Function at 0x40bc88
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x50
mov dword [ebp - 0x10], 0x953ec525
mov di, 0x88
mov eax, dword [ebp - 0x10]
cmp eax, 0xfb24df07
jg 0x40bcff
cmp eax, 0xbfb85780
jg 0x40bd5c
cmp eax, 0xa82676b1
jle 0x40be11
cmp eax, 0xb1e8f5d1
jg 0x40bf79
cmp eax, 0xac966c32
jle 0x40c149
cmp eax, 0xaf9fa139
je 0x40c506
cmp eax, 0xb1b1f251
jne 0x40cad5
mov eax, dword [ebp - 0x18]
shl eax, 0x1c
or eax, 0x2f80000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x3e049b83
jmp 0x40bc9c
cmp eax, 0x38c2eda7
jg 0x40bdc5
cmp eax, 0x1ec0726f
jg 0x40be67
cmp eax, 0x12010b61
jg 0x40bfad
cmp eax, 0x696b618
jg 0x40c182
cmp eax, 0xfb24df08
je 0x40c515
cmp eax, 0x1bd11bf
jne 0x40bc9c
mov ecx, dword [ebp - 0x5c]
mov eax, 0xf76a0d03
cmp ecx, 8
je 0x40cacd
mov eax, 0x839f48bf
jmp 0x40cacd
cmp eax, 0xdfaf4e7a
jg 0x40bed9
cmp eax, 0xcc4e4926
jg 0x40bfe3
cmp eax, 0xc239f3af
jg 0x40c1ca
cmp eax, 0xbfb85781
je 0x40c52a
cmp eax, 0xc19f82cc
jne 0x40bc9c
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x58]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x24]
mov dword [eax + 8], 0x34
mov dword [ebp - 0x10], 0xa64a1e62
jmp 0x40bc9c
cmp eax, 0x6a873786
jg 0x40bf38
cmp eax, 0x488cb7ca
jg 0x40c021
cmp eax, 0x3e9e93f5
jg 0x40c1ff
cmp eax, 0x38c2eda8
je 0x40c562
cmp eax, 0x3e049b83
jne 0x40bc9c
mov eax, dword [ebp - 0x48]
mov word [eax + 0xe], 0
mov dword [ebp - 0x10], 0x1ec07270
jmp 0x40bc9c
cmp eax, 0x9c11acdd
jg 0x40c055
cmp eax, 0x91332987
jg 0x40c24e
cmp eax, 0x86e4f031
je 0x40c581
cmp eax, 0x8f459fe5
jne 0x40cae1
mov eax, dword [ebp - 0x14]
shl eax, 5
add eax, 0xffffdec0
mov esi, 0xcc4e4927
and eax, 0xffffffc0
mov dword [ebp - 0x14], eax
je 0x40be5a
mov esi, 0x54aa2523
call fcn.0040b508
mov dword [ebp - 0x10], esi
jmp 0x40bc9c
cmp eax, 0x2551eb4f
jg 0x40c08b
cmp eax, 0x232c24eb
jg 0x40c279
cmp eax, 0x1ec07270
je 0x40c5b5
cmp eax, 0x21387c81
jne 0x40bc9c
mov eax, dword [ebp - 0x40]
mov ecx, dword [0x47cc0a]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x47cc06]
mov dword [eax + 8], ecx
mov ecx, dword [0x47cc02]
mov dword [eax + 4], ecx
mov ecx, dword [0x47cbfe]
mov dword [eax], ecx
push 7
push 0x47cc0e
push 0x10
push dword [ebp - 0x40]
call fcn.0040cb20
add esp, 0x10
mov dword [ebp - 0x10], 0xf3c1ccda
jmp 0x40bc9c
cmp eax, 0xf3652f3a
jg 0x40c0c1
cmp eax, 0xeb52e2c3
jg 0x40c2a2
cmp eax, 0xdfaf4e7b
je 0x40c61c
cmp eax, 0xe2e98310
jne 0x40bc9c
mov eax, dword [ebp - 0x18]
imul ecx, eax, 0xf9
imul ecx, ecx
imul eax, eax, 0x4dd00000
imul edx, ecx, 0x6263
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x1229d2f3
cmp edx, ecx
je 0x40cacd
mov eax, 0xb572564f
jmp 0x40cacd
cmp eax, 0x73b88e6c
jg 0x40c0fe
cmp eax, 0x6ddfabf1
jg 0x40c2f9
cmp eax, 0x6a873787
je 0x40c63d
cmp eax, 0x6d6d0914
jne 0x40bc9c
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0xc19f82cc
jmp 0x40bc9c
cmp eax, 0xba1dd47e
jg 0x40c339
cmp eax, 0xb1e8f5d2
je 0x40c65e
cmp eax, 0xb572564f
jne 0x40bc9c
mov eax, dword [ebp - 0x40]
mov byte [eax + 0x10], 0
mov dword [ebp - 0x10], 0x3e9e93f6
jmp 0x40bc9c
cmp eax, 0x1b10cf8a
jg 0x40c35b
cmp eax, 0x12010b62
je 0x40c66d
cmp eax, 0x1229d2f3
jne 0x40bc9c
push eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0x73b88e6d
jmp 0x40bc9c
cmp eax, 0xd16f32a8
jg 0x40c37d
cmp eax, 0xcc4e4927
je 0x40c694
cmp eax, 0xcc549bb4
jne 0x40bc9c
imul eax, dword [ebp - 0x14], 0x2eae000
add eax, 0x7e80
shr eax, 1
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x60acc1b2
jmp 0x40bc9c
cmp eax, 0x60acc1b1
jg 0x40c3ab
cmp eax, 0x488cb7cb
je 0x40c6af
cmp eax, 0x54aa2523
jne 0x40bc9c
push eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xcc4e4927
jmp 0x40bc9c
cmp eax, 0xa249a2af
jg 0x40c3f6
cmp eax, 0x9c11acde
je 0x40c6bb
cmp eax, 0x9d5971e5
jne 0x40bc9c
mov eax, dword [ebp - 0x20]
mov word [eax + 2], 0xe
mov dword [ebp - 0x10], 0xa82676b2
jmp 0x40bc9c
cmp eax, 0x34326653
jg 0x40c418
cmp eax, 0x2551eb50
je 0x40c6ea
cmp eax, 0x28c1805d
jne 0x40bc9c
mov eax, dword [ebp - 0x3c]
add eax, 9
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0x6ddfabf2
jmp 0x40bc9c
cmp eax, 0xf76a0d02
jg 0x40c454
cmp eax, 0xf3652f3b
je 0x40c727
cmp eax, 0xf3c1ccda
jne 0x40bc9c
push 0x11
push dword [ebp - 0x40]
push dword [ebp - 0x2c]
call fcn.0044ac30
add esp, 0xc
mov dword [ebp - 0x10], 0x6a873787
jmp 0x40bc9c
cmp eax, 0x7d2fd385
jg 0x40c4bd
cmp eax, 0x73b88e6d
je 0x40c756
cmp eax, 0x7ad5e7e7
jne 0x40bc9c
mov eax, dword [ebp - 0x1c]
mov word [eax], di
mov eax, dword [ebp - 0x1c]
mov word [eax + 2], di
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x34]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x20]
mov word [eax], 0xe
mov dword [ebp - 0x10], 0x9d5971e5
jmp 0x40bc9c
cmp eax, 0xa82676b2
je 0x40c77b
cmp eax, 0xaa3475a7
jne 0x40bc9c
imul ecx, dword [ebp - 0x14], 0x308000
add ecx, 0xfd898000
mov dword [ebp - 0x14], ecx
mov eax, 0xbfb85781
cmp ecx, 7
jl 0x40c68a
jmp 0x40cacd
cmp eax, 0x696b619
je 0x40c7af
cmp eax, 0x7d5159e
jne 0x40bc9c
mov eax, dword [ebp - 0x14]
lea ecx, [eax + eax*8]
shl ecx, 0xf
add ecx, 0xfc636000
mov eax, ecx
shr eax, 0xa
add eax, 0x88
mov dword [ebp - 0x14], eax
mov eax, 0xdfaf4e7b
cmp ecx, 0x7801
jb 0x40c90a
jmp 0x40cacd
cmp eax, 0xc239f3b0
je 0x40c7de
cmp eax, 0xc51049bd
jne 0x40bc9c
mov eax, dword [ebp - 0x14]
mov ecx, 0x1ffff
and eax, ecx
imul eax, eax, 0x58
add eax, 0x6b
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x21387c81
jmp 0x40bc9c
cmp eax, 0x3e9e93f6
je 0x40c7f6
cmp eax, 0x4088be24
jne 0x40bc9c
mov eax, dword [ebp - 0x18]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
add ecx, 0xffffffaa
lea eax, [eax + eax*4]
add eax, 0xfffffec3
imul ecx, ecx
shr eax, 0xa
imul edx, ecx, 0x46b9
imul eax, eax, 0x59
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xfb24df08
cmp ecx, edx
jne 0x40c90a
jmp 0x40cacd
cmp eax, 0x91332988
je 0x40c82f
cmp eax, 0x953ec525
jne 0x40bc9c
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0x1229d2f3
jmp 0x40bc9c
cmp eax, 0x232c24ec
je 0x40c875
cmp eax, 0x251c35a1
jne 0x40bc9c
mov dword [ebp - 0x14], 0x140cc
mov dword [ebp - 0x10], 0x1ec07270
jmp 0x40bc9c
cmp eax, 0xeb52e2c4
je 0x40c8e7
cmp eax, 0xee847e33
jne 0x40bc9c
mov esi, dword [ebp - 0x14]
shl esi, 0xb
and esi, 0x3ffff800
lea eax, [esi - 0x55]
mov dword [ebp - 0x14], eax
push eax
push 0x14b8
push 0x5a56
push 0x808
call fcn.0040cb20
add esp, 0x10
mov eax, 0x9c11acde
test esi, esi
je 0x40cacd
mov eax, 0x696b619
jmp 0x40cacd
cmp eax, 0x6ddfabf2
je 0x40c914
cmp eax, 0x721cfbb6
jne 0x40bc9c
mov eax, dword [ebp - 0x14]
shr eax, 9
imul ecx, eax, 0xea0
mov dword [ebp - 0x14], ecx
mov eax, 0x12010b62
cmp ecx, 0x9b
jb 0x40cacd
mov eax, 0xaa3475a7
jmp 0x40cacd
cmp eax, 0xba1dd47f
je 0x40c945
cmp eax, 0xba9f0171
jne 0x40bc9c
mov dword [ebp - 0x10], 0x1bd11bf
jmp 0x40bc9c
cmp eax, 0x1b10cf8b
je 0x40c980
cmp eax, 0x1c144995
jne 0x40bc9c
mov dword [ebp - 0x10], 0x4088be24
jmp 0x40bc9c
cmp eax, 0xd16f32a9
je 0x40c9b5
cmp eax, 0xd1fed7cb
jne 0x40bc9c
push eax
sub esp, 0x88
mov eax, esp
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x1c144995
jmp 0x40bc9c
cmp eax, 0x60acc1b2
je 0x40ca17
cmp eax, 0x6372f5a7
jne 0x40bc9c
mov ecx, dword [ebp - 0x14]
shl ecx, 0x12
add ecx, 0xfd140000
shr ecx, 3
and ecx, 0x1f000000
lea eax, [ecx - 0xf5]
mov dword [ebp - 0x14], eax
mov eax, 0xcc549bb4
test ecx, ecx
je 0x40cacd
mov eax, 0x28c1805d
jmp 0x40cacd
cmp eax, 0xa249a2b0
je 0x40ca46
cmp eax, 0xa64a1e62
jne 0x40bc9c
mov dword [ebp - 0x10], 0xa249a2b0
jmp 0x40bc9c
cmp eax, 0x34326654
je 0x40ca73
cmp eax, 0x355b5947
jne 0x40bc9c
imul esi, dword [ebp - 0x14], 0x8500
mov dword [ebp - 0x14], esi
call fcn.0040bc88
mov eax, 0x73b88e6d
test esi, esi
je 0x40cacd
mov eax, 0x1229d2f3
jmp 0x40cacd
cmp eax, 0xf76a0d03
je 0x40ca8d
cmp eax, 0xfa4b0361
jne 0x40bc9c
push 0x88
push 0x46f620
push dword [ebp - 0x44]
call fcn.0044ac30
add esp, 0xc
push 4
push 0x46f6a8
push 0x44
push dword [ebp - 0x44]
call fcn.0040cc50
add esp, 0x10
push 0x8a
push dword [ebp - 0x44]
push dword [ebp - 0x34]
call fcn.0044ac30
add esp, 0xc
mov eax, dword [ebp - 0x38]
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0xb1b1f251
jmp 0x40bc9c
cmp eax, 0x7d2fd386
je 0x40caad
cmp eax, 0x7fd932bb
jne 0x40bc9c
mov eax, dword [ebp - 0x14]
shr eax, 0xd
add eax, 0x36
shr eax, 0xe
mov dword [ebp - 0x14], eax
push 0x512b
push 0x3b18
push eax
push 0x116f
call fcn.0040cc50
add esp, 0x10
mov dword [ebp - 0x10], 0xfb24df08
jmp 0x40bc9c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x7ad5e7e7
jmp 0x40bc9c
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x28c1805d
jmp 0x40bc9c
imul eax, dword [ebp - 0x14], 0x6d8000
add eax, 0xf000
mov dword [ebp - 0x14], eax
push 0xd20
push 0x6013
push 0x10ea
push eax
call fcn.0040cc50
add esp, 0x10
call fcn.0040b508
mov dword [ebp - 0x10], 0xfb24df08
jmp 0x40bc9c
mov eax, dword [ebp - 0x18]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 0xcc]
and eax, 0xfffffff8
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x488cb7cb
jmp 0x40bc9c
mov eax, dword [ebp - 0x18]
shr eax, 0x17
lea ecx, [eax - 0x1b]
imul ecx, ecx
imul edx, ecx, 0x2fd5
dec edx
lea eax, [eax*4 - 0x58]
mov dword [ebp - 0x18], eax
mov eax, 0x1b10cf8b
cmp ecx, edx
je 0x40cacd
mov eax, 0xb1e8f5d2
jmp 0x40cacd
mov eax, dword [ebp - 0x48]
movzx ecx, word [0x46f6bc]
mov word [eax + 0xc], cx
mov ecx, dword [0x46f6b8]
mov dword [eax + 8], ecx
mov ecx, dword [0x46f6b4]
mov dword [eax + 4], ecx
mov ecx, dword [0x46f6b0]
mov dword [eax], ecx
push 4
push 0x46f6be
push 7
push dword [ebp - 0x48]
call fcn.0040cc50
add esp, 0x10
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0xaf9fa139
jmp 0x40bc9c
mov ecx, dword [ebp - 0x14]
add ecx, 0xffffffea
mov dword [ebp - 0x14], ecx
mov eax, 0xcc4e4927
cmp ecx, 0x48
je 0x40cacd
mov eax, 0x1c144995
jmp 0x40cacd
push dword [ebp - 0x2c]
push dword [ebp - 0x50]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0x38c2eda8
jmp 0x40bc9c
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0xfb24df08
jmp 0x40bc9c
mov ecx, dword [ebp - 0x14]
shl ecx, 5
add ecx, 0x23
mov dword [ebp - 0x14], ecx
mov eax, 0x7fd932bb
cmp ecx, 0x95
jge 0x40cacd
mov eax, 0x54aa2523
jmp 0x40cacd
push eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0x86e4f031
jmp 0x40bc9c
mov dword [ebp - 0x10], 0xd1fed7cb
jmp 0x40bc9c
mov esi, dword [ebp - 0x14]
shl esi, 7
add esi, 0xffffe6fa
mov dword [ebp - 0x14], esi
call fcn.0040bc88
mov eax, 0x232c24ec
cmp esi, 0xe8
jl 0x40cacd
mov eax, 0xf3c1ccda
jmp 0x40cacd
imul esi, dword [ebp - 0x14], 0x3b4
add esi, 0x24
mov dword [ebp - 0x14], esi
push 0x82
push esi
push 0x1cdc
push 0x3c22
call fcn.0040cb20
add esp, 0x10
mov eax, 0xeb52e2c4
cmp esi, 0x50
jge 0x40cacd
mov eax, 0x3e049b83
jmp 0x40cacd
mov esi, dword [ebp - 0x14]
shl esi, 0xf
or esi, 0x82
mov dword [ebp - 0x14], esi
call fcn.0040bc88
mov eax, 0x1229d2f3
cmp esi, 0xc5
jge 0x40cacd
mov eax, 0x8f459fe5
jmp 0x40cacd
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
sub esp, 0x8c
mov eax, esp
mov dword [ebp - 0x34], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x54aa2523
jmp 0x40bc9c
mov eax, dword [ebp - 0x18]
add eax, 0x52
mov ecx, eax
imul ecx, eax
shl eax, 0x15
imul edx, ecx, 0x81c9
dec edx
add eax, 0xffffff57
mov dword [ebp - 0x18], eax
mov eax, 0xd16f32a9
cmp edx, ecx
je 0x40cacd
mov eax, 0x6d6d0914
jmp 0x40cacd
mov eax, dword [ebp - 0x14]
shl eax, 0xb
and eax, 0x1ffff800
imul ecx, eax, 0x74
add ecx, 0xfffffe40
mov dword [ebp - 0x14], ecx
mov eax, 0x6a873787
cmp ecx, 0x22
jl 0x40cacd
mov eax, 0xcc4e4927
jmp 0x40cacd
mov eax, dword [ebp - 0x44]
mov word [eax + 0x88], 0
mov dword [ebp - 0x10], 0xfa4b0361
jmp 0x40bc9c
imul ecx, dword [ebp - 0x18], 0x4d
lea eax, [ecx - 0x1b]
imul eax, eax
add ecx, 0xffffff2c
imul edx, eax, 0x219b
shr ecx, 9
dec edx
add ecx, 0xa4
mov dword [ebp - 0x18], ecx
mov ecx, 0x721cfbb6
cmp eax, edx
je 0x40c827
mov ecx, 0x21387c81
mov dword [ebp - 0x10], ecx
jmp 0x40bc9c
mov ebx, dword [ebp - 0x14]
add ebx, 0x22
mov esi, ebx
shr esi, 6
mov dword [ebp - 0x14], esi
call fcn.0040bc88
push 0x15a0
push 0x2197
push 0x1f2a
push esi
call fcn.0040cb20
add esp, 0x10
mov eax, 0x34326654
cmp ebx, 0x3680
jb 0x40cacd
mov eax, 0xc51049bd
jmp 0x40cacd
mov eax, dword [ebp - 0x4c]
mov byte [eax], 0
mov eax, dword [ebp - 0x3c]
mov cl, byte [0x47cbf9]
mov byte [eax + 8], cl
mov ecx, dword [0x47cbf5]
mov dword [eax + 4], ecx
mov ecx, dword [0x47cbf1]
mov dword [eax], ecx
push 4
push 0x47cbfa
push 9
push dword [ebp - 0x3c]
call fcn.0040cb20
add esp, 0x10
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x3c]
movzx edx, word [ecx + 8]
mov word [eax + 8], dx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x2c]
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0xe2e98310
jmp 0x40bc9c
mov ecx, dword [ebp - 0x14]
shr ecx, 0xf
add ecx, 0x1a4
shr ecx, 2
mov dword [ebp - 0x14], ecx
mov eax, 0xf3c1ccda
cmp ecx, 0x82
je 0x40cacd
mov eax, 0xc239f3b0
jmp 0x40cacd
mov eax, dword [ebp - 0x18]
add eax, 0x1d
shr eax, 2
lea ecx, [eax + 0xae]
imul ecx, ecx
add eax, 0x52
imul edx, ecx, 0x433f
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x73b88e6d
cmp ecx, edx
jne 0x40ca3c
jmp 0x40cacd
mov esi, dword [ebp - 0x14]
mov eax, 0xc9
add esi, eax
shr esi, 0xd
add esi, 0xffffff0d
mov dword [ebp - 0x14], esi
call fcn.0040bc88
call fcn.0040b508
mov eax, 0xee847e33
cmp esi, 0xd3
jb 0x40cacd
mov eax, 0x91332988
jmp 0x40cacd
imul esi, dword [ebp - 0x14], 0xab
add esi, 0x10c91
mov dword [ebp - 0x14], esi
call fcn.0040b508
call fcn.0040bc88
mov eax, 0x7d2fd386
cmp esi, 0xff
jae 0x40cacd
mov eax, 0xf3652f3b
jmp 0x40cacd
mov esi, dword [ebp - 0x14]
mov ebx, esi
shr ebx, 2
add ebx, 0x91
shr ebx, 0xb
add ebx, 0x54
mov dword [ebp - 0x14], ebx
push 0x366f
push ebx
push 0x484
push 0x3d1d
call fcn.0040cb20
add esp, 0x10
push ebx
push 0x23cd
push 0x48a9
push 0xa6e
call fcn.0040cb20
add esp, 0x10
mov eax, 0x7d5159e
cmp esi, 0xdddbc
jb 0x40cacd
mov eax, 0x2551eb50
jmp 0x40cacd
mov esi, dword [ebp - 0x14]
shl esi, 7
add esi, 0x1c7b
mov dword [ebp - 0x14], esi
call fcn.0040bc88
mov eax, 0x1229d2f3
cmp esi, 0xe4
jge 0x40cacd
mov eax, 0x232c24ec
jmp 0x40cacd
mov eax, dword [ebp - 0x54]
push dword [ebp - 0x30]
push 0
push dword [ebp - 0x24]
mov ecx, 3
push ecx
push ecx
push 0x50000018
call eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0xba9f0171
jmp 0x40bc9c
mov eax, dword [ebp - 0x14]
shl eax, 0x1e
or eax, 0x18000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x28c1805d
jmp 0x40bc9c
mov eax, dword [ebp - 0x18]
shr eax, 9
imul eax, eax, 0x15800000
add eax, 0xcc00074
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xac966c33
jmp 0x40bc9c
mov ecx, dword [ebp - 0x14]
mov eax, ecx
shr eax, 0xd
add eax, 0xfffffff4
mov dword [ebp - 0x14], eax
mov eax, 0x54aa2523
cmp ecx, 0x16e000
jae 0x40cacd
mov eax, 0x355b5947
mov dword [ebp - 0x10], eax
jmp 0x40bc9c
cmp eax, 0xac966c33
je 0x40caf4
jmp 0x40bc9c
cmp eax, 0x839f48bf
jne 0x40bc9c
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret