Function at 0x40938c
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xd0
mov dword [ebp - 0x10], 0xbb90c67c
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ebx, [ebp - 0xc1]
mov eax, dword [ebp - 0x10]
cmp eax, 0xf1da4ac7
jle 0x409407
cmp eax, 0x414a9607
jle 0x409469
cmp eax, 0x573d5359
jg 0x409514
cmp eax, 0x4836b841
jg 0x409665
cmp eax, 0x43746017
jg 0x409987
cmp eax, 0x414a9608
je 0x409d97
cmp eax, 0x41d92439
je 0x409db6
cmp eax, 0x42bd2fc1
jne 0x4093ab
mov dword [ebp - 0x10], 0x8456efa9
jmp 0x4093ab
cmp eax, 0xafae649f
jle 0x4094c6
cmp eax, 0xd19c6e23
jle 0x40956e
cmp eax, 0xe291ce18
jg 0x4096b7
cmp eax, 0xdaf1472b
jg 0x4099c1
cmp eax, 0xd19c6e24
je 0x409e37
cmp eax, 0xd7f59a15
je 0x409e4c
cmp eax, 0xd9f4c74f
jne 0x4093ab
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x38e745d6
jmp 0x4093ab
cmp eax, 0x24ae5f89
jle 0x4095ba
cmp eax, 0x2faba792
jg 0x40973e
cmp eax, 0x2b4829d9
jg 0x4099f5
cmp eax, 0x24ae5f8a
je 0x409e6d
cmp eax, 0x24c4ac5f
je 0x409ead
cmp eax, 0x27da3245
jne 0x4093ab
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0x8a09f1a1
jmp 0x4093ab
cmp eax, 0x948b4e35
jle 0x40960f
cmp eax, 0xa32a6cc7
jg 0x40979f
cmp eax, 0x9d83e823
jg 0x409a25
cmp eax, 0x948b4e36
je 0x409ec2
cmp eax, 0x968581c2
je 0x409ef3
cmp eax, 0x99afacd4
jne 0x4093ab
mov dword [ebp - 0x10], 0xe5acd740
jmp 0x4093ab
cmp eax, 0x6325024c
jg 0x409825
cmp eax, 0x5ce1c3ea
jg 0x409a9b
cmp eax, 0x573d535a
je 0x409f08
cmp eax, 0x5963f80b
je 0x409f2f
cmp eax, 0x5c57845f
jne 0x4093ab
mov eax, dword [ebp - 0x14]
shl eax, 6
and eax, 0xffffc000
add eax, 0xffffffa8
shr eax, 0xe
add eax, 0x6e
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x3e11c0be
jmp 0x4093ab
cmp eax, 0xbd25fd97
jg 0x40988b
cmp eax, 0xb76d1134
jg 0x409aea
cmp eax, 0xafae64a0
je 0x409f44
cmp eax, 0xb6fc958b
je 0x409f5d
cmp eax, 0xb7228b91
jne 0x4093ab
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x6974e1de
jmp 0x4093ab
cmp eax, 0x69f4ac
jle 0x4098e9
cmp eax, 0x1300cd9f
jg 0x409b33
cmp eax, 0x69f4ad
je 0x409f81
cmp eax, 0x9d05032
je 0x409fc3
cmp eax, 0xf9579f9
jne 0x4093ab
mov eax, dword [ebp - 0x70]
push 0
push dword [ebp - 0x48]
call eax
mov eax, dword [ebp - 0x4c]
push dword [ebp - 0x48]
call eax
mov dword [ebp - 0x10], 0x24ae5f8a
jmp 0x4093ab
cmp eax, 0x8a09f1a0
jle 0x409937
cmp eax, 0x9187a370
jg 0x409b69
cmp eax, 0x8a09f1a1
je 0x40a024
cmp eax, 0x8a50d471
je 0x40a03f
cmp eax, 0x8cbc9033
jne 0x4093ab
mov ecx, dword [ebp - 0x14]
add ecx, 0xffffffb4
mov dword [ebp - 0x14], ecx
mov eax, 0x892dc24b
cmp ecx, 0xf5
jae 0x40a67d
jmp 0x40a682
cmp eax, 0x4d332d51
jg 0x409bc0
cmp eax, 0x4836b842
je 0x40a05a
cmp eax, 0x4859d937
je 0x40a07f
cmp eax, 0x48c37501
jne 0x4093ab
mov eax, dword [ebp - 0x50]
mov word [eax], 0
push 0x18
push 0x46f540
push dword [ebp - 0x28]
call fcn.0044ac30
add esp, 0xc
mov dword [ebp - 0x10], 0x73342376
jmp 0x4093ab
cmp eax, 0xeb8fa61e
jg 0x409bfc
cmp eax, 0xe291ce19
je 0x40a0ac
cmp eax, 0xe5acd740
je 0x40a0b8
cmp eax, 0xe5dfa1d0
jne 0x4093ab
imul edi, dword [ebp - 0x14], 0x42000000
add edi, 0x5c49400
mov dword [ebp - 0x14], edi
push 0x3fc
push 0x25af
push edi
push 0x1beb
call fcn.0040b190
add esp, 0x10
push 0x349e
push 0x500c
push edi
push 0x1838
call fcn.0040b2b0
add esp, 0x10
mov eax, 0x968581c2
cmp edi, 0xf9
jl 0x40a682
mov eax, 0x8cbc9033
jmp 0x40a682
cmp eax, 0x3c48eef1
jg 0x409c3f
cmp eax, 0x2faba793
je 0x40a0c4
cmp eax, 0x337bd74f
je 0x40a100
cmp eax, 0x38e745d6
jne 0x4093ab
imul eax, dword [ebp - 0x18], 0xed
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x54bb
add eax, 0x18d
dec edx
shr eax, 0xb
mov dword [ebp - 0x18], eax
mov eax, 0xd9f4c74f
cmp edx, ecx
je 0x40a682
mov eax, 0x43c33c99
jmp 0x40a682
cmp eax, 0xa7b17fcc
jg 0x409c8d
cmp eax, 0xa32a6cc8
je 0x40a115
cmp eax, 0xa54e5c91
je 0x40a14b
cmp eax, 0xa7992a69
jne 0x4093ab
mov esi, ebx
mov eax, dword [ebp - 0x14]
lea edi, [eax*8 - 0x720]
shr edi, 6
and edi, 0xffffffc0
lea eax, [edi + edi]
lea ebx, [eax + eax*2]
mov dword [ebp - 0x14], ebx
push 0x2e0b
push ebx
push 0x356c
push 0x5465
call fcn.0040b2b0
add esp, 0x10
push ebx
call fcn.0040938c
add esp, 4
mov eax, 0xe5dfa1d0
test edi, edi
je 0x409815
mov eax, 0x4859d937
mov dword [ebp - 0x10], eax
mov ebx, esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x4093ab
cmp eax, 0x6974e1dd
jg 0x409cca
cmp eax, 0x6325024d
je 0x40a165
cmp eax, 0x6508c43c
je 0x40a180
cmp eax, 0x66d8f922
jne 0x4093ab
mov eax, dword [ebp - 0x68]
mov byte [eax], 0
mov eax, dword [ebp - 0x38]
mov cl, byte [0x47c841]
mov byte [eax + 0xa], cl
movzx ecx, word [0x47c83f]
mov word [eax + 8], cx
mov ecx, dword [0x47c83b]
mov dword [eax + 4], ecx
mov ecx, dword [0x47c837]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0xcc903aaa
jmp 0x4093ab
cmp eax, 0xcc903aa9
jg 0x409d19
cmp eax, 0xbd25fd98
je 0x40a195
cmp eax, 0xc1f8ed49
je 0x40a1b3
cmp eax, 0xc693a5f4
jne 0x4093ab
mov ecx, dword [ebp - 0x14]
mov eax, 0x98
add ecx, eax
mov eax, ecx
shr eax, 9
add eax, 0xffffff6a
mov dword [ebp - 0x14], eax
mov eax, 0x24c4ac5f
cmp ecx, 0x25200
jae 0x40a682
mov eax, 0xe0f47d0b
jmp 0x40a682
cmp eax, 0xfb24f014
jle 0x409d50
cmp eax, 0xfb24f015
je 0x40a1d9
cmp eax, 0xfc661b1c
je 0x40a1e5
cmp eax, 0xfddc0a35
jne 0x4093ab
mov eax, dword [ebp - 0x64]
push dword [ebp - 0x1c]
push dword [ebp - 0x44]
call eax
mov ecx, 0x8371e051
test eax, eax
je 0x40a3a8
mov ecx, 0xb6fc958b
jmp 0x40a3a8
cmp eax, 0x846455ca
jle 0x409d72
cmp eax, 0x846455cb
je 0x40a200
cmp eax, 0x87e8b295
je 0x40a219
cmp eax, 0x892dc24b
jne 0x4093ab
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
push 0x18
push 0x47c7f0
push dword [ebp - 0x2c]
call fcn.0044ac30
add esp, 0xc
mov dword [ebp - 0x10], 0x573d535a
jmp 0x4093ab
cmp eax, 0x43746018
je 0x40a225
cmp eax, 0x43c33c99
je 0x40a245
cmp eax, 0x44a8ae69
jne 0x4093ab
cmp dword [ebp - 0x74], 0
mov eax, 0x8371e051
je 0x40a682
mov eax, 0x5963f80b
jmp 0x40a682
cmp eax, 0xdaf1472c
je 0x40a25a
cmp eax, 0xe0196d78
je 0x40a276
cmp eax, 0xe0f47d0b
jne 0x4093ab
mov eax, dword [ebp - 0x34]
mov byte [eax + 0xe], 0
mov dword [ebp - 0x10], 0xa32a6cc8
jmp 0x4093ab
cmp eax, 0x2b4829da
je 0x40a291
cmp eax, 0x2d2ce308
je 0x40a2bf
cmp eax, 0x2d2eb519
jne 0x4093ab
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x184b7ead
jmp 0x4093ab
cmp eax, 0x9d83e824
je 0x40a2f8
cmp eax, 0x9ec4daa9
je 0x40a30f
cmp eax, 0xa3175afd
jne 0x4093ab
imul edi, dword [ebp - 0x14], 0x37763000
mov dword [ebp - 0x14], edi
push 0x40a8
push 0x6296
push 0x61b7
push edi
call fcn.0040b2b0
add esp, 0x10
push 0x151a
push edi
push 0x5f3
push 0x3c16
call fcn.0040b2b0
add esp, 0x10
mov eax, 0x48c37501
cmp edi, 0xe2
jge 0x40a682
mov eax, 0xac5fe779
jmp 0x40a682
cmp eax, 0x5ce1c3eb
je 0x40a32b
cmp eax, 0x5e3e7f9b
je 0x40a33a
cmp eax, 0x60f7684c
jne 0x4093ab
mov edi, dword [ebp - 0x14]
add edi, 0x39
mov eax, edi
shr eax, 5
mov dword [ebp - 0x14], eax
call fcn.0040a6b1
mov eax, 0xbb90c67c
cmp edi, 0x11a0
jb 0x40a682
mov eax, 0x968581c2
jmp 0x40a682
cmp eax, 0xb76d1135
je 0x40a368
cmp eax, 0xbab04675
je 0x40a37d
cmp eax, 0xbb90c67c
jne 0x4093ab
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x24], eax
sub esp, 0x22c
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0x3e11c0be
jmp 0x4093ab
cmp eax, 0x1300cda0
je 0x40a3b0
cmp eax, 0x1335be38
je 0x40a3dc
cmp eax, 0x184b7ead
jne 0x4093ab
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x22c
mov dword [ebp - 0x10], 0x69f4ad
jmp 0x4093ab
cmp eax, 0x9187a371
je 0x409cbe
cmp eax, 0x937bbf6b
je 0x40a411
cmp eax, 0x9394c1b3
jne 0x4093ab
imul eax, dword [ebp - 0x14], 0x1437
add eax, 0xffffdf7b
shr eax, 0xe
mov dword [ebp - 0x14], eax
push 0x32a2
push eax
push 0x5d51
push 0x1fea
call fcn.0040b190
add esp, 0x10
mov dword [ebp - 0x10], 0x337bd74f
jmp 0x4093ab
cmp eax, 0x4d332d52
je 0x40a420
cmp eax, 0x50f6e66b
je 0x40a45b
cmp eax, 0x51bd2630
jne 0x4093ab
mov eax, dword [ebp - 0x18]
shl eax, 0xf
add eax, 0xffffff93
shr eax, 3
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xe291ce19
jmp 0x4093ab
cmp eax, 0xeb8fa61f
je 0x40a47e
cmp eax, 0xebcb402f
je 0x40a4fb
cmp eax, 0xf11269bb
jne 0x4093ab
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
mov dword [ebp - 0x10], 0x6325024d
jmp 0x4093ab
cmp eax, 0x3c48eef2
je 0x40a522
cmp eax, 0x3e11c0be
je 0x40a548
cmp eax, 0x3f91de98
jne 0x4093ab
imul ecx, dword [ebp - 0x14], 0x6a0
add ecx, 0xffffffcb
mov eax, ecx
shr eax, 6
mov dword [ebp - 0x14], eax
mov eax, 0x9d05032
cmp ecx, 0xfc0
jae 0x40a682
mov eax, 0x5e3e7f9b
jmp 0x40a682
cmp eax, 0xa7b17fcd
je 0x40a55d
cmp eax, 0xac5fe779
je 0x40a57a
cmp eax, 0xad6c71dc
jne 0x4093ab
mov eax, dword [ebp - 0x14]
shr eax, 0xe
add eax, eax
add eax, 0x164
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xb76d1135
jmp 0x4093ab
cmp eax, 0x6974e1de
je 0x40a5bf
cmp eax, 0x6f12b219
je 0x40a60e
cmp eax, 0x73342376
jne 0x4093ab
imul eax, dword [ebp - 0x18], 0xf4
mov ecx, eax
shr ecx, 6
imul ecx, ecx
shr eax, 0xd
imul edx, ecx, 0x3b29
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x3e11c0be
cmp ecx, edx
jne 0x40a638
jmp 0x40a682
cmp eax, 0xcc903aaa
je 0x40a63f
cmp eax, 0xd07c9f2c
jne 0x40a69e
imul eax, dword [ebp - 0x14], 0xb7
shr eax, 7
and eax, 0xffffffc0
add eax, 0x8c0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xb7228b91
jmp 0x4093ab
cmp eax, 0xf1da4ac8
je 0x40a661
cmp eax, 0xf6f31fa8
jne 0x4093ab
mov dword [ebp - 0x10], 0xa7b17fcd
jmp 0x4093ab
cmp eax, 0x8371e051
je 0x40a68a
cmp eax, 0x8456efa9
jne 0x4093ab
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xb7228b91
jmp 0x4093ab
mov eax, dword [ebp - 0x14]
shl eax, 0xb
add eax, 0xfff86800
and eax, 0xfffff000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xebcb402f
jmp 0x4093ab
push 7
push 0x47c842
push 0xb
push dword [ebp - 0x38]
call fcn.0040b2b0
add esp, 0x10
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x8c], edx
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x6c], eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov byte [eax + 0x10], 0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [0x47c855]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x47c851]
mov dword [eax + 8], ecx
mov ecx, dword [0x47c84d]
mov dword [eax + 4], ecx
mov ecx, dword [0x47c849]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x9ec4daa9
jmp 0x4093ab
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0xf6f31fa8
jmp 0x4093ab
mov eax, dword [ebp - 0x18]
shl eax, 5
add eax, 0x22
shr eax, 6
and eax, 0xfffffffe
add eax, 0xffffff83
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x968581c2
jmp 0x4093ab
mov ecx, dword [ebp - 0x18]
mov eax, 0xffffff54
add ecx, eax
mov eax, ecx
imul eax, ecx
imul edx, eax, 0x7231
shl ecx, 0x1b
lea ecx, [ecx + ecx*2]
mov edi, 0xffffff87
sub edi, ecx
dec edx
shr edi, 0xd
mov dword [ebp - 0x18], edi
mov ecx, 0x968581c2
cmp edx, eax
je 0x40a3a8
mov ecx, 0xe291ce19
jmp 0x40a3a8
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0xd7f59a15
jmp 0x4093ab
mov eax, dword [ebp - 0x14]
shl eax, 7
and eax, 0x1ff80
imul edi, eax, 0x24800
mov dword [ebp - 0x14], edi
call fcn.0040a6b1
mov eax, 0x2d2ce308
cmp edi, 0x21
jge 0x40a682
mov eax, 0xa3175afd
jmp 0x40a682
mov eax, dword [ebp - 0x2c]
add eax, 0x18
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0x892dc24b
jmp 0x4093ab
imul eax, dword [ebp - 0x18], 0x6ffe
add eax, 0xb2
shr eax, 5
imul eax, eax, 0x2c90
shr eax, 0xd
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xac5fe779
jmp 0x4093ab
mov eax, dword [ebp - 0x1c]
add eax, 0x24
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0xd19c6e24
jmp 0x4093ab
cmp dword [ebp - 0x48], 0
mov eax, 0xe291ce19
je 0x40a682
mov eax, 0xf9579f9
jmp 0x40a682
mov eax, dword [ebp - 0x18]
and eax, 0xffffffe0
shl eax, 9
imul eax, eax, 0xce
add eax, 0xfffffffe
shr eax, 0xf
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xf6f31fa8
jmp 0x4093ab
mov eax, dword [ebp - 0x18]
shr eax, 4
add eax, 0x94
mov ecx, eax
shr ecx, 0xb
imul eax, eax
add ecx, 0xffffffb4
imul edx, eax, 0x6481
dec edx
shr ecx, 0xd
add ecx, ecx
add ecx, 0xfffffed4
mov dword [ebp - 0x18], ecx
mov ecx, 0x968581c2
cmp edx, eax
je 0x40a3a8
mov ecx, 0xa54e5c91
jmp 0x40a3a8
mov eax, dword [ebp - 0x5c]
mov byte [eax], 0
mov edi, 0xf
push edi
push 0x47c80e
push dword [ebp - 0x30]
call fcn.0044ac30
add esp, 0xc
push 8
push 0x47c81d
push edi
push dword [ebp - 0x30]
call fcn.0040b2b0
add esp, 0x10
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0xac], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xa8], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x10], 0x27da3245
jmp 0x4093ab
imul eax, dword [ebp - 0x18], 0x96ec0000
add eax, 0xd644140
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x9187a371
jmp 0x4093ab
imul eax, dword [ebp - 0x18], 0x5c800
add eax, 0xfe37470c
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x66d8f922
jmp 0x4093ab
mov eax, dword [ebp - 0x18]
shr eax, 0xb
and eax, 0x7ffff
imul eax, eax, 0xd6
add eax, 0xa22c
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x6508c43c
jmp 0x4093ab
mov eax, dword [ebp - 0x14]
shr eax, 6
imul edi, eax, 0x91
add edi, 0xffffb2f8
mov dword [ebp - 0x14], edi
call fcn.0040a6b1
mov eax, 0x1335be38
cmp edi, 0x17
jb 0x40a638
jmp 0x40a682
mov dword [ebp - 0x10], 0xfddc0a35
jmp 0x4093ab
mov dword [ebp - 0x10], 0x24c4ac5f
jmp 0x4093ab
imul edi, dword [ebp - 0x14], 0x2a8740
add edi, 0x1a4bd3
mov dword [ebp - 0x14], edi
call fcn.0040a6b1
push 0x4d5a
push edi
push 0x4812
push 0x392b
call fcn.0040b2b0
add esp, 0x10
mov eax, 0xbb90c67c
cmp edi, 0x21
jl 0x40a141
jmp 0x40a682
mov eax, dword [ebp - 0x30]
add eax, 0xf
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0xfc661b1c
jmp 0x4093ab
mov eax, dword [ebp - 0x18]
mov ecx, 0xe6
add eax, ecx
mov ecx, eax
imul ecx, eax
shr eax, 9
imul edx, ecx, 0x525f
imul eax, eax, 0x33
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x3c48eef2
cmp ecx, edx
je 0x40a682
mov eax, 0xeb8fa61f
jmp 0x40a682
mov eax, dword [ebp - 0x60]
push dword [ebp - 0x1c]
push dword [ebp - 0x44]
call eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x44a8ae69
jmp 0x4093ab
imul eax, dword [ebp - 0x18], 0x16bb0000
add eax, 0x182e0000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x50f6e66b
jmp 0x4093ab
push ebx
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0x42bd2fc1
jmp 0x4093ab
mov eax, dword [ebp - 0x6c]
push dword [ebp - 0x84]
push 0
push 1
call eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x43746018
jmp 0x4093ab
imul eax, dword [ebp - 0x18], 0x4b8
and eax, 0x7fff000
shl eax, 5
lea eax, [eax + eax*4]
or eax, 0xeb
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x87e8b295
jmp 0x4093ab
mov dword [ebp - 0x10], 0xafae64a0
jmp 0x4093ab
imul eax, dword [ebp - 0x18], 0x6fcc0
add eax, 0x3367d1d
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x9d05032
jmp 0x4093ab
cmp dword [ebp - 0x80], 0
mov eax, 0x9d83e824
je 0x40a682
mov eax, 0x51bd2630
jmp 0x40a682
mov dword [ebp - 0x10], 0xd9f4c74f
jmp 0x4093ab
mov eax, dword [ebp - 0x18]
shl eax, 5
add eax, 0x480
shr eax, 0x1b
add eax, 0xffffffd1
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xfb24f015
jmp 0x4093ab
mov eax, dword [ebp - 0x38]
add eax, 0xb
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x8a50d471
jmp 0x4093ab
mov eax, dword [ebp - 0x14]
shr eax, 9
add eax, eax
add eax, 0x166
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xf11269bb
jmp 0x4093ab
imul eax, dword [ebp - 0x18], 0x65dc00
or eax, 0xd5
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x846455cb
jmp 0x4093ab
push 6
push 0x47c859
push 0x10
push dword [ebp - 0x3c]
call fcn.0040b2b0
add esp, 0x10
push 0x11
push dword [ebp - 0x3c]
push ebx
call fcn.0044ac30
add esp, 0xc
mov dword [ebp - 0x10], 0x4836b842
jmp 0x4093ab
mov edi, dword [ebp - 0x14]
mov eax, 0xffffff72
add edi, eax
shr edi, 8
add edi, 0x4f
shr edi, 5
and edi, 0xffffffe0
mov dword [ebp - 0x14], edi
call fcn.0040a6b1
mov eax, 0x60f7684c
cmp edi, 0xe6
jb 0x40a682
mov eax, 0x6f12b219
jmp 0x40a682
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x10], 0xbd25fd98
jmp 0x4093ab
imul eax, dword [ebp - 0x18], 0xe8
add eax, 0xffffff81
shr eax, 0xc
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x2b4829da
jmp 0x4093ab
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x937bbf6b
jmp 0x4093ab
imul eax, dword [ebp - 0x14], 0x24d88
mov dword [ebp - 0x14], eax
push 0x4069
push eax
push 0xdfb
push 0x5031
call fcn.0040b2b0
add esp, 0x10
mov dword [ebp - 0x10], 0x3e11c0be
jmp 0x4093ab
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0xbab04675
jmp 0x4093ab
imul eax, dword [ebp - 0x18], 0x73
shr eax, 0xd
imul ecx, eax, 0x2c
imul eax, eax
imul edx, eax, 0x6bb
add ecx, 0xffffe194
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0x9d05032
cmp edx, eax
je 0x40a3a8
mov ecx, 0xe0f47d0b
mov dword [ebp - 0x10], ecx
jmp 0x4093ab
push 5
push 0x46f558
push 0xc
push dword [ebp - 0x28]
call fcn.0040b190
add esp, 0x10
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0x99afacd4
jmp 0x4093ab
mov edi, dword [ebp - 0x14]
shl edi, 7
and edi, 0x7ffff800
lea eax, [edi - 0x75000]
mov dword [ebp - 0x14], eax
call fcn.0040a6b1
mov eax, 0x1300cda0
cmp edi, 0x75054
jb 0x40a682
mov eax, 0x892dc24b
jmp 0x40a682
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xcca0ae10
jmp 0x4093ab
mov edi, dword [ebp - 0x14]
shl edi, 9
and edi, 0x7ffffe00
add edi, 0xffffff95
mov dword [ebp - 0x14], edi
call fcn.0040a6b1
push edi
push 0x5745
push 0x2334
push 0x29ac
call fcn.0040b190
add esp, 0x10
mov dword [ebp - 0x10], 0xdaf1472c
jmp 0x4093ab
push dword [ebp - 0x24]
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x58]
push 0
push 0xf
call eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x2d2eb519
jmp 0x4093ab
mov eax, dword [ebp - 0x34]
movzx ecx, word [0x47c831]
mov word [eax + 0xc], cx
mov ecx, dword [0x47c82d]
mov dword [eax + 8], ecx
mov ecx, dword [0x47c829]
mov dword [eax + 4], ecx
mov ecx, dword [0x47c825]
mov dword [eax], ecx
push 4
push 0x47c833
push 0xe
push dword [ebp - 0x34]
call fcn.0040b2b0
add esp, 0x10
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x9c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x98], ecx
mov eax, dword [eax + 0xb]
mov dword [ebp - 0x95], eax
lea eax, [ebp - 0xa0]
push eax
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0xc1f8ed49
jmp 0x4093ab
mov ecx, dword [ebp - 0x14]
shl ecx, 6
add ecx, 0xffffb140
mov dword [ebp - 0x14], ecx
mov eax, 0x6974e1de
cmp ecx, 0x21
jl 0x40a682
mov eax, 0x27da3245
jmp 0x40a682
mov ecx, dword [ebp - 0x14]
add ecx, ecx
and ecx, 0xfffffffc
mov dword [ebp - 0x14], ecx
mov eax, 0xad6c71dc
cmp ecx, 0x9c
jae 0x40a682
mov eax, 0x337bd74f
jmp 0x40a682
mov eax, dword [ebp - 0x28]
add eax, 0x18
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x48c37501
jmp 0x4093ab
push dword [ebp + 8]
push dword [ebp - 0x78]
call fcn.0045caab
add esp, 8
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x10], 0xe0196d78
jmp 0x4093ab
push 6
push 0x47c808
push 0x18
push dword [ebp - 0x2c]
call fcn.0040b2b0
add esp, 0x10
push 0x19
push dword [ebp - 0x2c]
lea edi, [ebp - 0xda]
push edi
call fcn.0044ac30
add esp, 0xc
push edi
push dword [ebp - 0x20]
call esi
mov dword [ebp - 0x58], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0x337bd74f
jmp 0x4093ab
mov eax, dword [ebp - 0x40]
mov byte [eax + 0xb], 0
mov eax, dword [ebp - 0x40]
mov cl, byte [0x47c869]
mov byte [eax + 0xa], cl
movzx ecx, word [0x47c867]
mov word [eax + 8], cx
mov ecx, dword [0x47c863]
mov dword [eax + 4], ecx
mov ecx, dword [0x47c85f]
mov dword [eax], ecx
push 6
push 0x47c86a
push 0xb
push dword [ebp - 0x40]
call fcn.0040b2b0
add esp, 0x10
mov dword [ebp - 0x10], 0xf11269bb
jmp 0x4093ab
mov eax, dword [ebp - 0x14]
shl eax, 4
add eax, 0xca
shr eax, 6
imul ecx, eax, 0x1e000
add ecx, 0x53000
mov dword [ebp - 0x14], ecx
mov eax, 0x48c37501
cmp ecx, 0xb5
jl 0x40a682
mov eax, 0x1300cda0
jmp 0x40a682
mov eax, dword [ebp - 0x18]
shl eax, 7
add eax, 0xd3
shr eax, 9
add eax, 0xa6
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x41d92439
jmp 0x4093ab
mov ecx, dword [ebp - 0x14]
shl ecx, 0x1c
or ecx, 0x2dc0060
mov dword [ebp - 0x14], ecx
mov eax, 0xb7228b91
cmp ecx, 0xfa
jge 0x40a682
mov eax, 0xbb90c67c
mov dword [ebp - 0x10], eax
jmp 0x4093ab
mov eax, dword [ebp - 0x4c]
push dword [ebp - 0x44]
call eax
mov dword [ebp - 0x10], 0x5ce1c3eb
jmp 0x4093ab
cmp eax, 0xcca0ae10
jne 0x4093ab
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret