Function at 0x40ac80
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55564d
mov eax, dword fs:[0]
push eax
sub esp, 0x314
mov eax, dword [0x5b2070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0x305], dl
mov edi, ecx
cmp dword [edi + 0x10], 0
jne 0x40acc2
xor al, al
jmp 0x40bc2f
mov esi, 7
mov dword [ebp - 0x2a8], 0
xor eax, eax
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2a8], esi
mov dword [ebp - 0x2ac], 0
mov word [ebp - 0x2bc], ax
mov dword [ebp - 4], eax
push 0x20c
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.00501c30
add esp, 0xc
lea eax, [ebp - 0x21c]
push 0x105
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
dec eax
cmp eax, 0x103
ja 0x40bbc8
xor eax, eax
lea ecx, [ebp - 0x21c]
mov word [ebp - 0x12], ax
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40ad40
sub ecx, edx
lea eax, [ebp - 0x21c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x2bc]
call fcn.00403570
push 8
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x234]
push str.System32
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
call fcn.00403570
mov byte [ebp - 4], 1
lea eax, [ebp - 0x234]
push eax
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x25c]
call fcn.00461040
add esp, 4
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40ae08
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40adfe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc4a
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x224], 0
push 0xc
mov dword [ebp - 0x310], eax
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x30c], eax
push str.regsvr32.exe
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
call fcn.00403570
mov byte [ebp - 4], 4
lea eax, [ebp - 0x320]
push eax
lea edx, [ebp - 0x25c]
lea ecx, [ebp - 0x234]
call fcn.00461040
add esp, 4
mov esi, eax
mov byte [ebp - 4], 5
lea eax, [ebp - 0x25c]
cmp eax, esi
je 0x40aeba
mov ecx, eax
call fcn.004034b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x25c], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x24c], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40aefe
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40aef4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc4f
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x30c]
cmp edx, 8
jb 0x40af5f
mov ecx, dword [ebp - 0x320]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40af55
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc54
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x310], 0
push 8
mov dword [ebp - 0x224], eax
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x220], eax
push str.SysWOW64
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
call fcn.00403570
mov byte [ebp - 4], 6
lea eax, [ebp - 0x234]
push eax
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x274]
call fcn.00461040
add esp, 4
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40b014
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b00a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc59
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x224], 0
push 0xc
mov dword [ebp - 0x310], eax
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x30c], eax
push str.regsvr32.exe
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
call fcn.00403570
mov byte [ebp - 4], 9
lea eax, [ebp - 0x320]
push eax
lea edx, [ebp - 0x274]
lea ecx, [ebp - 0x234]
call fcn.00461040
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x274]
cmp eax, esi
je 0x40b0c6
mov ecx, eax
call fcn.004034b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x274], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x264], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40b10a
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b100
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc5e
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x30c]
cmp edx, 8
jb 0x40b16b
mov ecx, dword [ebp - 0x320]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b161
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc63
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x310], 0
push 3
mov dword [ebp - 0x294], eax
lea ecx, [ebp - 0x2a4]
mov dword [ebp - 0x290], eax
push 0x585174
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], 7
mov word [ebp - 0x2a4], ax
call fcn.00403570
mov byte [ebp - 4], 0xb
cmp byte [ebp - 0x305], 0
jne 0x40b1dc
push 3
push 0x58517c
lea ecx, [ebp - 0x2a4]
call fcn.0040bd00
push 0xf
xor eax, eax
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0
lea ecx, [ebp - 0x320]
push str.2345SafeBho.dll
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
call fcn.00403570
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x320]
push eax
mov edx, edi
lea ecx, [ebp - 0x2ec]
call fcn.00461040
add esp, 4
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x30c]
cmp edx, 8
jb 0x40b27e
mov ecx, dword [ebp - 0x320]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b274
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc68
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x310], 0
lea edx, [ebp - 0x2ec]
mov dword [ebp - 0x30c], 7
lea ecx, [ebp - 0x234]
mov word [ebp - 0x320], ax
call fcn.00461320
mov esi, eax
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x2ec]
cmp eax, esi
je 0x40b2ed
mov ecx, eax
call fcn.004034b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x2ec], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x2dc], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40b331
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b327
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc6d
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x224], 0
push 0x11
mov dword [ebp - 0x310], eax
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x30c], eax
push str.2345SafeBho64.dll
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], 7
mov word [ebp - 0x320], ax
call fcn.00403570
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x320]
push eax
mov edx, edi
lea ecx, [ebp - 0x2d4]
call fcn.00461040
add esp, 4
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x30c]
cmp edx, 8
jb 0x40b3e2
mov ecx, dword [ebp - 0x320]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b3d8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc72
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x310], 0
lea edx, [ebp - 0x2d4]
mov dword [ebp - 0x30c], 7
lea ecx, [ebp - 0x320]
mov word [ebp - 0x320], ax
call fcn.00461320
mov esi, eax
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x2d4]
cmp eax, esi
je 0x40b451
mov ecx, eax
call fcn.004034b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x2d4], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x2c4], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x30c]
cmp edx, 8
jb 0x40b495
mov ecx, dword [ebp - 0x320]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b48b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc77
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x310], 0
mov word [ebp - 0x320], ax
lea edx, [ebp - 0x2a4]
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x30c], 7
push eax
lea ecx, [ebp - 0x28c]
call fcn.0040bdb0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x2d4]
push eax
lea edx, [ebp - 0x2a4]
lea ecx, [ebp - 0x304]
call fcn.0040bdb0
add esp, 8
mov byte [ebp - 4], 0x15
xorps xmm0, xmm0
lea ecx, [ebp - 0x244]
movups xmmword [ebp - 0x244], xmm0
call fcn.0042ed70
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x23c]
test eax, eax
je 0x40b522
cmp dword [ebp - 0x238], 0
jne 0x40b522
lea ecx, [ebp - 0x238]
push ecx
call eax
mov byte [ebp - 0x305], 1
call fcn.0045dd90
sub esp, 8
lea ecx, [ebp - 0x25c]
test al, al
je 0x40b7ab
lea edx, [ebp - 0x304]
call fcn.00461be0
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
add esp, 8
test al, al
jne 0x40b684
push 2
mov ecx, 0x5ba2b4
call fcn.004a7700
mov esi, eax
test esi, esi
je 0x40b67d
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov byte [ebp - 4], 0x17
call edi
cmp dword [ebp - 0x2f0], 8
lea edx, [ebp - 0x304]
push eax
cmovae edx, dword [ebp - 0x304]
lea ecx, [ebp - 0x25c]
cmp dword [ebp - 0x248], 8
lea eax, [ebp - 0x234]
push edx
cmovae ecx, dword [ebp - 0x25c]
push ecx
push str.WriteSafeBho_failed__regsvr__s___cmdLine64__s___Err__d_
push eax
call fcn.004a7d10
add esp, 0x14
lea eax, [ebp - 0x234]
mov ecx, 0x5ba2b4
push 0x4b
push str.RC::InstallBho
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotectprotectsdk_srcprotectlogistics_srcutils_rcinstallbhoutils.cpp
push eax
push 2
call fcn.004a7770
cmp esi, 1
jbe 0x40b61c
lea eax, [ebp - 0x234]
mov ecx, 0x5ba2b4
push eax
call fcn.004a7b20
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40b660
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b656
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc7c
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov byte [ebp - 0x305], 0
sub esp, 8
lea edx, [ebp - 0x28c]
lea ecx, [ebp - 0x274]
call fcn.00461be0
add esp, 8
test al, al
jne 0x40b8a8
push 2
mov ecx, 0x5ba2b4
call fcn.004a7700
mov esi, eax
test esi, esi
je 0x40b8a1
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov byte [ebp - 4], 0x18
call edi
cmp dword [ebp - 0x278], 8
lea edx, [ebp - 0x28c]
push eax
cmovae edx, dword [ebp - 0x28c]
lea ecx, [ebp - 0x274]
cmp dword [ebp - 0x260], 8
lea eax, [ebp - 0x234]
push edx
cmovae ecx, dword [ebp - 0x274]
push ecx
push str.WriteSafeBho_failed__regsvr64__s___cmdLine__s___Err__d_
push eax
call fcn.004a7d10
add esp, 0x14
lea eax, [ebp - 0x234]
mov ecx, 0x5ba2b4
push 0x50
push str.RC::InstallBho
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotectprotectsdk_srcprotectlogistics_srcutils_rcinstallbhoutils.cpp
push eax
push 2
call fcn.004a7770
cmp esi, 1
jbe 0x40b764
lea eax, [ebp - 0x234]
mov ecx, 0x5ba2b4
push eax
call fcn.004a7b20
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x220]
cmp edx, 8
jb 0x40b888
mov ecx, dword [ebp - 0x234]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b87e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc81
jmp 0x40b87e
lea edx, [ebp - 0x28c]
call fcn.00461be0
add esp, 8
test al, al
jne 0x40b8a8
push 2
mov ecx, 0x5ba2b4
call fcn.004a7700
mov esi, eax
test esi, esi
je 0x40b8a1
xor eax, eax
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
mov byte [ebp - 4], 0x19
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 0x278], 8
lea edx, [ebp - 0x28c]
push eax
cmovae edx, dword [ebp - 0x28c]
lea ecx, [ebp - 0x25c]
cmp dword [ebp - 0x248], 8
lea eax, [ebp - 0x234]
push edx
cmovae ecx, dword [ebp - 0x25c]
push ecx
push str.WriteSafeBho_failed__regsvr__s___cmdLine__s___Err__d_
push eax
call fcn.004a7d10
add esp, 0x14
lea eax, [ebp - 0x234]
mov ecx, 0x5ba2b4
push 0x58
push str.RC::InstallBho
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotectprotectsdk_srcprotectlogistics_srcutils_rcinstallbhoutils.cpp
push eax
push 2
call fcn.004a7770
cmp esi, 1
jbe 0x40b764
jmp 0x40b753
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 7
mov dword [ebp - 0x224], eax
mov word [ebp - 0x234], ax
mov byte [ebp - 0x305], 0
mov eax, dword [ebp - 0x240]
test eax, eax
je 0x40b8ba
push dword [ebp - 0x238]
call eax
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x240]
test eax, eax
je 0x40b8d0
push dword [ebp - 0x238]
call eax
mov eax, dword [ebp - 0x244]
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
test eax, eax
je 0x40b8f6
push eax
call esi
mov ecx, dword [ebp - 0x244]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [ebp - 0x244], ecx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x244]
test eax, eax
je 0x40b91a
push eax
call esi
mov ecx, dword [ebp - 0x244]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [ebp - 0x244], ecx
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x2f0]
cmp edx, 8
jb 0x40b95e
mov ecx, dword [ebp - 0x304]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b954
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc81
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f0], 7
mov word [ebp - 0x304], ax
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x278]
cmp edx, 8
jb 0x40b9bf
mov ecx, dword [ebp - 0x28c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b9b5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc81
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 7
mov word [ebp - 0x28c], ax
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x2c0]
cmp edx, 8
jb 0x40ba20
mov ecx, dword [ebp - 0x2d4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ba16
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc81
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c0], 7
mov word [ebp - 0x2d4], ax
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x2d8]
cmp edx, 8
jb 0x40ba81
mov ecx, dword [ebp - 0x2ec]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ba77
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc81
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2d8], 7
mov word [ebp - 0x2ec], ax
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x290]
cmp edx, 8
jb 0x40bae2
mov ecx, dword [ebp - 0x2a4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bad8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc81
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 7
mov word [ebp - 0x2a4], ax
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x260]
cmp edx, 8
jb 0x40bb43
mov ecx, dword [ebp - 0x274]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bb39
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc81
push edx
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 7
mov word [ebp - 0x274], ax
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x248]
cmp edx, 8
jb 0x40bba3
mov ecx, dword [ebp - 0x25c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bb99
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc81
push edx
push ecx
call fcn.004e649f
add esp, 8
mov esi, dword [ebp - 0x2a8]
xor eax, eax
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 7
mov word [ebp - 0x25c], ax
jmp 0x40bbcf
mov byte [ebp - 0x305], 0
mov dword [ebp - 4], 0xffffffff
cmp esi, 8
jb 0x40bc0c
mov ecx, dword [ebp - 0x2bc]
lea esi, [esi*2 + 2]
mov eax, ecx
cmp esi, 0x1000
jb 0x40bc02
mov ecx, dword [ecx - 4]
add esi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40bc81
push esi
push ecx
call fcn.004e649f
add esp, 8
xor eax, eax
mov dword [ebp - 0x2ac], 0
mov word [ebp - 0x2bc], ax
mov al, byte [ebp - 0x305]
mov dword [ebp - 0x2a8], 7
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e645e
mov esp, ebp
pop ebp
ret
call fcn.0050ba48
call fcn.0050ba48
call fcn.0050ba48
call fcn.0050ba48
call fcn.0050ba48
call fcn.0050ba48
call fcn.0050ba48
call fcn.0050ba48
call fcn.0050ba48
call fcn.0050ba48
call fcn.0050ba48
call fcn.0050ba48
int3