Function at 0x409d10
Capabilities:
Get session user name
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4ec
push esi
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00412e40
lea ecx, [ebp - 0x4c]
call fcn.00405510
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x436464
call fcn.00412e40
lea ecx, [ebp - 0x18]
call fcn.00402b70
add esp, 0x1c
lea ecx, [ebp - 0x3c4]
mov edx, eax
call fcn.004132f0
mov edx, dword [ebp - 4]
add esp, 4
cmp edx, 0x10
jb 0x409d92
mov ecx, dword [ebp - 0x18]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409d88
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af12
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x38]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0xf
mov byte [ebp - 0x18], 0
cmp edx, 0x10
jb 0x409dd8
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409dce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af12
push edx
push ecx
call fcn.004142b0
add esp, 8
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4c]
call fcn.004059e0
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x104
push eax
lea eax, [ebp - 0x4e8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [ebp - 0x4e8]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x18], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409e16
sub ecx, edx
lea eax, [ebp - 0x4e8]
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.004131b0
lea ecx, [ebp - 0x34]
call fcn.004052b0
cmp dword [eax + 0x14], 0x10
jb 0x409e3f
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov edx, dword [ebp - 0x20]
cmp edx, 0x10
jb 0x409e7a
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409e70
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af17
push edx
push ecx
call fcn.004142b0
add esp, 8
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x4363bc
call fcn.00412e40
lea ecx, [ebp - 0x3dc]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435ef4
call fcn.00412e40
lea ecx, [ebp - 0x34]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412e40
lea ecx, [ebp - 0x37c]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x3c4]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435c54
call fcn.00412e40
lea ecx, [ebp - 0x364]
call fcn.00402b70
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x435fcc
call fcn.00412e40
lea ecx, [ebp - 0x34c]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4360d4
call fcn.00412e40
lea ecx, [ebp - 0x334]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412e40
lea ecx, [ebp - 0x31c]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x3c4]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435bc4
call fcn.00412e40
lea ecx, [ebp - 0x304]
call fcn.00402b70
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x435fcc
call fcn.00412e40
lea ecx, [ebp - 0x2ec]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435ef4
call fcn.00412e40
lea ecx, [ebp - 0x2d4]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412e40
lea ecx, [ebp - 0x2bc]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435c54
call fcn.00412e40
lea ecx, [ebp - 0x2a4]
call fcn.00402b70
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x435fcc
call fcn.00412e40
lea ecx, [ebp - 0x28c]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4360d4
call fcn.00412e40
lea ecx, [ebp - 0x274]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412e40
lea ecx, [ebp - 0x25c]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435bc4
call fcn.00412e40
lea ecx, [ebp - 0x244]
call fcn.00402b70
add esp, 0x1c
lea ecx, [ebp - 0x22c]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0x214]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x1fc]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0x1e4]
mov edx, eax
call fcn.004132f0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1cc]
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x1b4]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x19c]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0x184]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x16c]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0x154]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x13c]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x124]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x10c]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0xf4]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0xdc]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0xc4]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0xac]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x94]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x7c]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0x64]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x3ac]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0x394]
mov edx, eax
call fcn.004132f0
add esp, 4
mov edx, eax
mov ecx, esi
call fcn.004132f0
add esp, 4
call fcn.00403c40
mov edx, dword [ebp - 0x380]
add esp, 0x18
cmp edx, 0x10
jb 0x40a229
mov ecx, dword [ebp - 0x394]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a21f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x384], 0
mov dword [ebp - 0x380], 0xf
mov byte [ebp - 0x394], 0
cmp edx, 0x10
jb 0x40a27e
mov ecx, dword [ebp - 0x3ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a274
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x39c], 0
mov dword [ebp - 0x398], 0xf
mov byte [ebp - 0x3ac], 0
cmp edx, 0x10
jb 0x40a2cd
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a2c3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x40a313
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a309
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x40a35c
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a352
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x40a3ae
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a3a4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x40a403
mov ecx, dword [ebp - 0xc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a3f9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
cmp edx, 0x10
jb 0x40a458
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a44e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
cmp edx, 0x10
jb 0x40a4ad
mov ecx, dword [ebp - 0xf4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a4a3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
cmp edx, 0x10
jb 0x40a502
mov ecx, dword [ebp - 0x10c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a4f8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0xf
mov byte [ebp - 0x10c], 0
cmp edx, 0x10
jb 0x40a557
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a54d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
cmp edx, 0x10
jb 0x40a5ac
mov ecx, dword [ebp - 0x13c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a5a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x140]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0xf
mov byte [ebp - 0x13c], 0
cmp edx, 0x10
jb 0x40a601
mov ecx, dword [ebp - 0x154]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a5f7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x158]
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0xf
mov byte [ebp - 0x154], 0
cmp edx, 0x10
jb 0x40a656
mov ecx, dword [ebp - 0x16c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a64c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x170]
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x158], 0xf
mov byte [ebp - 0x16c], 0
cmp edx, 0x10
jb 0x40a6ab
mov ecx, dword [ebp - 0x184]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a6a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x188]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0xf
mov byte [ebp - 0x184], 0
cmp edx, 0x10
jb 0x40a700
mov ecx, dword [ebp - 0x19c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a6f6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x1a0]
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0xf
mov byte [ebp - 0x19c], 0
cmp edx, 0x10
jb 0x40a755
mov ecx, dword [ebp - 0x1b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a74b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0xf
mov byte [ebp - 0x1b4], 0
cmp edx, 0x10
jb 0x40a7aa
mov ecx, dword [ebp - 0x1cc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a7a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 0xf
mov byte [ebp - 0x1cc], 0
cmp edx, 0x10
jb 0x40a7ff
mov ecx, dword [ebp - 0x1e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a7f5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x1e8]
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
cmp edx, 0x10
jb 0x40a854
mov ecx, dword [ebp - 0x1fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a84a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x200]
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 0xf
mov byte [ebp - 0x1fc], 0
cmp edx, 0x10
jb 0x40a8a9
mov ecx, dword [ebp - 0x214]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a89f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x218]
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 0xf
mov byte [ebp - 0x214], 0
cmp edx, 0x10
jb 0x40a8fe
mov ecx, dword [ebp - 0x22c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a8f4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x230]
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 0xf
mov byte [ebp - 0x22c], 0
cmp edx, 0x10
jb 0x40a953
mov ecx, dword [ebp - 0x244]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a949
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0xf
mov byte [ebp - 0x244], 0
cmp edx, 0x10
jb 0x40a9a8
mov ecx, dword [ebp - 0x25c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a99e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0xf
mov byte [ebp - 0x25c], 0
cmp edx, 0x10
jb 0x40a9fd
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a9f3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 0xf
mov byte [ebp - 0x274], 0
cmp edx, 0x10
jb 0x40aa52
mov ecx, dword [ebp - 0x28c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40aa48
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 0xf
mov byte [ebp - 0x28c], 0
cmp edx, 0x10
jb 0x40aaa7
mov ecx, dword [ebp - 0x2a4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40aa9d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x2a8]
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 0xf
mov byte [ebp - 0x2a4], 0
cmp edx, 0x10
jb 0x40aafc
mov ecx, dword [ebp - 0x2bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40aaf2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x2c0]
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2a8], 0xf
mov byte [ebp - 0x2bc], 0
cmp edx, 0x10
jb 0x40ab51
mov ecx, dword [ebp - 0x2d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ab47
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c0], 0xf
mov byte [ebp - 0x2d4], 0
cmp edx, 0x10
jb 0x40aba6
mov ecx, dword [ebp - 0x2ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ab9c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2d8], 0xf
mov byte [ebp - 0x2ec], 0
cmp edx, 0x10
jb 0x40abfb
mov ecx, dword [ebp - 0x304]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40abf1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x308]
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f0], 0xf
mov byte [ebp - 0x304], 0
cmp edx, 0x10
jb 0x40ac50
mov ecx, dword [ebp - 0x31c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ac46
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 0xf
mov byte [ebp - 0x31c], 0
cmp edx, 0x10
jb 0x40aca5
mov ecx, dword [ebp - 0x334]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ac9b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x338]
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x320], 0xf
mov byte [ebp - 0x334], 0
cmp edx, 0x10
jb 0x40acfa
mov ecx, dword [ebp - 0x34c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40acf0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x350]
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x338], 0xf
mov byte [ebp - 0x34c], 0
cmp edx, 0x10
jb 0x40ad4f
mov ecx, dword [ebp - 0x364]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ad45
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x368]
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x350], 0xf
mov byte [ebp - 0x364], 0
cmp edx, 0x10
jb 0x40ada4
mov ecx, dword [ebp - 0x37c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ad9a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x368], 0xf
mov byte [ebp - 0x37c], 0
cmp edx, 0x10
jb 0x40adf3
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ade9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp edx, 0x10
jb 0x40ae3f
mov ecx, dword [ebp - 0x3dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ae35
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af1c
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 4]
cmp edx, 0x10
jb 0x40ae73
mov ecx, dword [ebp - 0x18]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ae69
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af21
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x38]
cmp edx, 0x10
jb 0x40aea7
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ae9d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af21
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x3b0]
cmp edx, 0x10
jb 0x40aedd
mov ecx, dword [ebp - 0x3c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40aed3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af21
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp + 0x1c]
cmp edx, 0x10
jb 0x40af0d
mov ecx, dword [ebp + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40af03
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40af21
push edx
push ecx
call fcn.004142b0
add esp, 8
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00418a24
call fcn.00418a24
call fcn.00418a24
call fcn.00418a24
int3