Function at 0x40849e
Capabilities:
Get domain controller name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41104c
push 0x4094b9
push dword fs:[0]
mov dword fs:[0], esp
sub esp, 0x564
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
and dword [ebp - 0x53c], 0
and dword [ebp - 0x20], 0
and dword [ebp - 0x24], 0
and dword [ebp - 0x564], 0
and dword [ebp - 0x558], 0
and dword [ebp - 0x540], 0
xor esi, esi
and dword [ebp - 0x544], 0
and dword [ebp - 0x548], 0
and dword [ebp - 0x54c], 0
and dword [ebp - 0x550], 0
and dword [ebp - 0x554], 0
push 0x8003
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 1
push 0x408493
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
and dword [ebp - 4], 0
call fcn.00406aed
push 0
call fcn.004010f0
pop ecx
call fcn.00402aad
push 1
call section..text
pop ecx
mov edi, eax
test edi, edi
je 0x40857f
cmp byte [edi], 0x40
jne 0x40857b
lea eax, [edi + 1]
mov dword [ebp - 0x53c], eax
cmp byte [eax], 0
jne 0x408571
mov eax, 0x6f
jmp 0x409462
push 1
call section..text
pop ecx
mov edi, eax
test edi, edi
jne 0x408589
mov eax, 0x6e
jmp 0x409462
push 0
push edi
push dword [0x4155b8]
call fcn.004059c8
add esp, 0xc
mov edi, eax
call fcn.00405e81
test eax, eax
jne 0x4085af
mov eax, 0x66
jmp 0x409462
push dword [ebp - 0x53c]
call fcn.00406126
pop ecx
test eax, eax
jne 0x4085c9
mov eax, 0x66
jmp 0x409462
test edi, edi
je 0x4088d3
push str._LDAP
push edi
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408619
cmp dword [0x4156c4], 0
je 0x4085f6
mov eax, dword [0x4156c4]
mov edx, dword [eax]
test edx, edx
jne 0x408600
mov eax, 0x66
jmp 0x409462
push edx
call fcn.00406b16
pop ecx
push 0x411385
call fcn.00406b16
pop ecx
xor eax, eax
jmp 0x409462
test edi, edi
je 0x4088d3
push str.FQDN
push edi
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
je 0x408658
push str._FQDN
push edi
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
je 0x408658
push str._SID
push edi
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x4088d3
and dword [ebp - 0x20], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
lea edx, [ebp - 0x24]
push edx
push 8
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x408709
and dword [ebp - 0x28], 0
lea eax, [ebp - 0x28]
push eax
push 0
push 0
push 1
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x55c], eax
test eax, eax
je 0x408700
mov eax, dword [ebp - 0x55c]
inc eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0x560], eax
test eax, eax
je 0x408700
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x55c]
push dword [ebp - 0x560]
push 1
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x4086f4
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x560]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_ConvertSidToStringSidA]
push dword [ebp - 0x560]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x20], 0
jne 0x408719
mov eax, 0x66
jmp 0x409462
push str._SID
push edi
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408745
push dword [ebp - 0x20]
call fcn.00406b16
pop ecx
push 0x411385
call fcn.00406b16
pop ecx
xor eax, eax
jmp 0x409462
and dword [ebp - 0x24], 0
lea eax, [ebp - 0x24]
push eax
push 0
push 0
call dword [sym.imp.NTDSAPI.dll_DsBindA]
test eax, eax
je 0x408765
cmp dword [ebp - 0x24], 0
je 0x40876f
and dword [ebp - 0x24], 0
cmp dword [ebp - 0x24], 0
jne 0x408848
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.NETAPI32.dll_DsGetDcNameA]
test eax, eax
jne 0x4087ae
lea eax, [ebp - 0x24]
push eax
push 0
mov eax, dword [ebp - 0x34]
push dword [eax]
call dword [sym.imp.NTDSAPI.dll_DsBindA]
test eax, eax
je 0x4087a6
cmp dword [ebp - 0x24], 0
je 0x4087a6
and dword [ebp - 0x24], 0
push dword [ebp - 0x34]
call sub.NETAPI32.dll_NetApiBufferFree
cmp dword [ebp - 0x24], 0
jne 0x408848
and dword [ebp - 0x30], 0
lea eax, [ebp - 0x30]
push eax
push 1
push 0
call sub.NETAPI32.dll_NetWkstaUserGetInfo
test eax, eax
jne 0x408838
cmp dword [ebp - 0x30], 0
je 0x408838
push 0x104
push 0
lea eax, [ebp - 0x538]
push eax
call fcn.00409660
add esp, 0xc
push 0
push 0
push 0x103
lea eax, [ebp - 0x538]
push eax
push 0xffffffffffffffff
mov eax, dword [ebp - 0x30]
push dword [eax + 0xc]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x408830
lea eax, [ebp - 0x24]
push eax
push 0
lea eax, [ebp - 0x538]
push eax
call dword [sym.imp.NTDSAPI.dll_DsBindA]
test eax, eax
je 0x408830
cmp dword [ebp - 0x24], 0
je 0x408830
and dword [ebp - 0x24], 0
push dword [ebp - 0x30]
call sub.NETAPI32.dll_NetApiBufferFree
cmp dword [ebp - 0x24], 0
jne 0x408848
mov eax, 0x66
jmp 0x409462
and dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
push 1
push 1
push 0xb
push 0
push dword [ebp - 0x24]
call dword [sym.imp.NTDSAPI.dll_DsCrackNamesA]
test eax, eax
jne 0x4088c9
cmp dword [ebp - 0x2c], 0
je 0x4088c9
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 1
jne 0x4088bf
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
cmp dword [eax], 0
jne 0x4088bf
push str._FQDN
push edi
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x4088b4
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
push dword [eax + 8]
call fcn.00406b16
pop ecx
push 0x411385
call fcn.00406b16
pop ecx
xor eax, eax
jmp 0x409462
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
mov edi, dword [eax + 8]
jmp 0x4088d3
mov eax, 0x66
jmp 0x409462
mov eax, 0x66
jmp 0x409462
push 1
call section..text
pop ecx
mov ebx, eax
test ebx, ebx
je 0x408d01
cmp byte [ebx], 0x2f
jne 0x408aff
jmp 0x408af2
push 0x411213
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408913
mov dword [ebp - 0x564], 1
jmp 0x408ae8
push str._Mail
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408933
mov dword [ebp - 0x564], 2
jmp 0x408ae8
push str._Login
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408953
mov dword [ebp - 0x564], 3
jmp 0x408ae8
push 0x411202
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408973
mov dword [ebp - 0x558], 2
jmp 0x408ae8
push 0x4111ff
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408993
mov dword [ebp - 0x558], 3
jmp 0x408ae8
push 0x4111fc
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x4089b3
mov dword [ebp - 0x558], 4
jmp 0x408ae8
push 0x4111f9
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x4089cc
xor esi, esi
inc esi
jmp 0x408ae8
push 0x4111f6
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x4089e7
mov esi, 2
jmp 0x408ae8
push 0x4111f3
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408a0a
xor esi, esi
inc esi
mov dword [ebp - 0x548], 1
jmp 0x408ae8
push 0x4111f0
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408a2a
mov dword [ebp - 0x54c], 1
jmp 0x408ae8
push 0x4111ed
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408a4a
mov dword [ebp - 0x550], 1
jmp 0x408ae8
push 0x4111e9
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408a6a
mov dword [ebp - 0x540], 1
jmp 0x408ae8
push 0x4111e5
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408a87
mov dword [ebp - 0x540], 2
jmp 0x408ae8
push 0x4111e1
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408aa4
mov dword [ebp - 0x540], 3
jmp 0x408ae8
push 0x4111dd
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408ac1
mov dword [ebp - 0x554], 1
jmp 0x408ae8
push str._CHK
push ebx
call fcn.00409db0
pop ecx
pop ecx
test eax, eax
jne 0x408ade
mov dword [ebp - 0x544], 1
jmp 0x408ae8
mov eax, 0x6f
jmp 0x409462
push 1
call section..text
pop ecx
mov ebx, eax
test ebx, ebx
jne 0x4088f3
jmp 0x408d01
test ebx, ebx
je 0x408d01
push 0
push ebx
push dword [0x4155b8]
call fcn.004059c8
add esp, 0xc
mov ebx, eax
and dword [ebp - 0x568], 0
push 0
push 0x415af4
push str.distinguishedName
push str.objectClassgroup
push ebx
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x408b85
push 0x100
push 0
lea eax, [ebp - 0x234]
push eax
call fcn.00409660
add esp, 0xc
mov eax, dword [0x415af4]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x234]
push eax
call fcn.0040a030
add esp, 0x10
lea ebx, [ebp - 0x234]
mov dword [ebp - 0x568], 2
push 0x415af4
call fcn.00406a5c
pop ecx
cmp dword [ebp - 0x568], 0
jne 0x408bda
push 0x400
push 0
push 0x4156cc
call fcn.00409660
add esp, 0xc
push ebx
push str._n____s_n
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
mov eax, 3
jmp 0x409462
and dword [ebp - 0x568], 0
push 0
push 0x415af4
push str.distinguishedName
push str.__objectClassuser__objectClassgroup__objectClasscomputer__
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x408c45
push 0x100
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00409660
add esp, 0xc
mov eax, dword [0x415af4]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x134]
push eax
call fcn.0040a030
add esp, 0x10
lea edi, [ebp - 0x134]
mov dword [ebp - 0x568], 1
push 0x415af4
call fcn.00406a5c
pop ecx
cmp dword [ebp - 0x568], 0
jne 0x408c9a
push 0x400
push 0
push 0x4156cc
call fcn.00409660
add esp, 0xc
push edi
push str._n____s_n
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
mov eax, 3
jmp 0x409462
push 0
push 0
push str.__objectClassuser__objectClassgroup__objectClasscomputer__
push ebx
push edi
call fcn.004073ee
add esp, 0x14
test eax, eax
jne 0x409446
push 0x400
push 0
push 0x4156cc
call fcn.00409660
add esp, 0xc
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x234]
push eax
push str._n___s_n____s_n
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x14
push 0x4156cc
call fcn.00406b16
pop ecx
xor eax, eax
inc eax
jmp 0x409462
and dword [ebp - 0x568], 0
push 0
push 0x415af4
push str.distinguishedName
push str.objectClassuser
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x408d6c
push 0x100
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00409660
add esp, 0xc
mov eax, dword [0x415af4]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x134]
push eax
call fcn.0040a030
add esp, 0x10
lea edi, [ebp - 0x134]
mov dword [ebp - 0x568], 1
cmp dword [ebp - 0x568], 0
jne 0x408dd9
push 1
push 0x415af4
push str.distinguishedName
push str.objectClassgroup
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x408dd9
push 0x100
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00409660
add esp, 0xc
mov eax, dword [0x415af4]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x134]
push eax
call fcn.0040a030
add esp, 0x10
lea edi, [ebp - 0x134]
mov dword [ebp - 0x568], 2
push 0x415af4
call fcn.00406a5c
pop ecx
cmp dword [ebp - 0x568], 0
jne 0x408e2e
push 0x400
push 0
push 0x4156cc
call fcn.00409660
add esp, 0xc
push edi
push str._n____s_n
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
mov eax, 3
jmp 0x409462
cmp dword [ebp - 0x544], 0
je 0x408e94
push 0x400
push 0
push 0x4156cc
call fcn.00409660
add esp, 0xc
push edi
mov eax, 0x41115f
mov edx, 0x411163
cmp dword [ebp - 0x568], 2
cmove eax, edx
push eax
push str._n___s___s_n
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x14
push 0x4156cc
call fcn.00406b16
pop ecx
xor eax, eax
cmp dword [ebp - 0x568], 2
setne al
jmp 0x409462
push 0x100
push 0
lea eax, [ebp - 0x334]
push eax
call fcn.00409660
add esp, 0xc
push 0
push 0x415af4
push 0x411320
push 0
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x408ed8
cmp dword [0x415af4], 0
je 0x408ed8
mov eax, dword [0x415af4]
cmp dword [eax], 0
jne 0x408f19
push 0x400
push 0
push 0x4156cc
call fcn.00409660
add esp, 0xc
push edi
push 0x411157
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
mov eax, 3
jmp 0x409462
cmp dword [ebp - 0x568], 1
jne 0x408f76
push 0
push 0x415af8
push str.displayName
push 0
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x408f76
push dword [0x415af8]
call fcn.004073c5
pop ecx
test eax, eax
je 0x408f76
mov eax, dword [0x415af8]
push dword [eax]
mov eax, dword [0x415af4]
push dword [eax]
push str._s_:__s
push 0xff
lea eax, [ebp - 0x334]
push eax
call fcn.0040a030
add esp, 0x14
jmp 0x408f96
mov eax, dword [0x415af4]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x334]
push eax
call fcn.0040a030
add esp, 0x10
push 0x415af4
call fcn.00406a5c
pop ecx
push 0x415af8
call fcn.00406a5c
pop ecx
cmp dword [ebp - 0x568], 1
jne 0x40919f
push 0x1000
push 1
push 0x415acc
call fcn.00406b62
add esp, 0xc
test eax, eax
je 0x408fe9
push pe_nt_image_headers32
push 8
push 0x415ae0
call fcn.00406b62
add esp, 0xc
test eax, eax
jne 0x408ff3
mov eax, 0x68
jmp 0x409462
push esi
push dword [ebp - 0x558]
push dword [ebp - 0x564]
push str.objectClassuser
lea eax, [ebp - 0x134]
push eax
call fcn.004074b5
add esp, 0x14
test esi, esi
jne 0x409170
push 0x100
push 0
lea eax, [ebp - 0x434]
push eax
call fcn.00409660
add esp, 0xc
cmp dword [ebp - 0x564], 2
jne 0x409086
push 0
push 0x415af8
push str.mail
push 0
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x409086
push dword [0x415af8]
call fcn.004073c5
pop ecx
test eax, eax
je 0x409086
mov eax, dword [0x415af8]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x434]
push eax
call fcn.0040a030
add esp, 0x10
push 0
push 0x415af8
push str.userAccountControl
push 0
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x4090e6
push 0
cmp dword [0x415af8], 0
je 0x4090b5
mov eax, dword [0x415af8]
mov eax, dword [eax]
jmp 0x4090b7
xor eax, eax
push eax
call fcn.00405b05
pop ecx
pop ecx
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], edx
cmp edx, 0x80000000
jne 0x4090d7
test eax, eax
je 0x4090e6
mov eax, dword [ebp - 0x570]
and eax, 2
xor edx, edx
test eax, eax
jne 0x4090ea
xor ebx, ebx
jmp 0x4090ed
xor ebx, ebx
inc ebx
push 0x400
push 0
push 0x4156cc
call fcn.00409660
add esp, 0xc
cmp byte [ebp - 0x434], 0
je 0x40913c
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x334]
push eax
mov eax, str._n_s___s___user_:_n
mov edx, str._n_s______s___user_:_n
test ebx, ebx
cmovne eax, edx
push eax
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x14
jmp 0x409165
lea eax, [ebp - 0x334]
push eax
mov eax, str._n_s__user_:_n
mov edx, str._n_s_____user_:_n
test ebx, ebx
cmovne eax, edx
push eax
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
push dword [ebp - 0x554]
push dword [ebp - 0x548]
push esi
push 0x415acc
push 0x415ae0
call fcn.004070f6
add esp, 0x14
push 0x411385
call fcn.00406b16
pop ecx
jmp 0x409446
cmp dword [ebp - 0x568], 2
jne 0x409446
push 0x1000
push 1
push 0x415acc
call fcn.00406b62
add esp, 0xc
test eax, eax
je 0x4091dc
push pe_nt_image_headers32
push 8
push 0x415ae0
call fcn.00406b62
add esp, 0xc
test eax, eax
jne 0x4091e6
mov eax, 0x68
jmp 0x409462
push 0
push 0x415af4
push str.groupType
push 0
push edi
call fcn.004064b1
add esp, 0x14
push 0
cmp dword [0x415af4], 0
je 0x409211
mov eax, dword [0x415af4]
mov eax, dword [eax]
jmp 0x409213
xor eax, eax
push eax
call fcn.00405b05
pop ecx
pop ecx
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], edx
push 0
push dword [ebp - 0x550]
push esi
push dword [ebp - 0x540]
push dword [ebp - 0x558]
push dword [ebp - 0x564]
push str.__objectClassuser__objectClasscomputer__objectClassgroup__objectClasscontact__
push edi
call fcn.00407878
add esp, 0x20
test esi, esi
jne 0x40941c
push 0x100
push 0
lea eax, [ebp - 0x434]
push eax
call fcn.00409660
add esp, 0xc
cmp dword [ebp - 0x564], 2
jne 0x4092c2
push 0
push 0x415af8
push str.mail
push 0
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x4092c2
push dword [0x415af8]
call fcn.004073c5
pop ecx
test eax, eax
je 0x4092c2
mov eax, dword [0x415af8]
push dword [eax]
push 0x411b76
push 0xff
lea eax, [ebp - 0x434]
push eax
call fcn.0040a030
add esp, 0x10
push 0x400
push 0
push 0x4156cc
call fcn.00409660
add esp, 0xc
mov eax, dword [ebp - 0x570]
mov edx, dword [ebp - 0x56c]
cmp edx, 0x80000000
jne 0x4092ee
test eax, eax
je 0x40934f
mov eax, dword [ebp - 0x570]
and eax, 0x80000000
xor edx, edx
test eax, eax
jne 0x40934f
cmp byte [ebp - 0x434], 0
je 0x40932f
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x334]
push eax
push str._n_s___s___group_:_n
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x14
jmp 0x40939d
lea eax, [ebp - 0x334]
push eax
push str._n_s__group_:_n
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x10
jmp 0x40939d
cmp byte [ebp - 0x434], 0
je 0x40937f
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x334]
push eax
push str._n__s____s___group_:_n
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x14
jmp 0x40939d
lea eax, [ebp - 0x334]
push eax
push str._n__s___group_:_n
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
cmp dword [ebp - 0x54c], 0
je 0x40941c
push 0
push 0x415af4
push str.description
push 0
push edi
call fcn.004064b1
add esp, 0x14
test eax, eax
je 0x40941c
cmp dword [0x415af4], 0
je 0x40941c
mov eax, dword [0x415af4]
cmp dword [eax], 0
je 0x40941c
push 0x400
push 0
push 0x4156cc
call fcn.00409660
add esp, 0xc
mov eax, dword [0x415af4]
push dword [eax]
push str._:__s_n
push 0x3ff
push 0x4156cc
call fcn.0040a030
add esp, 0x10
push 0x4156cc
call fcn.00406b16
pop ecx
push dword [ebp - 0x554]
push dword [ebp - 0x548]
push esi
push 0x415acc
push 0x415ae0
call fcn.004070f6
add esp, 0x14
push 0x411385
call fcn.00406b16
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x409460
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
lea esp, [ebp - 0x580]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret