Function at 0x776cb0
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x3e
push 0
push 0
dec ecx
jne 0x776cb8
push ebx
push esi
push edi
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x44]
mov edx, dword [0x770934]
call fcn.0040b37c
lea eax, [ebp - 0x74]
mov edx, dword [0x770934]
call fcn.0040b37c
xor eax, eax
push ebp
push 0x77885f
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x776e50
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x79e42c]
cmp dword [eax], 6
jge 0x776d6a
lea eax, [ebp - 8]
call fcn.00779388
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 8]
call fcn.00421c3c
mov edx, dword [ebp - 0xb4]
mov eax, 0x77887c
call fcn.0042a450
mov ecx, eax
add ecx, 3
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040af10
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 8]
call fcn.00779024
mov edx, dword [ebp - 0xb8]
lea eax, [ebp - 8]
call fcn.0040a33c
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 8]
call fcn.00779608
mov eax, dword [0x79e42c]
cmp dword [eax], 6
jl 0x776dd7
lea eax, [ebp - 8]
call fcn.007793d0
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 8]
call fcn.00421c3c
mov edx, dword [ebp - 0xbc]
mov eax, 0x77887c
call fcn.0042a450
mov ecx, eax
add ecx, 3
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040af10
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 8]
call fcn.00779024
mov edx, dword [ebp - 0xc0]
lea eax, [ebp - 8]
call fcn.0040a33c
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 8]
call fcn.00779608
lea eax, [ebp - 4]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x778894
call fcn.004232fc
mov edx, eax
inc edx
mov ecx, 0x7fffffff
mov eax, dword [ebp - 8]
call fcn.0040af10
lea eax, [ebp - 4]
push eax
lea edx, [ebp - 0xc4]
mov eax, dword [ebp - 4]
call fcn.00421c3c
mov edx, dword [ebp - 0xc4]
mov eax, 0x77887c
call fcn.0042a450
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040af10
lea edx, [ebp - 0xc8]
mov eax, dword [ebp - 4]
call fcn.00421c3c
mov edx, dword [ebp - 0xc8]
lea eax, [ebp - 4]
call fcn.0040a33c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x776e5a
mov dl, 1
mov eax, dword [0x5f83e4]
call fcn.005fe904
mov dword [ebp - 0x8c], eax
xor eax, eax
push ebp
push 0x776eee
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0xd0]
mov eax, dword [0x79e42c]
mov eax, dword [eax]
call fcn.004226e4
push dword [ebp - 0xd0]
push 0x7788a4
lea edx, [ebp - 0xd4]
mov eax, dword [0x79eb78]
mov eax, dword [eax]
call fcn.004226e4
push dword [ebp - 0xd4]
lea eax, [ebp - 0xcc]
mov edx, 3
call fcn.0040ae28
mov eax, dword [ebp - 0xcc]
push eax
mov ecx, 0x7788b4
mov dl, 1
mov eax, dword [0x5f774c]
call fcn.005fd90c
mov edx, eax
mov eax, dword [ebp - 0x8c]
call fcn.005feb44
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x776f18
xor eax, eax
push ebp
push 0x776f63
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [0x79e814]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x5f7e84]
call fcn.005fe34c
push eax
mov ecx, 0x7788d0
mov dl, 1
mov eax, dword [0x5f774c]
call fcn.005fd8b8
mov edx, eax
mov eax, dword [ebp - 0x8c]
call fcn.005feb44
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x776f9a
xor eax, eax
push ebp
push 0x776fe2
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xd8]
call fcn.007764a4
mov eax, dword [ebp - 0xd8]
push eax
mov ecx, 0x7788e8
mov dl, 1
mov eax, dword [0x5f774c]
call fcn.005fd90c
mov edx, eax
mov eax, dword [ebp - 0x8c]
call fcn.005feb44
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77700c
xor eax, eax
push ebp
push 0x777054
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xdc]
call fcn.007765ec
mov eax, dword [ebp - 0xdc]
push eax
mov ecx, 0x7788fc
mov dl, 1
mov eax, dword [0x5f774c]
call fcn.005fd90c
mov edx, eax
mov eax, dword [ebp - 0x8c]
call fcn.005feb44
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77707e
xor eax, eax
push ebp
push 0x7770c6
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xe0]
call fcn.00776abc
mov eax, dword [ebp - 0xe0]
push eax
mov ecx, 0x778910
mov dl, 1
mov eax, dword [0x5f774c]
call fcn.005fd90c
mov edx, eax
mov eax, dword [ebp - 0x8c]
call fcn.005feb44
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7770f0
xor eax, eax
push ebp
push 0x777138
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xe4]
call fcn.0077603c
mov eax, dword [ebp - 0xe4]
push eax
mov ecx, 0x778928
mov dl, 1
mov eax, dword [0x5f774c]
call fcn.005fd90c
mov edx, eax
mov eax, dword [ebp - 0x8c]
call fcn.005feb44
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x777162
xor eax, eax
push ebp
push 0x7771aa
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xe8]
call fcn.00776098
mov eax, dword [ebp - 0xe8]
push eax
mov ecx, 0x77893c
mov dl, 1
mov eax, dword [0x5f774c]
call fcn.005fd90c
mov edx, eax
mov eax, dword [ebp - 0x8c]
call fcn.005feb44
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7771d4
xor eax, eax
push ebp
push 0x77721c
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xec]
call fcn.00776470
mov eax, dword [ebp - 0xec]
push eax
mov ecx, 0x778954
mov dl, 1
mov eax, dword [0x5f774c]
call fcn.005fd90c
mov edx, eax
mov eax, dword [ebp - 0x8c]
call fcn.005feb44
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x777246
mov dl, 1
mov eax, dword [0x5f83e4]
call fcn.005fe904
mov dword [ebp - 0x7c], eax
lea edx, [ebp - 0x10]
mov eax, 0x77896c
call fcn.0042c230
cmp dword [ebp - 0x10], 0
jne 0x777275
lea edx, [ebp - 0x10]
mov eax, 0x778990
call fcn.0042c230
xor eax, eax
push ebp
push 0x7772a2
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [0x79ed98]
mov ecx, dword [ecx]
mov edx, 0x7789b8
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7772bb
xor eax, eax
push ebp
push 0x77731f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x79edf4]
cmp byte [eax], 0
jne 0x7772f5
mov ecx, 0x56
mov dl, 1
mov eax, dword [0x5f7e84]
call fcn.005fe34c
mov ecx, eax
mov edx, 0x7789cc
mov eax, dword [ebp - 0x7c]
call fcn.005feb88
jmp 0x777315
mov ecx, 0x40
mov dl, 1
mov eax, dword [0x5f7e84]
call fcn.005fe34c
mov ecx, eax
mov edx, 0x7789cc
mov eax, dword [ebp - 0x7c]
call fcn.005feb88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x777346
xor eax, eax
push ebp
push 0x77737c
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xf0]
call fcn.00775fcc
mov ecx, dword [ebp - 0xf0]
mov edx, 0x7789f8
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x777395
xor eax, eax
push ebp
push 0x7773de
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0xf8]
xor eax, eax
call fcn.00406f7c
mov eax, dword [ebp - 0xf8]
lea edx, [ebp - 0xf4]
call fcn.004234e4
mov ecx, dword [ebp - 0xf4]
mov edx, 0x778a1c
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7773f7
xor eax, eax
push ebp
push 0x777432
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [0x79e814]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x5f7e84]
call fcn.005fe34c
mov ecx, eax
mov edx, 0x778a40
mov eax, dword [ebp - 0x7c]
call fcn.005feb88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x777459
xor eax, eax
push ebp
push 0x777494
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [0x79ee14]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x5f7e84]
call fcn.005fe34c
mov ecx, eax
mov edx, 0x778a5c
mov eax, dword [ebp - 0x7c]
call fcn.005feb88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7774bb
xor eax, eax
push ebp
push 0x777507
push dword fs:[eax]
mov dword fs:[eax], esp
movzx eax, byte [0x778a80]
push eax
lea eax, [ebp - 0xfc]
push eax
mov ecx, 0x778a90
mov edx, 0x778894
mov eax, dword [ebp - 8]
call fcn.0042a640
mov ecx, dword [ebp - 0xfc]
mov edx, 0x778aa8
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x777520
xor eax, eax
push ebp
push 0x777562
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp - 0x24], 0
je 0x777546
mov ecx, dword [ebp - 0x24]
mov edx, 0x778ad4
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
jmp 0x777558
mov ecx, 0x778b04
mov edx, 0x778ad4
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77757e
xor eax, eax
push ebp
push 0x77764a
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp - 0x40], 0
je 0x7775f0
lea ecx, [ebp - 0x104]
mov edx, 0x778b14
mov eax, 0x778b2c
call fcn.00779e28
push dword [ebp - 0x104]
lea ecx, [ebp - 0x108]
mov edx, 0x778b40
mov eax, 0x778b58
call fcn.00779e28
push dword [ebp - 0x108]
push 0x778b6c
lea eax, [ebp - 0x100]
mov edx, 3
call fcn.0040ae28
mov edx, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
jmp 0x777640
lea ecx, [ebp - 0x10c]
mov edx, 0x778b84
mov eax, 0x778b9c
call fcn.00779e28
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x110]
mov edx, 0x778bb4
mov eax, 0x778bd0
call fcn.00779e28
mov edx, dword [ebp - 0x110]
pop eax
call fcn.0040ad48
mov edx, dword [ebp - 0x10c]
mov ecx, 0x778b04
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7776a4
xor eax, eax
push ebp
push 0x7776df
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x11c]
mov eax, 0x778bd8
call fcn.00779278
mov ecx, dword [ebp - 0x11c]
mov edx, 0x778bec
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7776f8
xor edx, edx
push ebp
push 0x777765
push dword fs:[edx]
mov dword fs:[edx], esp
mov dword [ebp - 0x90], 0x101
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x90]
call fcn.0040acc8
push 0
push 0
call sub.user32.dll_GetWindowLongW
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xc]
call fcn.0040a494
push eax
call sub.advapi32.dll_GetUserNameW
mov edx, dword [ebp - 0x90]
dec edx
lea eax, [ebp - 0xc]
call fcn.0040acc8
mov ecx, dword [ebp - 0xc]
mov edx, 0x778c08
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77777e
xor eax, eax
push ebp
push 0x7777a6
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [ebp - 0x10]
mov edx, 0x778c28
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7777bf
xor eax, eax
push ebp
push 0x7777ea
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [ebp - 0x8c]
mov edx, 0x7789b8
mov eax, dword [ebp - 0x7c]
call fcn.005feb88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x777803
xor eax, eax
push ebp
push 0x77782f
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00776644
mov ecx, eax
mov edx, 0x778c44
mov eax, dword [ebp - 0x7c]
call fcn.005feb88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x777848
xor eax, eax
push ebp
push 0x77787e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x120]
call fcn.0077612c
mov ecx, dword [ebp - 0x120]
mov edx, 0x778c58
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x777897
xor eax, eax
push ebp
push 0x7778cd
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x124]
call fcn.00776464
mov ecx, dword [ebp - 0x124]
mov edx, 0x778c6c
mov eax, dword [ebp - 0x7c]
call fcn.005febc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7778e6
mov dl, 1
mov eax, dword [0x5f9544]
call fcn.005ffc98
mov dword [ebp - 0x84], eax
xor eax, eax
mov dword [ebp - 0x88], eax
mov dl, 1
mov eax, dword [0x76fa4c]
call fcn.007700f0
mov dword [ebp - 0x94], eax
mov dl, 1
mov eax, dword [0x48f850]
call fcn.004b2eb4
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
mov byte [eax + 0x39], 0
mov dl, 1
mov eax, dword [0x48f850]
call fcn.004b2eb4
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov byte [eax + 0x39], 0
xor eax, eax
push ebp
push 0x778473
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00773ee0
test al, al
je 0x7780bd
mov ecx, 0xf023f
mov dl, 1
mov eax, dword [0x5036e4]
call fcn.00504874
mov dword [ebp - 0xa8], eax
xor eax, eax
push ebp
push 0x777b34
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000001
mov eax, dword [ebp - 0xa8]
call fcn.00504918
mov edx, 0x778c80
mov eax, dword [ebp - 0xa8]
call fcn.00504ba4
mov dl, 1
mov eax, dword [0x48f850]
call fcn.004b2eb4
mov dword [ebp - 0xac], eax
xor eax, eax
push ebp
push 0x777b14
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 0xa8]
call fcn.00504fe8
mov eax, dword [ebp - 0xa8]
call fcn.005048e8
mov eax, dword [ebp - 0xac]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x777b06
inc esi
xor ebx, ebx
cmp dword [ebp - 0xb0], 0
jne 0x777a1a
mov dl, 1
mov eax, dword [0x5f9544]
call fcn.005ffc98
mov dword [ebp - 0xb0], eax
lea ecx, [ebp - 0x12c]
mov edx, ebx
mov eax, dword [ebp - 0xac]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x12c]
lea eax, [ebp - 0x128]
mov edx, 0x778cf4
call fcn.0040ada0
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0xa8]
call fcn.00504ba4
test al, al
je 0x777af3
lea ecx, [ebp - 0x130]
mov edx, 0x778d6c
mov eax, dword [ebp - 0xa8]
call fcn.00505430
cmp dword [ebp - 0x130], 0
je 0x777af3
lea ecx, [ebp - 0x138]
mov edx, 0x778d90
mov eax, dword [ebp - 0xa8]
call fcn.00505430
mov eax, dword [ebp - 0x138]
lea edx, [ebp - 0x134]
call fcn.004219b8
mov edx, dword [ebp - 0x134]
mov ecx, 1
mov eax, 0x778db0
call fcn.0040b120
test eax, eax
jne 0x777af3
lea ecx, [ebp - 0x140]
mov edx, 0x778d6c
mov eax, dword [ebp - 0xa8]
call fcn.00505430
mov eax, dword [ebp - 0x140]
lea edx, [ebp - 0x13c]
call fcn.00776be8
mov edx, dword [ebp - 0x13c]
mov eax, dword [ebp - 0xb0]
call fcn.005fffb8
mov eax, dword [ebp - 0xa8]
call fcn.005048e8
inc ebx
dec esi
jne 0x7779ff
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x777b1b
ret
mov ecx, 0xf003f
mov dl, 1
mov eax, dword [0x5036e4]
call fcn.00504874
mov dword [ebp - 0xa8], eax
xor eax, eax
push ebp
push 0x77828c
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000001
mov eax, dword [ebp - 0xa8]
call fcn.00504918
mov edx, 0x778c80
mov eax, dword [ebp - 0xa8]
call fcn.00504ba4
mov dl, 1
mov eax, dword [0x48f850]
call fcn.004b2eb4
mov dword [ebp - 0xac], eax
xor eax, eax
push ebp
push 0x77826c
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 0xa8]
call fcn.00504fe8
mov eax, dword [ebp - 0xa8]
call fcn.005048e8
mov eax, dword [ebp - 0xac]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x77825e
inc esi
xor ebx, ebx
cmp dword [ebp - 0xb0], 0
jne 0x778172
mov dl, 1
mov eax, dword [0x5f9544]
call fcn.005ffc98
mov dword [ebp - 0xb0], eax
lea ecx, [ebp - 0x19c]
mov edx, ebx
mov eax, dword [ebp - 0xac]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x19c]
lea eax, [ebp - 0x198]
mov edx, 0x778cf4
call fcn.0040ada0
mov edx, dword [ebp - 0x198]
mov eax, dword [ebp - 0xa8]
call fcn.00504ba4
test al, al
je 0x77824b
lea ecx, [ebp - 0x1a0]
mov edx, 0x778d6c
mov eax, dword [ebp - 0xa8]
call fcn.00505430
cmp dword [ebp - 0x1a0], 0
je 0x77824b
lea ecx, [ebp - 0x1a8]
mov edx, 0x778d90
mov eax, dword [ebp - 0xa8]
call fcn.00505430
mov eax, dword [ebp - 0x1a8]
lea edx, [ebp - 0x1a4]
call fcn.004219b8
mov edx, dword [ebp - 0x1a4]
mov ecx, 1
mov eax, 0x778db0
call fcn.0040b120
test eax, eax
jne 0x77824b
lea ecx, [ebp - 0x1b0]
mov edx, 0x778d6c
mov eax, dword [ebp - 0xa8]
call fcn.00505430
mov eax, dword [ebp - 0x1b0]
lea edx, [ebp - 0x1ac]
call fcn.00776be8
mov edx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0xb0]
call fcn.005fffb8
mov eax, dword [ebp - 0xa8]
call fcn.005048e8
inc ebx
dec esi
jne 0x778157
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x778273
ret