Function at 0x40d21c
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xdc
mov eax, dword [0x4163b0]
mov dword [ebp - 0x34], eax
push ebx
mov ecx, 0xaaf8
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], ecx
push esi
mov ecx, dword [ebp - 0x34]
test ecx, 0xc1
jne 0x40d25e
cmp ecx, 0xc41f
jne 0x40d25e
mov ebx, ecx
cmp ebx, dword [ebp - 0xb0]
je 0x40d25e
mov dword [ebp - 0x34], ebx
push edi
or ecx, 0xffffffb7
mov edx, 0x54
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], ecx
add ecx, ebx
mov edi, edx
cmp ebx, dword [ebp - 0xa4]
je 0x40d291
mov esi, dword [ebp - 0x34]
sub ecx, 0x43030900
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0x34], esi
push 0x415918
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
xor ebx, 0x55
mov ecx, esi
cmp esi, 0x17
je 0x40d2d8
add ecx, ecx
mov edx, 0xc7
mov dword [ebp - 0x34], eax
test ecx, 0xcd
jne 0x40d2d8
mov dword [ebp - 0x34], eax
mov edi, 0xa8ca
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xac], edx
mov dword [ebp - 0x4c], eax
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x34], edx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsA]
sub ebx, 0x4e
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], ebx
cmp eax, dword [0x415918]
jne 0x40d340
mov dword [ebp - 0x34], eax
mov edx, 0x13
mov edi, dword [ebp - 0x34]
sub edi, 0xffffffda
mov dword [ebp - 0x34], edi
and eax, 0x1182500
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x28], edx
and esi, edi
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], ecx
cmp esi, 0xe9a5
jne 0x40d340
mov ebx, dword [0x41578c]
add ebx, edx
mov dword [ebp - 0x34], ebx
cmp esi, 0x45
je 0x40d340
mov dword [ebp - 0x74], esi
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xb8], edx
mov edx, dword [ebp - 0xb8]
or edx, edi
mov dword [ebp - 0xb8], ecx
cmp edx, 0x3b
jne 0x40d404
mov eax, dword [ebp - 0x34]
xor eax, 0xffffffbe
mov dword [ebp - 0xb8], edx
cmp eax, 0x7d
jne 0x40d404
cmp eax, dword [str.TdvfbjNAEgAgAqi3IsU3tQJArpWReB6NRYkdwwZosU7fDWy9x2PYaiIuTEpg8azpwychEdV9dm3PnMSvzrUxO2gnPSXMYmO7pBD8vPAGlC98rIZ]
jne 0x40d404
mov ebx, 8
cmp eax, ebx
jne 0x40d404
xor eax, 0x9221900
cmp esi, 0xda30
jne 0x40d404
xor eax, 0x50
mov ecx, 0x2e
test eax, 0x3529
je 0x40d404
add ebx, 0xa3480100
mov dword [ebp - 0x34], eax
mov edi, dword [str.0GwqTnFs6fmCKJXXHn4WDXhqmaQRIvkSnp18atr0TCYng1dOkSQEpedebkJY7W6jYM3dUrOggoRlKISxtLxzd5UKGtHHz2gHRWlTCeCMHIMJs2RUaydndGToNeod5KxRWOihnyylDKKXnItRlOSLIJZD80IkGOdYTzushMs78JRt74D27u3FTgFLLSqD7BCkRXklr20e7h8UIvnWQ92EcLl7EewFEhgFnlqHxDn2iiAgyH5IsDpMXgYxAzMQHJS]
mov dword [ebp - 0x34], ecx
cmp eax, 0x55
je 0x40d404
mov edi, dword [ebp - 0xb8]
mov dword [ebp - 0x34], ebx
cmp edi, dword [ebp - 0xa4]
je 0x40d404
mov edx, dword [ebp - 0xb8]
or edi, esi
cmp edx, 0x6b59
je 0x40d404
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xd4], edi
mov dword [ebp - 0xb8], edx
cmp eax, edi
je 0x40d404
cmp eax, 0x24f8
jne 0x40d404
mov dword [ebp - 0xd4], eax
add ecx, eax
mov dword [ebp - 0x34], ecx
sub ecx, 0x17
cmp ecx, dword [ebp - 0xac]
jne 0x40d425
mov ebx, dword [ebp - 0xb8]
mov dword [ebp - 0xb8], ebx
xor ecx, edi
mov dword [ebp - 0x34], ecx
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x34], esi
mov ecx, dword [ebp - 0xb8]
sub ecx, 0x16
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], eax
xor ebx, edi
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0x68], edi
add edx, edi
mov ebx, ecx
mov dword [ebp - 0x34], ebx
cmp edx, 0x13
jne 0x40d48c
cmp edx, 0x10
je 0x40d48c
cmp edx, ebx
jne 0x40d48c
mov ecx, dword [ebp - 0x68]
cmp edx, 0xffffffbe
jne 0x40d48c
mov dword [ebp - 0xb8], edx
cmp edi, dword [str.yOhY]
jne 0x40d48c
cmp ebx, dword [str.lMYzzFFAR0FNWuFjRBVIrMDS7lOxQQErseBEMlLg9slgCWdBaSbX6IyQGSwD]
jne 0x40d48c
test ecx, 0x6d
jne 0x40d48c
mov dword [ebp - 0xb8], ecx
mov eax, dword [ebp - 0xb8]
add eax, 0xffffff91
mov dword [ebp - 0xb8], esi
mov dword [ebp - 0x68], eax
xor ecx, 0xffffffa9
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0xb8]
xor ecx, edi
mov dword [ebp - 0x68], ecx
xor eax, ebx
mov dword [ebp - 0x34], eax
sub esi, 0xfffffff6
mov eax, ebx
mov dword [ebp - 4], eax
cmp esi, edx
je 0x40d510
add esi, edi
mov dword [ebp - 0x34], ebx
mov eax, ebx
cmp eax, dword [ebp - 4]
jne 0x40d510
xor eax, ecx
mov ebx, esi
mov dword [ebp - 0x68], eax
cmp ebx, dword [ebp - 0x1c]
jne 0x40d510
cmp ebx, eax
jne 0x40d510
test ebx, 0xc
jne 0x40d510
cmp ebx, 0xffffff8f
jne 0x40d510
cmp ebx, dword [ebp - 0xa8]
jne 0x40d510
sub ebx, 0x39065400
mov edx, dword [ebp - 0xb8]
cmp ebx, 0x79
jne 0x40d510
mov eax, 0x9b
mov dword [ebp - 4], edx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 4]
cmp ecx, 0xffffffec
je 0x40d554
mov dword [ebp - 0xcc], ebx
xor ecx, 0x49512100
mov edx, ecx
cmp edx, 0x17
jne 0x40d554
sub edx, ecx
mov ebx, dword [ebp - 0xb8]
mov dword [ebp - 0x34], edx
cmp ecx, ebx
jne 0x40d554
mov eax, ecx
xor eax, 0x4c
cmp eax, edi
jne 0x40d554
mov dword [ebp - 4], ebx
cmp eax, dword [0x4159f8]
jne 0x40d554
mov dword [ebp - 0xb8], eax
sub edx, 0x19
mov edi, 0x93
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x48], edi
cmp edx, 0x4c
jne 0x40d57a
mov ebx, 0xa5
xor ebx, eax
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x58], edx
sub esi, 0x3360000
mov edx, dword [ebp - 0x34]
test edx, 0x13c22484
je 0x40d5be
sub esi, 0x54
mov ebx, dword [ebp - 0xb8]
mov dword [ebp - 0x68], esi
cmp ebx, eax
jne 0x40d5be
mov eax, dword [ebp - 0xb8]
or eax, 0xffffffe9
mov dword [ebp - 0x48], edx
cmp ebx, 0x3a
jne 0x40d5be
mov edi, dword [ebp - 0x34]
mov dword [ebp - 4], ebx
mov dword [ebp - 4], eax
mov dword [ebp - 0x48], edx
mov dword [ebp - 0xb8], edi
mov eax, dword [ebp - 0x34]
sub eax, 0xffffff8d
cmp eax, ebx
je 0x40d5db
and eax, edi
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 4], eax
cmp ecx, 0x2280
jne 0x40d5db
mov dword [ebp - 0x48], ecx
mov dword [ebp - 4], edx
mov eax, dword [0x415918]
mov dword [ebp - 4], eax
add eax, ebx
test eax, 0x82
jne 0x40d5f3
mov dword [ebp - 0x34], eax
lea edi, [ebp - 0x54]
mov ebx, dword [ebp - 0x34]
sub ebx, 0x4b
test ebx, 0xbbf7
jne 0x40d693
cmp edi, 0xffffffc1
jne 0x40d693
add ebx, 0x5d
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x48], edi
cmp edx, 0x28
jne 0x40d693
mov eax, dword [ebp - 4]
and eax, 0x28
cmp ebx, 0xffffffb8
je 0x40d693
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x68]
cmp ecx, esi
je 0x40d693
mov dword [ebp - 0x48], ecx
cmp ebx, 0xfffffff8
je 0x40d693
mov ecx, 0x97
add ecx, edi
test ebx, 0xb3
jne 0x40d693
xor ebx, edi
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0xb8], esi
cmp edx, dword [str.yWklME40VF4T6WB2un0htFRSWLoA0JbB6hnQp0QWRqq1jX6Mb8hC8FvoODuhFohwUWIrymZYpMpgXZLaUt5ES8hkbI]
je 0x40d693
mov esi, 0x38
mov dword [ebp - 0x48], edx
cmp ecx, dword [0x4163ac]
je 0x40d693
sub ebx, 0x52
cmp ecx, 0xfffffff8
jne 0x40d693
xor ecx, esi
cmp edi, 0xc945
je 0x40d693
mov esi, dword [ebp - 0x68]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x44], esi
cmp ebx, edx
jne 0x40d693
mov dword [ebp - 4], ebx
mov dword [ebp - 0x48], eax
push edi
cmp eax, 0x8596
je 0x40d6a4
mov dword [ebp - 0xb8], esi
push 0x77ca8300
mov dword [ebp - 0x68], edi
mov ecx, 0xb9
mov dword [ebp - 4], ecx
call fcn.0040decc
mov dword [ebp - 0x48], edi
mov eax, dword [ebp - 0x54]
mov edx, eax
cmp edx, 0x40fa
je 0x40d6e4
mov edi, dword [ebp - 0xb8]
or edx, 0x69
cmp edi, 0xfffffff9
je 0x40d6e4
xor edx, edi
cmp edx, dword [str.KDcdMY5lc0gWR110A7DCI4wsvW7PS6jqw4SFQMz4MpFCXtRLh5RltWcG4ZGA]
je 0x40d6e4
mov dword [ebp - 0x68], edx
shr eax, 0x10
and ebx, 0x4c
mov edx, dword [0x4163ac]
mov dword [ebp - 0x20], esi
cmp ebx, dword [str.0GwqTnFs6fmCKJXXHn4WDXhqmaQRIvkSnp18atr0TCYng1dOkSQEpedebkJY7W6jYM3dUrOggoRlKISxtLxzd5UKGtHHz2gHRWlTCeCMHIMJs2RUaydndGToNeod5KxRWOihnyylDKKXnItRlOSLIJZD80IkGOdYTzushMs78JRt74D27u3FTgFLLSqD7BCkRXklr20e7h8UIvnWQ92EcLl7EewFEhgFnlqHxDn2iiAgyH5IsDpMXgYxAzMQHJS]
je 0x40d71b
cmp ebx, 0x2c
jne 0x40d71b
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xb8], edx
cmp eax, 0xbc5
jne 0x40d95a
xor ebx, edi
mov eax, pe_nt_image_headers32
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0xb8], edx
cmp ebx, edi
jne 0x40d740
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x34], edi
mov dword [ebp - 4], eax
push 0x415538
mov edx, 0xcc
mov dword [ebp - 0x48], edx
push 0x415ec4
mov dword [ebp - 0x48], ebx
push 0x42cde8
mov eax, dword [ebp - 0x68]
and eax, 0xffffffbf
mov dword [ebp - 0xa0], eax
push 0x415528
mov ebx, 0x1677
mov dword [ebp - 4], ebx
dec ecx
add eax, ebx
mov dword [ebp - 0x98], ebx
mov edi, dword [str.gwZlxnKvWjzJyyLsDEAvthTHL1nUOdqdmeGbEiG4FlyNyfMb6gSP7PKyD2LfOvut5yNWzx3V1DQuADffATqmV554l3h5ZFb94UBrXfSqqyNWUwBbNBpVrR7y4GtKA0AKnjIGWZLWDZj]
cmp eax, 0x49
je 0x40d838
xor edi, 0xffffffb6
cmp eax, dword [str.yWklME40VF4T6WB2un0htFRSWLoA0JbB6hnQp0QWRqq1jX6Mb8hC8FvoODuhFohwUWIrymZYpMpgXZLaUt5ES8hkbI]
jne 0x40d838
cmp ecx, dword [ebp - 0x68]
je 0x40d838
test ecx, 0x29180000
jne 0x40d838
mov ebx, dword [ebp - 0x20]
cmp esi, 0xffffffb0
je 0x40d838
mov edx, esi
mov dword [ebp - 0x34], ecx
cmp ebx, 0x73
jne 0x40d838
mov esi, ecx
add eax, eax
cmp esi, 0xd
jne 0x40d838
cmp ebx, 0xffffff8d
jne 0x40d838
add edx, 0x72
mov dword [ebp - 0x68], esi
cmp edx, dword [ebp - 0x68]
je 0x40d838
cmp eax, dword [ebp - 0x98]
je 0x40d838
mov esi, eax
or edx, ecx
cmp edx, dword [str.uzFxpbfiMbWiurjjGrXavpwiw2UFgkBDQ8LCzIrNWFt0bRR6vIv7ziWKAR6AKqi9PFa6LrrUvnCPoW1MchfjkjzUrVojEpvc7O4Gz9pmhSBOLbQQd2bkS7cGhDgVL1XCL1sbvCRps9UJznbhrvsYXY2GG3M5mQmlGLg9kKfR1IdOP4ntYLg0hLSyNGXcGneT]
jne 0x40d838
mov eax, 0x11
xor esi, 0x44
cmp esi, 4
je 0x40d838
add edx, 0x20
mov eax, 0x464
mov dword [ebp - 0x34], edi
mov dword [ebp - 0xb8], edx
cmp ebx, 0xffffffe5
je 0x40d838
mov edi, dword [ebp - 0x34]
add eax, ebx
test edi, 0x79
je 0x40d838
mov ebx, edx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xb8], edi
dec ecx
add ecx, ecx
mov eax, 0xd1
mov dword [ebp - 0x98], ecx
cmp ecx, 0xffffffe8
jne 0x40d889
test ecx, 0xec
je 0x40d889
sub eax, edi
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x20], eax
cmp edx, dword [ebp - 0x74]
je 0x40d889
cmp edx, 0x77e3
jne 0x40d889
cmp edx, eax
je 0x40d889
test edx, 0xef836223
je 0x40d889
mov ecx, 0x7c
and ecx, 0x64
cmp edx, dword [ebp - 0x44]
jne 0x40d886
xor edx, edi
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], ecx
call fcn.0040ea03
xor edi, 0x62
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 4], ebx
cmp edi, dword [0x4163ac]
jne 0x40d8b1
mov esi, 0x6341
sub edi, esi
cmp edi, dword [str.KDcdMY5lc0gWR110A7DCI4wsvW7PS6jqw4SFQMz4MpFCXtRLh5RltWcG4ZGA]
je 0x40d8b1
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x7c], eax
add ebx, ebx
mov dword [ebp - 0x14], ebx
mov edx, 0x59808951
mov ecx, dword [ebp - 0x14]
xor ecx, eax
mov dword [ebp - 0x34], ecx
sub edx, 0x593fa19e
mov esi, 0x25
sub esi, 0xc9620100
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x68], esi
push dword [ebp - 0x54]
push 0xbc65ba1
push dword [ebp - 0x7c]
call fcn.0040e7b3
mov ebx, dword [ebp - 0x48]
cmp ebx, dword [str.6eGz2503NsTG0HP8NZEzoNjhZHPMTL7BRLL2ThCbxqKnFbJTEStZnIBtRVc9SiTRjdmQEnge40rCWv2JXQaiJnlvlyEM4PksY9k7Hl9GUvZluFe9kkPjqMAJvqMjZ2wP0pQx2SeZnfvnreHovowV0mAbr50rE7Z21ou0jtoWRkEkJzEOlmE67gGpxPlj5dY1e0bX7Ea4cYt7SfHdB4LtypIbFrirgx4ZcgVi1WS]
je 0x40d906
or ebx, eax
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x34], ecx
add dword [ebp - 0x7c], 0x18
mov dword [ebp - 0xb8], ebx
mov edi, dword [ebp - 0x7c]
add ecx, 0x50
mov dword [ebp - 0xa0], ecx
call edi
add edi, edi
mov esi, dword [str.yWklME40VF4T6WB2un0htFRSWLoA0JbB6hnQp0QWRqq1jX6Mb8hC8FvoODuhFohwUWIrymZYpMpgXZLaUt5ES8hkbI]
cmp edi, dword [str.D3nMi0ZUmk9SqKNm3LVDzQbQUM5uNhr8o9id1lu4YBtnyDVkoUXryRqc2t0cVGgeuef8nuaA64GR15LRuSFYFmizfjAsi]
je 0x40d943
xor esi, 0xffffffcd
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x60], eax
mov edx, 0x3004
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xb8], edx
sub edi, 0xffffffae
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x20], esi
mov eax, dword [ebp - 0x98]
xor eax, 0x25
cmp eax, esi
je 0x40d9f7
cmp edi, edx
jne 0x40d9f7
mov ecx, dword [ebp - 4]
add eax, edx
test ecx, 0xd7
je 0x40d9f7
mov edx, dword [ebp - 0xa0]
xor ecx, 0xffffffc2
cmp edx, 0x42f9
je 0x40d9f7
or eax, 0x37
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x48], esi
test eax, 0xf3ed
je 0x40d9f7
mov ebx, eax
add ecx, 0xffffffc3
cmp ebx, dword [0x4163ac]
je 0x40d9f7
sub ecx, ebx
cmp ecx, edx
je 0x40d9f7
mov edi, dword [ebp - 4]
xor ecx, edx
cmp edi, 0xca84
je 0x40d9f7
xor edi, ebx
cmp ecx, dword [str.TRraCNVxYeHQLrbgtVz7MZmoqCwbO83K46qdjBoedzHmGvU9vd7D7uXVbjQwF7ABVplbpJcYOBIMzdm1I4hxB1q8QW0pztTZmLB9cVtillhnujOrcEyhmV4tmoksEguBNo1VtUxTpN6TYNOm]
jne 0x40d9f7
mov dword [ebp - 0x48], ecx
add edi, ecx
test edi, 0xe8a6
je 0x40d9f7
add edi, 0x17
mov ebx, dword [str.OjR2M2PjERLW92ohDZVmuFXw6HbXBY6cvmrsox0tBITtGSsRORuaYP8BIr8NDiQ1AntIlZ0zxWUJ8aqnYfq5tVS9RvXvKeOU2KCSvijopp8YsO8zBZb4MReq8YcAXZJ0TLsv4ECWo3VzgWfXWmIFR3OnQWlX82HaXFZPnc69zmli0BeNFvspGCCn5tM3ZgMzCWv2xno4iwgPdbeDNT1MCFX83kcs1G3FbpejHDyfd520DmB3jWNDAoemT8kecbx]
cmp edi, dword [ebp - 0xc4]
je 0x40d9f7
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x34], edx
xor ebx, edi
mov dword [ebp - 0x14], ebx
sub eax, ecx
cmp eax, 0xffffffa7
je 0x40da59
cmp ebx, eax
je 0x40da59
sub eax, esi
mov ebx, dword [ebp - 0xb8]
cmp eax, 0xffffffb6
je 0x40da59
mov edi, dword [str.6eGz2503NsTG0HP8NZEzoNjhZHPMTL7BRLL2ThCbxqKnFbJTEStZnIBtRVc9SiTRjdmQEnge40rCWv2JXQaiJnlvlyEM4PksY9k7Hl9GUvZluFe9kkPjqMAJvqMjZ2wP0pQx2SeZnfvnreHovowV0mAbr50rE7Z21ou0jtoWRkEkJzEOlmE67gGpxPlj5dY1e0bX7Ea4cYt7SfHdB4LtypIbFrirgx4ZcgVi1WS]
or ebx, 0x1020200
cmp eax, dword [ebp - 0x1c]
jne 0x40da59
cmp edx, 0xbba9
jne 0x40da59
or ebx, esi
mov edx, ebx
mov dword [ebp - 0x98], edi
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0x68], ecx
cmp edx, 0x7b
je 0x40da59
mov ebx, 0x80
cmp eax, dword [0x415528]
je 0x40da59
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x50], ebx
pop edi
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0xd0], ebx
cmp eax, 0xffffffaa
jne 0x40da97
mov esi, dword [ebp - 4]
mov dword [ebp - 0x10], esi
cmp eax, 0xffffff8b
jne 0x40da97
mov edx, dword [ebp - 0xa0]
add edx, ebx
mov dword [ebp - 0xd0], eax
test edx, 0xc
je 0x40da97
test edx, 0x1b
jne 0x40da97
mov dword [ebp - 0x14], edx
pop esi
mov eax, dword [ebp - 0x34]
xor eax, 0xffffff9c
cmp eax, 0xffffffdd
jne 0x40daf4
and eax, ecx
mov ecx, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x60]
jne 0x40daf4
xor eax, ebx
mov ebx, dword [ebp - 0xd0]
mov dword [ebp - 0x34], ebx
cmp ecx, 0x1b
je 0x40daf4
add ecx, esi
cmp ecx, 0xffffff91
jne 0x40daf4
sub ecx, ebx
cmp eax, dword [ebp - 0x28]
jne 0x40daf4
cmp ecx, dword [ebp - 0xd0]
je 0x40daf4
add ecx, edx
test eax, 0x35
je 0x40daf4
cmp ecx, 0xc3210424
jne 0x40daf4
cmp eax, ebx
je 0x40daf4
add eax, 0xfffffff7
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x48], ecx
pop ebx
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x90], ebx
test edx, 0x76
je 0x40db19
cmp edx, dword [ebp - 0x1c]
jne 0x40db19
mov ecx, dword [0x4163cc]
mov dword [ebp - 0x5c], edx
xor ecx, esi
mov dword [ebp - 0x48], ecx
leave
ret