Function at 0x4816a0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d7b33
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
push edi
mov eax, dword [0x50d108]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1c], edi
push 2
call fcn.004061f0
push 0x168
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x4816f9
mov ecx, eax
call fcn.00409df0
mov esi, eax
jmp 0x4816fb
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push edi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x14]
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0xf0
mov eax, dword [esi]
call dword [eax + 0x5c]
push 1
mov ecx, esi
call fcn.004061d0
push 0x48
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x481764
push 0xf9faf5
mov ecx, eax
call fcn.00414450
mov ecx, eax
jmp 0x481766
xor ecx, ecx
mov eax, dword [esi]
push ecx
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0xa8]
push 2
mov ecx, esi
call fcn.004061f0
push 0x150
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x4817aa
mov ecx, eax
call fcn.004049e0
mov ecx, eax
mov dword [ebp - 0x14], eax
jmp 0x4817af
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x178], ecx
je 0x4817e1
test ecx, ecx
je 0x4817cb
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x178]
mov dword [edi + 0x178], ecx
test eax, eax
je 0x4817e1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x178]
push esi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x178]
push 1
call fcn.004061d0
mov ecx, dword [edi + 0x178]
movaps xmm0, xmmword [0x4db170]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
push 0xe8
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x48183c
mov ecx, eax
call fcn.0040fb40
mov esi, eax
jmp 0x48183e
xor esi, esi
push 3
push 0xa0
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.0040f810
mov ecx, dword [edi + 0x178]
push esi
mov eax, dword [ecx]
call dword [eax + 0xa8]
mov ecx, dword [edi + 0x178]
push 1
call fcn.00407150
mov ecx, dword [edi + 0x178]
movaps xmm0, xmmword [0x4db0a0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
mov ecx, dword [edi + 0x178]
push 2
call fcn.004061f0
push 0x168
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 4
test eax, eax
je 0x4818c1
mov ecx, eax
call fcn.00409df0
mov esi, eax
jmp 0x4818c3
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push edi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x14]
push 1
mov ecx, esi
call fcn.004061d0
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0x14
mov eax, dword [esi]
call dword [eax + 0x5c]
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0x13
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi]
call dword [eax + 0x80]
push 2
mov ecx, esi
call fcn.004061f0
push 0x1c8
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 5
test eax, eax
je 0x481962
mov ecx, eax
call fcn.0041ea60
mov ecx, eax
mov dword [ebp - 0x14], eax
jmp 0x481967
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x198], ecx
je 0x481999
test ecx, ecx
je 0x481983
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x198]
mov dword [edi + 0x198], ecx
test eax, eax
je 0x481999
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x198]
push esi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x198]
push 0
call fcn.004061d0
movaps xmm0, xmmword [0x4db100]
sub esp, 0x10
mov ecx, dword [edi + 0x198]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.00420840
sub esp, 0x10
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 5
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ecx, dword [edi + 0x198]
call fcn.004208e0
mov ecx, dword [edi + 0x198]
movaps xmm0, xmmword [0x4db150]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x198]
movaps xmm0, xmmword [0x4db060]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0xe8
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 6
test eax, eax
je 0x481a56
mov ecx, eax
call fcn.0040fb40
jmp 0x481a58
xor eax, eax
push 3
push 0xa1
mov ecx, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0xffffffff
call fcn.0040f810
mov ecx, dword [ebp - 0x10]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], 0x18
mov dword [eax + 4], 0
mov dword [eax + 8], 0x24
mov dword [eax + 0xc], 0xc
call fcn.004106b0
mov eax, dword [ebp - 0x10]
mov ecx, dword [edi + 0x198]
push eax
push eax
push eax
call fcn.0041f210
push 0xe8
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 7
test eax, eax
je 0x481acf
mov ecx, eax
call fcn.0040fb40
jmp 0x481ad1
xor eax, eax
push 3
push 0xa1
mov ecx, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xffffffff
call fcn.0040f810
mov ecx, dword [ebp - 0x14]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0xc
mov dword [eax + 0xc], 0xc
call fcn.004106b0
push 0xe8
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 8
test eax, eax
je 0x481b37
mov ecx, eax
call fcn.0040fb40
jmp 0x481b39
xor eax, eax
push 3
push 0xa1
mov ecx, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0xffffffff
call fcn.0040f810
mov ecx, dword [ebp - 0x10]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], 0xc
mov dword [eax + 4], 0
mov dword [eax + 8], 0x18
mov dword [eax + 0xc], 0xc
call fcn.004106b0
mov eax, dword [ebp - 0x10]
mov ecx, dword [edi + 0x198]
push eax
push eax
push dword [ebp - 0x14]
call fcn.0041f350
push ecx
mov ecx, esp
push 0x4daf98
call fcn.004043c0
mov ecx, dword [edi + 0x198]
call fcn.0041ef50
mov ecx, dword [edi + 0x198]
push 0x6d615a
call fcn.0041eff0
movaps xmm0, xmmword [0x4db040]
sub esp, 0x10
mov ecx, dword [edi + 0x198]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.00420880
mov ecx, dword [edi + 0x198]
push 0xfffffffffffffff1
call fcn.0041f010
mov ecx, dword [edi + 0x198]
push 2
call fcn.00407150
mov ecx, dword [edi + 0x198]
push 1
call fcn.0041eea0
mov ecx, dword [edi + 0x198]
test ecx, ecx
je 0x481c16
lea eax, [edi + 0x168]
test eax, eax
je 0x481c16
push eax
push 0x190
call fcn.00401ad0
push 0x1b0
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 9
test eax, eax
je 0x481c3f
mov ecx, eax
call fcn.00415190
mov ecx, eax
mov dword [ebp - 0x14], eax
jmp 0x481c44
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x19c], ecx
je 0x481c76
test ecx, ecx
je 0x481c60
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x19c]
mov dword [edi + 0x19c], ecx
test eax, eax
je 0x481c76
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x19c]
push esi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x19c]
push 0
call fcn.004061d0
mov ecx, dword [edi + 0x19c]
push 1
call fcn.004061b0
mov ecx, dword [edi + 0x19c]
push 1
call fcn.00406190
push ecx
mov ecx, esp
push 0x4dafb4
call fcn.004043c0
mov ecx, dword [edi + 0x19c]
call fcn.004158e0
mov ecx, dword [edi + 0x19c]
push 2
call fcn.00407150
mov ecx, dword [edi + 0x19c]
push 0x666666
mov eax, dword [ecx]
call dword [eax + 0x134]
mov ecx, dword [edi + 0x19c]
push 1
call fcn.00417460
mov ecx, dword [edi + 0x19c]
push 0xfffffffffffffff1
call fcn.00416690
mov ecx, dword [edi + 0x19c]
push 1
call fcn.00406340
mov ecx, dword [edi + 0x19c]
test ecx, ecx
je 0x481d27
lea eax, [edi + 0x168]
test eax, eax
je 0x481d27
push eax
push 0x384
call fcn.00401ad0
push 0x320
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0xa
test eax, eax
je 0x481d4d
mov ecx, eax
call fcn.0040a9b0
mov esi, eax
jmp 0x481d4f
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x194], esi
je 0x481d7e
test esi, esi
je 0x481d68
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x194]
mov dword [edi + 0x194], esi
test eax, eax
je 0x481d7e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x194]
push edi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x194]
push 1
call fcn.004061d0
mov ecx, dword [edi + 0x194]
push 1
call fcn.00407150
mov ecx, dword [edi + 0x194]
movaps xmm0, xmmword [0x4da9d0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x194]
movaps xmm0, xmmword [0x4db090]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0x4dafc0
lea ecx, [ebp - 0x14]
call fcn.004043c0
mov ecx, dword [edi + 0x194]
lea edx, [ebp - 0x14]
push edx
mov dword [ebp - 4], 0xb
mov eax, dword [ecx]
call dword [eax + 0x150]
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x481e27
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [edi + 0x194]
push 0xffffff
call fcn.0040c990
mov ecx, dword [edi + 0x194]
push 1
call fcn.0040cf70
mov ecx, dword [edi + 0x194]
push 0xffffffffffffffec
call fcn.0040f150
movaps xmm0, xmmword [0x4db120]
sub esp, 0x10
mov ecx, dword [edi + 0x194]
mov eax, esp
push 3
push 0xa2
movups xmmword [eax], xmm0
call fcn.0040edc0
mov ecx, dword [edi + 0x194]
test ecx, ecx
je 0x481e8e
lea eax, [edi + 0x168]
test eax, eax
je 0x481e8e
push eax
push 0
call fcn.00401ad0
push 0x168
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0xc
test eax, eax
je 0x481eb4
mov ecx, eax
call fcn.00409df0
mov esi, eax
jmp 0x481eb6
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push edi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x14]
push 1
mov ecx, esi
call fcn.004061d0
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0xe
mov eax, dword [esi]
call dword [eax + 0x5c]
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0xf
mov dword [eax + 8], 0x14
mov dword [eax + 0xc], 5
mov eax, dword [esi]
call dword [eax + 0x80]
push 2
mov ecx, esi
call fcn.004061f0
push 0x320
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0xd
test eax, eax
je 0x481f55
mov ecx, eax
call fcn.0040a9b0
mov ecx, eax
mov dword [ebp - 0x14], eax
jmp 0x481f5a
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x1a0], ecx
je 0x481f8c
test ecx, ecx
je 0x481f76
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x1a0]
mov dword [edi + 0x1a0], ecx
test eax, eax
je 0x481f8c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x1a0]
push esi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x1a0]
push 2
call fcn.004061d0
mov ecx, dword [edi + 0x1a0]
push 2
call fcn.00407150
mov ecx, dword [edi + 0x1a0]
movaps xmm0, xmmword [0x4db110]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x1a0]
xorps xmm0, xmm0
push 1
sub esp, 0x10
mov eax, esp
mov edx, dword [ecx]
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0x4dafcc
lea ecx, [ebp - 0x14]
call fcn.004043c0
mov ecx, dword [edi + 0x1a0]
lea edx, [ebp - 0x14]
push edx
mov dword [ebp - 4], 0xe
mov eax, dword [ecx]
call dword [eax + 0x150]
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x482031
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
movaps xmm0, xmmword [0x4db0b0]
mov ecx, dword [edi + 0x1a0]
push 1
sub esp, 0x10
mov eax, esp
movups xmmword [eax], xmm0
call fcn.0040f280
mov ecx, dword [edi + 0x1a0]
push 0
call fcn.0040f240
mov ecx, dword [edi + 0x1a0]
push 2
call fcn.0040f260
mov ecx, dword [edi + 0x1a0]
push 0x666666
call fcn.0040c990
mov ecx, dword [edi + 0x1a0]
push 1
call fcn.0040cf70
push 0xe8
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0xf
test eax, eax
je 0x4820aa
mov ecx, eax
call fcn.0040fb40
mov esi, eax
jmp 0x4820ac
xor esi, esi
push 3
push 0xa3
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.0040f810
mov ecx, dword [edi + 0x1a0]
push 1
push esi
call fcn.0040cb60
mov ecx, dword [edi + 0x1a0]
test ecx, ecx
je 0x4820eb
lea eax, [edi + 0x168]
test eax, eax
je 0x4820eb
push eax
push 0
call fcn.00401ad0
push 0x168
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x10
test eax, eax
je 0x482114
mov ecx, eax
call fcn.00409df0
mov esi, eax
mov dword [ebp - 0x10], eax
jmp 0x482119
xor esi, esi
mov dword [ebp - 0x10], esi
mov eax, dword [esi]
mov ecx, esi
push edi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x14]
push 1
mov ecx, esi
call fcn.004061d0
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0x50
mov eax, dword [esi]
call dword [eax + 0x5c]
push 0x1c8
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x11
test eax, eax
je 0x482180
mov ecx, eax
call fcn.0041ea60
mov esi, eax
jmp 0x482182
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x1a4], esi
je 0x4821b1
test esi, esi
je 0x48219b
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x1a4]
mov dword [edi + 0x1a4], esi
test eax, eax
je 0x4821b1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x1a4]
push dword [ebp - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x1a4]
push 1
call fcn.0041eef0
mov ecx, dword [edi + 0x1a4]
push 1
call fcn.004061d0
movaps xmm0, xmmword [0x4db100]
sub esp, 0x10
mov ecx, dword [edi + 0x1a4]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.00420840
sub esp, 0x10
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 5
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ecx, dword [edi + 0x1a4]
call fcn.004208e0
mov ecx, dword [edi + 0x1a4]
movaps xmm0, xmmword [0x4db140]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x1a4]
movaps xmm0, xmmword [0x4db070]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0xe8
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x12
test eax, eax
je 0x48227f
mov ecx, eax
call fcn.0040fb40
mov esi, eax
jmp 0x482281
xor esi, esi
push 3
push 0xa1
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.0040f810
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0x18
mov dword [eax + 4], 0
mov dword [eax + 8], 0x24
mov dword [eax + 0xc], 0xc
call fcn.004106b0
mov ecx, dword [edi + 0x1a4]
push esi
push esi
push esi
call fcn.0041f210
push 0xe8
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x13
test eax, eax
je 0x4822f3
mov ecx, eax
call fcn.0040fb40
mov esi, eax
jmp 0x4822f5
xor esi, esi
push 3
push 0xa1
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.0040f810
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0xc
mov dword [eax + 0xc], 0xc
call fcn.004106b0
push 0xe8
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x14
test eax, eax
je 0x482357
mov ecx, eax
call fcn.0040fb40
jmp 0x482359
xor eax, eax
push 3
push 0xa1
mov ecx, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xffffffff
call fcn.0040f810
mov ecx, dword [ebp - 0x14]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], 0xc
mov dword [eax + 4], 0
mov dword [eax + 8], 0x18
mov dword [eax + 0xc], 0xc
call fcn.004106b0
mov eax, dword [ebp - 0x14]
mov ecx, dword [edi + 0x1a4]
push eax
push eax
push esi
call fcn.0041f350
push ecx
mov ecx, esp
push 0x4dafd8
call fcn.004043c0
mov ecx, dword [edi + 0x1a4]
call fcn.0041ef50
mov ecx, dword [edi + 0x1a4]
push 0x999999
call fcn.0041eff0
movaps xmm0, xmmword [0x4db040]
sub esp, 0x10
mov ecx, dword [edi + 0x1a4]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.00420880
mov ecx, dword [edi + 0x1a4]
push 0xfffffffffffffff2
call fcn.0041f010
mov ecx, dword [edi + 0x1a4]
test ecx, ecx
je 0x48241a
lea eax, [edi + 0x168]
test eax, eax
je 0x48241a
push eax
push 0x190
call fcn.00401ad0
push 0x168
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x15
test eax, eax
je 0x482440
mov ecx, eax
call fcn.00409df0
mov esi, eax
jmp 0x482442
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x180], esi
je 0x482471
test esi, esi
je 0x48245b
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x180]
mov dword [edi + 0x180], esi
test eax, eax
je 0x482471
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x180]
push dword [ebp - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x180]
push 1
call fcn.004061d0
mov ecx, dword [edi + 0x180]
movaps xmm0, xmmword [0x4f8280]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x180]
movaps xmm0, xmmword [0x4db080]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
mov ecx, dword [edi + 0x180]
push 2
call fcn.004061f0
push 0x1b0
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x16
test eax, eax
je 0x4824fa
mov ecx, eax
call fcn.00415190
mov esi, eax
jmp 0x4824fc
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x184], esi
je 0x48252b
test esi, esi
je 0x482515
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x184]
mov dword [edi + 0x184], esi
test eax, eax
je 0x48252b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x184]
push dword [edi + 0x180]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x184]
push 0
call fcn.004061d0
mov ecx, dword [edi + 0x184]
push 1
call fcn.004061b0
mov ecx, dword [edi + 0x184]
push 1
call fcn.00406190
push ecx
mov ecx, esp
push 0x4daff0
call fcn.004043c0
mov ecx, dword [edi + 0x184]
call fcn.004158e0
mov ecx, dword [edi + 0x184]
movaps xmm0, xmmword [0x4db050]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
mov ecx, dword [edi + 0x184]
push 2
call fcn.00407150
mov ecx, dword [edi + 0x184]
push 0x999999
mov eax, dword [ecx]
call dword [eax + 0x134]
push 0x320
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x17
test eax, eax
je 0x4825e0
mov ecx, eax
call fcn.0040a9b0
mov esi, eax
jmp 0x4825e2
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x188], esi
je 0x482611
test esi, esi
je 0x4825fb
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x188]
mov dword [edi + 0x188], esi
test eax, eax
je 0x482611
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x188]
push dword [edi + 0x180]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x188]
push 2
call fcn.004061d0
mov ecx, dword [edi + 0x188]
push 2
call fcn.00407150
mov ecx, dword [edi + 0x188]
movaps xmm0, xmmword [0x4db160]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x188]
movaps xmm0, xmmword [0x4db0c0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0x4daffc
lea ecx, [ebp - 0x10]
call fcn.004043c0
mov ecx, dword [edi + 0x188]
lea edx, [ebp - 0x10]
push edx
mov dword [ebp - 4], 0x18
mov eax, dword [ecx]
call dword [eax + 0x150]
mov edx, dword [ebp - 0x10]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4826bf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [edi + 0x188]
push 1
call fcn.0040cf70
push 0xe8
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x19
test eax, eax
je 0x4826f2
mov ecx, eax
call fcn.0040fb40
mov esi, eax
jmp 0x4826f4
xor esi, esi
push 3
push 0x8c
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.0040f810
push 2
mov ecx, esi
call fcn.004106a0
movaps xmm0, xmmword [0x4db130]
sub esp, 0x10
mov eax, esp
mov ecx, esi
movups xmmword [eax], xmm0
call fcn.004107f0
mov ecx, dword [edi + 0x188]
push esi
call fcn.0040b200
mov ecx, dword [edi + 0x188]
push esi
call fcn.0040b1c0
mov ecx, dword [edi + 0x188]
push esi
call fcn.0040ca10
mov ecx, dword [edi + 0x188]
push esi
call fcn.0040b180
mov ecx, dword [edi + 0x188]
xor eax, eax
cmp dword [0x5114c8], eax
sete al
mov edx, dword [ecx]
push eax
call dword [edx + 0xf8]
mov ecx, dword [edi + 0x188]
test ecx, ecx
je 0x48278e
lea eax, [edi + 0x168]
test eax, eax
je 0x48278e
push eax
push 0
call fcn.00401ad0
push 0x168
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1a
test eax, eax
je 0x4827b4
mov ecx, eax
call fcn.00409df0
mov esi, eax
jmp 0x4827b6
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x18c], esi
je 0x4827e5
test esi, esi
je 0x4827cf
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x18c]
mov dword [edi + 0x18c], esi
test eax, eax
je 0x4827e5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x18c]
push dword [edi + 0x180]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x18c]
push 4
call fcn.004061d0
mov ecx, dword [edi + 0x18c]
movaps xmm0, xmmword [0x4f8280]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x18c]
movaps xmm0, xmmword [0x4db0d0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0xe8
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1b
test eax, eax
je 0x482864
mov ecx, eax
call fcn.0040fb40
mov esi, eax
jmp 0x482866
xor esi, esi
push 3
push 0x8c
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.0040f810
push 2
mov ecx, esi
call fcn.004106a0
movaps xmm0, xmmword [0x4db130]
sub esp, 0x10
mov eax, esp
mov ecx, esi
movups xmmword [eax], xmm0
call fcn.004107f0
mov ecx, dword [edi + 0x18c]
push esi
mov eax, dword [ecx]
call dword [eax + 0xa8]
push 0x1e0
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1c
test eax, eax
je 0x4828cf
mov ecx, eax
call fcn.00420df0
mov esi, eax
jmp 0x4828d1
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x190], esi
je 0x482900
test esi, esi
je 0x4828ea
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x190]
mov dword [edi + 0x190], esi
test eax, eax
je 0x482900
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x190]
push 0x800
call fcn.00421920
mov ecx, dword [edi + 0x190]
push dword [edi + 0x18c]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x190]
push 4
call fcn.004061d0
mov eax, dword [0x50d094]
cmp eax, 0xffffffff
jne 0x4829d7
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 6
jb 0x482959
movaps xmm0, xmmword [0x4db0e0]
mov dword [0x50d094], 1
jmp 0x48296a
mov dword [0x50d094], 0
movaps xmm0, xmmword [0x4db0f0]
mov ecx, dword [edi + 0x190]
push 1
sub esp, 0x10
mov eax, esp
mov edx, dword [ecx]
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push ecx
mov ecx, esp
push str.c:program_file_
call fcn.004043c0
mov ecx, dword [edi + 0x190]
call fcn.00421200
mov ecx, dword [edi + 0x190]
push 0
mov eax, dword [ecx]
call dword [eax + 0xf8]
mov eax, dword [0x51140c]
test eax, eax
jne 0x4829f2
push 0x18c
call fcn.0048a2e5
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1d
test eax, eax
je 0x4829e4
mov ecx, eax
call fcn.0042df60
jmp 0x4829e6
test eax, eax
je 0x482963
movaps xmm0, xmmword [0x4db0e0]
jmp 0x48296a
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x51140c], eax
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [eax + 4]
call fcn.00434be0
push ecx
mov esi, esp
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x20], esi
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
push eax
call fcn.00404550
add eax, 0x10
add esp, 4
mov dword [esi], eax
mov ecx, dword [edi + 0x190]
call fcn.00421200
mov edi, dword [edi + 0x194]
mov ecx, dword [ebp - 0x1c]
mov esi, dword [edi]
mov ecx, dword [ecx + 0x198]
call fcn.0041ef40
push eax
mov ecx, edi
call dword [esi + 0xf8]
mov edx, dword [ebp - 0x18]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x482a6b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret