Function at 0x571ce0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x124
mov eax, dword [0x6eb874]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x14]
call fcn.0040d170
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.004152f0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x120], 0x28
mov dword [ebp - 0x124], 0
call fcn.00414a70
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x20], 0
je 0x571d53
mov ecx, dword [ebp - 0x20]
add ecx, 0x24
mov dword [ebp - 0xdc], ecx
jmp 0x571d5d
mov dword [ebp - 0xdc], 0
push 0
lea ecx, [ebp - 0x14]
call fcn.0040e760
push eax
lea ecx, [ebp - 0x14]
call fcn.0040e760
push eax
push 0x28
push 0x88
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov edx, dword [ebp - 0xdc]
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [ebp - 0x24]
call fcn.005f92a0
mov ecx, dword [ebp - 0x20]
call fcn.004155d0
mov dword [ebp - 0x44], eax
push 0
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx]
mov eax, dword [edx + 0xe0]
call eax
mov dword [ebp - 0x28], 0xa
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x571dd9
mov ecx, dword [ebp - 0x20]
add ecx, 0x24
mov dword [ebp - 0x48], ecx
jmp 0x571de0
mov dword [ebp - 0x48], 0
push 0
push 0x10
push 0x50
mov edx, dword [ebp - 0x28]
push edx
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x666666
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [edx + 0x5c]
call ecx
push 0x3f4
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push 0x6a2208
lea ecx, [ebp - 0x4c]
call fcn.004131e0
push 0
lea edx, [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ecx + 0x54]
call eax
lea ecx, [ebp - 0x4c]
call fcn.00413870
push 0
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [eax + 0xe0]
call edx
mov dword [ebp - 0x28], 0x29
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x571e9c
mov eax, dword [ebp - 0x20]
add eax, 0x24
mov dword [ebp - 0x50], eax
jmp 0x571ea3
mov dword [ebp - 0x50], 0
push 0
push 0x10
push 0xc8
mov ecx, dword [ebp - 0x28]
push ecx
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov edx, dword [ebp - 0x50]
push edx
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x888888
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ecx + 0x5c]
call eax
push 0x3f3
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
call fcn.004bf670
test eax, eax
je 0x571f14
mov dword [ebp - 0x54], 0x6a2214
jmp 0x571f1b
mov dword [ebp - 0x54], 0x6a222c
mov ecx, dword [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x58]
call fcn.004131e0
push 0
lea edx, [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ecx + 0x54]
call eax
lea ecx, [ebp - 0x58]
call fcn.00413870
push 0
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [eax + 0xe0]
call edx
call fcn.0057c4f0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x20], 0
je 0x571f73
mov eax, dword [ebp - 0x20]
add eax, 0x24
mov dword [ebp - 0x5c], eax
jmp 0x571f7a
mov dword [ebp - 0x5c], 0
push 0
push 0x12
push 0x24
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0040e760
sub eax, 0xc8
push eax
push 6
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.005f92a0
push 0
push 0x156
call fcn.004154d0
mov ecx, eax
call fcn.005fea70
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005fdbe0
push 0
call fcn.0057c620
mov ecx, eax
call fcn.00485330
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.006015e0
push 0x7f89
push 0
call fcn.004bfb60
add esp, 8
push eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [eax + 0x64]
call edx
push 0
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [edx + 0xe0]
call ecx
mov dword [ebp - 0x3c], 4
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x38], 4
call fcn.004bf670
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x57226b
mov edx, dword [ebp - 0x28]
add edx, 0x1e
mov dword [ebp - 0x28], edx
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x57205e
mov eax, dword [ebp - 0x20]
add eax, 0x24
mov dword [ebp - 0x60], eax
jmp 0x572065
mov dword [ebp - 0x60], 0
push 0
push 0x10
push 0xc8
mov ecx, dword [ebp - 0x28]
push ecx
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov edx, dword [ebp - 0x60]
push edx
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x888888
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ecx + 0x5c]
call eax
push 0x3f3
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push 0x6a2244
lea ecx, [ebp - 0x64]
call fcn.004131e0
push 0
lea ecx, [ebp - 0x64]
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [eax + 0x54]
call edx
lea ecx, [ebp - 0x64]
call fcn.00413870
push 0
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [edx + 0xe0]
call ecx
call fcn.0057c4f0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x20], 0
je 0x57211d
mov edx, dword [ebp - 0x20]
add edx, 0x24
mov dword [ebp - 0x68], edx
jmp 0x572124
mov dword [ebp - 0x68], 0
push 0
push 0x12
push 0x24
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0040e760
sub eax, 0xc8
push eax
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005f92a0
push 0x7f89
push 0
call fcn.004bfb60
add esp, 8
push eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [edx + 0x64]
call ecx
push 0
push 0x156
call fcn.004154d0
mov ecx, eax
call fcn.005fea70
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005fdbe0
push 1
mov ecx, dword [ebp - 0x1c]
call fcn.005f9c30
push 0x3f0
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005f9a20
push 0
push 0x666666
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [eax + 0x5c]
call edx
push 0x6a2260
lea ecx, [ebp - 0x6c]
call fcn.004131e0
lea eax, [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [edx + 0x4c]
call ecx
lea ecx, [ebp - 0x6c]
call fcn.00413870
push 1
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [eax + 0x44]
call edx
xor eax, eax
mov byte [ebp - 0x31], al
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x3c]
push eax
push 0x6a2284
lea ecx, [ebp - 0x31]
call fcn.0057ae30
push eax
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x572230
mov dword [ebp - 0x2c], 0
cmp dword [ebp - 0x2c], 0
je 0x57223f
mov dword [ebp - 0x70], 1
jmp 0x572246
mov dword [ebp - 0x70], 0
push 0
mov ecx, dword [ebp - 0x70]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.006015e0
push 0
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
call fcn.004bd2a0
cmp eax, 0x3c0
jl 0x572471
mov ecx, dword [ebp - 0x28]
add ecx, 0x1e
mov dword [ebp - 0x28], ecx
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x57229d
mov edx, dword [ebp - 0x20]
add edx, 0x24
mov dword [ebp - 0x74], edx
jmp 0x5722a4
mov dword [ebp - 0x74], 0
push 0
push 0x10
push 0x12c
mov eax, dword [ebp - 0x28]
push eax
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov ecx, dword [ebp - 0x74]
push ecx
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x888888
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [eax + 0x5c]
call edx
push 0x3f3
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push 0x6a2294
lea ecx, [ebp - 0x78]
call fcn.004131e0
push 0
lea eax, [ebp - 0x78]
push eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [edx + 0x54]
call ecx
lea ecx, [ebp - 0x78]
call fcn.00413870
push 0
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
call fcn.0057c4f0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x20], 0
je 0x57235c
mov ecx, dword [ebp - 0x20]
add ecx, 0x24
mov dword [ebp - 0x7c], ecx
jmp 0x572363
mov dword [ebp - 0x7c], 0
push 0
push 0x12
push 0x24
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x14]
call fcn.0040e760
sub eax, 0xc8
push eax
push 0xb
mov eax, dword [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp - 0x1c]
call fcn.005f92a0
push 0
push 0x156
call fcn.004154d0
mov ecx, eax
call fcn.005fea70
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005fdbe0
push 0x7f89
push 0
call fcn.004bfb60
add esp, 8
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ecx + 0x64]
call eax
push 0x6a22b8
lea ecx, [ebp - 0x80]
call fcn.004131e0
lea ecx, [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [eax + 0x4c]
call edx
lea ecx, [ebp - 0x80]
call fcn.00413870
push 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ecx + 0x44]
call eax
xor ecx, ecx
mov byte [ebp - 0x2d], cl
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x3c]
push ecx
push 0x6a22dc
lea ecx, [ebp - 0x2d]
call fcn.0057b6c0
push eax
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x572443
cmp dword [ebp - 0x2c], 1
jne 0x572443
push 0
push 1
mov ecx, dword [ebp - 0x1c]
call fcn.006015e0
jmp 0x57245a
push 0
call fcn.00422d60
mov ecx, eax
call fcn.005894d0
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.006015e0
push 0
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
mov ecx, dword [ebp - 0x20]
call fcn.00577460
test eax, eax
je 0x57261f
mov ecx, dword [ebp - 0x28]
add ecx, 0x1e
mov dword [ebp - 0x28], ecx
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x5724a6
mov edx, dword [ebp - 0x20]
add edx, 0x24
mov dword [ebp - 0x84], edx
jmp 0x5724b0
mov dword [ebp - 0x84], 0
push 0
push 0x10
push 0x12c
mov eax, dword [ebp - 0x28]
push eax
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov ecx, dword [ebp - 0x84]
push ecx
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x888888
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [eax + 0x5c]
call edx
push 0x3f3
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push 0x6a22ec
lea ecx, [ebp - 0x88]
call fcn.004131e0
push 0
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [edx + 0x54]
call ecx
lea ecx, [ebp - 0x88]
call fcn.00413870
push 0
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
call fcn.0057c4f0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x20], 0
je 0x572577
mov ecx, dword [ebp - 0x20]
add ecx, 0x24
mov dword [ebp - 0x8c], ecx
jmp 0x572581
mov dword [ebp - 0x8c], 0
push 0
push 0x12
push 0x24
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x14]
call fcn.0040e760
sub eax, 0xc8
push eax
push 0xc
mov eax, dword [ebp - 0x8c]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp - 0x1c]
call fcn.005f92a0
push 0x7f89
push 0
call fcn.004bfb60
add esp, 8
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ecx + 0x64]
call eax
push 0
push 0x156
call fcn.004154d0
mov ecx, eax
call fcn.005fea70
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005fdbe0
push 1
mov ecx, dword [ebp - 0x1c]
call fcn.005f9c30
push 0
mov ecx, dword [ebp - 0x20]
call fcn.005774f0
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.006015e0
push 0
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [eax + 0xe0]
call edx
call fcn.004bf670
test eax, eax
je 0x5727c4
mov eax, dword [ebp - 0x28]
add eax, 0x1e
mov dword [ebp - 0x28], eax
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x572651
mov ecx, dword [ebp - 0x20]
add ecx, 0x24
mov dword [ebp - 0x90], ecx
jmp 0x57265b
mov dword [ebp - 0x90], 0
push 0
push 0x10
push 0x12c
mov edx, dword [ebp - 0x28]
push edx
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x888888
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [edx + 0x5c]
call ecx
push 0x3f3
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push str._f:y
lea ecx, [ebp - 0x94]
call fcn.004131e0
push 0
lea edx, [ebp - 0x94]
push edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ecx + 0x54]
call eax
lea ecx, [ebp - 0x94]
call fcn.00413870
push 0
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [eax + 0xe0]
call edx
call fcn.0057c4f0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x20], 0
je 0x572722
mov eax, dword [ebp - 0x20]
add eax, 0x24
mov dword [ebp - 0x98], eax
jmp 0x57272c
mov dword [ebp - 0x98], 0
push 0
push 0x12
push 0x24
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0040e760
sub eax, 0xc8
push eax
push 0xd
mov edx, dword [ebp - 0x98]
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.005f92a0
push 0x7f89
push 0
call fcn.004bfb60
add esp, 8
push eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [eax + 0x64]
call edx
push 0
push 0x156
call fcn.004154d0
mov ecx, eax
call fcn.005fea70
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005fdbe0
push 0
call fcn.004dfe30
mov ecx, eax
call fcn.004e0770
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.006015e0
push 0
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [edx + 0xe0]
call ecx
mov edx, dword [ebp - 0x28]
add edx, 0x26
mov dword [ebp - 0x28], edx
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x5727e9
mov eax, dword [ebp - 0x20]
add eax, 0x24
mov dword [ebp - 0x9c], eax
jmp 0x5727f3
mov dword [ebp - 0x9c], 0
push 0
push 0x10
push 0x50
mov ecx, dword [ebp - 0x28]
push ecx
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov edx, dword [ebp - 0x9c]
push edx
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x666666
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ecx + 0x5c]
call eax
push 0x3f4
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push 0x6a232c
lea ecx, [ebp - 0xa0]
call fcn.004131e0
push 0
lea ecx, [ebp - 0xa0]
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [eax + 0x54]
call edx
lea ecx, [ebp - 0xa0]
call fcn.00413870
push 0
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [edx + 0xe0]
call ecx
mov edx, dword [ebp - 0x28]
add edx, 0x1e
mov dword [ebp - 0x28], edx
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x5728c0
mov eax, dword [ebp - 0x20]
add eax, 0x24
mov dword [ebp - 0xa4], eax
jmp 0x5728ca
mov dword [ebp - 0xa4], 0
push 0
push 0x10
push 0x12c
mov ecx, dword [ebp - 0x28]
push ecx
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov edx, dword [ebp - 0xa4]
push edx
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x888888
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ecx + 0x5c]
call eax
push 0x3f3
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push 0x6a2338
lea ecx, [ebp - 0xa8]
call fcn.004131e0
push 0
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [eax + 0x54]
call edx
lea ecx, [ebp - 0xa8]
call fcn.00413870
push 0
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [edx + 0xe0]
call ecx
call fcn.0057c4f0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x20], 0
je 0x572991
mov edx, dword [ebp - 0x20]
add edx, 0x24
mov dword [ebp - 0xac], edx
jmp 0x57299b
mov dword [ebp - 0xac], 0
push 0
push 0x12
push 0x24
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0040e760
sub eax, 0xc8
push eax
push 0x10
mov ecx, dword [ebp - 0xac]
push ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005f92a0
push 0x7f89
push 0
call fcn.004bfb60
add esp, 8
push eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [edx + 0x64]
call ecx
push 0
push 0x156
call fcn.004154d0
mov ecx, eax
call fcn.005fea70
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005fdbe0
push 0
call fcn.004dfe30
mov ecx, eax
call fcn.004e03a0
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.006015e0
push 0
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
mov ecx, dword [ebp - 0x28]
add ecx, 0x1e
mov dword [ebp - 0x28], ecx
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x572a58
mov edx, dword [ebp - 0x20]
add edx, 0x24
mov dword [ebp - 0xb0], edx
jmp 0x572a62
mov dword [ebp - 0xb0], 0
push 0
push 0x10
push 0x12c
mov eax, dword [ebp - 0x28]
push eax
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov ecx, dword [ebp - 0xb0]
push ecx
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x888888
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [eax + 0x5c]
call edx
push 0x3f3
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push 0x6a2348
lea ecx, [ebp - 0xb4]
call fcn.004131e0
push 0
lea eax, [ebp - 0xb4]
push eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [edx + 0x54]
call ecx
lea ecx, [ebp - 0xb4]
call fcn.00413870
push 0
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
call fcn.0057c4f0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x20], 0
je 0x572b29
mov ecx, dword [ebp - 0x20]
add ecx, 0x24
mov dword [ebp - 0xb8], ecx
jmp 0x572b33
mov dword [ebp - 0xb8], 0
push 0
push 0x12
push 0x24
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x14]
call fcn.0040e760
sub eax, 0xc8
push eax
push 0x11
mov eax, dword [ebp - 0xb8]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp - 0x1c]
call fcn.005f92a0
push 0x7f89
push 0
call fcn.004bfb60
add esp, 8
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ecx + 0x64]
call eax
push 0
push 0x156
call fcn.004154d0
mov ecx, eax
call fcn.005fea70
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005fdbe0
push 0
call fcn.004dfe30
mov ecx, eax
call fcn.004e0430
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.006015e0
push 0
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [eax + 0xe0]
call edx
mov eax, dword [ebp - 0x28]
add eax, 0x1e
mov dword [ebp - 0x28], eax
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x572bf0
mov ecx, dword [ebp - 0x20]
add ecx, 0x24
mov dword [ebp - 0xbc], ecx
jmp 0x572bfa
mov dword [ebp - 0xbc], 0
push 0
push 0x10
push 0x12c
mov edx, dword [ebp - 0x28]
push edx
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov eax, dword [ebp - 0xbc]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x888888
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [edx + 0x5c]
call ecx
push 0x3f3
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push 0x6a235c
lea ecx, [ebp - 0xc0]
call fcn.004131e0
push 0
lea edx, [ebp - 0xc0]
push edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ecx + 0x54]
call eax
lea ecx, [ebp - 0xc0]
call fcn.00413870
push 0
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [eax + 0xe0]
call edx
call fcn.0057c4f0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x20], 0
je 0x572cc1
mov eax, dword [ebp - 0x20]
add eax, 0x24
mov dword [ebp - 0xc4], eax
jmp 0x572ccb
mov dword [ebp - 0xc4], 0
push 0
push 0x12
push 0x140
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0040e760
sub eax, 0xc8
push eax
push 0xe
mov edx, dword [ebp - 0xc4]
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.005f92a0
push 0x7f89
push 0
call fcn.004bfb60
add esp, 8
push eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [eax + 0x64]
call edx
push 0
push 0x156
call fcn.004154d0
mov ecx, eax
call fcn.005fea70
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005fdbe0
lea ecx, [ebp - 0x40]
call fcn.00413220
push 0x6a2380
lea ecx, [ebp - 0xcc]
call fcn.004131e0
mov eax, dword [0x6e9a2c]
push eax
lea ecx, [ebp - 0xc8]
call fcn.004131e0
push 0x104
push ecx
mov ecx, esp
push 0x6a237c
call fcn.004131e0
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xc8]
push eax
call fcn.004dfe30
mov ecx, eax
call fcn.004e1380
lea ecx, [ebp - 0xc8]
call fcn.00413870
lea ecx, [ebp - 0xcc]
call fcn.00413870
push 0x6a239c
lea ecx, [ebp - 0x40]
call fcn.00422730
test eax, eax
je 0x572dc4
mov dword [ebp - 0xd0], 1
jmp 0x572dce
mov dword [ebp - 0xd0], 0
push 0
mov ecx, dword [ebp - 0xd0]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.006015e0
push 0
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
mov ecx, dword [ebp - 0x28]
add ecx, 0x26
mov dword [ebp - 0x28], ecx
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x572e1b
mov edx, dword [ebp - 0x20]
add edx, 0x24
mov dword [ebp - 0xd4], edx
jmp 0x572e25
mov dword [ebp - 0xd4], 0
push 0
push 0x10
push 0x50
mov eax, dword [ebp - 0x28]
push eax
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov ecx, dword [ebp - 0xd4]
push ecx
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x666666
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [eax + 0x5c]
call edx
push 0x3f4
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push 0x6a23a8
lea ecx, [ebp - 0xd8]
call fcn.004131e0
push 0
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [edx + 0x54]
call ecx
lea ecx, [ebp - 0xd8]
call fcn.00413870
push 0
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
call fcn.004bf870
test eax, eax
jne 0x5730fe
mov ecx, dword [ebp - 0x28]
add ecx, 0x1e
mov dword [ebp - 0x28], ecx
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x572eff
mov edx, dword [ebp - 0x20]
add edx, 0x24
mov dword [ebp - 0x100], edx
jmp 0x572f09
mov dword [ebp - 0x100], 0
push 0
push 0x10
push 0x12c
mov eax, dword [ebp - 0x28]
push eax
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov ecx, dword [ebp - 0x100]
push ecx
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x888888
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [eax + 0x5c]
call edx
push 0x3f3
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push 0x6a23b4
lea ecx, [ebp - 0xe0]
call fcn.004131e0
push 0
lea eax, [ebp - 0xe0]
push eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [edx + 0x54]
call ecx
lea ecx, [ebp - 0xe0]
call fcn.00413870
push 0
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
call fcn.0057c4f0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x20], 0
je 0x572fd0
mov ecx, dword [ebp - 0x20]
add ecx, 0x24
mov dword [ebp - 0xe4], ecx
jmp 0x572fda
mov dword [ebp - 0xe4], 0
push 0
push 0x12
push 0x24
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x14]
call fcn.0040e760
sub eax, 0xc8
push eax
push 7
mov eax, dword [ebp - 0xe4]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp - 0x1c]
call fcn.005f92a0
push 0x7f89
push 0
call fcn.004bfb60
add esp, 8
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ecx + 0x64]
call eax
push 0
push 0x156
call fcn.004154d0
mov ecx, eax
call fcn.005fea70
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005fdbe0
push 1
mov ecx, dword [ebp - 0x1c]
call fcn.005f9c30
push 0x3f0
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005f9a20
push 0
push 0x666666
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [edx + 0x5c]
call ecx
mov dword [ebp - 0x2c], 0
xor edx, edx
mov byte [ebp - 0x2e], dl
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 0x6a23cc
lea ecx, [ebp - 0x2e]
call fcn.0057a290
push eax
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
cmp dword [ebp - 0x2c], 3
je 0x5730c0
mov dword [ebp - 0xe8], 1
jmp 0x5730ca
mov dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x118], eax
push 0
mov ecx, dword [ebp - 0x118]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.006015e0
push 0
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
xor ecx, ecx
mov byte [ebp - 0x32], cl
push ecx
mov ecx, esp
push str...UtilsLockScreen.dll
call fcn.004131e0
lea edx, [ebp - 0x110]
push edx
lea ecx, [ebp - 0x30]
call fcn.0057a200
xor eax, eax
mov byte [ebp - 0x2f], al
push ecx
mov esi, esp
lea ecx, [ebp - 0x2f]
call fcn.0057a3e0
push eax
mov ecx, esi
call fcn.004131e0
lea ecx, [ebp - 0x10c]
push ecx
lea ecx, [ebp - 0x30]
call fcn.0057a200
push ecx
mov ecx, esp
lea edx, [ebp - 0x110]
push edx
call fcn.00421650
lea eax, [ebp - 0x108]
push eax
call fcn.004bdc60
add esp, 8
push ecx
mov ecx, esp
lea edx, [ebp - 0x10c]
push edx
call fcn.00421650
lea eax, [ebp - 0x104]
push eax
call fcn.004bdc60
add esp, 8
push str.1.1121.1195.1103
lea ecx, [ebp - 0x108]
call fcn.0040d3c0
push eax
call fcn.004c0420
add esp, 8
test eax, eax
jge 0x5731c0
push str.1.1121.1010.1103
lea ecx, [ebp - 0x104]
call fcn.0040d3c0
push eax
call fcn.004c0420
add esp, 8
test eax, eax
jl 0x573391
mov ecx, dword [ebp - 0x28]
add ecx, 0x1e
mov dword [ebp - 0x28], ecx
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x5731e5
mov edx, dword [ebp - 0x20]
add edx, 0x24
mov dword [ebp - 0xec], edx
jmp 0x5731ef
mov dword [ebp - 0xec], 0
push 0
push 0x10
push 0x12c
mov eax, dword [ebp - 0x28]
push eax
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov ecx, dword [ebp - 0xec]
push ecx
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x888888
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [eax + 0x5c]
call edx
push 0x3f3
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push 0x6a2458
lea ecx, [ebp - 0xf0]
call fcn.004131e0
push 0
lea eax, [ebp - 0xf0]
push eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [edx + 0x54]
call ecx
lea ecx, [ebp - 0xf0]
call fcn.00413870
push 0
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
call fcn.0057c4f0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x20], 0
je 0x5732b6
mov ecx, dword [ebp - 0x20]
add ecx, 0x24
mov dword [ebp - 0xf4], ecx
jmp 0x5732c0
mov dword [ebp - 0xf4], 0
push 0
push 0x12
push 0x24
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x14]
call fcn.0040e760
sub eax, 0xc8
push eax
push 8
mov eax, dword [ebp - 0xf4]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp - 0x1c]
call fcn.005f92a0
push 0x7f89
push 0
call fcn.004bfb60
add esp, 8
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ecx + 0x64]
call eax
push 0
push 0x156
call fcn.004154d0
mov ecx, eax
call fcn.005fea70
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005fdbe0
push 1
mov ecx, dword [ebp - 0x1c]
call fcn.005f9c30
push 0x3f0
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005f9a20
push 0
push 0x666666
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [edx + 0x5c]
call ecx
push 0
call fcn.004dfe30
mov ecx, eax
call fcn.004e04c0
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.006015e0
push 0
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
mov ecx, dword [ebp - 0x28]
add ecx, 0x1e
mov dword [ebp - 0x28], ecx
call fcn.004305a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0
je 0x5733b6
mov edx, dword [ebp - 0x20]
add edx, 0x24
mov dword [ebp - 0xf8], edx
jmp 0x5733c0
mov dword [ebp - 0xf8], 0
push 0
push 0x10
push 0x12c
mov eax, dword [ebp - 0x28]
push eax
push 0x3a
mov ecx, dword [ebp - 0x20]
call fcn.005763d0
push eax
mov ecx, dword [ebp - 0xf8]
push ecx
mov ecx, dword [ebp - 0x20]
add ecx, 4
call fcn.0040d3c0
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f92a0
push 0
push 0x888888
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [eax + 0x5c]
call edx
push 0x3f3
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x18]
call fcn.005f9a20
push 0x6a2480
lea ecx, [ebp - 0xfc]
call fcn.004131e0
push 0
lea eax, [ebp - 0xfc]
push eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [edx + 0x54]
call ecx
lea ecx, [ebp - 0xfc]
call fcn.00413870
push 0
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
call fcn.0057c4f0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x20], 0
je 0x573487
mov ecx, dword [ebp - 0x20]
add ecx, 0x24
mov dword [ebp - 0x114], ecx
jmp 0x573491
mov dword [ebp - 0x114], 0
push 0
push 0x12
push 0x24
mov edx, dword [ebp - 0x28]
push edx
lea ecx, [ebp - 0x14]
call fcn.0040e760
sub eax, 0xc8
push eax
push 9
mov eax, dword [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp - 0x1c]
call fcn.005f92a0
push 0x7f89
push 0
call fcn.004bfb60
add esp, 8
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ecx + 0x64]
call eax
push 0
push 0x156
call fcn.004154d0
mov ecx, eax
call fcn.005fea70
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005fdbe0
push 1
mov ecx, dword [ebp - 0x1c]
call fcn.005f9c30
push 0x3f0
call fcn.004154d0
mov ecx, eax
call fcn.005fe930
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.005f9a20
push 0
push 0x666666
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [edx + 0x5c]
call ecx
push 0
call fcn.004dfe30
mov ecx, eax
call fcn.004e04f0
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.006015e0
push 0
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0xe0]
call eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov dword [ecx + 0x84], edx
lea ecx, [ebp - 0x104]
call fcn.00413870
lea ecx, [ebp - 0x108]
call fcn.00413870
lea ecx, [ebp - 0x10c]
call fcn.00413870
lea ecx, [ebp - 0x110]
call fcn.00413870
lea ecx, [ebp - 0x40]
call fcn.00413870
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006135ac
mov esp, ebp
pop ebp
ret