Function at 0x408af0
Capabilities:
Get session user name
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4ec
push esi
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00412e40
lea ecx, [ebp - 0x4c]
call fcn.00405510
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x436464
call fcn.00412e40
lea ecx, [ebp - 0x18]
call fcn.00402b70
add esp, 0x1c
lea ecx, [ebp - 0x3c4]
mov edx, eax
call fcn.004132f0
mov edx, dword [ebp - 4]
add esp, 4
cmp edx, 0x10
jb 0x408b72
mov ecx, dword [ebp - 0x18]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408b68
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cf2
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x38]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0xf
mov byte [ebp - 0x18], 0
cmp edx, 0x10
jb 0x408bb8
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408bae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cf2
push edx
push ecx
call fcn.004142b0
add esp, 8
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4c]
call fcn.004059e0
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x104
push eax
lea eax, [ebp - 0x4e8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [ebp - 0x4e8]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x18], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408bf6
sub ecx, edx
lea eax, [ebp - 0x4e8]
push ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.004131b0
lea ecx, [ebp - 0x34]
call fcn.004052b0
cmp dword [eax + 0x14], 0x10
jb 0x408c1f
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov edx, dword [ebp - 0x20]
cmp edx, 0x10
jb 0x408c5a
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408c50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cf7
push edx
push ecx
call fcn.004142b0
add esp, 8
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x4363bc
call fcn.00412e40
lea ecx, [ebp - 0x3dc]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x43623c
call fcn.00412e40
lea ecx, [ebp - 0x34]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412e40
lea ecx, [ebp - 0x37c]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x3c4]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435c54
call fcn.00412e40
lea ecx, [ebp - 0x364]
call fcn.00402b70
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x435fcc
call fcn.00412e40
lea ecx, [ebp - 0x34c]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4360d4
call fcn.00412e40
lea ecx, [ebp - 0x334]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412e40
lea ecx, [ebp - 0x31c]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x3c4]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435bc4
call fcn.00412e40
lea ecx, [ebp - 0x304]
call fcn.00402b70
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x435fcc
call fcn.00412e40
lea ecx, [ebp - 0x2ec]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x43623c
call fcn.00412e40
lea ecx, [ebp - 0x2d4]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412e40
lea ecx, [ebp - 0x2bc]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435c54
call fcn.00412e40
lea ecx, [ebp - 0x2a4]
call fcn.00402b70
add esp, 0x1c
push eax
sub esp, 0x18
mov ecx, esp
push 0x435fcc
call fcn.00412e40
lea ecx, [ebp - 0x28c]
call fcn.00402b70
add esp, 0x18
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4360d4
call fcn.00412e40
lea ecx, [ebp - 0x274]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x4365cc
call fcn.00412e40
lea ecx, [ebp - 0x25c]
call fcn.00402b70
add esp, 0x1c
push eax
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov ecx, esp
push 0x435bc4
call fcn.00412e40
lea ecx, [ebp - 0x244]
call fcn.00402b70
add esp, 0x1c
lea ecx, [ebp - 0x22c]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0x214]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x1fc]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0x1e4]
mov edx, eax
call fcn.004132f0
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x1cc]
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x1b4]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x19c]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0x184]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x16c]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0x154]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x13c]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x124]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x10c]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0xf4]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0xdc]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0xc4]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0xac]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x94]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x7c]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0x64]
mov edx, eax
call fcn.004132f0
add esp, 4
lea ecx, [ebp - 0x3ac]
mov edx, eax
call fcn.004133e0
add esp, 4
lea ecx, [ebp - 0x394]
mov edx, eax
call fcn.004132f0
add esp, 4
mov edx, eax
mov ecx, esi
call fcn.004132f0
add esp, 4
call fcn.00403c40
mov edx, dword [ebp - 0x380]
add esp, 0x18
cmp edx, 0x10
jb 0x409009
mov ecx, dword [ebp - 0x394]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408fff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x384], 0
mov dword [ebp - 0x380], 0xf
mov byte [ebp - 0x394], 0
cmp edx, 0x10
jb 0x40905e
mov ecx, dword [ebp - 0x3ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409054
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x39c], 0
mov dword [ebp - 0x398], 0xf
mov byte [ebp - 0x3ac], 0
cmp edx, 0x10
jb 0x4090ad
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4090a3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x4090f3
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4090e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x40913c
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409132
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x40918e
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409184
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x4091e3
mov ecx, dword [ebp - 0xc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4091d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
cmp edx, 0x10
jb 0x409238
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40922e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
cmp edx, 0x10
jb 0x40928d
mov ecx, dword [ebp - 0xf4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409283
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
cmp edx, 0x10
jb 0x4092e2
mov ecx, dword [ebp - 0x10c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4092d8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0xf
mov byte [ebp - 0x10c], 0
cmp edx, 0x10
jb 0x409337
mov ecx, dword [ebp - 0x124]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40932d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
cmp edx, 0x10
jb 0x40938c
mov ecx, dword [ebp - 0x13c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409382
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x140]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0xf
mov byte [ebp - 0x13c], 0
cmp edx, 0x10
jb 0x4093e1
mov ecx, dword [ebp - 0x154]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4093d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x158]
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0xf
mov byte [ebp - 0x154], 0
cmp edx, 0x10
jb 0x409436
mov ecx, dword [ebp - 0x16c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40942c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x170]
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x158], 0xf
mov byte [ebp - 0x16c], 0
cmp edx, 0x10
jb 0x40948b
mov ecx, dword [ebp - 0x184]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409481
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x188]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0xf
mov byte [ebp - 0x184], 0
cmp edx, 0x10
jb 0x4094e0
mov ecx, dword [ebp - 0x19c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4094d6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x1a0]
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0xf
mov byte [ebp - 0x19c], 0
cmp edx, 0x10
jb 0x409535
mov ecx, dword [ebp - 0x1b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40952b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x1b8]
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0xf
mov byte [ebp - 0x1b4], 0
cmp edx, 0x10
jb 0x40958a
mov ecx, dword [ebp - 0x1cc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409580
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 0xf
mov byte [ebp - 0x1cc], 0
cmp edx, 0x10
jb 0x4095df
mov ecx, dword [ebp - 0x1e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4095d5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x1e8]
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
cmp edx, 0x10
jb 0x409634
mov ecx, dword [ebp - 0x1fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40962a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x200]
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 0xf
mov byte [ebp - 0x1fc], 0
cmp edx, 0x10
jb 0x409689
mov ecx, dword [ebp - 0x214]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40967f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x218]
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 0xf
mov byte [ebp - 0x214], 0
cmp edx, 0x10
jb 0x4096de
mov ecx, dword [ebp - 0x22c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4096d4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x230]
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 0xf
mov byte [ebp - 0x22c], 0
cmp edx, 0x10
jb 0x409733
mov ecx, dword [ebp - 0x244]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409729
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0xf
mov byte [ebp - 0x244], 0
cmp edx, 0x10
jb 0x409788
mov ecx, dword [ebp - 0x25c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40977e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0xf
mov byte [ebp - 0x25c], 0
cmp edx, 0x10
jb 0x4097dd
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4097d3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 0xf
mov byte [ebp - 0x274], 0
cmp edx, 0x10
jb 0x409832
mov ecx, dword [ebp - 0x28c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409828
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 0xf
mov byte [ebp - 0x28c], 0
cmp edx, 0x10
jb 0x409887
mov ecx, dword [ebp - 0x2a4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40987d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x2a8]
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 0xf
mov byte [ebp - 0x2a4], 0
cmp edx, 0x10
jb 0x4098dc
mov ecx, dword [ebp - 0x2bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4098d2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x2c0]
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2a8], 0xf
mov byte [ebp - 0x2bc], 0
cmp edx, 0x10
jb 0x409931
mov ecx, dword [ebp - 0x2d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409927
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c0], 0xf
mov byte [ebp - 0x2d4], 0
cmp edx, 0x10
jb 0x409986
mov ecx, dword [ebp - 0x2ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40997c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2d8], 0xf
mov byte [ebp - 0x2ec], 0
cmp edx, 0x10
jb 0x4099db
mov ecx, dword [ebp - 0x304]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4099d1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x308]
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f0], 0xf
mov byte [ebp - 0x304], 0
cmp edx, 0x10
jb 0x409a30
mov ecx, dword [ebp - 0x31c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409a26
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 0xf
mov byte [ebp - 0x31c], 0
cmp edx, 0x10
jb 0x409a85
mov ecx, dword [ebp - 0x334]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409a7b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x338]
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x320], 0xf
mov byte [ebp - 0x334], 0
cmp edx, 0x10
jb 0x409ada
mov ecx, dword [ebp - 0x34c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409ad0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x350]
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x338], 0xf
mov byte [ebp - 0x34c], 0
cmp edx, 0x10
jb 0x409b2f
mov ecx, dword [ebp - 0x364]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409b25
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x368]
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x350], 0xf
mov byte [ebp - 0x364], 0
cmp edx, 0x10
jb 0x409b84
mov ecx, dword [ebp - 0x37c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409b7a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x368], 0xf
mov byte [ebp - 0x37c], 0
cmp edx, 0x10
jb 0x409bd3
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409bc9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp edx, 0x10
jb 0x409c1f
mov ecx, dword [ebp - 0x3dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409c15
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409cfc
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 4]
cmp edx, 0x10
jb 0x409c53
mov ecx, dword [ebp - 0x18]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409c49
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409d01
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x38]
cmp edx, 0x10
jb 0x409c87
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409c7d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409d01
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp - 0x3b0]
cmp edx, 0x10
jb 0x409cbd
mov ecx, dword [ebp - 0x3c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409cb3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409d01
push edx
push ecx
call fcn.004142b0
add esp, 8
mov edx, dword [ebp + 0x1c]
cmp edx, 0x10
jb 0x409ced
mov ecx, dword [ebp + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409ce3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x409d01
push edx
push ecx
call fcn.004142b0
add esp, 8
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00418a24
call fcn.00418a24
call fcn.00418a24
call fcn.00418a24
int3