Function at 0x409cb0
Capabilities:
Get session user name
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4ec
push esi
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00412c60
lea ecx, [ebp - 0x4c]
call fcn.00405500
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x436464
call fcn.00412c60
lea ecx, [ebp - 0x18]
call fcn.00402b70
add esp, 0x1c
lea ecx, [ebp - 0x3c4]
mov edx, eax
call fcn.00413110
mov edx, dword [ebp - 4]
add esp, 4
cmp edx, 0x10
jb 0x409d32
mov ecx, dword [ebp - 0x18]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409d28
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aeb2
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x38]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0xf
mov byte [ebp - 0x18], 0
cmp edx, 0x10
jb 0x409d78
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409d6e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aeb2
push edx
push ecx
call fcn.00414180
add esp, 8
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4c]
call fcn.004059d0
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x104
push eax
lea eax, [ebp - 0x4e8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [ebp - 0x4e8]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x18], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409db6
sub ecx, edx
lea eax, [ebp - 0x4e8]
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.00412fd0
lea ecx, [ebp - 0x34]
call fcn.004052a0
cmp dword [eax + 0x14], 0x10
jb 0x409ddf
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov edx, dword [ebp - 0x20]
cmp edx, 0x10
jb 0x409e1a
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409e10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aeb7
push edx
push ecx
call fcn.00414180
add esp, 8
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x4363bc
call fcn.00412c60
lea ecx, [ebp - 0x3dc]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435ef4
call fcn.00412c60
lea ecx, [ebp - 0x34]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412c60
lea ecx, [ebp - 0x37c]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x3c4]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435c54
call fcn.00412c60
lea ecx, [ebp - 0x364]
call fcn.00402b70
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x435fcc
call fcn.00412c60
lea ecx, [ebp - 0x34c]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4360d4
call fcn.00412c60
lea ecx, [ebp - 0x334]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412c60
lea ecx, [ebp - 0x31c]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x3c4]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435bc4
call fcn.00412c60
lea ecx, [ebp - 0x304]
call fcn.00402b70
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x435fcc
call fcn.00412c60
lea ecx, [ebp - 0x2ec]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435ef4
call fcn.00412c60
lea ecx, [ebp - 0x2d4]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412c60
lea ecx, [ebp - 0x2bc]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435c54
call fcn.00412c60
lea ecx, [ebp - 0x2a4]
call fcn.00402b70
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x435fcc
call fcn.00412c60
lea ecx, [ebp - 0x28c]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4360d4
call fcn.00412c60
lea ecx, [ebp - 0x274]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412c60
lea ecx, [ebp - 0x25c]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435bc4
call fcn.00412c60
lea ecx, [ebp - 0x244]
call fcn.00402b70
add esp, 0x1c
lea ecx, [ebp - 0x22c]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0x214]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x1fc]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0x1e4]
mov edx, eax
call fcn.00413110
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1cc]
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x1b4]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x19c]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0x184]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x16c]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0x154]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x13c]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x124]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x10c]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0xf4]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0xdc]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0xc4]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0xac]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x94]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x7c]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0x64]
mov edx, eax
call fcn.00413110
add esp, 4
lea ecx, [ebp - 0x3ac]
mov edx, eax
call fcn.00413200
add esp, 4
lea ecx, [ebp - 0x394]
mov edx, eax
call fcn.00413110
add esp, 4
mov edx, eax
mov ecx, esi
call fcn.00413110
add esp, 4
call fcn.00403c30
mov edx, dword [ebp - 0x380]
add esp, 0x18
cmp edx, 0x10
jb 0x40a1c9
mov ecx, dword [ebp - 0x394]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a1bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x384], 0
mov dword [ebp - 0x380], 0xf
mov byte [ebp - 0x394], 0
cmp edx, 0x10
jb 0x40a21e
mov ecx, dword [ebp - 0x3ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a214
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x39c], 0
mov dword [ebp - 0x398], 0xf
mov byte [ebp - 0x3ac], 0
cmp edx, 0x10
jb 0x40a26d
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a263
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x40a2b3
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a2a9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x40a2fc
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a2f2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x40a34e
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a344
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x40a3a3
mov ecx, dword [ebp - 0xc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a399
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
cmp edx, 0x10
jb 0x40a3f8
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a3ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
cmp edx, 0x10
jb 0x40a44d
mov ecx, dword [ebp - 0xf4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a443
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
cmp edx, 0x10
jb 0x40a4a2
mov ecx, dword [ebp - 0x10c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a498
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0xf
mov byte [ebp - 0x10c], 0
cmp edx, 0x10
jb 0x40a4f7
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a4ed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
cmp edx, 0x10
jb 0x40a54c
mov ecx, dword [ebp - 0x13c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a542
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x140]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0xf
mov byte [ebp - 0x13c], 0
cmp edx, 0x10
jb 0x40a5a1
mov ecx, dword [ebp - 0x154]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a597
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x158]
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0xf
mov byte [ebp - 0x154], 0
cmp edx, 0x10
jb 0x40a5f6
mov ecx, dword [ebp - 0x16c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a5ec
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x170]
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x158], 0xf
mov byte [ebp - 0x16c], 0
cmp edx, 0x10
jb 0x40a64b
mov ecx, dword [ebp - 0x184]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a641
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x188]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0xf
mov byte [ebp - 0x184], 0
cmp edx, 0x10
jb 0x40a6a0
mov ecx, dword [ebp - 0x19c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a696
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x1a0]
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0xf
mov byte [ebp - 0x19c], 0
cmp edx, 0x10
jb 0x40a6f5
mov ecx, dword [ebp - 0x1b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a6eb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0xf
mov byte [ebp - 0x1b4], 0
cmp edx, 0x10
jb 0x40a74a
mov ecx, dword [ebp - 0x1cc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a740
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 0xf
mov byte [ebp - 0x1cc], 0
cmp edx, 0x10
jb 0x40a79f
mov ecx, dword [ebp - 0x1e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a795
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x1e8]
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
cmp edx, 0x10
jb 0x40a7f4
mov ecx, dword [ebp - 0x1fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a7ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x200]
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 0xf
mov byte [ebp - 0x1fc], 0
cmp edx, 0x10
jb 0x40a849
mov ecx, dword [ebp - 0x214]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a83f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x218]
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 0xf
mov byte [ebp - 0x214], 0
cmp edx, 0x10
jb 0x40a89e
mov ecx, dword [ebp - 0x22c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a894
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x230]
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 0xf
mov byte [ebp - 0x22c], 0
cmp edx, 0x10
jb 0x40a8f3
mov ecx, dword [ebp - 0x244]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a8e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0xf
mov byte [ebp - 0x244], 0
cmp edx, 0x10
jb 0x40a948
mov ecx, dword [ebp - 0x25c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a93e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0xf
mov byte [ebp - 0x25c], 0
cmp edx, 0x10
jb 0x40a99d
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a993
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 0xf
mov byte [ebp - 0x274], 0
cmp edx, 0x10
jb 0x40a9f2
mov ecx, dword [ebp - 0x28c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a9e8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 0xf
mov byte [ebp - 0x28c], 0
cmp edx, 0x10
jb 0x40aa47
mov ecx, dword [ebp - 0x2a4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40aa3d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x2a8]
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 0xf
mov byte [ebp - 0x2a4], 0
cmp edx, 0x10
jb 0x40aa9c
mov ecx, dword [ebp - 0x2bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40aa92
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x2c0]
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2a8], 0xf
mov byte [ebp - 0x2bc], 0
cmp edx, 0x10
jb 0x40aaf1
mov ecx, dword [ebp - 0x2d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40aae7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c0], 0xf
mov byte [ebp - 0x2d4], 0
cmp edx, 0x10
jb 0x40ab46
mov ecx, dword [ebp - 0x2ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ab3c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2d8], 0xf
mov byte [ebp - 0x2ec], 0
cmp edx, 0x10
jb 0x40ab9b
mov ecx, dword [ebp - 0x304]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ab91
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x308]
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f0], 0xf
mov byte [ebp - 0x304], 0
cmp edx, 0x10
jb 0x40abf0
mov ecx, dword [ebp - 0x31c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40abe6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 0xf
mov byte [ebp - 0x31c], 0
cmp edx, 0x10
jb 0x40ac45
mov ecx, dword [ebp - 0x334]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ac3b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x338]
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x320], 0xf
mov byte [ebp - 0x334], 0
cmp edx, 0x10
jb 0x40ac9a
mov ecx, dword [ebp - 0x34c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ac90
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x350]
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x338], 0xf
mov byte [ebp - 0x34c], 0
cmp edx, 0x10
jb 0x40acef
mov ecx, dword [ebp - 0x364]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ace5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x368]
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x350], 0xf
mov byte [ebp - 0x364], 0
cmp edx, 0x10
jb 0x40ad44
mov ecx, dword [ebp - 0x37c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ad3a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x368], 0xf
mov byte [ebp - 0x37c], 0
cmp edx, 0x10
jb 0x40ad93
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ad89
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp edx, 0x10
jb 0x40addf
mov ecx, dword [ebp - 0x3dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40add5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aebc
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 4]
cmp edx, 0x10
jb 0x40ae13
mov ecx, dword [ebp - 0x18]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ae09
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aec1
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x38]
cmp edx, 0x10
jb 0x40ae47
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ae3d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aec1
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp - 0x3b0]
cmp edx, 0x10
jb 0x40ae7d
mov ecx, dword [ebp - 0x3c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ae73
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aec1
push edx
push ecx
call fcn.00414180
add esp, 8
mov edx, dword [ebp + 0x1c]
cmp edx, 0x10
jb 0x40aead
mov ecx, dword [ebp + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40aea3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aec1
push edx
push ecx
call fcn.00414180
add esp, 8
pop esi
mov esp, ebp
pop ebp
ret
call fcn.004188f4
call fcn.004188f4
call fcn.004188f4
call fcn.004188f4
int3