Function at 0x4ed680
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59bc43
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
push edi
mov eax, dword [0x5ea110]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1c], edi
push 2
call fcn.00409c70
push 0x130
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x4ed6d9
mov ecx, eax
call fcn.004117f0
mov esi, eax
jmp 0x4ed6db
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push edi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x14]
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0xf0
mov eax, dword [esi]
call dword [eax + 0x5c]
push 1
mov ecx, esi
call fcn.00409c00
push 0x48
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x4ed744
push 0xf9faf5
mov ecx, eax
call fcn.00420590
mov ecx, eax
jmp 0x4ed746
xor ecx, ecx
mov eax, dword [esi]
push ecx
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0xa8]
push 2
mov ecx, esi
call fcn.00409c70
push 0x11c
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x4ed78a
mov ecx, eax
call fcn.00408120
mov ecx, eax
mov dword [ebp - 0x14], eax
jmp 0x4ed78f
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x140], ecx
je 0x4ed7c1
test ecx, ecx
je 0x4ed7ab
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x140]
mov dword [edi + 0x140], ecx
test eax, eax
je 0x4ed7c1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x140]
push esi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x140]
push 1
call fcn.00409c00
mov ecx, dword [edi + 0x140]
movaps xmm0, xmmword [0x5a23a0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
push 0xc0
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x4ed81c
mov ecx, eax
call fcn.004196d0
mov esi, eax
jmp 0x4ed81e
xor esi, esi
push 3
push 0xa0
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.004193a0
mov ecx, dword [edi + 0x140]
push esi
mov eax, dword [ecx]
call dword [eax + 0xa8]
mov ecx, dword [edi + 0x140]
push 1
call fcn.0040af20
mov ecx, dword [edi + 0x140]
movaps xmm0, xmmword [0x5a22d0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
mov ecx, dword [edi + 0x140]
push 2
call fcn.00409c70
push 0x130
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 4
test eax, eax
je 0x4ed8a1
mov ecx, eax
call fcn.004117f0
mov esi, eax
jmp 0x4ed8a3
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push edi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x14]
push 1
mov ecx, esi
call fcn.00409c00
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0x14
mov eax, dword [esi]
call dword [eax + 0x5c]
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0x13
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov eax, dword [esi]
call dword [eax + 0x80]
push 2
mov ecx, esi
call fcn.00409c70
push 0x18c
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 5
test eax, eax
je 0x4ed942
mov ecx, eax
call fcn.00431160
mov ecx, eax
mov dword [ebp - 0x14], eax
jmp 0x4ed947
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x160], ecx
je 0x4ed979
test ecx, ecx
je 0x4ed963
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x160]
mov dword [edi + 0x160], ecx
test eax, eax
je 0x4ed979
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x160]
push esi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x160]
push 0
call fcn.00409c00
movaps xmm0, xmmword [0x5a2330]
sub esp, 0x10
mov ecx, dword [edi + 0x160]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.004331a0
sub esp, 0x10
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 5
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ecx, dword [edi + 0x160]
call fcn.00433260
mov ecx, dword [edi + 0x160]
movaps xmm0, xmmword [0x5a2380]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x160]
movaps xmm0, xmmword [0x5a2290]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0xc0
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 6
test eax, eax
je 0x4eda36
mov ecx, eax
call fcn.004196d0
jmp 0x4eda38
xor eax, eax
push 3
push 0xa1
mov ecx, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0xffffffff
call fcn.004193a0
mov ecx, dword [ebp - 0x10]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], 0x18
mov dword [eax + 4], 0
mov dword [eax + 8], 0x24
mov dword [eax + 0xc], 0xc
call fcn.0041a8d0
mov eax, dword [ebp - 0x10]
mov ecx, dword [edi + 0x160]
push eax
push eax
push eax
call fcn.00431ab0
push 0xc0
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 7
test eax, eax
je 0x4edaaf
mov ecx, eax
call fcn.004196d0
jmp 0x4edab1
xor eax, eax
push 3
push 0xa1
mov ecx, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xffffffff
call fcn.004193a0
mov ecx, dword [ebp - 0x14]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0xc
mov dword [eax + 0xc], 0xc
call fcn.0041a8d0
push 0xc0
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 8
test eax, eax
je 0x4edb17
mov ecx, eax
call fcn.004196d0
jmp 0x4edb19
xor eax, eax
push 3
push 0xa1
mov ecx, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0xffffffff
call fcn.004193a0
mov ecx, dword [ebp - 0x10]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], 0xc
mov dword [eax + 4], 0
mov dword [eax + 8], 0x18
mov dword [eax + 0xc], 0xc
call fcn.0041a8d0
mov eax, dword [ebp - 0x10]
mov ecx, dword [edi + 0x160]
push eax
push eax
push dword [ebp - 0x14]
call fcn.00431bf0
push ecx
mov ecx, esp
push 0x5a21c4
call fcn.004077e0
mov ecx, dword [edi + 0x160]
call fcn.00431770
mov ecx, dword [edi + 0x160]
push 0x6d615a
call fcn.00431810
movaps xmm0, xmmword [0x5a2270]
sub esp, 0x10
mov ecx, dword [edi + 0x160]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.00433220
mov ecx, dword [edi + 0x160]
push 0xfffffffffffffff1
call fcn.00431880
mov ecx, dword [edi + 0x160]
push 2
call fcn.0040af20
mov ecx, dword [edi + 0x160]
push 1
call fcn.00431660
mov ecx, dword [edi + 0x160]
test ecx, ecx
je 0x4edbf6
lea eax, [edi + 0x130]
test eax, eax
je 0x4edbf6
push eax
push 0x190
call fcn.00401d50
push 0x174
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 9
test eax, eax
je 0x4edc1f
mov ecx, eax
call fcn.00421510
mov ecx, eax
mov dword [ebp - 0x14], eax
jmp 0x4edc24
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x164], ecx
je 0x4edc56
test ecx, ecx
je 0x4edc40
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x164]
mov dword [edi + 0x164], ecx
test eax, eax
je 0x4edc56
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x164]
push esi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x164]
push 0
call fcn.00409c00
mov ecx, dword [edi + 0x164]
push 1
call fcn.00409bd0
mov ecx, dword [edi + 0x164]
push 1
call fcn.00409ba0
push ecx
mov ecx, esp
push 0x5a21e0
call fcn.004077e0
mov ecx, dword [edi + 0x164]
call fcn.00421b90
mov ecx, dword [edi + 0x164]
push 2
call fcn.0040af20
mov ecx, dword [edi + 0x164]
push 0x666666
mov eax, dword [ecx]
call dword [eax + 0x130]
mov ecx, dword [edi + 0x164]
push 1
call fcn.00423850
mov ecx, dword [edi + 0x164]
push 0xfffffffffffffff1
call fcn.00422a30
mov ecx, dword [edi + 0x164]
push 1
call fcn.00409e00
mov ecx, dword [edi + 0x164]
test ecx, ecx
je 0x4edd07
lea eax, [edi + 0x130]
test eax, eax
je 0x4edd07
push eax
push 0x384
call fcn.00401d50
push 0x290
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0xa
test eax, eax
je 0x4edd2d
mov ecx, eax
call fcn.00412560
mov esi, eax
jmp 0x4edd2f
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x15c], esi
je 0x4edd5e
test esi, esi
je 0x4edd48
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x15c]
mov dword [edi + 0x15c], esi
test eax, eax
je 0x4edd5e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x15c]
push edi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x15c]
push 1
call fcn.00409c00
mov ecx, dword [edi + 0x15c]
push 1
call fcn.0040af20
mov ecx, dword [edi + 0x15c]
movaps xmm0, xmmword [0x5a1bd0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x15c]
movaps xmm0, xmmword [0x5a22c0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0x5a21ec
lea ecx, [ebp - 0x14]
call fcn.004077e0
mov ecx, dword [edi + 0x15c]
lea edx, [ebp - 0x14]
push edx
mov dword [ebp - 4], 0xb
mov eax, dword [ecx]
call dword [eax + 0x14c]
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ede07
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [edi + 0x15c]
push 0xffffff
call fcn.004143a0
mov ecx, dword [edi + 0x15c]
push 1
call fcn.00414b20
mov ecx, dword [edi + 0x15c]
push 0xffffffffffffffec
call fcn.00417e80
movaps xmm0, xmmword [0x5a2350]
sub esp, 0x10
mov ecx, dword [edi + 0x15c]
mov eax, esp
push 3
push 0xa2
movups xmmword [eax], xmm0
call fcn.00417440
mov ecx, dword [edi + 0x15c]
test ecx, ecx
je 0x4ede6e
lea eax, [edi + 0x130]
test eax, eax
je 0x4ede6e
push eax
push 0
call fcn.00401d50
push 0x130
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0xc
test eax, eax
je 0x4ede94
mov ecx, eax
call fcn.004117f0
mov esi, eax
jmp 0x4ede96
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push edi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x14]
push 1
mov ecx, esi
call fcn.00409c00
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0xe
mov eax, dword [esi]
call dword [eax + 0x5c]
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0xf
mov dword [eax + 8], 0x14
mov dword [eax + 0xc], 5
mov eax, dword [esi]
call dword [eax + 0x80]
push 2
mov ecx, esi
call fcn.00409c70
push 0x290
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0xd
test eax, eax
je 0x4edf35
mov ecx, eax
call fcn.00412560
mov ecx, eax
mov dword [ebp - 0x14], eax
jmp 0x4edf3a
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x168], ecx
je 0x4edf6c
test ecx, ecx
je 0x4edf56
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x168]
mov dword [edi + 0x168], ecx
test eax, eax
je 0x4edf6c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x168]
push esi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x168]
push 2
call fcn.00409c00
mov ecx, dword [edi + 0x168]
push 2
call fcn.0040af20
mov ecx, dword [edi + 0x168]
movaps xmm0, xmmword [0x5a2340]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x168]
xorps xmm0, xmm0
push 1
sub esp, 0x10
mov eax, esp
mov edx, dword [ecx]
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0x5a21f8
lea ecx, [ebp - 0x14]
call fcn.004077e0
mov ecx, dword [edi + 0x168]
lea edx, [ebp - 0x14]
push edx
mov dword [ebp - 4], 0xe
mov eax, dword [ecx]
call dword [eax + 0x14c]
mov edx, dword [ebp - 0x14]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ee011
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
movaps xmm0, xmmword [0x5a22e0]
mov ecx, dword [edi + 0x168]
push 1
sub esp, 0x10
mov eax, esp
movups xmmword [eax], xmm0
call fcn.00418180
mov ecx, dword [edi + 0x168]
push 0
call fcn.00418140
mov ecx, dword [edi + 0x168]
push 2
call fcn.00418160
mov ecx, dword [edi + 0x168]
push 0x666666
call fcn.004143a0
mov ecx, dword [edi + 0x168]
push 1
call fcn.00414b20
push 0xc0
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0xf
test eax, eax
je 0x4ee08a
mov ecx, eax
call fcn.004196d0
mov esi, eax
jmp 0x4ee08c
xor esi, esi
push 3
push 0xa3
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.004193a0
mov ecx, dword [edi + 0x168]
push esi
call fcn.00414600
mov ecx, dword [edi + 0x168]
test ecx, ecx
je 0x4ee0c9
lea eax, [edi + 0x130]
test eax, eax
je 0x4ee0c9
push eax
push 0
call fcn.00401d50
push 0x130
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x10
test eax, eax
je 0x4ee0f2
mov ecx, eax
call fcn.004117f0
mov esi, eax
mov dword [ebp - 0x10], eax
jmp 0x4ee0f7
xor esi, esi
mov dword [ebp - 0x10], esi
mov eax, dword [esi]
mov ecx, esi
push edi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x14]
push 1
mov ecx, esi
call fcn.00409c00
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0x50
mov eax, dword [esi]
call dword [eax + 0x5c]
push 0x18c
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x11
test eax, eax
je 0x4ee15e
mov ecx, eax
call fcn.00431160
mov esi, eax
jmp 0x4ee160
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x16c], esi
je 0x4ee18f
test esi, esi
je 0x4ee179
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x16c]
mov dword [edi + 0x16c], esi
test eax, eax
je 0x4ee18f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x16c]
push dword [ebp - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x16c]
push 1
call fcn.004316b0
mov ecx, dword [edi + 0x16c]
push 1
call fcn.00409c00
movaps xmm0, xmmword [0x5a2330]
sub esp, 0x10
mov ecx, dword [edi + 0x16c]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.004331a0
sub esp, 0x10
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 5
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ecx, dword [edi + 0x16c]
call fcn.00433260
mov ecx, dword [edi + 0x16c]
movaps xmm0, xmmword [0x5a2370]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x16c]
movaps xmm0, xmmword [0x5a22a0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0xc0
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x12
test eax, eax
je 0x4ee25d
mov ecx, eax
call fcn.004196d0
mov esi, eax
jmp 0x4ee25f
xor esi, esi
push 3
push 0xa1
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.004193a0
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0x18
mov dword [eax + 4], 0
mov dword [eax + 8], 0x24
mov dword [eax + 0xc], 0xc
call fcn.0041a8d0
mov ecx, dword [edi + 0x16c]
push esi
push esi
push esi
call fcn.00431ab0
push 0xc0
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x13
test eax, eax
je 0x4ee2d1
mov ecx, eax
call fcn.004196d0
mov esi, eax
jmp 0x4ee2d3
xor esi, esi
push 3
push 0xa1
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.004193a0
push 1
sub esp, 0x10
mov ecx, esi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0xc
mov dword [eax + 0xc], 0xc
call fcn.0041a8d0
push 0xc0
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x14
test eax, eax
je 0x4ee335
mov ecx, eax
call fcn.004196d0
jmp 0x4ee337
xor eax, eax
push 3
push 0xa1
mov ecx, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xffffffff
call fcn.004193a0
mov ecx, dword [ebp - 0x14]
push 1
sub esp, 0x10
mov eax, esp
mov dword [eax], 0xc
mov dword [eax + 4], 0
mov dword [eax + 8], 0x18
mov dword [eax + 0xc], 0xc
call fcn.0041a8d0
mov eax, dword [ebp - 0x14]
mov ecx, dword [edi + 0x16c]
push eax
push eax
push esi
call fcn.00431bf0
push ecx
mov ecx, esp
push 0x5a2204
call fcn.004077e0
mov ecx, dword [edi + 0x16c]
call fcn.00431770
mov ecx, dword [edi + 0x16c]
push 0x999999
call fcn.00431810
movaps xmm0, xmmword [0x5a2270]
sub esp, 0x10
mov ecx, dword [edi + 0x16c]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.00433220
mov ecx, dword [edi + 0x16c]
push 0xfffffffffffffff2
call fcn.00431880
mov ecx, dword [edi + 0x16c]
test ecx, ecx
je 0x4ee3f8
lea eax, [edi + 0x130]
test eax, eax
je 0x4ee3f8
push eax
push 0x190
call fcn.00401d50
push 0x130
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x15
test eax, eax
je 0x4ee41e
mov ecx, eax
call fcn.004117f0
mov esi, eax
jmp 0x4ee420
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x148], esi
je 0x4ee44f
test esi, esi
je 0x4ee439
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x148]
mov dword [edi + 0x148], esi
test eax, eax
je 0x4ee44f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x148]
push dword [ebp - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x148]
push 1
call fcn.00409c00
mov ecx, dword [edi + 0x148]
movaps xmm0, xmmword [0x5c4f00]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x148]
movaps xmm0, xmmword [0x5a22b0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
mov ecx, dword [edi + 0x148]
push 2
call fcn.00409c70
push 0x174
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x16
test eax, eax
je 0x4ee4d8
mov ecx, eax
call fcn.00421510
mov esi, eax
jmp 0x4ee4da
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x14c], esi
je 0x4ee509
test esi, esi
je 0x4ee4f3
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x14c]
mov dword [edi + 0x14c], esi
test eax, eax
je 0x4ee509
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x14c]
push dword [edi + 0x148]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x14c]
push 0
call fcn.00409c00
mov ecx, dword [edi + 0x14c]
push 1
call fcn.00409bd0
mov ecx, dword [edi + 0x14c]
push 1
call fcn.00409ba0
push ecx
mov ecx, esp
push 0x5a221c
call fcn.004077e0
mov ecx, dword [edi + 0x14c]
call fcn.00421b90
mov ecx, dword [edi + 0x14c]
movaps xmm0, xmmword [0x5a2280]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
mov ecx, dword [edi + 0x14c]
push 2
call fcn.0040af20
mov ecx, dword [edi + 0x14c]
push 0x999999
mov eax, dword [ecx]
call dword [eax + 0x130]
push 0x290
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x17
test eax, eax
je 0x4ee5be
mov ecx, eax
call fcn.00412560
mov esi, eax
jmp 0x4ee5c0
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x150], esi
je 0x4ee5ef
test esi, esi
je 0x4ee5d9
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x150]
mov dword [edi + 0x150], esi
test eax, eax
je 0x4ee5ef
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x150]
push dword [edi + 0x148]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x150]
push 2
call fcn.00409c00
mov ecx, dword [edi + 0x150]
push 2
call fcn.0040af20
mov ecx, dword [edi + 0x150]
movaps xmm0, xmmword [0x5a2390]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x150]
movaps xmm0, xmmword [0x5a22f0]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0x5a2228
lea ecx, [ebp - 0x10]
call fcn.004077e0
mov ecx, dword [edi + 0x150]
lea edx, [ebp - 0x10]
push edx
mov dword [ebp - 4], 0x18
mov eax, dword [ecx]
call dword [eax + 0x14c]
mov edx, dword [ebp - 0x10]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ee69d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [edi + 0x150]
push 1
call fcn.00414b20
push 0xc0
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x19
test eax, eax
je 0x4ee6d0
mov ecx, eax
call fcn.004196d0
mov esi, eax
jmp 0x4ee6d2
xor esi, esi
push 3
push 0x8c
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.004193a0
push 2
mov ecx, esi
call fcn.0041a8c0
movaps xmm0, xmmword [0x5a2360]
sub esp, 0x10
mov eax, esp
mov ecx, esi
movups xmmword [eax], xmm0
call fcn.0041aa10
mov ecx, dword [edi + 0x150]
push esi
call fcn.00412d90
mov ecx, dword [edi + 0x150]
push esi
call fcn.00412d40
mov ecx, dword [edi + 0x150]
push esi
call fcn.00414500
mov ecx, dword [edi + 0x150]
push esi
call fcn.00412cf0
mov ecx, dword [edi + 0x150]
xor eax, eax
cmp dword [0x5ef48c], eax
sete al
mov edx, dword [ecx]
push eax
call dword [edx + 0xf4]
mov ecx, dword [edi + 0x150]
test ecx, ecx
je 0x4ee76c
lea eax, [edi + 0x130]
test eax, eax
je 0x4ee76c
push eax
push 0
call fcn.00401d50
push 0x130
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1a
test eax, eax
je 0x4ee792
mov ecx, eax
call fcn.004117f0
mov esi, eax
jmp 0x4ee794
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x154], esi
je 0x4ee7c3
test esi, esi
je 0x4ee7ad
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x154]
mov dword [edi + 0x154], esi
test eax, eax
je 0x4ee7c3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x154]
push dword [edi + 0x148]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x154]
push 4
call fcn.00409c00
mov ecx, dword [edi + 0x154]
movaps xmm0, xmmword [0x5c4f00]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x5c]
mov ecx, dword [edi + 0x154]
movaps xmm0, xmmword [0x5a2300]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push 0xc0
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1b
test eax, eax
je 0x4ee842
mov ecx, eax
call fcn.004196d0
mov esi, eax
jmp 0x4ee844
xor esi, esi
push 3
push 0x8c
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.004193a0
push 2
mov ecx, esi
call fcn.0041a8c0
movaps xmm0, xmmword [0x5a2360]
sub esp, 0x10
mov eax, esp
mov ecx, esi
movups xmmword [eax], xmm0
call fcn.0041aa10
mov ecx, dword [edi + 0x154]
push esi
mov eax, dword [ecx]
call dword [eax + 0xa8]
push 0x18c
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1c
test eax, eax
je 0x4ee8ad
mov ecx, eax
call fcn.004356c0
mov esi, eax
jmp 0x4ee8af
xor esi, esi
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 0x158], esi
je 0x4ee8de
test esi, esi
je 0x4ee8c8
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [edi + 0x158]
mov dword [edi + 0x158], esi
test eax, eax
je 0x4ee8de
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [edi + 0x158]
push 0x800
call fcn.004360b0
mov ecx, dword [edi + 0x158]
push dword [edi + 0x154]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x158]
push 4
call fcn.00409c00
mov eax, dword [0x5ea094]
cmp eax, 0xffffffff
jne 0x4ee9b5
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 6
jb 0x4ee937
movaps xmm0, xmmword [0x5a2310]
mov dword [0x5ea094], 1
jmp 0x4ee948
mov dword [0x5ea094], 0
movaps xmm0, xmmword [0x5a2320]
mov ecx, dword [edi + 0x158]
push 1
sub esp, 0x10
mov eax, esp
mov edx, dword [ecx]
movups xmmword [eax], xmm0
call dword [edx + 0x80]
push ecx
mov ecx, esp
push str.c:program_file_
call fcn.004077e0
mov ecx, dword [edi + 0x158]
call fcn.00435a70
mov ecx, dword [edi + 0x158]
push 0
mov eax, dword [ecx]
call dword [eax + 0xf4]
mov eax, dword [0x5ef3cc]
test eax, eax
jne 0x4ee9d0
push 0x17c
call fcn.0050e66a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1d
test eax, eax
je 0x4ee9c2
mov ecx, eax
call fcn.0045a840
jmp 0x4ee9c4
test eax, eax
je 0x4ee941
movaps xmm0, xmmword [0x5a2310]
jmp 0x4ee948
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x5ef3cc], eax
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [eax + 4]
call fcn.00462bd0
push ecx
mov esi, esp
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x20], esi
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
push eax
call fcn.004079b0
add eax, 0x10
add esp, 4
mov dword [esi], eax
mov ecx, dword [edi + 0x158]
call fcn.00435a70
mov edi, dword [edi + 0x15c]
mov ecx, dword [ebp - 0x1c]
mov esi, dword [edi]
mov ecx, dword [ecx + 0x160]
call fcn.00431700
push eax
mov ecx, edi
call dword [esi + 0xf4]
mov edx, dword [ebp - 0x18]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4eea49
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret