Function at 0x416e70
Capabilities:
Contain obfuscated stackstrings
Terminate thread
Timestomp file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d1be6
mov eax, dword fs:[0]
push eax
sub esp, 0xe4
mov eax, dword [0x6385e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc0], ecx
mov eax, dword [ebp - 0xc0]
mov dword [eax], vtable.HitmanPro35::HitmanPro.0
mov dword [ebp - 4], 0x2e
mov ecx, dword [ebp - 0xc0]
cmp dword [ecx + 0x1b4], 0
je 0x416f04
push 0x3e8
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x1b4]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x416ef1
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 0x1b4]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 0x1b4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0xc0]
cmp dword [edx + 0x1b8], 0
je 0x416f57
push 0x3e8
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 0x1b8]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x416f44
push 0xffffffffffffffff
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x1b8]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 0x1b8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xc0]
cmp dword [eax + 0x1a0], 0
je 0x416faa
push 0x3e8
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 0x1a0]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x416f97
push 0xffffffffffffffff
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 0x1a0]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x1a0]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0xc0]
cmp dword [ecx + 0x1a4], 0
je 0x416ffd
push 0x3e8
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x1a4]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x416fea
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 0x1a4]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 0x1a4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0xc0]
cmp dword [edx + 0x1a8], 0
je 0x417050
push 0x3e8
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 0x1a8]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x41703d
push 0xffffffffffffffff
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x1a8]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 0x1a8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xc0]
cmp dword [eax + 0x1ac], 0
je 0x4170a3
push 0x3e8
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 0x1ac]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x417090
push 0xffffffffffffffff
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 0x1ac]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x1ac]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0xc0]
cmp dword [ecx + 0x1b0], 0
je 0x4170f6
push 0x3e8
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x1b0]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x4170e3
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 0x1b0]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 0x1b0]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0xc0]
cmp dword [edx + 0x278], 0
je 0x417140
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 0x278]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 0
je 0x417136
push 1
mov eax, dword [ebp - 0x50]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x50]
mov eax, dword [edx]
call eax
mov dword [ebp - 0xc4], eax
jmp 0x417140
mov dword [ebp - 0xc4], 0
mov ecx, dword [ebp - 0xc0]
cmp dword [ecx + 0x27c], 0
je 0x41718a
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x27c]
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x58], ecx
cmp dword [ebp - 0x58], 0
je 0x417180
push 1
mov edx, dword [ebp - 0x58]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x58]
mov edx, dword [eax]
call edx
mov dword [ebp - 0xc8], eax
jmp 0x41718a
mov dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc0]
cmp dword [eax + 0x280], 0
je 0x4171d4
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 0x280]
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x4171ca
push 1
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x60]
mov eax, dword [edx]
call eax
mov dword [ebp - 0xcc], eax
jmp 0x4171d4
mov dword [ebp - 0xcc], 0
mov ecx, dword [ebp - 0xc0]
cmp dword [ecx + 0x288], 0
je 0x41721e
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x288]
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x68], ecx
cmp dword [ebp - 0x68], 0
je 0x417214
push 1
mov edx, dword [ebp - 0x68]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x68]
mov edx, dword [eax]
call edx
mov dword [ebp - 0xd0], eax
jmp 0x41721e
mov dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xc0]
cmp dword [eax + 0x284], 0
je 0x417268
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 0x284]
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x41725e
push 1
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x70]
mov eax, dword [edx]
call eax
mov dword [ebp - 0xd4], eax
jmp 0x417268
mov dword [ebp - 0xd4], 0
mov ecx, dword [ebp - 0xc0]
cmp dword [ecx + 0x28c], 0
je 0x4172b2
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x28c]
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x78], ecx
cmp dword [ebp - 0x78], 0
je 0x4172a8
push 1
mov edx, dword [ebp - 0x78]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x78]
mov edx, dword [eax]
call edx
mov dword [ebp - 0xd8], eax
jmp 0x4172b2
mov dword [ebp - 0xd8], 0
mov ecx, dword [ebp - 0xc0]
add ecx, 0x3c8
call fcn.00431e50
mov ecx, dword [ebp - 0xc0]
add ecx, 0x2ec
call fcn.00431e50
mov eax, dword [ebp - 0xc0]
add eax, 0x290
push eax
lea ecx, [ebp - 0x10]
call fcn.00401610
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x34]
call fcn.0047f810
lea ecx, [ebp - 0x84]
push ecx
mov ecx, dword [ebp - 0xc0]
add ecx, 0x2ac
call fcn.00435230
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
jmp 0x417321
lea ecx, [ebp - 0x34]
call fcn.00496880
lea ecx, [ebp - 0x8c]
push ecx
mov ecx, dword [ebp - 0xc0]
add ecx, 0x2ac
call fcn.0040c9a0
push eax
lea ecx, [ebp - 0x34]
call fcn.0047f720
movzx edx, al
test edx, edx
je 0x417397
lea ecx, [ebp - 0x34]
call fcn.00406340
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x94], eax
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x90], ecx
cmp dword [ebp - 0x90], 0
je 0x41738b
push 1
mov edx, dword [ebp - 0x90]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x90]
mov edx, dword [eax]
call edx
mov dword [ebp - 0xdc], eax
jmp 0x417395
mov dword [ebp - 0xdc], 0
jmp 0x417319
mov ecx, dword [ebp - 0xc0]
add ecx, 0x2ac
call fcn.00486ba0
mov eax, dword [ebp - 0xc0]
add eax, 0x268
push eax
lea ecx, [ebp - 0x28]
call fcn.00432820
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1c]
call fcn.004b34a0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x28]
call fcn.00432880
movzx eax, al
test eax, eax
je 0x417429
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 0
je 0x41741d
push 1
mov eax, dword [ebp - 0x98]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x98]
mov eax, dword [edx]
call eax
mov dword [ebp - 0xe0], eax
jmp 0x417427
mov dword [ebp - 0xe0], 0
jmp 0x4173cc
mov ecx, dword [ebp - 0xc0]
add ecx, 0x268
call fcn.004317a0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1c]
call fcn.004b3860
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x28]
call fcn.00432860
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x10]
call fcn.00401640
mov ecx, dword [ebp - 0xc0]
cmp dword [ecx + 0x1e0], 0
je 0x4174ba
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x1e0]
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xa0], ecx
cmp dword [ebp - 0xa0], 0
je 0x4174b0
push 1
mov edx, dword [ebp - 0xa0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa0]
mov edx, dword [eax]
call edx
mov dword [ebp - 0xe4], eax
jmp 0x4174ba
mov dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xc0]
cmp dword [eax + 0x1e4], 0
je 0x417517
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 0x1e4]
mov dword [ebp - 0xac], edx
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
je 0x41750d
push 1
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0xe8], eax
jmp 0x417517
mov dword [ebp - 0xe8], 0
call fcn.00422d30
movzx ecx, al
test ecx, ecx
je 0x417528
call fcn.004232b0
mov edx, dword [ebp - 0xc0]
movzx eax, byte [edx + 0x19d]
test eax, eax
jne 0x41754c
mov ecx, dword [ebp - 0xc0]
movzx edx, byte [ecx + 0x20]
test edx, edx
jne 0x41754c
call fcn.0042b170
mov eax, dword [ebp - 0xc0]
cmp dword [eax + 0x70], 0
je 0x4175a2
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 0x70]
mov dword [ebp - 0xb4], edx
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
je 0x417598
push 1
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [edx]
call eax
mov dword [ebp - 0xec], eax
jmp 0x4175a2
mov dword [ebp - 0xec], 0
mov ecx, dword [ebp - 0xc0]
cmp dword [ecx + 0x74], 0
je 0x4175f8
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x74]
mov dword [ebp - 0xbc], eax
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0xb8], ecx
cmp dword [ebp - 0xb8], 0
je 0x4175ee
push 1
mov edx, dword [ebp - 0xb8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb8]
mov edx, dword [eax]
call edx
mov dword [ebp - 0xf0], eax
jmp 0x4175f8
mov dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xc0]
movzx ecx, byte [eax + 0x38]
test ecx, ecx
je 0x417614
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x34]
call fcn.00545300
mov eax, dword [ebp - 0xc0]
movzx ecx, byte [eax + 0x30]
test ecx, ecx
je 0x417627
call fcn.005452c0
call fcn.005651b0
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov edx, dword [ebp - 0xc0]
movzx eax, byte [edx + 0x159]
test eax, eax
je 0x417701
mov ecx, dword [ebp - 0xc0]
movzx edx, byte [ecx + 0x1d]
test edx, edx
je 0x417701
lea ecx, [ebp - 0x44]
call fcn.004b34a0
mov byte [ebp - 4], 0x32
push 0x400
lea ecx, [ebp - 0x44]
call fcn.004b3dd0
lea ecx, [ebp - 0x44]
call fcn.004b9730
push eax
lea ecx, [ebp - 0x44]
call fcn.004553f0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push eax
lea ecx, [ebp - 0x44]
call fcn.004b5930
push 0
push 0
push 3
push 0
push 3
push 0x100
lea ecx, [ebp - 0x44]
call fcn.004553f0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
je 0x4176f5
lea eax, [ebp - 0x4c]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x38]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x4176eb
mov dword [ebp - 0x4c], 0x55555555
lea edx, [ebp - 0x4c]
push edx
push 0
push 0
mov eax, dword [ebp - 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
mov ecx, dword [ebp - 0x38]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x44]
call fcn.004b3860
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0xc0]
add ecx, 0x780
call fcn.00432310
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0xc0]
add ecx, 0x764
call fcn.00401330
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0xc0]
add ecx, 0x75c
call fcn.004012b0
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0xc0]
add ecx, 0x740
call fcn.00432020
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0xc0]
add ecx, 0x4fc
call fcn.00409100
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0xc0]
add ecx, 0x4e0
call fcn.00401330
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0xc0]
add ecx, 0x4c0
call fcn.00409100
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0xc0]
add ecx, 0x4a0
call fcn.00409100
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0xc0]
add ecx, 0x480
call fcn.00409100
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0xc0]
add ecx, 0x460
call fcn.00409100
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0xc0]
add ecx, 0x440
call fcn.00409100
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0xc0]
add ecx, 0x424
call fcn.00401330
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0xc0]
add ecx, 0x404
call fcn.00416e50
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0xc0]
add ecx, 0x3e8
call fcn.00401330
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0xc0]
add ecx, 0x3c8
call fcn.00416e50
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0xc0]
add ecx, 0x3ac
call fcn.00401330
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0xc0]
add ecx, 0x38c
call fcn.00409100
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0xc0]
add ecx, 0x36c
call fcn.00409100
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0xc0]
add ecx, 0x34c
call fcn.00409100
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0xc0]
add ecx, 0x32c
call fcn.00409100
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0xc0]
add ecx, 0x30c
call fcn.00409100
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0xc0]
add ecx, 0x2ec
call fcn.00416e50
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0xc0]
add ecx, 0x2cc
call fcn.00416e30
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0xc0]
add ecx, 0x2ac
call fcn.004850b0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0xc0]
add ecx, 0x290
call fcn.00401330
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0xc0]
add ecx, 0x268
call fcn.00431780
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0xc0]
add ecx, 0x248
call fcn.004850b0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0xc0]
add ecx, 0x230
call fcn.004312c0
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xc0]
add ecx, 0x218
call fcn.00430fe0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0xc0]
add ecx, 0x200
call fcn.00430d00
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0xc0]
add ecx, 0x1e8
call fcn.00430a20
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0xc0]
add ecx, 0x1d4
call fcn.004012b0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0xc0]
add ecx, 0x1cc
call fcn.004012b0
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0xc0]
add ecx, 0x1c0
call fcn.004b3860
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0xc0]
add ecx, 0x160
call fcn.00407c30
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0xc0]
add ecx, 0x14c
call fcn.004b3860
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xc0]
add ecx, 0x12c
call fcn.004ba7d0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0xc0]
add ecx, 0x114
call fcn.004b3860
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0xc0]
add ecx, 0x108
call fcn.004b3860
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xc0]
add ecx, 0xf0
call fcn.00407c30
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xc0]
add ecx, 0xdc
call fcn.004b3860
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0xc0]
add ecx, 0xd0
call fcn.004b3860
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xc0]
add ecx, 0xb4
call fcn.00401330
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xc0]
add ecx, 0xa8
call fcn.004b3860
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xc0]
add ecx, 0x54
call fcn.00401330
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0xc0]
add ecx, 0x3c
call fcn.00430780
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc0]
add ecx, 0x24
call fcn.004b3860
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret