Function at 0x4159f4
Capabilities:
Compare security identifiers
Get user security identifier

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x669dd0
push 0x480870
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x67432c]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30], eax
call fcn.0045250c
test al, al
je 0x415a39
loop 0x415a59
jmp 0xbf70f1ba
call fcn.00452215
test al, al
je 0x415a61
xor eax, 0x61a6d71
dec esp
pop esp
mov eax, dword [0xd737c8b7]
mov bh, 0x90
adc eax, dword [ebx + 0x7f2a9803]
fiadd word [0x16ce02e]
xor eax, 0x27d2a238
loopne 0x415ac7
add dword [0x27d2a238], esi
call fcn.00452032
test al, al
je 0x415a80
cmp esp, dword [ecx + 0x46991654]
push edi
mov esi, 0x189f22c5
fnstenv [edx]
pop ds
int 0x40
scasd eax, dword es:[edi]
cmp al, 0x84
sahf
and al, bh
inc ebp
test al, 0
add byte [eax], al
add bh, al
inc ebp
mov ah, 0
add byte [eax], al
add bh, al
inc ebp
aam 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x50], 0
call fcn.004520bc
add byte [eax], al
add bh, al
inc ebp
mov al, 0
add byte [eax], al
add al, ch
sbb eax, esi
add eax, dword [eax]
test al, al
je 0x415ac4
arpl word [0xc5cad68], cx
imul ebx, dword [edi - 0x4f], 0x35
jle 0x415b10
into
push esp
sub byte [edi - 0x30], 0xa9
add dword [eax], ebx
and byte [ebp - 0x62], al
pop ecx
bound ebp, qword [edx + 0x66]
in al, 0x4b
fmul st(7), st(0)
mov dword [ebp - 0x5c], 0
add byte [eax], al
add byte [eax], al
mov dword [ebp - 0x48], 0
call fcn.0045236e
test al, al
je 0x415af2
stosd dword es:[edi], eax
adc ecx, dword [edx + 0x4d732a8]
jno 0x415a92
pop edx
inc esp
xchg esi, eax
les ebp, [esi + 0x1f]
xor bl, bl
retf 0x6cb2
call fcn.00452101
test al, al
je 0x415b13
out dx, eax
in al, 0x52
out 0xf7, eax
sahf
imul edx, dword [edi - 0x1936c6a0], 0xffffffaa
mov ebx, 0x7bfb7f57
sub ebx, dword [ebx + ebp]
push 0x73e87b2d
mov byte [ebx], 0
call fcn.0045218b
test al, al
je 0x415b34
or edi, dword [edx + 0x18dffe52]
stosd dword es:[edi], eax
sbb eax, 0xd01d9a72
hlt
call fcn.00452329
test al, al
je 0x415b4f
pop esp
js 0x415b8b
jno 0x415bb3
inc esi
sub dword [edx + edx], ecx
fisubr word [edi]
mov eax, 0x5b7b3fd2
sub bh, al
inc ebp
les eax, [eax]
add byte [eax], al
add bh, al
inc ebp
int3
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x34], 0
call fcn.00452596
test al, al
je 0x415b76
cld
xchg ebx, eax
xor al, 0x61
cmp eax, 0x22fabfbe
mov al, byte [0x637e48c8]
int3
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
call fcn.004524c7
test al, al
je 0x415b9f
adc al, byte [ebp + 0x7c]
cmp eax, 0x5ee5e6b7
inc ebp
jl 0x415bcd
mov bh, 0xe6
in eax, 0x5e
test dh, cl
mov bh, 0x6b
int3
mov dword [ebp - 0x60], 0
call fcn.004523f8
test al, al
je 0x415bca
clc
loope 0x415be3
push es
mov ah, byte [eax]
pop edx
in eax, dx
loop 0x415c35
add ecx, dword [ecx]
jnp 0x415b8c
add eax, 0xd38b32e2
outsd dx, dword [esi]
mov edx, 0x5fedc746
pop esp
iretd
inc esi
invalid
call fcn.0045225a
add eax, dword [eax]
test al, al
je 0x415be8
invalid
pushal
or eax, 0xe85706ce
mov bh, 3
add byte [eax + eax*8 - 0x7367ed8c], al
jo 0x415c6c
call fcn.004523b3
test al, al
je 0x415c03
cwde
invalid
fstp xword [edi + ebx*8 + 0x17439a98]
mov esp, 0x770a62b1
xchg edi, eax
push esp
mov dword [ebp - 4], 0
call fcn.004522e4
test al, al
je 0x415c27
adc dword [ebx - 8], 7
mov dword [ecx], esp
cmp eax, 0x107d9f41
jns 0x415bc4
fsubr st(2), st(0)
mov bh, 0x19
push edi
lcall 3, 0xc4d5e8d9
call fcn.00452101
test al, al
je 0x415c4e
pop esp
sub al, 0x8e
sti
int 0xd7
xlatb
adc dword [ecx], esp
lea eax, [esp - 0x33]
xor ebx, dword [ebx + 0x207fcf46]
shl byte [ecx - 0x13], 0x61
mov ebx, ecx
pushfd
out dx, al
iretd
call fcn.004521d0
test al, al
je 0x415c76
cmp ecx, dword [ebp - 0x2a52117c]
xchg ebp, eax
test dh, ch
lodsd eax, dword [esi]
aad 0x95
jecxz 0x415ca6
and ecx, esi
in eax, dx
popal
sti
push 0x2a4b7515
invalid
aas
retf 0xa401
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0
lea eax, [ebp - 0x50]
push eax
push 0
push dword [ebp - 0x30]
jne 0x415c59
push 0
call dword [sym.imp.ADVAPI32.dll_LookupAccountNameW]
test eax, eax
jne 0x41642e
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
cmp eax, 0x7a
je 0x415cbb
call ebx
push eax
push str.LookupAccountName___failed._Error__d_n
call fcn.00416530
add esp, 8
jmp 0x41642e
call fcn.00451f63
test al, al
je 0x415cd4
add byte [edx], cl
or dword [ecx + 0x14a83f5f], ebx
bnd jge 0x415c7e
xchg byte [ecx + 0x44], bl
wait
sbb edi, edi
jne 0x415c87
push dword [ebp - 0x50]
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
pop esi
add byte [eax - 1], dl
adc eax, sym.imp.KERNEL32.dll_HeapAlloc
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x415d02
call ebx
push eax
push str.HeapAlloc___failed._Error__d_n
call fcn.00416530
add esp, 8
jmp 0x41642e
call fcn.004523f8
test al, al
je 0x415d28
inc esp
out dx, al
invalid
call fcn.0045250c
test al, al
je 0x415d4f
dec edx
xchg edi, eax
shl dword [eax], 0xb3
pop edi
loop 0x415cdd
wait
and eax, 0xd3a8012
push ebx
dec eax
loop 0x415d99
and cl, byte [eax - 0x4d]
or al, 0x14
inc ebx
jp 0x415dab
mov al, byte [0xb4458be9]
mov eax, dword [ebp - 0x4c]
add eax, eax
push eax
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x58], eax
test eax, eax
jne 0x415d86
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.HeapAlloc___failed._Error__d_n
call fcn.00416530
add esp, 8
jmp 0x41642e
call fcn.00452215
test al, al
je 0x415daa
push edx
pop ecx
sbb al, 0x70
invalid
invalid
call fcn.004520bc
test al, al
je 0x415dd1
or eax, 0x840003c3
sal byte [esi + ebx + 0x7f], 0x55
jg 0x415e0a
and byte [edi], dl
mov ebp, 0x3cd2f057
pop esi
int3
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x58]
lea eax, [ebp - 0x50]
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 0
call dword [sym.imp.ADVAPI32.dll_LookupAccountNameW]
test eax, eax
jne 0x415e0d
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.LookupAccountName___failed._Error__d_n
call fcn.00416530
add esp, 8
jmp 0x41642e
push es
add byte [eax], al
call fcn.004520bc
test al, al
je 0x415e35
add dword [ebp + 0x14], ecx
pushal
pop ebx
ret 0xb8e8
lea eax, [ebp - 0x48]
push eax
push 0
push 0
push 4
push dword [ebp - 0x54]
mov esi, dword [sym.imp.ADVAPI32.dll_GetFileSecurityW]
call esi
test eax, eax
jne 0x41642e
add byte [eax], al
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
cmp eax, 0x7a
je 0x415e74
call ebx
push eax
push str.GetFileSecurity___failed._Error__d_n
call fcn.00416530
add esp, 8
jmp 0x41642e
call fcn.00452329
test al, al
je 0x415e95
inc edi
fiadd word [esi + 0x33d29540]
sbb dword [ebx - 0x5ac820f8], esp
scasb al, byte es:[edi]
test al, dh
cmp eax, 0x70358b05
pushal
pop esi
add bh, bh
jne 0x415e50
push dword [ebp - 0x48]
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
mov dword [ebp - 0x5c], edi
test edi, edi
je 0x415ced
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x48]
push edi
push 4
push dword [ebp - 0x54]
call esi
test eax, eax
jne 0x415ed4
call ebx
push eax
push str.GetFileSecurity___failed._Error__d_n
jmp 0x415cf5
call fcn.00452596
test al, al
je 0x415ef3
movsd dword es:[edi], dword [esi]
adc dword [ecx*8 - 0x4dd73a16], ecx
or ebp, edi
adc bl, dl
and dl, cl
push ss
and ecx, dword [ebx + 0x5e61341d]
add byte [edx + 1], ch
push 1
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
jne 0x415f13
call ebx
push eax
push str.InitializeSecurityDescriptor___failed.Error__d_n
jmp 0x415cf5
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorDacl]
test eax, eax
jne 0x415f37
call ebx
push eax
push str.GetSecurityDescriptorDacl___failed._Error__d_n
jmp 0x415cf5
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 8
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp dword [ebp - 0x3c], ecx
cmove eax, ecx
mov dword [ebp - 0x38], eax
call fcn.004523f8
test al, al
je 0x415f7e
in al, 0x47
ljmp 0xc636
call fcn.0045225a
test al, al
je 0x415f9c
insd dword es:[edi], dx
xchg edi, eax
pop ebp
inc ecx
ror dword [edx + 0x6a], 0xc4
stosd dword es:[edi], eax
sub ebx, dword [edi]
mov ss, word [edx - 0x53a54a16]
xor eax, 0x12e890ad
les eax, [ebx]
add byte [eax + eax*8 + 0x272b1274], al
call fcn.004523b3
test al, al
je 0x415fb7
sub esp, dword [edi]
cmp edx, ecx
imul edi, dword [ecx], 0xffffffcc
mov al, 0xfa
les esi, [ecx + 0x33]
and byte [ebp + 0x5a5a1878], bl
cmp dword [ebp - 0x38], 0
je 0x415fdf
push 2
push 0xc
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x3c]
call dword [sym.imp.ADVAPI32.dll_GetAclInformation]
test eax, eax
jne 0x415fdf
call ebx
push eax
push str.GetAclInformation___failed._Error__d_n
jmp 0x415cf5
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
mov ecx, dword [ebp - 0x24]
add ecx, 8
add eax, ecx
mov dword [ebp - 0x30], eax
call fcn.004522e4
test al, al
je 0x416010
dec eax
dec eax
inc ebx
dec edi
xchg edx, eax
in eax, dx
fadd dword [edi - 0x10a1769b]
stc
mov cl, byte [edx]
clc
das
mov word [0xc0ece86c], cs
add eax, dword [eax]
call fcn.00452101
test al, al
je 0x416037
invalid
call fcn.004521d0
test al, al
je 0x41605f
inc ecx
xchg esi, eax
retf
mov esi, dword [ebp - 0x30]
push esi
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
mov dword [ebp - 0x34], edi
test edi, edi
jne 0x416088
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
jmp 0x415cef
push 2
push esi
push edi
call dword [sym.imp.ADVAPI32.dll_InitializeAcl]
test eax, eax
jne 0x4160a9
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.InitializeAcl___failed._Error__d_n
jmp 0x415cf5
call fcn.00451f63
test al, al
je 0x4160c2
fprem
popfd
sbb eax, dword [ecx + ebp*2]
jb 0x4160f5
imul eax, esp, 0x40
or al, 0x41
scasd eax, dword es:[edi]
xor si, si
xor esi, esi
mov dword [ebp - 0x6c], esi
cmp dword [ebp - 0x38], esi
je 0x416162
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x416162
xor ebx, ebx
mov dword [ebp - 0x64], ebx
mov edi, dword [sym.imp.ADVAPI32.dll_EqualSid]
mov dword [ebp - 0x44], ebx
cmp ebx, eax
jae 0x416162
lea eax, [ebp - 0x40]
push eax
push ebx
push dword [ebp - 0x3c]
call dword [sym.imp.ADVAPI32.dll_GetAce]
test eax, eax
jne 0x416112
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.GetAce___failed._Error__d_n
jmp 0x415cf5
mov eax, dword [ebp - 0x40]
test byte [eax + 1], 0x10
jne 0x416162
add eax, 8
push eax
push dword [ebp - 0x2c]
call edi
test eax, eax
jne 0x416159
mov ecx, dword [ebp - 0x40]
movzx eax, word [ecx + 2]
push eax
push ecx
push 0xffffffffffffffff
push 2
push dword [ebp - 0x34]
call dword [sym.imp.ADVAPI32.dll_AddAce]
test eax, eax
jne 0x416155
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.AddAce___failed._Error__d_n
jmp 0x415cf5
inc esi
mov dword [ebp - 0x6c], esi
inc ebx
mov dword [ebp - 0x64], ebx
mov eax, dword [ebp - 0x28]
jmp 0x4160e6
call fcn.004523f8
test al, al
je 0x416188
out dx, eax
in eax, 0x64
pop esi
adc bh, ch
push esi
cmpsd dword [esi], dword es:[edi]
daa
loop 0x416148
aam 0xdb
imul eax, dword [ebx + eax*8 + 0x4e], 0x63cadc79
or esp, dword [edx]
pop esi
pop es
cmpsd dword [esi], dword es:[edi]
cmp byte [edi + 0x61], bh
call fcn.0045250c
test al, al
je 0x4161af
mov cl, 0x50
pushfd
or eax, 0x8d7fa667
push 0xffffffffffffff91
cld
inc eax
outsd dx, dword [esi]
dec eax
cmpsb byte [esi], byte es:[edi]
les eax, [0x1d90ca17]
pop ebx
mov ch, 0xcf
stosb byte es:[edi], al
dec esi
ja 0x4161a7
add byte [eax + 0x54], ch
sbb dword [esi], 0x5e816c68
add bh, bh
adc eax, sym.imp.KERNEL32.dll_GetModuleHandleW
push str.AddAccessAllowedAceEx
push str.advapi32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push dword [ebp - 0x2c]
mov edi, dword [ebp - 0x34]
push dword [ebp + 0x10]
test eax, eax
je 0x4161f1
push 3
push 2
push edi
call eax
test eax, eax
jne 0x416211
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.AddAccessAllowedAceEx___failed._Error__d_n
jmp 0x415cf5
push 2
push edi
call dword [sym.imp.ADVAPI32.dll_AddAccessAllowedAce]
test eax, eax
jne 0x416211
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.AddAccessAllowedAce___failed._Error__d_n
jmp 0x415cf5
cmp dword [ebp - 0x38], 0
je 0x41627e
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x41627e
mov ebx, dword [ebp - 0x44]
cmp ebx, eax
jae 0x41627e
lea eax, [ebp - 0x40]
push eax
push ebx
push dword [ebp - 0x3c]
call dword [sym.imp.ADVAPI32.dll_GetAce]
test eax, eax
jne 0x41624a
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.GetAce___failed._Error__d_n
jmp 0x415cf5
xor al, 0x61
pop esi
add bh, bh
rcl dword [eax + 0x68]
in al, 0x80
pop esi
add cl, ch
stosd dword es:[edi], eax
cli
invalid
mov ecx, dword [ebp - 0x40]
movzx eax, word [ecx + 2]
push eax
push ecx
push 0xffffffffffffffff
push 2
push edi
call dword [sym.imp.ADVAPI32.dll_AddAce]
test eax, eax
jne 0x416275
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.AddAce___failed._Error__d_n
jmp 0x415cf5
inc ebx
mov dword [ebp - 0x64], ebx
mov eax, dword [ebp - 0x28]
jmp 0x416221
call fcn.0045236e
test al, al
je 0x41629e
das
and al, 4
adc edx, edx
pushfd
test byte [ecx], 0x86
cmp byte [ebx + 0x43], 0x1e
retf
call fcn.00452101
test al, al
je 0x4162bf
cdq
maskmovq mm1, mm5
dec eax
and dword [edi], 0xdd04d105
js 0x416239
push edi
mov al, 0x97
push 0
bound eax, qword [edx - 0x1708b02b]
invalid
call fcn.0045218b
test al, al
je 0x4162e0
and dword [esi - 0x64], 0x4e
dec edx
inc ecx
xlatb
call 0xd89e3597
fcmovne st(0), st(2)
xor bh, byte [ebp - 0x64b41ab1]
cmp eax, 0x6a66fa
push 0
push dword [ebp - 0x34]
push 1
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
test eax, eax
jne 0x41630b
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.SetSecurityDescriptorDacl___failed._Error__d_n
jmp 0x415cf5
push str.SetSecurityDescriptorControl
push str.advapi32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x41639d
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x44], 0
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x5c]
call dword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorControl]
test eax, eax
jne 0x41635e
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.GetSecurityDescriptorControl___failed.Error__d_n
jmp 0x415cf5
add cl, ch
xchg edi, eax
stc
invalid
mov eax, dword [ebp - 0x30]
test eax, 0x400
je 0x41636f
mov eax, 0x500
jmp 0x41637b
test eax, 0x1000
je 0x41639d
mov eax, 0x1000
push eax
push eax
lea eax, [ebp - 0x84]
push eax
call esi
test eax, eax
jne 0x41639d
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.SetSecurityDescriptorControl___failed.Error__d_n
jmp 0x415cf5
call fcn.0045250c
test al, al
je 0x4163b7
sal byte [ecx + edx + 0x51], 0xe4
loope 0x416358
push ecx
in al, 0xe1
scasb al, byte es:[edi]
add al, 0xf1
jb 0x41637c
jmp 0x7ed7d09f
call fcn.00452215
test al, al
je 0x4163df
xchg edi, eax
rcr byte [edx + 0x4ae67863], cl
and ah, byte [ebx + 0x78]
out 0x4a, al
sal dword fs:[ebp - 0x50], cl
fisub word [esi - 0x455e2d3e]
int1
jbe 0x4163e7
sbb eax, dword [ecx + ebx*2]
cmp al, byte [esp + eax*4 + 0x2be8a3e7]
call fcn.00452032
test al, al
je 0x4163fe
push ss
push cs
cmp al, 0xf7
js 0x41641e
jne 0x4163c3
add ebp, dword [eax - 0x7603adcc]
rcl byte [ebx], cl
mov byte [0xbab07557], al
xchg byte [esi - 0x837a73], al
invalid
lea eax, [ebp - 0x84]
push eax
push 4
push dword [ebp - 0x54]
call dword [sym.imp.ADVAPI32.dll_SetFileSecurityW]
test eax, eax
jne 0x416427
mov ecx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ecx
push eax
push str.SetFileSecurity___failed._Error__d_n
jmp 0x415cf5
jo 0x4163a3
pop esi
add cl, ch
into
clc
invalid
mov dword [ebp - 0x60], 1
mov dword [ebp - 4], 0xfffffffe
call fcn.004164a8
call fcn.004523f8
test al, al
je 0x416460
out dx, al
inc ebp
int1
push ecx
adc edi, ebx
cwde
xor byte [esi], 0x6f
jns 0x416435
in al, 0x1c
xchg ebx, eax
int3
call fcn.0045250c
test al, al
je 0x416487
pop esi
sti
mov ch, 0x5f
invalid
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0046d802
mov esp, ebp
pop ebp
ret 0xc