Function at 0x42d970
Capabilities:
Access peb ldr_data
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60ea49
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x12c
push ebx
push esi
lea esi, [ecx + 4]
push edi
mov eax, 0x630874
xor ebx, ebx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2c], ecx
mov dword [esi], eax
mov dword [esi + 4], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 8], ebx
mov dword [ebp - 4], ebx
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x1c], ebx
mov dword [ecx + 0x28], ebx
mov dword [ecx + 0x24], ebx
mov dword [ecx + 0x20], ebx
mov dword [ecx + 0x2c], eax
mov dword [ecx + 0x30], ebx
mov dword [ecx + 0x3c], ebx
mov dword [ecx + 0x38], ebx
mov dword [ecx + 0x34], ebx
mov dword [ecx], 0x630870
mov byte [ecx + 0x40], bl
mov eax, dword [0x6e7b6c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
push 0x6bf918
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.005fa9e2
push 0x6bf8fc
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x14], ebx
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf8f8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov dword [ebp - 0x14], 1
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf8f8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov edi, dword [esi + 8]
mov dword [ebp - 0x14], 1
push 0xffffffffffffffff
lea edx, [edi + 1]
mov ecx, esi
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf8c4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8a4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x14], 1
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf8c4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf890
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov dword [ebp - 0x14], 1
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf88c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x14], ebx
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf888
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8a4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x14], ebx
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [edi + edi*2]
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf88c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov dword [ebp - 0x14], ebx
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf884
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x14], ebx
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf880
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x14], ebx
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf87c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov dword [ebp - 0x14], ebx
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf878
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x14], ebx
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf874
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x14], ebx
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf870
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov dword [ebp - 0x14], ebx
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf86c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x14], ebx
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf868
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x14], ebx
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf864
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov dword [ebp - 0x14], ebx
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf860
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x14], ebx
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf85c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x14], ebx
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf858
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov dword [ebp - 0x14], ebx
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf854
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf850
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf84c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf848
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf844
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf840
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf83c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf838
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf824
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf838
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf810
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf80c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf7f0
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf7ec
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf7e8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf7e4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf7e0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf7dc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf7d8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf7d4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
lea ecx, [ebp - 0x1c]
mov eax, dword [esi + 4]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf7d0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf7cc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf7c8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf7c4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf7c0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf7bc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf7b8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf7b4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf7b0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf7ac
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
lea edx, [ebp - 0x1c]
lea eax, [edi + edi*2]
push edx
mov ecx, dword [esi + 4]
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf7a8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf7a4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf7a0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf79c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf798
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf780
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
lea ecx, [ebp - 0x1c]
mov eax, dword [esi + 4]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf77c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf768
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf760
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf75c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf748
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf77c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf734
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf730
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf71c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf718
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf70c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf718
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf6fc
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf718
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf6ec
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf718
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf6d0
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
lea eax, [edi + 1]
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf6cc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf6c0
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf6cc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf6b4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf6cc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf6a4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf6a0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf6b4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf69c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf690
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf688
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf69c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf678
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf688
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf69c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf66c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf688
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
mov ecx, dword [esi + 4]
lea eax, [edi + edi*2]
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf69c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf660
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf688
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf65c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf64c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, esi
call fcn.00431260
lea edx, [ebp - 0x1c]
lea eax, [edi + edi*2]
push edx
mov ecx, dword [esi + 4]
lea ecx, [ecx + eax*4]
call fcn.00431590
push 0x6bf648
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf644
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf634
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf630
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf620
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf61c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf610
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf608
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf604
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf5f4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf5f0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf5e4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov edi, 1
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x14], edi
mov eax, dword [esi + 8]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf5f0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf5d8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], edi
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf5d4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf5c4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], edi
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf918
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf5a8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf918
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf58c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf918
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf578
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf918
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf560
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf55c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf548
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf55c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf5a8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf544
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf538
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
lea edx, [edi + 1]
push 0xffffffffffffffff
push edx
mov ecx, esi
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf544
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf52c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov edi, 1
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x14], edi
mov eax, dword [esi + 8]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf528
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf51c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], edi
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf528
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf510
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], edi
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf528
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf4fc
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf4f8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf4ec
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea edx, [edi + 1]
push edx
mov ecx, esi
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf4e8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf4dc
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov edi, 1
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x14], edi
mov eax, dword [esi + 8]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf4e8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf4d0
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], edi
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf4e8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf4c4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], edi
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf4bc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf4c4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf4b8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf4c4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
lea eax, [ebp - 0x1c]
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf4b0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf4c4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf4e8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf4a4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf4bc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf4a4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf4b8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf4a4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf4b0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf4a4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf4a0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf494
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf4a0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf488
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf484
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf474
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov edi, 1
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x14], edi
mov eax, dword [esi + 8]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf470
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf450
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], edi
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf44c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf5a8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf44c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf810
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf448
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf690
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf448
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf678
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf448
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf660
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf448
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf66c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf444
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf42c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf428
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf42c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf424
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf42c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf41c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf42c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf418
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf414
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf414
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf418
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf418
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf414
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf3f0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3f0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf3f0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3e8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf3e8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf3e8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3e4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf3e4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3e4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf3dc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf3dc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3dc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea edx, [edi + 1]
mov ecx, esi
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf3d4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3d4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf3d4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf3cc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3cc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf3cc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3c4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf3c4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf3c4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3c0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + edi*2]
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf3c0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3c0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf3bc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf3bc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3bc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf3b8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3b8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf3b8
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf3b4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3b4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf3b4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf3b0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3a4
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf3a0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf394
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf38c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf380
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf65c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf360
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf3a0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf360
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf35c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf350
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf34c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf340
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf34c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf334
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf34c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf324
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf34c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf318
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf34c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf30c
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf34c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf394
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf34c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf300
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf6a0
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf300
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf2fc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf2f0
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf718
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf634
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf630
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf634
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf5d4
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf634
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf2ec
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf2d0
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf2ec
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf2c0
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf2bc
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf2b0
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov edi, dword [esi + 8]
push 0xffffffffffffffff
lea edx, [edi + 1]
mov ecx, esi
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf2ac
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf288
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf284
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf268
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], 1
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf260
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf260
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf260
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea ecx, [edi + edi*2]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf25c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf250
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf24c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
push 0x6bf24c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.00431260
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x1c]
lea edx, [edi + edi*2]
push ecx
lea ecx, [eax + edx*4]
call fcn.00431590
push 0x6bf24c
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf248
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8e8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov edi, dword [esi + 8]
push 0xffffffffffffffff
mov ecx, esi
lea edx, [edi + 1]
push edx
call fcn.00431260
mov edx, dword [esi + 4]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + edi*2]
lea ecx, [edx + ecx*4]
call fcn.00431590
push 0x6bf248
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf3f8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004313e0
push 0x6bf248
lea ecx, [ebp - 0x18]
call fcn.005fa9e2
push 0x6bf8c8
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 8]
lea edx, [ebp - 0x1c]
mov ecx, esi
push edx
push eax
call fcn.004313e0
lea eax, [ebp - 0x20]
push eax
push 0x20019
push ebx
push 0x6bf234
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x430363
push ebx
push ebx
mov eax, dword [ebp - 0x20]
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x34]
push ebx
lea edx, [ebp - 0x28]
push ecx
push edx
push ebx
push ebx
push ebx
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
test eax, eax
jne 0x430351
cmp dword [ebp - 0x28], ebx
je 0x430351
mov ebx, dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
xor edi, edi
xor esi, esi
test esi, esi
jne 0x430357
mov edx, dword [ebp - 0x20]
lea ecx, [ebp - 0x138]
push 0x104
push ecx
push edi
push edx
call ebx
mov esi, eax
test esi, esi
jne 0x43034b
cmp byte [ebp - 0x138], 0x2e
jne 0x43034b
lea eax, [ebp - 0x137]
lea ecx, [ebp - 0x18]
push eax
call fcn.005fa9e2
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x24]
push ecx
push 0x20019
lea edx, [ebp - 0x138]
push esi
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x43034b
lea ecx, [ebp - 0x30]
lea edx, [ebp - 0x138]
push ecx
push edx
push eax
push eax
mov eax, dword [ebp - 0x24]
push 0x6bf224
push eax
mov dword [ebp - 0x30], 0x104
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x430341
lea ecx, [ebp - 0x138]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.005fa9e2
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 1
mov eax, dword [edx + 0x20]
lea ecx, [edx + 0x18]
lea edx, [ebp - 0x1c]
push edx
push eax
call fcn.004313e0
mov eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc edi
jmp 0x430291
mov ebx, dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x430369
mov ebx, dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
lea edx, [ebp - 0x20]
push edx
push 0x20019
push 0
push 0x6bf208
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x430483
push eax
push eax
push eax
push eax
mov edx, dword [ebp - 0x20]
push eax
push eax
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x30]
push eax
push ecx
push 0
push 0
push 0
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
test eax, eax
jne 0x430479
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x430479
xor edi, edi
xor esi, esi
test esi, esi
jne 0x430479
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x138]
push 0x104
push eax
push edi
push ecx
call ebx
mov esi, eax
test esi, esi
jne 0x430473
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x1c]
push edx
call fcn.005fa9e2
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x24]
push eax
push 0x20019
lea ecx, [ebp - 0x138]
push esi
push ecx
push edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x430473
mov edx, dword [ebp - 0x24]
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x138]
push eax
push ecx
push esi
push esi
push 0x6bf1fc
push edx
mov dword [ebp - 0x28], 0x104
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x430469
cmp byte [ebp - 0x138], 0x2e
jne 0x430469
lea eax, [ebp - 0x137]
lea ecx, [ebp - 0x18]
push eax
call fcn.005fa9e2
mov edx, dword [ebp - 0x2c]
lea ecx, [ebp - 0x1c]
push ecx
mov dword [ebp - 0x14], 1
lea ecx, [edx + 0x2c]
call fcn.00430e20
mov eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc edi
jmp 0x4303c1
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.004304d0
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x2c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret