Function at 0x4394a0
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
lea ebp, [esp - 0x64]
sub esp, 0x64
push 0xffffffffffffffff
push 0x490119
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1f0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc4], ecx
xor edi, edi
mov dword [ebp + 0x60], edi
mov dword [ebp + 0x5c], edi
mov byte [ebp - 0x5c], 0
mov ebx, 1
mov dword [ebp - 4], ebx
mov byte [ebp - 0xb4], 0
mov byte [ebp - 4], 3
mov byte [ebp + 0x50], 0
mov byte [ebp - 4], 5
mov byte [ebp - 0xc0], 0
mov byte [ebp - 4], 7
mov byte [ebp - 0x10c], 0
mov byte [ebp - 4], 9
mov byte [ebp - 0xf4], 0
mov byte [ebp - 4], 0xb
mov byte [ebp - 0x100], 0
mov byte [ebp - 4], 0xd
mov dword [ebp + 0x48], 7
mov dword [ebp + 0x44], edi
xor eax, eax
mov word [ebp + 0x34], ax
push 0x23
push str.SoftwareNVIDIA_CorporationLogging
lea ecx, [ebp + 0x30]
call fcn.0040faf0
mov byte [ebp - 4], 0xe
mov dword [ebp + 0x60], ebx
push edi
push edi
push 0x20019
lea ecx, [ebp + 0x30]
push ecx
mov edx, dword [ebp + 0x6c]
push edx
lea eax, [ebp - 0x5c]
push eax
call fcn.0042f140
add esp, 0x18
test eax, eax
jne 0x439701
mov ecx, dword [ebp + 0x70]
push ecx
push str.Processes_
lea edx, [ebp - 0x138]
push edx
call fcn.00414570
mov dword [ebp - 4], 0xf
mov dword [ebp + 0x60], 3
push str.LogChannels
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.00414340
mov dword [ebp - 4], 0x10
mov ebx, 7
mov dword [ebp + 0x60], ebx
push edi
push edi
push 0x20019
push eax
mov ecx, dword [ebp - 0x58]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.0042f140
add esp, 0x30
test eax, eax
jne 0x439701
push str.Definitions
lea ecx, [ebp - 0x78]
call fcn.00413620
mov dword [ebp - 4], 0x11
mov ebx, 0xf
mov dword [ebp + 0x60], ebx
push edi
push edi
push 0x20019
lea eax, [ebp - 0x78]
push eax
mov ecx, dword [ebp - 0x58]
push ecx
lea edx, [ebp + 0x50]
push edx
call fcn.0042f140
add esp, 0x18
test eax, eax
jne 0x439701
push 0x495fd8
lea ecx, [ebp - 0x98]
call fcn.00413620
mov dword [ebp - 4], 0x12
mov ebx, 0x1f
mov dword [ebp + 0x60], ebx
push edi
push edi
push 0x20019
lea eax, [ebp - 0x98]
push eax
mov ecx, dword [ebp + 0x54]
push ecx
lea edx, [ebp - 0xc0]
push edx
call fcn.0042f140
add esp, 0x18
test eax, eax
jne 0x439701
push str.LogPrinters
lea ecx, [ebp + 4]
call fcn.00413620
mov dword [ebp - 4], 0x13
mov ebx, 0x3f
mov dword [ebp + 0x60], ebx
push edi
push edi
push 0x20019
lea eax, [ebp + 4]
push eax
mov ecx, dword [ebp + 0x54]
push ecx
lea edx, [ebp - 0x10c]
push edx
call fcn.0042f140
add esp, 0x18
test eax, eax
jne 0x439701
push str.LogManagers
lea ecx, [ebp - 0x4c]
call fcn.00413620
mov dword [ebp - 4], 0x14
mov ebx, 0x7f
mov dword [ebp + 0x60], ebx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0xf4]
push ecx
lea ecx, [ebp + 0x54]
call fcn.0042f1f0
test eax, eax
jne 0x439701
push str.LogFilters
lea ecx, [ebp - 0x2c]
call fcn.00413620
mov dword [ebp - 4], 0x15
mov ebx, 0xff
mov dword [ebp + 0x60], ebx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp + 0x54]
call fcn.0042f1f0
test eax, eax
mov byte [ebp + 0x6f], 1
je 0x439705
mov byte [ebp + 0x6f], 0
mov dword [ebp - 4], 0x14
mov esi, 8
test bl, bl
jns 0x43973f
and ebx, 0xffffff7f
mov dword [ebp + 0x60], ebx
cmp dword [ebp - 0x14], esi
jb 0x43972f
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.0046f1aa
add esp, 4
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], edi
xor edx, edx
mov word [ebp - 0x28], dx
mov dword [ebp - 4], 0x13
test bl, 0x40
je 0x439772
and ebx, 0xffffffbf
mov dword [ebp + 0x60], ebx
cmp dword [ebp - 0x34], esi
jb 0x439762
mov eax, dword [ebp - 0x48]
push eax
call fcn.0046f1aa
add esp, 4
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], edi
xor ecx, ecx
mov word [ebp - 0x48], cx
mov dword [ebp - 4], 0x12
test bl, 0x20
je 0x4397a5
and ebx, 0xffffffdf
mov dword [ebp + 0x60], ebx
cmp dword [ebp + 0x1c], esi
jb 0x439795
mov edx, dword [ebp + 8]
push edx
call fcn.0046f1aa
add esp, 4
mov dword [ebp + 0x1c], 7
mov dword [ebp + 0x18], edi
xor eax, eax
mov word [ebp + 8], ax
mov dword [ebp - 4], 0x11
test bl, 0x10
je 0x4397e1
and ebx, 0xffffffef
mov dword [ebp + 0x60], ebx
cmp dword [ebp - 0x80], esi
jb 0x4397cb
mov ecx, dword [ebp - 0x94]
push ecx
call fcn.0046f1aa
add esp, 4
mov dword [ebp - 0x80], 7
mov dword [ebp - 0x84], edi
xor edx, edx
mov word [ebp - 0x94], dx
mov dword [ebp - 4], 0x10
test bl, 8
je 0x439814
and ebx, 0xfffffff7
mov dword [ebp + 0x60], ebx
cmp dword [ebp - 0x60], esi
jb 0x439804
mov eax, dword [ebp - 0x74]
push eax
call fcn.0046f1aa
add esp, 4
mov dword [ebp - 0x60], 7
mov dword [ebp - 0x64], edi
xor ecx, ecx
mov word [ebp - 0x74], cx
mov dword [ebp - 4], 0xf
test bl, 4
je 0x439856
and ebx, 0xfffffffb
mov dword [ebp + 0x60], ebx
cmp dword [ebp - 0xcc], esi
jb 0x43983d
mov edx, dword [ebp - 0xe0]
push edx
call fcn.0046f1aa
add esp, 4
mov dword [ebp - 0xcc], 7
mov dword [ebp - 0xd0], edi
xor eax, eax
mov word [ebp - 0xe0], ax
mov dword [ebp - 4], 0xe
test bl, 2
je 0x439898
and ebx, 0xfffffffd
mov dword [ebp + 0x60], ebx
cmp dword [ebp - 0x120], esi
jb 0x43987f
mov ecx, dword [ebp - 0x134]
push ecx
call fcn.0046f1aa
add esp, 4
mov dword [ebp - 0x120], 7
mov dword [ebp - 0x124], edi
xor edx, edx
mov word [ebp - 0x134], dx
mov dword [ebp - 4], 0xd
test bl, 1
je 0x4398cb
and ebx, 0xfffffffe
mov dword [ebp + 0x60], ebx
cmp dword [ebp + 0x48], esi
jb 0x4398bb
mov eax, dword [ebp + 0x34]
push eax
call fcn.0046f1aa
add esp, 4
mov dword [ebp + 0x48], 7
mov dword [ebp + 0x44], edi
xor ecx, ecx
mov word [ebp + 0x34], cx
cmp byte [ebp + 0x6f], 0
je 0x43a019
lea edx, [ebp - 0xe8]
push edx
lea ecx, [ebp - 0xb0]
call fcn.00429060
mov dword [ebp - 4], 0x1b
push edi
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.0042b4d0
add esp, 0xc
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xe8]
call fcn.00424290
mov byte [ebp - 4], 0x1f
test ebx, 0x1000
je 0x43992f
and ebx, 0xffffefff
mov dword [ebp + 0x60], ebx
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x7c]
call fcn.00424290
mov al, 0x21
mov byte [ebp - 4], al
test ebx, 0x800
je 0x439953
and ebx, 0xfffff7ff
mov dword [ebp + 0x60], ebx
mov byte [ebp - 4], al
lea ecx, [ebp - 0x9c]
call fcn.00424290
mov byte [ebp - 4], 0x23
test ebx, 0x400
je 0x439974
and ebx, 0xfffffbff
mov dword [ebp + 0x60], ebx
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x30]
call fcn.00424290
mov al, 0x25
mov byte [ebp - 4], al
test ebx, 0x200
je 0x439995
and ebx, 0xfffffdff
mov dword [ebp + 0x60], ebx
mov byte [ebp - 4], al
lea ecx, [ebp - 0x50]
call fcn.00424290
mov edi, 0x27
mov byte [ebp - 4], 0x27
test ebx, 0x100
je 0x4399bb
and ebx, 0xfffffeff
mov dword [ebp + 0x60], ebx
mov byte [ebp - 4], 0x27
lea ecx, [ebp]
call fcn.00424290
mov ecx, dword [ebp - 0x124]
mov eax, dword [ecx]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x110], eax
lea esi, [ebp - 0x114]
mov dword [ebp - 0xc8], esi
mov dword [ebp - 4], 0x2e
test ebx, 0x80000
je 0x439a04
and ebx, 0xfff7ffff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp - 0xe8]
call fcn.00426810
mov dword [ebp - 4], 0x2d
test ebx, 0x40000
je 0x439a24
and ebx, 0xfffbffff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp - 0x7c]
call fcn.00426810
mov dword [ebp - 4], 0x2c
test ebx, 0x20000
je 0x439a47
and ebx, 0xfffdffff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp - 0x9c]
call fcn.00426810
mov dword [ebp - 4], 0x2b
test ebx, 0x10000
je 0x439a67
and ebx, 0xfffeffff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp - 0x30]
call fcn.00426810
mov dword [ebp - 4], 0x2a
test ebx, 0x8000
je 0x439a87
and ebx, 0xffff7fff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp - 0x50]
call fcn.00426810
mov dword [ebp - 4], 0x29
test ebx, 0x4000
je 0x439aa7
and ebx, 0xffffbfff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp]
call fcn.00426810
mov dword [ebp - 4], edi
test ebx, 0x2000
je 0x439ac3
and ebx, 0xffffdfff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp + 0x2c]
call fcn.00426810
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x118], eax
lea edx, [ebp - 0x11c]
mov dword [ebp + 0x4c], edx
mov dword [ebp - 4], 0x35
test ebx, 0x4000000
je 0x439b07
and ebx, 0xfbffffff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp - 0xe8]
call fcn.00426810
mov dword [ebp - 4], 0x34
test ebx, 0x2000000
je 0x439b27
and ebx, 0xfdffffff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp - 0x7c]
call fcn.00426810
mov dword [ebp - 4], 0x33
test ebx, 0x1000000
je 0x439b4a
and ebx, 0xfeffffff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp - 0x9c]
call fcn.00426810
mov dword [ebp - 4], 0x32
test ebx, 0x800000
je 0x439b6a
and ebx, 0xff7fffff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp - 0x30]
call fcn.00426810
mov dword [ebp - 4], 0x31
test ebx, 0x400000
je 0x439b8a
and ebx, 0xffbfffff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp - 0x50]
call fcn.00426810
mov dword [ebp - 4], 0x30
test ebx, 0x200000
je 0x439baa
and ebx, 0xffdfffff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp]
call fcn.00426810
mov dword [ebp - 4], edi
test ebx, 0x100000
je 0x439bc6
and ebx, 0xffefffff
mov dword [ebp + 0x60], ebx
lea ecx, [ebp + 0x2c]
call fcn.00426810
mov bl, 1
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test bl, bl
je 0x439bf3
mov eax, dword [esi]
test eax, eax
je 0x439bdf
mov ecx, dword [ebp + 0x4c]
cmp eax, dword [ecx]
je 0x439be4
call fcn.004706a8
mov edx, dword [esi + 4]
mov eax, dword [ebp + 0x4c]
cmp edx, dword [eax + 4]
je 0x439bf3
mov bl, 1
jmp 0x439bf5
xor bl, bl
mov dword [ebp - 4], 0x3b
test dword [ebp + 0x60], 0x40000000
je 0x439c1e
and dword [ebp + 0x60], 0xbfffffff
mov dword [ebp - 4], 0x3b
lea ecx, [ebp - 0x15c]
call fcn.00424290
mov dword [ebp - 4], 0x27
test dword [ebp + 0x60], 0x20000000
je 0x439c44
and dword [ebp + 0x60], 0xdfffffff
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x19c]
call fcn.00424290
test bl, bl
je 0x43a008
xor bl, bl
push 0
push esi
call fcn.00406b20
add esp, 8
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
xor ecx, ecx
mov word [ebp - 0x28], cx
push 0xffffffffffffffff
push ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040f6a0
mov dword [ebp - 4], 0x42
test byte [ebp + 0x5c], 1
je 0x439c95
and dword [ebp + 0x5c], 0xfffffffe
lea ecx, [ebp - 0x1dc]
call fcn.00426810
mov byte [ebp - 4], 0x43
test dword [ebp + 0x60], 0x80000000
je 0x439cb4
and dword [ebp + 0x60], 0x7fffffff
lea ecx, [ebp - 0x17c]
call fcn.00426810
test bl, bl
jne 0x439f7f
mov byte [ebp + 0x20], bl
mov byte [ebp - 4], 0x45
mov byte [ebp - 0xa8], bl
mov byte [ebp - 4], 0x47
mov edi, 7
mov dword [ebp - 0x34], edi
xor esi, esi
mov dword [ebp - 0x38], esi
xor edx, edx
mov word [ebp - 0x48], dx
mov byte [ebp - 4], 0x48
mov dword [ebp + 0x1c], edi
mov dword [ebp + 0x18], esi
xor eax, eax
mov word [ebp + 8], ax
mov byte [ebp - 4], 0x49
lea ecx, [ebp + 0x6f]
push ecx
lea edx, [ebp + 0x6f]
push edx
lea ecx, [ebp - 0xe8]
call fcn.004138b0
mov byte [ebp - 4], 0x4b
push esi
push esi
push 0x20019
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0xbc]
push ecx
lea edx, [ebp + 0x20]
push edx
call fcn.0042f140
add esp, 0x18
test eax, eax
jne 0x439dfb
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x44], esi
mov word [ebp + 0x34], ax
push 9
push str.LogFilter
lea ecx, [ebp + 0x30]
call fcn.0040faf0
mov byte [ebp - 4], 0x4c
mov ebx, dword [ebp + 0x5c]
or ebx, 2
mov dword [ebp + 0x5c], ebx
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp + 0x30]
push edx
lea ecx, [ebp + 0x24]
call fcn.00416840
test eax, eax
jne 0x439dfe
push str.LogPrinter
lea ecx, [ebp - 0x98]
call fcn.00413620
mov dword [ebp - 4], 0x4d
or ebx, 4
mov dword [ebp + 0x5c], ebx
lea eax, [ebp + 4]
push eax
lea ecx, [ebp - 0x98]
push ecx
lea ecx, [ebp + 0x24]
call fcn.00416840
test eax, eax
jne 0x439dfe
push str.LogManagers
lea ecx, [ebp - 0x78]
call fcn.00413620
mov dword [ebp - 4], 0x4e
or ebx, 8
mov dword [ebp + 0x5c], ebx
push esi
push esi
push 0x20019
lea edx, [ebp - 0x78]
push edx
mov eax, dword [ebp + 0x24]
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0042f140
add esp, 0x18
test eax, eax
jne 0x439dfe
lea edx, [ebp - 0xe8]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041ddf0
test eax, eax
jne 0x439dfe
mov byte [ebp + 0x73], 1
jmp 0x439e02
mov ebx, dword [ebp + 0x5c]
mov byte [ebp + 0x73], 0
mov dword [ebp - 4], 0x4d
test bl, 8
je 0x439e32
and ebx, 0xfffffff7
mov dword [ebp + 0x5c], ebx
cmp dword [ebp - 0x60], 8
jb 0x439e26
mov eax, dword [ebp - 0x74]
push eax
call fcn.0046f1aa
add esp, 4
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x64], esi
xor ecx, ecx
mov word [ebp - 0x74], cx
mov dword [ebp - 4], 0x4c
test bl, 4
je 0x439e6b
and ebx, 0xfffffffb
mov dword [ebp + 0x5c], ebx
cmp dword [ebp - 0x80], 8
jb 0x439e59
mov edx, dword [ebp - 0x94]
push edx
call fcn.0046f1aa
add esp, 4
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x84], esi
xor eax, eax
mov word [ebp - 0x94], ax
mov dword [ebp - 4], 0x4b
test bl, 2
je 0x439e9b
and ebx, 0xfffffffd
mov dword [ebp + 0x5c], ebx
cmp dword [ebp + 0x48], 8
jb 0x439e8f
mov ecx, dword [ebp + 0x34]
push ecx
call fcn.0046f1aa
add esp, 4
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x44], esi
xor edx, edx
mov word [ebp + 0x34], dx
cmp byte [ebp + 0x73], 0
je 0x439eca
mov byte [ebp - 4], 0x4f
lea eax, [ebp + 0x54]
push eax
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp + 4]
push edx
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.00438fc0
mov dword [ebp - 4], 0x4b
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0xe8]
call fcn.00424290
mov byte [ebp - 4], 0x48
mov edi, 8
cmp dword [ebp + 0x1c], edi
jb 0x439ef3
mov ecx, dword [ebp + 8]
push ecx
call fcn.0046f1aa
add esp, 4
mov ebx, 7
mov dword [ebp + 0x1c], ebx
xor esi, esi
mov dword [ebp + 0x18], esi
xor edx, edx
mov word [ebp + 8], dx
mov byte [ebp - 4], 0x47
cmp dword [ebp - 0x34], edi
jb 0x439f1b
mov eax, dword [ebp - 0x48]
push eax
call fcn.0046f1aa
add esp, 4
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], esi
xor ecx, ecx
mov word [ebp - 0x48], cx
mov byte [ebp - 4], 0x45
cmp byte [ebp - 0xa8], cl
je 0x439f47
mov edx, dword [ebp - 0xa4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 0xa8], 0
mov byte [ebp - 4], 0x43
cmp byte [ebp + 0x20], 0
je 0x439f5f
mov eax, dword [ebp + 0x24]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp + 0x20], 0
mov bl, 1
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [ebp - 0xc8]
jmp 0x439cb4
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x14], 8
jb 0x439f95
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.0046f1aa
add esp, 4
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
xor edx, edx
mov word [ebp - 0x28], dx
mov ecx, esi
call fcn.004034a0
mov dword [ebp - 4], 0x37
test dword [ebp + 0x60], 0x10000000
je 0x439fd9
and dword [ebp + 0x60], 0xefffffff
mov dword [ebp - 4], 0x37
lea ecx, [ebp - 0x1bc]
call fcn.00424290
mov dword [ebp - 4], 0x27
test dword [ebp + 0x60], 0x8000000
je 0x439bce
and dword [ebp + 0x60], 0xf7ffffff
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1fc]
call fcn.00424290
jmp 0x439bce
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x13c]
call fcn.00424290
jmp 0x43a01f
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 0xb
cmp byte [ebp - 0x100], 0
je 0x43a03c
mov eax, dword [ebp - 0xfc]
push eax
call edi
mov byte [ebp - 0x100], 0
mov byte [ebp - 4], 9
cmp byte [ebp - 0xf4], 0
je 0x43a059
mov ecx, dword [ebp - 0xf0]
push ecx
call edi
mov byte [ebp - 0xf4], 0
mov byte [ebp - 4], 7
cmp byte [ebp - 0x10c], 0
je 0x43a076
mov edx, dword [ebp - 0x108]
push edx
call edi
mov byte [ebp - 0x10c], 0
mov byte [ebp - 4], 5
cmp byte [ebp - 0xc0], 0
je 0x43a093
mov eax, dword [ebp - 0xbc]
push eax
call edi
mov byte [ebp - 0xc0], 0
mov byte [ebp - 4], 3
cmp byte [ebp + 0x50], 0
je 0x43a0a7
mov ecx, dword [ebp + 0x54]
push ecx
call edi
mov byte [ebp + 0x50], 0
mov byte [ebp - 4], 1
cmp byte [ebp - 0xb4], 0
je 0x43a0c4
mov edx, dword [ebp - 0xb0]
push edx
call edi
mov byte [ebp - 0xb4], 0
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x5c], 0
je 0x43a0db
mov eax, dword [ebp - 0x58]
push eax
call edi
mov byte [ebp - 0x5c], 0
mov al, byte [ebp + 0x6f]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add ebp, 0x64
mov esp, ebp
pop ebp
ret 8