Function at 0x4084a6
Capabilities:
Get domain controller name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41104c
push 0x4094c9
push dword fs:[0]
mov dword fs:[0], esp
sub esp, 0x564
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
and dword [ebp - 0x53c], 0
and dword [ebp - 0x20], 0
and dword [ebp - 0x24], 0
and dword [ebp - 0x564], 0
and dword [ebp - 0x558], 0
and dword [ebp - 0x540], 0
xor esi, esi
and dword [ebp - 0x544], 0
and dword [ebp - 0x548], 0
and dword [ebp - 0x54c], 0
and dword [ebp - 0x550], 0
and dword [ebp - 0x554], 0
push 0x8003
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 1
push 0x40849b
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
and dword [ebp - 4], 0
call fcn.00406aed
push 0
call fcn.004010f0
pop ecx
call fcn.00402aad
push 1
call section..text
pop ecx
mov edi, eax
test edi, edi
je 0x408587
cmp byte [edi], 0x40
jne 0x408583
lea eax, [edi + 1]
mov dword [ebp - 0x53c], eax
cmp byte [eax], 0
jne 0x408579
mov eax, 0x6f
jmp 0x40946a
push 1
call section..text
pop ecx
mov edi, eax
test edi, edi
jne 0x408591
mov eax, 0x6e
jmp 0x40946a
push 0
push edi
push dword [0x4155b8]
call fcn.004059c8
add esp, 0xc
mov edi, eax
call fcn.00405e81
test eax, eax
jne 0x4085b7
mov eax, 0x66
jmp 0x40946a
push dword [ebp - 0x53c]
call fcn.00406126
pop ecx
test eax, eax
jne 0x4085d1
mov eax, 0x66
jmp 0x40946a
test edi, edi
je 0x4088db
push str._LDAP
push edi
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x408621
cmp dword [0x4156c4], 0
je 0x4085fe
mov eax, dword [0x4156c4]
mov edx, dword [eax]
test edx, edx
jne 0x408608
mov eax, 0x66
jmp 0x40946a
push edx
call fcn.00406b16
pop ecx
push 0x411385
call fcn.00406b16
pop ecx
xor eax, eax
jmp 0x40946a
test edi, edi
je 0x4088db
push str.FQDN
push edi
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
je 0x408660
push str._FQDN
push edi
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
je 0x408660
push str._SID
push edi
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x4088db
and dword [ebp - 0x20], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
lea edx, [ebp - 0x24]
push edx
push 8
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x408711
and dword [ebp - 0x28], 0
lea eax, [ebp - 0x28]
push eax
push 0
push 0
push 1
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x55c], eax
test eax, eax
je 0x408708
mov eax, dword [ebp - 0x55c]
inc eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0x560], eax
test eax, eax
je 0x408708
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x55c]
push dword [ebp - 0x560]
push 1
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x4086fc
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x560]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_ConvertSidToStringSidA]
push dword [ebp - 0x560]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x20], 0
jne 0x408721
mov eax, 0x66
jmp 0x40946a
push str._SID
push edi
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x40874d
push dword [ebp - 0x20]
call fcn.00406b16
pop ecx
push 0x411385
call fcn.00406b16
pop ecx
xor eax, eax
jmp 0x40946a
and dword [ebp - 0x24], 0
lea eax, [ebp - 0x24]
push eax
push 0
push 0
call dword [sym.imp.NTDSAPI.dll_DsBindA]
test eax, eax
je 0x40876d
cmp dword [ebp - 0x24], 0
je 0x408777
and dword [ebp - 0x24], 0
cmp dword [ebp - 0x24], 0
jne 0x408850
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.NETAPI32.dll_DsGetDcNameA]
test eax, eax
jne 0x4087b6
lea eax, [ebp - 0x24]
push eax
push 0
mov eax, dword [ebp - 0x34]
push dword [eax]
call dword [sym.imp.NTDSAPI.dll_DsBindA]
test eax, eax
je 0x4087ae
cmp dword [ebp - 0x24], 0
je 0x4087ae
and dword [ebp - 0x24], 0
push dword [ebp - 0x34]
call sub.NETAPI32.dll_NetApiBufferFree
cmp dword [ebp - 0x24], 0
jne 0x408850
and dword [ebp - 0x30], 0
lea eax, [ebp - 0x30]
push eax
push 1
push 0
call sub.NETAPI32.dll_NetWkstaUserGetInfo
test eax, eax
jne 0x408840
cmp dword [ebp - 0x30], 0
je 0x408840
push 0x104
push 0
lea eax, [ebp - 0x538]
push eax
call fcn.00409670
add esp, 0xc
push 0
push 0
push 0x103
lea eax, [ebp - 0x538]
push eax
push 0xffffffffffffffff
mov eax, dword [ebp - 0x30]
push dword [eax + 0xc]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x408838
lea eax, [ebp - 0x24]
push eax
push 0
lea eax, [ebp - 0x538]
push eax
call dword [sym.imp.NTDSAPI.dll_DsBindA]
test eax, eax
je 0x408838
cmp dword [ebp - 0x24], 0
je 0x408838
and dword [ebp - 0x24], 0
push dword [ebp - 0x30]
call sub.NETAPI32.dll_NetApiBufferFree
cmp dword [ebp - 0x24], 0
jne 0x408850
mov eax, 0x66
jmp 0x40946a
and dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
push 1
push 1
push 0xb
push 0
push dword [ebp - 0x24]
call dword [sym.imp.NTDSAPI.dll_DsCrackNamesA]
test eax, eax
jne 0x4088d1
cmp dword [ebp - 0x2c], 0
je 0x4088d1
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 1
jne 0x4088c7
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
cmp dword [eax], 0
jne 0x4088c7
push str._FQDN
push edi
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x4088bc
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
push dword [eax + 8]
call fcn.00406b16
pop ecx
push 0x411385
call fcn.00406b16
pop ecx
xor eax, eax
jmp 0x40946a
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
mov edi, dword [eax + 8]
jmp 0x4088db
mov eax, 0x66
jmp 0x40946a
mov eax, 0x66
jmp 0x40946a
push 1
call section..text
pop ecx
mov ebx, eax
test ebx, ebx
je 0x408d09
cmp byte [ebx], 0x2f
jne 0x408b07
jmp 0x408afa
push 0x411213
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x40891b
mov dword [ebp - 0x564], 1
jmp 0x408af0
push str._Mail
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x40893b
mov dword [ebp - 0x564], 2
jmp 0x408af0
push str._Login
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x40895b
mov dword [ebp - 0x564], 3
jmp 0x408af0
push 0x411202
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x40897b
mov dword [ebp - 0x558], 2
jmp 0x408af0
push 0x4111ff
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x40899b
mov dword [ebp - 0x558], 3
jmp 0x408af0
push 0x4111fc
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x4089bb
mov dword [ebp - 0x558], 4
jmp 0x408af0
push 0x4111f9
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x4089d4
xor esi, esi
inc esi
jmp 0x408af0
push 0x4111f6
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x4089ef
mov esi, 2
jmp 0x408af0
push 0x4111f3
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x408a12
xor esi, esi
inc esi
mov dword [ebp - 0x548], 1
jmp 0x408af0
push 0x4111f0
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x408a32
mov dword [ebp - 0x54c], 1
jmp 0x408af0
push 0x4111ed
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x408a52
mov dword [ebp - 0x550], 1
jmp 0x408af0
push 0x4111e9
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x408a72
mov dword [ebp - 0x540], 1
jmp 0x408af0
push 0x4111e5
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x408a8f
mov dword [ebp - 0x540], 2
jmp 0x408af0
push 0x4111e1
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x408aac
mov dword [ebp - 0x540], 3
jmp 0x408af0
push 0x4111dd
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x408ac9
mov dword [ebp - 0x554], 1
jmp 0x408af0
push str._CHK
push ebx
call fcn.00409dc0
pop ecx
pop ecx
test eax, eax
jne 0x408ae6
mov dword [ebp - 0x544], 1
jmp 0x408af0
mov eax, 0x6f
jmp 0x40946a
push 1
call section..text
pop ecx
mov ebx, eax
test ebx, ebx
jne 0x4088fb
jmp 0x408d09
test ebx, ebx
je 0x408d09
push 0
push ebx
push dword [0x4155b8]
call fcn.004059c8
add esp, 0xc
mov ebx, eax
and dword [ebp - 0x568], 0
push 0
push 0x415af4
push str.distinguishedName
push str.objectClassgroup
push ebx
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x408b8d
push 0x100
push 0
lea eax, [ebp - 0x234]
push eax
call fcn.00409670
add esp, 0xc
mov eax, dword [0x415af4]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x234]
push eax
call fcn.0040a040
add esp, 0x10
lea ebx, [ebp - 0x234]
mov dword [ebp - 0x568], 2
push 0x415af4
call fcn.00406a5c
pop ecx
cmp dword [ebp - 0x568], 0
jne 0x408be2
push 0x400
push 0
push 0x4156cc
call fcn.00409670
add esp, 0xc
push ebx
push str._n____s_n
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
mov eax, 3
jmp 0x40946a
and dword [ebp - 0x568], 0
push 0
push 0x415af4
push str.distinguishedName
push str.__objectClassuser__objectClassgroup__objectClasscomputer__
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x408c4d
push 0x100
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00409670
add esp, 0xc
mov eax, dword [0x415af4]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x134]
push eax
call fcn.0040a040
add esp, 0x10
lea edi, [ebp - 0x134]
mov dword [ebp - 0x568], 1
push 0x415af4
call fcn.00406a5c
pop ecx
cmp dword [ebp - 0x568], 0
jne 0x408ca2
push 0x400
push 0
push 0x4156cc
call fcn.00409670
add esp, 0xc
push edi
push str._n____s_n
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
mov eax, 3
jmp 0x40946a
push 0
push 0
push str.__objectClassuser__objectClassgroup__objectClasscomputer__
push ebx
push edi
call fcn.004073ee
add esp, 0x14
test eax, eax
jne 0x40944e
push 0x400
push 0
push 0x4156cc
call fcn.00409670
add esp, 0xc
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x234]
push eax
push str._n___s_n____s_n
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x14
push 0x4156cc
call fcn.00406b16
pop ecx
xor eax, eax
inc eax
jmp 0x40946a
and dword [ebp - 0x568], 0
push 0
push 0x415af4
push str.distinguishedName
push str.objectClassuser
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x408d74
push 0x100
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00409670
add esp, 0xc
mov eax, dword [0x415af4]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x134]
push eax
call fcn.0040a040
add esp, 0x10
lea edi, [ebp - 0x134]
mov dword [ebp - 0x568], 1
cmp dword [ebp - 0x568], 0
jne 0x408de1
push 1
push 0x415af4
push str.distinguishedName
push str.objectClassgroup
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x408de1
push 0x100
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00409670
add esp, 0xc
mov eax, dword [0x415af4]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x134]
push eax
call fcn.0040a040
add esp, 0x10
lea edi, [ebp - 0x134]
mov dword [ebp - 0x568], 2
push 0x415af4
call fcn.00406a5c
pop ecx
cmp dword [ebp - 0x568], 0
jne 0x408e36
push 0x400
push 0
push 0x4156cc
call fcn.00409670
add esp, 0xc
push edi
push str._n____s_n
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
mov eax, 3
jmp 0x40946a
cmp dword [ebp - 0x544], 0
je 0x408e9c
push 0x400
push 0
push 0x4156cc
call fcn.00409670
add esp, 0xc
push edi
mov eax, 0x41115f
mov edx, 0x411163
cmp dword [ebp - 0x568], 2
cmove eax, edx
push eax
push str._n___s___s_n
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x14
push 0x4156cc
call fcn.00406b16
pop ecx
xor eax, eax
cmp dword [ebp - 0x568], 2
setne al
jmp 0x40946a
push 0x100
push 0
lea eax, [ebp - 0x334]
push eax
call fcn.00409670
add esp, 0xc
push 0
push 0x415af4
push 0x411320
push 0
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x408ee0
cmp dword [0x415af4], 0
je 0x408ee0
mov eax, dword [0x415af4]
cmp dword [eax], 0
jne 0x408f21
push 0x400
push 0
push 0x4156cc
call fcn.00409670
add esp, 0xc
push edi
push 0x411157
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
mov eax, 3
jmp 0x40946a
cmp dword [ebp - 0x568], 1
jne 0x408f7e
push 0
push 0x415af8
push str.displayName
push 0
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x408f7e
push dword [0x415af8]
call fcn.004073c5
pop ecx
test eax, eax
je 0x408f7e
mov eax, dword [0x415af8]
push dword [eax]
mov eax, dword [0x415af4]
push dword [eax]
push str._s_:__s
push 0xff
lea eax, [ebp - 0x334]
push eax
call fcn.0040a040
add esp, 0x14
jmp 0x408f9e
mov eax, dword [0x415af4]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x334]
push eax
call fcn.0040a040
add esp, 0x10
push 0x415af4
call fcn.00406a5c
pop ecx
push 0x415af8
call fcn.00406a5c
pop ecx
cmp dword [ebp - 0x568], 1
jne 0x4091a7
push 0x1000
push 1
push 0x415acc
call fcn.00406b62
add esp, 0xc
test eax, eax
je 0x408ff1
push pe_nt_image_headers32
push 8
push 0x415ae0
call fcn.00406b62
add esp, 0xc
test eax, eax
jne 0x408ffb
mov eax, 0x68
jmp 0x40946a
push esi
push dword [ebp - 0x558]
push dword [ebp - 0x564]
push str.objectClassuser
lea eax, [ebp - 0x134]
push eax
call fcn.004074b5
add esp, 0x14
test esi, esi
jne 0x409178
push 0x100
push 0
lea eax, [ebp - 0x434]
push eax
call fcn.00409670
add esp, 0xc
cmp dword [ebp - 0x564], 2
jne 0x40908e
push 0
push 0x415af8
push str.mail
push 0
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x40908e
push dword [0x415af8]
call fcn.004073c5
pop ecx
test eax, eax
je 0x40908e
mov eax, dword [0x415af8]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x434]
push eax
call fcn.0040a040
add esp, 0x10
push 0
push 0x415af8
push str.userAccountControl
push 0
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x4090ee
push 0
cmp dword [0x415af8], 0
je 0x4090bd
mov eax, dword [0x415af8]
mov eax, dword [eax]
jmp 0x4090bf
xor eax, eax
push eax
call fcn.00405b05
pop ecx
pop ecx
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], edx
cmp edx, 0x80000000
jne 0x4090df
test eax, eax
je 0x4090ee
mov eax, dword [ebp - 0x570]
and eax, 2
xor edx, edx
test eax, eax
jne 0x4090f2
xor ebx, ebx
jmp 0x4090f5
xor ebx, ebx
inc ebx
push 0x400
push 0
push 0x4156cc
call fcn.00409670
add esp, 0xc
cmp byte [ebp - 0x434], 0
je 0x409144
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x334]
push eax
mov eax, str._n_s___s___user_:_n
mov edx, str._n_s______s___user_:_n
test ebx, ebx
cmovne eax, edx
push eax
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x14
jmp 0x40916d
lea eax, [ebp - 0x334]
push eax
mov eax, str._n_s__user_:_n
mov edx, str._n_s_____user_:_n
test ebx, ebx
cmovne eax, edx
push eax
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
push dword [ebp - 0x554]
push dword [ebp - 0x548]
push esi
push 0x415acc
push 0x415ae0
call fcn.004070f6
add esp, 0x14
push 0x411385
call fcn.00406b16
pop ecx
jmp 0x40944e
cmp dword [ebp - 0x568], 2
jne 0x40944e
push 0x1000
push 1
push 0x415acc
call fcn.00406b62
add esp, 0xc
test eax, eax
je 0x4091e4
push pe_nt_image_headers32
push 8
push 0x415ae0
call fcn.00406b62
add esp, 0xc
test eax, eax
jne 0x4091ee
mov eax, 0x68
jmp 0x40946a
push 0
push 0x415af4
push str.groupType
push 0
push edi
call fcn.004064b1
add esp, 0x14
push 0
cmp dword [0x415af4], 0
je 0x409219
mov eax, dword [0x415af4]
mov eax, dword [eax]
jmp 0x40921b
xor eax, eax
push eax
call fcn.00405b05
pop ecx
pop ecx
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], edx
push 0
push dword [ebp - 0x550]
push esi
push dword [ebp - 0x540]
push dword [ebp - 0x558]
push dword [ebp - 0x564]
push str.__objectClassuser__objectClasscomputer__objectClassgroup__objectClasscontact__
push edi
call fcn.00407878
add esp, 0x20
test esi, esi
jne 0x409424
push 0x100
push 0
lea eax, [ebp - 0x434]
push eax
call fcn.00409670
add esp, 0xc
cmp dword [ebp - 0x564], 2
jne 0x4092ca
push 0
push 0x415af8
push str.mail
push 0
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x4092ca
push dword [0x415af8]
call fcn.004073c5
pop ecx
test eax, eax
je 0x4092ca
mov eax, dword [0x415af8]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x434]
push eax
call fcn.0040a040
add esp, 0x10
push 0x400
push 0
push 0x4156cc
call fcn.00409670
add esp, 0xc
mov eax, dword [ebp - 0x570]
mov edx, dword [ebp - 0x56c]
cmp edx, 0x80000000
jne 0x4092f6
test eax, eax
je 0x409357
mov eax, dword [ebp - 0x570]
and eax, 0x80000000
xor edx, edx
test eax, eax
jne 0x409357
cmp byte [ebp - 0x434], 0
je 0x409337
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x334]
push eax
push str._n_s___s___group_:_n
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x14
jmp 0x4093a5
lea eax, [ebp - 0x334]
push eax
push str._n_s__group_:_n
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x10
jmp 0x4093a5
cmp byte [ebp - 0x434], 0
je 0x409387
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x334]
push eax
push str._n__s____s___group_:_n
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x14
jmp 0x4093a5
lea eax, [ebp - 0x334]
push eax
push str._n__s___group_:_n
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
cmp dword [ebp - 0x54c], 0
je 0x409424
push 0
push 0x415af4
push str.description
push 0
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x409424
cmp dword [0x415af4], 0
je 0x409424
mov eax, dword [0x415af4]
cmp dword [eax], 0
je 0x409424
push 0x400
push 0
push 0x4156cc
call fcn.00409670
add esp, 0xc
mov eax, dword [0x415af4]
push dword [eax]
push str._:__s_n
push 0x3ff
push 0x4156cc
call fcn.0040a040
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
push dword [ebp - 0x554]
push dword [ebp - 0x548]
push esi
push 0x415acc
push 0x415ae0
call fcn.004070f6
add esp, 0x14
push 0x411385
call fcn.00406b16
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x409468
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
lea esp, [ebp - 0x580]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret