Function at 0x410fe0
Capabilities:
Get hostname
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x664
mov eax, dword [0x43100c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
call fcn.00403f40
mov edx, eax
lea ecx, [ebp - 0x2e8]
call fcn.004021e0
call fcn.00404660
mov edx, eax
lea ecx, [ebp - 0x2d0]
call fcn.004021e0
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
neg eax
lea ecx, [ebp - 0x2b8]
sbb eax, eax
neg eax
mov edx, eax
call fcn.004021e0
sub esp, 0x18
mov edi, esp
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x4319f4
call fcn.00413990
mov ecx, esi
call fcn.004029f0
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x4324bc
call fcn.00413990
mov ecx, esi
call fcn.004029f0
add esp, 0x18
mov edx, 0x80000002
mov ecx, edi
call fcn.00402b00
add esp, 0x30
lea ecx, [ebp - 0x2a0]
call fcn.00405fd0
mov esi, esp
mov dword [ebp - 0x224], 0x104
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [ebp - 0x110]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
lea edx, [ecx + 1]
mov byte [esi], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4110c2
sub ecx, edx
lea eax, [ebp - 0x110]
push ecx
push eax
mov ecx, esi
call fcn.00413cf0
lea ecx, [ebp - 0x240]
call fcn.00405fd0
mov ebx, esp
mov dword [ebp - 0x228], pe_nt_image_headers32
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x208]
push eax
push 2
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
xor eax, eax
mov dword [ebp - 0x210], 0
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x20c], 7
mov word [ebp - 0x220], ax
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x411130
sub ecx, edx
lea eax, [ebp - 0x208]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x220]
call fcn.00413a60
cmp dword [ebp - 0x20c], 8
lea ecx, [ebp - 0x220]
mov eax, dword [ebp - 0x210]
lea edi, [ebp - 0x220]
cmovae ecx, dword [ebp - 0x220]
cmovae edi, dword [ebp - 0x220]
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
lea esi, [ecx + eax*2]
mov byte [ebx], 0
mov eax, esi
mov ecx, ebx
sub eax, edi
sar eax, 1
push eax
call fcn.004147a0
cmp edi, esi
je 0x4111f3
nop
mov al, byte [edi]
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
mov byte [ebp - 0x224], al
cmp ecx, edx
jae 0x4111d1
lea eax, [ecx + 1]
mov dword [ebx + 0x10], eax
mov eax, ebx
cmp edx, 0x10
jb 0x4111c1
mov eax, dword [ebx]
mov dl, byte [ebp - 0x224]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x4111ec
push dword [ebp - 0x224]
mov byte [ebp - 0x31c], 0
push dword [ebp - 0x31c]
push ecx
mov ecx, ebx
call fcn.004143c0
add edi, 2
cmp edi, esi
jne 0x4111a0
mov edx, dword [ebp - 0x20c]
cmp edx, 8
jb 0x411233
mov ecx, dword [ebp - 0x220]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x411229
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412511
push edx
push ecx
call fcn.0041535e
add esp, 8
xor eax, eax
mov dword [ebp - 0x210], 0
lea ecx, [ebp - 0x288]
mov dword [ebp - 0x20c], 7
mov word [ebp - 0x220], ax
call fcn.00405fd0
add esp, 0x18
lea ecx, [ebp - 0x270]
call fcn.00406300
push 0x104
lea eax, [ebp - 0x110]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x20c], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x220], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4112a1
sub ecx, edx
lea eax, [ebp - 0x110]
push ecx
push eax
lea ecx, [ebp - 0x220]
call fcn.00413cf0
cmp dword [ebp - 0x20c], 0x10
lea ecx, [ebp - 0x318]
lea eax, [ebp - 0x220]
cmovae eax, dword [ebp - 0x220]
push ecx
push eax
call fcn.0041823c
mov edx, dword [ebp - 0x20c]
or esi, 0xffffffff
add esp, 8
test eax, eax
cmove esi, dword [ebp - 0x304]
cmp edx, 0x10
jb 0x411327
mov ecx, dword [ebp - 0x220]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41131d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412516
push edx
push ecx
call fcn.0041535e
add esp, 8
lea eax, [esi - 0x29811]
mov dword [ebp - 0x210], 0
mov ecx, 0x1387e
mov dword [ebp - 0x20c], 0xf
cmp ecx, eax
mov byte [ebp - 0x220], 0
lea ecx, [ebp - 0x258]
sbb edx, edx
inc edx
call fcn.004021e0
sub esp, 0x18
mov ecx, esp
call fcn.00402da0
lea ecx, [ebp - 0x334]
call fcn.00402fc0
add esp, 0x18
mov ecx, 0x431d24
push eax
call fcn.004138d0
mov edx, dword [ebp - 0x320]
cmp edx, 0x10
jb 0x4113ba
mov ecx, dword [ebp - 0x334]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4113b0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41251b
push edx
push ecx
call fcn.0041535e
add esp, 8
lea eax, [ebp - 0x258]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4321ec
call fcn.00413990
lea ecx, [ebp - 0x300]
call fcn.004029f0
add esp, 0x1c
lea ecx, [ebp - 0x334]
xor edx, edx
push eax
call fcn.004021e0
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4324d4
call fcn.00413990
lea ecx, [ebp - 0x55c]
call fcn.004029f0
add esp, 0x1c
push eax
lea eax, [ebp - 0x270]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x432084
call fcn.00413990
lea ecx, [ebp - 0x664]
call fcn.004029f0
add esp, 0x1c
push eax
lea eax, [ebp - 0x288]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4323fc
call fcn.00413990
lea ecx, [ebp - 0x52c]
call fcn.004029f0
add esp, 0x1c
push eax
lea eax, [ebp - 0x240]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x431f04
call fcn.00413990
lea ecx, [ebp - 0x514]
call fcn.004029f0
add esp, 0x1c
push eax
lea eax, [ebp - 0x2a0]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x431ff4
call fcn.00413990
lea ecx, [ebp - 0x4fc]
call fcn.004029f0
add esp, 0x1c
push eax
lea eax, [ebp - 0x2b8]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x431e5c
call fcn.00413990
lea ecx, [ebp - 0x4e4]
call fcn.004029f0
add esp, 0x1c
push eax
lea eax, [ebp - 0x2d0]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x43227c
call fcn.00413990
lea ecx, [ebp - 0x4cc]
call fcn.004029f0
add esp, 0x1c
push eax
lea eax, [ebp - 0x2e8]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4319ac
call fcn.00413990
lea ecx, [ebp - 0x4b4]
call fcn.004029f0
add esp, 0x1c
push eax
push 0x432204
sub esp, 0x1c
mov ecx, esp
push 0x4320b4
call fcn.00413990
lea ecx, [ebp - 0x49c]
call fcn.004029f0
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x431b44
call fcn.00413990
lea ecx, [ebp - 0x484]
call fcn.004029f0
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x43203c
call fcn.00413990
lea ecx, [ebp - 0x46c]
call fcn.004029f0
add esp, 0x1c
push eax
push 0x431d24
sub esp, 0x1c
mov ecx, esp
push 0x431f4c
call fcn.00413990
lea ecx, [ebp - 0x454]
call fcn.004029f0
add esp, 0x1c
lea ecx, [ebp - 0x43c]
mov edx, eax
call fcn.00413f30
add esp, 4
lea ecx, [ebp - 0x5d4]
mov edx, eax
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x40c]
mov edx, eax
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x3f4]
mov edx, eax
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x3dc]
mov edx, eax
call fcn.00413f30
add esp, 4
lea ecx, [ebp - 0x3c4]
mov edx, eax
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x3ac]
mov edx, eax
call fcn.00413f30
add esp, 4
lea ecx, [ebp - 0x394]
mov edx, eax
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x37c]
mov edx, eax
call fcn.00413f30
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x364]
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x34c]
mov edx, eax
call fcn.00413f30
add esp, 4
lea ecx, [ebp - 0x64c]
mov edx, eax
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x634]
mov edx, eax
call fcn.00413f30
add esp, 4
lea ecx, [ebp - 0x61c]
mov edx, eax
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x604]
mov edx, eax
call fcn.00413f30
add esp, 4
lea ecx, [ebp - 0x5ec]
mov edx, eax
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x5bc]
mov edx, eax
call fcn.00413f30
add esp, 4
lea ecx, [ebp - 0x5a4]
mov edx, eax
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x58c]
mov edx, eax
call fcn.00413f30
add esp, 4
lea ecx, [ebp - 0x424]
mov edx, eax
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x574]
mov edx, eax
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x544]
mov edx, eax
call fcn.00413e40
add esp, 4
lea ecx, [ebp - 0x220]
mov edx, eax
call fcn.00413f30
add esp, 4
mov ecx, 0x4323e4
push eax
call fcn.004138d0
mov edx, dword [ebp - 0x20c]
cmp edx, 0x10
jb 0x411744
mov ecx, dword [ebp - 0x220]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41173a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x530]
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x20c], 0xf
mov byte [ebp - 0x220], 0
cmp edx, 0x10
jb 0x411799
mov ecx, dword [ebp - 0x544]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41178f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x560]
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x530], 0xf
mov byte [ebp - 0x544], 0
cmp edx, 0x10
jb 0x4117ee
mov ecx, dword [ebp - 0x574]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4117e4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x410]
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x560], 0xf
mov byte [ebp - 0x574], 0
cmp edx, 0x10
jb 0x411843
mov ecx, dword [ebp - 0x424]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411839
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x578]
mov dword [ebp - 0x414], 0
mov dword [ebp - 0x410], 0xf
mov byte [ebp - 0x424], 0
cmp edx, 0x10
jb 0x411898
mov ecx, dword [ebp - 0x58c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41188e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x590]
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0x578], 0xf
mov byte [ebp - 0x58c], 0
cmp edx, 0x10
jb 0x4118ed
mov ecx, dword [ebp - 0x5a4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4118e3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x5a8]
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 0xf
mov byte [ebp - 0x5a4], 0
cmp edx, 0x10
jb 0x411942
mov ecx, dword [ebp - 0x5bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411938
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x5d8]
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 0xf
mov byte [ebp - 0x5bc], 0
cmp edx, 0x10
jb 0x411997
mov ecx, dword [ebp - 0x5ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41198d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x5f0]
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], 0
cmp edx, 0x10
jb 0x4119ec
mov ecx, dword [ebp - 0x604]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4119e2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x608]
mov dword [ebp - 0x5f4], 0
mov dword [ebp - 0x5f0], 0xf
mov byte [ebp - 0x604], 0
cmp edx, 0x10
jb 0x411a41
mov ecx, dword [ebp - 0x61c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411a37
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x620]
mov dword [ebp - 0x60c], 0
mov dword [ebp - 0x608], 0xf
mov byte [ebp - 0x61c], 0
cmp edx, 0x10
jb 0x411a96
mov ecx, dword [ebp - 0x634]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411a8c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x638]
mov dword [ebp - 0x624], 0
mov dword [ebp - 0x620], 0xf
mov byte [ebp - 0x634], 0
cmp edx, 0x10
jb 0x411aeb
mov ecx, dword [ebp - 0x64c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411ae1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x338]
mov dword [ebp - 0x63c], 0
mov dword [ebp - 0x638], 0xf
mov byte [ebp - 0x64c], 0
cmp edx, 0x10
jb 0x411b40
mov ecx, dword [ebp - 0x34c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411b36
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x350]
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x338], 0xf
mov byte [ebp - 0x34c], 0
cmp edx, 0x10
jb 0x411b95
mov ecx, dword [ebp - 0x364]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411b8b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x368]
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x350], 0xf
mov byte [ebp - 0x364], 0
cmp edx, 0x10
jb 0x411bea
mov ecx, dword [ebp - 0x37c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411be0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x380]
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x368], 0xf
mov byte [ebp - 0x37c], 0
cmp edx, 0x10
jb 0x411c3f
mov ecx, dword [ebp - 0x394]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411c35
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x384], 0
mov dword [ebp - 0x380], 0xf
mov byte [ebp - 0x394], 0
cmp edx, 0x10
jb 0x411c94
mov ecx, dword [ebp - 0x3ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411c8a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x3b0]
mov dword [ebp - 0x39c], 0
mov dword [ebp - 0x398], 0xf
mov byte [ebp - 0x3ac], 0
cmp edx, 0x10
jb 0x411ce9
mov ecx, dword [ebp - 0x3c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411cdf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x3b0], 0xf
mov byte [ebp - 0x3c4], 0
cmp edx, 0x10
jb 0x411d3e
mov ecx, dword [ebp - 0x3dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411d34
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x3e0]
mov dword [ebp - 0x3cc], 0
mov dword [ebp - 0x3c8], 0xf
mov byte [ebp - 0x3dc], 0
cmp edx, 0x10
jb 0x411d93
mov ecx, dword [ebp - 0x3f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411d89
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x3f8]
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x3e0], 0xf
mov byte [ebp - 0x3f4], 0
cmp edx, 0x10
jb 0x411de8
mov ecx, dword [ebp - 0x40c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411dde
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x5c0]
mov dword [ebp - 0x3fc], 0
mov dword [ebp - 0x3f8], 0xf
mov byte [ebp - 0x40c], 0
cmp edx, 0x10
jb 0x411e3d
mov ecx, dword [ebp - 0x5d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411e33
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x428]
mov dword [ebp - 0x5c4], 0
mov dword [ebp - 0x5c0], 0xf
mov byte [ebp - 0x5d4], 0
cmp edx, 0x10
jb 0x411e92
mov ecx, dword [ebp - 0x43c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411e88
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x440]
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0x428], 0xf
mov byte [ebp - 0x43c], 0
cmp edx, 0x10
jb 0x411ee7
mov ecx, dword [ebp - 0x454]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411edd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x458]
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x440], 0xf
mov byte [ebp - 0x454], 0
cmp edx, 0x10
jb 0x411f3c
mov ecx, dword [ebp - 0x46c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411f32
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x470]
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 0xf
mov byte [ebp - 0x46c], 0
cmp edx, 0x10
jb 0x411f91
mov ecx, dword [ebp - 0x484]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411f87
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x488]
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x470], 0xf
mov byte [ebp - 0x484], 0
cmp edx, 0x10
jb 0x411fe6
mov ecx, dword [ebp - 0x49c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x411fdc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x4a0]
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x488], 0xf
mov byte [ebp - 0x49c], 0
cmp edx, 0x10
jb 0x41203b
mov ecx, dword [ebp - 0x4b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x412031
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x4b8]
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 0xf
mov byte [ebp - 0x4b4], 0
cmp edx, 0x10
jb 0x412090
mov ecx, dword [ebp - 0x4cc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x412086
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x4d0]
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 0xf
mov byte [ebp - 0x4cc], 0
cmp edx, 0x10
jb 0x4120e5
mov ecx, dword [ebp - 0x4e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4120db
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x4d0], 0xf
mov byte [ebp - 0x4e4], 0
cmp edx, 0x10
jb 0x41213a
mov ecx, dword [ebp - 0x4fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x412130
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x500]
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4e8], 0xf
mov byte [ebp - 0x4fc], 0
cmp edx, 0x10
jb 0x41218f
mov ecx, dword [ebp - 0x514]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x412185
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x500], 0xf
mov byte [ebp - 0x514], 0
cmp edx, 0x10
jb 0x4121e4
mov ecx, dword [ebp - 0x52c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4121da
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x650]
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x518], 0xf
mov byte [ebp - 0x52c], 0
cmp edx, 0x10
jb 0x412239
mov ecx, dword [ebp - 0x664]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41222f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x548]
mov dword [ebp - 0x654], 0
mov dword [ebp - 0x650], 0xf
mov byte [ebp - 0x664], 0
cmp edx, 0x10
jb 0x41228e
mov ecx, dword [ebp - 0x55c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x412284
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x54c], 0
mov dword [ebp - 0x548], 0xf
mov byte [ebp - 0x55c], 0
cmp edx, 0x10
jb 0x4122e3
mov ecx, dword [ebp - 0x334]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4122d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x2ec]
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x320], 0xf
mov byte [ebp - 0x334], 0
cmp edx, 0x10
jb 0x412338
mov ecx, dword [ebp - 0x300]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41232e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412520
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x244]
cmp edx, 0x10
jb 0x412372
mov ecx, dword [ebp - 0x258]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x412368
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412525
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x25c]
cmp edx, 0x10
jb 0x4123ac
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4123a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412525
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x274]
cmp edx, 0x10
jb 0x4123e6
mov ecx, dword [ebp - 0x288]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4123dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412525
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x22c]
cmp edx, 0x10
jb 0x412420
mov ecx, dword [ebp - 0x240]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x412416
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412525
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x28c]
cmp edx, 0x10
jb 0x41245a
mov ecx, dword [ebp - 0x2a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x412450
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412525
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x2a4]
cmp edx, 0x10
jb 0x412494
mov ecx, dword [ebp - 0x2b8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41248a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412525
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x2bc]
cmp edx, 0x10
jb 0x4124ca
mov ecx, dword [ebp - 0x2d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4124c0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412525
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x2d4]
cmp edx, 0x10
jb 0x412500
mov ecx, dword [ebp - 0x2e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4124f6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412525
push edx
push ecx
call fcn.0041535e
add esp, 8
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00414cec
mov esp, ebp
pop ebp
ret
call fcn.004187ac
call fcn.004187ac
call fcn.004187ac
call fcn.004187ac
call fcn.004187ac
int3