Function at 0x40bc9d
Capabilities:
Compare security identifiers
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x204
push esi
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x40c9a3
lea eax, [ebp + 0x24]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x160], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x154]
movzx eax, byte [eax]
test eax, eax
je 0x40c986
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x14c]
movzx eax, byte [eax]
test eax, eax
je 0x40bd46
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_EqualSid]
jmp 0x40c984
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x28], 0x398070a
mov dword [ebp - 0x10], 0xfffffffc
mov dword [ebp - 0x120], 0xfffffffd
mov dword [ebp - 0x148], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jne 0x40bd9d
mov dword [ebp - 0x118], 1
jmp 0x40bda4
and dword [ebp - 0x118], 0
cmp dword [ebp - 0x28], 0
je 0x40bdb3
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
jmp 0x40bdda
mov dword [ebp - 0x158], 0xffffffff
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 1
call fcn.0040b4d3
add esp, 0x18
mov dword [ebp - 0x10], 0
jmp 0x40bdea
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jne 0x40be2d
mov dword [ebp - 0x128], 8
push 0x6f81
lea eax, [ebp - 0x120]
push eax
push 0x2a4c
lea eax, [ebp - 0x148]
push eax
push 0
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040f0a1
add esp, 0x20
jmp 0x40bde3
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 4]
mov dword [ebp - 0xd4], eax
push 3
lea ecx, [ebp - 0x70]
call fcn.0042ec30
push 0
push 0x9f2
push 0xe1e
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x1d4]
push eax
push 0x1255
push 0x536f
push 0
push 0
call fcn.00409e6f
add esp, 0x24
push 2
lea ecx, [ebp - 0x70]
call fcn.0042ed1e
mov dword [eax], 0xffffffe4
jmp 0x40bea3
push 2
lea ecx, [ebp - 0x70]
call fcn.0042ed1e
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xc0]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x70]
call fcn.0042ed1e
cmp dword [eax], 0xfffffffe
jne 0x40c05b
mov dword [ebp - 0x14], 0x2276b87d
mov dword [ebp - 0x3c], 0
jmp 0x40becd
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x40bee3
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x1f8], 5
jmp 0x40bec6
push 0x7859
push 1
push 0
push 0
push 0
push 0x2fe3
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 0x70]
push eax
call fcn.0042af4a
add esp, 0x24
mov dword [ebp - 0x14], 0
jmp 0x40bf17
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffe2
jl 0x40c056
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x168], 5
mov dword [ebp - 0x18], 2
jmp 0x40bf42
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x40c034
push 2
lea ecx, [ebp - 0x70]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x40bfca
mov esi, dword [ebp - 0x14]
push 2
lea ecx, [ebp - 0x70]
call fcn.0042ed1e
cmp esi, dword [eax]
jne 0x40bf78
mov dword [ebp - 0xdc], 1
jmp 0x40bf7f
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0x18]
cmp eax, 0xabf8b243
ja 0x40bf9b
mov dword [ebp - 0xe4], 1
jmp 0x40bfa2
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
sub eax, dword [ebp - 0x18]
je 0x40bfc1
push 2
lea ecx, [ebp - 0x70]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x40bfc1
xor eax, eax
inc eax
jne 0x40bfca
and dword [ebp - 0xec], 0
jmp 0x40bfd4
mov dword [ebp - 0xec], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1f8], 0xa017
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xec]
cmp eax, 0xa017
jg 0x40bffe
mov dword [ebp - 0xb8], 1
jmp 0x40c005
and dword [ebp - 0xb8], 0
push 2
lea ecx, [ebp - 0x70]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xb8]
cmp ecx, dword [eax]
jge 0x40c022
mov dword [ebp - 0x80], 1
jmp 0x40c026
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x168], eax
jmp 0x40bf3b
push 0x78da
push 0x1936
push 0x7443
push 0
push 0
push 0
call fcn.0040b4d3
add esp, 0x18
jmp 0x40bf10
jmp 0x40be82
lea ecx, [ebp - 0x70]
call fcn.0042ed02
push 0
push 1
push 0x7d11
push 0x2fa2
push 0x50fa
call fcn.00413827
add esp, 0x14
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0xc], eax
push 0
push 0xa4a
push 0x370e
push 1
call fcn.0040d85e
add esp, 0x10
and dword [ebp - 0x50], 0
jmp 0x40c0bf
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0xc]
add eax, 0x28
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x50], eax
jge 0x40c984
mov dword [ebp - 0x64], 0x2e91a04
mov dword [ebp - 0x60], 0x2e91a04
mov dword [ebp - 0x5c], 0x2e91a04
mov dword [ebp - 0x58], 0x2e91a04
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x198], 0xfffffffb
mov dword [ebp - 0x19c], 0x817bb5c0
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x1d0], 0x8fd5f396
mov dword [ebp - 0x1cc], 0x8fd5f396
mov dword [ebp - 0x1c8], 0x8fd5f396
mov dword [ebp - 0x1c4], 0x8fd5f396
mov dword [ebp - 0x138], 0x7236c342
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x64], 0
jmp 0x40c16c
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x64]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x64], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x64], 0xffffffe5
jne 0x40c514
mov dword [ebp - 0x1c], 0x24f84b81
mov dword [ebp - 8], 8
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x24], 0xffffffff
push 2
lea ecx, [ebp - 0x1b8]
call fcn.0042ec30
mov dword [ebp - 0x1a8], 4
mov dword [ebp - 0x1dc], 0x34309e95
lea eax, [ebp - 0x1b8]
push eax
push 0
lea eax, [ebp - 0x2c]
push eax
call fcn.004184fd
add esp, 0xc
mov dword [ebp - 0x2c], 0
jmp 0x40c1df
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x40c1f5
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1e4], 0x91c6c8ec
jmp 0x40c1d8
mov dword [ebp - 0x1c], 6
jmp 0x40c205
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x19
jge 0x40c3a3
mov dword [ebp - 0x38], 0xd8af
push 2
lea ecx, [ebp - 0x174]
call fcn.0042ec30
push 0
push 0
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x174]
push eax
push 0x5456
call fcn.00415a76
add esp, 0x14
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x40c300
mov dword [ebp - 0x38], 4
cmp dword [ebp - 0x38], 0x16b5b384
je 0x40c287
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x64]
add eax, dword [ebp - 0x38]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x64]
test eax, eax
jne 0x40c287
and dword [ebp - 0x130], 0
jmp 0x40c291
mov dword [ebp - 0x130], 1
push 0
lea ecx, [ebp - 0x174]
call fcn.0042ed1e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x38], eax
jg 0x40c2b9
mov dword [ebp - 0xd8], 1
jmp 0x40c2c0
and dword [ebp - 0xd8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd8]
sub ecx, dword [ebp + eax - 0x64]
cmp ecx, dword [ebp - 8]
jl 0x40c2e1
mov dword [ebp - 0x88], 1
jmp 0x40c2e8
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x40c300
mov dword [ebp - 0x74], 1
jmp 0x40c304
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 8]
test eax, eax
je 0x40c319
cmp dword [ebp - 0x24], 0
mov eax, dword [ebp - 8]
sub eax, 0xc3e1
cmp eax, dword [ebp - 8]
jge 0x40c332
mov dword [ebp - 0x90], 1
jmp 0x40c339
and dword [ebp - 0x90], 0
cmp dword [ebp - 0x90], 0
jae 0x40c357
mov eax, 0xd58e
test eax, eax
je 0x40c357
mov dword [ebp - 0xe8], 1
jmp 0x40c35e
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
sub eax, 0x4898d08f
cmp dword [ebp - 8], eax
jle 0x40c37a
mov dword [ebp - 0x150], 1
jmp 0x40c381
and dword [ebp - 0x150], 0
mov esi, dword [ebp - 0x24]
push 1
lea ecx, [ebp - 0x174]
call fcn.0042ed1e
mov dword [eax], esi
lea ecx, [ebp - 0x174]
call fcn.0042ed02
jmp 0x40c1fe
mov dword [ebp - 8], 1
jmp 0x40c3b3
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x40c504
mov dword [ebp - 0x194], 0xfde6
mov dword [ebp - 0x190], 0xfde6
mov dword [ebp - 0x18c], 0xfde6
mov dword [ebp - 0x188], 0xfde6
mov dword [ebp - 0x1e0], 0xfa7bb34e
mov dword [ebp - 0x34], 0
jmp 0x40c3ff
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x40c415
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x204], 0x3d47ebdc
jmp 0x40c3f8
cmp dword [ebp - 0x24], 0xf322
je 0x40c42a
mov dword [ebp - 0x98], 1
jmp 0x40c431
and dword [ebp - 0x98], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x64]
cmp eax, dword [ebp - 0x98]
jg 0x40c44e
mov dword [ebp - 0xa0], 1
jmp 0x40c455
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x1a4], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x1d8], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x64]
cmp dword [ebp + eax - 0x64], ecx
jl 0x40c493
mov dword [ebp - 0xc8], 1
jmp 0x40c49a
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xa0]
sub ecx, eax
sub ecx, dword [ebp - 0xe0]
cmp ecx, 2
jae 0x40c4c3
mov dword [ebp - 0xa8], 1
jmp 0x40c4ca
and dword [ebp - 0xa8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xa8]
mov dword [ebp + eax - 0x194], ecx
push 0
push 0x49c0
push 0x77db
push 0x4a9d
push 0
lea eax, [ebp - 0x138]
push eax
call fcn.00425ec5
add esp, 0x18
jmp 0x40c3ac
lea ecx, [ebp - 0x1b8]
call fcn.0042ed02
jmp 0x40c157
push 0x7da4
push 0x7f9
push 0x6f25
push 1
push 1
push 0
push 0x2d48
call fcn.004087d0
add esp, 0x1c
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x10], 0
jne 0x40c8d5
mov dword [ebp - 4], 1
push 2
lea ecx, [ebp - 0xfc]
call fcn.0042ec30
mov dword [ebp - 0x20], 0
jmp 0x40c567
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x40c57a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x4c], 0xec2e0cf5
jmp 0x40c560
push 0x5ad1
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x20]
push eax
push 0
call fcn.00426311
add esp, 0x10
mov dword [ebp - 4], 2
jmp 0x40c5a4
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x40c776
mov dword [ebp - 0x84], 0x3f08700d
mov dword [ebp - 0xb0], 0xcc19583e
mov dword [ebp - 0x184], 0x808adc70
mov dword [ebp - 0x180], 0x808adc70
mov dword [ebp - 0x17c], 0x808adc70
mov dword [ebp - 0x178], 0x808adc70
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x4c]
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 4], 0
jne 0x40c69a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4c], 0
jne 0x40c662
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x4c], 0
jne 0x40c624
mov dword [ebp - 0x108], 1
jmp 0x40c62b
and dword [ebp - 0x108], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4c]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x84], 0
je 0x40c65b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4c], 0
je 0x40c65b
mov dword [ebp - 0xd0], 1
jmp 0x40c662
and dword [ebp - 0xd0], 0
push 1
lea ecx, [ebp - 0xfc]
call fcn.0042ed1e
mov dword [eax], 0x5257
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0xb0], 0x6728
cmp dword [ebp - 0xb0], 0
jne 0x40c69a
and dword [ebp - 0xf0], 0
jmp 0x40c6a4
mov dword [ebp - 0xf0], 1
cmp dword [ebp - 0xf0], 0xffffffff
jg 0x40c6b6
