Function at 0x408dc8
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xa4
mov dword [ebp - 0x10], 0x7b829d7e
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, 0xf
mov eax, dword [ebp - 0x10]
cmp eax, 0xe57461c2
jg 0x408e51
cmp eax, 0xb6a34bc1
jle 0x408ec5
cmp eax, 0xce7ace37
jle 0x408f5f
cmp eax, 0xd9df720c
jle 0x40905f
cmp eax, 0xe2e8a62f
jle 0x40927a
cmp eax, 0xe2e8a630
je 0x40967c
cmp eax, 0xe38d4443
je 0x40969a
cmp eax, 0xe5444044
jne 0x408de6
imul eax, dword [ebp - 0x14], 0x15000000
add eax, 0xce000000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x3361bb01
jmp 0x408de6
cmp eax, 0x41e179c2
jle 0x408f13
cmp eax, 0x630b484a
jg 0x408fa8
cmp eax, 0x472e3cbf
jle 0x40909e
cmp eax, 0x5616715b
jle 0x40930f
cmp eax, 0x58d7c070
je 0x4096dc
cmp eax, 0x5c26d242
jne 0x409baa
mov eax, dword [ebp - 0x14]
lea ecx, [eax - 0xce]
imul ecx, ecx
imul edx, ecx, 0x3fed
dec edx
add eax, 0xfffffe5e
mov dword [ebp - 0x14], eax
mov eax, 0x1b9c2852
cmp edx, ecx
je 0x409b10
mov eax, 0xd05b7f21
jmp 0x409b10
cmp eax, 0x959ee4b9
jg 0x408fe0
cmp eax, 0x84554dd0
jg 0x4090dc
cmp eax, 0x83fc6d77
jg 0x409382
cmp eax, 0x81e12f62
je 0x40970f
cmp eax, 0x826ee42d
jne 0x408de6
push dword [ebp - 0x28]
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0xe5444044
jmp 0x408de6
cmp eax, 0x11f24230
jg 0x409018
cmp eax, 0xf884d28c
jg 0x40912e
cmp eax, 0xf0558410
jg 0x4093bd
cmp eax, 0xe57461c3
je 0x409744
cmp eax, 0xede0b7b1
jne 0x408de6
mov eax, dword [ebp - 0x44]
add eax, 0x10
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x79322a22
jmp 0x408de6
cmp eax, 0xc02aa3dd
jg 0x409164
cmp eax, 0xbd4ff6ab
jg 0x4093ef
cmp eax, 0xb6a34bc2
je 0x40975f
cmp eax, 0xba19f14a
jne 0x408de6
mov eax, dword [ebp - 0x14]
shl eax, 4
add eax, 0x83b
shr eax, 9
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x826ee42d
jmp 0x408de6
cmp eax, 0x79322a21
jg 0x409191
cmp eax, 0x6f4f0b34
jg 0x409411
cmp eax, 0x630b484b
je 0x409781
cmp eax, 0x6d1dd2ca
jne 0x408de6
mov dword [ebp - 0x10], 0x8c9a7c36
jmp 0x408de6
cmp eax, 0xaff91869
jg 0x4091ea
cmp eax, 0xa7949b7d
jg 0x40943c
cmp eax, 0x959ee4ba
je 0x40979c
cmp eax, 0xa0519cc0
jne 0x408de6
mov dword [ebp - 0x10], 0xab04b21d
jmp 0x408de6
cmp eax, 0x3361bb00
jg 0x409242
cmp eax, 0x1b9c2851
jg 0x40947d
cmp eax, 0x11f24231
je 0x4097a8
cmp eax, 0x164f71a1
jne 0x408de6
lea eax, [ebp - 0x94]
push eax
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0x6d1dd2ca
jmp 0x408de6
cmp eax, 0xd562ff24
jg 0x4094a2
cmp eax, 0xce7ace38
je 0x4097b7
cmp eax, 0xd05b7f21
jne 0x408de6
mov eax, dword [ebp - 0x6c]
push 0
push dword [ebp - 0x50]
call eax
mov eax, dword [ebp - 0x54]
push dword [ebp - 0x50]
call eax
mov dword [ebp - 0x10], 0xbde0d5d0
jmp 0x408de6
cmp eax, 0x444b13ff
jg 0x4094cd
cmp eax, 0x41e179c3
je 0x4097ff
cmp eax, 0x427e6b9c
jne 0x408de6
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x64]
push dword [eax]
push 0
push 1
call ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0xbd4ff6ac
jmp 0x408de6
