Function at 0x435180
Capabilities:
Get common file path
Get session user name
Get system information on windows
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51d4dc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1428
call fcn.0050f9a0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 4], ebx
mov eax, 7
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov word [ebp - 0x30], cx
mov byte [ebp - 4], 1
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xc0], ebx
xor edx, edx
mov word [ebp - 0xd0], dx
mov byte [ebp - 4], 2
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xdc], ebx
xor eax, eax
mov word [ebp - 0xec], ax
mov byte [ebp - 4], 3
mov dword [ebp - 0x14], 0x52c6cc
mov dword [ebp - 0x50], 0x3e8
lea ecx, [ebp - 0xb4]
push ecx
call fcn.00434de0
mov byte [ebp - 4], 4
lea edx, [ebp - 0xb4]
push edx
lea eax, [ebp - 0x1b4]
push eax
call fcn.00440200
add esp, 0xc
mov byte [ebp - 4], 5
mov ecx, 0x5e
mov dword [ebp - 0x98], ecx
lea eax, [ebp - 0x430]
mov dword [ebp - 0x94], eax
cmp ecx, ebx
jbe 0x435262
mov edx, 0x20
mov word [eax], dx
add eax, 2
mov dword [ebp - 0x94], eax
dec ecx
mov dword [ebp - 0x98], ecx
jmp 0x435244
xor eax, eax
mov word [ebp - 0x394], ax
lea ecx, [ebp - 0xd0]
push ecx
mov eax, 0x52f230
call fcn.0040fb40
push 0x2d
mov eax, 0x5e
lea edi, [ebp - 0xd0]
call fcn.00412a60
mov edx, edi
push edx
mov eax, 0x52f23c
call fcn.0040fb70
lea eax, [ebp - 0xec]
push eax
mov eax, 0x52f244
call fcn.0040fb40
push 0x2d
mov eax, 0x5e
lea edi, [ebp - 0xec]
call fcn.00412a60
mov ecx, edi
push ecx
mov eax, str.___n
call fcn.0040fb70
mov eax, 0x52f25c
lea ecx, [ebp - 0x1ec]
call fcn.0040fae0
mov byte [ebp - 4], 6
push 0x52c6d4
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x4c]
push eax
call fcn.00413af0
add esp, 0xc
mov byte [ebp - 4], 7
push ebx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x1ec]
call fcn.00412830
mov byte [ebp - 4], 6
lea esi, [ebp - 0x4c]
call fcn.004150b0
lea ecx, [ebp - 0x160]
push ecx
call fcn.0044c4f0
add esp, 4
mov byte [ebp - 4], 8
cmp dword [ebp - 0x150], ebx
je 0x43536a
lea edx, [ebp - 0x160]
push edx
push str.Rev:
lea eax, [ebp - 0x4c]
push eax
call fcn.00414000
add esp, 0xc
mov byte [ebp - 4], 9
push ebx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x1ec]
call fcn.00412830
mov byte [ebp - 4], 8
lea esi, [ebp - 0x4c]
call fcn.004150b0
mov eax, dword [ebp - 0x1dc]
cmp eax, 0x62
jae 0x435385
lea ecx, [eax + eax]
lea edx, [ebp - 0x36c]
sub edx, ecx
xor eax, eax
mov word [edx], ax
lea ecx, [ebp - 0x30]
push ecx
mov eax, 0x52f280
call fcn.0040fb40
push ebx
lea edx, [ebp - 0xd0]
push edx
or eax, 0xffffffff
lea esi, [ebp - 0x30]
call fcn.00412830
push ebx
lea eax, [ebp - 0x1ec]
push eax
or eax, 0xffffffff
call fcn.00412830
mov ecx, esi
push ecx
lea eax, [ebp - 0x430]
call fcn.0040fb70
mov edx, esi
push edx
mov eax, 0x52f288
call fcn.0040fb70
push ebx
lea eax, [ebp - 0xec]
push eax
or eax, 0xffffffff
call fcn.00412830
mov eax, 0x528928
lea ecx, [ebp - 0x6c]
call fcn.0040fae0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6c]
push ecx
push 1
mov edx, esi
push edx
call fcn.0044eac0
add esp, 0xc
mov byte [ebp - 4], 8
lea esi, [ebp - 0x6c]
call fcn.004150b0
lea eax, [ebp - 0x30]
push eax
mov eax, 0x528928
call fcn.0040fb40
lea ecx, [ebp - 0xb4]
push ecx
push 0x52f294
lea edx, [ebp - 0x4c]
push edx
call fcn.00414000
add esp, 0xc
mov byte [ebp - 4], 0xb
mov edi, eax
lea esi, [ebp - 0x30]
call fcn.00411aa0
mov byte [ebp - 4], 8
lea esi, [ebp - 0x4c]
call fcn.004150b0
lea eax, [ebp - 0x1d0]
push eax
call fcn.00434700
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1d0]
push ecx
push 0x52f2bc
lea edx, [ebp - 0x6c]
push edx
call fcn.00414000
mov bl, 0xd
mov byte [ebp - 4], bl
push 0x52f2b8
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004139a0
add esp, 0x1c
mov byte [ebp - 4], 0xe
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x30]
call fcn.00412830
mov byte [ebp - 4], bl
lea esi, [ebp - 0x4c]
call fcn.004150b0
mov byte [ebp - 4], 0xc
lea esi, [ebp - 0x6c]
call fcn.004150b0
mov eax, 0x528928
lea ecx, [ebp - 0x6c]
call fcn.0040fae0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6c]
push ecx
push 1
lea edx, [ebp - 0x30]
push edx
call fcn.0044eac0
add esp, 0xc
mov byte [ebp - 4], 0xc
lea esi, [ebp - 0x6c]
call fcn.004150b0
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x108]
push ecx
call fcn.00441460
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0xb4]
push edx
lea eax, [ebp - 0x17c]
push eax
call fcn.00441a70
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x108]
push ecx
push str.____Create
lea edx, [ebp - 0x4c]
push edx
call fcn.00414000
add esp, 0x1c
mov byte [ebp - 4], 0x12
mov edi, eax
lea esi, [ebp - 0x30]
call fcn.00411aa0
mov byte [ebp - 4], 0x11
lea esi, [ebp - 0x4c]
call fcn.004150b0
cmp dword [ebp - 0x168], 8
mov eax, dword [ebp - 0x17c]
jae 0x435558
lea eax, [ebp - 0x17c]
push eax
mov edi, dword [ebp - 0x16c]
mov eax, dword [ebp - 0xf8]
lea ecx, [ebp - 0x108]
call fcn.00414b80
test eax, eax
je 0x4355aa
lea eax, [ebp - 0x17c]
push eax
push str.___Update
lea ecx, [ebp - 0x4c]
push ecx
call fcn.00414000
add esp, 0xc
mov byte [ebp - 4], 0x13
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x30]
call fcn.00412830
mov byte [ebp - 4], 0x11
lea esi, [ebp - 0x4c]
call fcn.004150b0
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push 0
push edx
push eax
lea edx, [ebp - 0x6c]
push edx
call fcn.004f2070
mov bl, 0x14
mov byte [ebp - 4], bl
push eax
lea eax, [ebp - 0x4c]
push eax
mov edx, str.___Run
call fcn.00413910
add esp, 0x1c
mov byte [ebp - 4], 0x15
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x30]
call fcn.00412830
mov byte [ebp - 4], bl
lea esi, [ebp - 0x4c]
call fcn.004150b0
mov byte [ebp - 4], 0x11
lea esi, [ebp - 0x6c]
call fcn.004150b0
mov eax, 0x528928
lea ecx, [ebp - 0x6c]
call fcn.0040fae0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x6c]
push ecx
push 1
lea edx, [ebp - 0x30]
push edx
call fcn.0044eac0
add esp, 0xc
mov byte [ebp - 4], 0x11
lea esi, [ebp - 0x6c]
call fcn.004150b0
lea eax, [ebp - 0xc34]
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
test eax, eax
je 0x435690
lea ecx, [ebp - 0x30]
push ecx
mov eax, str.____PWD
call fcn.0040fb40
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0xc34]
call fcn.0040fb70
mov eax, 0x528928
lea ecx, [ebp - 0x6c]
call fcn.0040fae0
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x6c]
push eax
push 1
lea ecx, [ebp - 0x30]
push ecx
call fcn.0044eac0
add esp, 0xc
mov byte [ebp - 4], 0x11
lea esi, [ebp - 0x6c]
call fcn.004150b0
lea edx, [ebp - 0x30]
push edx
mov eax, str.____User
call fcn.0040fb40
push str.USERDOMAIN
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov esi, dword [sym.imp.MSVCR100.dll__wdupenv_s]
call esi
add esp, 0xc
test eax, eax
jne 0x435703
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x435703
lea edx, [ebp - 0x30]
push edx
call fcn.0040fb70
lea eax, [ebp - 0x30]
push eax
mov eax, 0x52b45c
call fcn.0040fb70
push str.USERNAME
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x14]
push edx
call esi
add esp, 0xc
test eax, eax
jne 0x4356f5
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4356fd
mov eax, 0x52f22c
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x30]
push ecx
jmp 0x43573a
mov dword [ebp - 0x8c], 0x400
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x1438]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x435731
lea ecx, [ebp - 0x30]
push ecx
lea eax, [ebp - 0x1438]
jmp 0x43573a
lea edx, [ebp - 0x30]
push edx
mov eax, 0x52f22c
call fcn.0040fb70
lea eax, [ebp - 0x144]
push eax
call fcn.00434c70
add esp, 4
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x134], 0
je 0x435793
lea ecx, [ebp - 0x144]
push ecx
push str.___Locale
lea edx, [ebp - 0x4c]
push edx
call fcn.00414000
add esp, 0xc
mov byte [ebp - 4], 0x19
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x30]
call fcn.00412830
mov byte [ebp - 4], 0x18
lea esi, [ebp - 0x4c]
call fcn.004150b0
jmp 0x4357a1
lea eax, [ebp - 0x30]
push eax
mov eax, str.___Locale_
call fcn.0040fb70
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx ecx, ax
push ecx
lea edx, [ebp - 0x88]
push edx
call fcn.004ef520
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x6c]
push eax
mov edx, 0x52a8b0
call fcn.00413910
mov bl, 0x1b
mov byte [ebp - 4], bl
push 0x52f2b8
push eax
lea ecx, [ebp - 0x4c]
push ecx
call fcn.004139a0
add esp, 0x1c
mov byte [ebp - 4], 0x1c
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x30]
call fcn.00412830
mov byte [ebp - 4], bl
lea esi, [ebp - 0x4c]
call fcn.004150b0
mov byte [ebp - 4], 0x1a
lea esi, [ebp - 0x6c]
call fcn.004150b0
mov byte [ebp - 4], 0x18
lea esi, [ebp - 0x88]
call fcn.004150b0
lea edx, [ebp - 0x30]
push edx
mov eax, str.___Exec32_bit
call fcn.0040fb70
mov eax, dword [0x1579748]
push eax
push str.0x_8.8X
lea ecx, [ebp - 0x20c]
push ecx
mov edx, 0xf
call fcn.004ee150
add esp, 0xc
lea edx, [ebp - 0x30]
push edx
mov eax, str.___Mask
call fcn.0040fb70
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x20c]
call fcn.0040fb70
lea ecx, [ebp - 0x4c]
push ecx
call fcn.0044c410
mov bl, 0x1d
mov byte [ebp - 4], bl
push eax
lea edx, [ebp - 0x88]
push edx
mov edx, str.___Level
call fcn.00413910
add esp, 0xc
mov byte [ebp - 4], 0x1e
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x30]
call fcn.00412830
mov byte [ebp - 4], bl
lea esi, [ebp - 0x88]
call fcn.004150b0
mov byte [ebp - 4], 0x18
lea esi, [ebp - 0x4c]
call fcn.004150b0
lea eax, [ebp - 0x30]
push eax
mov eax, str.___V96
call fcn.0040fb70
lea ecx, [ebp - 0x30]
push ecx
mov eax, str.____RELEASE
call fcn.0040fb70
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x4358e6
lea edx, [ebp - 0x30]
push edx
mov eax, str.____Debugger_
call fcn.0040fb70
push 0
push 0
call fcn.004f1eb0
add esp, 8
mov ecx, eax
mov eax, 0x91a2b3c5
test ecx, ecx
jle 0x4359b1
imul ecx
add edx, ecx
sar edx, 0xb
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, esi
imul eax, eax, 0xe10
sub ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov edi, edx
shr edi, 0x1f
add edi, edx
push esi
lea ecx, [ebp - 0x4c]
push ecx
call fcn.004ef520
mov bl, 0x1f
mov byte [ebp - 4], bl
push eax
lea edx, [ebp - 0x88]
push edx
mov edx, str.___TZ
call fcn.00413910
add esp, 0x10
mov byte [ebp - 4], 0x20
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x30]
call fcn.00412830
mov byte [ebp - 4], bl
lea esi, [ebp - 0x88]
call fcn.004150b0
mov byte [ebp - 4], 0x18
lea esi, [ebp - 0x4c]
call fcn.004150b0
test edi, edi
je 0x435a82
push edi
lea eax, [ebp - 0x4c]
push eax
call fcn.004ef520
mov bl, 0x21
mov byte [ebp - 4], bl
push eax
lea ecx, [ebp - 0x88]
push ecx
mov edx, 0x528a68
call fcn.00413910
add esp, 0x10
mov byte [ebp - 4], 0x22
jmp 0x435a5a
neg ecx
imul ecx
add edx, ecx
sar edx, 0xb
mov esi, edx
shr esi, 0x1f
add esi, edx
mov edx, esi
imul edx, edx, 0xe10
sub ecx, edx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov edi, edx
shr edi, 0x1f
add edi, edx
push esi
lea eax, [ebp - 0x4c]
push eax
call fcn.004ef520
mov bl, 0x23
mov byte [ebp - 4], bl
push eax
lea ecx, [ebp - 0x88]
push ecx
mov edx, str.___TZ_
call fcn.00413910
add esp, 0x10
mov byte [ebp - 4], 0x24
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x30]
call fcn.00412830
mov byte [ebp - 4], bl
lea esi, [ebp - 0x88]
call fcn.004150b0
mov byte [ebp - 4], 0x18
lea esi, [ebp - 0x4c]
call fcn.004150b0
test edi, edi
je 0x435a82
push edi
lea edx, [ebp - 0x4c]
push edx
call fcn.004ef520
mov bl, 0x25
mov byte [ebp - 4], bl
push eax
lea eax, [ebp - 0x88]
push eax
mov edx, 0x528a68
call fcn.00413910
add esp, 0x10
mov byte [ebp - 4], 0x26
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x30]
call fcn.00412830
mov byte [ebp - 4], bl
lea esi, [ebp - 0x88]
call fcn.004150b0
mov byte [ebp - 4], 0x18
lea esi, [ebp - 0x4c]
call fcn.004150b0
mov eax, 0x528928
lea ecx, [ebp - 0x6c]
call fcn.0040fae0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x6c]
push ecx
push 1
lea edx, [ebp - 0x30]
push edx
call fcn.0044eac0
add esp, 0xc
mov byte [ebp - 4], 0x18
lea esi, [ebp - 0x6c]
call fcn.004150b0
push 1
lea eax, [ebp - 0x124]
push eax
call fcn.004349c0
add esp, 8
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x114], 0
jne 0x435b04
push str.COMPUTERNAME
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.MSVCR100.dll__wdupenv_s]
add esp, 0xc
test eax, eax
jne 0x435af0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x435af8
mov eax, 0x52f22c
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x124]
push ecx
call fcn.0040fb40
lea edx, [ebp - 0x30]
push edx
mov eax, str.____Host
call fcn.0040fb40
push 0
lea eax, [ebp - 0x124]
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x30]
call fcn.00412830
mov ecx, esi
push ecx
mov eax, 0x52c60c
call fcn.0040fb70
lea edx, [ebp - 0x198]
push edx
call fcn.00461fa0
add esp, 4
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x188], 0
je 0x435b76
push 0
lea eax, [ebp - 0x198]
push eax
or eax, 0xffffffff
call fcn.00412830
call fcn.00462f50
test al, al
je 0x435b76
mov ecx, esi
push ecx
mov eax, str.__Server_
call fcn.0040fb70
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x21c]
cmp eax, 1
jle 0x435bde
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004ef520
mov bl, 0x2a
mov byte [ebp - 4], bl
push eax
lea ecx, [ebp - 0x88]
push ecx
mov edx, str.___CPUs
call fcn.00413910
add esp, 0x10
mov byte [ebp - 4], 0x2b
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x30]
call fcn.00412830
mov byte [ebp - 4], bl
lea esi, [ebp - 0x88]
call fcn.004150b0
mov byte [ebp - 4], 0x29
lea esi, [ebp - 0x4c]
call fcn.004150b0
push str.PROCESSOR_ARCHITECTURE
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.MSVCR100.dll__wdupenv_s]
add esp, 0xc
test eax, eax
jne 0x435c17
cmp dword [ebp - 0x14], eax
je 0x435c17
lea ecx, [ebp - 0x30]
push ecx
mov eax, str.____Arch
call fcn.0040fb70
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x14]
call fcn.0040fb70
mov eax, 0x528928
lea ecx, [ebp - 0x6c]
call fcn.0040fae0
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x6c]
push eax
push 1
lea ecx, [ebp - 0x30]
push ecx
call fcn.0044eac0
add esp, 0xc
mov byte [ebp - 4], 0x29
lea esi, [ebp - 0x6c]
call fcn.004150b0
mov edx, dword [sym.imp.MSVCR100.dll___wargv]
cmp dword [edx], 0
je 0x435cf3
mov eax, 0x52f294
lea ecx, [ebp - 0x6c]
call fcn.0040fae0
mov byte [ebp - 4], 0x2d
xor esi, esi
mov dword [ebp - 0x90], esi
mov eax, dword [sym.imp.MSVCR100.dll___argc]
cmp esi, dword [eax]
jge 0x435cb8
mov ecx, dword [sym.imp.MSVCR100.dll___wargv]
mov edx, dword [ecx]
cmp dword [edx + esi*4], 0
je 0x435cb5
lea eax, [ebp - 0x6c]
push eax
mov eax, 0x52e510
call fcn.0040fb70
mov ecx, dword [sym.imp.MSVCR100.dll___wargv]
mov edx, dword [ecx]
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [edx + esi*4]
call fcn.0040fb70
lea ecx, [ebp - 0x6c]
push ecx
mov eax, 0x52f4fc
call fcn.0040fb70
inc esi
jmp 0x435c68
mov eax, 0x528928
lea ecx, [ebp - 0x4c]
call fcn.0040fae0
mov byte [ebp - 4], 0x2e
lea edx, [ebp - 0x4c]
push edx
push 1
lea eax, [ebp - 0x6c]
push eax
call fcn.0044eac0
add esp, 0xc
mov byte [ebp - 4], 0x2d
lea esi, [ebp - 0x4c]
call fcn.004150b0
mov byte [ebp - 4], 0x29
lea esi, [ebp - 0x6c]
call fcn.004150b0
mov eax, 0x528928
lea ecx, [ebp - 0x4c]
call fcn.0040fae0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x4c]
push ecx
call fcn.0044ece0
add esp, 4
mov byte [ebp - 4], 0x29
lea esi, [ebp - 0x4c]
call fcn.004150b0
mov byte [ebp - 4], 0x28
lea esi, [ebp - 0x198]
call fcn.004150b0
mov byte [ebp - 4], 0x18
lea esi, [ebp - 0x124]
call fcn.004150b0
mov byte [ebp - 4], 0x11
lea esi, [ebp - 0x144]
call fcn.004150b0
mov byte [ebp - 4], 0x10
lea esi, [ebp - 0x17c]
call fcn.004150b0
mov byte [ebp - 4], 0xc
lea esi, [ebp - 0x108]
call fcn.004150b0
mov byte [ebp - 4], 8
lea esi, [ebp - 0x1d0]
call fcn.004150b0
mov byte [ebp - 4], 6
lea esi, [ebp - 0x160]
call fcn.004150b0
mov byte [ebp - 4], 5
lea esi, [ebp - 0x1ec]
call fcn.004150b0
mov byte [ebp - 4], 4
lea esi, [ebp - 0x1b4]
call fcn.004150b0
mov byte [ebp - 4], 3
lea esi, [ebp - 0xb4]
call fcn.004150b0
mov byte [ebp - 4], 2
lea esi, [ebp - 0xec]
call fcn.004150b0
mov byte [ebp - 4], 1
lea esi, [ebp - 0xd0]
call fcn.004150b0
mov byte [ebp - 4], 0
lea esi, [ebp - 0x30]
call fcn.004150b0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret