Function at 0x408a90
Capabilities:
Get session user name
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4ec
push esi
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00412c60
lea ecx, [ebp - 0x4c]
call fcn.00405500
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x436464
call fcn.00412c60
lea ecx, [ebp - 0x18]
call fcn.00402b70
add esp, 0x1c
lea ecx, [ebp - 0x3c4]
mov edx, eax
call fcn.00413110
mov edx, dword [ebp - 4]
add esp, 4
cmp edx, 0x10
jb 0x408b12
mov ecx, dword [ebp - 0x18]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408b08
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c92
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x38]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0xf
mov byte [ebp - 0x18], 0
cmp edx, 0x10
jb 0x408b58
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408b4e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c92
push edx
push ecx
call fcn.00414180
add esp, 8
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4c]
call fcn.004059d0
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x104
push eax
lea eax, [ebp - 0x4e8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [ebp - 0x4e8]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x18], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408b96
sub ecx, edx
lea eax, [ebp - 0x4e8]
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.00412fd0
lea ecx, [ebp - 0x34]
call fcn.004052a0
cmp dword [eax + 0x14], 0x10
jb 0x408bbf
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov edx, dword [ebp - 0x20]
cmp edx, 0x10
jb 0x408bfa
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408bf0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c97
push edx
push ecx
call fcn.00414180
add esp, 8
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x4363bc
call fcn.00412c60
lea ecx, [ebp - 0x3dc]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x43623c
call fcn.00412c60
lea ecx, [ebp - 0x34]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412c60
lea ecx, [ebp - 0x37c]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x3c4]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435c54
call fcn.00412c60
lea ecx, [ebp - 0x364]
call fcn.00402b70
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x435fcc
call fcn.00412c60
lea ecx, [ebp - 0x34c]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4360d4
call fcn.00412c60
lea ecx, [ebp - 0x334]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412c60
lea ecx, [ebp - 0x31c]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x3c4]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435bc4
call fcn.00412c60
lea ecx, [ebp - 0x304]
call fcn.00402b70
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x435fcc
call fcn.00412c60
lea ecx, [ebp - 0x2ec]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x43623c
call fcn.00412c60
lea ecx, [ebp - 0x2d4]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412c60
lea ecx, [ebp - 0x2bc]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435c54
call fcn.00412c60
lea ecx, [ebp - 0x2a4]
call fcn.00402b70
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x435fcc
call fcn.00412c60
lea ecx, [ebp - 0x28c]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4360d4
call fcn.00412c60
lea ecx, [ebp - 0x274]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412c60
lea ecx, [ebp - 0x25c]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435bc4
call fcn.00412c60
lea ecx, [ebp - 0x244]
call fcn.00402b70
add esp, 0x1c
lea ecx, [ebp - 0x22c]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0x214]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x1fc]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0x1e4]
mov edx, eax
call fcn.00413110
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1cc]
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x1b4]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x19c]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0x184]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x16c]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0x154]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x13c]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x124]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x10c]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0xf4]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0xdc]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0xc4]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0xac]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x94]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x7c]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0x64]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x3ac]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0x394]
mov edx, eax
call fcn.00413110
add esp, 4
mov edx, eax
mov ecx, esi
call fcn.00413110
add esp, 4
call fcn.00403c30
mov edx, dword [ebp - 0x380]
add esp, 0x18
cmp edx, 0x10
jb 0x408fa9
mov ecx, dword [ebp - 0x394]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408f9f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x384], 0
mov dword [ebp - 0x380], 0xf
mov byte [ebp - 0x394], 0
cmp edx, 0x10
jb 0x408ffe
mov ecx, dword [ebp - 0x3ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408ff4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x39c], 0
mov dword [ebp - 0x398], 0xf
mov byte [ebp - 0x3ac], 0
cmp edx, 0x10
jb 0x40904d
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409043
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x409093
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409089
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x4090dc
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4090d2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x40912e
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409124
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x409183
mov ecx, dword [ebp - 0xc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409179
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
cmp edx, 0x10
jb 0x4091d8
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4091ce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
cmp edx, 0x10
jb 0x40922d
mov ecx, dword [ebp - 0xf4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409223
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
cmp edx, 0x10
jb 0x409282
mov ecx, dword [ebp - 0x10c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409278
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0xf
mov byte [ebp - 0x10c], 0
cmp edx, 0x10
jb 0x4092d7
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4092cd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
cmp edx, 0x10
jb 0x40932c
mov ecx, dword [ebp - 0x13c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409322
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x140]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0xf
mov byte [ebp - 0x13c], 0
cmp edx, 0x10
jb 0x409381
mov ecx, dword [ebp - 0x154]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409377
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x158]
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0xf
mov byte [ebp - 0x154], 0
cmp edx, 0x10
jb 0x4093d6
mov ecx, dword [ebp - 0x16c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4093cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x170]
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x158], 0xf
mov byte [ebp - 0x16c], 0
cmp edx, 0x10
jb 0x40942b
mov ecx, dword [ebp - 0x184]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409421
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x188]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0xf
mov byte [ebp - 0x184], 0
cmp edx, 0x10
jb 0x409480
mov ecx, dword [ebp - 0x19c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409476
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x1a0]
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0xf
mov byte [ebp - 0x19c], 0
cmp edx, 0x10
jb 0x4094d5
mov ecx, dword [ebp - 0x1b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4094cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0xf
mov byte [ebp - 0x1b4], 0
cmp edx, 0x10
jb 0x40952a
mov ecx, dword [ebp - 0x1cc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409520
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 0xf
mov byte [ebp - 0x1cc], 0
cmp edx, 0x10
jb 0x40957f
mov ecx, dword [ebp - 0x1e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409575
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x1e8]
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
cmp edx, 0x10
jb 0x4095d4
mov ecx, dword [ebp - 0x1fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4095ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x200]
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 0xf
mov byte [ebp - 0x1fc], 0
cmp edx, 0x10
jb 0x409629
mov ecx, dword [ebp - 0x214]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40961f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x218]
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 0xf
mov byte [ebp - 0x214], 0
cmp edx, 0x10
jb 0x40967e
mov ecx, dword [ebp - 0x22c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409674
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x230]
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 0xf
mov byte [ebp - 0x22c], 0
cmp edx, 0x10
jb 0x4096d3
mov ecx, dword [ebp - 0x244]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4096c9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0xf
mov byte [ebp - 0x244], 0
cmp edx, 0x10
jb 0x409728
mov ecx, dword [ebp - 0x25c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40971e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0xf
mov byte [ebp - 0x25c], 0
cmp edx, 0x10
jb 0x40977d
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409773
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 0xf
mov byte [ebp - 0x274], 0
cmp edx, 0x10
jb 0x4097d2
mov ecx, dword [ebp - 0x28c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4097c8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 0xf
mov byte [ebp - 0x28c], 0
cmp edx, 0x10
jb 0x409827
mov ecx, dword [ebp - 0x2a4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40981d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x2a8]
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 0xf
mov byte [ebp - 0x2a4], 0
cmp edx, 0x10
jb 0x40987c
mov ecx, dword [ebp - 0x2bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409872
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x2c0]
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2a8], 0xf
mov byte [ebp - 0x2bc], 0
cmp edx, 0x10
jb 0x4098d1
mov ecx, dword [ebp - 0x2d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4098c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c0], 0xf
mov byte [ebp - 0x2d4], 0
cmp edx, 0x10
jb 0x409926
mov ecx, dword [ebp - 0x2ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40991c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2d8], 0xf
mov byte [ebp - 0x2ec], 0
cmp edx, 0x10
jb 0x40997b
mov ecx, dword [ebp - 0x304]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409971
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x308]
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f0], 0xf
mov byte [ebp - 0x304], 0
cmp edx, 0x10
jb 0x4099d0
mov ecx, dword [ebp - 0x31c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4099c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 0xf
mov byte [ebp - 0x31c], 0
cmp edx, 0x10
jb 0x409a25
mov ecx, dword [ebp - 0x334]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409a1b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x338]
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x320], 0xf
mov byte [ebp - 0x334], 0
cmp edx, 0x10
jb 0x409a7a
mov ecx, dword [ebp - 0x34c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409a70
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x350]
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x338], 0xf
mov byte [ebp - 0x34c], 0
cmp edx, 0x10
jb 0x409acf
mov ecx, dword [ebp - 0x364]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409ac5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x368]
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x350], 0xf
mov byte [ebp - 0x364], 0
cmp edx, 0x10
jb 0x409b24
mov ecx, dword [ebp - 0x37c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409b1a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x368], 0xf
mov byte [ebp - 0x37c], 0
cmp edx, 0x10
jb 0x409b73
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409b69
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp edx, 0x10
jb 0x409bbf
mov ecx, dword [ebp - 0x3dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409bb5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409c9c
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 4]
cmp edx, 0x10
jb 0x409bf3
mov ecx, dword [ebp - 0x18]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409be9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409ca1
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x38]
cmp edx, 0x10
jb 0x409c27
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409c1d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409ca1
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x3b0]
cmp edx, 0x10
jb 0x409c5d
mov ecx, dword [ebp - 0x3c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409c53
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409ca1
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp + 0x1c]
cmp edx, 0x10
jb 0x409c8d
mov ecx, dword [ebp + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409c83
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409ca1
push edx
push ecx
call fcn.00414180
add esp, 8
pop esi
mov esp, ebp
pop ebp
ret
call fcn.004188f4
call fcn.004188f4
call fcn.004188f4
call fcn.004188f4
int3