0x54], 0
push 7
pop eax
xor ecx, ecx
mov byte [esp + 0x20], 1
mov byte [esp + 0x16], 1
mov byte [esp + 0x17], 0
mov dword [esp + 0x58], eax
mov word [esp + 0x44], cx
mov dword [esp + 0xf8], 2
and dword [esp + 0x70], ecx
mov dword [esp + 0x74], eax
xor eax, eax
mov word [esp + 0x60], ax
mov edi, 0x46d834
push edi
lea esi, [ebx + 0xd0]
push esi
mov byte [esp + 0x100], 3
call fcn.00414494
mov ecx, eax
cmp ecx, 0xffffffff
je 0x4197b3
lea eax, [ecx + 1]
call fcn.00401f78
push 0xffffffffffffffff
push 0
mov ecx, esi
call fcn.00401feb
push edi
push esi
call fcn.00414494
mov ecx, eax
cmp ecx, 0xffffffff
je 0x4197d4
lea eax, [ecx + 1]
call fcn.00401f78
push 0xffffffffffffffff
push 0
mov ecx, esi
call fcn.00401feb
push dword [ebx + 0x194]
mov ecx, str.Zb30_BLbgc5Cw6HCEsSazkqVu88TwIDDSZj_3wXHi5IDnZE
push 0x17a1
push 0x172c
call fcn.00420467
pop ecx
pop ecx
push eax
call fcn.0041f822
mov edi, dword [ebx + 0x194]
sub edi, 3
pop ecx
pop ecx
je 0x4198a8
dec edi
je 0x4198a3
dec edi
dec edi
je 0x41984a
lea eax, [ebx + 0xec]
cmp dword [eax + 0x14], 8
jb 0x419820
mov eax, dword [eax]
mov dword [ebx + 0x1d0], eax
cmp dword [esi + 0x14], 8
jb 0x41982e
mov esi, dword [esi]
xor eax, eax
cmp byte [ebx + 0x1aa], al
mov dword [ebx + 0x1d4], esi
sete al
mov dword [ebx + 0x1dc], eax
jmp 0x4199fb
cmp dword [esi + 0x14], 8
jb 0x419854
mov eax, dword [esi]
jmp 0x419856
mov eax, esi
push eax
push 0x46d86c
call fcn.004325d8
neg eax
sbb al, al
pop ecx
inc al
pop ecx
lea ecx, [ebx + 0xec]
mov byte [ebx + 0x1aa], al
cmp dword [ecx + 0x14], 8
jb 0x41987d
mov ecx, dword [ecx]
mov dword [ebx + 0x1d0], ecx
cmp dword [esi + 0x14], 8
jb 0x41988b
mov esi, dword [esi]
xor ecx, ecx
test al, al
sete cl
mov dword [ebx + 0x1d4], esi
mov dword [ebx + 0x1dc], ecx
jmp 0x4199fb
mov byte [esp + 0x17], 1
push 0xffffffffffffffff
push 0
mov eax, esi
lea ecx, [esp + 0x4c]
call fcn.00401feb
lea esi, [esp + 0x44]
call fcn.00428eac
cmp dword [esp + 0x58], 8
mov eax, dword [esp + 0x44]
jae 0x4198cd
mov eax, esi
push 0
push eax
call dword [0x47f4b4]
push 0x46d874
push dword [esp + 0x20]
call fcn.0041a7ff
push 0xffffffffffffffff
inc eax
push eax
push dword [esp + 0x24]
lea eax, [esp + 0xa4]
call fcn.00408dd1
mov esi, eax
lea eax, [esp + 0xb4]
push 0x46df38
push eax
lea ebx, [esp + 0x4c]
mov byte [esp + 0x100], 4
call fcn.0040b1d1
pop ecx
pop ecx
mov ecx, eax
mov eax, esi
lea edi, [esp + 0x7c]
mov byte [esp + 0xf8], 5
call fcn.0041b24e
mov ebx, eax
lea eax, [esp + 0x60]
mov byte [esp + 0xf8], 6
call fcn.00409812
push 1
xor edi, edi
lea esi, [esp + 0x80]
call fcn.00402342
push 1
lea esi, [esp + 0xb8]
call fcn.00402342
push 1
lea esi, [esp + 0x9c]
mov byte [esp + 0xfc], 3
call fcn.00402342
mov ecx, dword [esp + 0x60]
push 8
pop esi
cmp dword [esp + 0x74], esi
jae 0x419987
lea ecx, [esp + 0x60]
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0x14], esi
jb 0x419992
mov eax, dword [eax]
xor ebx, ebx
push ebx
push ecx
push eax
call dword [0x47f48c]
cmp byte [esp + 0x17], bl
je 0x4199b5
cmp dword [esp + 0x74], esi
jb 0x4199af
mov eax, dword [esp + 0x60]
jmp 0x4199c3
lea eax, [esp + 0x60]
jmp 0x4199c3
mov eax, dword [esp + 0x44]
cmp dword [esp + 0x58], esi
jae 0x4199c3
lea eax, [esp + 0x44]
mov esi, dword [esp + 0x34]
mov ecx, str.Q4Hr5xPFiw
mov dword [esi + 0x1d0], eax
call fcn.004204c2
mov dword [esi + 0x1cc], eax
cmp byte [esi + 0x1aa], bl
je 0x4199eb
mov byte [esp + 0x20], bl
jmp 0x4199f5
mov dword [esi + 0x1dc], 1
mov byte [esp + 0x16], bl
mov ebx, esi
lea eax, [ebx + 0x40]
cmp dword [eax + 0x14], 8
mov dword [esp + 0x18], eax
jb 0x419a0a
mov eax, dword [eax]
mov edi, dword [esp + 0x30]
cmp dword [edi + 0x14], 8
jb 0x419a18
mov ecx, dword [edi]
jmp 0x419a1a
mov ecx, edi
push dword [ebx + 0x1d4]
push dword [ebx + 0x1d0]
push eax
push ecx
push 0x1900
push 0x73f6
mov ecx, str.A6q72QnZgMZInrvtE8XOinXDu6xZ5MmPAdzIrHY
call fcn.00420467
pop ecx
pop ecx
push eax
call fcn.0041f822
add esp, 0x14
push dword [esp + 0x20]
mov eax, ebx
call fcn.00418c9f
test eax, eax
jne 0x419b41
call dword [0x47f4ec]
cmp byte [esp + 0x17], 0
mov dword [ebx + 0x84], eax
je 0x419ae4
mov ecx, 0x483
cmp eax, ecx
jne 0x419ae4
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x14], 8
jb 0x419a82
mov eax, dword [eax]
push ecx
push eax
push 0x7a00
push 0x68f4
mov ecx, str.Zb30_BLbgc5Cw6HCEsSazkqVu98OzofBQdnv5FzYnspI2f3kENOL3QbRvthVl43ASI364hLegMgGg_L7XJvOylSL9Plckoql
call fcn.00420467
pop ecx
pop ecx
push eax
call fcn.0041f822
mov eax, dword [esp + 0x50]
add esp, 0xc
cmp dword [esp + 0x58], 8
jae 0x419ab2
lea eax, [esp + 0x44]
mov dword [ebx + 0x1d0], eax
lea eax, [ebx + 0x1c0]
push eax
call dword [ebx + 0x1fc]
mov esi, eax
test esi, esi
je 0x419ad4
and dword [ebx + 0x84], 0
jmp 0x419ae0
call dword [0x47f4ec]
mov dword [ebx + 0x84], eax
test esi, esi
jne 0x419b41
push 5
pop edi
mov esi, ebx
call fcn.0041a59e
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x14], 8
jb 0x419afa
mov eax, dword [eax]
push dword [ebx + 0x84]
mov ecx, str.Zb30_BLbgc5Cw6HCEsSazkqVu80d3oLKQtnv5FzFm8EG0b7YVZfCj0OL6eQOl8vLLA
push eax
push 0x14ef
push 0x3030
call fcn.00420467
pop ecx
pop ecx
push eax
call fcn.0041f822
add esp, 0xc
xor bl, bl
push 1
xor edi, edi
lea esi, [esp + 0x64]
call fcn.00402342
push 1
lea esi, [esp + 0x48]
call fcn.00402342
mov al, bl
jmp 0x419636
push dword [ebx + 0x1f8]
call dword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [ebx + 0x1a0], eax
mov eax, dword [ebx + 0x1f8]
lea esi, [ebx + 0x1a4]
push esi
mov dword [esp + 0x24], eax
call fcn.0042bf0b
mov eax, dword [esp + 0x20]
mov dword [esi], eax
cmp byte [ebx + 0x1a8], 0
je 0x419b8d
push 0
push 0
push 0x4ca
push dword [0x47c7e4]
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [0x47f7a8]
and dword [esp + 0x28], 0
mov dword [esp + 0x38], eax
mov eax, dword [ebx + 0x1f8]
mov dword [esp + 0x2c], 2
mov dword [esp + 0x3c], eax
mov byte [esp + 0xf8], 7
cmp dword [edi + 0x14], 8
jb 0x419bbf
mov eax, dword [edi]
jmp 0x419bc1
mov eax, edi
movzx edx, byte [ebx + 0x1ad]
movzx ecx, byte [esp + 0x16]
push edx
push ecx
push eax
push 0x1fed
push 0x4798
mov ecx, str.A6q7yTnxof1j2froCN6YzlKQ9exc4I_GUs3PRnSusdUnPrvXJKKjwOdkQ
call fcn.00420467
pop ecx
pop ecx
push eax
call fcn.0041f822
add esp, 0x10
cmp byte [esp + 0x16], 0
je 0x419c5c
mov al, byte [ebx + 0x1ad]
test al, al
je 0x419c5c
cmp dword [edi + 0x14], 8
jb 0x419c0a
mov ecx, dword [edi]
jmp 0x419c0c
mov ecx, edi
movzx eax, al
push eax
movzx eax, byte [esp + 0x1a]
push eax
push ecx
mov ecx, str.A6q7yj_jp_lnrdLFO5e5zkNr98O0ov7Tov6hiXy8sG3PB
call fcn.00420467
push eax
call fcn.0041f822
add esp, 0x10
lea eax, [esp + 0x20]
push eax
xor eax, eax
push eax
push ebx
push 0x419fe6
push eax
push eax
call dword [0x47f498]
mov esi, eax
lea eax, [esp + 0x28]
push eax
call fcn.0042bf0b
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], 3
mov dword [esp + 0x40], esi
cmp dword [edi + 0x14], 8
jb 0x419c66
mov ecx, dword [edi]
jmp 0x419c68
mov ecx, edi
push dword [esp + 0x2c]
movzx eax, byte [ebx + 0x1ad]
push eax
movzx eax, byte [esp + 0x1e]
push eax
push ecx
push 0x2b3d
push 0x9dd
mov ecx, str.A6q7yjrjq_0GmPj_FcGP20X_Ksr1ofbEq3p7hnjht1DmPrWdPOikLZ9cgTwoDbBtz_gQ
call fcn.00420467
pop ecx
pop ecx
push eax
call fcn.0041f822
add esp, 0x14
cmp byte [esp + 0x16], 0
mov dword [esp + 0x20], 1
je 0x419ccd
push 0
push ebx
call fcn.00419fc1
imul eax, eax, 0x3e8
push eax
push 0
lea eax, [esp + 0x40]
push eax
push dword [esp + 0x38]
call dword [0x47f4c0]
mov dword [esp + 0x20], eax
mov esi, dword [esp + 0x1c]
cmp dword [esi + 0x14], 8
jb 0x419cdb
mov eax, dword [esi]
jmp 0x419cdd
mov eax, esi
push eax
call dword [0x47f490]
test eax, eax
je 0x419d5a
cmp byte [esp + 0x27], 0
je 0x419d5a
push 0x46df38
lea esi, [ebx + 0xec]
push esi
call fcn.0041a7ff
push eax
push 0
push esi
lea eax, [esp + 0xa4]
call fcn.00408dd1
mov ebx, eax
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xf8], 8
call fcn.00409812
push 1
xor edi, edi
lea esi, [esp + 0x9c]
mov byte [esp + 0xfc], 7
call fcn.00402342
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0x14], 8
jb 0x419d47
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov ebx, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x1c]
cmp dword [ebx + 0x50], 0
jne 0x419d70
cmp dword [esi + 0x14], 8
jb 0x419d6a
mov eax, dword [esi]
jmp 0x419d7c
mov dword [esp + 0x18], esi
jmp 0x419d80
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x14], 8
jb 0x419d7c
mov eax, dword [eax]
mov dword [esp + 0x18], eax
cmp dword [esp + 0x20], 0
je 0x419f50
cmp dword [esp + 0x20], 0x102
jne 0x419db2
push 7
pop edi
mov esi, ebx
call fcn.0041a59e
push 0xf423f
push dword [ebx + 0x1f8]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x419e21
cmp dword [edi + 0x14], 8
jb 0x419dbc
mov eax, dword [edi]
jmp 0x419dbe
mov eax, edi
push dword [ebx + 0x2c8]
mov ecx, str.Zb30_BLbgc5Cw6HCEsSazkqVu64vl5nOT427rhDTzsJPlffiD9KNwEid6Kse0ojAVJy7BnDztxSmO_D5eawAad6P8j_oDcUpj35yzFgcxDiujOEtOLyyw
push eax
push 0x53c4
push 0x2bef
call fcn.00420467
pop ecx
pop ecx
push eax
call fcn.0041f822
add esp, 0xc
push dword [ebx + 0x2c8]
mov ecx, str.dZX7gw
push 0x78b8
push 0x498a
call fcn.00420467
push eax
push 0x46df3c
call fcn.0042748c
add esp, 0x10
call eax
cmp dword [ebx + 0x80], 7
jge 0x419e25
push 8
pop edi
mov esi, ebx
call fcn.0041a59e
mov edi, dword [esp + 0x30]
cmp byte [esp + 0x16], 0
je 0x419e41
lea eax, [ebx + 0x19c]
push eax
push dword [ebx + 0x1f8]
call dword [0x47f4f0]
jmp 0x419ea2
cmp dword [edi + 0x14], 8
jb 0x419e49
mov edi, dword [edi]
push dword [ebx + 0x2c8]
mov ecx, str.Zb30_BLbgc5Cw6HCEsSazkqVu64vl5nOT427rhDTzsJPlffiD9KNwEid6Kse0ojAVJy7BnDztxSmO_D5eawAad6P8j_oDcUpj35yzFgcxDiujfDtKL6kid_u92
push edi
push 0x5ed4
push 0x2d14
call fcn.00420467
pop ecx
pop ecx
push eax
call fcn.0041f822
add esp, 0xc
push dword [ebx + 0x2c8]
mov ecx, str.dZX7gw
push 0x7e82
call fcn.00420467
pop ecx
push eax
push 0x46df3c
call fcn.0042748c
pop ecx
pop ecx
call eax
push 9
pop edi
mov esi, ebx
call fcn.0041a59e
mov edi, dword [esp + 0x30]
push dword [ebx + 0x80]
mov ecx, str.Zb30_BLbgc5Cw6HCEsSazkqVu8gU3oLLBonp5B_SndwGn_T5XJK9jw6Q_6tZ08ePQ5f_7hibzv1lxL7vUJed20eN7vhBkoql
push dword [ebx + 0x19c]
push dword [ebx + 0x1a0]
push dword [esp + 0x24]
push 0x49de
call fcn.00420467
pop ecx
push eax
call fcn.0041f822
add esp, 0x14
cmp byte [esp + 0x16], 0
je 0x419f38
cmp byte [ebx + 0x1ad], 0
je 0x419f38
mov eax, dword [ebx + 0x80]
cmp eax, 8
je 0x419ef1
cmp eax, 7
jne 0x419f38
push 0x5922
mov ecx, str.ZLzdxC7yzsNJmvCrC9aH2xKN6e4Zl5rHVJz673Y
call fcn.00420467
pop ecx
push eax
call fcn.0041f822
pop ecx
push 1
push ebx
call fcn.00419fc1
imul eax, eax, 0x3e8
push eax
lea eax, [esp + 0x2c]
call fcn.0042c008
push 0x2883
mov ecx, str.Z7_Pzi6XgsBFkrv8Hd6am1KL_u5cw4bdQ5j_gQ
call fcn.00420467
pop ecx
push eax
call fcn.0041f822
jmp 0x419f4d
push dword [esp + 0x18]
mov ecx, str.cZjy_1yDzpwGivDiDMeLywaf9Plckr2l
call fcn.00420467
push eax
call fcn.0041f822
pop ecx
pop ecx
jmp 0x419f55
mov byte [esp + 0x26], 0
cmp dword [edi + 0x14], 8
jb 0x419f5f
mov eax, dword [edi]
jmp 0x419f61
mov eax, edi
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004022ed
call fcn.0041dabe
add esp, 0x1c
cmp dword [edi + 0x14], 8
jb 0x419f80
mov edi, dword [edi]
push edi
push dword [ebx + 0x198]
mov ecx, str.Zb30_BLbgc5Cw6HCEsSazkqVu84S04vLBp_0VzascZCxL7vXMSGwFSN1eoR0tOKdfM
push 0x2d51
push 0x622
call fcn.00420467
pop ecx
pop ecx
push eax
call fcn.0041f822
add esp, 0xc
lea eax, [esp + 0x28]
push eax
mov byte [esp + 0xfc], 3
call fcn.0042bf0b
mov bl, byte [esp + 0x26]
jmp 0x419b22