Function at 0x4084a0
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
xor eax, eax
mov ecx, 0x11
mov ebp, esp
push edi
push esi
lea edx, [ebp - 0x50]
push ebx
mov edi, edx
lea ebx, [ebp - 0x54]
sub esp, 0xb4
mov dword [ebp - 0x80], 0
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x88], 0
mov edi, dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x54], 0x48
mov dword [ebp - 0x3c], 0xcd0c3d4b
mov dword [ebp - 0x38], 0x4cf2e15e
mov dword [ebp - 0x34], 0x1d6ea89e
mov dword [ebp - 0x30], 0xa5c54865
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4169b0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x416a00
call edi
sub esp, 0x14
mov esi, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0xf1
xor eax, eax
test esi, esi
sete al
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], 0x414988
call fcn.004056f0
lea eax, [ebp - 0x84]
mov dword [esp + 0xc], 0x416a30
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0x17
mov dword [esp + 4], 0
mov dword [esp], 0x416a40
call edi
sub esp, 0x14
mov esi, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0xf4
xor eax, eax
test esi, esi
sete al
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], 0x414e2c
call fcn.004056f0
mov eax, dword [ebp - 0x84]
mov edx, dword [eax]
mov dword [esp + 4], 0x416960
mov dword [esp], eax
call dword [edx + 0x34]
sub esp, 8
mov esi, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0xf7
xor eax, eax
test esi, esi
sete al
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], 0x414e58
call fcn.004056f0
lea eax, [ebp - 0x88]
mov dword [esp + 0xc], 0x416a30
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0x17
mov dword [esp + 4], 0
mov dword [esp], 0x416a40
call edi
sub esp, 0x14
mov esi, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0xfa
xor eax, eax
test esi, esi
sete al
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], 0x414e2c
call fcn.004056f0
mov eax, dword [ebp - 0x88]
mov edx, dword [eax]
mov dword [esp + 4], 0x416960
mov dword [esp], eax
call dword [edx + 0x34]
sub esp, 8
mov esi, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0xfd
xor eax, eax
test esi, esi
sete al
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], 0x414e58
call fcn.004056f0
mov eax, dword [ebp - 0x88]
mov edx, dword [eax]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0x14
mov dword [esp + 8], 0x415130
mov dword [esp + 4], 0x414b3c
mov dword [esp], eax
call dword [edx + 0x48]
sub esp, 0x14
mov esi, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x101
xor eax, eax
test esi, esi
sete al
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], 0x414e2c
call fcn.004056f0
mov eax, dword [0x44302c]
mov dword [ebp - 0x78], 0x24
lea ecx, [ebp - 0x78]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x416960
mov dword [esp], eax
call dword [edx + 0x4c]
sub esp, 0x10
mov esi, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x106
xor eax, eax
test esi, esi
sete al
mov dword [esp + 8], esi
lea esi, [ebp - 0x80]
mov dword [esp], eax
mov dword [esp + 4], 0x4149c7
call fcn.004056f0
mov eax, dword [ebp - 0x60]
mov dword [esp + 4], 8
mov edx, dword fs:[0x18]
add eax, 1
mov dword [esp + 8], eax
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov edi, eax
mov eax, dword [0x44302c]
sub esp, 0xc
mov edx, dword [eax]
mov dword [esp + 0x2c], 0x80000000
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0x3e8
mov dword [esp + 0x1c], 0x3e8
mov dword [esp + 0x18], 2
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov ecx, dword [ebp - 0x84]
mov dword [esp + 0xc], ecx
mov ecx, dword [ebp - 0x88]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x30
mov dword [ebp - 0x90], eax
call fcn.0040f8c0
mov edx, dword [ebp - 0x90]
mov dword [eax], 0x414821
mov dword [eax + 4], 0x10a
xor eax, eax
cmp edx, 0x80070057
sete al
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 4], 0x414a84
call fcn.004056f0
mov edx, dword [0x44302c]
mov ecx, dword [edx]
mov dword [esp + 0x2c], 0x80000000
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0xffffffff
mov eax, dword [ebp - 0x60]
mov dword [esp + 0x10], edi
add eax, 1
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x84]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x88]
mov dword [esp], edx
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
call dword [ecx + 0x14]
sub esp, 0x30
mov dword [ebp - 0x90], eax
call fcn.0040f8c0
mov edx, dword [ebp - 0x90]
mov dword [eax], 0x414821
mov dword [eax + 4], 0x10e
xor eax, eax
cmp edx, 0x80070057
sete al
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 4], 0x414a84
call fcn.004056f0
mov edx, dword [0x44302c]
mov dword [ebp - 0x80], 0
mov ecx, dword [edx]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0xffffffff
mov eax, dword [ebp - 0x60]
mov dword [esp + 0x10], edi
add eax, 1
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x84]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x88]
mov dword [esp], edx
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
call dword [ecx + 0x14]
sub esp, 0x30
mov dword [ebp - 0x90], eax
call fcn.0040f8c0
mov edx, dword [ebp - 0x90]
mov dword [eax], 0x414821
mov dword [eax + 4], 0x113
xor eax, eax
cmp edx, 0x80158210
sete al
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 4], 0x414a84
call fcn.004056f0
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x114
xor eax, eax
mov dword [esp + 4], str.Handle_returned_n
mov edx, dword [ebp - 0x80]
test edx, edx
sete al
mov dword [esp], eax
call fcn.004056f0
mov eax, dword [0x44302c]
mov dword [ebp - 0x80], 0
mov edx, dword [eax]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0xffffffff
mov ecx, dword [ebp - 0x60]
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ecx
mov ecx, dword [ebp - 0x84]
mov dword [esp + 0xc], ecx
mov ecx, dword [ebp - 0x88]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x30
mov dword [ebp - 0x90], eax
call fcn.0040f8c0
mov edx, dword [ebp - 0x90]
mov dword [eax], 0x414821
mov dword [eax + 4], 0x119
xor eax, eax
cmp edx, 0x15800e
sete al
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 4], 0x414a84
call fcn.004056f0
mov ecx, dword [0x4630b0]
mov dword [ebp - 0x90], ecx
call fcn.0040f8c0
mov ecx, dword [eax + 0x10]
mov dword [eax + 0x14], 1
lea edx, [ecx + ecx]
mov ecx, dword [ebp - 0x90]
test ecx, ecx
setne cl
movzx ecx, cl
or edx, ecx
mov dword [eax + 0x10], edx
jmp 0x408abd
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x11a
mov dword [esp + 4], 0x414ec3
mov eax, dword [ebp - 0x80]
mov dword [esp], eax
call fcn.004056f0
call fcn.0040f8c0
shr dword [eax + 0x10], 1
call fcn.0040f8c0
mov edx, dword [eax + 0x14]
mov dword [eax + 0x14], 0
test edx, edx
jne 0x408a90
mov eax, dword [0x44302c]
mov edx, dword [eax]
mov dword [esp + 8], 0
mov ecx, dword [ebp - 0x80]
mov dword [esp], eax
mov dword [esp + 4], ecx
call dword [edx + 0x18]
sub esp, 0xc
mov dword [ebp - 0x90], eax
call fcn.0040f8c0
mov edx, dword [ebp - 0x90]
mov dword [eax], 0x414821
mov dword [eax + 4], 0x11e
xor eax, eax
test edx, edx
sete al
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 4], 0x414a84
call fcn.004056f0
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [ebp - 0x8c]
sub esp, 0xc
mov edx, dword [eax]
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov ecx, dword [ebp - 0x84]
mov dword [esp + 0xc], ecx
mov ecx, dword [ebp - 0x88]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x30
mov edi, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x123
xor eax, eax
cmp edi, 0x80158640
sete al
mov dword [esp + 8], edi
mov dword [esp], eax
mov dword [esp + 4], 0x414f6c
call fcn.004056f0
mov eax, dword [0x44302c]
mov edx, dword [eax]
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov ecx, dword [ebp - 0x84]
mov dword [esp + 0xc], ecx
mov ecx, dword [ebp - 0x88]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x30
mov esi, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x127
xor eax, eax
cmp esi, 0x15800e
sete al
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], 0x414f6c
call fcn.004056f0
mov esi, dword [0x4630b0]
call fcn.0040f8c0
xor ecx, ecx
mov edi, dword [eax + 0x10]
test esi, esi
mov dword [eax + 0x14], 1
setne cl
lea edx, [edi + edi]
or edx, ecx
mov dword [eax + 0x10], edx
jmp 0x408cd5
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x128
mov dword [esp + 4], 0x414ec3
mov eax, dword [ebp - 0x80]
mov dword [esp], eax
call fcn.004056f0
call fcn.0040f8c0
shr dword [eax + 0x10], 1
call fcn.0040f8c0
mov edx, dword [eax + 0x14]
mov dword [eax + 0x14], 0
test edx, edx
jne 0x408ca8
mov eax, dword [0x44302c]
lea ecx, [ebp - 0x7c]
mov edx, dword [eax]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov ecx, dword [ebp - 0x84]
mov dword [esp + 0xc], ecx
mov ecx, dword [ebp - 0x88]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x30
mov ebx, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x12b
xor eax, eax
cmp ebx, 0x15800e
sete al
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], 0x414f6c
call fcn.004056f0
mov ebx, dword [0x4630b0]
call fcn.0040f8c0
xor ecx, ecx
mov edi, dword [eax + 0x10]
test ebx, ebx
mov dword [eax + 0x14], 1
setne cl
lea edx, [edi + edi]
or edx, ecx
mov dword [eax + 0x10], edx
jmp 0x408ddd
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x12c
mov dword [esp + 4], 0x414ec3
mov eax, dword [ebp - 0x7c]
mov dword [esp], eax
call fcn.004056f0
call fcn.0040f8c0
shr dword [eax + 0x10], 1
call fcn.0040f8c0
mov edx, dword [eax + 0x14]
mov dword [eax + 0x14], 0
test edx, edx
jne 0x408db0
mov ebx, dword [0x4630b0]
call fcn.0040f8c0
xor ecx, ecx
mov edi, dword [eax + 0x10]
test ebx, ebx
mov dword [eax + 0x14], 1
setne cl
lea edx, [edi + edi]
or edx, ecx
mov dword [eax + 0x10], edx
jmp 0x408e56
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x12d
mov dword [esp + 4], str.Same_handle_returned._n
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x7c], eax
setne al
movzx eax, al
mov dword [esp], eax
call fcn.004056f0
call fcn.0040f8c0
shr dword [eax + 0x10], 1
call fcn.0040f8c0
mov edx, dword [eax + 0x14]
mov dword [eax + 0x14], 0
test edx, edx
jne 0x408e20
mov dword [esp + 4], 0x3e8
mov eax, dword [0x443024]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
mov eax, dword [0x44302c]
mov dword [0x412024], 0x80004005
mov dword [0x412020], 0xdeadbeef
sub esp, 8
mov edx, dword [eax]
mov dword [esp + 8], 0
mov ecx, dword [ebp - 0x80]
mov dword [esp], eax
mov dword [esp + 4], ecx
call dword [edx + 0x18]
sub esp, 0xc
mov ebx, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x134
xor eax, eax
test ebx, ebx
sete al
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], 0x414fa0
call fcn.004056f0
mov ebx, dword [0x4630b0]
call fcn.0040f8c0
xor ecx, ecx
mov esi, dword [eax + 0x10]
test ebx, ebx
mov dword [eax + 0x14], 1
setne cl
lea edx, [esi + esi]
or edx, ecx
mov dword [eax + 0x10], edx
jmp 0x408f4e
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x135
mov eax, dword [0x412024]
mov dword [esp + 4], 0x414a84
cmp eax, 0x80158650
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004056f0
call fcn.0040f8c0
shr dword [eax + 0x10], 1
call fcn.0040f8c0
mov edx, dword [eax + 0x14]
mov dword [eax + 0x14], 0
test edx, edx
jne 0x408f10
mov ebx, dword [0x4630b0]
call fcn.0040f8c0
xor ecx, ecx
mov edi, dword [eax + 0x10]
test ebx, ebx
mov dword [eax + 0x14], 1
setne cl
lea edx, [edi + edi]
or edx, ecx
mov dword [eax + 0x10], edx
jmp 0x408fcc
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x136
mov eax, dword [0x412020]
mov dword [esp + 4], 0x414a84
mov dword [esp + 8], eax
cmp dword [ebp - 0x80], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004056f0
call fcn.0040f8c0
shr dword [eax + 0x10], 1
call fcn.0040f8c0
mov edx, dword [eax + 0x14]
mov dword [eax + 0x14], 0
test edx, edx
jne 0x408f90
mov eax, dword [ebp - 0x8c]
mov edx, dword [eax]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x405170
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
mov ebx, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x139
xor eax, eax
test ebx, ebx
sete al
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], 0x4149c7
call fcn.004056f0
mov eax, dword [ebp - 0x8c]
mov edx, dword [eax]
mov dword [esp + 8], 0
mov ecx, dword [ebp - 0x7c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call dword [edx + 0x18]
mov esi, dword [0x4630b0]
sub esp, 0xc
mov ebx, eax
call fcn.0040f8c0
xor ecx, ecx
test esi, esi
mov edi, dword [eax + 0x10]
setne cl
mov dword [eax + 0x14], 1
lea edx, [edi + edi]
or edx, ecx
mov dword [eax + 0x10], edx
jmp 0x4090b9
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x13d
xor eax, eax
cmp ebx, 0x80158360
sete al
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], 0x414fa0
call fcn.004056f0
call fcn.0040f8c0
shr dword [eax + 0x10], 1
call fcn.0040f8c0
mov edx, dword [eax + 0x14]
mov dword [eax + 0x14], 0
test edx, edx
jne 0x409080
mov eax, dword [0x44302c]
mov dword [0x412024], 0x80004005
mov dword [0x412020], 0xdeadbeef
mov edx, dword [eax]
mov dword [esp + 8], 0
mov ecx, dword [ebp - 0x7c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call dword [edx + 0x18]
sub esp, 0xc
mov ebx, eax
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x142
xor eax, eax
test ebx, ebx
sete al
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], 0x414fa0
call fcn.004056f0
call fcn.0040f8c0
mov edx, dword [eax + 8]
mov dword [eax + 0xc], 1
lea edx, [edx + edx + 1]
mov dword [eax + 8], edx
lea esi, [esi]
call fcn.0040f8c0
mov ebx, dword [0x4630b0]
mov edx, dword [eax + 0xc]
mov dword [eax + 0xc], 0
test edx, edx
je 0x4091f0
call fcn.0040f8c0
xor ecx, ecx
test ebx, ebx
mov edi, dword [eax + 0x10]
setne cl
mov dword [eax + 0x14], 1
lea edx, [edi + edi]
or edx, ecx
mov dword [eax + 0x10], edx
jmp 0x4091c6
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x144
mov eax, dword [0x412024]
mov dword [esp + 4], 0x414a84
cmp eax, 0x80158650
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004056f0
call fcn.0040f8c0
shr dword [eax + 0x10], 1
call fcn.0040f8c0
mov edx, dword [eax + 0x14]
mov dword [eax + 0x14], 0
test edx, edx
jne 0x409188
call fcn.0040f8c0
shr dword [eax + 8], 1
jmp 0x409148
call fcn.0040f8c0
xor ecx, ecx
test ebx, ebx
mov esi, dword [eax + 0x10]
setne cl
mov dword [eax + 0x14], 1
lea edx, [esi + esi]
or edx, ecx
mov dword [eax + 0x10], edx
jmp 0x40924c
call fcn.0040f8c0
mov dword [eax], 0x414821
mov dword [eax + 4], 0x145
mov eax, dword [0x412020]
mov dword [esp + 4], 0x414a84
mov dword [esp + 8], eax
cmp dword [ebp - 0x7c], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004056f0
call fcn.0040f8c0
shr dword [eax + 0x10], 1
call fcn.0040f8c0
mov edx, dword [eax + 0x14]
mov dword [eax + 0x14], 0
test edx, edx
jne 0x409210
mov eax, dword [ebp - 0x84]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
mov eax, dword [ebp - 0x88]
sub esp, 4
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
mov eax, dword [ebp - 0x8c]
sub esp, 4
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret