Function at 0x40a830
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5547ad
mov eax, dword fs:[0]
push eax
sub esp, 0x314
mov eax, dword [0x5b0070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0x305], dl
mov edi, ecx
cmp dword [edi + 0x10], 0
jne 0x40a872
xor al, al
jmp 0x40b7df
mov esi, 7
mov dword [ebp - 0x2a8], 0
xor eax, eax
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2a8], esi
mov dword [ebp - 0x2ac], 0
mov word [ebp - 0x2bc], ax
mov dword [ebp - 4], eax
push 0x20c
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.00500e00
add esp, 0xc
lea eax, [ebp - 0x21c]
push 0x105
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
dec eax
cmp eax, 0x103
ja 0x40b778
xor eax, eax
lea ecx, [ebp - 0x21c]
mov word [ebp - 0x12], ax
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40a8f0
sub ecx, edx
lea eax, [ebp - 0x21c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x2bc]
call fcn.00403570
push 8
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x234]
push str.System32
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
call fcn.00403570
mov byte [ebp - 4], 1
lea eax, [ebp - 0x234]
push eax
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x25c]
call fcn.00460280
add esp, 4
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40a9b8
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a9ae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b7fa
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x224], 0
push 0xc
mov dword [ebp - 0x310], eax
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x30c], eax
push str.regsvr32.exe
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
call fcn.00403570
mov byte [ebp - 4], 4
lea eax, [ebp - 0x320]
push eax
lea edx, [ebp - 0x25c]
lea ecx, [ebp - 0x234]
call fcn.00460280
add esp, 4
mov esi, eax
mov byte [ebp - 4], 5
lea eax, [ebp - 0x25c]
cmp eax, esi
je 0x40aa6a
mov ecx, eax
call fcn.004034b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x25c], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x24c], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40aaae
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40aaa4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b7ff
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x30c]
cmp edx, 8
jb 0x40ab0f
mov ecx, dword [ebp - 0x320]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ab05
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b804
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x310], 0
push 8
mov dword [ebp - 0x224], eax
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x220], eax
push str.SysWOW64
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
call fcn.00403570
mov byte [ebp - 4], 6
lea eax, [ebp - 0x234]
push eax
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x274]
call fcn.00460280
add esp, 4
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40abc4
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40abba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b809
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x224], 0
push 0xc
mov dword [ebp - 0x310], eax
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x30c], eax
push str.regsvr32.exe
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
call fcn.00403570
mov byte [ebp - 4], 9
lea eax, [ebp - 0x320]
push eax
lea edx, [ebp - 0x274]
lea ecx, [ebp - 0x234]
call fcn.00460280
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x274]
cmp eax, esi
je 0x40ac76
mov ecx, eax
call fcn.004034b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x274], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x264], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40acba
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40acb0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b80e
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x30c]
cmp edx, 8
jb 0x40ad1b
mov ecx, dword [ebp - 0x320]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ad11
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b813
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x310], 0
push 3
mov dword [ebp - 0x294], eax
lea ecx, [ebp - 0x2a4]
mov dword [ebp - 0x290], eax
push 0x5840ec
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], 7
mov word [ebp - 0x2a4], ax
call fcn.00403570
mov byte [ebp - 4], 0xb
cmp byte [ebp - 0x305], 0
jne 0x40ad8c
push 3
push 0x5840f4
lea ecx, [ebp - 0x2a4]
call fcn.0040b8b0
push 0xf
xor eax, eax
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0
lea ecx, [ebp - 0x320]
push str.2345SafeBho.dll
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
call fcn.00403570
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x320]
push eax
mov edx, edi
lea ecx, [ebp - 0x2ec]
call fcn.00460280
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x30c]
cmp edx, 8
jb 0x40ae2e
mov ecx, dword [ebp - 0x320]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ae24
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b818
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x310], 0
lea edx, [ebp - 0x2ec]
mov dword [ebp - 0x30c], 7
lea ecx, [ebp - 0x234]
mov word [ebp - 0x320], ax
call fcn.00460560
mov esi, eax
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x2ec]
cmp eax, esi
je 0x40ae9d
mov ecx, eax
call fcn.004034b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x2ec], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x2dc], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40aee1
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40aed7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b81d
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x224], 0
push 0x11
mov dword [ebp - 0x310], eax
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x30c], eax
push str.2345SafeBho64.dll
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
call fcn.00403570
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x320]
push eax
mov edx, edi
lea ecx, [ebp - 0x2d4]
call fcn.00460280
add esp, 4
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x30c]
cmp edx, 8
jb 0x40af92
mov ecx, dword [ebp - 0x320]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40af88
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b822
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x310], 0
lea edx, [ebp - 0x2d4]
mov dword [ebp - 0x30c], 7
lea ecx, [ebp - 0x320]
mov word [ebp - 0x320], ax
call fcn.00460560
mov esi, eax
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x2d4]
cmp eax, esi
je 0x40b001
mov ecx, eax
call fcn.004034b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x2d4], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x2c4], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x30c]
cmp edx, 8
jb 0x40b045
mov ecx, dword [ebp - 0x320]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b03b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b827
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x310], 0
mov word [ebp - 0x320], ax
lea edx, [ebp - 0x2a4]
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x30c], 7
push eax
lea ecx, [ebp - 0x28c]
call fcn.0040b960
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x2d4]
push eax
lea edx, [ebp - 0x2a4]
lea ecx, [ebp - 0x304]
call fcn.0040b960
add esp, 8
mov byte [ebp - 4], 0x15
xorps xmm0, xmm0
lea ecx, [ebp - 0x244]
movups xmmword [ebp - 0x244], xmm0
call fcn.0042e910
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x23c]
test eax, eax
je 0x40b0d2
cmp dword [ebp - 0x238], 0
jne 0x40b0d2
lea ecx, [ebp - 0x238]
push ecx
call eax
mov byte [ebp - 0x305], 1
call fcn.0045d020
sub esp, 8
lea ecx, [ebp - 0x25c]
test al, al
je 0x40b35b
lea edx, [ebp - 0x304]
call fcn.00460e20
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
add esp, 8
test al, al
jne 0x40b234
push 2
mov ecx, 0x5b82b4
call fcn.004a6900
mov esi, eax
test esi, esi
je 0x40b22d
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov byte [ebp - 4], 0x17
call edi
cmp dword [ebp - 0x2f0], 8
lea edx, [ebp - 0x304]
push eax
cmovae edx, dword [ebp - 0x304]
lea ecx, [ebp - 0x25c]
cmp dword [ebp - 0x248], 8
lea eax, [ebp - 0x234]
push edx
cmovae ecx, dword [ebp - 0x25c]
push ecx
push str.WriteSafeBho_failed__regsvr__s___cmdLine64__s___Err__d_
push eax
call fcn.004a6f10
add esp, 0x14
lea eax, [ebp - 0x234]
mov ecx, 0x5b82b4
push 0x4b
push str.RC::InstallBho
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotectprotectsdk_srcprotectlogistics_srcutils_rcinstallbhoutils.cpp
push eax
push 2
call fcn.004a6970
cmp esi, 1
jbe 0x40b1cc
lea eax, [ebp - 0x234]
mov ecx, 0x5b82b4
push eax
call fcn.004a6d20
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40b210
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b206
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b82c
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov byte [ebp - 0x305], 0
sub esp, 8
lea edx, [ebp - 0x28c]
lea ecx, [ebp - 0x274]
call fcn.00460e20
add esp, 8
test al, al
jne 0x40b458
push 2
mov ecx, 0x5b82b4
call fcn.004a6900
mov esi, eax
test esi, esi
je 0x40b451
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov byte [ebp - 4], 0x18
call edi
cmp dword [ebp - 0x278], 8
lea edx, [ebp - 0x28c]
push eax
cmovae edx, dword [ebp - 0x28c]
lea ecx, [ebp - 0x274]
cmp dword [ebp - 0x260], 8
lea eax, [ebp - 0x234]
push edx
cmovae ecx, dword [ebp - 0x274]
push ecx
push str.WriteSafeBho_failed__regsvr64__s___cmdLine__s___Err__d_
push eax
call fcn.004a6f10
add esp, 0x14
lea eax, [ebp - 0x234]
mov ecx, 0x5b82b4
push 0x50
push str.RC::InstallBho
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotectprotectsdk_srcprotectlogistics_srcutils_rcinstallbhoutils.cpp
push eax
push 2
call fcn.004a6970
cmp esi, 1
jbe 0x40b314
lea eax, [ebp - 0x234]
mov ecx, 0x5b82b4
push eax
call fcn.004a6d20
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40b438
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b42e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b831
jmp 0x40b42e
lea edx, [ebp - 0x28c]
call fcn.00460e20
add esp, 8
test al, al
jne 0x40b458
push 2
mov ecx, 0x5b82b4
call fcn.004a6900
mov esi, eax
test esi, esi
je 0x40b451
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov byte [ebp - 4], 0x19
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 0x278], 8
lea edx, [ebp - 0x28c]
push eax
cmovae edx, dword [ebp - 0x28c]
lea ecx, [ebp - 0x25c]
cmp dword [ebp - 0x248], 8
lea eax, [ebp - 0x234]
push edx
cmovae ecx, dword [ebp - 0x25c]
push ecx
push str.WriteSafeBho_failed__regsvr__s___cmdLine__s___Err__d_
push eax
call fcn.004a6f10
add esp, 0x14
lea eax, [ebp - 0x234]
mov ecx, 0x5b82b4
push 0x58
push str.RC::InstallBho
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotectprotectsdk_srcprotectlogistics_srcutils_rcinstallbhoutils.cpp
push eax
push 2
call fcn.004a6970
cmp esi, 1
jbe 0x40b314
jmp 0x40b303
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 7
mov dword [ebp - 0x224], eax
mov word [ebp - 0x234], ax
mov byte [ebp - 0x305], 0
mov eax, dword [ebp - 0x240]
test eax, eax
je 0x40b46a
push dword [ebp - 0x238]
call eax
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x240]
test eax, eax
je 0x40b480
push dword [ebp - 0x238]
call eax
mov eax, dword [ebp - 0x244]
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
test eax, eax
je 0x40b4a6
push eax
call esi
mov ecx, dword [ebp - 0x244]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [ebp - 0x244], ecx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x244]
test eax, eax
je 0x40b4ca
push eax
call esi
mov ecx, dword [ebp - 0x244]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [ebp - 0x244], ecx
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x2f0]
cmp edx, 8
jb 0x40b50e
mov ecx, dword [ebp - 0x304]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b504
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b831
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f0], 7
mov word [ebp - 0x304], ax
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x278]
cmp edx, 8
jb 0x40b56f
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b565
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b831
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 7
mov word [ebp - 0x28c], ax
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x2c0]
cmp edx, 8
jb 0x40b5d0
mov ecx, dword [ebp - 0x2d4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b5c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b831
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c0], 7
mov word [ebp - 0x2d4], ax
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x2d8]
cmp edx, 8
jb 0x40b631
mov ecx, dword [ebp - 0x2ec]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b627
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b831
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2d8], 7
mov word [ebp - 0x2ec], ax
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x290]
cmp edx, 8
jb 0x40b692
mov ecx, dword [ebp - 0x2a4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b688
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b831
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 7
mov word [ebp - 0x2a4], ax
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x260]
cmp edx, 8
jb 0x40b6f3
mov ecx, dword [ebp - 0x274]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b6e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b831
push edx
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 7
mov word [ebp - 0x274], ax
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x248]
cmp edx, 8
jb 0x40b753
mov ecx, dword [ebp - 0x25c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b749
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b831
push edx
push ecx
call fcn.004e566f
add esp, 8
mov esi, dword [ebp - 0x2a8]
xor eax, eax
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 7
mov word [ebp - 0x25c], ax
jmp 0x40b77f
mov byte [ebp - 0x305], 0
mov dword [ebp - 4], 0xffffffff
cmp esi, 8
jb 0x40b7bc
mov ecx, dword [ebp - 0x2bc]
lea esi, [esi*2 + 2]
mov eax, ecx
cmp esi, 0x1000
jb 0x40b7b2
mov ecx, dword [ecx - 4]
add esi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b831
push esi
push ecx
call fcn.004e566f
add esp, 8
xor eax, eax
mov dword [ebp - 0x2ac], 0
mov word [ebp - 0x2bc], ax
mov al, byte [ebp - 0x305]
mov dword [ebp - 0x2a8], 7
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e562e
mov esp, ebp
pop ebp
ret
call fcn.0050ac18
call fcn.0050ac18
call fcn.0050ac18
call fcn.0050ac18
call fcn.0050ac18
call fcn.0050ac18
call fcn.0050ac18
call fcn.0050ac18
call fcn.0050ac18
call fcn.0050ac18
call fcn.0050ac18
call fcn.0050ac18
int3