Function at 0x40b0e0
Capabilities:
Get session user name
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4ec
cmp byte [0x44164c], 1
push esi
jne 0x40c2ba
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.004147b0
lea ecx, [ebp - 0x4c]
call fcn.00405db0
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4404a8
call fcn.004147b0
lea ecx, [ebp - 0x18]
call fcn.00402fb0
add esp, 0x1c
lea ecx, [ebp - 0x3c4]
mov edx, eax
call fcn.00414c70
mov edx, dword [ebp - 4]
add esp, 4
cmp edx, 0x10
jb 0x40b16f
mov ecx, dword [ebp - 0x18]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b165
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2ef
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x38]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0xf
mov byte [ebp - 0x18], 0
cmp edx, 0x10
jb 0x40b1b5
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b1ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2ef
push edx
push ecx
call fcn.00415fcc
add esp, 8
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4c]
call fcn.00406280
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x104
push eax
lea eax, [ebp - 0x4e8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [ebp - 0x4e8]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x18], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b1f3
sub ecx, edx
lea eax, [ebp - 0x4e8]
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.00414b30
lea ecx, [ebp - 0x34]
call fcn.00405b50
cmp dword [eax + 0x14], 0x10
jb 0x40b21c
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov edx, dword [ebp - 0x20]
cmp edx, 0x10
jb 0x40b257
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b24d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f4
push edx
push ecx
call fcn.00415fcc
add esp, 8
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x440400
call fcn.004147b0
lea ecx, [ebp - 0x3dc]
call fcn.00402fb0
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x43ff38
call fcn.004147b0
lea ecx, [ebp - 0x34]
call fcn.00402fb0
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x440610
call fcn.004147b0
lea ecx, [ebp - 0x37c]
call fcn.00402fb0
add esp, 0x1c
push eax
lea eax, [ebp - 0x3c4]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x43fc80
call fcn.004147b0
lea ecx, [ebp - 0x364]
call fcn.00402fb0
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x440010
call fcn.004147b0
lea ecx, [ebp - 0x34c]
call fcn.00402fb0
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x440118
call fcn.004147b0
lea ecx, [ebp - 0x334]
call fcn.00402fb0
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x440610
call fcn.004147b0
lea ecx, [ebp - 0x31c]
call fcn.00402fb0
add esp, 0x1c
push eax
lea eax, [ebp - 0x3c4]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x43fbf0
call fcn.004147b0
lea ecx, [ebp - 0x304]
call fcn.00402fb0
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x440010
call fcn.004147b0
lea ecx, [ebp - 0x2ec]
call fcn.00402fb0
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x43ff38
call fcn.004147b0
lea ecx, [ebp - 0x2d4]
call fcn.00402fb0
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x440610
call fcn.004147b0
lea ecx, [ebp - 0x2bc]
call fcn.00402fb0
add esp, 0x1c
push eax
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x43fc80
call fcn.004147b0
lea ecx, [ebp - 0x2a4]
call fcn.00402fb0
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x440010
call fcn.004147b0
lea ecx, [ebp - 0x28c]
call fcn.00402fb0
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x440118
call fcn.004147b0
lea ecx, [ebp - 0x274]
call fcn.00402fb0
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x440610
call fcn.004147b0
lea ecx, [ebp - 0x25c]
call fcn.00402fb0
add esp, 0x1c
push eax
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x43fbf0
call fcn.004147b0
lea ecx, [ebp - 0x244]
call fcn.00402fb0
add esp, 0x1c
lea ecx, [ebp - 0x22c]
mov edx, eax
call fcn.00414d60
add esp, 4
lea ecx, [ebp - 0x214]
mov edx, eax
call fcn.00414c70
add esp, 4
lea ecx, [ebp - 0x1fc]
mov edx, eax
call fcn.00414d60
add esp, 4
lea ecx, [ebp - 0x1e4]
mov edx, eax
call fcn.00414c70
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1cc]
call fcn.00414c70
add esp, 4
lea ecx, [ebp - 0x1b4]
mov edx, eax
call fcn.00414c70
add esp, 4
lea ecx, [ebp - 0x19c]
mov edx, eax
call fcn.00414d60
add esp, 4
lea ecx, [ebp - 0x184]
mov edx, eax
call fcn.00414c70
add esp, 4
lea ecx, [ebp - 0x16c]
mov edx, eax
call fcn.00414d60
add esp, 4
lea ecx, [ebp - 0x154]
mov edx, eax
call fcn.00414c70
add esp, 4
lea ecx, [ebp - 0x13c]
mov edx, eax
call fcn.00414c70
add esp, 4
lea ecx, [ebp - 0x124]
mov edx, eax
call fcn.00414c70
add esp, 4
lea ecx, [ebp - 0x10c]
mov edx, eax
call fcn.00414d60
add esp, 4
lea ecx, [ebp - 0xf4]
mov edx, eax
call fcn.00414c70
add esp, 4
lea ecx, [ebp - 0xdc]
mov edx, eax
call fcn.00414d60
add esp, 4
lea ecx, [ebp - 0xc4]
mov edx, eax
call fcn.00414c70
add esp, 4
lea ecx, [ebp - 0xac]
mov edx, eax
call fcn.00414c70
add esp, 4
lea ecx, [ebp - 0x94]
mov edx, eax
call fcn.00414c70
add esp, 4
lea ecx, [ebp - 0x7c]
mov edx, eax
call fcn.00414d60
add esp, 4
lea ecx, [ebp - 0x64]
mov edx, eax
call fcn.00414c70
add esp, 4
lea ecx, [ebp - 0x3ac]
mov edx, eax
call fcn.00414d60
add esp, 4
lea ecx, [ebp - 0x394]
mov edx, eax
call fcn.00414c70
add esp, 4
mov edx, eax
mov ecx, esi
call fcn.00414c70
add esp, 4
call fcn.004046e0
mov edx, dword [ebp - 0x380]
add esp, 0x18
cmp edx, 0x10
jb 0x40b606
mov ecx, dword [ebp - 0x394]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b5fc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x384], 0
mov dword [ebp - 0x380], 0xf
mov byte [ebp - 0x394], 0
cmp edx, 0x10
jb 0x40b65b
mov ecx, dword [ebp - 0x3ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b651
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x39c], 0
mov dword [ebp - 0x398], 0xf
mov byte [ebp - 0x3ac], 0
cmp edx, 0x10
jb 0x40b6aa
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b6a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x40b6f0
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b6e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x40b739
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b72f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x40b78b
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b781
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x40b7e0
mov ecx, dword [ebp - 0xc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b7d6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
cmp edx, 0x10
jb 0x40b835
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b82b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
cmp edx, 0x10
jb 0x40b88a
mov ecx, dword [ebp - 0xf4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b880
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
cmp edx, 0x10
jb 0x40b8df
mov ecx, dword [ebp - 0x10c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b8d5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0xf
mov byte [ebp - 0x10c], 0
cmp edx, 0x10
jb 0x40b934
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b92a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
cmp edx, 0x10
jb 0x40b989
mov ecx, dword [ebp - 0x13c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b97f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x140]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0xf
mov byte [ebp - 0x13c], 0
cmp edx, 0x10
jb 0x40b9de
mov ecx, dword [ebp - 0x154]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b9d4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x158]
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0xf
mov byte [ebp - 0x154], 0
cmp edx, 0x10
jb 0x40ba33
mov ecx, dword [ebp - 0x16c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ba29
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x170]
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x158], 0xf
mov byte [ebp - 0x16c], 0
cmp edx, 0x10
jb 0x40ba88
mov ecx, dword [ebp - 0x184]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ba7e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x188]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0xf
mov byte [ebp - 0x184], 0
cmp edx, 0x10
jb 0x40badd
mov ecx, dword [ebp - 0x19c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bad3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x1a0]
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0xf
mov byte [ebp - 0x19c], 0
cmp edx, 0x10
jb 0x40bb32
mov ecx, dword [ebp - 0x1b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bb28
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0xf
mov byte [ebp - 0x1b4], 0
cmp edx, 0x10
jb 0x40bb87
mov ecx, dword [ebp - 0x1cc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bb7d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 0xf
mov byte [ebp - 0x1cc], 0
cmp edx, 0x10
jb 0x40bbdc
mov ecx, dword [ebp - 0x1e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bbd2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x1e8]
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
cmp edx, 0x10
jb 0x40bc31
mov ecx, dword [ebp - 0x1fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bc27
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x200]
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 0xf
mov byte [ebp - 0x1fc], 0
cmp edx, 0x10
jb 0x40bc86
mov ecx, dword [ebp - 0x214]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bc7c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x218]
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 0xf
mov byte [ebp - 0x214], 0
cmp edx, 0x10
jb 0x40bcdb
mov ecx, dword [ebp - 0x22c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bcd1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x230]
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 0xf
mov byte [ebp - 0x22c], 0
cmp edx, 0x10
jb 0x40bd30
mov ecx, dword [ebp - 0x244]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bd26
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0xf
mov byte [ebp - 0x244], 0
cmp edx, 0x10
jb 0x40bd85
mov ecx, dword [ebp - 0x25c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bd7b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0xf
mov byte [ebp - 0x25c], 0
cmp edx, 0x10
jb 0x40bdda
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bdd0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 0xf
mov byte [ebp - 0x274], 0
cmp edx, 0x10
jb 0x40be2f
mov ecx, dword [ebp - 0x28c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40be25
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 0xf
mov byte [ebp - 0x28c], 0
cmp edx, 0x10
jb 0x40be84
mov ecx, dword [ebp - 0x2a4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40be7a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x2a8]
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 0xf
mov byte [ebp - 0x2a4], 0
cmp edx, 0x10
jb 0x40bed9
mov ecx, dword [ebp - 0x2bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40becf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x2c0]
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2a8], 0xf
mov byte [ebp - 0x2bc], 0
cmp edx, 0x10
jb 0x40bf2e
mov ecx, dword [ebp - 0x2d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bf24
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c0], 0xf
mov byte [ebp - 0x2d4], 0
cmp edx, 0x10
jb 0x40bf83
mov ecx, dword [ebp - 0x2ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bf79
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2d8], 0xf
mov byte [ebp - 0x2ec], 0
cmp edx, 0x10
jb 0x40bfd8
mov ecx, dword [ebp - 0x304]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bfce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x308]
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f0], 0xf
mov byte [ebp - 0x304], 0
cmp edx, 0x10
jb 0x40c02d
mov ecx, dword [ebp - 0x31c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c023
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 0xf
mov byte [ebp - 0x31c], 0
cmp edx, 0x10
jb 0x40c082
mov ecx, dword [ebp - 0x334]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c078
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x338]
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x320], 0xf
mov byte [ebp - 0x334], 0
cmp edx, 0x10
jb 0x40c0d7
mov ecx, dword [ebp - 0x34c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c0cd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x350]
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x338], 0xf
mov byte [ebp - 0x34c], 0
cmp edx, 0x10
jb 0x40c12c
mov ecx, dword [ebp - 0x364]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c122
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x368]
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x350], 0xf
mov byte [ebp - 0x364], 0
cmp edx, 0x10
jb 0x40c181
mov ecx, dword [ebp - 0x37c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c177
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x368], 0xf
mov byte [ebp - 0x37c], 0
cmp edx, 0x10
jb 0x40c1d0
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c1c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp edx, 0x10
jb 0x40c21c
mov ecx, dword [ebp - 0x3dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c212
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2f9
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 4]
cmp edx, 0x10
jb 0x40c250
mov ecx, dword [ebp - 0x18]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c246
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2fe
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x38]
cmp edx, 0x10
jb 0x40c284
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c27a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2fe
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp - 0x3b0]
cmp edx, 0x10
jb 0x40c2ba
mov ecx, dword [ebp - 0x3c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c2b0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2fe
push edx
push ecx
call fcn.00415fcc
add esp, 8
mov edx, dword [ebp + 0x1c]
cmp edx, 0x10
jb 0x40c2ea
mov ecx, dword [ebp + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c2e0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c2fe
push edx
push ecx
call fcn.00415fcc
add esp, 8
pop esi
mov esp, ebp
pop ebp
ret
call fcn.0041bb2d
call fcn.0041bb2d
call fcn.0041bb2d
call fcn.0041bb2d
int3