Function at 0x409614
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xa8
mov dword [ebp - 0x10], 0x7b829d7e
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov eax, dword [ebp - 0x10]
cmp eax, 0xede0b7b0
jg 0x40969a
cmp eax, 0xb6a34bc1
jle 0x4096fc
cmp eax, 0xd05b7f20
jle 0x4097b4
cmp eax, 0xe112a8d7
jg 0x40995a
cmp eax, 0xd914716e
jle 0x409b6b
cmp eax, 0xd914716f
je 0x409ec9
cmp eax, 0xd9df720d
je 0x409efb
cmp eax, 0xdea971bc
jne 0x40962d
mov eax, dword [ebp - 0x18]
shl eax, 8
add eax, 0xfffffef5
shr eax, 5
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x6c7ffcc
jmp 0x40962d
cmp eax, 0x41e179c2
jle 0x409763
cmp eax, 0x58d7c06f
jle 0x409832
cmp eax, 0x719fe0fe
jle 0x4099cb
cmp eax, 0x7a18dbdc
jle 0x409ba9
cmp eax, 0x7a18dbdd
je 0x409f14
cmp eax, 0x7f31619f
je 0x409f20
cmp eax, 0x7b829d7e
jne 0x40962d
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0xe2e8a630
jmp 0x40962d
cmp eax, 0x959ee4b9
jg 0x409878
cmp eax, 0x84554dd0
jle 0x4099f8
cmp eax, 0x8c9a7c35
jle 0x409bce
cmp eax, 0x8c9a7c36
je 0x409f59
cmp eax, 0x8eaab81d
je 0x409feb
cmp eax, 0x94fbdada
jne 0x40962d
imul ecx, dword [ebp - 0x14], 0x2331000
mov eax, 0xc790f37e
add ecx, 0x4359c000
mov dword [ebp - 0x14], ecx
je 0x40a557
mov eax, 0xf0558411
jmp 0x40a557
cmp eax, 0x15fa78a3
jg 0x4098e1
cmp eax, 0x6c7ffcb
jle 0x409a25
cmp eax, 0xa87d952
jle 0x409c22
cmp eax, 0xa87d953
je 0x409ff7
cmp eax, 0xe67f83a
je 0x40a05b
cmp eax, 0x11f24231
jne 0x40962d
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0x719fe0ff
jmp 0x40962d
cmp eax, 0xc02aa3dd
jle 0x409a5f
cmp eax, 0xc790f37d
jle 0x409c73
cmp eax, 0xc790f37e
je 0x40a08e
cmp eax, 0xc7e3c84f
je 0x40a0fb
cmp eax, 0xce7ace38
jne 0x40962d
mov ebx, dword [ebp - 0x14]
shr ebx, 0x11
add ebx, 0xffffff38
mov eax, ebx
shr eax, 0xe
mov dword [ebp - 0x14], eax
push eax
push 0x606
push 0x523f
push 0x4252
call fcn.0040ac30
add esp, 0x10
mov eax, 0xe38d4443
cmp ebx, 0x2f0000
jae 0x40a557
mov eax, 0xc790f37e
jmp 0x40a557
cmp eax, 0x44c10535
jle 0x409a95
cmp eax, 0x4d3b7e03
jle 0x409cb2
cmp eax, 0x4d3b7e04
je 0x40a115
cmp eax, 0x524f7fc6
je 0x40a170
cmp eax, 0x5616715c
jne 0x40962d
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0xb218a53a
jmp 0x40962d
cmp eax, 0xaff91869
jle 0x409af6
cmp eax, 0xb3955f7a
jle 0x409ce2
cmp eax, 0xb3955f7b
je 0x40a17c
cmp eax, 0xb3ca34d2
je 0x40a1b0
cmp eax, 0xb48e79f6
jne 0x40962d
mov ebx, dword [ebp - 0x14]
shr ebx, 0xb
and ebx, 0xfffffff8
mov dword [ebp - 0x14], ebx
push ebx
call fcn.00409614
add esp, 4
call fcn.0040a572
mov eax, 0x94fbdada
cmp ebx, 0x22
jae 0x40a557
mov eax, 0x15fa78a4
jmp 0x40a557
cmp eax, 0x1f64fb15
jle 0x409b35
cmp eax, 0x375c1a19
jle 0x409d07
cmp eax, 0x375c1a1a
je 0x40a1ed
cmp eax, 0x398a740e
je 0x40a1f9
cmp eax, 0x3d690808
jne 0x40962d
mov ebx, dword [ebp - 0x14]
shl ebx, 8
add ebx, 0xffffff17
mov dword [ebp - 0x14], ebx
push 0x5372
push 0x596a
push 0x4f5d
push ebx
call fcn.0040ac30
add esp, 0x10
mov eax, 0xe38d4443
cmp ebx, 0xa0
jb 0x40a557
mov eax, 0xa87d953
jmp 0x40a557
cmp eax, 0xe38d4442
jle 0x409d37
cmp eax, 0xe38d4443
je 0x40a20f
cmp eax, 0xe5444044
je 0x40a21b
cmp eax, 0xe57461c3
jne 0x40962d
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov byte [eax + 0x18], 0
mov edi, 0x18
push edi
push str.w_rrY_
push dword [ebp - 0x34]
call fcn.00443560
add esp, 0xc
push 4
push 0x472888
push edi
push dword [ebp - 0x34]
call fcn.0040ac30
add esp, 0x10
mov dword [ebp - 0x10], 0xc3c216ce
jmp 0x40962d
cmp eax, 0x6d1dd2c9
jg 0x409d75
cmp eax, 0x5c26d242
je 0x40a227
cmp eax, 0x630b484b
jne 0x40a55f
mov dword [ebp - 0x10], 0x444b1400
jmp 0x40962d
cmp eax, 0x83fc6d77
jg 0x409dbb
cmp eax, 0x81e12f62
je 0x40a24f
cmp eax, 0x826ee42d
jne 0x40962d
mov dword [ebp - 0x10], 0xba19f14a
jmp 0x40962d
cmp eax, 0xf59aa410
jg 0x409e18
cmp eax, 0xede0b7b1
je 0x40a27c
cmp eax, 0xf0558411
jne 0x40962d
cmp dword [ebp - 0x68], 0
mov eax, 0x472e3cc0
je 0x40a557
mov eax, 0xdea971bc
jmp 0x40a557
cmp eax, 0xbd4ff6ab
jg 0x409e41
cmp eax, 0xb6a34bc2
je 0x40a288
cmp eax, 0xba19f14a
jne 0x40962d
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x22c
mov dword [ebp - 0x10], 0x3361bb01
jmp 0x40962d
cmp eax, 0x427e6b9b
jg 0x409e63
cmp eax, 0x41e179c3
je 0x40a294
cmp eax, 0x425df280
jne 0x40962d
imul edi, dword [ebp - 0x14], 0x44000000
add edi, 0xffffff0e
mov dword [ebp - 0x14], edi
push edi
push 0x41aa
push 0x1686
push 0x1708
call fcn.0040aaf0
add esp, 0x10
mov eax, 0xe67f83a
cmp edi, 0x1b
jl 0x40a557
mov eax, 0xb48e79f6
jmp 0x40a557
cmp eax, 0xa7949b7d
jg 0x409e85
cmp eax, 0x959ee4ba
je 0x40a2a9
cmp eax, 0xa0519cc0
jne 0x40962d
mov eax, dword [ebp - 0x1c]
add eax, 0x24
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0xb3955f7b
jmp 0x40962d
cmp eax, 0x1adb96c8
jg 0x409ea7
cmp eax, 0x15fa78a4
je 0x40a2db
cmp eax, 0x164f71a1
jne 0x40962d
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x6d1dd2ca
jmp 0x40962d
cmp eax, 0xd05b7f21
je 0x40a320
cmp eax, 0xd562ff25
jne 0x40962d
mov ecx, dword [ebp - 0x14]
shr ecx, 5
and ecx, 0xffffffe0
lea eax, [ecx - 0x12a0]
mov dword [ebp - 0x14], eax
mov eax, 0x6d1dd2ca
cmp ecx, 0x1324
jb 0x40a467
jmp 0x40a557
cmp eax, 0x719fe0ff
je 0x40a33e
cmp eax, 0x79322a22
jne 0x40962d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x826ee42d
jmp 0x40962d
cmp eax, 0x84554dd1
je 0x40a3b2
cmp eax, 0x86f9a22e
jne 0x40962d
mov eax, dword [ebp - 0x18]
add eax, 0x54
shr eax, 2
add eax, 0x7a
mov ecx, eax
and ecx, 0xfffffff
imul eax, eax
imul edx, eax, 0xcef
dec edx
imul ecx, ecx, 0xb1
mov dword [ebp - 0x18], ecx
mov ecx, 0x425df280
cmp edx, eax
je 0x40a507
mov ecx, 0x5616715c
jmp 0x40a507
cmp eax, 0x6c7ffcc
je 0x40a3d6
cmp eax, 0x6f32ba4
jne 0x40962d
push 8
push 0x4728d4
push 0x10
push dword [ebp - 0x40]
call fcn.0040ac30
add esp, 0x10
push 0x11
push dword [ebp - 0x40]
push dword [ebp - 0x28]
call fcn.00443560
add esp, 0xc
push dword [ebp - 0x28]
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0x375c1a1a
jmp 0x40962d
cmp eax, 0xc02aa3de
je 0x40a3e2
cmp eax, 0xc3c216ce
jne 0x40962d
push 0x19
push dword [ebp - 0x34]
lea edi, [ebp - 0xb1]
push edi
call fcn.00443560
add esp, 0xc
push edi
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x8eaab81d
jmp 0x40962d
cmp eax, 0x44c10536
je 0x40a3fc
cmp eax, 0x472e3cc0
jne 0x40962d
mov eax, dword [ebp - 0x4c]
push dword [ebp - 0x44]
call eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0x86f9a22e
jmp 0x40962d
cmp eax, 0xaff9186a
je 0x40a410
cmp eax, 0xb218a53a
jne 0x40962d
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0x58d7c070
jmp 0x40962d
cmp eax, 0x1f64fb16
je 0x40a41c
cmp eax, 0x3361bb01
jne 0x40962d
mov eax, dword [ebp - 0x54]
push dword [ebp - 0x1c]
push dword [ebp - 0x44]
call eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0xe5444044
jmp 0x40962d
cmp eax, 0xe112a8d8
je 0x40a431
cmp eax, 0xe2e8a630
jne 0x40962d
push eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x28], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0x22c
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0x7a18dbdd
jmp 0x40962d
cmp eax, 0x6d1dd2ca
je 0x40a471
cmp eax, 0x6f4f0b35
jne 0x40962d
mov eax, dword [ebp - 0x18]
mov ecx, 0xe1
add eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x7d2d
dec edx
mov eax, 0x6d1dd2ca
cmp ecx, edx
je 0x40a557
mov eax, 0x5c26d242
jmp 0x40a557
cmp eax, 0x83fc6d78
je 0x40a47d
cmp eax, 0x8410c221
jne 0x40962d
mov eax, dword [ebp - 0x30]
mov word [eax + 0x18], 0
push 0x18
push 0x466540
push dword [ebp - 0x30]
call fcn.00443560
add esp, 0xc
push 4
push 0x466558
push 0xc
push dword [ebp - 0x30]
call fcn.0040aaf0
add esp, 0x10
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0x630b484b
jmp 0x40962d
cmp eax, 0xf59aa411
je 0x40a48d
cmp eax, 0xf884d28d
jne 0x40962d
mov eax, dword [ebp - 0x40]
mov byte [eax + 0x10], 0
mov dword [ebp - 0x10], 0xd914716f
jmp 0x40962d
cmp eax, 0xbd4ff6ac
je 0x40a4d7
cmp eax, 0xbde0d5d0
jne 0x40962d
mov dword [ebp - 0x10], 0xd9df720d
jmp 0x40962d
cmp eax, 0x427e6b9c
je 0x40a4eb
cmp eax, 0x444b1400
jne 0x40962d
mov dword [ebp - 0x10], 0xe57461c3
jmp 0x40962d
cmp eax, 0xa7949b7e
je 0x40a50f
cmp eax, 0xab04b21d
jne 0x40962d
mov dword [ebp - 0x10], 0xc7e3c84f
jmp 0x40962d
cmp eax, 0x1adb96c9
je 0x40a530
cmp eax, 0x1b9c2852
jne 0x40962d
mov dword [ebp - 0x10], 0x1f64fb16
jmp 0x40962d
mov eax, dword [ebp - 0x40]
mov ecx, dword [0x4728d0]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x4728cc]
mov dword [eax + 8], ecx
mov ecx, dword [0x4728c8]
mov dword [eax + 4], ecx
mov ecx, dword [0x4728c4]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x83fc6d78
jmp 0x40962d
cmp dword [ebp - 0x74], 0
mov eax, 0x472e3cc0
je 0x40a557
mov eax, 0x959ee4ba
jmp 0x40a557
mov dword [ebp - 0x10], 0x41e179c3
jmp 0x40962d
mov ecx, dword [ebp - 0x18]
lea eax, [ecx - 0xde]
imul eax, eax
add ecx, 0xffffff2f
imul edx, eax, 0x6243
dec edx
shr ecx, 5
add ecx, 0xfffffff7
mov dword [ebp - 0x18], ecx
mov ecx, 0xc02aa3de
cmp eax, edx
je 0x40a507
mov ecx, 0xede0b7b1
jmp 0x40a507
mov eax, dword [ebp - 0x38]
mov byte [eax + 0xe], 0
mov eax, dword [ebp - 0x38]
movzx ecx, word [0x4728ab]
mov word [eax + 0xc], cx
mov ecx, dword [0x4728a7]
mov dword [eax + 8], ecx
mov ecx, dword [0x4728a3]
mov dword [eax + 4], ecx
mov ecx, dword [0x47289f]
mov dword [eax], ecx
push 6
push 0x4728ad
push 0xe
push dword [ebp - 0x38]
call fcn.0040ac30
add esp, 0x10
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x84], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x80], ecx
mov eax, dword [eax + 0xb]
mov dword [ebp - 0x7d], eax
lea eax, [ebp - 0x88]
push eax
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x24]
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
add eax, 0xb
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0xa87d953
jmp 0x40962d
mov dword [ebp - 0x10], 0x524f7fc6
jmp 0x40962d
mov eax, dword [ebp - 0x5c]
mov byte [eax], 0
mov eax, dword [ebp - 0x3c]
mov cl, byte [0x4728bd]
mov byte [eax + 0xa], cl
movzx ecx, word [0x4728bb]
mov word [eax + 8], cx
mov ecx, dword [0x4728b7]
mov dword [eax + 4], ecx
mov ecx, dword [0x4728b3]
mov dword [eax], ecx
push 6
push 0x4728be
push 0xb
push dword [ebp - 0x3c]
call fcn.0040ac30
add esp, 0x10
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
mov dword [ebp - 0x10], 0xc02aa3de
jmp 0x40962d
imul edi, dword [ebp - 0x14], 0x5b
shr edi, 0x1c
mov dword [ebp - 0x14], edi
call fcn.0040a572
push 0x3cd4
push 0x48f
push edi
push 0x35c4
call fcn.0040ac30
add esp, 0x10
mov dword [ebp - 0x10], 0x1adb96c9
jmp 0x40962d
push eax
sub esp, 0xc
mov ebx, esp
mov byte [ebx + 0xf], 0
mov edi, 0xf
push edi
push 0x47288c
push ebx
call fcn.00443560
add esp, 0xc
push 4
push 0x47289b
push edi
push ebx
call fcn.0040ac30
add esp, 0x10
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x90], eax
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0x164f71a1
jmp 0x40962d
mov eax, dword [ebp - 0x58]
push dword [ebp - 0x1c]
push dword [ebp - 0x44]
call eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0xbde0d5d0
jmp 0x40962d
mov eax, dword [ebp - 0x14]
mov ebx, eax
shl ebx, 6
sub ebx, eax
sub ebx, eax
add ebx, 0x2edd
mov dword [ebp - 0x14], ebx
push ebx
push 0x362d
push 0x1241
push 0x2746
call fcn.0040ac30
add esp, 0x10
push 0x1bdb
push ebx
push 0x2687
push 0x2f31
call fcn.0040ac30
add esp, 0x10
mov eax, 0xc02aa3de
cmp ebx, 0xa9
jb 0x40a552
jmp 0x40a557
mov dword [ebp - 0x10], 0xc790f37e
jmp 0x40962d
mov eax, dword [ebp - 0x18]
shr eax, 1
lea ecx, [eax + eax*2]
shl ecx, 3
sub ecx, eax
mov edx, ecx
imul edx, ecx
imul ebx, edx, 0x1569
dec ebx
add ecx, 0xfffffeba
mov dword [ebp - 0x18], ecx
mov eax, 0x4d3b7e04
cmp edx, ebx
jne 0x40a2d1
jmp 0x40a557
mov ebx, dword [ebp - 0x14]
add ebx, 0xffffffcb
mov dword [ebp - 0x14], ebx
push 0x2fab
push 0x5ed9
push 0xf9b
push ebx
call fcn.0040aaf0
add esp, 0x10
push ebx
call fcn.00409614
add esp, 4
mov eax, 0x8c9a7c36
cmp ebx, 4
jl 0x40a467
jmp 0x40a557
mov dword [ebp - 0x10], 0x11f24231
jmp 0x40962d
mov eax, dword [ebp - 0x64]
push 0
push dword [ebp - 0x48]
call eax
mov dword [ebp - 0x10], 0x44c10536
jmp 0x40962d
mov dword [ebp - 0x10], 0x8410c221
jmp 0x40962d
mov dword [ebp - 0x10], 0xf0558411
jmp 0x40962d
mov eax, dword [ebp - 0x60]
push dword [ebp - 0x78]
push 0
push 1
call eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
mov eax, 0xab04b21d
je 0x40a557
mov eax, 0xaff9186a
jmp 0x40a557
imul ebx, dword [ebp - 0x14], 0x3c
add ebx, 0x1460
mov dword [ebp - 0x14], ebx
call fcn.0040a572
mov eax, 0xce7ace38
cmp ebx, 0xbc
jl 0x40a557
mov eax, 0xc02aa3de
jmp 0x40a557
mov dword [ebp - 0x10], 0x79322a22
jmp 0x40962d
mov dword [ebp - 0x10], 0x427e6b9c
jmp 0x40962d
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0xe38d4443
jmp 0x40962d
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0x2e]
imul ecx, ecx
imul edx, ecx, 0x8253
dec edx
shl eax, 0xd
add eax, 0xc4000
mov dword [ebp - 0x18], eax
mov eax, 0x6f32ba4
cmp edx, ecx
je 0x40a557
mov eax, 0xb6a34bc2
jmp 0x40a557
mov eax, dword [ebp - 0x14]
lea edi, [eax + eax]
add edi, 0x1701d2
and edi, 0xffff8000
mov dword [ebp - 0x14], edi
push 0x591c
push 0x3d1d
push edi
push 0x3397
call fcn.0040aaf0
add esp, 0x10
mov eax, 0xe38d4443
cmp edi, 0x6e
jl 0x40a557
mov eax, 0xc3c216ce
jmp 0x40a557
imul eax, dword [ebp - 0x18], 0x28b0000
add eax, 0xfff83f62
shr eax, 0xd
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xbd4ff6ac
jmp 0x40962d
push eax
sub esp, 8
mov ebx, esp
mov byte [ebx + 0xb], 0
mov al, byte [0x4728e6]
mov byte [ebx + 0xa], al
movzx eax, word [0x4728e4]
mov word [ebx + 8], ax
mov eax, dword [0x4728e0]
mov dword [ebx + 4], eax
mov eax, dword [0x4728dc]
mov dword [ebx], eax
push 6
push 0x4728e7
push 0xb
push ebx
call fcn.0040ac30
add esp, 0x10
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebx + 8]
mov dword [eax + 8], ecx
mov ecx, dword [ebx]
mov edx, dword [ebx + 4]
mov dword [eax + 4], edx
mov dword [eax], ecx
push dword [ebp - 0x2c]
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x50]
push 0
push 0xf
call eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x7f31619f
jmp 0x40962d
imul eax, dword [ebp - 0x18], 0x1676
add eax, 0x9739
shr eax, 0xf
imul eax, eax, 0xcc
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x1b9c2852
jmp 0x40962d
mov dword [ebp - 0x10], 0xa0519cc0
jmp 0x40962d
push dword [ebp - 0x24]
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x84554dd1
jmp 0x40962d
mov eax, dword [ebp - 0x4c]
push dword [ebp - 0x48]
call eax
mov dword [ebp - 0x10], 0xab04b21d
jmp 0x40962d
mov dword [ebp - 0x10], 0x398a740e
jmp 0x40962d
push eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0xf884d28d
jmp 0x40962d
mov ebx, dword [ebp - 0x14]
shl ebx, 6
add ebx, 0x1a80
mov edi, ebx
shr edi, 1
mov dword [ebp - 0x14], edi
push edi
call fcn.00409614
add esp, 4
push edi
call fcn.00409614
add esp, 4
mov eax, 0x427e6b9c
cmp ebx, 0xcb
jae 0x40a557
mov eax, 0x8410c221
jmp 0x40a557
mov dword [ebp - 0x10], 0x8c9a7c36
jmp 0x40962d
shl dword [ebp - 0x18], 0x1b
mov dword [ebp - 0x10], 0x6f32ba4
jmp 0x40962d
mov edi, dword [ebp - 0x14]
mov eax, 0xec
add edi, eax
mov ebx, edi
shr ebx, 6
mov dword [ebp - 0x14], ebx
call fcn.0040a572
push 0x5260
push 0x24d6
push 0x1005
push ebx
call fcn.0040ac30
add esp, 0x10
mov eax, 0xd562ff25
cmp edi, 0x200
jae 0x40a557
mov eax, 0xb3ca34d2
jmp 0x40a557
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0x6f4f0b35
jmp 0x40962d
push dword [ebp + 8]
push dword [ebp - 0x6c]
call fcn.004532ca
add esp, 8
mov ecx, 0xd05b7f21
test eax, eax
je 0x40a507
mov ecx, 0xab04b21d
mov dword [ebp - 0x10], ecx
jmp 0x40962d
imul ecx, dword [ebp - 0x14], 0xda
add ecx, 0xf3bf
mov dword [ebp - 0x14], ecx
mov eax, 0x81e12f62
cmp ecx, 9
jb 0x40a557
mov eax, 0xf59aa411
jmp 0x40a557
mov edi, dword [ebp - 0x14]
mov eax, edi
shr eax, 7
add eax, 0xfffffe72
mov dword [ebp - 0x14], eax
call fcn.0040a572
mov eax, 0x8410c221
cmp edi, 0x12a80
jae 0x40a557
mov eax, 0x41e179c3
mov dword [ebp - 0x10], eax
jmp 0x40962d
cmp eax, 0x58d7c070
jne 0x40962d
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret