Function at 0x6b3bac
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffeb8
test dl, dl
je 0x6b3bc1
add esp, 0xfffffff0
call fcn.00406ca0
mov dword [ebp - 0xc], ecx
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.005f23b8
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x400], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x404], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x58]
or eax, dword [0x6b52c0]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
je 0x6b3c20
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
test byte [eax + 0x1c], 2
jne 0x6b3c20
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
test byte [eax + 0x1c], 1
je 0x6b3c24
xor eax, eax
jmp 0x6b3c26
mov al, 1
mov byte [ebp - 0x11], al
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.005b5484
mov eax, dword [ebp - 4]
mov dword [eax + 0x4464], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0x4468], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0x4550], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0x4560], 0x1fffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0x4564], 0x1fffffff
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x455c], edx
mov eax, dword [ebp - 4]
mov dword [eax + 0x4554], 0xffffffff
mov eax, dword [ebp - 4]
add eax, 0x45a0
call fcn.0040b9d4
mov eax, dword [ebp - 4]
mov byte [eax + 0x80d], 0xa
mov eax, dword [ebp - 4]
mov dword [eax + 0x44f4], 0xffffffff
mov eax, dword [ebp - 4]
mov byte [eax + 0x453c], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0x2209], 1
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x68fff4]
call fcn.007251ec
mov edx, dword [ebp - 4]
mov dword [edx + 0x2288], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2288]
mov dl, 2
call fcn.00490080
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2288]
xor edx, edx
call fcn.0049044c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2288]
xor edx, edx
call fcn.004dfb68
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x68f710]
call fcn.007284a0
mov edx, dword [ebp - 4]
mov dword [edx + 0x228c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x228c]
mov dl, 2
call fcn.00490080
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x228c]
xor edx, edx
call fcn.0049044c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x228c]
xor edx, edx
call fcn.004dfb68
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x228c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x2cc], edx
mov dword [eax + 0x2c8], 0x6e8ff8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x228c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x2c4], edx
mov dword [eax + 0x2c0], fcn.006e95e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x228c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x2bc], edx
mov dword [eax + 0x2b8], fcn.006e9934
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x228c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x2d4], edx
mov dword [eax + 0x2d0], 0x6e9cb4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x228c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x2dc], edx
mov dword [eax + 0x2d8], fcn.006e9cf8
mov dl, 1
mov eax, dword [0x46b05c]
call fcn.00471078
mov edx, dword [ebp - 4]
mov dword [edx + 0x1024], eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x5e7ea4]
call fcn.005efbb4
mov edx, dword [ebp - 4]
mov dword [edx + 0x459c], eax
mov al, byte [ebp - 0x11]
push eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x5e4b98]
call fcn.005edbd0
mov edx, dword [ebp - 4]
mov dword [edx + 0x2290], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2290]
mov edx, dword [ebp - 4]
mov dword [eax + 0x1c], edx
mov dword [eax + 0x18], fcn.007200c4
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x6902d8]
call fcn.00726b94
mov edx, dword [ebp - 4]
mov dword [edx + 0x2294], eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x686898]
call fcn.006b00e8
mov edx, dword [ebp - 4]
mov dword [edx + 0x808], eax
mov dl, 1
mov eax, dword [0x685efc]
call fcn.006afe68
mov edx, dword [ebp - 4]
mov dword [edx + 0x814], eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x687644]
call fcn.00723a50
mov edx, dword [ebp - 4]
mov dword [edx + 0x226c], eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x68e628]
call fcn.00727db8
mov edx, dword [ebp - 4]
mov dword [edx + 0x2274], eax
mov dl, 1
mov eax, dword [0x682508]
call fcn.00729248
mov edx, dword [ebp - 4]
mov dword [edx + 0x4420], eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x6842ec]
call fcn.00724448
mov edx, dword [ebp - 4]
mov dword [edx + 0x2278], eax
mov dl, 1
mov eax, dword [0x5e56a0]
call fcn.005ee534
mov edx, dword [ebp - 4]
mov dword [edx + 0x820], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x820]
mov edx, dword [ebp - 4]
mov dword [eax + 0x34], edx
mov edx, dword [edx]
mov edx, dword [edx + 0x2a4]
mov dword [eax + 0x30], edx
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x685490]
call fcn.006afcd4
mov edx, dword [ebp - 4]
mov dword [edx + 0x824], eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x683e90]
call fcn.006af010
mov edx, dword [ebp - 4]
mov dword [edx + 0x82c], eax
mov dl, 1
mov eax, dword [0x5e7740]
call fcn.005eedf8
mov edx, dword [ebp - 4]
mov dword [edx + 0x818], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x818]
mov edx, dword [ebp - 4]
mov dword [eax + 0x24], edx
mov dword [eax + 0x20], 0x7200a8
mov dl, 1
mov eax, dword [0x68527c]
call fcn.006af360
mov edx, dword [ebp - 4]
mov dword [edx + 0x830], eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x5e6644]
call fcn.005ee6d8
mov edx, dword [ebp - 4]
mov dword [edx + 0x834], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x834]
mov edx, dword [ebp - 4]
mov dword [eax + 0x34], edx
mov edx, dword [edx]
mov edx, dword [edx + 0x28c]
mov dword [eax + 0x30], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x834]
mov edx, dword [ebp - 4]
mov dword [eax + 0x44], edx
mov edx, dword [edx]
mov edx, dword [edx + 0x290]
mov dword [eax + 0x40], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x834]
mov edx, dword [ebp - 4]
mov dword [eax + 0x3c], edx
mov edx, dword [edx]
mov edx, dword [edx + 0x294]
mov dword [eax + 0x38], edx
mov dl, 1
mov eax, dword [0x685854]
call fcn.00727d04
mov edx, dword [ebp - 4]
mov dword [edx + 0x838], eax
mov dl, 1
mov eax, dword [0x43fbac]
call fcn.0044e220
mov edx, dword [ebp - 4]
mov dword [edx + 0xed8], eax
mov dl, 1
mov eax, dword [0x5d46f0]
call fcn.00406664
mov edx, dword [ebp - 4]
mov dword [edx + 0x1098], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xed8]
mov edx, dword [ebp - 4]
mov dword [eax + 0x44], edx
mov dword [eax + 0x40], 0x6d33b4
mov eax, dword [ebp - 4]
mov byte [eax + 0xe44], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0x45bd], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x2224], 1
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x44a8], edx
mov eax, dword [ebp - 4]
mov dword [eax + 0x220c], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0xf24], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0xf28], 0xffffffff
mov eax, dword [ebp - 4]
mov byte [eax + 0xf1f], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x44f1], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x4520], 1
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x414], edx
mov eax, dword [ebp - 4]
add eax, 0x44bc
mov edx, 0x6b52d0
call fcn.004086ec
mov eax, dword [ebp - 4]
add eax, 0x44c8
mov edx, 0x6b52f4
call fcn.004086ec
mov eax, dword [ebp - 4]
mov byte [eax + 0x44b5], 0
push 0xffffffffffffffff
or ecx, 0xffffffff
mov dl, 1
mov eax, dword [0x5e21b4]
call fcn.005e86e0
mov edx, dword [ebp - 4]
mov dword [edx + 0x2244], eax
mov dl, 1
mov eax, dword [0x46b05c]
call fcn.00471078
mov edx, dword [ebp - 4]
mov dword [edx + 0xec0], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xec0]
mov edx, 0x6b530c
call fcn.0047158c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xec0]
mov dl, byte [0x6b52c0]
call fcn.00471630
mov eax, dword [ebp - 4]
mov byte [eax + 0x43e], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xfd4], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x44f8], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0x449], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xec0]
mov edx, dword [ebp - 4]
mov dword [eax + 0xc], edx
mov dword [eax + 8], 0x6d3220
mov dl, 1
mov eax, dword [0x46b05c]
call fcn.00471078
mov edx, dword [ebp - 4]
mov dword [edx + 0x2230], eax
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
je 0x6b41a7
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2230]
mov edx, 0x6b530c
call fcn.0047158c
mov eax, dword [ebp - 4]
mov byte [eax + 0x23c9], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x23ca], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x23cc], 0xc0c0c0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2230]
mov dl, byte [0x6b52c0]
call fcn.00471630
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2230]
mov edx, dword [ebp - 4]
mov dword [eax + 0xc], edx
mov dword [eax + 8], 0x6d3220
mov eax, dword [ebp - 4]
mov dword [eax + 0x22d4], 0x808080
mov eax, dword [ebp - 4]
mov dword [eax + 0x22d8], 0x1fffffff
mov eax, dword [ebp - 4]
mov byte [eax + 0x4461], 1
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0x18], 2
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0x2234], edx
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x2238], edx
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x20], 0xffffffff
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x24]
mov dword [eax + 0xeb4], edx
mov edx, dword [ebp - 0x20]
mov dword [eax + 0xeb8], edx
mov eax, dword [ebp - 4]
mov dword [eax + 0x2240], 0xffffffff
mov dl, 1
mov eax, dword [0x43fbac]
call fcn.0044e220
mov edx, dword [ebp - 4]
mov dword [edx + 0xedc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xedc]
mov edx, dword [ebp - 4]
mov dword [eax + 0x44], edx
mov dword [eax + 0x40], 0x6d3524
mov dl, 1
mov eax, dword [0x43fbac]
call fcn.0044e220
mov edx, dword [ebp - 4]
mov dword [edx + 0x45d0], eax
mov dl, 1
mov eax, dword [0x43fbac]
call fcn.0044e220
mov edx, dword [ebp - 4]
mov dword [edx + 0xee0], eax
mov dl, 1
mov eax, dword [0x43c438]
call fcn.00406664
mov edx, dword [ebp - 4]
mov dword [edx + 0xee4], eax
mov dl, 1
mov eax, dword [0x43c438]
call fcn.00406664
mov edx, dword [ebp - 4]
mov dword [edx + 0xee8], eax
push 0
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5e2510]
call fcn.005e86e0
mov edx, dword [ebp - 4]
mov dword [edx + 0x78c], eax
push 0
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5e21b4]
call fcn.005e86e0
mov edx, dword [ebp - 4]
mov dword [edx + 0x44c], eax
push 0
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5e21b4]
call fcn.005e86e0
mov edx, dword [ebp - 4]
mov dword [edx + 0x450], eax
push 0
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5e21b4]
call fcn.005e86e0
mov edx, dword [ebp - 4]
mov dword [edx + 0x454], eax
push 0
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5e21b4]
call fcn.005e86e0
mov edx, dword [ebp - 4]
mov dword [edx + 0x458], eax
push 0
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5e21b4]
call fcn.005e86e0
mov edx, dword [ebp - 4]
mov dword [edx + 0x45c], eax
push 0
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5e21b4]
call fcn.005e86e0
mov edx, dword [ebp - 4]
mov dword [edx + 0x460], eax
push 0
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5e21b4]
call fcn.005e86e0
mov edx, dword [ebp - 4]
mov dword [edx + 0x464], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x454]
mov edx, dword [ebp - 4]
mov dword [eax + 0x14], edx
mov dword [eax + 0x10], 0x6d32c8
mov dl, 1
mov eax, dword [0x46efb8]
call fcn.00477fd4
mov edx, dword [ebp - 4]
mov dword [edx + 0x788], eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x688824]
call fcn.00722574
mov edx, dword [ebp - 4]
mov dword [edx + 0x790], eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x68f1ec]
call fcn.0049c0b4
mov edx, dword [ebp - 4]
mov dword [edx + 0x45b0], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x45b4], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x23a8], 3
mov eax, dword [ebp - 4]
mov byte [eax + 0x440], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x442], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x445], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x2340], 0x1fffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0x2344], 0x1fffffff
mov eax, dword [ebp - 4]
mov byte [eax + 0x446], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xf09], 1
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xe40], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x22e4], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x22ec], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x22e8], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x22e0], edx
mov eax, dword [ebp - 4]
mov dword [eax + 0x428], 0xffffffff
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x28], 0xffffffff
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x45a4], edx
mov edx, dword [ebp - 0x28]
mov dword [eax + 0x45a8], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x22d0], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xf19], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xe81], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xf1b], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xf1c], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x2265], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xf14], 1
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x23c0], edx
mov dl, 1
mov eax, dword [0x5e2a0c]
call fcn.00406664
mov edx, dword [ebp - 4]
mov dword [edx + 0x23c4], eax
mov dl, 1
mov eax, dword [0x6880a0]
call fcn.007294a8
mov edx, dword [ebp - 4]
mov dword [edx + 0x446c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x446c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x1c], edx
mov dword [eax + 0x18], 0x6d3220
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x5e7428]
call fcn.005eed60
mov edx, dword [ebp - 4]
mov dword [edx + 0x4538], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x44f0], 2
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xfc8], edx
mov edx, 0xa
mov eax, dword [ebp - 4]
call fcn.006d6f98
mov edx, 0x190
mov eax, dword [ebp - 4]
call fcn.00490418
mov edx, 0xfa
mov eax, dword [ebp - 4]
call fcn.0049044c
mov ecx, dword [0x68df58]
mov dl, 1
mov eax, dword [0x43e12c]
call fcn.0044b600
mov edx, dword [ebp - 4]
mov dword [edx + 0x2200], eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x68dc68]
call fcn.00722374
mov edx, dword [ebp - 4]
mov dword [edx + 0x2204], eax
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.006d87a8
mov eax, dword [ebp - 4]
mov byte [eax + 0x1008], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x768], 0xff000018
mov eax, dword [ebp - 4]
mov dword [eax + 0x76c], 0xff00000d
mov eax, dword [ebp - 4]
mov dword [eax + 0x770], 0xff00000e
mov eax, dword [ebp - 4]
mov dword [eax + 0xe50], 0xeacab6
mov eax, dword [ebp - 4]
mov dword [eax + 0xe54], 0x1fffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0xe5c], 0x1fffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0xe60], 0x1fffffff
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xe64], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x441], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x453d], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xebc], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xe98], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xea0], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x2266], 1
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x2270], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x2268], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xf08], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xe74], 0xff0000
mov eax, dword [ebp - 4]
mov byte [eax + 0xe6a], 0
mov eax, dword [ebp - 4]
mov word [eax + 0xf3c], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x102c], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x1030], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0xf48], 0xffffffff
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x2198], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x1009], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x2371], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0x45b5], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xfa4], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xf11], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xf13], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xf12], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xf15], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xf16], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0x2264], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xf8d], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0xf90], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0x106c], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x1070], 1
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x1074], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x1034], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x1078], 0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x508], edx
mov dword [eax + 0x50c], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x45be], 0
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x30], 0xffffffff
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x778], edx
mov edx, dword [ebp - 0x30]
mov dword [eax + 0x77c], edx
mov dl, 1
mov eax, dword [0x686538]
call fcn.00728158
mov edx, dword [ebp - 4]
mov dword [edx + 0x23f0], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x23f0]
mov edx, dword [ebp - 4]
mov dword [eax + 0x24], edx
mov dword [eax + 0x20], 0x720050
mov dl, 1
mov eax, dword [0x6850ac]
call fcn.00728258
mov edx, dword [ebp - 4]
mov dword [edx + 0x4408], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4408]
mov edx, dword [ebp - 4]
mov dword [eax + 0x14], edx
mov dword [eax + 0x10], 0x72008c
mov eax, dword [ebp - 0xc]
mov edx, dword [0x526700]
call fcn.00406950
test al, al
je 0x6b491c
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x6b491c
mov eax, dword [ebp - 0xc]
mov edx, dword [0x526700]
call fcn.00406974
cmp word [eax + 0xf2], 0
je 0x6b48c7
mov eax, dword [ebp - 0xc]
mov edx, dword [0x526700]
call fcn.00406974
mov edx, dword [ebp - 4]
mov ecx, dword [eax + 0xf0]
mov dword [edx + 0x628], ecx
mov ecx, dword [eax + 0xf4]
mov dword [edx + 0x62c], ecx
mov eax, dword [ebp - 4]
mov byte [eax + 0xfa4], 1
mov eax, dword [ebp - 0xc]
mov edx, dword [0x526700]
call fcn.00406974
mov edx, dword [ebp - 4]
mov dword [eax + 0xf4], edx
mov dword [eax + 0xf0], 0x71a41c
mov eax, dword [ebp - 0xc]
mov edx, dword [0x526700]
call fcn.00406974
mov eax, dword [eax + 0x50]
mov edx, dword [ebp - 4]
mov dword [edx + 0x45d4], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [0x526700]
call fcn.00406974
mov eax, dword [eax + 0x54]
mov edx, dword [ebp - 4]
mov dword [edx + 0x45d8], eax
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov byte [eax + edx + 0x83c], 1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x201
jne 0x6b4921
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xe4c], edx
mov eax, dword [ebp - 4]
mov word [eax + 0xef4], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xef6], 0
mov eax, dword [ebp - 4]
add eax, 0xf2c
mov edx, 0x6b5328
call fcn.004086ec
mov eax, dword [ebp - 4]
mov word [eax + 0xef8], 0x2a
mov eax, dword [ebp - 4]
mov byte [eax + 0xefa], 0
mov eax, dword [ebp - 4]
add eax, 0xefc
mov edx, 0x6b5340
call fcn.004086ec
mov eax, dword [ebp - 4]
add eax, 0xf00
mov edx, 0x6b5350
call fcn.004086ec
mov edx, 0x16
mov eax, dword [ebp - 4]
call fcn.006d6f38
mov eax, dword [ebp - 4]
call fcn.006d6ee4
mov edx, dword [ebp - 4]
mov dword [edx + 0x2378], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xfd0], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0xfd5], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xfdc], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0xfe0], 0xffffffff
mov eax, dword [ebp - 4]
mov byte [eax + 0xfd8], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xfd9], 0
mov eax, dword [ebp - 4]
add eax, 0xfc4
call fcn.0040830c
mov eax, dword [ebp - 4]
mov byte [eax + 0x45c0], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x229d], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xf17], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0x108c], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x2338], 0xffffff
mov eax, 0xff00000f
call fcn.00470bcc
mov edx, dword [ebp - 4]
mov dword [edx + 0x233c], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x2340], 0x1fffffff
mov eax, dword [ebp - 4]
mov dword [eax + 0x2344], 0x1fffffff
mov eax, dword [ebp - 4]
mov byte [eax + 0x7a4], 0
mov dword [ebp - 0x148], 0x114
lea eax, [ebp - 0x148]
push eax
call sub.kernel32.dll_GetVersionExW
cmp dword [ebp - 0x144], 5
ja 0x6b4ab7
cmp dword [ebp - 0x144], 5
jne 0x6b4ab3
cmp dword [ebp - 0x140], 1
jae 0x6b4ab7
xor eax, eax
jmp 0x6b4ab9
mov al, 1
mov edx, dword [ebp - 4]
mov byte [edx + 0x2299], al
cmp dword [ebp - 0x144], 6
ja 0x6b4ae1
cmp dword [ebp - 0x144], 6
jne 0x6b4add
cmp dword [ebp - 0x140], 1
jae 0x6b4ae1
xor eax, eax
jmp 0x6b4ae3
mov al, 1
mov edx, dword [ebp - 4]
mov byte [edx + 0x229a], al
mov eax, 0x6b5360
call fcn.006a617c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shr eax, 0x10
and eax, 0xff
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 5
setg al
mov edx, dword [ebp - 4]
mov byte [edx + 0x229c], al
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2299], 0
je 0x6b4b32
mov eax, dword [ebp - 4]
mov dword [eax + 0x81c], 0xb99d7f
jmp 0x6b4b3f
mov eax, dword [ebp - 4]
mov dword [eax + 0x81c], 0x808080
mov eax, dword [ebp - 4]
mov byte [eax + 0xe8e], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0xe82], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0xe84], 0x1fffffff
push 2
call sub.user32.dll_GetSystemMetrics
mov edx, dword [ebp - 4]
mov dword [edx + 0xe88], eax
call fcn.005c96d4
mov edx, dword [ebp - 4]
mov byte [edx + 0x229b], al
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xe90], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xe94], edx
mov dl, 1
mov eax, dword [0x43c438]
call fcn.00406664
mov edx, dword [ebp - 4]
mov dword [edx + 0x2228], eax
push 0
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5e21b4]
call fcn.005e86e0
mov edx, dword [ebp - 4]
mov dword [edx + 0x2380], eax
mov dl, 1
mov eax, dword [0x683238]
call fcn.006af3d8
mov edx, dword [ebp - 4]
mov dword [edx + 0x440c], eax
mov dl, 1
mov eax, dword [0x5c7354]
call fcn.005c772c
mov edx, dword [ebp - 4]
mov dword [edx + 0x44a0], eax
push 0xffffffffffffffff
or ecx, 0xffffffff
mov dl, 1
mov eax, dword [0x5e21b4]
call fcn.005e86e0
mov edx, dword [ebp - 4]
mov dword [edx + 0x44b8], eax
mov dl, 1
mov eax, dword [0x682ec4]
call fcn.00729974
mov edx, dword [ebp - 4]
mov dword [edx + 0x2214], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2214]
mov edx, dword [ebp - 4]
mov dword [eax + 0x2c], edx
mov dword [eax + 0x28], 0x6d78ec
mov eax, dword [ebp - 4]
mov byte [eax + 0x44c6], 0
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x682a74]
call fcn.004b3b8c
mov edx, dword [ebp - 4]
mov dword [edx + 0x2218], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2218]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2218]
xor edx, edx
call fcn.00490418
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2218]
xor edx, edx
call fcn.0049044c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2218]
xor edx, edx
call fcn.00490cfc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2218]
mov edx, dword [ebp - 4]
mov dword [eax + 0x2fc], edx
mov edx, dword [edx]
mov edx, dword [edx + 0x2b0]
mov dword [eax + 0x2f8], edx
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x682c94]
call fcn.00605fa8
mov edx, dword [ebp - 4]
mov dword [edx + 0x221c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x221c]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x221c]
xor edx, edx
call fcn.00490418
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x221c]
xor edx, edx
call fcn.0049044c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x221c]
xor edx, edx
call fcn.00490cfc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x221c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x31c], edx
mov edx, dword [edx]
mov edx, dword [edx + 0x2b4]
mov dword [eax + 0x318], edx
mov dl, 1
mov eax, dword [0x43fbac]
call fcn.0044e220
mov edx, dword [ebp - 4]
mov dword [edx + 0x2220], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2220]
mov byte [eax + 0x39], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2220]
mov dl, 1
call fcn.0044e15c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov edx, dword [ebp - 4]
mov dword [edx + 0x2390], eax
mov eax, dword [ebp - 4]
call fcn.006c884c
mov edx, dword [ebp - 4]
mov dword [edx + 0x2398], eax
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x6b5295
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x5e7a70]
call fcn.005ef04c
mov edx, dword [ebp - 4]
mov dword [edx + 0x810], eax
push 0
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x5e1f7c]
call fcn.005e8664
mov edx, dword [ebp - 4]
mov dword [edx + 0x7a8], eax
push 1
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x5e1f7c]
call fcn.005e8664
mov edx, dword [ebp - 4]
mov dword [edx + 0x7ac], eax
push 2
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x5e1f7c]
call fcn.005e8664
mov edx, dword [ebp - 4]
mov dword [edx + 0x7b0], eax
push 3
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x5e1f7c]
call fcn.005e8664
mov edx, dword [ebp - 4]
mov dword [edx + 0x7b4], eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x68992c]
call fcn.006a7378
mov edx, dword [ebp - 4]
mov dword [edx + 0x21a8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21a8]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21a8]
xor edx, edx
call fcn.00602764
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21a8]
xor edx, edx
call fcn.006027f8
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x2299]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x21a8]
mov byte [edx + 0x334], al
call fcn.005c96d4
test al, al
je 0x6b4e8e
mov eax, dword [ebp - 4]
cmp byte [eax + 0x229c], 0
jne 0x6b4e92
xor eax, eax
jmp 0x6b4e94
mov al, 1
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x21a8]
mov byte [edx + 0x394], al
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x21ac], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x21e8], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x21ec], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x21b8], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x21bc], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x21c0], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x21c4], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x21c8], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x21cc], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x21d0], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x21d4], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x21d8], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x408], 6
mov eax, dword [ebp - 4]
mov byte [eax + 0x45dc], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x21fc], 0
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x689f24]
call fcn.00727994
mov edx, dword [ebp - 4]
mov dword [edx + 0x21b0], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21b0]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21b0]
xor edx, edx
call fcn.00490cfc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21b0]
xor edx, edx
call fcn.004ad0dc
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x68a20c]
call fcn.00727794
mov edx, dword [ebp - 4]
mov dword [edx + 0x21b4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21b4]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21b4]
xor edx, edx
call fcn.00490cfc
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x68c7a0]
call fcn.006a629c
mov edx, dword [ebp - 4]
mov dword [edx + 0x21dc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21dc]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21dc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x80]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21dc]
xor edx, edx
call fcn.00490cfc
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x68c9dc]
call fcn.006ad1a4
mov edx, dword [ebp - 4]
mov dword [edx + 0x21e0], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21e0]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21e0]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x80]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21e0]
xor edx, edx
call fcn.00490cfc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21e0]
mov edx, 0x6b5388
call fcn.005fda68
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21e0]
xor edx, edx
call fcn.004ad0dc
mov eax, dword [ebp - 4]
mov dl, byte [eax + 0x2299]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21e0]
call fcn.005fdf78
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x68ccd8]
call fcn.006ae66c
mov edx, dword [ebp - 4]
mov dword [edx + 0x21e4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21e4]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21e4]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x80]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21e4]
xor edx, edx
call fcn.00490cfc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21e4]
mov edx, 0x6b5388
call fcn.005fda68
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21e4]
xor edx, edx
call fcn.004ad0dc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21e4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x2d4], edx
mov dword [eax + 0x2d0], 0x720b30
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x68cf38]
call fcn.006aec8c
mov edx, dword [ebp - 4]
mov dword [edx + 0x21f0], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21f0]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21f0]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x80]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21f0]
xor edx, edx
call fcn.00490cfc
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x690cb8]
call fcn.0049cb54
mov edx, dword [ebp - 4]
mov dword [edx + 0x21f4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21f4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x280], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21f4]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21f4]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x80]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21f4]
xor edx, edx
call fcn.00490cfc
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x689750]
call fcn.005a8818
mov edx, dword [ebp - 4]
mov dword [edx + 0x219c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x219c]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x219c]
xor edx, edx
call fcn.00490cfc
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x68954c]
call fcn.006006b4
mov edx, dword [ebp - 4]
mov dword [edx + 0x21a0], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21a0]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21a0]
xor edx, edx
call fcn.006027f8
mov eax, dword [ebp - 4]
mov byte [eax + 0x10ac], 0
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x4aa4e4]
call fcn.004b5b90
mov edx, dword [ebp - 4]
mov dword [edx + 0x44d8], eax
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x4aa4e4]
call fcn.004b5b90
mov edx, dword [ebp - 4]
mov dword [edx + 0x44dc], eax
mov dword [0x75ea7c], 0xffffffeb
mov eax, dword [ebp - 4]
cmp byte [ebp - 5], 0
je 0x6b52b7
call fcn.00406cf8
pop dword fs:[0]
add esp, 0xc
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret