Function at 0x4064e4
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x64
mov dword [ebp - 0x10], 0xd818de76
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, 0xffffff12
mov eax, dword [ebp - 0x10]
cmp eax, 0x1964a6a7
jle 0x406572
cmp eax, 0x4a9dd6a1
jg 0x4065d3
cmp eax, 0x2d3645e4
jle 0x40668a
cmp eax, 0x3e8274d2
jle 0x4067d7
cmp eax, 0x410b6d0c
jle 0x4069aa
cmp eax, 0x410b6d0d
je 0x406d74
cmp eax, 0x4371cbc3
je 0x406d80
cmp eax, 0x43b4407d
jne 0x4064ff
mov eax, dword [ebp - 0x38]
mov dword [eax + 8], 0x656c64
mov dword [eax + 4], 0x6e614865
mov dword [eax], 0x736f6c43
mov dword [ebp - 0x10], 0xb3b84475
jmp 0x4064ff
cmp eax, 0xcde2a731
jg 0x40662e
cmp eax, 0xacefb05b
jle 0x4066e2
cmp eax, 0xb360ee16
jle 0x4067fd
cmp eax, 0xb4b93499
jle 0x4069db
cmp eax, 0xb4b9349a
je 0x406da5
cmp eax, 0xb5726028
je 0x406dce
cmp eax, 0xc32f5f3a
jne 0x4064ff
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0x4a9dd6a2
jmp 0x4064ff
cmp eax, 0x6351186c
jle 0x406728
cmp eax, 0x729f200c
jle 0x406848
cmp eax, 0x7c840333
jle 0x406a17
cmp eax, 0x7c840334
je 0x406df8
cmp eax, 0x7ccb0544
je 0x406e1c
cmp eax, 0x7ed04493
jne 0x4064ff
cmp dword [ebp - 0x5c], 0
mov eax, 0x5ae7cf6
je 0x4071d8
mov eax, 0x2ccbb42d
jmp 0x4071d8
cmp eax, 0xdd6be
jg 0x406781
cmp eax, 0xddb15dad
jle 0x4068a1
cmp eax, 0xfbf14b30
jg 0x406a63
cmp eax, 0xe8f1218f
je 0x406e33
cmp eax, 0xea1e4123
jne 0x4071ef
imul ecx, dword [ebp - 0x14], 0x5cdb2c
mov dword [ebp - 0x14], ecx
mov eax, 0x729f200d
cmp ecx, 0x82
jae 0x4071d8
mov eax, 0xb360ee17
jmp 0x4071d8
cmp eax, 0x25b4543e
jg 0x4068ce
cmp eax, 0x1ef00047
jg 0x406a7e
cmp eax, 0x1964a6a8
je 0x406e51
cmp eax, 0x1ec15ad4
jne 0x4064ff
push 0x19
push str.CreateToolhelp32Snapshot
push dword [ebp - 0x24]
call fcn.004321d0
add esp, 0xc
push dword [ebp - 0x24]
push dword [ebp - 0x20]
call ebx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0xfd691bec
jmp 0x4064ff
cmp eax, 0xa0869438
jg 0x406907
cmp eax, 0x8928d3c2
jg 0x406acb
cmp eax, 0x83112651
je 0x406e74
cmp eax, 0x89170e67
jne 0x4064ff
push 0x452350
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0x25b4543f
jmp 0x4064ff
cmp eax, 0x5aed916d
jg 0x40693a
cmp eax, 0x5602a2d6
jg 0x406aff
cmp eax, 0x4a9dd6a2
je 0x406e96
cmp eax, 0x521a29f2
jne 0x4064ff
imul edi, dword [ebp - 0x14], 0xf4
add edi, 0x48
mov eax, edi
shr eax, 0xf
mov dword [ebp - 0x14], eax
call fcn.004064e4
mov eax, 0x9fdb67c9
cmp edi, 0x128000
jae 0x406cfb
jmp 0x4071d8
cmp eax, 0x4bded56
jg 0x40696f
cmp eax, 0x14e076a
jg 0x406b3b
cmp eax, 0xdd6bf
je 0x406ec6
cmp eax, 0x67d7b2
jne 0x4064ff
imul edi, dword [ebp - 0x14], 0x702
mov dword [ebp - 0x14], edi
call fcn.0040720b
mov eax, 0x521a29f2
cmp edi, 0xdc
jl 0x4071d8
mov eax, 0xc32f5f3a
jmp 0x4071d8
cmp eax, 0x33dae76b
jg 0x406b90
cmp eax, 0x2d3645e5
je 0x406ed2
cmp eax, 0x2ed4b61f
je 0x406f9a
jmp 0x4064ff
cmp eax, 0xb2cc8519
jg 0x406bd7
cmp eax, 0xacefb05c
je 0x406efa
cmp eax, 0xb00ced17
jne 0x4064ff
mov edi, dword [ebp - 0x14]
mov eax, 0xfffffefe
add edi, eax
mov dword [ebp - 0x14], edi
call fcn.0040720b
call fcn.0040720b
mov eax, 0x1964a6a8
cmp edi, 0x1c
jae 0x406c7d
jmp 0x4071d8
cmp eax, 0x6870efa1
jg 0x406c17
cmp eax, 0x6351186d
je 0x406f06
cmp eax, 0x681c0f20
jne 0x4064ff
mov eax, dword [ebp - 0x18]
add eax, esi
shr eax, 3
imul ecx, eax, 0x23
imul ecx, ecx
imul edx, ecx, 0x1cd5
dec edx
imul eax, eax, 0x1f2c0
shr eax, 0xd
mov dword [ebp - 0x18], eax
mov eax, 0x2d3645e5
cmp edx, ecx
je 0x4071d8
mov eax, 0xacefb05c
jmp 0x4071d8
cmp eax, 0xd818de75
jg 0x406c39
cmp eax, 0xcde2a732
je 0x406f12
cmp eax, 0xd679a096
jne 0x4064ff
mov dword [ebp - 0x10], 0x7ed04493
jmp 0x4064ff
cmp eax, 0x293a4e13
jg 0x406c87
cmp eax, 0x25b4543f
je 0x406f26
cmp eax, 0x27d54627
jne 0x4064ff
push eax
sub esp, 0x228
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0x89170e67
jmp 0x4064ff
cmp eax, 0xa8c75e35
jg 0x406cb7
cmp eax, 0xa0869439
je 0x406f35
cmp eax, 0xa7d93225
jne 0x4064ff
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], 0xddb15dae
jmp 0x4064ff
cmp eax, 0x5cb6e664
jg 0x406d05
cmp eax, 0x5aed916e
je 0x406f4e
cmp eax, 0x5c5835ad
jne 0x4064ff
cmp dword [ebp - 0x6c], 0
mov eax, 0x6351186d
jne 0x4070ba
jmp 0x4071d8
cmp eax, 0x7576377
jg 0x406d2a
cmp eax, 0x4bded57
je 0x406f5a
cmp eax, 0x5ae7cf6
jne 0x4064ff
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x3c]
call eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0xa7d93225
jmp 0x4064ff
cmp eax, 0x3e8274d3
je 0x406f66
cmp eax, 0x3e9cebff
jne 0x4064ff
mov eax, dword [ebp - 0x54]
push dword [ebp - 0x70]
push 0
push 1
call eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x21102173
jmp 0x4064ff
cmp eax, 0xb360ee17
je 0x406f8c
cmp eax, 0xb3b84475
jne 0x4064ff
mov eax, dword [ebp - 0x18]
shl eax, 4
and eax, 0x3fffff0
or eax, 1
imul eax, eax, 0xf2
shr eax, 0xc
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x5a2f4ff5
jmp 0x4064ff
cmp eax, 0x729f200d
je 0x406fa6
cmp eax, 0x72c45320
jne 0x4064ff
mov eax, dword [ebp - 0x18]
shr eax, 0xc
imul ecx, eax, 0x22800
imul eax, eax
imul edx, eax, 0x4c9
add ecx, 0x111d800
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0x43b4407d
cmp edx, eax
je 0x407064
mov ecx, 0xdd6bf
jmp 0x407064
cmp eax, 0xfbf14b31
je 0x406fd5
cmp eax, 0xfd691bec
je 0x406eee
jmp 0x4064ff
cmp eax, 0x1ef00048
je 0x406fe4
cmp eax, 0x21102173
jne 0x4064ff
mov eax, dword [ebp - 0x18]
mov ecx, 0xb5
add eax, ecx
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x5495
dec edx
shr eax, 1
and eax, 0xffffff
mov dword [ebp - 0x18], eax
mov eax, 0x89170e67
cmp edx, ecx
je 0x4071d8
mov eax, 0xa0869439
jmp 0x4071d8
cmp eax, 0x8928d3c3
je 0x407001
cmp eax, 0x9fdb67c9
jne 0x4064ff
mov eax, dword [ebp - 0x1c]
add eax, 0x24
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0x5aed916e
jmp 0x4064ff
cmp eax, 0x5602a2d7
je 0x407034
cmp eax, 0x5a2f4ff5
jne 0x4064ff
push dword [ebp - 0x38]
push dword [ebp - 0x20]
call ebx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x48]
push 0
push 0xf
call eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x72c45320
jmp 0x4064ff
cmp eax, 0x14e076b
je 0x40706c
cmp eax, 0x1541b14
jne 0x4064ff
mov ecx, dword [ebp - 0x18]
shr ecx, 2
lea eax, [ecx + ecx*8]
lea eax, [eax + eax*8]
imul eax, eax
imul ecx, ecx, 0x3069
imul edx, eax, 0x5bf3
add ecx, 0x75d8
dec edx
shr ecx, 8
mov dword [ebp - 0x18], ecx
mov ecx, 0x7ccb0544
cmp eax, edx
je 0x407064
mov ecx, 0x293a4e14
jmp 0x407064
cmp eax, 0x33dae76c
je 0x407092
cmp eax, 0x385efa87
jne 0x4064ff
mov eax, dword [ebp - 0x14]
lea edi, [eax + eax]
add edi, 0xb2
mov dword [ebp - 0x14], edi
call fcn.0040720b
call fcn.0040720b
mov eax, 0x27d54627
cmp edi, 9
jb 0x4071d8
mov eax, 0x69f6c253
jmp 0x4071d8
cmp eax, 0xb2cc851a
je 0x4070c4
cmp eax, 0xb2fbf1fe
jne 0x4064ff
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0xb], 0x577478
mov dword [eax + 8], 0x78654e32
mov dword [eax + 4], 0x33737365
mov dword [eax], 0x636f7250
mov dword [ebp - 0x10], 0x1541b14
jmp 0x4064ff
cmp eax, 0x6870efa2
je 0x4070fb
cmp eax, 0x69f6c253
jne 0x4064ff
mov dword [ebp - 0x14], 0
jmp 0x406f9a
cmp eax, 0xd818de76
je 0x407116
cmp eax, 0xdd15db0d
jne 0x4064ff
mov eax, dword [ebp - 0x14]
mov edi, eax
shl edi, 5
sub edi, eax
add edi, 0x25a9
mov dword [ebp - 0x14], edi
call fcn.0040720b
call fcn.0040720b
mov eax, 0x67d7b2
cmp edi, 0x92
jl 0x4071d8
mov eax, 0x9fdb67c9
jmp 0x4071d8
cmp eax, 0x293a4e14
je 0x407153
cmp eax, 0x2ccbb42d
jne 0x4064ff
mov eax, dword [ebp - 0x18]
shl eax, 0xf
add eax, 0x1663c0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x9fdb67c9
jmp 0x4064ff
cmp eax, 0xa8c75e36
je 0x40718f
cmp eax, 0xa963abec
jne 0x4064ff
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0xed]
imul ecx, ecx
imul eax, eax, 0x8d
add eax, 0xffffff73
imul edx, ecx, 0x543f
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xea1e4123
cmp ecx, edx
je 0x4071d8
mov eax, 0x5c5835ad
jmp 0x4071d8
cmp eax, 0x5cb6e665
je 0x4071b2
cmp eax, 0x5e8de54a
jne 0x4064ff
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0x2ed4b61f
jmp 0x4064ff
cmp eax, 0x7576378
je 0x4071e0
cmp eax, 0xf05b0e6
jne 0x4064ff
mov edi, dword [ebp - 0x14]
shl edi, 0x17
add edi, 0xfffba8b0
mov dword [ebp - 0x14], edi
call fcn.0040720b
call fcn.004064e4
mov eax, 0xb5726028
cmp edi, 0x8f
jge 0x4071d8
mov eax, 0x43b4407d
jmp 0x4071d8
mov dword [ebp - 0x10], 0x5e8de54a
jmp 0x4064ff
imul eax, dword [ebp - 0x14], 0xb000
add eax, 0xba00
and eax, 0xfffff000
add eax, 0x6200
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x9fdb67c9
jmp 0x4064ff
push 0x11
push 0x452678
push dword [ebp - 0x34]
call fcn.004321d0
add esp, 0xc
push dword [ebp - 0x34]
push dword [ebp - 0x20]
call ebx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0x7576378
jmp 0x4064ff
mov eax, dword [ebp - 0x28]
mov dword [eax + 0xc], 0x577473
mov dword [eax + 8], 0x72694632
mov dword [eax + 4], 0x33737365
mov dword [eax], 0x636f7250
mov dword [ebp - 0x10], 0x7ccb0544
jmp 0x4064ff
mov eax, dword [ebp - 0x14]
shl eax, 0x15
add eax, 0xffde8000
mov dword [ebp - 0x14], eax
call fcn.0040720b
call fcn.0040720b
mov dword [ebp - 0x10], 0x27d54627
jmp 0x4064ff
push dword [ebp - 0x28]
push dword [ebp - 0x20]
call ebx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0xa8c75e36
jmp 0x4064ff
mov eax, dword [ebp - 0x58]
push 0
push dword [ebp - 0x40]
call eax
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x40]
call eax
mov dword [ebp - 0x10], 0x33dae76c
jmp 0x4064ff
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x22c
mov eax, dword [ebp - 0x4c]
push dword [ebp - 0x1c]
push dword [ebp - 0x3c]
call eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0xb2cc851a
jmp 0x4064ff
mov eax, dword [ebp - 0x50]
push dword [ebp - 0x1c]
push dword [ebp - 0x3c]
call eax
mov ecx, 0x5ae7cf6
test eax, eax
je 0x407064
mov ecx, 0x5aed916e
jmp 0x407064
mov ecx, dword [ebp - 0x18]
shr ecx, 1
lea eax, [ecx*4 + 0x2ba]
imul ecx, ecx
imul edx, ecx, 0x475f
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xdd15db0d
cmp ecx, edx
je 0x4071d8
mov eax, 0x3e9cebff
jmp 0x4071d8
mov dword [ebp - 0x10], 0x1964a6a8
jmp 0x4064ff
mov eax, dword [ebp - 0x14]
lea eax, [eax + eax*2]
shl eax, 0xf
add eax, 0xff175fc0
shr eax, 0xa
imul eax, eax, 0x75
mov dword [ebp - 0x14], eax
call fcn.004064e4
mov dword [ebp - 0x10], 0xb5726028
jmp 0x4064ff
mov dword [ebp - 0x10], 0xfbf14b31
jmp 0x4064ff
mov dword [ebp - 0x10], 0xc32f5f3a
jmp 0x4064ff
mov eax, dword [0x45dbe0]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x5602a2d7
jmp 0x4064ff
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0x1ec15ad4
jmp 0x4064ff
cmp dword [ebp - 0x40], 0
mov eax, 0x14e076b
je 0x4071d8
mov eax, 0xe8f1218f
jmp 0x4071d8
mov dword [ebp - 0x10], 0xcde2a732
jmp 0x4064ff
mov dword [ebp - 0x10], 0x83112651
jmp 0x4064ff
mov edi, dword [ebp - 0x14]
add edi, 0xffffffb0
mov dword [ebp - 0x14], edi
call fcn.004064e4
mov eax, 0xf05b0e6
cmp edi, 0x55
jae 0x4071d8
mov eax, 0x385efa87
jmp 0x4071d8
mov eax, dword [ebp - 0x14]
shl eax, 9
and eax, 0x3fffe00
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xb2fbf1fe
jmp 0x4064ff
mov edi, dword [ebp - 0x14]
shl edi, 0xf
add edi, 0xfffed800
mov dword [ebp - 0x14], edi
call fcn.004064e4
mov eax, 0x7ccb0544
cmp edi, 0xde
jl 0x4071d8
mov eax, 0xb00ced17
jmp 0x4071d8
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0xb4b9349a
jmp 0x4064ff
push dword [ebp - 0x68]
push dword [ebp - 0x60]
call fcn.00440037
add esp, 8
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0xa963abec
jmp 0x4064ff
mov eax, dword [ebp - 0x14]
lea eax, [eax*4 + 0x2f]
shr eax, 8
imul edi, eax, 0x26
mov dword [ebp - 0x14], edi
call fcn.004064e4
mov eax, 0xb2fbf1fe
cmp edi, 0x99
jae 0x4071d8
mov eax, 0x293a4e14
jmp 0x4071d8
mov eax, dword [ebp - 0x18]
add eax, 0x7d
imul ecx, eax, 0x38800
imul eax, eax
imul edx, eax, 0x5c8f
dec edx
shr ecx, 8
add ecx, 0xffffff09
mov dword [ebp - 0x18], ecx
mov ecx, 0x27d54627
cmp edx, eax
je 0x407064
mov ecx, 0x1ef00048
mov dword [ebp - 0x10], ecx
jmp 0x4064ff
mov eax, dword [ebp - 0x18]
mov ecx, 0x127
add eax, ecx
mov ecx, eax
shr ecx, 0xe
imul ecx, ecx
imul edx, ecx, 0x2755
shr eax, 0x14
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x3e9cebff
jmp 0x4070b2
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0x163]
imul ecx, ecx
imul edx, ecx, 0x842b
dec edx
add eax, 0xfffffeb0
mov dword [ebp - 0x18], eax
mov eax, 0x1964a6a8
cmp edx, ecx
je 0x4071d8
mov eax, 0x4bded57
jmp 0x4071d8
mov eax, dword [ebp - 0x18]
shr eax, 3
mov ecx, eax
imul ecx, eax
shl eax, 9
add eax, 0x17200
imul edx, ecx, 0x39e5
shr eax, 2
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x5cb6e665
cmp ecx, edx
je 0x4071d8
mov eax, 0xd679a096
jmp 0x4071d8
imul eax, dword [ebp - 0x14], 0x77
add eax, 0x6a
mov dword [ebp - 0x14], eax
call fcn.0040720b
mov dword [ebp - 0x10], 0x7ccb0544
jmp 0x4064ff
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x24], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x28], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x30], eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x34], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x27d54627
jmp 0x4064ff
push dword [ebp - 0x2c]
push dword [ebp - 0x20]
call ebx
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov dword [eax], 0x6e65704f
mov dword [eax + 8], 0x737365
mov dword [eax + 4], 0x636f7250
push dword [ebp - 0x30]
push dword [ebp - 0x20]
call ebx
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0x681c0f20
jmp 0x4064ff
imul eax, dword [ebp - 0x18], 0xac0
and eax, 0xffffc000
imul eax, eax, 0x3d
add eax, 0xfffff13a
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x410b6d0d
jmp 0x4064ff
imul ecx, dword [ebp - 0x14], 0x3024
add ecx, 0xffe2aabc
mov eax, ecx
shr eax, 1
mov dword [ebp - 0x14], eax
mov eax, 0x7c840334
cmp ecx, 0x108
jb 0x4071d8
mov eax, 0x8928d3c3
mov dword [ebp - 0x10], eax
jmp 0x4064ff
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0x43b4407d
jmp 0x4064ff
cmp eax, 0xddb15dae
jne 0x4064ff
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret