Function at 0x40c84d
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
mov edx, 0x22
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x40c855
call fcn.004310a0
push dword [esp + 0xa0]
call fcn.00430f40
mov edx, dword [esp + 0x9c]
lea ecx, [esp]
call fcn.0041e000
mov edx, 0x434032
lea ecx, [esp + 4]
call fcn.0041e008
mov ebp, dword [esp + 0x98]
push dword [ebp + 0x14]
call fcn.0041eaf0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x40c8b6
jg 0x40c8b2
cmp ebx, 0x1e14
jb 0x40c8b6
xor eax, eax
jmp 0x40c8bb
mov eax, 1
or eax, eax
je 0x40cd78
push 0x434176
push dword [esp + 4]
call fcn.0041e930
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0xc]
jl 0x40cd73
call fcn.00430e40
push eax
push eax
push 0x434176
push dword [esp + 0x18]
push dword [esp + 0x10]
call fcn.0041e9c0
lea eax, [esp + 0x14]
push eax
call fcn.00430eb0
mov dword [esp + 0x14], 1
call fcn.00430e40
push eax
push 0x434032
push dword [esp + 0x1c]
mov ebp, dword [esp + 0xa4]
mov edx, dword [ebp + 0x28]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.ControlCriticalDeviceDatabase
call fcn.00430f90
call fcn.00430ff0
push str.hklm
lea eax, [esp + 0x30]
push eax
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0040a914
lea eax, [esp + 0x1c]
push eax
call fcn.00430eb0
cmp dword [esp + 0x1c], 0
je 0x40c977
jmp 0x40cd69
inc dword [esp + 0x14]
call fcn.00430e40
push eax
push eax
push 0x434770
push 0x434332
push dword [esp + 0x28]
call fcn.0041efa0
lea eax, [esp + 0x24]
push eax
call fcn.00430eb0
call fcn.00430e40
push eax
push eax
push dword [esp + 0x18]
call fcn.0041e3c0
call fcn.00430ff0
call fcn.00430e40
push eax
push eax
push dword [esp + 0x2c]
call fcn.0041e3c0
call fcn.00431060
mov edx, eax
call fcn.00431060
mov ecx, eax
call fcn.00431020
je 0x40cd64
call fcn.00430e40
push eax
push str.Service
mov ebp, dword [esp + 0xa0]
mov edx, dword [ebp + 0x28]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.ControlCriticalDeviceDatabase_
call fcn.00430f90
mov edx, dword [esp + 0x24]
call fcn.00430f90
call fcn.00430ff0
push str.HKLM
push 0
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0041cdce
lea eax, [esp + 0x28]
push eax
call fcn.00430eb0
push dword [esp + 0x24]
mov edx, 0x434032
pop ecx
call fcn.00431020
jne 0x40cd64
mov edx, dword [esp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, dword [esp + 0x28]
call fcn.00430f90
mov edx, 0x434176
call fcn.00430f90
lea eax, [esp + 8]
push eax
call fcn.00430eb0
call fcn.00430e40
push eax
push str.Start
mov ebp, dword [esp + 0xa0]
mov edx, dword [ebp + 0x28]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.Services_
call fcn.00430f90
mov edx, dword [esp + 0x30]
call fcn.00430f90
call fcn.00430ff0
push str.HKLM
push 0
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0041cdce
lea eax, [esp + 0x2c]
push eax
call fcn.00430eb0
mov edx, dword [esp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, dword [esp + 0x2c]
call fcn.00430f90
mov edx, 0x434176
call fcn.00430f90
lea eax, [esp + 8]
push eax
call fcn.00430eb0
call fcn.00430e40
push eax
push str.ImagePath
mov ebp, dword [esp + 0xa0]
mov edx, dword [ebp + 0x28]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.Services_
call fcn.00430f90
mov edx, dword [esp + 0x30]
call fcn.00430f90
call fcn.00430ff0
push str.HKLM
push 0
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0041cdce
lea eax, [esp + 0x30]
push eax
call fcn.00430eb0
push 1
push 0x434770
push dword [esp + 0x34]
call fcn.0040d867
mov dword [esp + 0x30], eax
call fcn.00430e40
push eax
push eax
mov ebx, dword [esp + 0x38]
inc ebx
push ebx
push dword [esp + 0x38]
call fcn.0041e8e0
lea eax, [esp + 0x30]
push eax
call fcn.00430eb0
mov edx, dword [esp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, dword [esp + 0x30]
call fcn.00430f90
mov edx, 0x434176
call fcn.00430f90
lea eax, [esp + 8]
push eax
call fcn.00430eb0
mov edx, 0x434032
lea ecx, [esp + 0x34]
call fcn.0041e008
mov dword [esp + 0x38], 1
call fcn.00430e40
push eax
push 0x434032
push dword [esp + 0x40]
mov ebp, dword [esp + 0xa4]
mov edx, dword [ebp + 0x28]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.Services_
call fcn.00430f90
mov edx, dword [esp + 0x34]
call fcn.00430f90
mov edx, str.StartOverride
call fcn.00430f90
call fcn.00430ff0
push str.hklm
lea eax, [esp + 0x30]
push eax
call fcn.00430e92
add dword [esp + 8], edx
call fcn.00413552
lea eax, [esp + 0x40]
push eax
call fcn.00430eb0
cmp dword [esp + 0x1c], 0
je 0x40cc42
jmp 0x40ccb0
inc dword [esp + 0x38]
call fcn.00430e40
push eax
push dword [esp + 0x40]
mov ebp, dword [esp + 0xa0]
mov edx, dword [ebp + 0x28]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.Services_
call fcn.00430f90
mov edx, dword [esp + 0x30]
call fcn.00430f90
mov edx, str.StartOverride
call fcn.00430f90
call fcn.00430ff0
push str.HKLM
push 0
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0041cdce
lea eax, [esp + 0x38]
push eax
call fcn.00430eb0
jmp 0x40ccb0
mov edx, dword [esp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, dword [esp + 0x38]
call fcn.00430f90
mov edx, 0x434176
call fcn.00430f90
lea eax, [esp + 8]
push eax
call fcn.00430eb0
call fcn.00430e40
push eax
push str.DriverPackageId
mov ebp, dword [esp + 0xa0]
mov edx, dword [ebp + 0x28]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.ControlCriticalDeviceDatabase_
call fcn.00430f90
mov edx, dword [esp + 0x24]
call fcn.00430f90
call fcn.00430ff0
push str.HKLM
push 0
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0041cdce
lea eax, [esp + 0x44]
push eax
call fcn.00430eb0
mov edx, dword [esp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, dword [esp + 0x44]
call fcn.00430f90
mov edx, 0x434176
call fcn.00430f90
lea eax, [esp + 8]
push eax
call fcn.00430eb0
jmp 0x40cd73
jmp 0x40c916
inc dword [esp + 0xc]
jno 0x40c8dd
jmp 0x40d6d4
push str.kernel32.dll
push 0xffffffff
call fcn.0041fd4f
mov dword [esp + 0x44], eax
lea eax, [esp + 0x48]
push eax
push str.Wow64DisableWow64FsRedirection
push dword [esp + 0x4c]
call fcn.0041fc94
push dword [esp + 0x44]
call fcn.0041fbd6
push 1
push 0x434770
mov ebp, dword [esp + 0xa0]
push dword [ebp + 0x28]
call fcn.0040d867
mov dword [esp + 0x30], eax
call fcn.00430e40
push eax
push eax
mov ebx, dword [esp + 0x38]
dec ebx
push ebx
mov ebp, dword [esp + 0xa4]
push dword [ebp + 0x28]
call fcn.0041e7e0
lea eax, [esp + 0x50]
push eax
call fcn.00430eb0
mov edx, dword [esp + 0x4c]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.DriverDatabase
call fcn.00430f90
lea eax, [esp + 0x50]
push eax
call fcn.00430eb0
push 0x434176
push dword [esp + 4]
call fcn.0041e930
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0xc]
jl 0x40d6a5
mov edx, 0x434032
lea ecx, [esp + 0x50]
call fcn.0041e008
call fcn.00430e40
push eax
push eax
push 0x434176
push dword [esp + 0x18]
push dword [esp + 0x10]
call fcn.0041e9c0
lea eax, [esp + 0x14]
push eax
call fcn.00430eb0
push 0x434770
push dword [esp + 0x14]
call fcn.0041e4a0
mov dword [esp + 0x30], eax
mov ebx, dword [esp + 0x30]
and ebx, ebx
jle 0x40cec0
call fcn.00430e40
push eax
push eax
mov ebx, dword [esp + 0x38]
dec ebx
push ebx
push dword [esp + 0x1c]
call fcn.0041e7e0
lea eax, [esp + 0x54]
push eax
call fcn.00430eb0
call fcn.00430e40
push eax
push eax
mov ebx, dword [esp + 0x38]
inc ebx
push ebx
push dword [esp + 0x1c]
call fcn.0041e8e0
lea eax, [esp + 0x14]
push eax
call fcn.00430eb0
mov dword [esp + 0x14], 1
call fcn.00430e40
push eax
push 0x434032
push dword [esp + 0x1c]
mov edx, dword [esp + 0x58]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.DeviceIds_
call fcn.00430f90
mov edx, dword [esp + 0x60]
call fcn.00430f90
call fcn.00430ff0
push str.hklm
lea eax, [esp + 0x30]
push eax
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0040a914
lea eax, [esp + 0x58]
push eax
call fcn.00430eb0
cmp dword [esp + 0x1c], 0
je 0x40cf2c
jmp 0x40d69b
inc dword [esp + 0x14]
call fcn.00430e40
push eax
push eax
push dword [esp + 0x18]
call fcn.0041e3c0
call fcn.00430ff0
call fcn.00430e40
push eax
push eax
push dword [esp + 0x60]
call fcn.0041e3c0
call fcn.00431060
mov edx, eax
call fcn.00431060
mov ecx, eax
call fcn.00431020
je 0x40d696
push dword [esp + 0x50]
mov edx, 0x434032
pop ecx
call fcn.00431020
jne 0x40cfa2
mov edx, dword [esp + 0x50]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, 0x434770
call fcn.00430f90
lea eax, [esp + 0x54]
push eax
call fcn.00430eb0
mov dword [esp + 0x58], 1
call fcn.00430e40
push eax
push 0x434032
push dword [esp + 0x60]
mov edx, dword [esp + 0x58]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.DeviceIds_
call fcn.00430f90
mov edx, dword [esp + 0x60]
call fcn.00430f90
mov edx, dword [esp + 0x20]
call fcn.00430f90
call fcn.00430ff0
push str.hklm
lea eax, [esp + 0x30]
push eax
call fcn.00430e92
add dword [esp + 8], edx
call fcn.00413552
lea eax, [esp + 0x60]
push eax
call fcn.00430eb0
cmp dword [esp + 0x1c], 0
je 0x40d017
jmp 0x40d696
inc dword [esp + 0x58]
call fcn.00430e40
push eax
push str.Active
mov edx, dword [esp + 0x54]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.DriverInfFiles_
call fcn.00430f90
mov edx, dword [esp + 0x68]
call fcn.00430f90
call fcn.00430ff0
push str.HKLM
push 0
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0041cdce
lea eax, [esp + 0x64]
push eax
call fcn.00430eb0
push dword [esp + 0x60]
mov edx, 0x434032
pop ecx
call fcn.00431020
jne 0x40d691
mov ebp, dword [esp + 0x98]
mov edx, dword [ebp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.System32DriverStoreFileRepository_
call fcn.00430f90
mov edx, dword [esp + 0x64]
call fcn.00430f90
mov edx, 0x434770
call fcn.00430f90
mov edx, dword [esp + 0x60]
call fcn.00430f90
lea eax, [esp + 0x68]
push eax
call fcn.00430eb0
push dword [esp + 0x64]
call fcn.0042bd5a
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x40d0e6
jl 0x40d0e2
cmp ebx, 0
ja 0x40d0e6
xor eax, eax
jmp 0x40d0eb
mov eax, 1
or eax, eax
je 0x40d149
call fcn.00430e40
push eax
push eax
mov edx, 0x434176
call fcn.00430f90
mov edx, dword [esp + 0x58]
call fcn.00430f90
mov edx, dword [esp + 0x18]
call fcn.00430f90
mov edx, 0x434176
call fcn.00430f90
call fcn.00430ff0
push dword [esp + 0xa0]
push dword [esp + 0x70]
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0040b806
lea eax, [esp + 0x6c]
push eax
call fcn.00430eb0
jmp 0x40d1ca
call fcn.00430e40
push eax
push eax
mov edx, 0x434176
call fcn.00430f90
mov edx, dword [esp + 0x58]
call fcn.00430f90
mov edx, dword [esp + 0x18]
call fcn.00430f90
mov edx, 0x434176
call fcn.00430f90
call fcn.00430ff0
push dword [esp + 0xa0]
mov ebp, dword [esp + 0xa4]
mov edx, dword [ebp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.inf_
call fcn.00430f90
mov edx, dword [esp + 0x6c]
call fcn.00430f90
call fcn.00430e92
add dword [esp], edx
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0040b806
lea eax, [esp + 0x6c]
push eax
call fcn.00430eb0
push dword [esp + 0x68]
mov edx, 0x434032
pop ecx
call fcn.00431020
jne 0x40d68f
call fcn.00430e40
push eax
push eax
push 0x434176
push 4
push dword [esp + 0x78]
call fcn.0041e9c0
lea eax, [esp + 0x70]
push eax
call fcn.00430eb0
call fcn.00430e40
push eax
push str.Service
mov edx, dword [esp + 0x54]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.DriverPackages_
call fcn.00430f90
mov edx, dword [esp + 0x6c]
call fcn.00430f90
mov edx, str.Configurations_
call fcn.00430f90
mov edx, dword [esp + 0x78]
call fcn.00430f90
call fcn.00430ff0
push str.HKLM
push 0
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0041cdce
lea eax, [esp + 0x28]
push eax
call fcn.00430eb0
push dword [esp + 0x24]
mov edx, 0x434032
pop ecx
call fcn.00431020
je 0x40d3d3
lea edx, [esp + 0x70]
push edx
push 0x438e9c
push 8
push 6
push 4
call fcn.0042eaf5
call fcn.00430e40
push eax
lea edx, [esp + 0x74]
push edx
push dword [esp + 0x74]
mov ebp, dword [esp + 0xa4]
mov edx, dword [ebp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.inf_
call fcn.00430f90
mov edx, dword [esp + 0x6c]
call fcn.00430f90
call fcn.00430ff0
push dword [esp + 0xa8]
call fcn.00430e92
add dword [esp + 4], edx
call fcn.00419f1f
call fcn.00430f40
push 0x4349fc
mov ebp, dword [esp + 0x74]
push dword [ebp + 4]
call fcn.0041e930
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], 1
mov eax, dword [esp + 0x78]
cmp eax, dword [esp + 0x7c]
jl 0x40d3d3
call fcn.00430e40
push eax
push eax
push 0x4349fc
push dword [esp + 0x88]
mov ebp, dword [esp + 0x80]
push dword [ebp + 8]
call fcn.0041e9c0
lea eax, [esp + 0x84]
push eax
call fcn.00430eb0
call fcn.00430e40
push eax
push eax
call fcn.00430e40
push eax
push 1
push 0x434336
push 0x434586
push dword [esp + 0x98]
call fcn.0041ef70
call fcn.00430e92
add dword [esp], edx
call fcn.0041eaf0
call fcn.00430f40
mov dword [esp + 0x84], eax
mov ebx, dword [esp + 0x84]
and ebx, 2
cmp ebx, 2
jne 0x40d3c9
call fcn.00430e40
push eax
push eax
push 0x4349fc
push dword [esp + 0x88]
mov ebp, dword [esp + 0x80]
push dword [ebp + 4]
call fcn.0041e9c0
lea eax, [esp + 0x28]
push eax
call fcn.00430eb0
inc dword [esp + 0x7c]
jno 0x40d310
mov edx, dword [esp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, dword [esp + 0x28]
call fcn.00430f90
mov edx, 0x434176
call fcn.00430f90
lea eax, [esp + 8]
push eax
call fcn.00430eb0
call fcn.00430e40
push eax
push str.Start
mov ebp, dword [esp + 0xa0]
mov edx, dword [ebp + 0x28]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.Services_
call fcn.00430f90
mov edx, dword [esp + 0x30]
call fcn.00430f90
call fcn.00430ff0
push str.HKLM
push 0
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0041cdce
lea eax, [esp + 0x2c]
push eax
call fcn.00430eb0
mov edx, dword [esp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, dword [esp + 0x2c]
call fcn.00430f90
mov edx, 0x434176
call fcn.00430f90
lea eax, [esp + 8]
push eax
call fcn.00430eb0
call fcn.00430e40
push eax
push str.ImagePath
mov ebp, dword [esp + 0xa0]
mov edx, dword [ebp + 0x28]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.Services_
call fcn.00430f90
mov edx, dword [esp + 0x30]
call fcn.00430f90
call fcn.00430ff0
push str.HKLM
push 0
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0041cdce
lea eax, [esp + 0x30]
push eax
call fcn.00430eb0
push 1
push 0x434770
push dword [esp + 0x34]
call fcn.0040d867
mov dword [esp + 0x30], eax
call fcn.00430e40
push eax
push eax
mov ebx, dword [esp + 0x38]
inc ebx
push ebx
push dword [esp + 0x38]
call fcn.0041e8e0
lea eax, [esp + 0x30]
push eax
call fcn.00430eb0
mov edx, dword [esp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, dword [esp + 0x30]
call fcn.00430f90
mov edx, 0x434176
call fcn.00430f90
lea eax, [esp + 8]
push eax
call fcn.00430eb0
mov edx, 0x434032
lea ecx, [esp + 0x34]
call fcn.0041e008
mov dword [esp + 0x38], 1
call fcn.00430e40
push eax
push 0x434032
push dword [esp + 0x40]
mov ebp, dword [esp + 0xa4]
mov edx, dword [ebp + 0x28]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.Services_
call fcn.00430f90
mov edx, dword [esp + 0x34]
call fcn.00430f90
mov edx, str.StartOverride
call fcn.00430f90
call fcn.00430ff0
push str.hklm
lea eax, [esp + 0x30]
push eax
call fcn.00430e92
add dword [esp + 8], edx
call fcn.00413552
lea eax, [esp + 0x40]
push eax
call fcn.00430eb0
cmp dword [esp + 0x1c], 0
je 0x40d5c9
jmp 0x40d637
inc dword [esp + 0x38]
call fcn.00430e40
push eax
push dword [esp + 0x40]
mov ebp, dword [esp + 0xa0]
mov edx, dword [ebp + 0x28]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, str.Services_
call fcn.00430f90
mov edx, dword [esp + 0x30]
call fcn.00430f90
mov edx, str.StartOverride
call fcn.00430f90
call fcn.00430ff0
push str.HKLM
push 0
call fcn.00430e92
add dword [esp + 8], edx
call fcn.0041cdce
lea eax, [esp + 0x38]
push eax
call fcn.00430eb0
jmp 0x40d637
mov edx, dword [esp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, dword [esp + 0x38]
call fcn.00430f90
mov edx, 0x434176
call fcn.00430f90
lea eax, [esp + 8]
push eax
call fcn.00430eb0
mov edx, dword [esp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
mov edx, dword [esp + 0x64]
call fcn.00430f90
mov edx, 0x434176
call fcn.00430f90
lea eax, [esp + 8]
push eax
call fcn.00430eb0
jmp 0x40d6a5
jmp 0x40cfaa
jmp 0x40cec8
inc dword [esp + 0xc]
jno 0x40ce27
push str.kernel32.dll
push 0xffffffff
call fcn.0041fd4f
mov dword [esp + 0x44], eax
lea eax, [esp + 0x48]
push eax
push str.Wow64RevertWow64FsRedirection
push dword [esp + 0x4c]
call fcn.0041fc94
push dword [esp + 0x44]
call fcn.0041fbd6
mov edx, dword [esp + 4]
call fcn.00430e40
push eax
call fcn.00430f90
pop eax
push eax
call fcn.00430e80
pop edx
add eax, edx
jmp 0x40d6f9
push dword [esp + 0x6c]
call fcn.00431170
push dword [esp + 0x80]
call fcn.00431170
push dword [esp + 0x40]
call fcn.00431170
push dword [esp + 0x24]
call fcn.00431170
push dword [esp + 0x5c]
call fcn.00431170
push dword [esp + 0x10]
call fcn.00431170
push dword [esp + 0x54]
call fcn.00431170
push dword [esp + 0x3c]
call fcn.00431170
push dword [esp + 0x34]
call fcn.00431170
push dword [esp + 0x68]
call fcn.00431170
push dword [esp + 0x20]
call fcn.00431170
push dword [esp + 0x28]
call fcn.00431170
push dword [esp + 0x2c]
call fcn.00431170
push dword [esp]
call fcn.00431170
push dword [esp + 0x18]
call fcn.00431170
push dword [esp + 0x64]
call fcn.00431170
push dword [esp + 0x60]
call fcn.00431170
push dword [esp + 4]
call fcn.00431170
push dword [esp + 0x4c]
call fcn.00431170
push dword [esp + 0x50]
call fcn.00431170
push eax
push dword [esp + 0x74]
call fcn.0042ee4d
pop eax
add esp, 0x88
pop edi
pop ebx
pop ebp
ret 8