mov dword [ebp - 0x78], 1
jmp 0x40c6ba
and dword [ebp - 0x78], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x78], eax
jle 0x40c6cb
mov dword [ebp - 0x7c], 1
jmp 0x40c6cf
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x4c]
cmp dword [ebp - 0x7c], eax
je 0x40c6e5
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x4c], 0
jne 0x40c6ec
cmp dword [ebp - 0x84], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x4c]
cmp dword [ebp + eax - 0x4c], ecx
je 0x40c70d
mov dword [ebp - 0x8c], 1
jmp 0x40c714
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x8c], eax
jg 0x40c72b
mov dword [ebp - 0x94], 1
jmp 0x40c732
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x94]
add eax, 0x40a7fcc6
cmp eax, 0x8e65
je 0x40c757
push 7
pop eax
test eax, eax
je 0x40c757
mov dword [ebp - 0x9c], 1
jmp 0x40c75e
and dword [ebp - 0x9c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x9c]
mov dword [ebp + eax - 0x184], ecx
jmp 0x40c59d
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 4], 0
jb 0x40c791
mov dword [ebp - 0xa4], 1
jmp 0x40c798
and dword [ebp - 0xa4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp - 0xa4], eax
jge 0x40c7b6
mov dword [ebp - 0xac], 1
jmp 0x40c7bd
and dword [ebp - 0xac], 0
push 1
lea ecx, [ebp - 0xfc]
call fcn.0042ed1e
mov eax, dword [eax]
add eax, 7
cmp eax, dword [ebp - 0xac]
jl 0x40c7e3
mov dword [ebp - 0xb4], 1
jmp 0x40c7ea
and dword [ebp - 0xb4], 0
push 1
lea ecx, [ebp - 0xfc]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xb4]
cmp ecx, dword [eax]
jne 0x40c80d
mov dword [ebp - 0xbc], 1
jmp 0x40c814
and dword [ebp - 0xbc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp eax, dword [ebp - 0xbc]
jl 0x40c834
xor eax, eax
inc eax
jne 0x40c834
and dword [ebp - 0xc4], 0
jmp 0x40c83e
mov dword [ebp - 0xc4], 1
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp - 4], eax
jle 0x40c862
mov dword [ebp - 0xcc], 1
jmp 0x40c869
and dword [ebp - 0xcc], 0
mov esi, dword [ebp - 0xcc]
sub esi, 0xe188
push 0
lea ecx, [ebp - 0xfc]
call fcn.0042ed1e
mov dword [eax], esi
lea ecx, [ebp - 0xfc]
call fcn.0042ed02
push 0x2716
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xd4]
push eax
push 0x4df8
push 0
lea eax, [ebp - 0xc]
push eax
push 0x181f
lea eax, [ebp - 0x104]
push eax
push 0x20b9
push 0x74c6
call fcn.0042b3bc
add esp, 0x28
push 0
call fcn.004160e7
pop ecx
jmp 0x40c0af
push 0
push 0x490a
push 0x685f
call fcn.0041443d
add esp, 0xc
push 4
push 0x1000
mov eax, dword [ebp - 0xc]
push dword [eax + 0x10]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xd4]
add ecx, dword [eax + 0xc]
push ecx
push 0xbafe
push 0xc8d6
call fcn.00407018
pop ecx
pop ecx
call eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xc]
push dword [eax + 0x10]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x114]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x54]
call fcn.00407cf8
add esp, 0xc
push 0x5390
push 0x2fba
push 0x4e09
push 1
push 0
push 0x3e62
push 0x4fcd
push 0
call fcn.00425c69
add esp, 0x20
push 0x5b1f
push 0x7699
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x1fca
push 0
call fcn.0041e1c7
add esp, 0x18
jmp 0x40c0af
jmp 0x40c9a1
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x124], eax
push 0
push dword [ebp - 0x124]
call fcn.00412b55
pop ecx
pop ecx
jmp 0x40c9e9
mov eax, dword [ebp + 8]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x12c], eax
push dword [ebp - 0x12c]
push dword [ebp - 0x134]
push 0
push dword [ebp - 0x13c]
push dword [ebp - 0x144]
call fcn.00408f23
add esp, 0x14
pop esi
mov esp, ebp
pop ebp
ret