Function at 0x4083f0
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x436848
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x7b0
mov eax, dword [0x449144]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
call fcn.00402180
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x18
call fcn.00402180
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x14]
add ecx, 0x30
call fcn.00402180
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x14]
add ecx, 0x48
call fcn.00402180
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x14]
add ecx, 0x60
call fcn.00402180
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x14]
add ecx, 0x78
call fcn.00402180
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x14]
add ecx, 0x90
call fcn.00402180
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x14]
add ecx, 0xa8
call fcn.00402180
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x14]
add ecx, 0xc0
call fcn.00402180
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x14]
add ecx, 0xd8
call fcn.00402180
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x14]
add ecx, 0xf0
call fcn.00402180
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x14]
add ecx, 0x108
call fcn.00402180
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x14]
add ecx, 0x120
call fcn.00402180
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x138
call fcn.00402180
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x14]
add ecx, 0x150
call fcn.00402180
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x14]
add ecx, 0x168
call fcn.00402180
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x14]
add ecx, 0x180
call fcn.00402180
mov byte [ebp - 4], 0x10
xor eax, eax
mov byte [ebp - 0x28], al
xor ecx, ecx
mov byte [ebp - 0x15], cl
xor edx, edx
mov byte [ebp - 0x16], dl
movzx eax, byte [ebp - 0x28]
push eax
movzx ecx, byte [ebp - 0x15]
push ecx
movzx edx, byte [ebp - 0x16]
push edx
lea ecx, [ebp - 0x700]
call fcn.00406b70
mov ecx, eax
call fcn.0040d1b0
push eax
lea ecx, [ebp - 0x144]
call fcn.00402090
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x2ac]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x44], edx
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x44]
push eax
lea ecx, [ebp - 0x294]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x4c], edx
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x27c]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x50], eax
mov edx, dword [ebp - 0x50]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.004092f0
lea ecx, [ebp - 0x27c]
call fcn.00402b70
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x294]
call fcn.00402b70
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2ac]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x144]
call fcn.00402b70
xor eax, eax
mov byte [ebp - 0x17], al
xor ecx, ecx
mov byte [ebp - 0x18], cl
xor edx, edx
mov byte [ebp - 0x19], dl
movzx eax, byte [ebp - 0x17]
push eax
movzx ecx, byte [ebp - 0x18]
push ecx
movzx edx, byte [ebp - 0x19]
push edx
lea ecx, [ebp - 0x760]
call fcn.00406d00
mov ecx, eax
call fcn.0040d560
push eax
lea ecx, [ebp - 0x15c]
call fcn.00402090
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x2f4]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x58], edx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x58]
push eax
lea ecx, [ebp - 0x2dc]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x5c], eax
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x60], edx
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x64], eax
mov edx, dword [ebp - 0x64]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x18
call fcn.004092f0
lea ecx, [ebp - 0x2c4]
call fcn.00402b70
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2dc]
call fcn.00402b70
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x2f4]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x15c]
call fcn.00402b70
xor eax, eax
mov byte [ebp - 0x1a], al
xor ecx, ecx
mov byte [ebp - 0x1b], cl
xor edx, edx
mov byte [ebp - 0x1c], dl
movzx eax, byte [ebp - 0x1a]
push eax
movzx ecx, byte [ebp - 0x1b]
push ecx
movzx edx, byte [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x5f0]
call fcn.00406f20
mov ecx, eax
call fcn.0040cc80
push eax
lea ecx, [ebp - 0x174]
call fcn.00402090
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x33c]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x68], eax
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x6c], edx
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x324]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x70], eax
mov edx, dword [ebp - 0x70]
mov dword [ebp - 0x74], edx
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x74]
push eax
lea ecx, [ebp - 0x30c]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x78]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x48
call fcn.004092f0
lea ecx, [ebp - 0x30c]
call fcn.00402b70
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x324]
call fcn.00402b70
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x33c]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x174]
call fcn.00402b70
xor eax, eax
mov byte [ebp - 0x1d], al
xor ecx, ecx
mov byte [ebp - 0x1e], cl
xor edx, edx
mov byte [ebp - 0x1f], dl
movzx eax, byte [ebp - 0x1d]
push eax
movzx ecx, byte [ebp - 0x1e]
push ecx
movzx edx, byte [ebp - 0x1f]
push edx
lea ecx, [ebp - 0x630]
call fcn.00407000
mov ecx, eax
call fcn.0040cec0
push eax
lea ecx, [ebp - 0x18c]
call fcn.00402090
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x36c]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x7c], eax
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x80], edx
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x80]
push eax
lea ecx, [ebp - 0x354]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x84], eax
mov edx, dword [ebp - 0x84]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x60
call fcn.004092f0
lea ecx, [ebp - 0x354]
call fcn.00402b70
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x36c]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x18c]
call fcn.00402b70
xor eax, eax
mov byte [ebp - 0x20], al
xor ecx, ecx
mov byte [ebp - 0x21], cl
xor edx, edx
mov byte [ebp - 0x22], dl
movzx eax, byte [ebp - 0x20]
push eax
movzx ecx, byte [ebp - 0x21]
push ecx
movzx edx, byte [ebp - 0x22]
push edx
lea ecx, [ebp - 0x7c0]
call fcn.00407100
mov ecx, eax
call fcn.0040d560
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00402090
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x39c]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x88], eax
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x8c], edx
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x384]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x90], eax
mov edx, dword [ebp - 0x90]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0xa8
call fcn.004092f0
lea ecx, [ebp - 0x384]
call fcn.00402b70
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x39c]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1a4]
call fcn.00402b70
xor eax, eax
mov byte [ebp - 0x23], al
xor ecx, ecx
mov byte [ebp - 0x24], cl
xor edx, edx
mov byte [ebp - 0x25], dl
movzx eax, byte [ebp - 0x23]
push eax
movzx ecx, byte [ebp - 0x24]
push ecx
movzx edx, byte [ebp - 0x25]
push edx
lea ecx, [ebp - 0x670]
call fcn.004071f0
mov ecx, eax
call fcn.0040cec0
push eax
lea ecx, [ebp - 0x114]
call fcn.00402090
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x3cc]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x94], eax
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x98], edx
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x98]
push eax
lea ecx, [ebp - 0x3b4]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0x9c], eax
mov edx, dword [ebp - 0x9c]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x30
call fcn.004092f0
lea ecx, [ebp - 0x3b4]
call fcn.00402b70
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x3cc]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x114]
call fcn.00402b70
xor eax, eax
mov byte [ebp - 0x26], al
xor ecx, ecx
mov byte [ebp - 0x27], cl
xor edx, edx
mov byte [ebp - 0x3b], dl
movzx eax, byte [ebp - 0x26]
push eax
movzx ecx, byte [ebp - 0x27]
push ecx
movzx edx, byte [ebp - 0x3b]
push edx
lea ecx, [ebp - 0x540]
call fcn.00407290
mov ecx, eax
call fcn.0040ca20
push eax
lea ecx, [ebp - 0x1d4]
call fcn.00402090
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x3fc]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xa0], eax
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0xa4], edx
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x3e4]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xa8], eax
mov edx, dword [ebp - 0xa8]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x78
call fcn.004092f0
lea ecx, [ebp - 0x3e4]
call fcn.00402b70
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x3fc]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1d4]
call fcn.00402b70
xor eax, eax
mov byte [ebp - 0x29], al
xor ecx, ecx
mov byte [ebp - 0x2a], cl
xor edx, edx
mov byte [ebp - 0x2b], dl
movzx eax, byte [ebp - 0x29]
push eax
movzx ecx, byte [ebp - 0x2a]
push ecx
movzx edx, byte [ebp - 0x2b]
push edx
lea ecx, [ebp - 0x530]
call fcn.004072d0
mov ecx, eax
call fcn.0040ca20
push eax
lea ecx, [ebp - 0x1ec]
call fcn.00402090
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x42c]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xac], eax
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0xb0], edx
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x414]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xb4], eax
mov edx, dword [ebp - 0xb4]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x90
call fcn.004092f0
lea ecx, [ebp - 0x414]
call fcn.00402b70
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x42c]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1ec]
call fcn.00402b70
xor eax, eax
mov byte [ebp - 0x2c], al
xor ecx, ecx
mov byte [ebp - 0x2d], cl
xor edx, edx
mov byte [ebp - 0x2e], dl
movzx eax, byte [ebp - 0x2c]
push eax
movzx ecx, byte [ebp - 0x2d]
push ecx
movzx edx, byte [ebp - 0x2e]
push edx
lea ecx, [ebp - 0x560]
call fcn.00407310
mov ecx, eax
call fcn.0040caf0
push eax
lea ecx, [ebp - 0x204]
call fcn.00402090
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x204]
push eax
lea ecx, [ebp - 0x474]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xb8], eax
mov edx, dword [ebp - 0xb8]
mov dword [ebp - 0xbc], edx
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x45c]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xc0], eax
mov edx, dword [ebp - 0xc0]
mov dword [ebp - 0xc4], edx
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x444]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xc8], eax
mov edx, dword [ebp - 0xc8]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0xc0
call fcn.004092f0
lea ecx, [ebp - 0x444]
call fcn.00402b70
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x45c]
call fcn.00402b70
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x474]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x204]
call fcn.00402b70
xor eax, eax
mov byte [ebp - 0x2f], al
xor ecx, ecx
mov byte [ebp - 0x30], cl
xor edx, edx
mov byte [ebp - 0x31], dl
movzx eax, byte [ebp - 0x2f]
push eax
movzx ecx, byte [ebp - 0x30]
push ecx
movzx edx, byte [ebp - 0x31]
push edx
lea ecx, [ebp - 0x580]
call fcn.004069b0
mov ecx, eax
call fcn.0040caf0
push eax
lea ecx, [ebp - 0x21c]
call fcn.00402090
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x4a4]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xcc], eax
mov edx, dword [ebp - 0xcc]
mov dword [ebp - 0xd0], edx
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x48c]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xd4], eax
mov edx, dword [ebp - 0xd4]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0xd8
call fcn.004092f0
lea ecx, [ebp - 0x48c]
call fcn.00402b70
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x4a4]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x21c]
call fcn.00402b70
xor eax, eax
mov byte [ebp - 0x32], al
xor ecx, ecx
mov byte [ebp - 0x33], cl
xor edx, edx
mov byte [ebp - 0x34], dl
movzx eax, byte [ebp - 0x32]
push eax
movzx ecx, byte [ebp - 0x33]
push ecx
movzx edx, byte [ebp - 0x34]
push edx
lea ecx, [ebp - 0x5a0]
call fcn.00406a10
mov ecx, eax
call fcn.0040caf0
push eax
lea ecx, [ebp - 0x234]
call fcn.00402090
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x4d4]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xd8], eax
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0xdc], edx
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x4bc]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xe0], eax
mov edx, dword [ebp - 0xe0]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0xf0
call fcn.004092f0
lea ecx, [ebp - 0x4bc]
call fcn.00402b70
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x4d4]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x234]
call fcn.00402b70
xor eax, eax
mov byte [ebp - 0x35], al
xor ecx, ecx
mov byte [ebp - 0x36], cl
xor edx, edx
mov byte [ebp - 0x37], dl
movzx eax, byte [ebp - 0x35]
push eax
movzx ecx, byte [ebp - 0x36]
push ecx
movzx edx, byte [ebp - 0x37]
push edx
lea ecx, [ebp - 0x5c0]
call fcn.00406a70
mov ecx, eax
call fcn.0040caf0
push eax
lea ecx, [ebp - 0x12c]
call fcn.00402090
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x504]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xe4], eax
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0xe8], edx
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x4ec]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xec], eax
mov edx, dword [ebp - 0xec]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x108
call fcn.004092f0
lea ecx, [ebp - 0x4ec]
call fcn.00402b70
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x504]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x12c]
call fcn.00402b70
xor eax, eax
mov byte [ebp - 0x38], al
xor ecx, ecx
mov byte [ebp - 0x39], cl
xor edx, edx
mov byte [ebp - 0x3a], dl
movzx eax, byte [ebp - 0x38]
push eax
movzx ecx, byte [ebp - 0x39]
push ecx
movzx edx, byte [ebp - 0x3a]
push edx
lea ecx, [ebp - 0x6b0]
call fcn.00406ad0
mov ecx, eax
call fcn.0040cec0
push eax
lea ecx, [ebp - 0x1bc]
call fcn.00402090
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x24c]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xf0], eax
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0xf4], edx
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x51c]
push ecx
call fcn.0040dd60
add esp, 8
mov dword [ebp - 0xf8], eax
mov edx, dword [ebp - 0xf8]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x138
call fcn.004092f0
lea ecx, [ebp - 0x51c]
call fcn.00402b70
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x24c]
call fcn.00402b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1bc]
call fcn.00402b70
push 1
push 8
lea eax, [ebp - 0x264]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0040b6e0
mov dword [ebp - 0xfc], eax
mov ecx, dword [ebp - 0xfc]
push ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0x120
call fcn.004092f0
lea ecx, [ebp - 0x264]
call fcn.00402b70
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret