Function at 0x476aa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5cc590
mov eax, dword fs:[0]
push eax
sub esp, 0x524
mov eax, dword [0x671330]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x19c]
cmp dword [eax + 0xbc], 0
jbe 0x476bf2
mov ecx, dword [ebp - 0x19c]
imul edx, dword [ecx + 0xbc], 0x3e8
mov dword [ebp - 0x1bc], edx
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x240], eax
mov ecx, dword [ebp - 0x1bc]
push ecx
mov edx, dword [ebp - 0x240]
push edx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
push 0x7d0
call dword [sym.imp.Dbglog.dll_struct_boost::logging::level::holder_no_ts____cdecl_g_l_filter_void_]
mov ecx, eax
call fcn.0040a130
movzx ecx, al
test ecx, ecx
jne 0x476b5a
jmp 0x476be5
push 0x5e4aac
mov edx, dword [ebp - 0x19c]
mov eax, dword [edx + 0xbc]
push eax
push str.Delayed_service_load._Start_in
lea ecx, [ebp - 0x338]
push ecx
call dword [sym.imp.Dbglog.dll_struct_boost::logging::logger_holder_struct_boost::logging::logger_format_write_struct_boost::logging::default___struct_boost::logging::default___struct_boost::logging::writer::threading::ts_write__struct_boost::logging::default___struct_boost::logging::lock_resource_finder::single_thread______cdecl_g_l_void_]
push eax
call fcn.004048b0
add esp, 4
mov ecx, eax
call fcn.00402ad0
mov dword [ebp - 0x248], eax
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x24c], edx
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x24c]
call fcn.00402a30
mov ecx, eax
call fcn.00402d20
push eax
call fcn.00409d00
add esp, 8
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int_]
push eax
call fcn.00409d00
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x338]
call fcn.00402a50
mov eax, dword [ebp - 0x1bc]
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp - 0x250], ecx
push 0x64
mov edx, dword [ebp - 0x250]
push edx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
mov ecx, dword [ebp - 0x19c]
add ecx, 0x78
call fcn.004922d0
movzx ecx, al
test ecx, ecx
jne 0x476c7d
mov ecx, 0x30
mov esi, str._nCritical_Error__Failed_to_verify_this_services_digital_signature._nShutting_down_the_service...
lea edi, [ebp - 0xd4]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0
push 1
lea edx, [ebp - 0xd4]
push edx
mov ecx, dword [ebp - 0x19c]
add ecx, 8
call fcn.00402580
push 0
push 0
push 1
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
xor eax, eax
jmp 0x477780
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x258], eax
push 0x64
mov ecx, dword [ebp - 0x258]
push ecx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
call fcn.00543750
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1d8], eax
push 0x1f4
mov ecx, dword [ebp - 0x1d8]
push ecx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
call fcn.0046f9b0
push 0
call fcn.00479480
add esp, 4
call fcn.00543690
movzx eax, al
test eax, eax
je 0x476d40
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp - 0x1dc], ecx
push 0x1f4
mov edx, dword [ebp - 0x1dc]
push edx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
push 1
call fcn.00479480
add esp, 4
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp - 0x1e0], ecx
push 0x1f4
mov edx, dword [ebp - 0x1e0]
push edx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
push str.S_HARDCODED_MACHINE_SID
mov ecx, dword [ebp - 0x19c]
add ecx, 0x208
call fcn.00414b50
call fcn.00475cc0
mov ecx, dword [ebp - 0x19c]
mov dword [ecx + 0x204], eax
mov edx, dword [ebp - 0x19c]
cmp dword [edx + 0x204], 0
je 0x476e36
push 0x7d0
call dword [sym.imp.Dbglog.dll_struct_boost::logging::level::holder_no_ts____cdecl_g_l_filter_void_]
mov ecx, eax
call fcn.0040a130
movzx eax, al
test eax, eax
jne 0x476dc9
jmp 0x476e31
push str.Terminal_Services_is_ON
lea ecx, [ebp - 0x3e0]
push ecx
call dword [sym.imp.Dbglog.dll_struct_boost::logging::logger_holder_struct_boost::logging::logger_format_write_struct_boost::logging::default___struct_boost::logging::default___struct_boost::logging::writer::threading::ts_write__struct_boost::logging::default___struct_boost::logging::lock_resource_finder::single_thread______cdecl_g_l_void_]
push eax
call fcn.004048b0
add esp, 4
mov ecx, eax
call fcn.00402ad0
mov dword [ebp - 0x1e4], eax
mov edx, dword [ebp - 0x1e4]
mov dword [ebp - 0x1e8], edx
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x1e8]
call fcn.00402a30
mov ecx, eax
call fcn.00402d20
push eax
call fcn.00409d00
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e0]
call fcn.00402a50
jmp 0x476eb9
push 0x7d0
call dword [sym.imp.Dbglog.dll_struct_boost::logging::level::holder_no_ts____cdecl_g_l_filter_void_]
mov ecx, eax
call fcn.0040a130
movzx eax, al
test eax, eax
jne 0x476e51
jmp 0x476eb9
push str.Terminal_Services_is_OFF
lea ecx, [ebp - 0x488]
push ecx
call dword [sym.imp.Dbglog.dll_struct_boost::logging::logger_holder_struct_boost::logging::logger_format_write_struct_boost::logging::default___struct_boost::logging::default___struct_boost::logging::writer::threading::ts_write__struct_boost::logging::default___struct_boost::logging::lock_resource_finder::single_thread______cdecl_g_l_void_]
push eax
call fcn.004048b0
add esp, 4
mov ecx, eax
call fcn.00402ad0
mov dword [ebp - 0x1ec], eax
mov edx, dword [ebp - 0x1ec]
mov dword [ebp - 0x1f0], edx
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x1f0]
call fcn.00402a30
mov ecx, eax
call fcn.00402d20
push eax
call fcn.00409d00
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x488]
call fcn.00402a50
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1f4], eax
push 0x64
mov ecx, dword [ebp - 0x1f4]
push ecx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
push 0x3c
call fcn.00544038
add esp, 4
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 4], 3
cmp dword [ebp - 0x1a8], 0
je 0x476f65
push 0x3c
mov ecx, dword [ebp - 0x1a8]
call fcn.004029d0
mov eax, dword [ebp - 0x19c]
cmp dword [eax + 0x204], 0
je 0x476f2f
mov byte [ebp - 0x1a1], 1
jmp 0x476f36
mov byte [ebp - 0x1a1], 0
movzx ecx, byte [ebp - 0x1a1]
push ecx
mov edx, dword [ebp - 0x19c]
add edx, 0x208
push edx
mov eax, dword [ebp - 0x19c]
push eax
mov ecx, dword [ebp - 0x1a8]
call fcn.0042f0a0
mov dword [ebp - 0x1c0], eax
jmp 0x476f6f
mov dword [ebp - 0x1c0], 0
mov ecx, dword [ebp - 0x1c0]
mov dword [ebp - 0x1f8], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1f8]
push edx
mov ecx, dword [ebp - 0x19c]
add ecx, 0xa4
call fcn.00490130
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1fc], eax
push 0xbb8
mov ecx, dword [ebp - 0x1fc]
push ecx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
push 8
lea ecx, [ebp - 0xdc]
call fcn.004029d0
mov eax, dword [ebp - 0x19c]
add eax, 0x38
push eax
lea ecx, [ebp - 0xdc]
call fcn.00462260
mov dword [ebp - 4], 4
mov dword [ebp - 0x198], 0
lea ecx, [ebp - 0x198]
push ecx
mov edx, dword [ebp - 0x19c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x19c]
mov edx, dword [eax + 0x24]
call edx
movzx eax, al
test eax, eax
je 0x477048
cmp dword [ebp - 0x198], 0
je 0x477048
mov ecx, dword [ebp - 0x198]
push ecx
mov ecx, dword [ebp - 0x19c]
add ecx, 0xe0
call fcn.00490170
jmp 0x4770d5
push 0
push 2
push str.Failed_to_load_service_configuration._Default_configuration_will_be_used.
mov ecx, dword [ebp - 0x19c]
add ecx, 8
call fcn.00402580
mov ecx, dword [ebp - 0x19c]
add ecx, 0xe0
call fcn.0040df30
push eax
mov edx, dword [ebp - 0x19c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x19c]
mov edx, dword [eax + 0x20]
call edx
cmp dword [ebp - 0x198], 0
je 0x4770d5
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x200]
mov dword [ebp - 0x1ac], ecx
cmp dword [ebp - 0x1ac], 0
je 0x4770cb
push 1
mov edx, dword [ebp - 0x1ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x204], eax
jmp 0x4770d5
mov dword [ebp - 0x204], 0
mov ecx, dword [ebp - 0x19c]
add ecx, 0xe0
call fcn.004e01f0
mov dword [ebp - 0x1c4], eax
lea eax, [ebp - 0x290]
push eax
mov ecx, dword [ebp - 0x1c4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1c4]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x208]
push ecx
lea ecx, [ebp - 0xfc]
call fcn.004097b0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x290]
call fcn.0040a7f0
push 0x7d0
call dword [sym.imp.Dbglog.dll_struct_boost::logging::level::holder_no_ts____cdecl_g_l_filter_void_]
mov ecx, eax
call fcn.0040a130
movzx edx, al
test edx, edx
jne 0x477148
jmp 0x4771ba
lea eax, [ebp - 0xfc]
push eax
push 0x5e4cac
lea ecx, [ebp - 0x530]
push ecx
call dword [sym.imp.Dbglog.dll_struct_boost::logging::logger_holder_struct_boost::logging::logger_format_write_struct_boost::logging::default___struct_boost::logging::default___struct_boost::logging::writer::threading::ts_write__struct_boost::logging::default___struct_boost::logging::lock_resource_finder::single_thread______cdecl_g_l_void_]
push eax
call fcn.004048b0
add esp, 4
mov ecx, eax
call fcn.00402ad0
mov dword [ebp - 0x20c], eax
mov edx, dword [ebp - 0x20c]
mov dword [ebp - 0x210], edx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x210]
call fcn.00402a30
mov ecx, eax
call fcn.00402d20
push eax
call fcn.00409d00
add esp, 8
push eax
call fcn.0040e860
add esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x530]
call fcn.00402a50
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x214], eax
push 0xbb8
mov ecx, dword [ebp - 0x214]
push ecx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov ecx, dword [ebp - 0x19c]
add ecx, 0xe0
call fcn.004c65c0
cmp dword [eax + 0x3c], 0
jne 0x477221
mov ecx, dword [ebp - 0x19c]
add ecx, 0xe0
call fcn.004c65c0
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x1c8], eax
jmp 0x47722b
mov dword [ebp - 0x1c8], 0
mov ecx, dword [ebp - 0x1c8]
mov dword [ebp - 0x218], ecx
mov ecx, dword [ebp - 0x19c]
add ecx, 0xe0
call fcn.004c65c0
add eax, 0x44
push eax
lea edx, [ebp - 0x218]
push edx
lea ecx, [ebp - 0xe4]
call fcn.00444e30
mov ecx, dword [ebp - 0x19c]
add ecx, 0xe0
call fcn.004c65c0
mov eax, dword [eax + 0x50]
xor ecx, ecx
push ecx
push eax
lea edx, [ebp - 0xe4]
push edx
mov ecx, dword [ebp - 0x19c]
add ecx, 0xe0
call fcn.004c65c0
add eax, 0x9c
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x260], esp
push eax
call fcn.0042ec90
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x19c]
add ecx, 0xe0
call fcn.004c65c0
add eax, 0x24
push eax
mov ecx, dword [ebp - 0x19c]
add ecx, 0xe0
call fcn.004c65c0
add eax, 0xc
push eax
mov ecx, dword [ebp - 0x19c]
add ecx, 0xa8
call fcn.004c65c0
mov ecx, eax
call fcn.004b4780
mov byte [ebp - 0x1a2], al
movzx eax, byte [ebp - 0x1a2]
test eax, eax
jne 0x477314
push 0
push 1
push 0x5e4cc0
mov ecx, dword [ebp - 0x19c]
add ecx, 8
call fcn.00402580
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp - 0x21c], ecx
push 0x64
mov edx, dword [ebp - 0x21c]
push edx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
lea ecx, [ebp - 0x278]
push ecx
mov ecx, dword [ebp - 0x19c]
add ecx, 0xe0
call fcn.004c65c0
mov ecx, eax
call fcn.00549230
mov dword [ebp - 0x220], eax
mov edx, dword [ebp - 0x220]
mov dword [ebp - 0x224], edx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x224]
call fcn.0040bfe0
push eax
mov ecx, dword [ebp - 0x19c]
add ecx, 0xe4
call fcn.00474940
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x278]
call fcn.0040a7f0
lea ecx, [ebp - 0xdc]
call fcn.00491c50
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x228], eax
push 0x1f4
mov ecx, dword [ebp - 0x228]
push ecx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
push 0x98
lea ecx, [ebp - 0x194]
call fcn.004029d0
lea ecx, [ebp - 0x194]
call fcn.00462e20
mov byte [ebp - 4], 8
lea eax, [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0x19c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x19c]
mov eax, dword [edx + 0x3c]
call eax
lea ecx, [ebp - 0x194]
push ecx
mov ecx, dword [ebp - 0x19c]
call fcn.0047d6d0
mov edx, dword [ebp - 0x1a0]
mov dword [ebp - 0x22c], edx
push 0x3e8
mov eax, dword [ebp - 0x22c]
push eax
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov ecx, dword [ebp - 0x1a0]
add ecx, 1
mov dword [ebp - 0x1a0], ecx
push 0x28
call fcn.00544038
add esp, 4
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 4], 9
cmp dword [ebp - 0x1b0], 0
je 0x4774bc
push 0x28
mov ecx, dword [ebp - 0x1b0]
call fcn.004029d0
push 0
mov ecx, dword [ebp - 0x19c]
add ecx, 0xa8
call fcn.004e01f0
push eax
mov edx, dword [ebp - 0x19c]
push edx
mov ecx, dword [ebp - 0x1b0]
call fcn.004c6330
mov dword [ebp - 0x1cc], eax
jmp 0x4774c6
mov dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x230]
push ecx
mov ecx, dword [ebp - 0x19c]
add ecx, 0xac
call fcn.004900a0
push 0x5c
call fcn.00544038
add esp, 4
mov dword [ebp - 0x1b4], eax
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x1b4], 0
je 0x47752b
push 0x5c
mov ecx, dword [ebp - 0x1b4]
call fcn.004029d0
mov ecx, dword [ebp - 0x1b4]
call fcn.0054abe0
mov dword [ebp - 0x1d0], eax
jmp 0x477535
mov dword [ebp - 0x1d0], 0
mov edx, dword [ebp - 0x1d0]
mov dword [ebp - 0x234], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x234]
push eax
mov ecx, dword [ebp - 0x19c]
add ecx, 0xb4
call fcn.004900f0
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp - 0x238], ecx
push 0x3e8
mov edx, dword [ebp - 0x238]
push edx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
mov ecx, dword [ebp - 0x19c]
mov dword [ecx + 0x30], 0
mov edx, dword [ebp - 0x19c]
movzx eax, byte [edx + 0xb9]
test eax, eax
jne 0x47764f
mov ecx, dword [ebp - 0x19c]
add ecx, 0x1fc
call fcn.004d3710
test eax, eax
jbe 0x47764f
push 0x38
call fcn.00544038
add esp, 4
mov dword [ebp - 0x1b8], eax
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x1b8], 0
je 0x47761d
push 0x38
mov ecx, dword [ebp - 0x1b8]
call fcn.004029d0
mov ecx, dword [ebp - 0x19c]
mov edx, dword [ecx + 0x220]
push edx
mov eax, dword [ebp - 0x19c]
push eax
mov ecx, dword [ebp - 0x1b8]
call fcn.004e3ff0
mov dword [ebp - 0x1d4], eax
jmp 0x477627
mov dword [ebp - 0x1d4], 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp - 0x23c], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x23c]
push edx
mov ecx, dword [ebp - 0x19c]
add ecx, 0xb0
call fcn.004900a0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x254], eax
push 0x3e8
mov ecx, dword [ebp - 0x254]
push ecx
push 2
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x19c]
movzx ecx, byte [eax + 0xb8]
test ecx, ecx
jne 0x4776b6
mov ecx, dword [ebp - 0x19c]
add ecx, 0x1fc
call fcn.004d3710
test eax, eax
jbe 0x4776b6
push 1
mov ecx, dword [ebp - 0x19c]
call fcn.0047afa0
mov edx, dword [ebp - 0x19c]
mov dword [edx + 0x1c], 5
push 0
push 1
push 5
call fcn.00543ad0
add esp, 0xc
test eax, eax
je 0x4776ed
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax + 0x1c]
or ecx, 0x80
mov edx, dword [ebp - 0x19c]
mov dword [edx + 0x1c], ecx
push 0
push 0
push 4
mov ecx, dword [ebp - 0x19c]
call fcn.0047b8a0
lea eax, [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0x19c]
call fcn.004762c0
lea ecx, [ebp - 0x194]
push ecx
mov ecx, dword [ebp - 0x19c]
add ecx, 0xb4
call fcn.00402d50
mov ecx, eax
call fcn.0054d7f0
push 0xffffffffffffffff
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov dword [ebp - 0x244], 1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x194]
call fcn.004686e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xfc]
call fcn.0040a7f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdc]
call fcn.004680a0
mov eax, dword [ebp - 0x244]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00544286
mov esp, ebp
pop ebp
ret