Function at 0x421ac8
Capabilities:
Get mac address on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x74
mov dword [ebp - 0x10], 0x81fa5c77
mov esi, 4
xor edi, edi
inc edi
mov eax, dword [ebp - 0x10]
cmp eax, 0x15670043
jle 0x421b44
cmp eax, 0x4162420d
jg 0x421ba1
cmp eax, 0x27a97147
jg 0x421c7c
cmp eax, 0x20baa0c3
jg 0x421db0
cmp eax, 0x1bccc989
jg 0x421fe8
cmp eax, 0x15670044
je 0x4223c6
cmp eax, 0x18704591
jne 0x4228c1
movzx eax, word [ebp - 0x12]
and eax, 0x7c
mov dword [ebp - 0x14], eax
call fcn.00421ac8
mov dword [ebp - 0x10], 0xe65521be
jmp 0x421ae0
cmp eax, 0xd2e72069
jg 0x421bfd
cmp eax, 0xa5421aed
jg 0x421cb4
cmp eax, 0x9b6f65da
jg 0x421de5
cmp eax, 0x94131199
jg 0x42201a
cmp eax, 0x81fa5c77
je 0x4223fe
cmp eax, 0x8db0eb53
jne 0x421ae0
imul eax, dword [ebp - 0x14], 0xb0
add eax, 0x3a2c
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x9e2a8d5b
jmp 0x421ae0
cmp eax, 0x686a1596
jg 0x421d12
cmp eax, 0x4d75da68
jg 0x421e1a
cmp eax, 0x4443c689
jg 0x42205b
cmp eax, 0x4162420e
je 0x422410
cmp eax, 0x42455599
jne 0x421ae0
imul eax, dword [ebp - 0x14], 0x4a000
add eax, 0x1314000
shr eax, 1
add eax, 0xffffffc4
mov dword [ebp - 0x14], eax
call fcn.0042353e
mov dword [ebp - 0x10], 0x727d9e32
jmp 0x421ae0
cmp eax, 0xf402c2ce
jg 0x421d55
cmp eax, 0xe67b9926
jg 0x421e59
cmp eax, 0xdb9c6040
jg 0x4220a4
cmp eax, 0xd2e7206a
je 0x42243c
cmp eax, 0xd56e4003
jne 0x421ae0
mov eax, dword [ebp - 0x14]
shl eax, 0xa
and eax, 0x7fffc00
imul ebx, eax, 0x10b8
mov eax, ebx
shr eax, 4
mov dword [ebp - 0x14], eax
push 0x3ce4
push 0x301d
push eax
call fcn.0042448a
add esp, 0xc
call fcn.0042293a
mov eax, 0x4443c68a
test ebx, ebx
je 0x4228b9
mov eax, 0x18704591
jmp 0x4228b9
cmp eax, 0x36c04363
jg 0x421ea4
cmp eax, 0x2c3208a0
jg 0x4220ec
cmp eax, 0x27a97148
je 0x422469
cmp eax, 0x2af00f3c
jne 0x421ae0
mov dword [ebp - 0x10], 0xb9cab840
jmp 0x421ae0
cmp eax, 0xbdce7d43
jg 0x421f0d
cmp eax, 0xb9cab83f
jg 0x422114
cmp eax, 0xa5421aee
je 0x42249f
cmp eax, 0xacdf80aa
jne 0x421ae0
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x109]
add eax, 0x1c9
imul ecx, ecx
imul edx, ecx, 0x5703
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x42455599
cmp ecx, edx
je 0x4228b9
mov eax, 0xbc15ecb5
jmp 0x4228b9
cmp eax, 0x7204a13b
jg 0x421f61
cmp eax, 0x6d6a4e8f
jg 0x422148
cmp eax, 0x686a1597
je 0x4224d0
cmp eax, 0x6c4a7760
jne 0x421ae0
push dword [ebp - 0x28]
call fcn.0044c77c
add esp, 4
mov dword [ebp - 0x10], 0x6f1ffd6b
jmp 0x421ae0
cmp eax, 0xacde223
jg 0x421fb2
cmp eax, 0x4774cb4
jg 0x422192
cmp eax, 0xf402c2cf
je 0x42250e
cmp eax, 0xf5632118
jne 0x421ae0
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x5d]
imul ecx, ecx
imul edx, ecx, 0x9a7
dec edx
add eax, 0xec
mov dword [ebp - 0x18], eax
mov eax, 0xa5421aee
cmp edx, ecx
je 0x4228b9
mov eax, 0x2c3208a1
jmp 0x4228b9
cmp eax, 0x21a94853
jg 0x4221e0
cmp eax, 0x20baa0c4
je 0x42253f
cmp eax, 0x216f6113
jne 0x421ae0
mov eax, dword [ebp - 0x3c]
add eax, eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x228425ff
jmp 0x421ae0
cmp eax, 0x9f55d048
jg 0x422234
cmp eax, 0x9b6f65db
je 0x42256f
cmp eax, 0x9e2a8d5b
jne 0x421ae0
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0xe67b9927
jmp 0x421ae0
cmp eax, 0x51b7edd9
jg 0x422263
cmp eax, 0x4d75da69
je 0x4225aa
cmp eax, 0x4dedc3c3
jne 0x421ae0
mov eax, dword [ebp - 0x40]
inc eax
mov ecx, 0x14afc217
cmp eax, 8
je 0x421e4e
mov ecx, 0x21a94854
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x4c], eax
jmp 0x421ae0
cmp eax, 0xea7b87b0
jg 0x4222b9
cmp eax, 0xe67b9927
je 0x4225c7
cmp eax, 0xe95f12ee
jne 0x421ae0
cmp dword [ebp - 0x58], 0
mov eax, 0x4443c68a
jne 0x421e8a
mov eax, 0x15e52e6e
cmp byte [ebp - 0x1d], 0
jne 0x421e95
mov eax, 0x15e52e6e
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x44], 0
jmp 0x421ae0
cmp eax, 0x3910c13f
jg 0x422303
cmp eax, 0x36c04364
je 0x4225d3
cmp eax, 0x3773f20f
jne 0x421ae0
imul ebx, dword [ebp - 0x14], 0x3b40
add ebx, 0x41448
mov dword [ebp - 0x14], ebx
call fcn.0042353e
push ebx
push 0x53c3
push 0x36c9
push 0x21c8
call fcn.004244d0
add esp, 0x10
mov eax, 0x8db0eb53
cmp ebx, 0x8c
jb 0x4228b9
mov eax, 0xb9cab840
jmp 0x4228b9
cmp eax, 0xc889b022
jg 0x422332
cmp eax, 0xbdce7d44
je 0x4225f2
cmp eax, 0xc70dd2bd
jne 0x421ae0
mov eax, dword [ebp - 0x18]
shr eax, 9
lea ecx, [eax + 0xed]
add eax, 0xd
imul ecx, ecx
imul edx, ecx, 0x1855
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xa5421aee
cmp edx, ecx
je 0x4228b9
mov eax, 0xe32c473
jmp 0x4228b9
cmp eax, 0x7301b97b
jg 0x42235a
cmp eax, 0x7204a13c
je 0x422631
cmp eax, 0x727d9e32
jne 0x421ae0
mov ebx, dword [ebp - 0x14]
mov eax, ebx
shr eax, 0x12
mov dword [ebp - 0x14], eax
call fcn.00422919
call fcn.0042353e
mov eax, 0x51b7edda
cmp ebx, 0x38c0000
jae 0x4228b9
mov eax, 0x62fdb108
jmp 0x4228b9
cmp eax, 0xefa0552
jg 0x42238e
cmp eax, 0xacde224
je 0x42265b
cmp eax, 0xe32c473
jne 0x421ae0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0xdb9c6041
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x48], eax
jmp 0x421ae0
cmp eax, 0x1bccc98a
je 0x42266e
cmp eax, 0x1bd97aa5
jne 0x421ae0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x40]
add eax, ecx
add eax, 0x194
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x7204a13c
jmp 0x421ae0
cmp eax, 0x9413119a
je 0x4226a0
cmp eax, 0x98439b28
jne 0x421ae0
mov eax, dword [ebp - 0x14]
add eax, 0x10
shr eax, 0xd
imul ecx, eax, 0x94
add ecx, 0xfffff910
mov dword [ebp - 0x14], ecx
mov eax, 0xbdce7d44
cmp ecx, 0x11
jae 0x422627
jmp 0x4228b9
cmp eax, 0x4443c68a
je 0x4226bb
cmp eax, 0x4d2f2d5b
jne 0x421ae0
mov ebx, dword [ebp - 0x14]
add ebx, 0xffffffdf
mov eax, ebx
shr eax, 0x16
mov dword [ebp - 0x14], eax
call fcn.00407d26
call fcn.00421ac8
mov eax, 0x6d6a4e90
cmp ebx, 0x16400000
jae 0x4228b9
mov eax, 0x3910c140
jmp 0x4228b9
cmp eax, 0xdb9c6041
je 0x4226e4
cmp eax, 0xe65521be
jne 0x421ae0
imul ebx, dword [ebp - 0x14], 0x66
add ebx, 0xfffffef8
mov dword [ebp - 0x14], ebx
call fcn.00407d26
call fcn.00423517
mov eax, 0xb9cab840
cmp ebx, 0x8f
jae 0x4228b9
mov eax, 0x744fc4ce
jmp 0x4228b9
cmp eax, 0x2c3208a1
je 0x4226f6
cmp eax, 0x2ca1adc8
jne 0x421ae0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x7301b97c
jmp 0x421ae0
cmp eax, 0xb9cab840
je 0x422743
cmp eax, 0xbc15ecb5
jne 0x421ae0
push esi
push 0x4652f8
push esi
push dword [ebp - 0x30]
call fcn.004244d0
add esp, 0x10
mov dword [ebp - 0x10], 0xea7b87b1
jmp 0x421ae0
cmp eax, 0x6d6a4e90
je 0x422764
cmp eax, 0x6f1ffd6b
jne 0x421ae0
mov eax, dword [ebp - 0x18]
add eax, 0x31
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x5ba1
shr eax, 0x11
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x20baa0c4
cmp edx, ecx
je 0x422184
mov eax, 0x15e52e6e
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x44], eax
jmp 0x421ae0
cmp eax, 0x4774cb5
je 0x422786
cmp eax, 0x99aefd2
jne 0x421ae0
mov eax, dword [ebp - 0x18]
shl eax, 0xd
lea eax, [eax + eax*8]
shr eax, 0xe
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x203d
add eax, 0xfffffff0
dec edx
shr eax, 7
mov dword [ebp - 0x18], eax
mov eax, 0xd56e4003
cmp edx, ecx
je 0x4228b9
mov eax, 0x216f6113
jmp 0x4228b9
cmp eax, 0x21a94854
je 0x4227b8
cmp eax, 0x228425ff
jne 0x421ae0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x68]
lea eax, [eax + ecx*2]
mov dword [ebp - 0x6c], eax
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov word [eax + 8], 0
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x4652f4]
mov dword [eax + 4], ecx
mov ecx, dword [0x4652f0]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0xacdf80aa
jmp 0x421ae0
cmp eax, 0x9f55d049
je 0x4227ca
cmp eax, 0xa4d39bfc
jne 0x421ae0
imul eax, dword [ebp - 0x18], 0x2200
or eax, 0x1a
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xe32c473
jmp 0x421ae0
cmp eax, 0x51b7edda
je 0x4227d6
cmp eax, 0x62fdb108
jne 0x421ae0
mov ebx, dword [ebp - 0x14]
shl ebx, 5
add ebx, 0x1c80
and ebx, 0xffffffc0
mov dword [ebp - 0x14], ebx
push 0x4a01
push 0x4295
push ebx
call fcn.0042448a
add esp, 0xc
mov eax, 0x744fc4ce
cmp ebx, 0xf6
jge 0x4228b9
mov eax, 0x228425ff
jmp 0x4228b9
cmp eax, 0xea7b87b1
je 0x422819
cmp eax, 0xf22e2b3d
jne 0x421ae0
mov eax, dword [ebp - 0x18]
shr eax, 1
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x224d
dec edx
add eax, 0x77
mov dword [ebp - 0x18], eax
mov eax, 0x98439b28
cmp ecx, edx
je 0x4222f4
mov eax, 0xdb9c6041
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x48], 0
jmp 0x421ae0
cmp eax, 0x3910c140
je 0x422837
cmp eax, 0x3cf3a764
jne 0x421ae0
cmp dword [ebp - 0x60], 0
mov eax, 0x2af00f3c
je 0x4228b9
mov eax, 0xf22e2b3d
jmp 0x4228b9
cmp eax, 0xc889b023
je 0x42286a
cmp eax, 0xd17bb27d
jne 0x421ae0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0x9413119a
jmp 0x421ae0
cmp eax, 0x7301b97c
je 0x422886
cmp eax, 0x744fc4ce
jne 0x421ae0
push 0x80
push 0
push dword [ebp - 0x1c]
call fcn.004414a0
add esp, 0xc
mov dword [ebp - 0x10], 0x1bccc98a
jmp 0x421ae0
cmp eax, 0xefa0553
je 0x422892
cmp eax, 0x14afc217
jne 0x421ae0
push dword [ebp - 0x1c]
push 0x800
push dword [ebp - 0x2c]
call fcn.004506f7
add esp, 0xc
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov ecx, 0xa4d39bfc
jmp 0x42252b
imul eax, dword [ebp - 0x18], 0xb9
lea ecx, [eax + 0xc6bb]
imul ecx, ecx
imul edx, ecx, 0x4121
dec edx
lea eax, [eax*8 + 0x6366c]
mov dword [ebp - 0x18], eax
mov eax, 0x744fc4ce
cmp edx, ecx
je 0x4228b9
mov eax, 0x4dedc3c3
jmp 0x4228b9
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0x20baa0c4
jmp 0x421ae0
mov ecx, dword [ebp - 0x18]
add ecx, 0x2d
mov eax, ecx
and eax, 0x1fffff
imul ecx, ecx
imul edx, ecx, 0x7fef
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xe95f12ee
cmp edx, ecx
jne 0x42280f
jmp 0x4228b9
imul ebx, dword [ebp - 0x14], 0xb0
add ebx, 0x3a78
mov dword [ebp - 0x14], ebx
call fcn.0042293a
mov eax, 0x9b6f65db
cmp ebx, 0x37
jge 0x4228b9
mov eax, 0x4d75da69
jmp 0x4228b9
mov eax, dword [ebp - 0x18]
mov ecx, 0x1b0
add eax, ecx
imul ecx, eax, 0x3e800
imul eax, eax
imul edx, eax, 0x4b29
dec edx
or ecx, 0x13
mov dword [ebp - 0x18], ecx
mov ecx, 0x3773f20f
cmp edx, eax
je 0x422497
mov ecx, 0x9f55d049
mov dword [ebp - 0x10], ecx
jmp 0x421ae0
push dword [ebp - 0x64]
push dword [ebp - 0x30]
push 3
push dword [ebp - 0x6c]
call fcn.004228da
add esp, 0x10
mov eax, dword [ebp - 0x3c]
inc eax
mov ecx, 0x686a1597
cmp eax, 8
je 0x4224c5
mov ecx, 0x2ca1adc8
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x54], eax
jmp 0x421ae0
imul eax, dword [ebp - 0x18], 0xd9
add eax, 0x18
mov ecx, eax
shr ecx, 0xc
shr eax, 0x11
imul ecx, ecx
add eax, 0xffffff55
imul edx, ecx, 0x6c53
dec edx
shr eax, 7
mov dword [ebp - 0x18], eax
mov eax, 0x744fc4ce
cmp edx, ecx
je 0x4228b9
mov eax, 0xf402c2cf
jmp 0x4228b9
push dword [ebp - 0x1c]
push 0x800
push dword [ebp - 0x2c]
call fcn.004506f7
add esp, 0xc
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, 0xc70dd2bd
test eax, eax
je 0x422534
mov ecx, 0xd17bb27d
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x50], eax
jmp 0x421ae0
push eax
sub esp, 0x7c
mov eax, esp
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [eax], ecx
push dword [ebp - 0x24]
push ecx
call dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
cmp eax, 0x6f
sete byte [ebp - 0x1d]
mov dword [ebp - 0x10], 0x4774cb5
jmp 0x421ae0
mov eax, dword [ebp - 0x38]
mov word [eax + 8], 0
mov eax, dword [ebp - 0x38]
mov ecx, dword [0x465308]
mov dword [eax + 4], ecx
mov ecx, dword [0x465304]
mov dword [eax], ecx
push esi
push 0x46530c
push esi
push dword [ebp - 0x38]
call fcn.004244d0
add esp, 0x10
mov dword [ebp - 0x10], 0x36c04364
jmp 0x421ae0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x3c]
movzx eax, byte [eax + ecx + 0x194]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0x99aefd2
jmp 0x421ae0
mov dword [ebp - 0x10], 0xe95f12ee
jmp 0x421ae0
push dword [ebp - 0x78]
push dword [ebp - 0x38]
push 3
push dword [ebp - 0x7c]
call fcn.004228da
add esp, 0x10
mov dword [ebp - 0x10], 0x15670044
jmp 0x421ae0
mov ebx, dword [ebp - 0x14]
shl ebx, 6
and ebx, 0xfffffc0
add ebx, 0xffffff11
mov eax, ebx
shr eax, 0xb
mov dword [ebp - 0x14], eax
call fcn.00423517
call fcn.00423517
mov eax, 0xefa0553
cmp ebx, 0x41800
jb 0x4228b9
mov eax, 0x4443c68a
jmp 0x4228b9
mov eax, dword [ebp - 0x74]
movzx eax, byte [eax]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x40]
shl eax, 2
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x7c], eax
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x9b6f65db
jmp 0x421ae0
mov dword [ebp - 0x10], 0x2ca1adc8
mov dword [ebp - 0x54], 0
jmp 0x421ae0
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x17]
imul ecx, ecx
imul edx, ecx, 0x4925
dec edx
shl eax, 4
add eax, 0xfffff6f0
mov dword [ebp - 0x18], eax
mov eax, 0x3cf3a764
cmp edx, ecx
je 0x4228b9
mov eax, 0xacde224
jmp 0x4228b9
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 2
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0xf5632118
jmp 0x421ae0
push dword [ebp - 0x58]
call fcn.0044cb24
add esp, 4
mov dword [ebp - 0x28], eax
push dword [ebp - 0x24]
push dword [ebp - 0x28]
call dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0x4162420e
jmp 0x421ae0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x10], 0x6c4a7760
jmp 0x421ae0
mov eax, dword [ebp - 0x70]
mov word [eax], 0
mov eax, dword [ebp - 0x34]
movzx ecx, word [0x465300]
mov word [eax], cx
push edi
push 0x465302
push edi
push dword [ebp - 0x34]
call fcn.004244d0
add esp, 0x10
push dword [ebp - 0x34]
push 0x800
push dword [ebp - 0x2c]
call fcn.004506f7
add esp, 0xc
mov dword [ebp - 0x10], 0x21a94854
mov dword [ebp - 0x4c], 0
jmp 0x421ae0
push 0x1000
push 1
call fcn.0044bd43
add esp, 8
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x27a97148
jmp 0x421ae0
mov eax, dword [ebp - 0x14]
and eax, 0xfffffff8
shl eax, 5
add eax, 0xffffff31
mov dword [ebp - 0x14], eax
call fcn.00407d26
mov dword [ebp - 0x10], 0xc889b023
jmp 0x421ae0
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0xc2]
add eax, 0xfffffeb7
imul ecx, ecx
imul edx, ecx, 0x51ab
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x4d2f2d5b
cmp edx, ecx
je 0x4228b9
mov eax, 0x9e2a8d5b
jmp 0x4228b9
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x1bd97aa5
jmp 0x421ae0
mov dword [ebp - 0x10], 0x744fc4ce
jmp 0x421ae0
mov ebx, dword [ebp - 0x14]
mov eax, 0xd9
add ebx, eax
shr ebx, 7
mov dword [ebp - 0x14], ebx
call fcn.00423517
push 0x1254
push ebx
push 0x5b6
call fcn.004228da
add esp, 0xc
mov eax, 0xe95f12ee
cmp ebx, 0xe8
je 0x4228b9
mov eax, 0x3cf3a764
jmp 0x4228b9
imul eax, dword [ebp - 0x18], 0x2150
add eax, 0xffffc4be
shr eax, 0x11
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xa5421aee
jmp 0x421ae0
imul eax, dword [ebp - 0x14], 0x324000
or eax, 0xc7
mov dword [ebp - 0x14], eax
push eax
push 0x3fba
push 0x3aca
push 0x2cd6
call fcn.004244d0
add esp, 0x10
mov dword [ebp - 0x10], 0x20baa0c4
jmp 0x421ae0
mov eax, dword [ebp - 0x14]
shr eax, 1
imul eax, eax, 0x7d
add eax, 0xb9
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x20baa0c4
jmp 0x421ae0
mov dword [ebp - 0x10], 0x4d75da69
jmp 0x421ae0
mov ebx, dword [ebp - 0x14]
mov eax, ebx
shr eax, 5
mov dword [ebp - 0x14], eax
call fcn.00423517
call fcn.0042293a
mov eax, 0x4443c68a
cmp ebx, 0x180
jb 0x4228b9
mov eax, 0xe95f12ee
mov dword [ebp - 0x10], eax
jmp 0x421ae0
cmp eax, 0x15e52e6e
jne 0x421ae0
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x24]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret