Function at 0x4182aa
Capabilities:
Get session user name

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xcd8
mov eax, dword [0x425124]
xor eax, ebp
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 0xc78], edx
push ebx
xor edx, edx
mov dword [ebp - 0xca4], eax
push esi
push edi
push 0x30
pop esi
mov ebx, ecx
mov word [ebp - 0xc84], ax
mov dword [ebp - 0xca0], eax
mov ecx, esi
mov word [ebp - 0xc88], ax
mov dword [ebp - 0xc9c], eax
mov word [ebp - 0xc90], ax
mov word [ebp - 0xc80], ax
mov word [ebp - 0xc7c], ax
mov word [ebp - 0xcb0], ax
mov word [ebp - 0xcac], ax
mov word [ebp - 0xc98], ax
mov word [ebp - 0xca8], ax
mov word [ebp - 0xc94], ax
mov dword [ebp - 0xc24], eax
mov dword [ebp - 0xc20], eax
mov dword [ebp - 0xc1c], eax
mov dword [ebp - 0xc18], eax
mov word [ebp - 0x814], ax
mov word [ebp - 0x21c], ax
mov word [ebp - 0x614], ax
lea eax, [ebp - 0xc54]
mov dword [ebp - 0xc68], edx
mov dword [ebp - 0xc74], edx
mov dword [ebp - 0xc8c], edx
mov dword [ebp - 0xc58], edx
mov dword [ebp - 0xc5c], edx
mov dword [ebp - 0xc60], edx
mov dword [ebp - 0xc70], edx
mov dword [ebp - 0xc6c], 1
mov dword [ebp - 0xcd4], 0xfe
mov dword [ebp - 0xc64], edx
mov dword [ebp - 0xcc4], edx
mov dword [ebp - 0xcd0], edx
mov dword [ebp - 0xcbc], edx
mov dword [ebp - 0xcc0], edx
mov dword [ebp - 0xcb4], edx
mov byte [eax], dl
inc eax
sub ecx, 1
jne 0x4183c0
mov word [ebp - 0xc54], si
lea edi, [ebp - 0x18]
mov esi, 0x402860
xor eax, eax
mov word [ebp - 0xc52], ax
mov word [ebp - 0xc28], ax
lea eax, [ebp - 0x18]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea esi, [ebx + 0x818]
push esi
call dword [0x42c2cc]
pop ecx
pop ecx
test eax, eax
je 0x41845d
mov ecx, 0xa5
call fcn.0041b556
push 2
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0041c015
mov ecx, 0xcd
call fcn.0041b556
push 2
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0041c015
xor ecx, ecx
call fcn.00416063
mov eax, dword [ebx + 0x1c14]
neg eax
sbb eax, eax
and eax, 0x6c052
add eax, 0x80004005
jmp 0x419174
mov ecx, esi
call fcn.0041bf7c
cmp eax, 0xee
jbe 0x418472
mov ecx, 0x8e
jmp 0x418425
lea ecx, [ebx + 0x11e4]
call fcn.0041bf7c
cmp eax, 0x106
jbe 0x41848b
mov ecx, 0x96
jmp 0x418425
xor esi, esi
cmp dword [ebx + 0x1bf0], esi
je 0x4184b4
test byte [ebx + 0x1be8], 8
je 0x4184b4
mov ecx, dword [ebx + 8]
call fcn.0040b53c
test eax, eax
je 0x4184b4
mov ecx, 0xae
jmp 0x418425
test byte [ebx + 0x1be8], 0x10
push 2
pop edi
je 0x4184f6
mov ecx, dword [ebx + 0xc]
call fcn.0041bf7c
test eax, eax
jne 0x4184f6
mov ecx, dword [ebx + 8]
call fcn.0040b53c
test eax, eax
jne 0x4184f6
mov ecx, 0x20a
call fcn.0041b556
push edi
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0041c015
xor esi, esi
cmp dword [ebp + 8], 0xa
jne 0x41850c
mov ecx, 0xc6
call fcn.0041b556
push edi
jmp 0x41842c
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x41851f
cmp word [eax], si
je 0x41851f
mov ecx, 0xc7
jmp 0x418501
mov eax, dword [ebp - 0xc78]
cmp dword [eax], esi
je 0x418574
lea eax, [ebp - 0xc24]
push eax
call dword [0x42c1c4]
movzx eax, word [ebp - 0xc1e]
mov dword [ebp - 0xca4], eax
mov word [ebp - 0xc84], ax
mov ax, word [ebp - 0xc22]
mov dword [ebp - 0xca0], eax
mov word [ebp - 0xc88], ax
mov ax, word [ebp - 0xc24]
mov dword [ebp - 0xc9c], eax
mov word [ebp - 0xc90], ax
jmp 0x4185c7
lea esi, [ebx + 0xdec]
mov ecx, esi
call fcn.0041bf7c
test eax, eax
je 0x4185c7
lea eax, [ebp - 0xc90]
mov ecx, esi
push eax
lea eax, [ebp - 0xc88]
push eax
lea edx, [ebp - 0xc84]
call fcn.0040d362
movzx eax, word [ebp - 0xc90]
mov dword [ebp - 0xc9c], eax
mov ax, word [ebp - 0xc88]
mov dword [ebp - 0xca0], eax
mov ax, word [ebp - 0xc84]
mov dword [ebp - 0xca4], eax
lea esi, [ebx + 0xfe8]
mov ecx, esi
call fcn.0041bf7c
test eax, eax
je 0x4185f5
lea eax, [ebp - 0xca8]
mov ecx, esi
push eax
lea eax, [ebp - 0xc94]
push eax
lea edx, [ebp - 0xc98]
call fcn.0040d362
jmp 0x41861c
mov eax, dword [ebp - 0xca4]
mov word [ebp - 0xc98], ax
mov eax, dword [ebp - 0xca0]
mov word [ebp - 0xc94], ax
mov eax, dword [ebp - 0xc9c]
mov word [ebp - 0xca8], ax
mov eax, dword [ebp - 0xc78]
xor edx, edx
cmp dword [eax + 4], edx
je 0x41865a
cmp dword [ebp + 8], 9
je 0x41865a
lea eax, [ebp - 0xc24]
push eax
call dword [0x42c1c4]
mov ax, word [ebp - 0xc1c]
mov word [ebp - 0xc80], ax
mov ax, word [ebp - 0xc1a]
mov word [ebp - 0xc7c], ax
jmp 0x41867f
lea esi, [ebx + 0x9f4]
mov ecx, esi
call fcn.0041bf7c
test eax, eax
je 0x41867f
lea eax, [ebp - 0xc7c]
mov ecx, esi
push eax
lea edx, [ebp - 0xc80]
call fcn.0040d579
lea esi, [ebx + 0xbf0]
mov ecx, esi
call fcn.0041bf7c
test eax, eax
je 0x4186a4
lea eax, [ebp - 0xcac]
mov ecx, esi
push eax
lea edx, [ebp - 0xcb0]
call fcn.0040d579
cmp dword [ebp + 8], 1
mov dword [ebp - 0xccc], 0xa
mov dword [ebp - 0xcc8], 0x3c
je 0x4186c3
cmp dword [ebp + 8], edi
jne 0x4186c8
mov ecx, dword [ebx + 0x24]
jmp 0x4186ce
lea ecx, [ebx + 0x15ec]
lea eax, [ebp - 0xcd0]
push eax
lea eax, [ebp - 0xcc4]
push eax
lea eax, [ebp - 0xcc8]
push eax
lea eax, [ebp - 0xccc]
push eax
push dword [ebp - 0xcac]
lea edx, [ebx + 0x13f0]
push dword [ebp - 0xcb0]
push dword [ebp - 0xc7c]
push dword [ebp - 0xc80]
push esi
call fcn.0040d628
mov esi, eax
test esi, esi
jns 0x418731
xor ecx, ecx
call fcn.00416063
xor eax, eax
cmp dword [ebx + 0x1c14], eax
jne 0x419172
xor esi, esi
inc esi
jmp 0x419172
mov edx, dword [ebx + 0x10]
lea eax, [ebp - 0xcb4]
push eax
push ecx
mov ecx, dword [ebx + 4]
call fcn.004160f8
mov esi, eax
test esi, esi
js 0x418714
cmp dword [ebp - 0xcb4], 0
jbe 0x41877e
mov ecx, 0x9d0
call fcn.0041b556
push 1
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0041c015
xor ecx, ecx
call fcn.00416063
xor eax, eax
jmp 0x419174
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x4187b6
xor ecx, ecx
cmp word [eax], cx
je 0x4187b6
mov ecx, dword [ebx + 4]
call fcn.00416d2c
test eax, eax
je 0x4187b6
mov ecx, 0x86f
call fcn.0041b556
push edi
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0041c015
jmp 0x418777
mov edx, dword [ebp - 0xc78]
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0xc74]
mov ecx, ebx
push eax
lea eax, [ebp - 0xc68]
push eax
lea eax, [ebp - 0xc64]
push eax
lea eax, [ebp - 0xc60]
push eax
lea eax, [ebp - 0xc70]
push eax
lea eax, [ebp - 0xc6c]
push eax
call fcn.00416e2f
mov esi, eax
test esi, esi
jns 0x418815
cmp dword [ebp - 0xc6c], 0
je 0x418b9c
push ecx
mov ecx, dword [ebx + 4]
call fcn.0041ecfd
jmp 0x418b9c
cmp dword [ebp - 0xc64], 0
mov esi, 0x1fc
jne 0x41891f
cmp word [ebx + 0x1be8], 8
jne 0x418899
mov ecx, dword [ebx + 8]
call fcn.0040b53c
test eax, eax
je 0x41888c
test byte [ebx + 0x1be8], 0x10
je 0x418852
mov ecx, dword [ebx + 0xc]
call fcn.0041bf7c
test eax, eax
jne 0x41888c
lea eax, [ebx + 0x818]
mov ecx, 0xca
push eax
call fcn.0041b556
push eax
lea eax, [ebp - 0x614]
push esi
push eax
call fcn.0040719d
xor esi, esi
inc esi
push esi
call fcn.00420b3b
add esp, 0x14
lea edx, [ebp - 0x614]
mov ecx, eax
call fcn.0041c015
jmp 0x418906
cmp dword [ebp - 0xc64], 0
jne 0x41891f
mov al, byte [ebx + 0x1be8]
and al, 0x18
cmp al, 0x18
jne 0x41891f
mov ecx, dword [ebx + 8]
call fcn.0040b53c
test eax, eax
je 0x41891f
lea eax, [ebx + 0x818]
mov ecx, 0xca
push eax
call fcn.0041b556
push eax
lea eax, [ebp - 0x614]
push esi
push eax
call fcn.0040719d
push 1
call fcn.00420b3b
add esp, 0x14
lea edx, [ebp - 0x614]
mov ecx, eax
call fcn.0041c015
mov ecx, 0xfc
call fcn.0041b556
push edi
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0041c015
xor esi, esi
inc esi
mov eax, esi
mov dword [ebp - 0xc70], esi
mov dword [ebp - 0xc60], eax
mov dword [ebp - 0xc64], esi
jmp 0x418a29
test byte [ebx + 0x1be8], 0xb
jne 0x418945
mov ecx, dword [ebx + 0xc]
call fcn.0041bf7c
test eax, eax
jne 0x418945
movzx eax, word [ebx + 0x1be8]
xor esi, esi
shr eax, 4
inc esi
and eax, esi
jmp 0x418985
mov ecx, dword [ebx + 4]
call fcn.0041bf7c
test eax, eax
jne 0x418a20
mov ecx, dword [ebx + 8]
call fcn.0041bf7c
test eax, eax
je 0x418a20
mov eax, dword [ebx + 8]
xor esi, esi
mov ecx, dword [ebx + 0xc]
inc esi
mov dword [ebp - 0xc68], eax
mov dword [ebp - 0xc70], esi
call fcn.0041bf7c
test eax, eax
jne 0x418990
mov eax, esi
mov dword [ebp - 0xc60], eax
jmp 0x418a29
mov eax, dword [ebp - 0xc78]
xor ecx, ecx
cmp dword [eax + 0xc], ecx
je 0x418a12
push dword [ebp - 0xc68]
mov ecx, 0x1ab
call fcn.0041b556
push eax
xor eax, eax
push eax
push esi
push esi
call fcn.00420b3b
pop ecx
push eax
call fcn.0041c26c
add esp, 0x14
lea ecx, [ebp - 0x21c]
mov edx, 0xfe
call fcn.0041c481
test eax, eax
je 0x418b97
lea eax, [ebp - 0x21c]
push eax
call dword [0x42c198]
test eax, eax
jne 0x418a0a
mov ecx, 0x20a
call fcn.0041b556
push edi
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0041c015
xor esi, esi
inc esi
lea eax, [ebp - 0x21c]
jmp 0x418a15
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0xc74], eax
jmp 0x418983
mov eax, dword [ebp - 0xc60]
xor esi, esi
inc esi
test byte [ebx + 0x1be8], 8
je 0x418ab8
cmp dword [ebp - 0xc70], 0
je 0x418ab8
test eax, eax
jne 0x418ab8
push dword [ebp - 0xc68]
mov ecx, 0x1ab
call fcn.0041b556
push eax
xor eax, eax
push eax
push esi
push esi
call fcn.00420b3b
pop ecx
push eax
call fcn.0041c26c
mov ecx, dword [ebx + 0xc]
add esp, 0x14
call fcn.0041c922
mov ecx, dword [ebx + 0xc]
shr eax, 1
mov edx, eax
call fcn.0041c481
test eax, eax
je 0x418b97
mov ecx, dword [ebx + 0xc]
call fcn.0041bf7c
test eax, eax
jne 0x418aaf
mov ecx, 0x20a
call fcn.0041b556
push edi
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0041c015
xor esi, esi
inc esi
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0xc74], eax
xor eax, eax
mov dword [ebp - 0xcb8], eax
cmp dword [ebp - 0xc70], eax
jne 0x418bdc
lea eax, [ebp - 0xcd4]
push eax
lea eax, [ebp - 0xa14]
push eax
push edi
call dword [sym.imp.SspiCli.dll_GetUserNameExW]
test al, al
jne 0x418b32
mov ecx, 0x90
call fcn.0041b556
push edi
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0041c015
xor ecx, ecx
call fcn.00416063
call dword [0x42c08c]
test eax, eax
jle 0x418b1a
movzx eax, ax
or eax, 0x80070000
xor ecx, ecx
cmp dword [ebx + 0x1c14], ecx
jne 0x419174
mov eax, 0x80004005
jmp 0x419174
lea eax, [ebp - 0xa14]
mov ecx, 0x1ad
push eax
mov dword [ebp - 0xc68], eax
call fcn.0041b556
push eax
xor eax, eax
push eax
push esi
push esi
call fcn.00420b3b
pop ecx
push eax
call fcn.0041c26c
add esp, 0x14
mov ecx, 0x1ab
push dword [ebp - 0xc68]
call fcn.0041b556
push eax
xor eax, eax
push eax
push esi
push esi
call fcn.00420b3b
pop ecx
push eax
call fcn.0041c26c
add esp, 0x14
lea ecx, [ebp - 0x21c]
mov edx, 0xfe
call fcn.0041c481
test eax, eax
jne 0x418ba3
mov esi, 0x80004005
xor ecx, ecx
jmp 0x41916d
lea eax, [ebp - 0x21c]
push eax
call dword [0x42c198]
test eax, eax
jne 0x418bd0
mov ecx, 0x20a
call fcn.0041b556
push edi
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0041c015
lea eax, [ebp - 0x21c]
mov dword [ebp - 0xc74], eax
mov ecx, dword [ebx + 4]
lea edx, [ebp - 0xc5c]
call fcn.00415e81
mov esi, eax
test esi, esi
jns 0x418c0d
cmp dword [ebp - 0xc6c], 0
je 0x418c02
push ecx
mov ecx, dword [ebx + 4]
call fcn.0041ecfd
mov ecx, dword [ebp - 0xc5c]
jmp 0x41916d
mov ecx, dword [ebx + 4]
lea edx, [ebp - 0xcb8]
push 1
call fcn.00412661
test eax, eax
jne 0x418cb5
mov esi, dword [ebp - 0xcb8]
test esi, esi
je 0x418cb5
call dword [0x42c08c]
cmp eax, 5
je 0x418cb5
push edi
call fcn.00420b3b
pop ecx
mov edx, 0x10001
mov ecx, eax
call fcn.0041b387
cmp dword [ebp - 0xc6c], 0
je 0x418c63
push ecx
mov ecx, dword [ebx + 4]
call fcn.0041ecfd
mov ecx, dword [ebp - 0xc5c]
call fcn.00416063
cmp esi, 1
jne 0x418ca4
mov ecx, 0xcf
call fcn.0041b556
push edi
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0041c015
mov eax, dword [ebx + 0x1c14]
neg eax
sbb eax, eax
and eax, 0x80004004
inc eax
jmp 0x419174
cmp esi, edi
je 0x418b28
cmp esi, 3
je 0x418777
mov edi, dword [ebp - 0xc5c]
lea eax, [ebp - 0xcc0]
push eax
lea eax, [ebp - 0xcbc]
mov edx, ebx
push eax
lea eax, [ebp - 0xc58]
mov ecx, edi
push eax
call fcn.004180d7
mov esi, eax
test esi, esi
js 0x419159
cmp dword [ebp - 0xcbc], 0
jne 0x419159
xor eax, eax
push 0x1fc
push eax
lea eax, [ebp - 0xc14]
push eax
call fcn.004215e1
mov eax, dword [ebp - 0xc58]
lea ecx, [ebp - 0xc8c]
add esp, 0xc
mov esi, dword [eax]
push ecx
push 0x40183c
push eax
mov ecx, dword [esi]
call dword [0x42c30c]
call dword [esi]
mov edi, eax
test edi, edi
jns 0x418d4c
push edi
call dword [0x42c084]
push 2
call fcn.00420b3b
pop ecx
mov edx, 0x10001
mov ecx, eax
call fcn.0041b387
jmp 0x419104
lea eax, [ebp - 0xc14]
push eax
lea edx, [ebp - 0x814]
lea ecx, [ebx + 0x11e4]
call fcn.0040a977
cmp eax, 1
jne 0x418d73
mov edi, 0x80004005
jmp 0x419104
mov eax, dword [ebp - 0xc58]
lea edx, [ebp - 0x814]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x80]
mov ecx, esi
call dword [0x42c30c]
call esi
mov edi, eax
test edi, edi
js 0x418d2c
lea eax, [ebp - 0x814]
push 0x5c
push eax
call dword [0x42c2e0]
pop ecx
pop ecx
test eax, eax
je 0x418db3
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0xc58]
lea edx, [ebp - 0x814]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x90]
mov ecx, esi
call dword [0x42c30c]
call esi
mov edi, eax
test edi, edi
js 0x418d2c
mov eax, dword [ebp - 0xc58]
lea edx, [ebp - 0xc14]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x88]
mov ecx, esi
call dword [0x42c30c]
call esi
mov edi, eax
test edi, edi
js 0x418d2c
xor eax, eax
cmp dword [ebp - 0xc64], eax
jne 0x418e1e
mov edx, 0x20c0
cmp dword [ebx + 0x1bf0], eax
jne 0x418e23
mov edx, 0xc0
cmp dword [ebx + 0x1bf8], eax
je 0x418e2e
or edx, 2
mov eax, dword [ebp - 0xc58]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x70]
mov ecx, esi
call dword [0x42c30c]
call esi
mov edi, eax
test edi, edi
js 0x418d2c
cmp dword [ebp - 0xc64], 0
mov eax, dword [ebp - 0xc58]
mov ecx, dword [eax]
mov esi, dword [ecx + 0x78]
mov ecx, esi
je 0x418e6f
xor edx, edx
push edx
push 0x402b68
jmp 0x418e7b
push dword [ebp - 0xc74]
push dword [ebp - 0xc68]
push eax
call dword [0x42c30c]
call esi
mov edi, eax
test edi, edi
jns 0x418edc
cmp edi, 0x80041312
je 0x418edc
push edi
call dword [0x42c084]
push 2
call fcn.00420b3b
pop ecx
mov edx, 0x10001
mov ecx, eax
call fcn.0041b387
push 1
call fcn.00420b3b
pop ecx
mov edx, 0x40228c
mov ecx, eax
call fcn.0041c015
mov ecx, 0x198
call fcn.0041b556
push 1
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
jmp 0x4190fd
xor esi, esi
mov edx, dword [ebp - 0xc78]
push esi
push dword [ebp - 0xc98]
lea eax, [ebp - 0xc54]
mov ecx, ebx
push dword [ebp - 0xc94]
push dword [ebp - 0xca8]
push dword [ebp - 0xc7c]
push dword [ebp - 0xc80]
push dword [ebp - 0xc84]
push dword [ebp - 0xc88]
push dword [ebp - 0xc90]
push dword [ebp - 0xcc0]
push dword [ebp - 0xcc4]
push dword [ebp - 0xcc8]
push dword [ebp - 0xccc]
push dword [ebp + 8]
push dword [ebp - 0xc58]
push eax
call fcn.0041798f
mov edi, eax
test edi, edi
js 0x419104
mov eax, dword [ebp - 0xc8c]
push 1
push esi
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x18]
mov ecx, esi
call dword [0x42c30c]
call esi
mov edi, eax
test edi, edi
jns 0x4190ca
push edi
call dword [0x42c084]
call fcn.0041b266
push 2
pop esi
push esi
call fcn.00420b3b
pop ecx
mov edx, 0x20001
mov ecx, eax
call fcn.0041b387
lea eax, [ebx + 0x818]
cmp edi, 0x80041315
jne 0x418fc9
push eax
mov ecx, 0x207
call fcn.0041b556
push eax
lea eax, [ebp - 0x614]
push 0x1fc
push eax
call fcn.0040719d
push esi
call fcn.00420b3b
add esp, 0x14
jmp 0x418ffb
cmp edi, 0x800706b5
jne 0x419010
push dword [ebx + 4]
mov ecx, 0x208
push eax
call fcn.0041b556
push eax
lea eax, [ebp - 0x614]
push 0x1fc
push eax
call fcn.0040719d
add esp, 0x14
push esi
call fcn.00420b3b
pop ecx
lea edx, [ebp - 0x614]
mov ecx, eax
call fcn.0041c015
mov edi, dword [ebp - 0xc5c]
jmp 0x41907d
push eax
mov ecx, 0xfb
call fcn.0041b556
push eax
lea eax, [ebp - 0x614]
push 0x1fc
push eax
call fcn.0040719d
push esi
call fcn.00420b3b
add esp, 0x14
lea edx, [ebp - 0x614]
mov ecx, eax
call fcn.0041c015
mov ecx, 0xd0
call fcn.0041b556
push 2
mov esi, eax
call fcn.00420b3b
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0041c015
mov edi, dword [ebp - 0xc5c]
lea ecx, [ebx + 0x818]
push ecx
push edi
mov eax, dword [edi]
mov esi, dword [eax + 0x1c]
mov ecx, esi
call dword [0x42c30c]
call esi
mov ecx, dword [ebp - 0xc8c]
test ecx, ecx
je 0x419097
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x42c30c]
call esi
mov ecx, dword [ebp - 0xc58]
test ecx, ecx
je 0x4190b1
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x42c30c]
call esi
cmp dword [ebp - 0xc6c], 0
je 0x4190c3
push ecx
mov ecx, dword [ebx + 4]
call fcn.0041ecfd
mov ecx, edi
jmp 0x418772
lea eax, [ebx + 0x818]
mov ecx, 0x12e
push eax
call fcn.0041b556
push eax
lea eax, [ebp - 0x614]
push 0x1fc
push eax
call fcn.0040719d
push 1
call fcn.00420b3b
add esp, 0x14
lea edx, [ebp - 0x614]
mov ecx, eax
call fcn.0041c015
mov ecx, dword [ebp - 0xc8c]
test ecx, ecx
je 0x41911e
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x42c30c]
call esi
mov ecx, dword [ebp - 0xc58]
test ecx, ecx
je 0x419138
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x42c30c]
call esi
cmp dword [ebp - 0xc6c], 0
je 0x41914a
push ecx
mov ecx, dword [ebx + 4]
call fcn.0041ecfd
mov ecx, dword [ebp - 0xc5c]
call fcn.00416063
mov eax, edi
jmp 0x419174
cmp dword [ebp - 0xc6c], 0
je 0x41916b
push ecx
mov ecx, dword [ebx + 4]
call fcn.0041ecfd
mov ecx, edi
call fcn.00416063
mov eax, esi
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00420460
leave
ret 4