Function at 0x552fb4
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x5f
push 0
push 0
dec ecx
jne 0x552fbc
push ecx
push ebx
mov dword [ebp - 0x20], edx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x27c]
mov edx, dword [0x408124]
call fcn.004050a4
xor eax, eax
push ebp
push 0x553d5d
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [0x567c8c], 1
mov dl, 1
mov eax, dword [0x41b600]
call fcn.0040350c
mov dword [ebp - 0x10], eax
mov eax, dword [0x567c68]
call fcn.0043b2e0
xor eax, eax
mov dword [0x567c84], eax
mov ecx, dword [ebp - 0x10]
mov edx, 0x553d74
mov eax, 0x80000001
call fcn.005268d0
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x55314d
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x55314d
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], 0
mov eax, dword [0x5650b0]
mov eax, dword [eax]
call fcn.0047aba8
lea ecx, [ebp - 8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x280]
mov eax, dword [ebp - 8]
call fcn.00408f24
mov edx, dword [ebp - 0x280]
mov eax, 0x553dac
call fcn.004049a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x5530a5
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x18]
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004048bc
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x284]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x284]
mov edx, 0x553d74
mov eax, 0x80000001
call fcn.00526a88
inc dword [0x567c84]
push 1
mov ecx, 0x553dbc
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [0x567b10]
push eax
mov ecx, 0x553dd4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x553de4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
lea ecx, [ebp - 0x288]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x288]
push eax
mov ecx, 0x553df4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
inc dword [ebp - 0x14]
dec dword [ebp - 0x1c]
jne 0x55304f
mov ecx, dword [ebp - 0x10]
mov edx, 0x553e08
mov eax, 0x80000001
call fcn.005268d0
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x553289
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x553289
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], 0
mov eax, dword [0x5650b0]
mov eax, dword [eax]
call fcn.0047aba8
lea ecx, [ebp - 8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x28c]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x28c]
mov edx, 0x553e08
mov eax, 0x80000001
call fcn.00526a88
inc dword [0x567c84]
lea edx, [ebp - 0x290]
mov eax, dword [ebp - 8]
call fcn.00408f24
mov edx, dword [ebp - 0x290]
mov eax, 0x553dac
call fcn.004049a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x553211
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x18]
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004048bc
push 2
mov ecx, 0x553dbc
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [0x567b10]
push eax
mov ecx, 0x553dd4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x553de4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
lea ecx, [ebp - 0x294]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x294]
push eax
mov ecx, 0x553df4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
inc dword [ebp - 0x14]
dec dword [ebp - 0x1c]
jne 0x55318b
mov edx, 0x553d74
mov ecx, dword [ebp - 0x10]
mov eax, 0x80000002
call fcn.005268d0
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x5533c4
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x5533c4
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], 0
mov eax, dword [0x5650b0]
mov eax, dword [eax]
call fcn.0047aba8
lea ecx, [ebp - 8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x298]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x298]
mov edx, 0x553d74
mov eax, 0x80000002
call fcn.00526a88
inc dword [0x567c84]
lea edx, [ebp - 0x29c]
mov eax, dword [ebp - 8]
call fcn.00408f24
mov edx, dword [ebp - 0x29c]
mov eax, 0x553dac
call fcn.004049a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x55334d
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x18]
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004048bc
push 3
mov ecx, 0x553dbc
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0x553e44
mov ecx, 0x553dd4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x553de4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
lea ecx, [ebp - 0x2a0]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x2a0]
push eax
mov ecx, 0x553df4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
inc dword [ebp - 0x14]
dec dword [ebp - 0x1c]
jne 0x5532c7
mov edx, 0x553e08
mov ecx, dword [ebp - 0x10]
mov eax, 0x80000002
call fcn.005268d0
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x5534ff
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x5534ff
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], 0
mov eax, dword [0x5650b0]
mov eax, dword [eax]
call fcn.0047aba8
lea ecx, [ebp - 8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x2a4]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x2a4]
mov edx, 0x553e08
mov eax, 0x80000002
call fcn.00526a88
inc dword [0x567c84]
lea edx, [ebp - 0x2a8]
mov eax, dword [ebp - 8]
call fcn.00408f24
mov edx, dword [ebp - 0x2a8]
mov eax, 0x553dac
call fcn.004049a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x553488
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x18]
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004048bc
push 4
mov ecx, 0x553dbc
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0x553e44
mov ecx, 0x553dd4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x553de4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
lea ecx, [ebp - 0x2ac]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x2ac]
push eax
mov ecx, 0x553df4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
inc dword [ebp - 0x14]
dec dword [ebp - 0x1c]
jne 0x553402
mov ecx, dword [ebp - 0x10]
mov edx, 0x553e50
mov eax, 0x80000001
call fcn.005268d0
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x55363a
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x55363a
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], 0
mov eax, dword [0x5650b0]
mov eax, dword [eax]
call fcn.0047aba8
lea ecx, [ebp - 8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x2b0]
mov eax, dword [ebp - 8]
call fcn.00408f24
mov edx, dword [ebp - 0x2b0]
mov eax, 0x553dac
call fcn.004049a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x553593
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x18]
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004048bc
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x2b4]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x2b4]
mov edx, 0x553e50
mov eax, 0x80000001
call fcn.00526a88
inc dword [0x567c84]
push 6
mov ecx, 0x553dbc
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0x553e44
mov ecx, 0x553dd4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x553de4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
lea ecx, [ebp - 0x2b8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x2b8]
push eax
mov ecx, 0x553df4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
inc dword [ebp - 0x14]
dec dword [ebp - 0x1c]
jne 0x55353d
mov edx, 0x553e50
mov ecx, dword [ebp - 0x10]
mov eax, 0x80000002
call fcn.005268d0
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x553775
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x553775
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], 0
mov eax, dword [0x5650b0]
mov eax, dword [eax]
call fcn.0047aba8
lea ecx, [ebp - 8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x2bc]
mov eax, dword [ebp - 8]
call fcn.00408f24
mov edx, dword [ebp - 0x2bc]
mov eax, 0x553dac
call fcn.004049a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x5536ce
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x18]
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004048bc
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x2c0]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x2c0]
mov edx, 0x553e50
mov eax, 0x80000002
call fcn.00526a88
inc dword [0x567c84]
push 7
mov ecx, 0x553dbc
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0x553e44
mov ecx, 0x553dd4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x553de4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
lea ecx, [ebp - 0x2c4]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x2c4]
push eax
mov ecx, 0x553df4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
inc dword [ebp - 0x14]
dec dword [ebp - 0x1c]
jne 0x553678
mov eax, dword [0x565220]
mov eax, dword [eax]
call fcn.0040465c
test eax, eax
je 0x553946
mov eax, dword [0x565220]
mov eax, dword [eax]
call fcn.004f35ac
test al, al
je 0x553946
mov edx, dword [0x565220]
mov edx, dword [edx]
lea eax, [ebp - 0x2c8]
mov ecx, 0x553e94
call fcn.004046a8
mov eax, dword [ebp - 0x2c8]
lea ecx, [ebp - 0x27c]
mov edx, 0x3f
call fcn.00409f5c
test eax, eax
jne 0x553946
push 0
call sub.ole32.dll_CoInitialize
mov eax, dword [0x5650b0]
mov eax, dword [eax]
call fcn.0047aba8
mov eax, dword [ebp - 0x274]
and eax, 0x10
cmp eax, 0x10
je 0x553928
xor eax, eax
push ebp
push 0x553921
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov eax, dword [0x565220]
push dword [eax]
push 0x553ea4
push dword [ebp - 0x270]
lea eax, [ebp - 0x2d0]
mov edx, 3
call fcn.0040471c
mov edx, dword [ebp - 0x2d0]
lea eax, [ebp - 0x2cc]
call fcn.00404c50
mov eax, dword [ebp - 0x2cc]
call fcn.00404ccc
push eax
mov eax, dword [0x567b5c]
push eax
mov eax, dword [eax]
call dword [eax + 0x14]
test eax, eax
jne 0x553913
push 4
push 0x567cb0
push 0x104
lea eax, [ebp - 0x124]
push eax
mov eax, dword [0x567b64]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 0x270]
mov eax, 0x553eb0
call fcn.004049a0
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x270]
call fcn.004048bc
lea eax, [ebp - 0xc]
lea edx, [ebp - 0x124]
mov ecx, 0x104
call fcn.0040460c
inc dword [0x567c84]
push 8
mov ecx, 0x553dbc
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [0x567b10]
push eax
mov ecx, 0x553dd4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x553de4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x270]
push eax
mov ecx, 0x553df4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x553928
ret
lea eax, [ebp - 0x27c]
call fcn.00409fac
test eax, eax
je 0x5537da
lea eax, [ebp - 0x27c]
call fcn.00409fd0
mov eax, dword [0x564ad8]
mov eax, dword [eax]
call fcn.0040465c
test eax, eax
je 0x553b16
mov eax, dword [0x564ad8]
mov eax, dword [eax]
call fcn.004f35ac
test al, al
je 0x553b16
mov edx, dword [0x564ad8]
mov edx, dword [edx]
lea eax, [ebp - 0x2d4]
mov ecx, 0x553e94
call fcn.004046a8
mov eax, dword [ebp - 0x2d4]
lea ecx, [ebp - 0x27c]
mov edx, 0x3f
call fcn.00409f5c
test eax, eax
jne 0x553b16
push 0
call sub.ole32.dll_CoInitialize
mov eax, dword [0x5650b0]
mov eax, dword [eax]
call fcn.0047aba8
mov eax, dword [ebp - 0x274]
and eax, 0x10
cmp eax, 0x10
je 0x553af8
xor eax, eax
push ebp
push 0x553af1
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov eax, dword [0x564ad8]
push dword [eax]
push 0x553ea4
push dword [ebp - 0x270]
lea eax, [ebp - 0x2dc]
mov edx, 3
call fcn.0040471c
mov edx, dword [ebp - 0x2dc]
lea eax, [ebp - 0x2d8]
call fcn.00404c50
mov eax, dword [ebp - 0x2d8]
call fcn.00404ccc
push eax
mov eax, dword [0x567b5c]
push eax
mov eax, dword [eax]
call dword [eax + 0x14]
test eax, eax
jne 0x553ae3
push 4
push 0x567cb0
push 0x104
lea eax, [ebp - 0x124]
push eax
mov eax, dword [0x567b64]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 0x270]
mov eax, 0x553eb0
call fcn.004049a0
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x270]
call fcn.004048bc
lea eax, [ebp - 0xc]
lea edx, [ebp - 0x124]
mov ecx, 0x104
call fcn.0040460c
inc dword [0x567c84]
push 9
mov ecx, 0x553dbc
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push 0x553e44
mov ecx, 0x553dd4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x553de4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x270]
push eax
mov ecx, 0x553df4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x553af8
ret
lea eax, [ebp - 0x27c]
call fcn.00409fac
test eax, eax
je 0x5539ab
lea eax, [ebp - 0x27c]
call fcn.00409fd0
mov ecx, dword [ebp - 0x10]
mov edx, 0x553ebc
mov eax, 0x80000002
call fcn.00526760
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x553cdc
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x553cdc
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], 0
mov eax, dword [0x5650b0]
mov eax, dword [eax]
call fcn.0047aba8
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x2e4]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x2e4]
lea eax, [ebp - 0x2e0]
mov edx, 0x553ef8
call fcn.004046a8
mov edx, dword [ebp - 0x2e0]
mov ecx, 0x553f38
mov eax, 0x80000002
call fcn.00526a88
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x2ec]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x2ec]
lea eax, [ebp - 0x2e8]
mov edx, 0x553ef8
call fcn.004046a8
mov edx, dword [ebp - 0x2e8]
mov ecx, 0x553f48
mov eax, 0x80000002
call fcn.00526a88
lea eax, [ebp - 0x2f0]
push eax
lea ecx, [ebp - 0x2f8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x2f8]
lea eax, [ebp - 0x2f4]
mov edx, 0x553ef8
call fcn.004046a8
mov edx, dword [ebp - 0x2f4]
mov ecx, 0x553f58
mov eax, 0x80000002
call fcn.00526a88
mov eax, dword [ebp - 0x2f0]
mov edx, 0x553f64
call fcn.004047a8
jne 0x553c4e
push 0x553e44
mov ecx, 0x553dd4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x553c66
mov eax, dword [0x567b10]
push eax
mov ecx, 0x553dd4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
push 5
mov ecx, 0x553dbc
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x553de4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
lea ecx, [ebp - 0x2fc]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x2fc]
push eax
mov ecx, 0x553f74
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x553df4
mov edx, dword [ebp - 8]
mov eax, dword [0x567c68]
mov ebx, dword [eax]
call dword [ebx + 4]
inc dword [ebp - 0x14]
dec dword [ebp - 0x1c]
jne 0x553b54
mov eax, dword [ebp - 0x10]
call fcn.0040353c
mov byte [0x567c8c], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x553d64
lea eax, [ebp - 0x2fc]
mov edx, 9
call fcn.004043b0
lea eax, [ebp - 0x2d8]
call fcn.00404a7c
lea eax, [ebp - 0x2d4]
mov edx, 2
call fcn.004043b0
lea eax, [ebp - 0x2cc]
call fcn.00404a7c
lea eax, [ebp - 0x2c8]
mov edx, 0x13
call fcn.004043b0
lea eax, [ebp - 0x27c]
mov edx, dword [0x408124]
call fcn.00405174
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004043b0
ret