Function at 0x526a24
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 3
add esp, 0xfffff004
push eax
dec eax
jne 0x526a2d
add esp, 0xfffff128
mov eax, dword [ebp - 4]
mov eax, 0x69d2ab
xor edx, edx
push ebx
push esi
push edi
mov dword [ebp - 0xda4], 0x6cf064
mov dword [ebp - 0xda0], esp
mov dword [ebp - 0xda8], eax
mov word [ebp - 0xd9c], 0
mov dword [ebp - 0xd90], edx
mov ecx, dword fs:[0]
mov dword [ebp - 0xdac], ecx
lea eax, [ebp - 0xdac]
mov dword fs:[0], eax
mov word [ebp - 0xd9c], 8
xor edx, edx
mov dword [ebp - 0xdb0], edx
lea edx, [ebp - 0x70]
mov ecx, dword [ebp - 0xdb0]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0xdb4], 0x6ff378
mov eax, dword [ebp - 0xdb4]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0xdb8], edx
mov ecx, dword [ebp - 0xdb8]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x22f4], eax
je 0x526ae4
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xdbc], ecx
lea ecx, [ebp - 0x60]
mov eax, dword [ebp - 0xdbc]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0xdc0], 0x6ff378
mov edx, dword [ebp - 0xdc0]
mov dword [ebp - 0x58], edx
mov dword [ebp - 0xdc4], ecx
mov eax, dword [ebp - 0xdc4]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2304], edx
je 0x526b3d
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xdc8], eax
lea eax, [ebp - 0x50]
mov edx, dword [ebp - 0xdc8]
mov dword [ebp - 0x48], edx
mov dword [ebp - 0xdcc], 0x6ff378
mov ecx, dword [ebp - 0xdcc]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0xdd0], eax
mov edx, dword [ebp - 0xdd0]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2314], ecx
je 0x526b95
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xdd4], edx
lea edx, [ebp - 0x40]
mov ecx, dword [ebp - 0xdd4]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0xdd8], 0x6ff378
mov eax, dword [ebp - 0xdd8]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xddc], edx
mov ecx, dword [ebp - 0xddc]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2324], eax
je 0x526bee
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xde0], ecx
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 0xde0]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xde4], 0x6ff378
mov edx, dword [ebp - 0xde4]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0xde8], ecx
mov eax, dword [ebp - 0xde8]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2334], edx
je 0x526c47
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
inc dword [ebp - 0xd90]
xor eax, eax
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0x5c
mov dword [ebp - 0x94], eax
xor edx, edx
mov dword [ebp - 0x90], edx
xor ecx, ecx
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0xdec], 0x40
mov dword [ebp - 0xdf0], 1
mov eax, dword [ebp - 0xdf0]
mov edx, dword [ebp - 0xdec]
cmp eax, edx
jbe 0x526ca6
lea ecx, [ebp - 0xdf0]
jmp 0x526cac
lea ecx, [ebp - 0xdec]
mov eax, dword [ecx]
xor edx, edx
mov dword [ebp - 0x98], eax
lea ecx, [ebp - 0xa8]
inc dword [ebp - 0xd90]
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0x74
mov dword [ebp - 0xdf4], edx
mov eax, dword [ebp - 0xdf4]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xdf8], 0x6ff378
mov edx, dword [ebp - 0xdf8]
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0xdfc], ecx
mov eax, dword [ebp - 0xdfc]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2344], edx
je 0x526d28
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0x8c
mov dword [ebp - 0xe00], eax
lea eax, [ebp - 0xb8]
mov edx, dword [ebp - 0xe00]
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xe04], 0x6ff378
mov ecx, dword [ebp - 0xe04]
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0xe08], eax
mov edx, dword [ebp - 0xe08]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2354], ecx
je 0x526d9b
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0xa4
mov dword [ebp - 0xe0c], edx
lea edx, [ebp - 0x4f8]
mov ecx, dword [ebp - 0xe0c]
mov dword [ebp - 0x4f0], ecx
mov dword [ebp - 0xe10], 0x6ff378
mov eax, dword [ebp - 0xe10]
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0xe14], edx
mov ecx, dword [ebp - 0xe14]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2364], eax
je 0x526e0f
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xe18], ecx
lea ecx, [ebp - 0x4e8]
mov eax, dword [ebp - 0xe18]
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0xe1c], 0x6ff378
mov edx, dword [ebp - 0xe1c]
mov dword [ebp - 0x4e0], edx
mov dword [ebp - 0xe20], ecx
mov eax, dword [ebp - 0xe20]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2374], edx
je 0x526e71
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xe24], eax
lea eax, [ebp - 0x4d8]
mov edx, dword [ebp - 0xe24]
mov dword [ebp - 0x4d0], edx
mov dword [ebp - 0xe28], 0x6ff378
mov ecx, dword [ebp - 0xe28]
mov dword [ebp - 0x4d0], ecx
mov dword [ebp - 0xe2c], eax
mov edx, dword [ebp - 0xe2c]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2384], ecx
je 0x526ed2
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xe30], edx
lea edx, [ebp - 0x4c8]
mov ecx, dword [ebp - 0xe30]
mov dword [ebp - 0x4c0], ecx
mov dword [ebp - 0xe34], 0x6ff378
mov eax, dword [ebp - 0xe34]
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0xe38], edx
mov ecx, dword [ebp - 0xe38]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2394], eax
je 0x526f34
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xe3c], ecx
lea ecx, [ebp - 0x4b8]
mov eax, dword [ebp - 0xe3c]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0xe40], 0x6ff378
mov edx, dword [ebp - 0xe40]
mov dword [ebp - 0x4b0], edx
mov dword [ebp - 0xe44], ecx
mov eax, dword [ebp - 0xe44]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x23a4], edx
je 0x526f96
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xe48], eax
lea eax, [ebp - 0x4a8]
mov edx, dword [ebp - 0xe48]
mov dword [ebp - 0x4a0], edx
mov dword [ebp - 0xe4c], 0x6ff378
mov ecx, dword [ebp - 0xe4c]
mov dword [ebp - 0x4a0], ecx
mov dword [ebp - 0xe50], eax
mov edx, dword [ebp - 0xe50]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x23b4], ecx
je 0x526ff7
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xe54], edx
lea edx, [ebp - 0x498]
mov ecx, dword [ebp - 0xe54]
mov dword [ebp - 0x490], ecx
mov dword [ebp - 0xe58], 0x6ff378
mov eax, dword [ebp - 0xe58]
mov dword [ebp - 0x490], eax
mov dword [ebp - 0xe5c], edx
mov ecx, dword [ebp - 0xe5c]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x23c4], eax
je 0x527059
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xe60], ecx
lea ecx, [ebp - 0x488]
mov eax, dword [ebp - 0xe60]
mov dword [ebp - 0x480], eax
mov dword [ebp - 0xe64], 0x6ff378
mov edx, dword [ebp - 0xe64]
mov dword [ebp - 0x480], edx
mov dword [ebp - 0xe68], ecx
mov eax, dword [ebp - 0xe68]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x23d4], edx
je 0x5270bb
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xe6c], eax
lea eax, [ebp - 0x478]
mov edx, dword [ebp - 0xe6c]
mov dword [ebp - 0x470], edx
mov dword [ebp - 0xe70], 0x6ff378
mov ecx, dword [ebp - 0xe70]
mov dword [ebp - 0x470], ecx
mov dword [ebp - 0xe74], eax
mov edx, dword [ebp - 0xe74]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x23e4], ecx
je 0x52711c
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0x434], edx
xor ecx, ecx
mov dword [ebp - 0x430], ecx
xor eax, eax
mov dword [ebp - 0x420], eax
mov dword [ebp - 0xe78], 0x40
mov dword [ebp - 0xe7c], 1
mov edx, dword [ebp - 0xe7c]
mov ecx, dword [ebp - 0xe78]
cmp edx, ecx
jbe 0x527166
lea eax, [ebp - 0xe7c]
jmp 0x52716c
lea eax, [ebp - 0xe78]
mov edx, dword [eax]
xor ecx, ecx
mov dword [ebp - 0x438], edx
xor eax, eax
inc dword [ebp - 0xd90]
mov dword [ebp - 0x414], ecx
mov dword [ebp - 0x410], eax
xor edx, edx
mov dword [ebp - 0x400], edx
mov dword [ebp - 0xe80], 0x40
mov dword [ebp - 0xe84], 1
mov ecx, dword [ebp - 0xe84]
mov eax, dword [ebp - 0xe80]
cmp ecx, eax
jbe 0x5271be
lea edx, [ebp - 0xe84]
jmp 0x5271c4
lea edx, [ebp - 0xe80]
mov eax, dword [edx]
xor ecx, ecx
mov dword [ebp - 0x418], eax
xor eax, eax
inc dword [ebp - 0xd90]
mov dword [ebp - 0x3f4], ecx
mov dword [ebp - 0x3f0], eax
xor edx, edx
mov dword [ebp - 0x3e0], edx
mov dword [ebp - 0xe88], 0x40
mov dword [ebp - 0xe8c], 1
mov ecx, dword [ebp - 0xe8c]
mov eax, dword [ebp - 0xe88]
cmp ecx, eax
jbe 0x527216
lea edx, [ebp - 0xe8c]
jmp 0x52721c
lea edx, [ebp - 0xe88]
mov eax, dword [edx]
xor ecx, ecx
mov dword [ebp - 0x3f8], eax
xor eax, eax
inc dword [ebp - 0xd90]
mov dword [ebp - 0x3d4], ecx
mov dword [ebp - 0x3d0], eax
xor edx, edx
mov dword [ebp - 0x3c0], edx
mov dword [ebp - 0xe90], 0x40
mov dword [ebp - 0xe94], 1
mov ecx, dword [ebp - 0xe94]
mov eax, dword [ebp - 0xe90]
cmp ecx, eax
jbe 0x52726e
lea edx, [ebp - 0xe94]
jmp 0x527274
lea edx, [ebp - 0xe90]
mov eax, dword [edx]
xor ecx, ecx
mov dword [ebp - 0x3d8], eax
inc dword [ebp - 0xd90]
mov dword [ebp - 0xe98], ecx
mov eax, dword [ebp - 0xe98]
lea ecx, [ebp - 0x3b8]
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0xe9c], 0x6ff378
mov edx, dword [ebp - 0xe9c]
mov dword [ebp - 0x3b0], edx
mov dword [ebp - 0xea0], ecx
mov eax, dword [ebp - 0xea0]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x23f4], edx
je 0x5272de
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xea4], eax
lea eax, [ebp - 0x3a8]
mov edx, dword [ebp - 0xea4]
mov dword [ebp - 0x3a0], edx
mov dword [ebp - 0xea8], 0x6ff378
mov ecx, dword [ebp - 0xea8]
mov dword [ebp - 0x3a0], ecx
mov dword [ebp - 0xeac], eax
mov edx, dword [ebp - 0xeac]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2404], ecx
je 0x52733f
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xeb0], edx
lea edx, [ebp - 0x398]
mov ecx, dword [ebp - 0xeb0]
mov dword [ebp - 0x390], ecx
mov dword [ebp - 0xeb4], 0x6ff378
mov eax, dword [ebp - 0xeb4]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0xeb8], edx
mov ecx, dword [ebp - 0xeb8]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2414], eax
je 0x5273a1
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xebc], ecx
lea ecx, [ebp - 0x388]
mov eax, dword [ebp - 0xebc]
mov dword [ebp - 0x380], eax
mov dword [ebp - 0xec0], 0x6ff378
mov edx, dword [ebp - 0xec0]
mov dword [ebp - 0x380], edx
mov dword [ebp - 0xec4], ecx
mov eax, dword [ebp - 0xec4]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2424], edx
je 0x527403
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xec8], eax
lea eax, [ebp - 0x378]
mov edx, dword [ebp - 0xec8]
mov dword [ebp - 0x370], edx
mov dword [ebp - 0xecc], 0x6ff378
mov ecx, dword [ebp - 0xecc]
mov dword [ebp - 0x370], ecx
mov dword [ebp - 0xed0], eax
mov edx, dword [ebp - 0xed0]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2434], ecx
je 0x527464
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xed4], edx
lea edx, [ebp - 0x368]
mov ecx, dword [ebp - 0xed4]
mov dword [ebp - 0x360], ecx
mov dword [ebp - 0xed8], 0x6ff378
mov eax, dword [ebp - 0xed8]
mov dword [ebp - 0x360], eax
mov dword [ebp - 0xedc], edx
mov ecx, dword [ebp - 0xedc]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2444], eax
je 0x5274c6
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xee0], ecx
lea ecx, [ebp - 0x358]
mov eax, dword [ebp - 0xee0]
mov dword [ebp - 0x350], eax
mov dword [ebp - 0xee4], 0x6ff378
mov edx, dword [ebp - 0xee4]
mov dword [ebp - 0x350], edx
mov dword [ebp - 0xee8], ecx
mov eax, dword [ebp - 0xee8]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2454], edx
je 0x527528
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xeec], eax
lea eax, [ebp - 0x348]
mov edx, dword [ebp - 0xeec]
mov dword [ebp - 0x340], edx
mov dword [ebp - 0xef0], 0x6ff378
mov ecx, dword [ebp - 0xef0]
mov dword [ebp - 0x340], ecx
mov dword [ebp - 0xef4], eax
mov edx, dword [ebp - 0xef4]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2464], ecx
je 0x527589
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xef8], edx
lea edx, [ebp - 0x338]
mov ecx, dword [ebp - 0xef8]
mov dword [ebp - 0x330], ecx
mov dword [ebp - 0xefc], 0x6ff378
mov eax, dword [ebp - 0xefc]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0xf00], edx
mov ecx, dword [ebp - 0xf00]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2474], eax
je 0x5275f1
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xf04], ecx
lea ecx, [ebp - 0x328]
mov eax, dword [ebp - 0xf04]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0xf08], 0x6ff378
mov edx, dword [ebp - 0xf08]
mov dword [ebp - 0x320], edx
mov dword [ebp - 0xf0c], ecx
mov eax, dword [ebp - 0xf0c]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2484], edx
je 0x527653
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xf10], eax
lea eax, [ebp - 0x318]
mov edx, dword [ebp - 0xf10]
mov dword [ebp - 0x310], edx
mov dword [ebp - 0xf14], 0x6ff378
mov ecx, dword [ebp - 0xf14]
mov dword [ebp - 0x310], ecx
mov dword [ebp - 0xf18], eax
mov edx, dword [ebp - 0xf18]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2494], ecx
je 0x5276b4
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xf1c], edx
lea edx, [ebp - 0x308]
mov ecx, dword [ebp - 0xf1c]
mov dword [ebp - 0x300], ecx
mov dword [ebp - 0xf20], 0x6ff378
mov eax, dword [ebp - 0xf20]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0xf24], edx
mov ecx, dword [ebp - 0xf24]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x24a4], eax
je 0x527716
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xf28], ecx
lea ecx, [ebp - 0x2f8]
mov eax, dword [ebp - 0xf28]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0xf2c], 0x6ff378
mov edx, dword [ebp - 0xf2c]
mov dword [ebp - 0x2f0], edx
mov dword [ebp - 0xf30], ecx
mov eax, dword [ebp - 0xf30]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x24b4], edx
je 0x527778
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xf34], eax
lea eax, [ebp - 0x2e8]
mov edx, dword [ebp - 0xf34]
mov dword [ebp - 0x2e0], edx
mov dword [ebp - 0xf38], 0x6ff378
mov ecx, dword [ebp - 0xf38]
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 0xf3c], eax
mov edx, dword [ebp - 0xf3c]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x24c4], ecx
je 0x5277d9
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xf40], edx
lea edx, [ebp - 0x2d8]
mov ecx, dword [ebp - 0xf40]
mov dword [ebp - 0x2d0], ecx
mov dword [ebp - 0xf44], 0x6ff378
mov eax, dword [ebp - 0xf44]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0xf48], edx
mov ecx, dword [ebp - 0xf48]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x24d4], eax
je 0x52783b
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xf4c], ecx
lea ecx, [ebp - 0x2c8]
mov eax, dword [ebp - 0xf4c]
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0xf50], 0x6ff378
mov edx, dword [ebp - 0xf50]
mov dword [ebp - 0x2c0], edx
mov dword [ebp - 0xf54], ecx
mov eax, dword [ebp - 0xf54]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x24e4], edx
je 0x52789d
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xf58], eax
lea eax, [ebp - 0x2b8]
mov edx, dword [ebp - 0xf58]
mov dword [ebp - 0x2b0], edx
mov dword [ebp - 0xf5c], 0x6ff378
mov ecx, dword [ebp - 0xf5c]
mov dword [ebp - 0x2b0], ecx
mov dword [ebp - 0xf60], eax
mov edx, dword [ebp - 0xf60]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x24f4], ecx
je 0x5278fe
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xf64], edx
lea edx, [ebp - 0x2a8]
mov ecx, dword [ebp - 0xf64]
mov dword [ebp - 0x2a0], ecx
mov dword [ebp - 0xf68], 0x6ff378
mov eax, dword [ebp - 0xf68]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0xf6c], edx
mov ecx, dword [ebp - 0xf6c]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2504], eax
je 0x527960
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xf70], ecx
lea ecx, [ebp - 0x298]
mov eax, dword [ebp - 0xf70]
mov dword [ebp - 0x290], eax
mov dword [ebp - 0xf74], 0x6ff378
mov edx, dword [ebp - 0xf74]
mov dword [ebp - 0x290], edx
mov dword [ebp - 0xf78], ecx
mov eax, dword [ebp - 0xf78]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2514], edx
je 0x5279c2
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xf7c], eax
lea eax, [ebp - 0x288]
mov edx, dword [ebp - 0xf7c]
mov dword [ebp - 0x280], edx
mov dword [ebp - 0xf80], 0x6ff378
mov ecx, dword [ebp - 0xf80]
mov dword [ebp - 0x280], ecx
mov dword [ebp - 0xf84], eax
mov edx, dword [ebp - 0xf84]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2524], ecx
je 0x527a23
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xf88], edx
lea edx, [ebp - 0x278]
mov ecx, dword [ebp - 0xf88]
mov dword [ebp - 0x270], ecx
mov dword [ebp - 0xf8c], 0x6ff378
mov eax, dword [ebp - 0xf8c]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0xf90], edx
mov ecx, dword [ebp - 0xf90]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2534], eax
je 0x527a85
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xf94], ecx
lea ecx, [ebp - 0x268]
mov eax, dword [ebp - 0xf94]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0xf98], 0x6ff378
mov edx, dword [ebp - 0xf98]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0xf9c], ecx
mov eax, dword [ebp - 0xf9c]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2544], edx
je 0x527ae7
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xfa0], eax
lea eax, [ebp - 0x258]
mov edx, dword [ebp - 0xfa0]
mov dword [ebp - 0x250], edx
mov dword [ebp - 0xfa4], 0x6ff378
mov ecx, dword [ebp - 0xfa4]
mov dword [ebp - 0x250], ecx
mov dword [ebp - 0xfa8], eax
mov edx, dword [ebp - 0xfa8]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2554], ecx
je 0x527b48
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xfac], edx
lea edx, [ebp - 0x248]
mov ecx, dword [ebp - 0xfac]
mov dword [ebp - 0x240], ecx
mov dword [ebp - 0xfb0], 0x6ff378
mov eax, dword [ebp - 0xfb0]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0xfb4], edx
mov ecx, dword [ebp - 0xfb4]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2564], eax
je 0x527baa
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xfb8], ecx
lea ecx, [ebp - 0x238]
mov eax, dword [ebp - 0xfb8]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0xfbc], 0x6ff378
mov edx, dword [ebp - 0xfbc]
mov dword [ebp - 0x230], edx
mov dword [ebp - 0xfc0], ecx
mov eax, dword [ebp - 0xfc0]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2574], edx
je 0x527c0c
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xfc4], eax
lea eax, [ebp - 0x228]
mov edx, dword [ebp - 0xfc4]
mov dword [ebp - 0x220], edx
mov dword [ebp - 0xfc8], 0x6ff378
mov ecx, dword [ebp - 0xfc8]
mov dword [ebp - 0x220], ecx
mov dword [ebp - 0xfcc], eax
mov edx, dword [ebp - 0xfcc]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2584], ecx
je 0x527c6d
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xfd0], edx
lea edx, [ebp - 0x218]
mov ecx, dword [ebp - 0xfd0]
mov dword [ebp - 0x210], ecx
mov dword [ebp - 0xfd4], 0x6ff378
mov eax, dword [ebp - 0xfd4]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0xfd8], edx
mov ecx, dword [ebp - 0xfd8]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2594], eax
je 0x527ccf
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0xfdc], ecx
lea ecx, [ebp - 0x208]
mov eax, dword [ebp - 0xfdc]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0xfe0], 0x6ff378
mov edx, dword [ebp - 0xfe0]
mov dword [ebp - 0x200], edx
mov dword [ebp - 0xfe4], ecx
mov eax, dword [ebp - 0xfe4]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x25a4], edx
je 0x527d31
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0xfe8], eax
lea eax, [ebp - 0x1f8]
mov edx, dword [ebp - 0xfe8]
mov dword [ebp - 0x1f0], edx
mov dword [ebp - 0xfec], 0x6ff378
mov ecx, dword [ebp - 0xfec]
mov dword [ebp - 0x1f0], ecx
mov dword [ebp - 0xff0], eax
mov edx, dword [ebp - 0xff0]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x25b4], ecx
je 0x527d92
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0xff4], edx
lea edx, [ebp - 0x1e8]
mov ecx, dword [ebp - 0xff4]
mov dword [ebp - 0x1e0], ecx
mov dword [ebp - 0xff8], 0x6ff378
mov eax, dword [ebp - 0xff8]
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0xffc], edx
mov ecx, dword [ebp - 0xffc]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x25c4], eax
je 0x527df4
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0x1000], ecx
lea ecx, [ebp - 0x1d8]
mov eax, dword [ebp - 0x1000]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1004], 0x6ff378
mov edx, dword [ebp - 0x1004]
mov dword [ebp - 0x1d0], edx
mov dword [ebp - 0x1008], ecx
mov eax, dword [ebp - 0x1008]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x25d4], edx
je 0x527e56
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0x100c], eax
lea eax, [ebp - 0x1c8]
mov edx, dword [ebp - 0x100c]
mov dword [ebp - 0x1c0], edx
mov dword [ebp - 0x1010], 0x6ff378
mov ecx, dword [ebp - 0x1010]
mov dword [ebp - 0x1c0], ecx
mov dword [ebp - 0x1014], eax
mov edx, dword [ebp - 0x1014]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x25e4], ecx
je 0x527eb7
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0x1018], edx
lea edx, [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1018]
mov dword [ebp - 0x1b0], ecx
mov dword [ebp - 0x101c], 0x6ff378
mov eax, dword [ebp - 0x101c]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1020], edx
mov ecx, dword [ebp - 0x1020]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x25f4], eax
je 0x527f19
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0x1024], ecx
lea ecx, [ebp - 0x1a8]
mov eax, dword [ebp - 0x1024]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1028], 0x6ff378
mov edx, dword [ebp - 0x1028]
mov dword [ebp - 0x1a0], edx
mov dword [ebp - 0x102c], ecx
mov eax, dword [ebp - 0x102c]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2604], edx
je 0x527f7b
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0x1030], eax
lea eax, [ebp - 0x198]
mov edx, dword [ebp - 0x1030]
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x1034], 0x6ff378
mov ecx, dword [ebp - 0x1034]
mov dword [ebp - 0x190], ecx
mov dword [ebp - 0x1038], eax
mov edx, dword [ebp - 0x1038]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2614], ecx
je 0x527fdc
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0x103c], edx
lea edx, [ebp - 0x188]
mov ecx, dword [ebp - 0x103c]
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0x1040], 0x6ff378
mov eax, dword [ebp - 0x1040]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x1044], edx
mov ecx, dword [ebp - 0x1044]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2624], eax
je 0x52803e
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0x1048], ecx
lea ecx, [ebp - 0x178]
mov eax, dword [ebp - 0x1048]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x104c], 0x6ff378
mov edx, dword [ebp - 0x104c]
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x1050], ecx
mov eax, dword [ebp - 0x1050]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2634], edx
je 0x5280a0
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0x1054], eax
lea eax, [ebp - 0x168]
mov edx, dword [ebp - 0x1054]
mov dword [ebp - 0x160], edx
mov dword [ebp - 0x1058], 0x6ff378
mov ecx, dword [ebp - 0x1058]
mov dword [ebp - 0x160], ecx
mov dword [ebp - 0x105c], eax
mov edx, dword [ebp - 0x105c]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2644], ecx
je 0x528101
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0x1060], edx
lea edx, [ebp - 0x158]
mov ecx, dword [ebp - 0x1060]
mov dword [ebp - 0x150], ecx
mov dword [ebp - 0x1064], 0x6ff378
mov eax, dword [ebp - 0x1064]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x1068], edx
mov ecx, dword [ebp - 0x1068]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2654], eax
je 0x528163
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0x106c], ecx
lea ecx, [ebp - 0x148]
mov eax, dword [ebp - 0x106c]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x1070], 0x6ff378
mov edx, dword [ebp - 0x1070]
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x1074], ecx
mov eax, dword [ebp - 0x1074]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2664], edx
je 0x5281c5
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0x1078], eax
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x1078]
mov dword [ebp - 0x130], edx
mov dword [ebp - 0x107c], 0x6ff378
mov ecx, dword [ebp - 0x107c]
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x1080], eax
mov edx, dword [ebp - 0x1080]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2674], ecx
je 0x528226
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0x1084], edx
lea edx, [ebp - 0x128]
mov ecx, dword [ebp - 0x1084]
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x1088], 0x6ff378
mov eax, dword [ebp - 0x1088]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x108c], edx
mov ecx, dword [ebp - 0x108c]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2684], eax
je 0x528288
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0x1090], ecx
lea ecx, [ebp - 0x118]
mov eax, dword [ebp - 0x1090]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x1094], 0x6ff378
mov edx, dword [ebp - 0x1094]
mov dword [ebp - 0x110], edx
mov dword [ebp - 0x1098], ecx
mov eax, dword [ebp - 0x1098]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2694], edx
je 0x5282ea
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0x109c], eax
lea eax, [ebp - 0x108]
mov edx, dword [ebp - 0x109c]
mov dword [ebp - 0x100], edx
mov dword [ebp - 0x10a0], 0x6ff378
mov ecx, dword [ebp - 0x10a0]
mov dword [ebp - 0x100], ecx
mov dword [ebp - 0x10a4], eax
mov edx, dword [ebp - 0x10a4]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x26a4], ecx
je 0x52834b
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0x10a8], edx
lea edx, [ebp - 0xf8]
mov ecx, dword [ebp - 0x10a8]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0x10ac], 0x6ff378
mov eax, dword [ebp - 0x10ac]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x10b0], edx
mov ecx, dword [ebp - 0x10b0]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x26b4], eax
je 0x5283ad
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0x10b4], ecx
lea ecx, [ebp - 0xe8]
mov eax, dword [ebp - 0x10b4]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x10b8], 0x6ff378
mov edx, dword [ebp - 0x10b8]
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0x10bc], ecx
mov eax, dword [ebp - 0x10bc]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x26c4], edx
je 0x52840f
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0x10c0], eax
lea eax, [ebp - 0xd8]
mov edx, dword [ebp - 0x10c0]
mov dword [ebp - 0xd0], edx
mov dword [ebp - 0x10c4], 0x6ff378
mov ecx, dword [ebp - 0x10c4]
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0x10c8], eax
mov edx, dword [ebp - 0x10c8]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x26d4], ecx
je 0x528470
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0x10cc], edx
lea edx, [ebp - 0xc8]
mov ecx, dword [ebp - 0x10cc]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0x10d0], 0x6ff378
mov eax, dword [ebp - 0x10d0]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x10d4], edx
mov ecx, dword [ebp - 0x10d4]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x26e4], eax
je 0x5284d2
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
inc dword [ebp - 0xd90]
inc dword [ebp - 0xd90]
inc dword [ebp - 0xd90]
xor ecx, ecx
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0x38c
mov dword [ebp - 0x10d8], ecx
lea ecx, [ebp - 0x620]
mov eax, dword [ebp - 0x10d8]
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x10dc], 0x6ff378
mov edx, dword [ebp - 0x10dc]
mov dword [ebp - 0x618], edx
mov dword [ebp - 0x10e0], ecx
mov eax, dword [ebp - 0x10e0]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x26f4], edx
je 0x528558
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0x10e4], eax
lea eax, [ebp - 0x610]
mov edx, dword [ebp - 0x10e4]
mov dword [ebp - 0x608], edx
mov dword [ebp - 0x10e8], 0x6ff378
mov ecx, dword [ebp - 0x10e8]
mov dword [ebp - 0x608], ecx
mov dword [ebp - 0x10ec], eax
mov edx, dword [ebp - 0x10ec]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2704], ecx
je 0x5285b9
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0x10f0], edx
lea edx, [ebp - 0x600]
mov ecx, dword [ebp - 0x10f0]
mov dword [ebp - 0x5f8], ecx
mov dword [ebp - 0x10f4], 0x6ff378
mov eax, dword [ebp - 0x10f4]
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x10f8], edx
mov ecx, dword [ebp - 0x10f8]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2714], eax
je 0x52861b
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0x10fc], ecx
lea ecx, [ebp - 0x5f0]
mov eax, dword [ebp - 0x10fc]
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x1100], 0x6ff378
mov edx, dword [ebp - 0x1100]
mov dword [ebp - 0x5e8], edx
mov dword [ebp - 0x1104], ecx
mov eax, dword [ebp - 0x1104]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2724], edx
je 0x52867d
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0x1108], eax
lea eax, [ebp - 0x5e0]
mov edx, dword [ebp - 0x1108]
mov dword [ebp - 0x5d8], edx
mov dword [ebp - 0x110c], 0x6ff378
mov ecx, dword [ebp - 0x110c]
mov dword [ebp - 0x5d8], ecx
mov dword [ebp - 0x1110], eax
mov edx, dword [ebp - 0x1110]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2734], ecx
je 0x5286de
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0x584], edx
xor ecx, ecx
mov dword [ebp - 0x580], ecx
xor eax, eax
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x1114], 0x40
mov dword [ebp - 0x1118], 1
mov edx, dword [ebp - 0x1118]
mov ecx, dword [ebp - 0x1114]
cmp edx, ecx
jbe 0x528728
lea eax, [ebp - 0x1118]
jmp 0x52872e
lea eax, [ebp - 0x1114]
mov edx, dword [eax]
xor ecx, ecx
mov dword [ebp - 0x588], edx
xor eax, eax
inc dword [ebp - 0xd90]
mov dword [ebp - 0x564], ecx
mov dword [ebp - 0x560], eax
xor edx, edx
mov dword [ebp - 0x550], edx
mov dword [ebp - 0x111c], 0x40
mov dword [ebp - 0x1120], 1
mov ecx, dword [ebp - 0x1120]
mov eax, dword [ebp - 0x111c]
cmp ecx, eax
jbe 0x528780
lea edx, [ebp - 0x1120]
jmp 0x528786
lea edx, [ebp - 0x111c]
mov eax, dword [edx]
xor ecx, ecx
mov dword [ebp - 0x568], eax
xor eax, eax
inc dword [ebp - 0xd90]
mov dword [ebp - 0x544], ecx
mov dword [ebp - 0x540], eax
xor edx, edx
mov dword [ebp - 0x530], edx
mov dword [ebp - 0x1124], 0x40
mov dword [ebp - 0x1128], 1
mov ecx, dword [ebp - 0x1128]
mov eax, dword [ebp - 0x1124]
cmp ecx, eax
jbe 0x5287d8
lea edx, [ebp - 0x1128]
jmp 0x5287de
lea edx, [ebp - 0x1124]
mov eax, dword [edx]
xor ecx, ecx
mov dword [ebp - 0x548], eax
xor eax, eax
inc dword [ebp - 0xd90]
mov dword [ebp - 0x524], ecx
mov dword [ebp - 0x520], eax
xor edx, edx
mov dword [ebp - 0x510], edx
mov dword [ebp - 0x112c], 0x40
mov dword [ebp - 0x1130], 1
mov ecx, dword [ebp - 0x1130]
mov eax, dword [ebp - 0x112c]
cmp ecx, eax
jbe 0x528830
lea edx, [ebp - 0x1130]
jmp 0x528836
lea edx, [ebp - 0x112c]
mov eax, dword [edx]
xor ecx, ecx
mov dword [ebp - 0x528], eax
inc dword [ebp - 0xd90]
inc dword [ebp - 0xd90]
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0x404
mov dword [ebp - 0x1134], ecx
lea ecx, [ebp - 0x740]
mov eax, dword [ebp - 0x1134]
mov dword [ebp - 0x738], eax
mov dword [ebp - 0x1138], 0x6ff378
mov edx, dword [ebp - 0x1138]
mov dword [ebp - 0x738], edx
mov dword [ebp - 0x113c], ecx
mov eax, dword [ebp - 0x113c]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2744], edx
je 0x5288b8
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0x1140], eax
lea eax, [ebp - 0x730]
mov edx, dword [ebp - 0x1140]
mov dword [ebp - 0x728], edx
mov dword [ebp - 0x1144], 0x6ff378
mov ecx, dword [ebp - 0x1144]
mov dword [ebp - 0x728], ecx
mov dword [ebp - 0x1148], eax
mov edx, dword [ebp - 0x1148]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2754], ecx
je 0x528919
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0x114c], edx
lea edx, [ebp - 0x720]
mov ecx, dword [ebp - 0x114c]
mov dword [ebp - 0x718], ecx
mov dword [ebp - 0x1150], 0x6ff378
mov eax, dword [ebp - 0x1150]
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x1154], edx
mov ecx, dword [ebp - 0x1154]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2764], eax
je 0x52897b
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov dword [ebp - 0x1158], ecx
lea ecx, [ebp - 0x710]
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x708], eax
mov dword [ebp - 0x115c], 0x6ff378
mov edx, dword [ebp - 0x115c]
mov dword [ebp - 0x708], edx
mov dword [ebp - 0x1160], ecx
mov eax, dword [ebp - 0x1160]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2774], edx
je 0x5289dd
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov dword [ebp - 0x1164], eax
lea eax, [ebp - 0x700]
mov edx, dword [ebp - 0x1164]
mov dword [ebp - 0x6f8], edx
mov dword [ebp - 0x1168], 0x6ff378
mov ecx, dword [ebp - 0x1168]
mov dword [ebp - 0x6f8], ecx
mov dword [ebp - 0x116c], eax
mov edx, dword [ebp - 0x116c]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2784], ecx
je 0x528a3e
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov dword [ebp - 0x6a4], edx
xor ecx, ecx
mov dword [ebp - 0x6a0], ecx
xor eax, eax
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x1170], 0x40
mov dword [ebp - 0x1174], 1
mov edx, dword [ebp - 0x1174]
mov ecx, dword [ebp - 0x1170]
cmp edx, ecx
jbe 0x528a88
lea eax, [ebp - 0x1174]
jmp 0x528a8e
lea eax, [ebp - 0x1170]
mov edx, dword [eax]
xor ecx, ecx
mov dword [ebp - 0x6a8], edx
xor eax, eax
inc dword [ebp - 0xd90]
mov dword [ebp - 0x684], ecx
mov dword [ebp - 0x680], eax
xor edx, edx
mov dword [ebp - 0x670], edx
mov dword [ebp - 0x1178], 0x40
mov dword [ebp - 0x117c], 1
mov ecx, dword [ebp - 0x117c]
mov eax, dword [ebp - 0x1178]
cmp ecx, eax
jbe 0x528ae0
lea edx, [ebp - 0x117c]
jmp 0x528ae6
lea edx, [ebp - 0x1178]
mov eax, dword [edx]
xor ecx, ecx
mov dword [ebp - 0x688], eax
xor eax, eax
inc dword [ebp - 0xd90]
mov dword [ebp - 0x664], ecx
mov dword [ebp - 0x660], eax
xor edx, edx
mov dword [ebp - 0x650], edx
mov dword [ebp - 0x1180], 0x40
mov dword [ebp - 0x1184], 1
mov ecx, dword [ebp - 0x1184]
mov eax, dword [ebp - 0x1180]
cmp ecx, eax
jbe 0x528b38
lea edx, [ebp - 0x1184]
jmp 0x528b3e
lea edx, [ebp - 0x1180]
mov eax, dword [edx]
xor ecx, ecx
mov dword [ebp - 0x668], eax
xor eax, eax
inc dword [ebp - 0xd90]
mov dword [ebp - 0x644], ecx
mov dword [ebp - 0x640], eax
xor edx, edx
mov dword [ebp - 0x630], edx
mov dword [ebp - 0x1188], 0x40
mov dword [ebp - 0x118c], 1
mov ecx, dword [ebp - 0x118c]
mov eax, dword [ebp - 0x1188]
cmp ecx, eax
jbe 0x528b90
lea edx, [ebp - 0x118c]
jmp 0x528b96
lea edx, [ebp - 0x1188]
mov eax, dword [edx]
xor ecx, ecx
mov dword [ebp - 0x648], eax
inc dword [ebp - 0xd90]
inc dword [ebp - 0xd90]
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0x47c
mov dword [ebp - 0x1190], ecx
lea ecx, [ebp - 0x750]
mov eax, dword [ebp - 0x1190]
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x1194], 0x6ff378
mov edx, dword [ebp - 0x1194]
mov dword [ebp - 0x748], edx
mov dword [ebp - 0x1198], ecx
mov eax, dword [ebp - 0x1198]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2794], edx
je 0x528c18
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0x494
mov dword [ebp - 0x119c], eax
lea eax, [ebp - 0x760]
mov edx, dword [ebp - 0x119c]
mov dword [ebp - 0x758], edx
mov dword [ebp - 0x11a0], 0x6ff378
mov ecx, dword [ebp - 0x11a0]
mov dword [ebp - 0x758], ecx
mov dword [ebp - 0x11a4], eax
mov edx, dword [ebp - 0x11a4]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x27a4], ecx
je 0x528c8b
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0x4ac
mov dword [ebp - 0x11a8], edx
lea edx, [ebp - 0x770]
mov ecx, dword [ebp - 0x11a8]
mov dword [ebp - 0x768], ecx
mov dword [ebp - 0x11ac], 0x6ff378
mov eax, dword [ebp - 0x11ac]
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x11b0], edx
mov ecx, dword [ebp - 0x11b0]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x27b4], eax
je 0x528cff
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0x4c4
mov dword [ebp - 0x11b4], ecx
lea ecx, [ebp - 0x780]
mov eax, dword [ebp - 0x11b4]
mov dword [ebp - 0x778], eax
mov dword [ebp - 0x11b8], 0x6ff378
mov edx, dword [ebp - 0x11b8]
mov dword [ebp - 0x778], edx
mov dword [ebp - 0x11bc], ecx
mov eax, dword [ebp - 0x11bc]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x27c4], edx
je 0x528d73
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor eax, eax
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0x4dc
mov dword [ebp - 0x11c0], eax
lea eax, [ebp - 0x790]
mov edx, dword [ebp - 0x11c0]
mov dword [ebp - 0x788], edx
mov dword [ebp - 0x11c4], 0x6ff378
mov ecx, dword [ebp - 0x11c4]
mov dword [ebp - 0x788], ecx
mov dword [ebp - 0x11c8], eax
mov edx, dword [ebp - 0x11c8]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x27d4], ecx
je 0x528de6
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor edx, edx
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0x4f4
mov dword [ebp - 0x11cc], edx
lea edx, [ebp - 0x7a0]
mov ecx, dword [ebp - 0x11cc]
mov dword [ebp - 0x798], ecx
mov dword [ebp - 0x11d0], 0x6ff378
mov eax, dword [ebp - 0x11d0]
mov dword [ebp - 0x798], eax
mov dword [ebp - 0x11d4], edx
mov ecx, dword [ebp - 0x11d4]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x27e4], eax
je 0x528e5a
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
xor ecx, ecx
mov word [ebp - 0xd9c], 0x50
mov dword [ebp - 0x11d8], ecx
mov ebx, 1
jmp 0x528f6a
lea edx, [ebp - 0x770]
lea ecx, [ebp - 0x760]
push edx
push ecx
mov edx, dword [ebp + 0xc]
mov eax, ebx
shl eax, 4
mov ecx, dword [edx + 4]
add ecx, eax
push ecx
call fcn.004464a4
add esp, 0xc
push 0x6c0f49
mov eax, dword [ebp - 0x758]
push eax
call fcn.0069cfd8
add esp, 8
test eax, eax
jne 0x528ed2
lea eax, [ebp - 0x770]
push eax
lea edx, [ebp - 0x7a0]
push edx
call fcn.0069a2e0
add esp, 8
jmp 0x528f69
push 0x6c0f4c
mov ecx, dword [ebp - 0x758]
push ecx
call fcn.0069cfd8
add esp, 8
test eax, eax
jne 0x528f0b
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x11dc], eax
mov edx, dword [ebp - 0x11dc]
push edx
call fcn.006a51a0
pop ecx
mov dword [ebp - 0x11d8], eax
jmp 0x528f69
push 0x6c0f53
mov ecx, dword [ebp - 0x758]
push ecx
call fcn.0069cfd8
add esp, 8
test eax, eax
jne 0x528f3b
lea eax, [ebp - 0x770]
push eax
lea edx, [ebp - 0x780]
push edx
call fcn.0069a2e0
add esp, 8
jmp 0x528f69
push str.OldUser
mov ecx, dword [ebp - 0x758]
push ecx
call fcn.0069cfd8
add esp, 8
test eax, eax
jne 0x528f69
lea eax, [ebp - 0x770]
push eax
lea edx, [ebp - 0x790]
push edx
call fcn.0069a2e0
add esp, 8
inc ebx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + 8]
mov ecx, dword [edx + 4]
sub eax, ecx
test eax, eax
jns 0x528f7f
add eax, 0xf
sar eax, 4
cmp ebx, eax
jb 0x528e7b
mov eax, dword [ebp - 0x798]
mov edx, dword [eax - 4]
test edx, edx
je 0x528fb2
mov ecx, dword [ebp - 0x778]
mov eax, dword [ecx - 4]
test eax, eax
je 0x528fb2
mov edx, dword [ebp - 0x11d8]
test edx, edx
jne 0x529056
lea ecx, [ebp - 0xdac]
xor eax, eax
push ecx
push 0
push 0
push 0
push 1
push 0x4cec4c
push 0
mov word [ebp - 0xd9c], 0x50c
mov dword [ebp - 0x11e0], eax
lea eax, [ebp - 0x7b0]
mov edx, dword [ebp - 0x11e0]
mov dword [ebp - 0x7a8], edx
mov dword [ebp - 0x11e4], 0x6ff378
mov ecx, dword [ebp - 0x11e4]
mov dword [ebp - 0x7a8], ecx
mov dword [ebp - 0x11e8], eax
mov edx, dword [ebp - 0x11e8]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x27f4], ecx
je 0x52902c
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
lea edx, [ebp - 0x7b8]
mov dword [ebp - 0x7b8], 1
inc dword [ebp - 0xd90]
push edx
push 0x4cebf8
call fcn.006aa5c5
add esp, 0x24
lea ecx, [ebp - 0x7a0]
push ecx
lea eax, [ebp - 0x70]
push eax
call fcn.0069a2e0
mov edx, dword [ebp - 0x11d8]
add esp, 8
mov dword [ebp - 0xc], edx
add esp, 0xfffffff8
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0xc]
mov edx, dword [eax + 0x40]
mov dword [ebp - 0x11f0], edx
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0xc]
lea ecx, [ebp - 0x78]
mov edx, dword [eax + 0x3c]
mov dword [ebp - 0x11f4], edx
push 0
push ecx
mov eax, dword [ebp - 0x11f0]
push eax
mov edx, dword [ebp - 0x11f4]
push edx
call fcn.004e12a8
add esp, 0x18
mov dword [ebp - 0x11ec], eax
mov word [ebp - 0xd9c], 0x50
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0xc]
mov edx, dword [eax + 0x40]
mov ecx, dword [ebp - 0x11ec]
cmp edx, ecx
je 0x529143
mov eax, dword [ebp - 0x11ec]
mov dword [ebp - 0x11f8], eax
mov edx, dword [ebp - 0x11f8]
add edx, 8
mov dword [ebp - 0x11fc], edx
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx - 4]
push eax
mov edx, dword [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x11fc]
mov eax, dword [ecx + 8]
mov edx, dword [eax - 4]
push edx
push 0
mov ecx, dword [ebp - 0x11fc]
push ecx
call fcn.0069b5b8
add esp, 0x14
test eax, eax
je 0x52911d
mov al, 1
jmp 0x52911f
xor eax, eax
test al, al
je 0x529127
mov dl, 1
jmp 0x52913b
mov ecx, dword [ebp - 0x11f8]
mov eax, dword [ecx + 0x6c]
mov edx, dword [ebp - 0xc]
cmp eax, edx
setne dl
and edx, 1
test dl, dl
je 0x5291e8
lea eax, [ebp - 0xdac]
xor ecx, ecx
push eax
push 0
push 0
push 0
push 1
push 0x4cec4c
push 0
mov word [ebp - 0xd9c], 0x524
mov dword [ebp - 0x1200], ecx
lea ecx, [ebp - 0x7c8]
mov eax, dword [ebp - 0x1200]
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x1204], 0x6ff378
mov edx, dword [ebp - 0x1204]
mov dword [ebp - 0x7c0], edx
mov dword [ebp - 0x1208], ecx
mov eax, dword [ebp - 0x1208]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2804], edx
je 0x5291be
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
lea eax, [ebp - 0x7d0]
mov dword [ebp - 0x7d0], 2
inc dword [ebp - 0xd90]
push eax
push 0x4cebf8
call fcn.006aa5c5
add esp, 0x24
mov edx, dword [ebp - 0x788]
mov ecx, dword [edx - 4]
test ecx, ecx
jne 0x52920b
lea eax, [ebp - 0x780]
push eax
lea edx, [ebp - 0x790]
push edx
call fcn.0069a2e0
add esp, 8
mov ecx, dword [ebp - 0x11ec]
lea edx, [ebp - 0x500]
mov eax, dword [ecx + 0x5c]
push eax
push edx
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0xc]
push eax
call fcn.005bad60
add esp, 0xc
test al, al
jne 0x5292d8
lea edx, [ebp - 0xdac]
xor ecx, ecx
push edx
push 0
push 0
push 0
push 1
push 0x4cec4c
push 0
mov word [ebp - 0xd9c], 0x53c
mov dword [ebp - 0x120c], ecx
lea ecx, [ebp - 0x7e0]
mov eax, dword [ebp - 0x120c]
mov dword [ebp - 0x7d8], eax
mov dword [ebp - 0x1210], 0x6ff378
mov edx, dword [ebp - 0x1210]
mov dword [ebp - 0x7d8], edx
mov dword [ebp - 0x1214], ecx
mov eax, dword [ebp - 0x1214]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2814], edx
je 0x5292ae
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
lea eax, [ebp - 0x7e8]
mov dword [ebp - 0x7e8], 5
inc dword [ebp - 0xd90]
push eax
push 0x4cebf8
call fcn.006aa5c5
add esp, 0x24
mov byte [ebp - 0x1215], 0
mov word [ebp - 0xd9c], 0x50
mov edx, dword [ebp - 0x11ec]
mov ecx, dword [edx + 0x5c]
lea edx, [ebp - 0x790]
mov dword [ebp - 0x121c], ecx
lea ecx, [ebp - 0x620]
mov eax, dword [ebp - 0x121c]
push eax
push edx
push 0
push ecx
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0xc]
push edx
call fcn.005d8e78
add esp, 0x14
test al, al
jne 0x529328
mov byte [ebp - 0x1215], 1
mov cl, byte [ebp - 0x1215]
test cl, cl
je 0x529348
lea eax, [ebp - 0x620]
push eax
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0xc]
push ecx
call fcn.005d725c
add esp, 8
mov al, byte [ebp + 0x10]
cmp al, 4
jne 0x5293f8
lea edx, [ebp - 0xdac]
xor ecx, ecx
push edx
push 0
push 0
push 0
push 1
push 0x4cec4c
push 0
mov word [ebp - 0xd9c], 0x554
mov dword [ebp - 0x1220], ecx
lea ecx, [ebp - 0x7f8]
mov eax, dword [ebp - 0x1220]
mov dword [ebp - 0x7f0], eax
mov dword [ebp - 0x1224], 0x6ff378
mov edx, dword [ebp - 0x1224]
mov dword [ebp - 0x7f0], edx
mov dword [ebp - 0x1228], ecx
mov eax, dword [ebp - 0x1228]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x2824], edx
je 0x5293ce
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
lea eax, [ebp - 0x800]
mov dword [ebp - 0x800], 3
inc dword [ebp - 0xd90]
push eax
push 0x4cebf8
call fcn.006aa5c5
add esp, 0x24
mov dl, byte [ebp + 0x10]
cmp dl, 3
je 0x52940c
mov cl, byte [ebp + 0x10]
cmp cl, 2
jne 0x5294c5
mov eax, dword [ebp - 0x11ec]
mov edx, dword [eax + 0x5c]
mov ecx, dword [ebp + 0x14]
cmp edx, ecx
je 0x5294c5
lea eax, [ebp - 0xdac]
xor edx, edx
push eax
push 0
push 0
push 0
push 1
push 0x4cec4c
push 0
mov word [ebp - 0xd9c], 0x56c
mov dword [ebp - 0x122c], edx
lea edx, [ebp - 0x810]
mov ecx, dword [ebp - 0x122c]
mov dword [ebp - 0x808], ecx
mov dword [ebp - 0x1230], 0x6ff378
mov eax, dword [ebp - 0x1230]
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x1234], edx
mov ecx, dword [ebp - 0x1234]
mov edx, 0x6ff36c
cmp edx, 0x6ff36c
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2834], eax
je 0x52949b
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
lea ecx, [ebp - 0x818]
mov dword [ebp - 0x818], 3
inc dword [ebp - 0xd90]
push ecx
push 0x4cebf8
call fcn.006aa5c5
add esp, 0x24
mov al, byte [ebp + 0x10]
cmp al, 2
jne 0x5297cf
mov dl, byte [ebp - 0x1215]
test dl, dl
jne 0x5297cf
mov word [ebp - 0xd9c], 0x584
xor ecx, ecx
mov dword [ebp - 0x834], ecx
xor eax, eax
mov dword [ebp - 0x830], eax
xor edx, edx
mov dword [ebp - 0x820], edx
mov dword [ebp - 0x1238], 0x40
mov dword [ebp - 0x123c], 1
mov ecx, dword [ebp - 0x123c]
mov eax, dword [ebp - 0x1238]
cmp ecx, eax
jbe 0x52952b
lea edx, [ebp - 0x123c]
jmp 0x529531
lea edx, [ebp - 0x1238]
mov eax, dword [edx]
xor ecx, ecx
mov dword [ebp - 0x838], eax
xor eax, eax
inc dword [ebp - 0xd90]
xor edx, edx
mov word [ebp - 0xd9c], 0x59c
mov word [ebp - 0xd9c], 0x5a8
mov dword [ebp - 0x854], ecx
mov dword [ebp - 0x850], eax
mov dword [ebp - 0x840], edx
mov dword [ebp - 0x1240], 0x40
mov dword [ebp - 0x1244], 1
mov ecx, dword [ebp - 0x1244]
mov eax, dword [ebp - 0x1240]
cmp ecx, eax
jbe 0x529595
lea edx, [ebp - 0x1244]
jmp 0x52959b
lea edx, [ebp - 0x1240]
mov eax, dword [edx]
mov dword [ebp - 0x858], eax
inc dword [ebp - 0xd90]
mov word [ebp - 0xd9c], 0x59c
mov ecx, dword [ebp + 0x18]
push ecx
lea ecx, [ebp - 0x838]
mov eax, dword [ebp - 0x11ec]
mov edx, dword [eax + 0x5c]
push edx
push ecx
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0xc]
push edx
call fcn.005bb9e4
add esp, 0x10
mov ecx, dword [ebp - 0x788]
push ecx
lea ecx, [ebp - 0x858]
mov eax, dword [ebp - 0x11ec]
mov edx, dword [eax + 0x5c]
push edx
push ecx
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0xc]
push edx
call fcn.005bb9e4
add esp, 0x10
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x1248], eax
jmp 0x52966f
mov word [ebp - 0xd9c], 0x59c
xor esi, esi
jmp 0x529649
mov edx, esi
shl edx, 4
mov ecx, dword [ebp - 0x854]
mov edx, dword [ecx + edx + 8]
push edx
mov eax, dword [ebp - 0x1248]
shl eax, 4
mov edx, dword [ebp - 0x834]
mov eax, dword [edx + eax + 8]
push eax
call fcn.0069cfd8
add esp, 8
test eax, eax
jne 0x529648
mov bl, 1
inc esi
mov eax, dword [ebp - 0x850]
mov edx, dword [ebp - 0x854]
sub eax, edx
test eax, eax
jns 0x52965e
add eax, 0xf
sar eax, 4
cmp esi, eax
jae 0x529669
test bl, bl
je 0x529616
inc dword [ebp - 0x1248]
mov ecx, dword [ebp - 0x830]
mov eax, dword [ebp - 0x834]
sub ecx, eax
test ecx, ecx
jns 0x529684
add ecx, 0xf
sar ecx, 4
mov edx, dword [ebp - 0x1248]
cmp ecx, edx
jbe 0x529699
test bl, bl
je 0x529609
test bl, bl
jne 0x529745
lea ecx, [ebp - 0xdac]
xor eax, eax
push ecx
push 0
push 0
push 0
push 1
push 0x4cec4c
push 0
mov word [ebp - 0xd9c], 0x5c0
mov dword [ebp - 0x124c], eax
lea eax, [ebp - 0x868]
mov edx, dword [ebp - 0x124c]
mov dword [ebp - 0x860], edx
mov dword [ebp - 0x1250], 0x6ff378
mov ecx, dword [ebp - 0x1250]
mov dword [ebp - 0x860], ecx
mov dword [ebp - 0x1254], eax
mov edx, dword [ebp - 0x1254]
mov eax, 0x6ff36c
cmp eax, 0x6ff36c
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2844], ecx
je 0x52971b
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0xd90]
lea edx, [ebp - 0x870]
mov dword [ebp - 0x870], 3
inc dword [ebp - 0xd90]
push edx
push 0x4cebf8
call fcn.006aa5c5
add esp, 0x24
dec dword [ebp - 0xd90]
mov ecx, dword [ebp - 0x850]
push ecx
mov eax, dword [ebp - 0x854]
push eax
lea edx, [ebp - 0x858]
push edx
call fcn.0040445c
add esp, 0xc
mov ecx, dword [ebp - 0x854]
mov dword [ebp - 0x1258], ecx
mov eax, dword [ebp - 0x1258]
push eax
call fcn.0067ac7c
pop ecx
mov word [ebp - 0xd9c], 0x59c
dec dword [ebp - 0xd90]
mov edx, dword [ebp - 0x830]
push edx
mov ecx, dword [ebp - 0x834]
push ecx
lea eax, [ebp - 0x838]
push eax
call fcn.0040445c
add esp, 0xc
mov edx, dword [ebp - 0x834]
mov dword [ebp - 0x125c], edx
mov ecx, dword [ebp - 0x125c]
push ecx
call fcn.0067ac7c
pop ecx
mov word [ebp - 0xd9c], 0x50
mov word [ebp - 0xd9c], 0x50
lea eax, [ebp - 0x780]
lea edx, [ebp - 0xb8]
push eax
push edx
mov edi, 1
call fcn.0069a2e0
add esp, 8
mov ecx, dword [ebp - 0x788]
push ecx
mov eax, dword [ebp - 0x778]
push eax
call fcn.0069cfd8
add esp, 8
test eax, eax
jne 0x529b3b
mov dl, byte [ebp - 0x1215]
test dl, dl
je 0x529e0c
jmp 0x529b3b
mov ebx, dword [ebp - 0x1260]
mov eax, dword [ebp - 0x778]
mov edx, dword [eax - 4]
cmp ebx, edx
jbe 0x529af1
lea ecx, [ebp - 0xdac]
lea eax, [ebp - 0x1278]
push ecx
push 0
push 0
push 0
push 1
push 0x406890
push 0
mov word [ebp - 0xd9c], 0x5fc
push eax
mov eax, dword [str.string_index_out_of_range_in_function:__s__n_position:__d_is_greater_than_length:__d]
mov edx, dword [ebp - 0x778]
mov ecx, dword [edx - 4]
lea edx, [ebp - 0x2950]
push ecx
push ebx
push 0x6c0f60
push eax
push edx
call fcn.0069c9cc
add esp, 0x14
mov dword [ebp - 0x1270], eax
mov ecx, dword [ebp - 0x1270]
push ecx
lea eax, [ebp - 0x898]
push eax
call fcn.0069a6ec
inc dword [ebp - 0xd90]
mov edx, 0x6b0470
mov dword [ebp - 0x888], edx
mov ecx, 0x6b0484
inc dword [ebp - 0xd90]
mov dword [ebp - 0x888], ecx
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x127c], eax
mov edx, dword [ebp - 0x127c]
mov dword [ebp - 0x878], edx
mov word [ebp - 0xd9c], 0x608
mov ecx, dword [ebp - 0x890]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
jle 0x529955
mov edx, dword [ebp - 0x890]
lea eax, [ebp - 0x880]
mov dword [ebp - 0x1280], edx
mov ecx, dword [ebp - 0x1280]
mov dword [ebp - 0x878], ecx
mov dword [ebp - 0x1284], eax
mov edx, dword [ebp - 0x1284]
mov ecx, dword [edx + 8]
mov edx, 0x6ff36c
mov dword [ebp - 0x2958], ecx
mov eax, dword [ebp - 0x878]
add eax, 0xfffffff4
mov dword [ebp - 0x1288], eax
mov ecx, dword [ebp - 0x1288]
cmp edx, ecx
je 0x5299fe
mov eax, dword [ebp - 0x1288]
push eax
call sub.KERNEL32.DLL_InterlockedIncrement
jmp 0x5299fe
mov edx, dword [ebp - 0x890]
mov ecx, dword [edx - 4]
mov dword [ebp - 0x128c], ecx
mov eax, dword [ebp - 0x128c]
push eax
mov edx, dword [ebp - 0x128c]
push edx
lea ecx, [ebp - 0x880]
push ecx
call fcn.0069a874
mov dword [ebp - 0x1294], eax
add esp, 0xc
mov eax, dword [ebp - 0x1294]
lea ecx, [ebp - 0x880]
add eax, 0xc
mov dword [ebp - 0x1290], eax
mov edx, dword [ebp - 0x1290]
mov dword [ebp - 0x878], edx
mov dword [ebp - 0x1298], ecx
mov eax, dword [ebp - 0x1298]
mov edx, dword [eax + 8]
mov dword [ebp - 0x2968], edx
mov ecx, dword [ebp - 0x128c]
mov dword [ebp - 0x129c], ecx
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x12a0], eax
mov edx, dword [ebp - 0x878]
mov dword [ebp - 0x12a4], edx
mov ecx, dword [ebp - 0x129c]
push ecx
mov eax, dword [ebp - 0x12a0]
push eax
mov edx, dword [ebp - 0x12a4]
push edx
call fcn.0069cc60
add esp, 0xc
inc dword [ebp - 0xd90]
mov ecx, 0x6b0434
mov word [ebp - 0xd9c], 0x5fc
inc dword [ebp - 0xd90]
mov dword [ebp - 0x888], ecx
inc dword [ebp - 0xd90]
dec dword [ebp - 0xd90]
mov eax, dword [ebp - 0x890]
test eax, eax
je 0x529ad4
mov edx, dword [ebp - 0x890]
mov ecx, dword [edx - 0xc]
inc ecx
test ecx, ecx
je 0x529a7a
mov esi, dword [ebp - 0x890]
add esi, 0xfffffff4
cmp esi, 0x6ff36c
je 0x529a71
cmp esi, 0x6ff36c
je 0x529a6a
push esi
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [esi]
inc eax
jmp 0x529a76
mov eax, 1
jmp 0x529a76
mov eax, 1
test eax, eax
jne 0x529ad4
mov edx, dword [ebp - 0x890]
add edx, 0xfffffff4
mov dword [ebp - 0x12a8], edx
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff4
mov dword [ebp - 0x12ac], ecx
mov eax, dword [ebp - 0x12ac]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x12b0], edx
lea eax, [ebp - 0x898]
mov ecx, dword [ebp - 0x12b0]
mov dword [ebp - 0x890], ecx
mov dword [ebp - 0x12b4], eax
mov edx, dword [ebp - 0x12b4]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2978], ecx
mov word [ebp - 0xd9c], 0x5f0
lea eax, [ebp - 0x888]
push eax
push 0x406834
call fcn.006aa5c5
add esp, 0x24
mov edx, dword [ebp - 0x778]
mov eax, dword [edx - 4]
sub eax, ebx
mov byte [ebp - 0x1300], 0
cmp eax, 1
jbe 0x529b0f
mov edx, 1
jmp 0x529b11
mov edx, eax
mov dword [ebp - 0x1304], edx
push 0
push 0
lea eax, [ebp - 0x1300]
push 0
push eax
mov ecx, dword [ebp - 0x1304]
lea eax, [ebp - 0x780]
push ecx
push ebx
push eax
call fcn.0069ad68
add esp, 0x1c
mov byte [ebp - 0x1261], 0x7c
mov edx, dword [ebp - 0x778]
mov ecx, dword [edx - 4]
test ecx, ecx
jae 0x529b56
mov eax, dword [0x6f85b4]
jmp 0x529ba6
mov edx, dword [ebp - 0x778]
mov ecx, dword [edx - 4]
mov dword [ebp - 0x1268], ecx
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x126c], eax
mov edx, dword [ebp - 0x1268]
push edx
movsx ecx, byte [ebp - 0x1261]
push ecx
mov eax, dword [ebp - 0x126c]
push eax
call fcn.0069cf00
add esp, 0xc
mov ebx, eax
test ebx, ebx
je 0x529ba1
mov eax, ebx
mov edx, dword [ebp - 0x778]
sub eax, edx
jmp 0x529ba6
mov eax, dword [0x6f85b4]
mov dword [ebp - 0x1260], eax
mov edx, dword [0x6f85b4]
cmp eax, edx
jne 0x529824
mov ecx, dword [ebp - 0x778]
mov eax, dword [ecx - 4]
test eax, eax
jne 0x529bdb
push 0x6c0f83
lea edx, [ebp - 0x780]
push edx
call fcn.0069a464
add esp, 8
lea ecx, [ebp - 0x780]
push ecx
lea eax, [ebp - 0xb8]
push eax
call fcn.0069a2e0
add esp, 8
jmp 0x529dcf
mov word [ebp - 0xd9c], 0x62c
push 0xa
lea edx, [ebp - 0x2860]
push edx
push edi
call fcn.006a55f4
add esp, 0xc
lea ecx, [ebp - 0x780]
push eax
push 0x6c0f87
push ecx
lea eax, [ebp - 0x8a8]
push eax
call fcn.00409058
add esp, 0xc
lea edx, [ebp - 0x8a8]
push edx
inc dword [ebp - 0xd90]
lea ecx, [ebp - 0x8b8]
push ecx
call fcn.00409058
add esp, 0xc
lea eax, [ebp - 0x8b8]
push eax
inc dword [ebp - 0xd90]
lea edx, [ebp - 0xb8]
push edx
call fcn.0069a2e0
add esp, 8
dec dword [ebp - 0xd90]
mov ecx, dword [ebp - 0x8b0]
test ecx, ecx
je 0x529d15
mov eax, dword [ebp - 0x8b0]
mov edx, dword [eax - 0xc]
inc edx
test edx, edx
je 0x529cbb
mov ebx, dword [ebp - 0x8b0]
add ebx, 0xfffffff4
cmp ebx, 0x6ff36c
je 0x529cb2
cmp ebx, 0x6ff36c
je 0x529cab
push ebx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebx]
inc eax
jmp 0x529cb7
mov eax, 1
jmp 0x529cb7
mov eax, 1
test eax, eax
jne 0x529d15
mov edx, dword [ebp - 0x8b0]
add edx, 0xfffffff4
mov dword [ebp - 0x130c], edx
mov ecx, dword [ebp - 0x8b0]
add ecx, 0xfffffff4
mov dword [ebp - 0x1310], ecx
mov eax, dword [ebp - 0x1310]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x1314], edx
lea eax, [ebp - 0x8b8]
mov ecx, dword [ebp - 0x1314]
mov dword [ebp - 0x8b0], ecx
mov dword [ebp - 0x1318], eax
mov edx, dword [ebp - 0x1318]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2988], ecx
mov word [ebp - 0xd9c], 0x50
dec dword [ebp - 0xd90]
mov eax, dword [ebp - 0x8a0]
test eax, eax
je 0x529dce
mov edx, dword [ebp - 0x8a0]
mov ecx, dword [edx - 0xc]
inc ecx
test ecx, ecx
je 0x529d74
mov ebx, dword [ebp - 0x8a0]
add ebx, 0xfffffff4
cmp ebx, 0x6ff36c
je 0x529d6b
cmp ebx, 0x6ff36c
je 0x529d64
push ebx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebx]
inc eax
jmp 0x529d70
mov eax, 1
jmp 0x529d70
mov eax, 1
test eax, eax
jne 0x529dce
mov edx, dword [ebp - 0x8a0]
add edx, 0xfffffff4
mov dword [ebp - 0x131c], edx
mov ecx, dword [ebp - 0x8a0]
add ecx, 0xfffffff4
mov dword [ebp - 0x1320], ecx
mov eax, dword [ebp - 0x1320]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x1324], edx
lea eax, [ebp - 0x8a8]
mov ecx, dword [ebp - 0x1324]
mov dword [ebp - 0x8a0], ecx
mov dword [ebp - 0x1328], eax
mov edx, dword [ebp - 0x1328]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2998], ecx
inc edi
mov eax, dword [ebp - 0x11ec]
mov edx, dword [eax + 0x5c]
lea eax, [ebp - 0xb8]
mov dword [ebp - 0x1308], edx
lea edx, [ebp - 0x740]
mov ecx, dword [ebp - 0x1308]
push ecx
push eax
push 0
push edx
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0xc]
push eax
call fcn.005d8e78
add esp, 0x14
test al, al
jne 0x529bf6
lea edx, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0x780]
push ecx
call fcn.0069a2e0
add esp, 8
lea eax, [ebp - 0x780]
push eax
lea edx, [ebp - 0x620]
push edx
call fcn.0069a2e0
mov byte [ebp - 0x1329], 0
mov word [ebp - 0xd9c], 0x50
mov ecx, dword [ebp - 0x580]
add esp, 8
mov dword [ebp - 0x1330], ecx
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x1334], eax
mov edx, dword [ebp - 0x1334]
push edx
mov ecx, dword [ebp - 0x580]
push ecx
mov eax, dword [ebp - 0x1330]
push eax
call fcn.004057f0
add esp, 0xc
mov dword [ebp - 0x1338], eax
mov edx, dword [ebp - 0x580]
mov dword [ebp - 0x133c], edx
mov ecx, dword [ebp - 0x1330]
mov eax, dword [ebp - 0x1334]
sub ecx, eax
test ecx, ecx
jns 0x529ea4
add ecx, 0xf
sar ecx, 4
shl ecx, 4
sub dword [ebp - 0x580], ecx
mov edx, dword [ebp - 0x133c]
push edx
mov ecx, dword [ebp - 0x1338]
push ecx
lea eax, [ebp - 0x588]
push eax
call fcn.0040445c
add esp, 0xc
mov edx, dword [ebp - 0x560]
mov dword [ebp - 0x1340], edx
mov ecx, dword [ebp - 0x564]
mov dword [ebp - 0x1344], ecx
mov eax, dword [ebp - 0x1344]
push eax
mov edx, dword [ebp - 0x560]
push edx
mov ecx, dword [ebp - 0x1340]
push ecx
call fcn.004057f0
add esp, 0xc
mov dword [ebp - 0x1348], eax
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x134c], eax
mov edx, dword [ebp - 0x1340]
mov ecx, dword [ebp - 0x1344]
sub edx, ecx
test edx, edx
jns 0x529f29
add edx, 0xf
sar edx, 4
shl edx, 4
sub dword [ebp - 0x560], edx
mov eax, dword [ebp - 0x134c]
push eax
mov edx, dword [ebp - 0x1348]
push edx
lea ecx, [ebp - 0x568]
push ecx
call fcn.0040445c
add esp, 0xc
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x1350], eax
mov edx, dword [ebp - 0x544]
mov dword [ebp - 0x1354], edx
mov ecx, dword [ebp - 0x1354]
push ecx
mov eax, dword [ebp - 0x540]
push eax
mov edx, dword [ebp - 0x1350]
push edx
call fcn.004057f0
add esp, 0xc
mov dword [ebp - 0x1358], eax
mov ecx, dword [ebp - 0x540]
mov dword [ebp - 0x135c], ecx
mov eax, dword [ebp - 0x1350]
mov edx, dword [ebp - 0x1354]
sub eax, edx
test eax, eax
jns 0x529fae
add eax, 0xf
sar eax, 4
shl eax, 4
sub dword [ebp - 0x540], eax
mov ecx, dword [ebp - 0x135c]
push ecx
mov eax, dword [ebp - 0x1358]
push eax
lea edx, [ebp - 0x548]
push edx
call fcn.0040445c
add esp, 0xc
mov ecx, dword [ebp - 0x520]
mov dword [ebp - 0x1360], ecx
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x1364], eax
mov edx, dword [ebp - 0x1364]
push edx
mov ecx, dword [ebp - 0x520]
push ecx
mov eax, dword [ebp - 0x1360]
push eax
call fcn.004057f0
add esp, 0xc
mov dword [ebp - 0x1368], eax
mov edx, dword [ebp - 0x520]
mov dword [ebp - 0x136c], edx
mov ecx, dword [ebp - 0x1360]
mov eax, dword [ebp - 0x1364]
sub ecx, eax
test ecx, ecx
jns 0x52a033