Function at 0x422678
Capabilities:
Check for sandbox username or hostname
Get session user name
Query environment variable

Disassembly:
push edi
lea edi, [esp + 8]
and esp, 0xffffffe0
push dword [edi - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x32c
mov eax, dword [edi]
mov byte [ebp - 0x218], 0x42
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x2fc], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x21c], 0x7c90ec48
mov dword [ebp - 0x300], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x304], eax
mov al, byte [0x4dd878]
test al, al
jne 0x422709
mov dword [esp], 0x4dd878
call fcn.004ceb90
test eax, eax
je 0x422709
lea eax, [ebp - 0x220]
mov ecx, 0x4dfe80
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfbc0
call fcn.004013f0
mov dword [esp], 0x4dd878
call fcn.004cec60
mov ecx, 0x4dfe80
lea edi, [ebp - 0x220]
mov esi, 0x4dd1e0
call fcn.0042e93c
mov dword [esp], 0x4dfe80
lea ebx, [ebp - 0x220]
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x25c], 0xd91086c2
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd720]
test al, al
jne 0x422780
mov dword [esp], 0x4dd720
call fcn.004ceb90
test eax, eax
je 0x422780
mov dword [esp], ebx
mov ecx, 0x4df6a0
call fcn.0042e904
push eax
mov dword [esp], 0x4cfbc4
call fcn.004013f0
mov dword [esp], 0x4dd720
call fcn.004cec60
mov ecx, 0x4df6a0
call fcn.0042e8d4
mov dword [esp], 0x4df6a0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4227a2
lea eax, [ebp - 0x25c]
call eax
mov eax, dword [ebp - 0x2fc]
cmp dword [eax + 4], 1
ja 0x4227be
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
jmp fcn.00421798
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd790]
test al, al
jne 0x422818
mov dword [esp], 0x4dd790
call fcn.004ceb90
test eax, eax
je 0x422818
mov dword [esp], ebx
mov ecx, 0x4df92c
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfbd0
call fcn.004013f0
mov dword [esp], 0x4dd790
call fcn.004cec60
mov ecx, 0x4df92c
lea edi, [ebp - 0x220]
mov esi, 0x4dd1e0
call fcn.0042e93c
mov dword [esp], 0x4df92c
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x25c], 0xed208ec6
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd7d0]
test al, al
jne 0x42288f
mov dword [esp], 0x4dd7d0
call fcn.004ceb90
test eax, eax
je 0x42288f
lea eax, [ebp - 0x220]
mov ecx, 0x4dfaa0
mov dword [esp], eax
call fcn.0042e904
push eax
mov dword [esp], 0x4cfbd4
call fcn.004013f0
mov dword [esp], 0x4dd7d0
call fcn.004cec60
mov ecx, 0x4dfaa0
call fcn.0042e8d4
mov dword [esp], 0x4dfaa0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4228b1
lea eax, [ebp - 0x25c]
call eax
mov eax, dword [ebp - 0x300]
lea esi, [ebp - 0x2d4]
mov ecx, esi
mov dword [esp], eax
call fcn.004bcba0
push edi
mov eax, dword [ebp - 0x2fc]
mov eax, dword [eax]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov dword [esp + 4], esi
mov dword [esp + 8], eax
lea eax, [ebp - 0x220]
mov dword [esp], eax
call fcn.0042de90
mov dword [esp], ebx
mov ecx, esi
call fcn.004bce10
push ecx
mov ecx, ebx
call fcn.004b8e40
mov byte [ebp - 0x218], 0x42
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov al, byte [0x4dd840]
test al, al
jne 0x42295a
mov dword [esp], 0x4dd840
call fcn.004ceb90
test eax, eax
je 0x42295a
mov dword [esp], ebx
mov ecx, 0x4dfd2c
call fcn.0042e96c
push edx
mov dword [esp], 0x4cfbe0
call fcn.004013f0
mov dword [esp], 0x4dd840
call fcn.004cec60
mov ecx, 0x4dfd2c
call fcn.0042e93c
mov dword [esp], 0x4dfd2c
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
lea edi, [ebp - 0x220]
mov dword [ebp - 0x25c], 0x13096ca
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd860]
test al, al
jne 0x4229d1
mov dword [esp], 0x4dd860
call fcn.004ceb90
test eax, eax
je 0x4229d1
lea eax, [ebp - 0x220]
mov ecx, 0x4dfde0
mov dword [esp], eax
call fcn.0042e904
push eax
mov dword [esp], 0x4cfbe4
call fcn.004013f0
mov dword [esp], 0x4dd860
call fcn.004cec60
mov ecx, 0x4dfde0
call fcn.0042e8d4
mov dword [esp], 0x4dfde0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x422a29
mov dword [esp], 4
call fcn.004ce770
mov dword [ebp - 0x2fc], eax
mov dword [eax], 0x4ec498
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd868]
test al, al
jne 0x422a6f
jmp 0x422a33
lea eax, [ebp - 0x25c]
call eax
jmp 0x4229eb
mov dword [esp], 0x4dd868
call fcn.004ceb90
test eax, eax
je 0x422a6f
lea eax, [ebp - 0x220]
mov ecx, 0x4dfe20
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfbf0
call fcn.004013f0
mov dword [esp], 0x4dd868
call fcn.004cec60
mov ecx, 0x4dfe20
call fcn.0042e93c
mov dword [esp], 0x4dfe20
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
lea edi, [ebp - 0x220]
mov dword [ebp - 0x25c], 0x15409ece
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd870]
test al, al
jne 0x422ae6
mov dword [esp], 0x4dd870
call fcn.004ceb90
test eax, eax
je 0x422ae6
lea eax, [ebp - 0x220]
mov ecx, 0x4dfe40
mov dword [esp], eax
call fcn.0042e904
push eax
mov dword [esp], 0x4cfbf4
call fcn.004013f0
mov dword [esp], 0x4dd870
call fcn.004cec60
mov ecx, 0x4dfe40
call fcn.0042e8d4
mov dword [esp], 0x4dfe40
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x422b3d
mov eax, dword [ebp - 0x2fc]
lea ecx, [ebp - 0x25c]
mov eax, dword [eax]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x2d4]
mov dword [esp], eax
call fcn.004bcba0
push eax
lea esi, [ebp - 0x25c]
lea ecx, [ebp - 0x220]
mov dword [esp + 4], esi
mov eax, dword [ebp - 0x2fc]
mov dword [esp], eax
call edi
jmp 0x422b47
lea eax, [ebp - 0x25c]
call eax
jmp 0x422b00
push edi
lea ecx, [ebp - 0x2d4]
push edi
mov dword [esp], ebx
call fcn.004bce10
mov ecx, ebx
push eax
call fcn.004b8e40
lea ecx, [ebp - 0x25c]
call fcn.004b8e40
mov byte [ebp - 0x218], 0x42
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov al, byte [0x4dd728]
test al, al
jne 0x422bc4
mov dword [esp], 0x4dd728
call fcn.004ceb90
test eax, eax
je 0x422bc4
mov dword [esp], ebx
mov ecx, 0x4df6e0
call fcn.0042e96c
push esi
mov dword [esp], 0x4cfc04
call fcn.004013f0
mov dword [esp], 0x4dd728
call fcn.004cec60
mov ecx, 0x4df6e0
call fcn.0042e93c
mov dword [esp], 0x4df6e0
call fcn.00422510
lea edi, [ebp - 0x220]
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov dword [ebp - 0x25c], 0x2950a6d2
rep movsb byte es:[edi], byte [esi]
lea esi, [ebp - 0x220]
mov al, byte [0x4dd730]
test al, al
jne 0x422c3b
mov dword [esp], 0x4dd730
call fcn.004ceb90
test eax, eax
je 0x422c3b
mov dword [esp], esi
mov ecx, 0x4df700
call fcn.0042e904
push ecx
mov dword [esp], 0x4cfc08
call fcn.004013f0
mov dword [esp], 0x4dd730
call fcn.004cec60
mov ecx, 0x4df700
call fcn.0042e8d4
mov dword [esp], 0x4df700
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x422c69
lea eax, [ebp - 0x2d4]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.004202a8
jmp 0x422c73
lea eax, [ebp - 0x25c]
call eax
jmp 0x422c55
mov dword [esp], ebx
lea ecx, [ebp - 0x2d4]
call fcn.004bce10
mov ecx, ebx
push edx
call fcn.004b8e40
mov byte [ebp - 0x218], 0x42
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov al, byte [0x4dd738]
test al, al
jne 0x422ce3
mov dword [esp], 0x4dd738
call fcn.004ceb90
test eax, eax
je 0x422ce3
mov dword [esp], ebx
mov ecx, 0x4df740
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfc14
call fcn.004013f0
mov dword [esp], 0x4dd738
call fcn.004cec60
mov ecx, 0x4df740
call fcn.0042e93c
mov dword [esp], 0x4df740
call fcn.00422510
lea edi, [ebp - 0x220]
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov dword [ebp - 0x25c], 0x3d60aed6
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd740]
test al, al
jne 0x422d5a
mov dword [esp], 0x4dd740
call fcn.004ceb90
test eax, eax
je 0x422d5a
lea eax, [ebp - 0x220]
mov ecx, 0x4df760
mov dword [esp], eax
call fcn.0042e904
push eax
mov dword [esp], 0x4cfc18
call fcn.004013f0
mov dword [esp], 0x4dd740
call fcn.004cec60
mov ecx, 0x4df760
call fcn.0042e8d4
mov dword [esp], 0x4df760
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x422db6
mov eax, dword [ebp - 0x304]
lea ecx, [ebp - 0x2bc]
mov dword [esp], eax
call fcn.004bcba0
push eax
mov al, 1
shrx eax, dword [ebp - 0x2d0], eax
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004c4b50
mov eax, dword [ebp - 0x2d4]
lea ecx, [ebp - 0x28c]
mov dword [esp], eax
call fcn.004bcc7c
jmp 0x422dc0
lea eax, [ebp - 0x25c]
call eax
jmp 0x422d74
push eax
mov ebx, dword [ebp - 0x2bc]
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
mov dword [esp + 8], ebx
lea ecx, [ebp - 0x28c]
mov dword [esp + 0xc], eax
xor eax, eax
mov dword [esp + 4], eax
mov dword [esp], eax
call fcn.004bb4c0
sub esp, 0x10
lea ecx, [ebp - 0x274]
mov dword [esp], eax
call fcn.004bcaf0
lea ecx, [ebp - 0x274]
push edi
mov eax, dword [ebp - 0x2b8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2bc]
mov dword [esp], eax
call fcn.004ba310
push ebx
lea ecx, [ebp - 0x25c]
push ebx
mov dword [esp], eax
call fcn.004bcaf0
lea ecx, [ebp - 0x25c]
push esi
mov esi, dword [ebp - 0x258]
mov ebx, dword [ebp - 0x21c]
lea edi, [esi + ebx]
call fcn.0043e6b0
cmp eax, edi
jae 0x422e80
lea ecx, [ebp - 0x220]
call fcn.0043e6b0
cmp eax, edi
jb 0x422e80
mov dword [esp + 0xc], esi
mov eax, dword [ebp - 0x25c]
xor ecx, ecx
mov dword [esp + 4], ecx
mov dword [esp], ecx
lea ecx, [ebp - 0x220]
mov dword [esp + 8], eax
call fcn.004bb4c0
sub esp, 0x10
jmp 0x422e9a
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x220]
lea ecx, [ebp - 0x25c]
mov dword [esp], eax
call fcn.004ba310
push edx
push edx
mov dword [esp], eax
lea ecx, [ebp - 0x2a4]
call fcn.004bcaf0
lea ecx, [ebp - 0x25c]
push eax
call fcn.004b8e40
lea ecx, [ebp - 0x274]
call fcn.004b8e40
lea ecx, [ebp - 0x28c]
call fcn.004b8e40
lea ecx, [ebp - 0x220]
call fcn.004b8e40
mov byte [ebp - 0x218], 0x42
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov al, byte [0x4de008]
test al, al
jne 0x422f35
mov dword [esp], 0x4de008
call fcn.004ceb90
test eax, eax
je 0x422f35
lea eax, [ebp - 0x220]
mov ecx, 0x4e2b40
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf684
call fcn.004013f0
mov dword [esp], 0x4de008
call fcn.004cec60
mov ecx, 0x4e2b40
call fcn.0042e93c
mov dword [esp], 0x4e2b40
call fcn.00422510
mov esi, 0x4dd1a0
mov ecx, 0xe
lea edi, [ebp - 0x220]
mov dword [ebp - 0x25c], 0xe9502692
rep movsd dword es:[edi], dword [esi]
mov al, byte [0x4de000]
test al, al
jne 0x422fac
mov dword [esp], 0x4de000
call fcn.004ceb90
test eax, eax
je 0x422fac
lea eax, [ebp - 0x220]
mov ecx, 0x4e2b00
mov dword [esp], eax
call fcn.0042e89c
push edi
mov dword [esp], 0x4cf688
call fcn.004013f0
mov dword [esp], 0x4de000
call fcn.004cec60
mov ecx, 0x4e2b00
call fcn.0042e86c
mov dword [esp], 0x4e2b00
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x422fca
xor ebx, ebx
jmp 0x422fd5
lea eax, [ebp - 0x25c]
call eax
jmp 0x422fc6
inc ebx
mov esi, dword [ebp - 0x2d0]
cmp ebx, esi
je 0x423038
mov ecx, esi
mov eax, esi
xor edx, edx
mov edi, dword [ebp - 0x2d4]
shr ecx, 1
imul ecx, dword [ebp - 0x2b8]
add edi, ebx
div ecx
xor edx, edx
shr eax, 1
imul eax, esi
mov esi, 0xa
div esi
xor edx, edx
mov ecx, eax
mov eax, ebx
div dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x2bc]
movsx eax, byte [eax + edx]
xor ecx, eax
xor byte [edi], cl
cmp dword [ebp - 0x2d0], 0x163
ja 0x422fd4
mov dword [esp], 1
call sub.msvcrt.dll_exit
lea ecx, [ebp - 0x2a4]
call fcn.004b8e40
lea ecx, [ebp - 0x2bc]
call fcn.004b8e40
mov byte [ebp - 0x218], 0x42
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov al, byte [0x4dd748]
test al, al
jne 0x423103
jmp 0x4230c7
mov dword [esp], 0x4dd748
call fcn.004ceb90
test eax, eax
je 0x423103
lea eax, [ebp - 0x220]
mov ecx, 0x4df7a0
mov dword [esp], eax
call fcn.0042e96c
push esi
mov dword [esp], 0x4cfc24
call fcn.004013f0
mov dword [esp], 0x4dd748
call fcn.004cec60
mov ecx, 0x4df7a0
call fcn.0042e93c
mov dword [esp], 0x4df7a0
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
lea edi, [ebp - 0x220]
mov dword [ebp - 0x25c], 0x5170b6da
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd750]
test al, al
jne 0x42317a
mov dword [esp], 0x4dd750
call fcn.004ceb90
test eax, eax
je 0x42317a
lea eax, [ebp - 0x220]
mov ecx, 0x4df7c0
mov dword [esp], eax
call fcn.0042e904
push ebx
mov dword [esp], 0x4cfc28
call fcn.004013f0
mov dword [esp], 0x4dd750
call fcn.004cec60
mov ecx, 0x4df7c0
call fcn.0042e8d4
mov dword [esp], 0x4df7c0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4231be
mov dword [ebp - 0x220], 0x35677965
mov ecx, 0xb
mov ebx, 0xb
mov dword [ebp - 0x21c], 0x33307d30
mov dword [ebp - 0x218], 0x6f716d
jmp 0x4231c8
lea eax, [ebp - 0x25c]
call eax
jmp 0x423194
mov eax, ecx
xor edx, edx
div ebx
xor byte [ebp + ecx - 0x22b], dl
inc ecx
cmp ecx, 0x16
jne 0x4231c8
lea eax, [ebp - 0x220]
lea ecx, [ebp - 0x2d4]
mov dword [esp], eax
call fcn.0043e6d0
push ecx
test al, al
jne 0x424394
mov dword [ebp - 0x220], 0x6d6d5f55
mov ecx, 0xa
mov ebx, 0xb
mov dword [ebp - 0x21c], 0x63756062
mov word [ebp - 0x218], 0x5758
mov byte [ebp - 0x216], 0
mov eax, ecx
xor edx, edx
div ebx
xor byte [ebp + ecx - 0x22a], dl
inc ecx
cmp ecx, 0x14
jne 0x423226
lea eax, [ebp - 0x220]
lea ecx, [ebp - 0x2d4]
mov dword [esp], eax
lea ebx, [ebp - 0x220]
call fcn.0043e6d0
test al, al
push edx
je 0x42345e
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd758]
test al, al
jne 0x4232b6
mov dword [esp], 0x4dd758
call fcn.004ceb90
test eax, eax
je 0x4232b6
mov dword [esp], ebx
mov ecx, 0x4df800
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfc34
call fcn.004013f0
mov dword [esp], 0x4dd758
call fcn.004cec60
mov ecx, 0x4df800
call fcn.0042e93c
mov dword [esp], 0x4df800
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
lea edi, [ebp - 0x220]
mov dword [ebp - 0x25c], 0x6580bede
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd760]
test al, al
jne 0x42332d
mov dword [esp], 0x4dd760
call fcn.004ceb90
test eax, eax
je 0x42332d
lea eax, [ebp - 0x220]
mov ecx, 0x4df820
mov dword [esp], eax
call fcn.0042e904
push edi
mov dword [esp], 0x4cfc44
call fcn.004013f0
mov dword [esp], 0x4dd760
call fcn.004cec60
mov ecx, 0x4df820
call fcn.0042e8d4
mov dword [esp], 0x4df820
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x423361
mov eax, dword [ebp - 0x2d0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2d4]
mov dword [esp], eax
call fcn.0042a418
jmp 0x42336b
lea eax, [ebp - 0x25c]
call eax
jmp 0x423347
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd768]
test al, al
jne 0x4233cb
mov dword [esp], 0x4dd768
call fcn.004ceb90
test eax, eax
je 0x4233cb
lea eax, [ebp - 0x220]
mov ecx, 0x4df860
mov dword [esp], eax
call fcn.0042e96c
push esi
mov dword [esp], 0x4cfc50
call fcn.004013f0
mov dword [esp], 0x4dd768
call fcn.004cec60
mov ecx, 0x4df860
call fcn.0042e93c
mov dword [esp], 0x4df860
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
lea edi, [ebp - 0x220]
mov dword [ebp - 0x25c], 0x7990c6e2
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd770]
test al, al
jne 0x42343c
mov dword [esp], 0x4dd770
call fcn.004ceb90
test eax, eax
je 0x42343c
mov dword [esp], ebx
mov ecx, 0x4df880
call fcn.0042e904
push ecx
mov dword [esp], 0x4cfc54
call fcn.004013f0
mov dword [esp], 0x4dd770
call fcn.004cec60
mov ecx, 0x4df880
call fcn.0042e8d4
mov dword [esp], 0x4df880
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42345e
lea eax, [ebp - 0x25c]
call eax
mov dword [ebp - 0x220], 0x74725556
mov ecx, 9
mov esi, 0xb
mov dword [ebp - 0x21c], 0x5a61736c
mov word [ebp - 0x218], 0x59
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0x229], dl
inc ecx
cmp ecx, 0x12
jne 0x423485
lea eax, [ebp - 0x220]
lea ecx, [ebp - 0x2d4]
mov dword [esp], eax
call fcn.0043e6d0
push edx
test al, al
je 0x4237d4
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd778]
test al, al
jne 0x423515
mov dword [esp], 0x4dd778
call fcn.004ceb90
test eax, eax
je 0x423515
lea eax, [ebp - 0x220]
mov ecx, 0x4df8c0
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfc60
call fcn.004013f0
mov dword [esp], 0x4dd778
call fcn.004cec60
mov ecx, 0x4df8c0
call fcn.0042e93c
mov dword [esp], 0x4df8c0
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
lea edi, [ebp - 0x220]
mov dword [ebp - 0x25c], 0x8da0cee6
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd780]
test al, al
jne 0x42358c
mov dword [esp], 0x4dd780
call fcn.004ceb90
test eax, eax
je 0x42358c
lea eax, [ebp - 0x220]
mov ecx, 0x4df8e0
mov dword [esp], eax
call fcn.0042e904
push eax
mov dword [esp], 0x4cfc64
call fcn.004013f0
mov dword [esp], 0x4dd780
call fcn.004cec60
mov ecx, 0x4df8e0
call fcn.0042e8d4
mov dword [esp], 0x4df8e0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4235cc
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd788]
test al, al
jne 0x42360c
jmp 0x4235d6
lea eax, [ebp - 0x25c]
call eax
jmp 0x4235a6
mov dword [esp], 0x4dd788
call fcn.004ceb90
test eax, eax
je 0x42360c
mov dword [esp], ebx
mov ecx, 0x4df920
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfc70
call fcn.004013f0
mov dword [esp], 0x4dd788
call fcn.004cec60
mov ecx, 0x4df920
call fcn.0042e93c
mov dword [esp], 0x4df920
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x25c], 0xa1b0d6ea
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd798]
test al, al
jne 0x423679
mov dword [esp], 0x4dd798
call fcn.004ceb90
test eax, eax
je 0x423679
mov dword [esp], ebx
mov ecx, 0x4df940
call fcn.0042e904
push edi
mov dword [esp], 0x4cfc74
call fcn.004013f0
mov dword [esp], 0x4dd798
call fcn.004cec60
mov ecx, 0x4df940
call fcn.0042e8d4
mov dword [esp], 0x4df940
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4236d1
lea ebx, [ebp - 0x220]
xor esi, esi
mov dword [esp + 8], 0x104
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [0x4de040]
mov edx, dword [ebp - 0x2d4]
sub esp, 0xc
lea eax, [ebp - 0x2f8]
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.00424d54
jmp 0x4236db
lea eax, [ebp - 0x25c]
call eax
jmp 0x423693
mov dword [ebp - 0x25c], 0xc1eb1542
mov dword [ebp - 0x258], 0x7c90ec48
mov byte [ebp - 0x254], 0x42
mov al, byte [0x4dd7a0]
test al, al
jne 0x42373b
mov dword [esp], 0x4dd7a0
call fcn.004ceb90
test eax, eax
je 0x42373b
lea eax, [ebp - 0x25c]
mov ecx, 0x4df980
mov dword [esp], eax
call fcn.0042e96c
push ebx
mov dword [esp], 0x4cfc80
call fcn.004013f0
mov dword [esp], 0x4dd7a0
call fcn.004cec60
mov ecx, 0x4df980
call fcn.0042e93c
mov dword [esp], 0x4df980
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
lea edi, [ebp - 0x25c]
mov dword [ebp - 0x274], 0xb5c0deee
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd7a8]
test al, al
jne 0x4237b2
mov dword [esp], 0x4dd7a8
call fcn.004ceb90
test eax, eax
je 0x4237b2
lea eax, [ebp - 0x25c]
mov ecx, 0x4df9a0
mov dword [esp], eax
call fcn.0042e904
push ecx
mov dword [esp], 0x4cfc84
call fcn.004013f0
mov dword [esp], 0x4dd7a8
call fcn.004cec60
mov ecx, 0x4df9a0
call fcn.0042e8d4
mov dword [esp], 0x4df9a0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4237d4
lea eax, [ebp - 0x274]
call eax
mov dword [ebp - 0x220], 0x6b715e5f
mov ecx, 0xd
mov ebx, 0xd
mov dword [ebp - 0x21c], 0x646a6961
mov dword [ebp - 0x218], 0x546f6d67
mov word [ebp - 0x214], 0x53
mov eax, ecx
xor edx, edx
div ebx
xor byte [ebp + ecx - 0x22d], dl
inc ecx
cmp ecx, 0x1a
jne 0x423805
lea eax, [ebp - 0x220]
lea ecx, [ebp - 0x2d4]
mov dword [esp], eax
call fcn.0043e6d0
push edx
test al, al
je 0x424005
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd7b0]
test al, al
jne 0x423895
mov dword [esp], 0x4dd7b0
call fcn.004ceb90
test eax, eax
je 0x423895
lea eax, [ebp - 0x220]
mov ecx, 0x4df9e0
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfc90
call fcn.004013f0
mov dword [esp], 0x4dd7b0
call fcn.004cec60
mov ecx, 0x4df9e0
call fcn.0042e93c
mov dword [esp], 0x4df9e0
call fcn.00422510
lea edi, [ebp - 0x220]
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov dword [ebp - 0x25c], 0xc9d0e6f2
rep movsb byte es:[edi], byte [esi]
lea ebx, [ebp - 0x220]
mov al, byte [0x4dd7b8]
test al, al
jne 0x42390c
mov dword [esp], 0x4dd7b8
call fcn.004ceb90
test eax, eax
je 0x42390c
mov dword [esp], ebx
mov ecx, 0x4dfa00
call fcn.0042e904
push eax
mov dword [esp], 0x4cfc94
call fcn.004013f0
mov dword [esp], 0x4dd7b8
call fcn.004cec60
mov ecx, 0x4dfa00
call fcn.0042e8d4
mov dword [esp], 0x4dfa00
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x42394c
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd7c0]
test al, al
jne 0x42398c
jmp 0x423956
lea eax, [ebp - 0x25c]
call eax
jmp 0x423926
mov dword [esp], 0x4dd7c0
call fcn.004ceb90
test eax, eax
je 0x42398c
mov dword [esp], ebx
mov ecx, 0x4dfa40
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfca0
call fcn.004013f0
mov dword [esp], 0x4dd7c0
call fcn.004cec60
mov ecx, 0x4dfa40
call fcn.0042e93c
mov dword [esp], 0x4dfa40
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x25c], 0xdde0eef6
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd7c8]
test al, al
jne 0x4239f9
mov dword [esp], 0x4dd7c8
call fcn.004ceb90
test eax, eax
je 0x4239f9
mov dword [esp], ebx
mov ecx, 0x4dfa60
call fcn.0042e904
push eax
mov dword [esp], 0x4cfca4
call fcn.004013f0
mov dword [esp], 0x4dd7c8
call fcn.004cec60
mov ecx, 0x4dfa60
call fcn.0042e8d4
mov dword [esp], 0x4dfa60
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x423a4d
mov ecx, ebx
call fcn.0042e3d8
mov eax, ebx
call fcn.004284d4
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd7d8]
test al, al
jne 0x423a8d
jmp 0x423a57
lea eax, [ebp - 0x25c]
call eax
jmp 0x423a13
mov dword [esp], 0x4dd7d8
call fcn.004ceb90
test eax, eax
je 0x423a8d
mov dword [esp], ebx
mov ecx, 0x4dfae0
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfcb4
call fcn.004013f0
mov dword [esp], 0x4dd7d8
call fcn.004cec60
mov ecx, 0x4dfae0
call fcn.0042e93c
mov dword [esp], 0x4dfae0
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x25c], 0xf1f0f6fa
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd7e0]
test al, al
jne 0x423afa
mov dword [esp], 0x4dd7e0
call fcn.004ceb90
test eax, eax
je 0x423afa
mov dword [esp], ebx
mov ecx, 0x4dfb00
call fcn.0042e904
push edi
mov dword [esp], 0x4cfcb8
call fcn.004013f0
mov dword [esp], 0x4dd7e0
call fcn.004cec60
mov ecx, 0x4dfb00
call fcn.0042e8d4
mov dword [esp], 0x4dfb00
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x423b54
mov ecx, ebx
call fcn.0042e6d8
mov eax, dword [ebp - 0x2fc]
mov edx, ebx
call fcn.0042839c
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd7e8]
test al, al
jne 0x423b94
jmp 0x423b5e
lea eax, [ebp - 0x25c]
call eax
jmp 0x423b14
mov dword [esp], 0x4dd7e8
call fcn.004ceb90
test eax, eax
je 0x423b94
mov dword [esp], ebx
mov ecx, 0x4dfb40
call fcn.0042e96c
push esi
mov dword [esp], 0x4cfcc4
call fcn.004013f0
mov dword [esp], 0x4dd7e8
call fcn.004cec60
mov ecx, 0x4dfb40
call fcn.0042e93c
mov dword [esp], 0x4dfb40
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x25c], 0x500fefe
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd7f0]
test al, al
jne 0x423c01
mov dword [esp], 0x4dd7f0
call fcn.004ceb90
test eax, eax
je 0x423c01
mov dword [esp], ebx
mov ecx, 0x4dfb60
call fcn.0042e904
push ecx
mov dword [esp], 0x4cfcc8
call fcn.004013f0
mov dword [esp], 0x4dd7f0
call fcn.004cec60
mov ecx, 0x4dfb60
call fcn.0042e8d4
mov dword [esp], 0x4dfb60
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x423c47
mov dword [ebp - 0x220], 0x6364724f
mov ecx, 0xc
mov dword [ebp - 0x21c], 0x6e516177
mov dword [ebp - 0x218], 0x6e686d75
mov byte [ebp - 0x214], 0
jmp 0x423c51
lea eax, [ebp - 0x25c]
call eax
jmp 0x423c1b
mov eax, ecx
mov esi, 0xd
xor edx, edx
div esi
xor byte [ebp + ecx - 0x22c], dl
inc ecx
cmp ecx, 0x18
jne 0x423c51
mov eax, dword [ebp - 0x2fc]
lea edx, [ebp - 0x220]
call fcn.0042839c
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd7f8]
test al, al
jne 0x423cda
mov dword [esp], 0x4dd7f8
call fcn.004ceb90
test eax, eax
je 0x423cda
mov dword [esp], ebx
mov ecx, 0x4dfba0
call fcn.0042e96c
push edx
mov dword [esp], 0x4cfcd4
call fcn.004013f0
mov dword [esp], 0x4dd7f8
call fcn.004cec60
mov ecx, 0x4dfba0
call fcn.0042e93c
mov dword [esp], 0x4dfba0
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
lea edi, [ebp - 0x220]
mov dword [ebp - 0x25c], 0x19100602
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd800]
test al, al
jne 0x423d51
mov dword [esp], 0x4dd800
call fcn.004ceb90
test eax, eax
je 0x423d51
lea eax, [ebp - 0x220]
mov ecx, 0x4dfbc0
mov dword [esp], eax
call fcn.0042e904
push eax
mov dword [esp], 0x4cfcd8
call fcn.004013f0
mov dword [esp], 0x4dd800
call fcn.004cec60
mov ecx, 0x4dfbc0
call fcn.0042e8d4
mov dword [esp], 0x4dfbc0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x423daf
lea ecx, [ebp - 0x220]
call fcn.0042e658
mov eax, dword [ebp - 0x2fc]
mov edx, ecx
call fcn.0042839c
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd808]
test al, al
jne 0x423df5
jmp 0x423db9
lea eax, [ebp - 0x25c]
call eax
jmp 0x423d6b
mov dword [esp], 0x4dd808
call fcn.004ceb90
test eax, eax
je 0x423df5
lea eax, [ebp - 0x220]
mov ecx, 0x4dfc00
mov dword [esp], eax
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfce4
call fcn.004013f0
mov dword [esp], 0x4dd808
call fcn.004cec60
mov ecx, 0x4dfc00
call fcn.0042e93c
mov dword [esp], 0x4dfc00
call fcn.00422510
lea edi, [ebp - 0x220]
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov dword [ebp - 0x25c], 0x2d200e06
rep movsb byte es:[edi], byte [esi]
lea ebx, [ebp - 0x220]
mov al, byte [0x4dd810]
test al, al
jne 0x423e6c
mov dword [esp], 0x4dd810
call fcn.004ceb90
test eax, eax
je 0x423e6c
mov dword [esp], ebx
mov ecx, 0x4dfc20
call fcn.0042e904
push eax
mov dword [esp], 0x4cfcf4
call fcn.004013f0
mov dword [esp], 0x4dd810
call fcn.004cec60
mov ecx, 0x4dfc20
call fcn.0042e8d4
mov dword [esp], 0x4dfc20
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x423eac
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd818]
test al, al
jne 0x423eec
jmp 0x423eb6
lea eax, [ebp - 0x25c]
call eax
jmp 0x423e86
mov dword [esp], 0x4dd818
call fcn.004ceb90
test eax, eax
je 0x423eec
mov dword [esp], ebx
mov ecx, 0x4dfc60
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfd00
call fcn.004013f0
mov dword [esp], 0x4dd818
call fcn.004cec60
mov ecx, 0x4dfc60
call fcn.0042e93c
mov dword [esp], 0x4dfc60
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x25c], 0x4130160a
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd820]
test al, al
jne 0x423f59
mov dword [esp], 0x4dd820
call fcn.004ceb90
test eax, eax
je 0x423f59
mov dword [esp], ebx
mov ecx, 0x4dfc80
call fcn.0042e904
push eax
mov dword [esp], 0x4cfd04
call fcn.004013f0
mov dword [esp], 0x4dd820
call fcn.004cec60
mov ecx, 0x4dfc80
call fcn.0042e8d4
mov dword [esp], 0x4dfc80
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x423faf
mov dword [esp + 0xc], 0x40
xor edi, edi
mov dword [esp + 8], 0x3000
mov eax, dword [ebp - 0x2d0]
mov dword [esp], edi
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x300]
call eax
mov edx, dword [ebp - 0x2d0]
mov esi, dword [ebp - 0x2d4]
sub esp, 0x10
mov edi, eax
add edx, eax
jmp 0x423fb9
lea eax, [ebp - 0x25c]
call eax
jmp 0x423f73
mov ecx, edx
sub ecx, edi
test ecx, ecx
jle 0x423fc4
movsb byte es:[edi], byte [esi]
jmp 0x423fb9
xor ebx, ebx
xor esi, esi
lea edx, [ebp - 0x220]
mov dword [esp + 8], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 4], esi
mov dword [esp], esi
mov eax, dword [ebp - 0x304]
call eax
sub esp, 0x18
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
mov eax, dword [ebp - 0x2fc]
call eax
push ecx
push ecx
mov dword [ebp - 0x220], 0x6d655f55
mov ecx, 0xa
lea ebx, [ebp - 0x220]
mov dword [ebp - 0x21c], 0x72606a77
mov word [ebp - 0x218], 0x5758
mov byte [ebp - 0x216], 0
mov eax, ecx
mov esi, 0xb
xor edx, edx
div esi
xor byte [ebp + ecx - 0x22a], dl
inc ecx
cmp ecx, 0x14
jne 0x424034
mov dword [esp], ebx
lea ecx, [ebp - 0x2d4]
call fcn.0043e6d0
push edx
test al, al
je 0x424394
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd828]
test al, al
jne 0x4240bd
mov dword [esp], 0x4dd828
call fcn.004ceb90
test eax, eax
je 0x4240bd
mov dword [esp], ebx
mov ecx, 0x4dfcc0
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfd10
call fcn.004013f0
mov dword [esp], 0x4dd828
call fcn.004cec60
mov ecx, 0x4dfcc0
call fcn.0042e93c
mov dword [esp], 0x4dfcc0
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x25c], 0x55401e0e
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd830]
test al, al
jne 0x42412a
mov dword [esp], 0x4dd830
call fcn.004ceb90
test eax, eax
je 0x42412a
mov dword [esp], ebx
mov ecx, 0x4dfce0
call fcn.0042e904
push edi
mov dword [esp], 0x4cfd14
call fcn.004013f0
mov dword [esp], 0x4dd830
call fcn.004cec60
mov ecx, 0x4dfce0
call fcn.0042e8d4
mov dword [esp], 0x4dfce0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x424154
lea eax, [ebp - 0x25c]
mov dword [esp], eax
call fcn.00428020
jmp 0x42415e
lea eax, [ebp - 0x25c]
call eax
jmp 0x424144
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd838]
test al, al
jne 0x4241b8
mov dword [esp], 0x4dd838
call fcn.004ceb90
test eax, eax
je 0x4241b8
mov dword [esp], ebx
mov ecx, 0x4dfd20
call fcn.0042e96c
push esi
mov dword [esp], 0x4cfd20
call fcn.004013f0
mov dword [esp], 0x4dd838
call fcn.004cec60
mov ecx, 0x4dfd20
call fcn.0042e93c
mov dword [esp], 0x4dfd20
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x274], 0x69502612
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd848]
test al, al
jne 0x424225
mov dword [esp], 0x4dd848
call fcn.004ceb90
test eax, eax
je 0x424225
mov dword [esp], ebx
mov ecx, 0x4dfd40
call fcn.0042e904
push ecx
mov dword [esp], 0x4cfd24
call fcn.004013f0
mov dword [esp], 0x4dd848
call fcn.004cec60
mov ecx, 0x4dfd40
call fcn.0042e8d4
mov dword [esp], 0x4dfd40
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x424263
mov edx, dword [ebp - 0x2d4]
lea eax, [ebp - 0x2f8]
mov dword [esp + 8], edx
mov edx, dword [ebp - 0x25c]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00424d54
jmp 0x42426d
lea eax, [ebp - 0x274]
call eax
jmp 0x42423f
mov dword [ebp - 0x220], 0xc1eb1542
mov dword [ebp - 0x21c], 0x7c90ec48
mov byte [ebp - 0x218], 0x42
mov al, byte [0x4dd850]
test al, al
jne 0x4242c7
mov dword [esp], 0x4dd850
call fcn.004ceb90
test eax, eax
je 0x4242c7
mov dword [esp], ebx
mov ecx, 0x4dfd80
call fcn.0042e96c
push edx
mov dword [esp], 0x4cfd30
call fcn.004013f0
mov dword [esp], 0x4dd850
call fcn.004cec60
mov ecx, 0x4dfd80
call fcn.0042e93c
mov dword [esp], 0x4dfd80
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x274], 0x7d602e16
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd858]
test al, al
jne 0x424334
mov dword [esp], 0x4dd858
call fcn.004ceb90
test eax, eax
je 0x424334
mov dword [esp], ebx
mov ecx, 0x4dfda0
call fcn.0042e904
push eax
mov dword [esp], 0x4cfd34
call fcn.004013f0
mov dword [esp], 0x4dd858
call fcn.004cec60
mov ecx, 0x4dfda0
call fcn.0042e8d4
mov dword [esp], 0x4dfda0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x42435b
lea ecx, [ebp - 0x25c]
call fcn.004bd270
jmp 0x424394
lea eax, [ebp - 0x274]
call eax
jmp 0x42434e
lea ecx, [ebp - 0x2d4]
call fcn.004b8e40
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret