Function at 0x53d460
Capabilities:
Contain obfuscated stackstrings
Delete file
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x264
push 0
push 0
dec ecx
jne 0x53d469
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov byte [ebp - 0x3d], cl
mov dword [ebp - 4], edx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 4]
call fcn.00405a64
xor eax, eax
push ebp
push 0x5412a5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5825e0]
push eax
call sub.kernel32.dll_EnterCriticalSection
xor edi, edi
push ebp
push 0x541243
push dword fs:[edi]
mov dword fs:[edi], esp
mov eax, dword [ebp - 0x3c]
cmp byte [eax + 0xd], 0
jne 0x541133
cmp dword [ebp - 4], 0
je 0x541133
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [0x5829d0]
call fcn.004055e4
mov eax, dword [0x58291c]
call fcn.004055e4
mov eax, dword [0x582d2c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x58240c]
mov byte [eax], 0
mov eax, dword [0x583144]
mov dword [eax], 0x1e
mov eax, dword [0x58253c]
call fcn.004055e4
mov eax, dword [0x582e18]
call fcn.004055e4
mov eax, dword [0x583054]
call fcn.004055e4
mov eax, dword [0x582774]
mov eax, dword [eax]
call fcn.0047cbdc
mov eax, dword [0x582774]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [0x582774]
mov eax, dword [eax]
call fcn.0047cbe8
mov eax, dword [0x582974]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x582378]
mov eax, dword [eax]
call fcn.004929e4
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x582b08]
mov dword [edx], eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dl, 1
mov eax, dword [0x41c07c]
call fcn.00404674
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x53d679
lea ecx, [ebp - 0x11c4]
xor edx, edx
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11c4]
mov ecx, 0x15
mov edx, 0x5412bc
call fcn.0048dd0c
test al, al
je 0x53d679
xor edx, edx
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x53d679
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x11cc]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11cc]
lea edx, [ebp - 0x11c8]
call fcn.004e2168
mov ecx, dword [ebp - 0x11c8]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0x20]
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x53d635
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x541128
mov byte [ebp - 0x69], 0
xor ebx, ebx
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x53ddb7
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x11d0]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x11d0]
lea edx, [ebp - 0xc]
call fcn.0040c950
cmp dword [ebp - 0xc], 0
je 0x53dda8
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3b
je 0x53dda8
cmp byte [ebp - 0x69], 0
jne 0x53d750
mov edx, 0x5412dc
mov eax, dword [ebp - 0xc]
call fcn.0040c79c
test eax, eax
jne 0x53d750
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
mov byte [ebp - 0x69], 1
jmp 0x53dda8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebp - 0x69], 0
je 0x53dda8
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x5b
jne 0x53d79a
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x53d78c
sub eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
cmp byte [edx + eax - 1], 0x5d
je 0x53ddb7
mov edx, dword [ebp - 0xc]
mov eax, 0x5412ec
call fcn.00405bc0
test eax, eax
jle 0x53dda8
mov ecx, 8
mov edx, 0x5412f8
mov eax, dword [ebp - 0xc]
call fcn.0048dd0c
test al, al
je 0x53d877
mov esi, dword [ebp - 0xc]
test esi, esi
je 0x53d7d5
sub esi, 4
mov esi, dword [esi]
lea eax, [ebp - 0x11d8]
push eax
mov ecx, esi
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11d8]
lea edx, [ebp - 0x11d4]
call fcn.0040c950
mov edx, dword [ebp - 0x11d4]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x53d868
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x53d868
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
je 0x53d83e
mov eax, dword [ebp - 0xd0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xd0], eax
mov eax, dword [0x58253c]
push eax
mov ecx, dword [ebp - 0xd0]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x53ddb7
jmp 0x53dda8
mov ecx, 8
mov edx, 0x54130c
mov eax, dword [ebp - 0xc]
call fcn.0048dd0c
test al, al
je 0x53d95a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
je 0x53d8b4
mov eax, dword [ebp - 0xd4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x11e0]
push eax
mov ecx, dword [ebp - 0xd4]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11e0]
lea edx, [ebp - 0x11dc]
call fcn.0040c950
mov edx, dword [ebp - 0x11dc]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x53d94b
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x53d94b
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
je 0x53d921
mov eax, dword [ebp - 0xd8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
mov eax, dword [0x582e18]
push eax
mov ecx, dword [ebp - 0xd8]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x53ddb7
jmp 0x53dda8
mov ecx, 8
mov edx, 0x541320
mov eax, dword [ebp - 0xc]
call fcn.0048dd0c
test al, al
je 0x53da3d
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
je 0x53d997
mov eax, dword [ebp - 0xdc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xdc], eax
lea eax, [ebp - 0x11e8]
push eax
mov ecx, dword [ebp - 0xdc]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11e8]
lea edx, [ebp - 0x11e4]
call fcn.0040c950
mov edx, dword [ebp - 0x11e4]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x53da2e
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x53da2e
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
je 0x53da04
mov eax, dword [ebp - 0xe0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xe0], eax
mov eax, dword [0x583054]
push eax
mov ecx, dword [ebp - 0xe0]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x53ddb7
jmp 0x53dda8
mov ecx, 8
mov edx, 0x541334
mov eax, dword [ebp - 0xc]
call fcn.0048dd0c
test al, al
je 0x53db39
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
je 0x53da7a
mov eax, dword [ebp - 0xe4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x11f0]
push eax
mov ecx, dword [ebp - 0xe4]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11f0]
lea edx, [ebp - 0x11ec]
call fcn.0040c950
mov edx, dword [ebp - 0x11ec]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x53db2a
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x53db2a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
je 0x53dae7
mov eax, dword [ebp - 0xe8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xe8], eax
lea eax, [ebp - 0x11f4]
push eax
mov ecx, dword [ebp - 0xe8]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11f4]
mov edx, 0x541348
call fcn.00405a0c
mov eax, dword [0x58240c]
sete byte [eax]
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x53ddb7
jmp 0x53dda8
mov ecx, 8
mov edx, 0x541354
mov eax, dword [ebp - 0xc]
call fcn.0048dd0c
test al, al
je 0x53dc35
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
je 0x53db76
mov eax, dword [ebp - 0xec]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x11fc]
push eax
mov ecx, dword [ebp - 0xec]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11fc]
lea edx, [ebp - 0x11f8]
call fcn.0040c950
mov edx, dword [ebp - 0x11f8]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x53dc26
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x53dc26
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
je 0x53dbe3
mov eax, dword [ebp - 0xf0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0x1200]
push eax
mov ecx, dword [ebp - 0xf0]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1200]
mov edx, 0x1e
call fcn.0040cf54
mov edx, dword [0x583144]
mov dword [edx], eax
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x53ddb7
jmp 0x53dda8
mov ecx, 0xe
mov edx, 0x541368
mov eax, dword [ebp - 0xc]
call fcn.0048dd0c
test al, al
je 0x53dda8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
je 0x53dc72
mov eax, dword [ebp - 0xf4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0x1208]
push eax
mov ecx, dword [ebp - 0xf4]
sub ecx, 0xe
mov edx, 0xf
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1208]
lea edx, [ebp - 0x1204]
call fcn.0040c950
mov edx, dword [ebp - 0x1204]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x53dda2
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x53dda2
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
je 0x53dcf7
mov eax, dword [ebp - 0xf8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xf8], eax
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0xf8]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
push 0
lea eax, [ebp - 0x120c]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
mov edx, dword [0x5829d0]
mov eax, dword [ebp - 0xc]
call fcn.0048d980
mov edx, dword [ebp - 0x120c]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 0
lea eax, [ebp - 0x1214]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.0048d980
mov edx, dword [ebp - 0x1214]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 0
lea eax, [ebp - 0x1218]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
mov edx, dword [0x58291c]
mov eax, dword [ebp - 0xc]
call fcn.0048d980
mov edx, dword [ebp - 0x1218]
lea eax, [ebp - 0xc]
call fcn.0040567c
inc ebx
cmp ebx, 6
jge 0x53ddb7
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x53d6e8
mov eax, dword [0x58301c]
cmp dword [eax], 0
je 0x53e522
mov byte [ebp - 0x69], 0
xor ebx, ebx
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x53e522
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x121c]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x121c]
lea edx, [ebp - 0xc]
call fcn.0040c950
cmp dword [ebp - 0xc], 0
je 0x53e513
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3b
je 0x53e513
cmp byte [ebp - 0x69], 0
jne 0x53de83
lea eax, [ebp - 0x1220]
push eax
mov eax, dword [0x58301c]
mov eax, dword [eax]
mov dword [ebp - 0x1228], eax
mov byte [ebp - 0x1224], 0xb
lea edx, [ebp - 0x1228]
xor ecx, ecx
mov eax, 0x541380
call fcn.0040e7b8
mov edx, dword [ebp - 0x1220]
mov eax, dword [ebp - 0xc]
call fcn.0040c79c
test eax, eax
jne 0x53de83
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
mov byte [ebp - 0x69], 1
jmp 0x53e513
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebp - 0x69], 0
je 0x53e513
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x5b
jne 0x53deea
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
je 0x53ded6
mov eax, dword [ebp - 0xfc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0xfc]
cmp byte [eax + edx - 1], 0x5d
je 0x53e522
mov edx, dword [ebp - 0xc]
mov eax, 0x5412ec
call fcn.00405bc0
test eax, eax
jle 0x53e513
mov ecx, 8
mov edx, 0x5412f8
mov eax, dword [ebp - 0xc]
call fcn.0048dd0c
test al, al
je 0x53dfe2
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
je 0x53df3c
mov eax, dword [ebp - 0x100]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x100], eax
lea eax, [ebp - 0x1230]
push eax
mov ecx, dword [ebp - 0x100]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1230]
lea edx, [ebp - 0x122c]
call fcn.0040c950
mov edx, dword [ebp - 0x122c]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x53dfd3
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x53dfd3
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
je 0x53dfa9
mov eax, dword [ebp - 0x104]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
mov eax, dword [0x5828b8]
push eax
mov ecx, dword [ebp - 0x104]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x53e522
jmp 0x53e513
mov ecx, 8
mov edx, 0x54130c
mov eax, dword [ebp - 0xc]
call fcn.0048dd0c
test al, al
je 0x53e0c5
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x53e01f
mov eax, dword [ebp - 0x108]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0x1238]
push eax
mov ecx, dword [ebp - 0x108]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1238]
lea edx, [ebp - 0x1234]
call fcn.0040c950
mov edx, dword [ebp - 0x1234]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x53e0b6
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x53e0b6
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
je 0x53e08c
mov eax, dword [ebp - 0x10c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x10c], eax
mov eax, dword [0x5830e8]
push eax
mov ecx, dword [ebp - 0x10c]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x53e522
jmp 0x53e513
mov ecx, 8
mov edx, 0x541320
mov eax, dword [ebp - 0xc]
call fcn.0048dd0c
test al, al
je 0x53e1a8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
je 0x53e102
mov eax, dword [ebp - 0x110]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x1240]
push eax
mov ecx, dword [ebp - 0x110]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1240]
lea edx, [ebp - 0x123c]
call fcn.0040c950
mov edx, dword [ebp - 0x123c]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x53e199
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x53e199
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
je 0x53e16f
mov eax, dword [ebp - 0x114]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x114], eax
mov eax, dword [0x582490]
push eax
mov ecx, dword [ebp - 0x114]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x53e522
jmp 0x53e513
mov ecx, 8
mov edx, 0x541334
mov eax, dword [ebp - 0xc]
call fcn.0048dd0c
test al, al
je 0x53e2a4
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
je 0x53e1e5
mov eax, dword [ebp - 0x118]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x1248]
push eax
mov ecx, dword [ebp - 0x118]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1248]
lea edx, [ebp - 0x1244]
call fcn.0040c950
mov edx, dword [ebp - 0x1244]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x53e295
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x53e295
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x53e252
mov eax, dword [ebp - 0x11c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x124c]
push eax
mov ecx, dword [ebp - 0x11c]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x124c]
mov edx, 0x541348
call fcn.00405a0c
mov eax, dword [0x58240c]
sete byte [eax]
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x53e522
jmp 0x53e513
mov ecx, 8
mov edx, 0x541354
mov eax, dword [ebp - 0xc]
call fcn.0048dd0c
test al, al
je 0x53e3a0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
je 0x53e2e1
mov eax, dword [ebp - 0x120]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x1254]
push eax
mov ecx, dword [ebp - 0x120]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1254]
lea edx, [ebp - 0x1250]
call fcn.0040c950
mov edx, dword [ebp - 0x1250]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x53e391
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x53e391
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
je 0x53e34e
mov eax, dword [ebp - 0x124]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x1258]
push eax
mov ecx, dword [ebp - 0x124]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1258]
mov edx, 0x1e
call fcn.0040cf54
mov edx, dword [0x583144]
mov dword [edx], eax
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x53e522
jmp 0x53e513
mov ecx, 0xe
mov edx, 0x541368
mov eax, dword [ebp - 0xc]
call fcn.0048dd0c
test al, al
je 0x53e513
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
je 0x53e3dd
mov eax, dword [ebp - 0x128]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x1260]
push eax
mov ecx, dword [ebp - 0x128]
sub ecx, 0xe
mov edx, 0xf
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1260]
lea edx, [ebp - 0x125c]
call fcn.0040c950
mov edx, dword [ebp - 0x125c]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x53e50d
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x53e50d
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x53e462
mov eax, dword [ebp - 0x12c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x12c]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
push 0
lea eax, [ebp - 0x1264]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
mov edx, dword [0x5829d0]
mov eax, dword [ebp - 0xc]
call fcn.0048d980
mov edx, dword [ebp - 0x1264]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 0
lea eax, [ebp - 0x1268]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.0048d980
mov edx, dword [ebp - 0x1268]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 0
lea eax, [ebp - 0x126c]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
mov edx, dword [0x58291c]
mov eax, dword [ebp - 0xc]
call fcn.0048d980
mov edx, dword [ebp - 0x126c]
lea eax, [ebp - 0xc]
call fcn.0040567c
inc ebx
cmp ebx, 6
jge 0x53e522
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x53dded
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x53e5af
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x1274]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1274]
lea edx, [ebp - 0x1270]
call fcn.0040c950
cmp dword [ebp - 0x1270], 0
jne 0x53e5a6
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x48]
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xffffffff
jne 0x53e56a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebp - 0x69], 0
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x5402fb
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x1278]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1278]
lea edx, [ebp - 0xc]
call fcn.0040c950
cmp dword [ebp - 0xc], 0
je 0x5402ec
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3b
je 0x5402ec
cmp byte [ebp - 0x69], 0
jne 0x53e671
mov edx, 0x541390
mov eax, dword [ebp - 0xc]
call fcn.0040c79c
test eax, eax
jne 0x53e671
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov byte [ebp - 0x69], 1
jmp 0x5402ec
cmp byte [ebp - 0x69], 0
je 0x5402ec
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x5b
jne 0x53e6ba
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
je 0x53e6a6
mov eax, dword [ebp - 0x130]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x130]
cmp byte [eax + edx - 1], 0x5d
je 0x5402fb
mov edx, dword [ebp - 0xc]
mov eax, 0x5412ec
call fcn.00405bc0
mov ebx, eax
test ebx, ebx
jle 0x5402ec
mov esi, dword [ebp - 0xc]
test esi, esi
je 0x53e6dd
sub esi, 4
mov esi, dword [esi]
lea eax, [ebp - 0x1280]
push eax
mov ecx, esi
sub ecx, ebx
lea edx, [ebx + 1]
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1280]
lea edx, [ebp - 0x127c]
call fcn.0040c950
mov edx, dword [ebp - 0x127c]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x5402ec
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push 0x5413a4
push dword [ebp - 0xc]
push 0x5413b0
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00405978
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
je 0x53e769
mov eax, dword [ebp - 0x134]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x9c]
call fcn.00405d04
lea eax, [ebp - 0x1168]
mov ecx, 0xff
mov edx, 0x1000
call fcn.00403e38
lea eax, [ebp - 0x11b0]
mov ecx, 0xff
mov edx, 0x48
call fcn.00403e38
lea eax, [ebp - 0x11c0]
push eax
call sub.kernel32.dll_GetLocalTime
movzx eax, word [ebp - 0x11c0]
movzx edx, word [ebp - 0x11be]
add eax, edx
movzx edx, word [ebp - 0x11ba]
add eax, edx
movzx edx, word [ebp - 0x11b8]
add eax, edx
movzx edx, word [ebp - 0x11b6]
add eax, edx
mov dword [ebp - 0x74], eax
lea edx, [ebp - 0x1284]
mov eax, dword [ebp - 0x74]
call fcn.0040cdac
mov eax, dword [ebp - 0x1284]
lea edx, [ebp - 0x168]
call fcn.0047ee5c
lea eax, [ebp - 0x8a]
xor ecx, ecx
mov edx, 8
call fcn.00403e38
lea edx, [ebp - 0x8a]
lea eax, [ebp - 0x168]
mov ecx, 8
call fcn.004035b8
mov dword [ebp - 0x90], 0x40
mov ecx, 8
mov eax, dword [ebp - 0x90]
xor edx, edx
div ecx
mov dword [ebp - 0x90], eax
lea edx, [ebp - 0x1168]
mov eax, dword [0x582f7c]
mov ecx, 0x1000
call fcn.004035b8
lea edx, [ebp - 0x11b0]
mov eax, dword [0x582cd4]
mov ecx, 0x48
call fcn.004035b8
xor ebx, ebx
mov dword [ebp - 0x48], 0x12
lea ecx, [ebp - 0x11b0]
lea eax, [ebx + 3]
xor edx, edx
div dword [ebp - 0x90]
movzx esi, byte [ebp + edx - 0x8a]
lea eax, [ebx + 2]
xor edx, edx
div dword [ebp - 0x90]
movzx eax, byte [ebp + edx - 0x8a]
shl eax, 8
add esi, eax
lea eax, [ebx + 1]
xor edx, edx
div dword [ebp - 0x90]
movzx eax, byte [ebp + edx - 0x8a]
shl eax, 0x10
add esi, eax
movzx eax, byte [ebp + ebx - 0x8a]
shl eax, 0x18
add esi, eax
xor dword [ecx], esi
lea eax, [ebx + 4]
xor edx, edx
div dword [ebp - 0x90]
mov ebx, edx
add ecx, 4
dec dword [ebp - 0x48]
jne 0x53e886
lea eax, [ebp - 0x98]
xor ecx, ecx
mov edx, 8
call fcn.00403e38
mov dword [ebp - 0x48], 9
lea ecx, [ebp - 0x11b0]
lea edx, [ebp - 0x98]
mov ebx, edx
mov eax, dword [ebx]
add edx, 4
mov edx, dword [edx]
mov esi, eax
and esi, 0xff
shl esi, 0x18
mov edi, eax
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, eax
and edi, 0xff0000
shr edi, 8
or esi, edi
and eax, 0xff000000
shr eax, 0x18
or esi, eax
mov eax, esi
mov esi, edx
and esi, 0xff
shl esi, 0x18
mov edi, edx
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, edx
and edi, 0xff0000
shr edi, 8
or esi, edi
and edx, 0xff000000
shr edx, 0x18
or esi, edx
mov edx, esi
xor eax, dword [ebp - 0x11b0]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x11ac]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x11a8]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x11a4]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x11a0]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x119c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1198]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1194]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1190]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x118c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1188]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1184]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1180]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x117c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1178]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1174]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1170]
xor edx, dword [ebp - 0x116c]
mov esi, eax
and esi, 0xff
shl esi, 0x18
mov edi, eax
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, eax
and edi, 0xff0000
shr edi, 8
or esi, edi
and eax, 0xff000000
shr eax, 0x18
or esi, eax
mov eax, esi
mov esi, edx
and esi, 0xff
shl esi, 0x18
mov edi, edx
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, edx
and edi, 0xff0000
shr edi, 8
or esi, edi
and edx, 0xff000000
shr edx, 0x18
or esi, edx
mov edx, esi
mov dword [ebx], edx
lea edx, [ebp - 0x98]
add edx, 4
mov dword [edx], eax
movzx eax, byte [ebp - 0x95]
movzx edx, byte [ebp - 0x96]
shl edx, 8
add eax, edx
movzx edx, byte [ebp - 0x97]
shl edx, 0x10
add eax, edx
movzx edx, byte [ebp - 0x98]
shl edx, 0x18
add eax, edx
mov dword [ecx], eax
movzx eax, byte [ebp - 0x91]
movzx edx, byte [ebp - 0x92]
shl edx, 8
add eax, edx
movzx edx, byte [ebp - 0x93]
shl edx, 0x10
add eax, edx
movzx edx, byte [ebp - 0x94]
shl edx, 0x18
add eax, edx
mov dword [ecx + 4], eax
add ecx, 8
dec dword [ebp - 0x48]
jne 0x53e90c
mov ebx, 4
lea ecx, [ebp - 0x1168]
mov dword [ebp - 0x48], 0x80
mov eax, ecx
mov dword [ebp - 0x154], eax
lea edx, [ebp - 0x98]
mov eax, dword [edx]
add edx, 4
mov edx, dword [edx]
mov esi, eax
and esi, 0xff
shl esi, 0x18
mov edi, eax
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, eax
and edi, 0xff0000
shr edi, 8
or esi, edi
and eax, 0xff000000
shr eax, 0x18
or esi, eax
mov eax, esi
mov esi, edx
and esi, 0xff
shl esi, 0x18
mov edi, edx
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, edx
and edi, 0xff0000
shr edi, 8
or esi, edi
and edx, 0xff000000
shr edx, 0x18
or esi, edx
mov edx, esi
xor eax, dword [ebp - 0x11b0]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x11ac]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x11a8]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x11a4]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x11a0]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x119c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1198]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1194]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1190]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x118c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1188]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1184]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1180]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x117c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1178]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1174]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1170]
xor edx, dword [ebp - 0x116c]
mov esi, eax
and esi, 0xff
shl esi, 0x18
mov edi, eax
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, eax
and edi, 0xff0000
shr edi, 8
or esi, edi
and eax, 0xff000000
shr eax, 0x18
or esi, eax
mov eax, esi
mov esi, edx
and esi, 0xff
shl esi, 0x18
mov edi, edx
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, edx
and edi, 0xff0000
shr edi, 8
or esi, edi
and edx, 0xff000000
shr edx, 0x18
or esi, edx
mov edx, esi
lea esi, [ebp - 0x98]
mov dword [esi], edx
lea edx, [ebp - 0x98]
add edx, 4
mov dword [edx], eax
movzx eax, byte [ebp - 0x95]
movzx edx, byte [ebp - 0x96]
shl edx, 8
add eax, edx
movzx edx, byte [ebp - 0x97]
shl edx, 0x10
add eax, edx
movzx edx, byte [ebp - 0x98]
shl edx, 0x18
add eax, edx
mov edx, dword [ebp - 0x154]
mov dword [edx], eax
movzx eax, byte [ebp - 0x91]
movzx edx, byte [ebp - 0x92]
shl edx, 8
add eax, edx
movzx edx, byte [ebp - 0x93]
shl edx, 0x10
add eax, edx
movzx edx, byte [ebp - 0x94]
shl edx, 0x18
add eax, edx
mov edx, dword [ebp - 0x154]
mov dword [edx + 4], eax
add dword [ebp - 0x154], 8
dec dword [ebp - 0x48]
jne 0x53ef4b
add ecx, 0x400
dec ebx
jne 0x53ef3c
lea eax, [ebp - 0x34]
call fcn.00405ad4
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xc]
call fcn.00405ad4
mov dword [ebp - 0xb4], eax
lea eax, [ebp - 0xb0]
mov ecx, 0xff
mov edx, 8
call fcn.00403e38
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xa8], eax
mov ebx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x9c]
test eax, eax
jns 0x53f5e1
add eax, 7
sar eax, 3
test eax, eax
jle 0x53fc06
mov dword [ebp - 0xc4], eax
mov edx, ebx
mov eax, dword [ebp - 0xa8]
mov ecx, 8
call fcn.004035b8
mov eax, 1
lea edx, [ebp - 0xb0]
add edx, eax
dec edx
movzx edx, byte [edx]
mov ecx, ebx
add ecx, eax
dec ecx
xor byte [ecx], dl
inc eax
cmp eax, 9
jne 0x53f609
mov eax, dword [ebx]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
mov ecx, eax
and ecx, 0xff
shl ecx, 0x18
mov esi, eax
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, eax
and esi, 0xff0000
shr esi, 8
or ecx, esi
and eax, 0xff000000
shr eax, 0x18
or ecx, eax
mov eax, ecx
mov ecx, edx
and ecx, 0xff
shl ecx, 0x18
mov esi, edx
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, edx
and esi, 0xff0000
shr esi, 8
or ecx, esi
and edx, 0xff000000
shr edx, 0x18
or ecx, edx
mov edx, ecx
xor eax, dword [ebp - 0x11b0]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x11ac]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x11a8]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x11a4]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x11a0]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x119c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1198]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1194]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1190]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x118c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1188]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1184]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1180]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x117c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1178]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1174]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1170]
xor edx, dword [ebp - 0x116c]
mov ecx, eax
and ecx, 0xff
shl ecx, 0x18
mov esi, eax
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, eax
and esi, 0xff0000
shr esi, 8
or ecx, esi
and eax, 0xff000000
shr eax, 0x18
or ecx, eax
mov eax, ecx
mov ecx, edx
and ecx, 0xff
shl ecx, 0x18
mov esi, edx
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, edx
and esi, 0xff0000
shr esi, 8
or ecx, esi
and edx, 0xff000000
shr edx, 0x18
or ecx, edx
mov edx, ecx
mov dword [ebx], edx
mov edx, ebx
add edx, 4
mov dword [edx], eax
lea edx, [ebp - 0xb0]
mov eax, ebx
mov ecx, 8
call fcn.004035b8
mov eax, dword [ebp - 0xa8]
add eax, 8
mov dword [ebp - 0xa8], eax
add ebx, 8
dec dword [ebp - 0xc4]
jne 0x53f5f2
mov eax, dword [ebp - 0x9c]
and eax, 0x80000007
jns 0x53fc18
dec eax
or eax, 0xfffffff8
inc eax
test eax, eax
je 0x540244
lea eax, [ebp - 0xb0]
mov eax, dword [eax]
lea edx, [ebp - 0xb0]
add edx, 4
mov edx, dword [edx]
mov ecx, eax
and ecx, 0xff
shl ecx, 0x18
mov esi, eax
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, eax
and esi, 0xff0000
shr esi, 8
or ecx, esi
and eax, 0xff000000
shr eax, 0x18
or ecx, eax
mov eax, ecx
mov ecx, edx
and ecx, 0xff
shl ecx, 0x18
mov esi, edx
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, edx
and esi, 0xff0000
shr esi, 8
or ecx, esi
and edx, 0xff000000
shr edx, 0x18
or ecx, edx
mov edx, ecx
xor eax, dword [ebp - 0x11b0]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x11ac]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x11a8]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x11a4]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x11a0]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x119c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1198]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1194]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1190]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x118c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1188]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1184]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1180]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x117c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1178]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1174]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1170]
xor edx, dword [ebp - 0x116c]
mov ecx, eax
and ecx, 0xff
shl ecx, 0x18
mov esi, eax
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, eax
and esi, 0xff0000
shr esi, 8
or ecx, esi
and eax, 0xff000000
shr eax, 0x18
or ecx, eax
mov eax, ecx
mov ecx, edx
and ecx, 0xff
shl ecx, 0x18
mov esi, edx
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, edx
and esi, 0xff0000
shr esi, 8
or ecx, esi
and edx, 0xff000000
shr edx, 0x18
or ecx, edx
mov edx, ecx
lea ecx, [ebp - 0xb0]
mov dword [ecx], edx
lea edx, [ebp - 0xb0]
add edx, 4
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
and eax, 0x80000007
jns 0x5401fa
dec eax
or eax, 0xfffffff8
inc eax
mov dword [ebp - 0xa0], eax
mov edx, ebx
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa0]
call fcn.004035b8
mov eax, dword [ebp - 0xa0]
test eax, eax
jle 0x540244
mov dword [ebp - 0xc4], eax
mov eax, 1
lea edx, [ebp - 0xb0]
add edx, eax
dec edx
movzx edx, byte [edx]
mov ecx, ebx
add ecx, eax
dec ecx
xor byte [ecx], dl
inc eax
dec dword [ebp - 0xc4]
jne 0x540228
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.0048ed34
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [0x582378]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.00490578
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0xc]
call fcn.004055e4
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x53e609
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
cmp dword [eax + 8], 0
jg 0x541128
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x5403a3
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x128c]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x128c]
lea edx, [ebp - 0x1288]
call fcn.0040c950
cmp dword [ebp - 0x1288], 0
jne 0x54039a
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x48]
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xffffffff
jne 0x54035e
mov byte [ebp - 0x69], 0
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x540911
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x1290]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1290]
lea edx, [ebp - 0xc]
call fcn.0040c950
cmp dword [ebp - 0xc], 0
je 0x540902
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3b
je 0x540902
cmp byte [ebp - 0x69], 0
jne 0x540431
mov edx, 0x5413bc
mov eax, dword [ebp - 0xc]
call fcn.0040c79c
test eax, eax
jne 0x540431
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov byte [ebp - 0x69], 1
jmp 0x540902
cmp byte [ebp - 0x69], 0
je 0x540902
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x5b
jne 0x54047a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
je 0x540466
mov eax, dword [ebp - 0x138]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x138]
cmp byte [eax + edx - 1], 0x5d
je 0x540911
mov edx, dword [ebp - 0xc]
mov eax, 0x5412ec
call fcn.00405bc0
mov ebx, eax
test ebx, ebx
jle 0x540902
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
je 0x5404b4
mov eax, dword [ebp - 0x13c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x1298]
push eax
mov ecx, dword [ebp - 0x13c]
sub ecx, ebx
lea edx, [ebx + 1]
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1298]
lea edx, [ebp - 0x1294]
call fcn.0040c950
mov edx, dword [ebp - 0x1294]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x540902
push 1
lea eax, [ebp - 0x129c]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0048d980
mov edx, dword [ebp - 0x129c]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 1
lea eax, [ebp - 0x12a4]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.0048d980
mov edx, dword [ebp - 0x12a4]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 1
lea eax, [ebp - 0x12a8]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0xc]
call fcn.0048d980
mov edx, dword [ebp - 0x12a8]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 1
lea eax, [ebp - 0x12ac]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.0048d980
mov edx, dword [ebp - 0x12ac]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 1
lea eax, [ebp - 0x12b0]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0xc]
call fcn.0048d980
mov edx, dword [ebp - 0x12b0]
lea eax, [ebp - 0xc]
call fcn.0040567c
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040cf54
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
sub eax, 4
jae 0x54064e
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
je 0x54063e
mov eax, dword [ebp - 0x140]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x20
sete byte [ebp - 0x141]
jmp 0x540655
mov byte [ebp - 0x141], 0
cmp byte [ebp - 0x141], 0
je 0x54066b
cmp dword [ebp - 0x14], 0
setne byte [ebp - 0x142]
jmp 0x540672
mov byte [ebp - 0x142], 0
cmp byte [ebp - 0x142], 0
je 0x540688
cmp dword [ebp - 0x18], 0
setne byte [ebp - 0x143]
jmp 0x54068f
mov byte [ebp - 0x143], 0
cmp byte [ebp - 0x143], 0
je 0x540902
cmp dword [ebp - 0x24], 0
je 0x540902
movzx eax, byte [ebp - 0x54]
mov byte [ebp - 0x55], al
mov eax, dword [ebp - 0x14]
mov edx, 0x5413d0
call fcn.00405a0c
jne 0x5406ce
lea eax, [ebp - 0x14]
mov edx, dword [0x582d10]
mov edx, dword [edx]
call fcn.0040567c
jmp 0x540709
mov edx, dword [0x582d10]
mov edx, dword [edx]
lea eax, [ebp - 0x12b4]
mov ecx, dword [ebp - 0x14]
call fcn.004058fc
mov eax, dword [ebp - 0x12b4]
mov dword [ebp - 0x148], eax
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x148]
call fcn.004127e8
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x38]
call fcn.0040567c
lea eax, [ebp - 0x20]
mov edx, dword [0x5826f8]
add edx, 0x2bc
call fcn.00405848
mov edx, dword [ebp - 0x20]
mov eax, 0x5413dc
call fcn.00405bc0
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jle 0x540748
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x4c]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x20]
call fcn.00405adc
cmp dword [ebp - 0x20], 0
jne 0x54075b
lea eax, [ebp - 0x20]
mov edx, 0x5413e8
call fcn.0040567c
cmp byte [ebp - 0x55], 1
jne 0x5407d9
lea edx, [ebp - 0x12b8]
mov eax, dword [0x582ca0]
mov eax, dword [eax]
call fcn.00477540
mov edx, dword [ebp - 0x12b8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x582d10]
push dword [eax]
push dword [ebp - 0x20]
push 0x5413d0
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00405978
mov eax, dword [ebp - 0x1c]
call fcn.0040d59c
test al, al
jne 0x5407b4
mov eax, dword [ebp - 0x1c]
call fcn.0040d5c0
mov eax, dword [0x582ebc]
mov byte [eax], 1
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
push 0x5413f8
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00405978
jmp 0x540887
cmp byte [ebp - 0x55], 2
jne 0x54082a
mov eax, dword [0x582d10]
push dword [eax]
push dword [ebp - 0x20]
push 0x5413d0
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00405978
mov eax, dword [ebp - 0x1c]
call fcn.0040d59c
test al, al
jne 0x54080f
mov eax, dword [ebp - 0x1c]
call fcn.0040d5c0
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
call fcn.004058b0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x540887
mov eax, dword [0x582d10]
push dword [eax]
push dword [ebp - 0x20]
push 0x5413d0
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00405978
mov eax, dword [ebp - 0x1c]
call fcn.0040d59c
test al, al
jne 0x54085a
mov eax, dword [ebp - 0x1c]
call fcn.0040d5c0
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
call fcn.004058b0
lea eax, [ebp - 0x12bc]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.004058fc
mov edx, dword [ebp - 0x12bc]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov dl, 1
mov eax, dword [0x53bd8c]
call fcn.0053c164
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
add eax, 8
mov edx, dword [ebp - 0x18]
call fcn.00405638
mov eax, dword [ebp - 0x5c]
add eax, 0xc
mov edx, dword [ebp - 0x14]
call fcn.00405638
mov eax, dword [ebp - 0x5c]
add eax, 0x10
mov edx, dword [ebp - 0x1c]
call fcn.00405638
mov eax, dword [ebp - 0x5c]
movzx edx, byte [ebp - 0x55]
mov byte [eax + 4], dl
mov eax, dword [ebp - 0x5c]
add eax, 0x18
mov edx, dword [ebp - 0x28]
call fcn.00405638
mov eax, dword [ebp - 0x5c]
add eax, 0x14
mov edx, dword [ebp - 0x24]
call fcn.00405638
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov ecx, dword [ebp - 0x5c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x5403c9
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x540985
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x48]
call fcn.0041e2dc
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x540961
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [eax]
call dword [edx + 8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x540a93
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
cmp byte [0x58c674], 3
je 0x540a93
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 4], 1
jne 0x540a86
lea ecx, [ebp - 0x12c8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12c8]
lea ecx, [ebp - 0x12c4]
mov eax, dword [ebp - 0x3c]
call fcn.0053d3b8
mov eax, dword [ebp - 0x12c4]
lea edx, [ebp - 0x12c0]
call fcn.0040c590
mov eax, dword [ebp - 0x12c0]
push eax
lea edx, [ebp - 0x12cc]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c590
mov edx, dword [ebp - 0x12cc]
pop eax
call fcn.0040c79c
test eax, eax
jne 0x540a6a
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
jmp 0x540a86
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e184
dec dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xffffffff
jne 0x5409c6
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
cmp dword [eax + 8], 0
jle 0x540b25
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x540b15
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x540af1
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp 0x540c41
xor eax, eax
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x30]
call fcn.004055e4
mov dl, 1
mov eax, dword [0x41c07c]
call fcn.00404674
mov ebx, eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x540be7
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
cmp byte [ebp - 0x3d], 0
je 0x540bbb
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 4], 3
jne 0x540bda
lea ecx, [ebp - 0x12d0]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x12d0]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov ecx, eax
mov eax, ebx
pop edx
mov esi, dword [eax]
call dword [esi + 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x48]
jmp 0x540bda
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 4], 3
jne 0x540bda
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
dec dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xffffffff
jne 0x540b58
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x540c3a
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov edx, dword [ebp - 0x48]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x18]
push eax
lea ecx, [ebp - 0x12d4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x12d4]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
xor edx, edx
mov esi, dword [eax]
call dword [esi + 0x64]
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x540c01
mov eax, ebx
call fcn.004046a4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebp - 0x6a], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x5410e9
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
cmp byte [0x58c674], 3
je 0x5410e9
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
lea ecx, [ebp - 0x12e0]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12e0]
lea ecx, [ebp - 0x12dc]
mov eax, dword [ebp - 0x3c]
call fcn.0053d3b8
mov eax, dword [ebp - 0x12dc]
lea edx, [ebp - 0x12d8]
call fcn.0040c590
mov eax, dword [ebp - 0x12d8]
push eax
lea edx, [ebp - 0x12e4]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c590
mov edx, dword [ebp - 0x12e4]
pop eax
call fcn.0040c79c
test eax, eax
jne 0x54108f
mov eax, dword [ebp - 0x5c]
movzx eax, byte [eax + 4]
sub al, 1
jb 0x540d97
dec al
je 0x540d58
dec al
je 0x540e47
jmp 0x5410da
lea ecx, [ebp - 0x12e8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12e8]
mov eax, dword [ebp - 0x5c]
add eax, 0x10
call fcn.00405638
mov eax, dword [ebp - 0x5c]
mov byte [eax + 4], 6
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e184
jmp 0x5410da
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x12f4]
call fcn.004058fc
mov edx, dword [ebp - 0x12f4]
lea ecx, [ebp - 0x12f0]
mov eax, dword [ebp - 0x3c]
call fcn.0053d3b8
mov eax, dword [ebp - 0x12f0]
lea edx, [ebp - 0x12ec]
call fcn.0040c590
mov eax, dword [ebp - 0x12ec]
push eax
lea edx, [ebp - 0x12f8]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c590
mov edx, dword [ebp - 0x12f8]
pop eax
call fcn.0040c79c
test eax, eax
jne 0x540e08
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
jmp 0x5410da
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e184
lea ecx, [ebp - 0x12fc]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12fc]
mov eax, dword [ebp - 0x5c]
add eax, 0x10
call fcn.00405638
mov eax, dword [ebp - 0x5c]
mov byte [eax + 4], 4
jmp 0x5410da
cmp byte [ebp - 0x6a], 0
je 0x540e5a
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
jmp 0x5410da
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x1308]
call fcn.004058fc
mov edx, dword [ebp - 0x1308]
lea ecx, [ebp - 0x1304]
mov eax, dword [ebp - 0x3c]
call fcn.0053d3b8
mov eax, dword [ebp - 0x1304]
lea edx, [ebp - 0x1300]
call fcn.0040c590
mov eax, dword [ebp - 0x1300]
push eax
lea edx, [ebp - 0x130c]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c590
mov edx, dword [ebp - 0x130c]
pop eax
call fcn.0040c79c
test eax, eax
jne 0x540f76
mov byte [ebp - 0x6a], 1
mov dl, 1
mov eax, dword [0x41c3a4]
call fcn.00404674
mov dword [ebp - 0x70], eax
xor eax, eax
push ebp
push 0x540f2d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x1310]
call fcn.004058fc
mov edx, dword [ebp - 0x1310]
mov eax, dword [ebp - 0x70]
call fcn.00421900
push 0
push 0
mov eax, dword [ebp - 0x70]
call fcn.00421130
mov eax, dword [0x582f40]
mov eax, dword [eax]
mov edx, dword [ebp - 0x70]
call fcn.00482804
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x540f61
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
mov eax, dword [ebp - 0x70]
call fcn.004046a4
jmp 0x5410da
lea ecx, [ebp - 0x1318]
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x3c]
call fcn.0053d3b8
mov eax, dword [ebp - 0x1318]
lea edx, [ebp - 0x1314]
call fcn.0040c590
mov eax, dword [ebp - 0x1314]
push eax
lea edx, [ebp - 0x131c]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c590
mov edx, dword [ebp - 0x131c]
pop eax
call fcn.0040c79c
test eax, eax
jne 0x5410da
mov dl, 1
mov eax, dword [0x41c3a4]
call fcn.00404674
mov dword [ebp - 0x70], eax
xor eax, eax
push ebp
push 0x541017
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x70]
call fcn.00421900
push 0
push 0
mov eax, dword [ebp - 0x70]
call fcn.00421130
mov eax, dword [0x582f40]
mov eax, dword [eax]
mov edx, dword [ebp - 0x70]
call fcn.00482804
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x54104b
lea ecx, [ebp - 0x1320]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1320]
mov eax, dword [ebp - 0x5c]
add eax, 0x10
call fcn.00405638
mov eax, dword [ebp - 0x5c]
mov byte [eax + 4], 5
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e184
mov eax, dword [ebp - 0x70]
call fcn.004046a4
jmp 0x5410da
lea ecx, [ebp - 0x1324]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1324]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
call fcn.00405a74
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x14d], al
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e184
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x540cb9
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x44]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0xbc]
call fcn.004046a4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [0x58c674], 3
jne 0x54122a
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x54119e
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x48]
call fcn.0041e2dc
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x54117a
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [eax]
call dword [edx + 8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x54121f
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x5411fb
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x44]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x54124a
mov eax, dword [0x5825e0]
push eax
call sub.kernel32.dll_LeaveCriticalSection
ret