Function at 0x49fef0
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5878dc
mov eax, dword fs:[0]
push eax
sub esp, 0x388
mov eax, dword [0x5deba8]
xor eax, ebp
mov dword [ebp - 0x18], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x374], ecx
mov dword [ebp - 0x22c], 0
lea ecx, [ebp - 0x230]
call fcn.0041d970
mov dword [ebp - 4], 0
push 0x5973c4
lea ecx, [ebp - 0x228]
call fcn.0041d9b0
mov byte [ebp - 4], 1
mov dword [ebp - 0x14], 0
push 0x597424
lea ecx, [ebp - 0x230]
call fcn.0041daf0
push 0x16c0
call fcn.00553a71
add esp, 4
mov dword [ebp - 0x238], eax
mov byte [ebp - 4], 2
cmp dword [ebp - 0x238], 0
je 0x49ffa8
mov eax, dword [ebp - 0x374]
mov ecx, dword [eax + 0x1818]
push ecx
mov ecx, dword [ebp - 0x238]
call fcn.0042d5b0
mov dword [ebp - 0x378], eax
jmp 0x49ffb2
mov dword [ebp - 0x378], 0
mov edx, dword [ebp - 0x378]
mov dword [ebp - 0x234], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x14], eax
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x23c], esp
push 0
call fcn.00416280
push 0
push 0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x240], esp
push 0
call fcn.00416260
mov ecx, dword [ebp - 0x374]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.0041efc0
lea ecx, [ebp - 0x230]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004285f0
push 0xffffffffffffffff
lea ecx, [ebp - 0x230]
call fcn.0041e330
push 0
lea ecx, [ebp - 0x228]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004287a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x228]
call fcn.0041e330
push 0x15d
mov ecx, dword [ebp - 0x14]
call fcn.00428650
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov edx, dword [ebp - 0x374]
mov ecx, dword [edx + 0x16dc]
call fcn.0041f280
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x250], 0x15d
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x250]
push ecx
lea edx, [ebp - 0x258]
push edx
call fcn.004a8650
add esp, 0xc
push eax
lea ecx, [ebp - 0x248]
call fcn.004a8690
lea eax, [ebp - 0x248]
push eax
mov ecx, dword [ebp - 0x374]
add ecx, 0x16cc
call fcn.0041ec90
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x374]
mov ecx, dword [edx + 0x16dc]
call fcn.0041f080
push 0x597818
lea ecx, [ebp - 0x230]
call fcn.0041daf0
push 0x16c0
call fcn.00553a71
add esp, 4
mov dword [ebp - 0x260], eax
mov byte [ebp - 4], 3
cmp dword [ebp - 0x260], 0
je 0x4a0139
mov eax, dword [ebp - 0x374]
mov ecx, dword [eax + 0x1818]
push ecx
mov ecx, dword [ebp - 0x260]
call fcn.0042d5b0
mov dword [ebp - 0x37c], eax
jmp 0x4a0143
mov dword [ebp - 0x37c], 0
mov edx, dword [ebp - 0x37c]
mov dword [ebp - 0x25c], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x14], eax
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x264], esp
push 0
call fcn.00416280
push 0
push 0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x268], esp
push 0
call fcn.00416260
mov ecx, dword [ebp - 0x374]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.0041efc0
lea ecx, [ebp - 0x230]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004285f0
push 0xffffffffffffffff
lea ecx, [ebp - 0x230]
call fcn.0041e330
push 0
lea ecx, [ebp - 0x228]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004287a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x228]
call fcn.0041e330
push 0x14d
mov ecx, dword [ebp - 0x14]
call fcn.00428650
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov edx, dword [ebp - 0x374]
mov ecx, dword [edx + 0x16dc]
call fcn.0041f280
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x278], 0x14d
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x278]
push ecx
lea edx, [ebp - 0x280]
push edx
call fcn.004a8650
add esp, 0xc
push eax
lea ecx, [ebp - 0x270]
call fcn.004a8690
lea eax, [ebp - 0x270]
push eax
mov ecx, dword [ebp - 0x374]
add ecx, 0x16cc
call fcn.0041ec90
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x374]
mov ecx, dword [edx + 0x16dc]
call fcn.0041f080
push 0x5975ac
lea ecx, [ebp - 0x230]
call fcn.0041daf0
push 0x16c0
call fcn.00553a71
add esp, 4
mov dword [ebp - 0x288], eax
mov byte [ebp - 4], 4
cmp dword [ebp - 0x288], 0
je 0x4a02ca
mov eax, dword [ebp - 0x374]
mov ecx, dword [eax + 0x1818]
push ecx
mov ecx, dword [ebp - 0x288]
call fcn.0042d5b0
mov dword [ebp - 0x380], eax
jmp 0x4a02d4
mov dword [ebp - 0x380], 0
mov edx, dword [ebp - 0x380]
mov dword [ebp - 0x284], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x14], eax
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x28c], esp
push 0
call fcn.00416280
push 0
push 0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x290], esp
push 0
call fcn.00416260
mov ecx, dword [ebp - 0x374]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.0041efc0
lea ecx, [ebp - 0x230]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004285f0
push 0xffffffffffffffff
lea ecx, [ebp - 0x230]
call fcn.0041e330
push 0
lea ecx, [ebp - 0x228]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004287a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x228]
call fcn.0041e330
push 0x14c
mov ecx, dword [ebp - 0x14]
call fcn.00428650
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov edx, dword [ebp - 0x374]
mov ecx, dword [edx + 0x16dc]
call fcn.0041f280
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x2a0], 0x14c
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x2a0]
push ecx
lea edx, [ebp - 0x2a8]
push edx
call fcn.004a8650
add esp, 0xc
push eax
lea ecx, [ebp - 0x298]
call fcn.004a8690
lea eax, [ebp - 0x298]
push eax
mov ecx, dword [ebp - 0x374]
add ecx, 0x16cc
call fcn.0041ec90
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x374]
mov ecx, dword [edx + 0x16dc]
call fcn.0041f080
push 0x597820
lea ecx, [ebp - 0x230]
call fcn.0041daf0
push 0x16c0
call fcn.00553a71
add esp, 4
mov dword [ebp - 0x2b0], eax
mov byte [ebp - 4], 5
cmp dword [ebp - 0x2b0], 0
je 0x4a045b
mov eax, dword [ebp - 0x374]
mov ecx, dword [eax + 0x1818]
push ecx
mov ecx, dword [ebp - 0x2b0]
call fcn.0042d5b0
mov dword [ebp - 0x384], eax
jmp 0x4a0465
mov dword [ebp - 0x384], 0
mov edx, dword [ebp - 0x384]
mov dword [ebp - 0x2ac], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x14], eax
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x2b4], esp
push 0
call fcn.00416280
push 0
push 0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x2b8], esp
push 0
call fcn.00416260
mov ecx, dword [ebp - 0x374]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.0041efc0
lea ecx, [ebp - 0x230]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004285f0
push 0xffffffffffffffff
lea ecx, [ebp - 0x230]
call fcn.0041e330
push 0
lea ecx, [ebp - 0x228]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004287a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x228]
call fcn.0041e330
push 0x14b
mov ecx, dword [ebp - 0x14]
call fcn.00428650
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov edx, dword [ebp - 0x374]
mov ecx, dword [edx + 0x16dc]
call fcn.0041f280
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2c8], 0x14b
lea eax, [ebp - 0x2c4]
push eax
lea ecx, [ebp - 0x2c8]
push ecx
lea edx, [ebp - 0x2d0]
push edx
call fcn.004a8650
add esp, 0xc
push eax
lea ecx, [ebp - 0x2c0]
call fcn.004a8690
lea eax, [ebp - 0x2c0]
push eax
mov ecx, dword [ebp - 0x374]
add ecx, 0x16cc
call fcn.0041ec90
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x374]
mov ecx, dword [edx + 0x16dc]
call fcn.0041f080
push 0x59760c
lea ecx, [ebp - 0x230]
call fcn.0041daf0
push 0x16c0
call fcn.00553a71
add esp, 4
mov dword [ebp - 0x2d8], eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0x2d8], 0
je 0x4a05ec
mov eax, dword [ebp - 0x374]
mov ecx, dword [eax + 0x1818]
push ecx
mov ecx, dword [ebp - 0x2d8]
call fcn.0042d5b0
mov dword [ebp - 0x388], eax
jmp 0x4a05f6
mov dword [ebp - 0x388], 0
mov edx, dword [ebp - 0x388]
mov dword [ebp - 0x2d4], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x14], eax
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x2dc], esp
push 0
call fcn.00416280
push 0
push 0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x2e0], esp
push 0
call fcn.00416260
mov ecx, dword [ebp - 0x374]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.0041efc0
lea ecx, [ebp - 0x230]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004285f0
push 0xffffffffffffffff
lea ecx, [ebp - 0x230]
call fcn.0041e330
push 0
lea ecx, [ebp - 0x228]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004287a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x228]
call fcn.0041e330
push 3
mov ecx, dword [ebp - 0x14]
call fcn.00428650
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [edx + 0x10]
call ecx
mov edx, dword [ebp - 0x374]
mov ecx, dword [edx + 0x16dc]
call fcn.0041f280
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2f0], 3
lea eax, [ebp - 0x2ec]
push eax
lea ecx, [ebp - 0x2f0]
push ecx
lea edx, [ebp - 0x2f8]
push edx
call fcn.004a8650
add esp, 0xc
push eax
lea ecx, [ebp - 0x2e8]
call fcn.004a8690
lea eax, [ebp - 0x2e8]
push eax
mov ecx, dword [ebp - 0x374]
add ecx, 0x16cc
call fcn.0041ec90
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x374]
mov ecx, dword [edx + 0x16dc]
call fcn.0041f080
mov eax, dword [0x597828]
mov dword [ebp - 0x224], eax
push 0x204
push 0
lea ecx, [ebp - 0x220]
push ecx
call fcn.005533a0
add esp, 0xc
mov dword [ebp - 0x10], 0x208
lea edx, [ebp - 0x10]
push edx
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea ecx, [ebp - 0x224]
push ecx
lea ecx, [ebp - 0x230]
call fcn.0041daf0
push 0x16c0
call fcn.00553a71
add esp, 4
mov dword [ebp - 0x300], eax
mov byte [ebp - 4], 7
cmp dword [ebp - 0x300], 0
je 0x4a07b5
mov edx, dword [ebp - 0x374]
mov eax, dword [edx + 0x1818]
push eax
mov ecx, dword [ebp - 0x300]
call fcn.0042d5b0
mov dword [ebp - 0x38c], eax
jmp 0x4a07bf
mov dword [ebp - 0x38c], 0
mov ecx, dword [ebp - 0x38c]
mov dword [ebp - 0x2fc], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x14], edx
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x304], esp
push 0
call fcn.00416280
push 0
push 0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x308], esp
push 0
call fcn.00416260
mov eax, dword [ebp - 0x374]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.0041efc0
lea ecx, [ebp - 0x230]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004285f0
push 0xffffffffffffffff
lea ecx, [ebp - 0x230]
call fcn.0041e330
push 0
lea ecx, [ebp - 0x228]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004287a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x228]
call fcn.0041e330
push 5
mov ecx, dword [ebp - 0x14]
call fcn.00428650
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov ecx, dword [ebp - 0x374]
mov ecx, dword [ecx + 0x16dc]
call fcn.0041f280
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x318], 5
lea edx, [ebp - 0x314]
push edx
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x320]
push ecx
call fcn.004a8650
add esp, 0xc
push eax
lea ecx, [ebp - 0x310]
call fcn.004a8690
lea edx, [ebp - 0x310]
push edx
mov ecx, dword [ebp - 0x374]
add ecx, 0x16cc
call fcn.0041ec90
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x374]
mov ecx, dword [ecx + 0x16dc]
call fcn.0041f080
push 0x59782c
lea ecx, [ebp - 0x230]
call fcn.0041daf0
push 0x16c0
call fcn.00553a71
add esp, 4
mov dword [ebp - 0x328], eax
mov byte [ebp - 4], 8
cmp dword [ebp - 0x328], 0
je 0x4a0943
mov edx, dword [ebp - 0x374]
mov eax, dword [edx + 0x1818]
push eax
mov ecx, dword [ebp - 0x328]
call fcn.0042d5b0
mov dword [ebp - 0x390], eax
jmp 0x4a094d
mov dword [ebp - 0x390], 0
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x324], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x14], edx
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x32c], esp
push 0
call fcn.00416280
push 0
push 0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x330], esp
push 0
call fcn.00416260
mov eax, dword [ebp - 0x374]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.0041efc0
lea ecx, [ebp - 0x230]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004285f0
push 0xffffffffffffffff
lea ecx, [ebp - 0x230]
call fcn.0041e330
push 0
lea ecx, [ebp - 0x228]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004287a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x228]
call fcn.0041e330
push 0x14f
mov ecx, dword [ebp - 0x14]
call fcn.00428650
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov ecx, dword [ebp - 0x374]
mov ecx, dword [ecx + 0x16dc]
call fcn.0041f280
mov dword [ebp - 0x33c], eax
mov dword [ebp - 0x340], 0x14f
lea edx, [ebp - 0x33c]
push edx
lea eax, [ebp - 0x340]
push eax
lea ecx, [ebp - 0x348]
push ecx
call fcn.004a8650
add esp, 0xc
push eax
lea ecx, [ebp - 0x338]
call fcn.004a8690
lea edx, [ebp - 0x338]
push edx
mov ecx, dword [ebp - 0x374]
add ecx, 0x16cc
call fcn.0041ec90
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x374]
mov ecx, dword [ecx + 0x16dc]
call fcn.0041f080
push 0x597838
lea ecx, [ebp - 0x228]
call fcn.0041daf0
push str.InternetExplorer
lea ecx, [ebp - 0x230]
call fcn.0041daf0
push 0x16c0
call fcn.00553a71
add esp, 4
mov dword [ebp - 0x350], eax
mov byte [ebp - 4], 9
cmp dword [ebp - 0x350], 0
je 0x4a0ae4
mov edx, dword [ebp - 0x374]
mov eax, dword [edx + 0x1818]
push eax
mov ecx, dword [ebp - 0x350]
call fcn.0042d5b0
mov dword [ebp - 0x394], eax
jmp 0x4a0aee
mov dword [ebp - 0x394], 0
mov ecx, dword [ebp - 0x394]
mov dword [ebp - 0x34c], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x34c]
mov dword [ebp - 0x14], edx
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x354], esp
push 0
call fcn.00416280
push 0
push 0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x358], esp
push 0
call fcn.00416260
mov eax, dword [ebp - 0x374]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.0041efc0
lea ecx, [ebp - 0x230]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004285f0
push 0xffffffffffffffff
lea ecx, [ebp - 0x230]
call fcn.0041e330
push 0
lea ecx, [ebp - 0x228]
call fcn.0041e290
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004287a0
push 0xffffffffffffffff
lea ecx, [ebp - 0x228]
call fcn.0041e330
push 1
mov ecx, dword [ebp - 0x14]
call fcn.00428650
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [eax + 8]
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ecx + 0x10]
call eax
mov ecx, dword [ebp - 0x374]
mov ecx, dword [ecx + 0x16dc]
call fcn.0041f280
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x368], 1
lea edx, [ebp - 0x364]
push edx
lea eax, [ebp - 0x368]
push eax
lea ecx, [ebp - 0x370]
push ecx
call fcn.004a8650
add esp, 0xc
push eax
lea ecx, [ebp - 0x360]
call fcn.004a8690
lea edx, [ebp - 0x360]
push edx
mov ecx, dword [ebp - 0x374]
add ecx, 0x16cc
call fcn.0041ec90
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x374]
mov ecx, dword [ecx + 0x16dc]
call fcn.0041f080
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x228]
call fcn.0041dab0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.0041dab0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.0055338c
mov esp, ebp
pop ebp
ret