cmp eax, 0x8c9a7c35
jg 0x409519
cmp eax, 0x84554dd1
je 0x409833
cmp eax, 0x86f9a22e
jne 0x408de6
mov edi, dword [ebp - 0x18]
add edi, 0x2f
and edi, 0xfffff000
mov dword [ebp - 0x18], edi
call fcn.00409bbd
call fcn.00408dc8
mov eax, 0x7b829d7e
cmp edi, 0x60
jl 0x409b10
mov eax, 0xb218a53a
jmp 0x409b10
cmp eax, 0x6f32ba3
jg 0x409544
cmp eax, 0xf884d28d
je 0x40986b
cmp eax, 0x6c7ffcc
jne 0x408de6
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0xdea971bc
jmp 0x408de6
cmp eax, 0xc790f37d
jg 0x409566
cmp eax, 0xc02aa3de
je 0x409877
cmp eax, 0xc3c216ce
jne 0x408de6
mov dword [ebp - 0x10], 0x8eaab81d
jmp 0x408de6
cmp eax, 0x7b829d7d
jg 0x40959a
cmp eax, 0x79322a22
je 0x4098ad
cmp eax, 0x7a18dbdd
jne 0x408de6
mov ecx, dword [ebp - 0x14]
imul eax, ecx, 0x565e
shr eax, 1
imul eax, eax
imul ecx, ecx, 0x2b2f000
imul edx, eax, 0x722b
shr ecx, 7
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0x86f9a22e
cmp edx, eax
je 0x409b93
mov ecx, 0xe2e8a630
jmp 0x409b93
cmp eax, 0xb3955f7a
jg 0x4095f1
cmp eax, 0xaff9186a
je 0x4098dd
cmp eax, 0xb218a53a
jne 0x408de6
imul eax, dword [ebp - 0x18], 0x37
add eax, 0x2d8d
shr eax, 1
add eax, 0x95
mov dword [ebp - 0x18], eax
push eax
push 0x3a6b
push 0x23a1
push 0x22cd
call fcn.00409d50
add esp, 0x10
mov dword [ebp - 0x10], 0x58d7c070
jmp 0x408de6
cmp eax, 0x398a740d
jg 0x409641
cmp eax, 0x3361bb01
je 0x4098fc
cmp eax, 0x375c1a1a
jne 0x408de6
push dword [ebp - 0x24]
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0x11f24231
jmp 0x408de6
cmp eax, 0xd9df720d
je 0x40990b
cmp eax, 0xdea971bc
jne 0x408de6
mov eax, dword [ebp - 0x48]
mov byte [eax + 0xb], 0
mov eax, dword [ebp - 0x48]
mov cl, byte [0x4701f5]
mov byte [eax + 0xa], cl
movzx ecx, word [0x4701f3]
mov word [eax + 8], cx
mov ecx, dword [0x4701ef]
mov dword [eax + 4], ecx
mov ecx, dword [0x4701eb]
mov dword [eax], ecx
push 4
push 0x4701f6
push 0xb
push dword [ebp - 0x48]
call fcn.00409d50
add esp, 0x10
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
push dword [ebp - 0x2c]
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x58]
push 0
push 0xf
call eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0xa0519cc0
jmp 0x408de6
cmp eax, 0x472e3cc0
je 0x409930
cmp eax, 0x524f7fc6
jne 0x408de6
mov eax, dword [ebp - 0x38]
mov byte [eax + 0xf], 0
push ebx
push 0x47019e
push dword [ebp - 0x38]
call fcn.00441d60
add esp, 0xc
push 8
push 0x4701ad
push ebx
push dword [ebp - 0x38]
call fcn.00409d50
add esp, 0x10
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x90], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x8c], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x10], 0x164f71a1
jmp 0x408de6
cmp eax, 0x83fc6d78
je 0x40993f
cmp eax, 0x8410c221
jne 0x408de6
mov eax, dword [ebp - 0x34]
mov byte [eax + 0x18], 0
push 0x18
push 0x470180
push dword [ebp - 0x34]
call fcn.00441d60
add esp, 0xc
mov dword [ebp - 0x10], 0x444b1400
jmp 0x408de6
cmp eax, 0xf0558411
je 0x40994f
cmp eax, 0xf59aa411
jne 0x408de6
imul ecx, dword [ebp - 0x18], 0x48c000
mov dword [ebp - 0x18], ecx
mov eax, 0xd562ff25
test ecx, ecx
jne 0x4098d3
jmp 0x409b10
cmp eax, 0xbd4ff6ac
je 0x40995b
cmp eax, 0xbde0d5d0
jne 0x408de6
mov dword [ebp - 0x10], 0xb6a34bc2
jmp 0x408de6
cmp eax, 0x6f4f0b35
je 0x409974
cmp eax, 0x719fe0ff
jne 0x408de6
push eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0xede0b7b1
jmp 0x408de6
cmp eax, 0xa7949b7e
je 0x40998e
cmp eax, 0xab04b21d
jne 0x408de6
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x22c
mov eax, dword [ebp - 0x5c]
push dword [ebp - 0x1c]
push dword [ebp - 0x4c]
call eax
mov ecx, 0x6f4f0b35
test eax, eax
je 0x409b93
mov ecx, 0xc7e3c84f
jmp 0x409b93
cmp eax, 0x1b9c2852
je 0x4099a8
cmp eax, 0x1f64fb16
jne 0x408de6
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xf884d28d
jmp 0x408de6
cmp eax, 0xd562ff25
je 0x4099f7
cmp eax, 0xd914716f
jne 0x408de6
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x83fc6d78
jmp 0x408de6
cmp eax, 0x444b1400
je 0x409a34
cmp eax, 0x44c10536
jne 0x408de6
imul eax, dword [ebp - 0x14], 0x5655
add eax, 0x56
mov ecx, eax
shl ecx, 0xb
imul eax, eax
imul edx, eax, 0x5ee9
dec edx
add ecx, 0xffffffe0
mov dword [ebp - 0x14], ecx
mov ecx, 0xf59aa411
cmp eax, edx
je 0x409b93
mov ecx, 0x398a740e
jmp 0x409b93
cmp eax, 0x8c9a7c36
je 0x409a68
cmp eax, 0x8eaab81d
jne 0x408de6
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xc790f37e
jmp 0x408de6
cmp eax, 0x6f32ba4
je 0x409a7d
cmp eax, 0xa87d953
jne 0x408de6
mov dword [ebp - 0x10], 0x1b9c2852
jmp 0x408de6
cmp eax, 0xc790f37e
je 0x409ae2
cmp eax, 0xc7e3c84f
jne 0x408de6
mov eax, dword [ebp - 0x1c]
add eax, 0x24
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x959ee4ba
jmp 0x408de6
cmp eax, 0x7f31619f
je 0x409b18
cmp eax, 0x7b829d7e
jne 0x408de6
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x24], eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x28], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0x22c
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov word [eax + 0x18], 0
mov dword [ebp - 0x10], 0x7a18dbdd
jmp 0x408de6
cmp eax, 0xb3955f7b
je 0x409b74
cmp eax, 0xb3ca34d2
jne 0x408de6
mov eax, dword [ebp - 0x18]
shl eax, 0xf
mov edi, 0x8c9a7c36
and eax, 0xfffe0000
mov dword [ebp - 0x18], eax
je 0x409621
mov edi, 0x719fe0ff
push 0x5108
push 0xb1
push 0x1e80
push eax
call fcn.00409cb0
add esp, 0x10
mov dword [ebp - 0x10], edi
jmp 0x408de6
cmp eax, 0x398a740e
je 0x409b9b
cmp eax, 0x3d690808
jne 0x408de6
mov eax, dword [ebp - 0x18]
shl eax, 7
and eax, 0x3ffff00
or eax, 2
imul eax, eax, 0x71
mov dword [ebp - 0x18], eax
call fcn.00409bbd
mov dword [ebp - 0x10], 0x7b829d7e
jmp 0x408de6
push 0x18
push 0x464530
push dword [ebp - 0x30]
call fcn.00441d60
add esp, 0xc
mov dword [ebp - 0x10], 0xe38d4443
jmp 0x408de6
mov eax, dword [ebp - 0x14]
mov ecx, eax
shl ecx, 7
lea ecx, [ecx + eax*2]
mov eax, ecx
shr eax, 8
imul eax, eax
shr ecx, 0xd
imul edx, eax, 0x28b3
add ecx, 0xffffffe7
dec edx
shr ecx, 1
imul ecx, ecx, 0xcf
mov dword [ebp - 0x14], ecx
mov ecx, 0xe2e8a630
cmp eax, edx
je 0x409b93
mov ecx, 0x41e179c3
jmp 0x409b93
imul eax, dword [ebp - 0x18], 0x162000
add eax, 0xfccd5f2c
mov dword [ebp - 0x18], eax
push 0x115b
push eax
push 0x4a59
push 0x3e07
call fcn.00409d50
add esp, 0x10
mov dword [ebp - 0x10], 0x7b829d7e
jmp 0x408de6
imul eax, dword [ebp - 0x18], 0x6c
add eax, 0x3594
mov dword [ebp - 0x18], eax
push eax
push 0x521d
push 0x13cb
push 0x476c
call fcn.00409d50
add esp, 0x10
call fcn.00409bbd
mov dword [ebp - 0x10], 0x41e179c3
jmp 0x408de6
lea eax, [ebp - 0xad]
push eax
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0xc3c216ce
jmp 0x408de6
mov eax, dword [ebp - 0x60]
push dword [ebp - 0x1c]
push dword [ebp - 0x4c]
call eax
mov ecx, 0xaff9186a
test eax, eax
je 0x409b93
mov ecx, 0x959ee4ba
jmp 0x409b93
imul eax, dword [ebp - 0x14], 0x3241000
add eax, 0xffe46a6b
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x8410c221
jmp 0x408de6
mov dword [ebp - 0x10], 0xb3955f7b
jmp 0x408de6
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x719fe0ff
jmp 0x408de6
imul edi, dword [ebp - 0x18], 0xb20
add edi, 0xa0
mov dword [ebp - 0x18], edi
call fcn.00409bbd
push 0x4f6e
push 0x4cfd
push edi
push 0x1e6b
call fcn.00409d50
add esp, 0x10
mov eax, 0xede0b7b1
cmp edi, 0xd0
jge 0x409b10
mov eax, 0x84554dd1
jmp 0x409b10
push 5
push 0x464548
push 0xc
push dword [ebp - 0x30]
call fcn.00409cb0
add esp, 0x10
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x20], eax
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0x630b484b
jmp 0x408de6
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x80], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x7c], ecx
mov eax, dword [eax + 0xb]
mov dword [ebp - 0x79], eax
lea eax, [ebp - 0x84]
push eax
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0x1f64fb16
jmp 0x408de6
mov dword [ebp - 0x10], 0xd914716f
jmp 0x408de6
mov eax, dword [ebp - 0x14]
add eax, 0xffffffc7
imul ecx, eax, 0x13a
imul eax, eax
imul edx, eax, 0xe6d
dec edx
add ecx, 0xffffff3f
mov dword [ebp - 0x14], ecx
mov ecx, 0x8c9a7c36
cmp edx, eax
je 0x409b93
mov ecx, 0xa87d953
jmp 0x409b93
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0xa6]
imul ecx, ecx
imul edx, ecx, 0x88f
dec edx
add eax, 0x79
mov dword [ebp - 0x14], eax
mov eax, 0x8eaab81d
cmp ecx, edx
je 0x409b10
mov eax, 0x7f31619f
jmp 0x409b10
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff18
add eax, ecx
shr eax, 3
and eax, 0xfffffffc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x6f4f0b35
jmp 0x408de6
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0xf0558411
jmp 0x408de6
mov eax, dword [ebp - 0x14]
mov ecx, 0xde
add eax, ecx
shr eax, 2
imul eax, eax, 0xba
add eax, 0xffffffe0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xbde0d5d0
jmp 0x408de6
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0x5616715c
jmp 0x408de6
shl dword [ebp - 0x14], 0x10
mov dword [ebp - 0x10], 0x6f32ba4
jmp 0x408de6
mov dword [ebp - 0x10], 0x6c7ffcc
jmp 0x408de6
cmp dword [ebp - 0x50], 0
mov eax, 0xbde0d5d0
je 0x409b10
mov eax, 0x5c26d242
jmp 0x409b10
mov eax, dword [ebp - 0x54]
push dword [ebp - 0x4c]
call eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0x44c10536
jmp 0x408de6
mov eax, dword [ebp - 0x18]
shl eax, 0xd
add eax, 0xfff2e000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x81e12f62
jmp 0x408de6
mov eax, dword [ebp - 0x3c]
mov byte [eax + 0xe], 0
mov eax, dword [ebp - 0x3c]
movzx ecx, word [0x4701c1]
mov word [eax + 0xc], cx
mov ecx, dword [0x4701bd]
mov dword [eax + 8], ecx
mov ecx, dword [0x4701b9]
mov dword [eax + 4], ecx
mov ecx, dword [0x4701b5]
mov dword [eax], ecx
push 4
push 0x4701c3
push 0xe
push dword [ebp - 0x3c]
call fcn.00409d50
add esp, 0x10
mov dword [ebp - 0x10], 0x84554dd1
jmp 0x408de6
mov edi, dword [ebp - 0x18]
mov eax, 0xffffff12
add edi, eax
mov dword [ebp - 0x18], edi
push edi
push 0x43e5
push 0x5b69
push 0x4791
call fcn.00409d50
add esp, 0x10
mov eax, 0xb3ca34d2
cmp edi, 0x21
jae 0x409b10
mov eax, 0x719fe0ff
jmp 0x409b10
push 6
push 0x470198
push 0x18
push dword [ebp - 0x34]
call fcn.00409d50
add esp, 0x10
push 0x19
push dword [ebp - 0x34]
lea eax, [ebp - 0xad]
push eax
call fcn.00441d60
add esp, 0xc
mov dword [ebp - 0x10], 0xe57461c3
jmp 0x408de6
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0xc02aa3de
jmp 0x408de6
mov eax, dword [ebp - 0x40]
mov byte [eax + 0xb], 0
mov eax, dword [ebp - 0x40]
mov cl, byte [0x4701d1]
mov byte [eax + 0xa], cl
movzx ecx, word [0x4701cf]
mov word [eax + 8], cx
mov ecx, dword [0x4701cb]
mov dword [eax + 4], ecx
mov ecx, dword [0x4701c7]
mov dword [eax], ecx
push 4
push 0x4701d2
push 0xb
push dword [ebp - 0x40]
call fcn.00409d50
add esp, 0x10
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
mov dword [ebp - 0x10], 0x375c1a1a
jmp 0x408de6
mov eax, dword [ebp - 0x14]
lea ecx, [eax*4 + 0xf9]
shr ecx, 7
imul eax, ecx, 0xb7c
imul ecx, ecx
imul edx, ecx, 0x3bf5
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0xa7949b7e
cmp edx, ecx
je 0x409b10
mov eax, 0x524f7fc6
mov dword [ebp - 0x10], eax
jmp 0x408de6
mov eax, dword [ebp - 0x68]
mov byte [eax], 0
mov eax, dword [ebp - 0x44]
mov ecx, dword [0x4701e2]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x4701de]
mov dword [eax + 8], ecx
mov ecx, dword [0x4701da]
mov dword [eax + 4], ecx
mov ecx, dword [0x4701d6]
mov dword [eax], ecx
push 5
push 0x4701e6
push 0x10
push dword [ebp - 0x44]
call fcn.00409d50
add esp, 0x10
push 0x11
push dword [ebp - 0x44]
push dword [ebp - 0x28]
call fcn.00441d60
add esp, 0xc
mov dword [ebp - 0x10], 0xba19f14a
jmp 0x408de6
push dword [0x471290]
push dword [ebp - 0x70]
call fcn.00451a4a
add esp, 8
mov ecx, 0x427e6b9c
test eax, eax
je 0x409b93
mov ecx, 0xd9df720d
mov dword [ebp - 0x10], ecx
jmp 0x408de6
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x472e3cc0
jmp 0x408de6
cmp eax, 0x5616715c
jne 0x408de6
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret