Function at 0x7a0ecc
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x8c
push 0
push 0
dec ecx
jne 0x7a0ed4
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x284], eax
lea eax, [ebp - 0x280]
mov edx, dword [0x41b1d0]
call fcn.0040b2b0
xor eax, eax
push ebp
push 0x7a26c3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x8dbf08]
call fcn.004ce8e0
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x478]
call fcn.005a82ec
mov eax, 0x8dbf40
call fcn.00409d2c
mov eax, dword [0x8d3c9c]
mov dword [eax], 0xffffffff
mov dword [0x8dbf38], 0xffffffff
xor ebx, ebx
mov eax, dword [ebp - 0x284]
mov byte [eax + 0x47c], 1
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x404]
mov eax, dword [eax + 0x2c4]
call fcn.00544c44
mov dl, 1
mov eax, dword [0x47a398]
call fcn.0049c83c
mov dword [ebp - 0x288], eax
mov ecx, dword [ebp - 0x288]
mov edx, 0x7a26e0
mov eax, 0x80000001
call fcn.005d4370
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x7a10e0
inc eax
mov dword [ebp - 0x28c], eax
xor esi, esi
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x290]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x290]
mov edx, 0x7a26e0
mov eax, 0x80000001
call fcn.005d4440
inc ebx
lea ecx, [ebp - 0x294]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x294]
push eax
lea edx, [ebp - 0x298]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x298]
mov ecx, 0x7a2748
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0x29c]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x29c]
mov ecx, 0x7a2760
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
mov eax, dword [0x8d40c8]
mov eax, dword [eax]
push eax
lea edx, [ebp - 0x2a0]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2a0]
mov ecx, 0x7a2778
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
push 0x7a2794
lea edx, [ebp - 0x2a4]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2a4]
mov ecx, 0x7a280c
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
lea ecx, [ebp - 0x2a8]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x2a8]
mov edx, 0x7a2828
mov eax, 0x80000001
call fcn.007a0cd4
push eax
lea edx, [ebp - 0x2ac]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2ac]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
inc esi
dec dword [ebp - 0x28c]
jne 0x7a0fa8
mov ecx, dword [ebp - 0x288]
mov edx, 0x7a28e0
mov eax, 0x80000001
call fcn.005d4370
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x7a124a
inc eax
mov dword [ebp - 0x28c], eax
xor esi, esi
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x2b0]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x2b0]
mov edx, 0x7a28e0
mov eax, 0x80000001
call fcn.005d4440
inc ebx
lea ecx, [ebp - 0x2b4]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2b4]
push eax
lea edx, [ebp - 0x2b8]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2b8]
mov ecx, 0x7a2748
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0x2bc]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2bc]
mov ecx, 0x7a2760
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
mov eax, dword [0x8d40c8]
mov eax, dword [eax]
push eax
lea edx, [ebp - 0x2c0]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2c0]
mov ecx, 0x7a2778
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
push 0x7a2950
lea edx, [ebp - 0x2c4]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2c4]
mov ecx, 0x7a280c
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
lea ecx, [ebp - 0x2c8]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x2c8]
mov edx, 0x7a2828
mov eax, 0x80000001
call fcn.007a0cd4
push eax
lea edx, [ebp - 0x2cc]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2cc]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
inc esi
dec dword [ebp - 0x28c]
jne 0x7a1112
mov ecx, dword [ebp - 0x288]
mov edx, 0x7a26e0
mov eax, 0x80000002
call fcn.005d4370
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x7a14c9
inc eax
mov dword [ebp - 0x28c], eax
xor esi, esi
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x2d0]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x2d0]
mov edx, 0x7a26e0
mov eax, 0x80000002
call fcn.005d4440
lea ecx, [ebp - 0x2d4]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2d4]
mov edx, dword [ebp - 8]
call fcn.007a0dac
test al, al
jne 0x7a14bc
inc ebx
lea ecx, [ebp - 0x2d8]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2d8]
push eax
lea edx, [ebp - 0x2dc]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2dc]
mov ecx, 0x7a2748
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0x2e0]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2e0]
mov ecx, 0x7a2760
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
push 0
lea eax, [ebp - 0x2e4]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x7a29d0
mov edx, 0x7a29f0
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x2e4]
push eax
lea edx, [ebp - 0x2e8]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2e8]
mov ecx, 0x7a2778
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
push 0x7a2a0c
lea edx, [ebp - 0x2ec]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2ec]
mov ecx, 0x7a280c
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
lea ecx, [ebp - 0x2f0]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x2f0]
mov edx, 0x7a2828
mov eax, 0x80000002
call fcn.005d4db0
test al, al
je 0x7a141f
lea ecx, [ebp - 0x2f4]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x2f4]
mov edx, 0x7a2828
mov eax, 0x80000002
call fcn.007a0cd4
push eax
lea edx, [ebp - 0x2f8]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x2f8]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
jmp 0x7a14bc
lea ecx, [ebp - 0x2fc]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x2fc]
mov edx, 0x7a2a84
mov eax, 0x80000002
call fcn.005d4db0
test al, al
je 0x7a1498
lea ecx, [ebp - 0x300]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x300]
mov edx, 0x7a2a84
mov eax, 0x80000002
call fcn.007a0cd4
push eax
lea edx, [ebp - 0x304]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x304]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
jmp 0x7a14bc
push 1
lea edx, [ebp - 0x308]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x308]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
inc esi
dec dword [ebp - 0x28c]
jne 0x7a127c
mov ecx, dword [ebp - 0x288]
mov edx, 0x7a28e0
mov eax, 0x80000002
call fcn.005d4370
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x7a171f
inc eax
mov dword [ebp - 0x28c], eax
xor esi, esi
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x30c]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x30c]
mov edx, 0x7a28e0
mov eax, 0x80000002
call fcn.005d4440
inc ebx
lea ecx, [ebp - 0x310]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x310]
push eax
lea edx, [ebp - 0x314]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x314]
mov ecx, 0x7a2748
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0x318]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x318]
mov ecx, 0x7a2760
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
push 0
lea eax, [ebp - 0x31c]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x7a29d0
mov edx, 0x7a29f0
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x31c]
push eax
lea edx, [ebp - 0x320]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x320]
mov ecx, 0x7a2778
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
push 0x7a2b24
lea edx, [ebp - 0x324]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x324]
mov ecx, 0x7a280c
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
lea ecx, [ebp - 0x328]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x328]
mov edx, 0x7a2828
mov eax, 0x80000002
call fcn.005d4db0
test al, al
je 0x7a1675
lea ecx, [ebp - 0x32c]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x32c]
mov edx, 0x7a2828
mov eax, 0x80000002
call fcn.007a0cd4
push eax
lea edx, [ebp - 0x330]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x330]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
jmp 0x7a1712
lea ecx, [ebp - 0x334]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x334]
mov edx, 0x7a2a84
mov eax, 0x80000002
call fcn.005d4db0
test al, al
je 0x7a16ee
lea ecx, [ebp - 0x338]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x338]
mov edx, 0x7a2a84
mov eax, 0x80000002
call fcn.007a0cd4
push eax
lea edx, [ebp - 0x33c]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x33c]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
jmp 0x7a1712
push 1
lea edx, [ebp - 0x340]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x340]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
inc esi
dec dword [ebp - 0x28c]
jne 0x7a14fb
mov ecx, dword [ebp - 0x288]
mov edx, 0x7a2ba4
mov eax, 0x80000002
call fcn.005d4370
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x7a199e
inc eax
mov dword [ebp - 0x28c], eax
xor esi, esi
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x344]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x344]
mov edx, 0x7a2ba4
mov eax, 0x80000002
call fcn.005d4440
lea ecx, [ebp - 0x348]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x348]
mov edx, dword [ebp - 8]
call fcn.007a0dac
test al, al
jne 0x7a1991
inc ebx
lea ecx, [ebp - 0x34c]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x34c]
push eax
lea edx, [ebp - 0x350]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x350]
mov ecx, 0x7a2748
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0x354]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x354]
mov ecx, 0x7a2760
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
push 0
lea eax, [ebp - 0x358]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x7a29d0
mov edx, 0x7a29f0
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x358]
push eax
lea edx, [ebp - 0x35c]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x35c]
mov ecx, 0x7a2778
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
push 0x7a2c24
lea edx, [ebp - 0x360]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x360]
mov ecx, 0x7a280c
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
lea ecx, [ebp - 0x364]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x364]
mov edx, 0x7a2828
mov eax, 0x80000002
call fcn.005d4db0
test al, al
je 0x7a18f4
lea ecx, [ebp - 0x368]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x368]
mov edx, 0x7a2828
mov eax, 0x80000002
call fcn.007a0cd4
push eax
lea edx, [ebp - 0x36c]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x36c]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
jmp 0x7a1991
lea ecx, [ebp - 0x370]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x370]
mov edx, 0x7a2a84
mov eax, 0x80000002
call fcn.005d4db0
test al, al
je 0x7a196d
lea ecx, [ebp - 0x374]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x374]
mov edx, 0x7a2a84
mov eax, 0x80000002
call fcn.007a0cd4
push eax
lea edx, [ebp - 0x378]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x378]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
jmp 0x7a1991
push 1
lea edx, [ebp - 0x37c]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x37c]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
inc esi
dec dword [ebp - 0x28c]
jne 0x7a1751
mov ecx, dword [ebp - 0x288]
mov edx, 0x7a2cb4
mov eax, 0x80000002
call fcn.005d4370
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x7a1bf4
inc eax
mov dword [ebp - 0x28c], eax
xor esi, esi
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x380]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x380]
mov edx, 0x7a2cb4
mov eax, 0x80000002
call fcn.005d4440
inc ebx
lea ecx, [ebp - 0x384]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x384]
push eax
lea edx, [ebp - 0x388]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x388]
mov ecx, 0x7a2748
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
mov eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0x38c]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x38c]
mov ecx, 0x7a2760
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
push 0
lea eax, [ebp - 0x390]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x7a29d0
mov edx, 0x7a29f0
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x390]
push eax
lea edx, [ebp - 0x394]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x394]
mov ecx, 0x7a2778
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
push 0x7a2d3c
lea edx, [ebp - 0x398]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x398]
mov ecx, 0x7a280c
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 8]
lea ecx, [ebp - 0x39c]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x39c]
mov edx, 0x7a2828
mov eax, 0x80000002
call fcn.005d4db0
test al, al
je 0x7a1b4a
lea ecx, [ebp - 0x3a0]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x3a0]
mov edx, 0x7a2828
mov eax, 0x80000002
call fcn.007a0cd4
push eax
lea edx, [ebp - 0x3a4]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3a4]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
jmp 0x7a1be7
lea ecx, [ebp - 0x3a8]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x3a8]
mov edx, 0x7a2a84
mov eax, 0x80000002
call fcn.005d4db0
test al, al
je 0x7a1bc3
lea ecx, [ebp - 0x3ac]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov ecx, dword [ebp - 0x3ac]
mov edx, 0x7a2a84
mov eax, 0x80000002
call fcn.007a0cd4
push eax
lea edx, [ebp - 0x3b0]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3b0]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
jmp 0x7a1be7
push 1
lea edx, [ebp - 0x3b4]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3b4]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x18]
inc esi
dec dword [ebp - 0x28c]
jne 0x7a19d0
mov eax, dword [0x8d40b8]
mov eax, dword [eax]
test eax, eax
je 0x7a1c04
sub eax, 4
mov eax, dword [eax]
test eax, eax
je 0x7a1dd5
mov eax, dword [0x8d40b8]
mov eax, dword [eax]
mov dl, 1
call fcn.004238d8
test al, al
je 0x7a1dd5
mov edx, dword [0x8d40b8]
mov edx, dword [edx]
lea eax, [ebp - 0x3b8]
mov ecx, 0x7a2dd4
call fcn.0040acf0
mov eax, dword [ebp - 0x3b8]
lea ecx, [ebp - 0x280]
mov edx, 0x1ff
call fcn.00423c38
test eax, eax
jne 0x7a1dd5
mov eax, dword [ebp - 0x270]
and eax, 0x10
cmp eax, 0x10
je 0x7a1db7
mov eax, dword [0x8d40b8]
push dword [eax]
push 0x7a2df0
push dword [ebp - 0x26c]
lea eax, [ebp - 0x3bc]
mov edx, 3
call fcn.0040ad78
mov eax, dword [ebp - 0x3bc]
lea edx, [ebp - 0xc]
call fcn.00666204
lea eax, [ebp - 4]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x26c]
mov eax, 0x7a2e00
call fcn.0040b0d0
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x26c]
call fcn.0040aec0
inc ebx
mov eax, dword [ebp - 4]
push eax
lea edx, [ebp - 0x3c0]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3c0]
mov ecx, 0x7a2748
mov eax, dword [0x8dbf08]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xc]
push eax
lea edx, [ebp - 0x3c4]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3c4]
mov ecx, 0x7a2760
mov eax, dword [0x8dbf08]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [0x8d40c8]
mov eax, dword [eax]
push eax
lea edx, [ebp - 0x3c8]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3c8]
mov ecx, 0x7a2778
mov eax, dword [0x8dbf08]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [0x8d40b8]
mov edx, dword [edx]
lea eax, [ebp - 0x3cc]
mov ecx, dword [ebp - 0x26c]
call fcn.0040acf0
mov eax, dword [ebp - 0x3cc]
push eax
lea edx, [ebp - 0x3d0]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3d0]
mov ecx, 0x7a2e18
mov eax, dword [0x8dbf08]
mov esi, dword [eax]
call dword [esi + 8]
mov ecx, dword [ebp - 0x26c]
mov edx, 0x7a2e38
mov eax, 0x80000001
call fcn.007a0cd4
push eax
lea edx, [ebp - 0x3d4]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3d4]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov esi, dword [eax]
call dword [esi + 0x18]
lea eax, [ebp - 0x280]
call fcn.00423c88
test eax, eax
je 0x7a1c58
lea eax, [ebp - 0x280]
call fcn.00423cac
mov eax, dword [0x8d31c8]
mov eax, dword [eax]
test eax, eax
je 0x7a1de5
sub eax, 4
mov eax, dword [eax]
test eax, eax
je 0x7a1fd4
mov eax, dword [0x8d31c8]
mov eax, dword [eax]
mov dl, 1
call fcn.004238d8
test al, al
je 0x7a1fd4
mov edx, dword [0x8d31c8]
mov edx, dword [edx]
lea eax, [ebp - 0x3d8]
mov ecx, 0x7a2dd4
call fcn.0040acf0
mov eax, dword [ebp - 0x3d8]
lea ecx, [ebp - 0x280]
mov edx, 0x1ff
call fcn.00423c38
test eax, eax
jne 0x7a1fd4
mov eax, dword [ebp - 0x270]
and eax, 0x10
cmp eax, 0x10
je 0x7a1fb6
mov eax, dword [0x8d31c8]
push dword [eax]
push 0x7a2df0
push dword [ebp - 0x26c]
lea eax, [ebp - 0x3dc]
mov edx, 3
call fcn.0040ad78
mov eax, dword [ebp - 0x3dc]
lea edx, [ebp - 0xc]
call fcn.00666204
lea eax, [ebp - 4]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x26c]
mov eax, 0x7a2ee8
call fcn.0040b0d0
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x26c]
call fcn.0040aec0
inc ebx
mov eax, dword [ebp - 4]
push eax
lea edx, [ebp - 0x3e0]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3e0]
mov ecx, 0x7a2748
mov eax, dword [0x8dbf08]
mov esi, dword [eax]
call dword [esi + 8]
mov eax, dword [ebp - 0xc]
push eax
lea edx, [ebp - 0x3e4]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3e4]
mov ecx, 0x7a2760
mov eax, dword [0x8dbf08]
mov esi, dword [eax]
call dword [esi + 8]
push 0
lea eax, [ebp - 0x3e8]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x7a29d0
mov edx, 0x7a29f0
mov esi, dword [eax]
call dword [esi + 4]
mov eax, dword [ebp - 0x3e8]
push eax
lea edx, [ebp - 0x3ec]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3ec]
mov ecx, 0x7a2778
mov eax, dword [0x8dbf08]
mov esi, dword [eax]
call dword [esi + 8]
mov edx, dword [0x8d31c8]
mov edx, dword [edx]
lea eax, [ebp - 0x3f0]
mov ecx, dword [ebp - 0x26c]
call fcn.0040acf0
mov eax, dword [ebp - 0x3f0]
push eax
lea edx, [ebp - 0x3f4]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3f4]
mov ecx, 0x7a2e18
mov eax, dword [0x8dbf08]
mov esi, dword [eax]
call dword [esi + 8]
mov ecx, dword [ebp - 0x26c]
mov edx, 0x7a2e38
mov eax, 0x80000002
call fcn.007a0cd4
push eax
lea edx, [ebp - 0x3f8]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3f8]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov esi, dword [eax]
call dword [esi + 0x18]
lea eax, [ebp - 0x280]
call fcn.00423c88
test eax, eax
je 0x7a1e39
lea eax, [ebp - 0x280]
call fcn.00423cac
lea edx, [ebp - 0x3fc]
mov eax, ebx
call fcn.00422ef8
mov edx, dword [ebp - 0x3fc]
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x3d8]
call fcn.005063f8
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x3d8]
mov edx, dword [eax + 0x50]
add edx, dword [eax + 0x58]
add edx, 8
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x3dc]
call fcn.005057e0
mov eax, dword [ebp - 0x284]
call fcn.007a3088
mov edx, dword [ebp - 0x288]
mov eax, dword [0x8dbf08]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x7a265f
inc eax
mov dword [ebp - 0x28c], eax
xor esi, esi
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x404]
mov eax, dword [eax + 0x2c4]
call fcn.00544ab4
call fcn.005448f0
mov ebx, eax
push 0
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0x408]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x408]
mov ecx, 0x7a2748
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 4]
mov ecx, dword [ebp - 0x404]
lea eax, [ebp - 0x400]
mov edx, 0x7a2ef8
call fcn.0040acf0
mov eax, dword [ebp - 0x400]
push eax
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x404]
mov eax, dword [eax + 0x2c4]
mov edx, ebx
call fcn.00544b58
pop edx
call fcn.00544484
push 0
lea eax, [ebp - 0x40c]
push eax
lea ecx, [ebp - 0x410]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x410]
mov ecx, 0x7a2f0c
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x40c]
push eax
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x404]
mov eax, dword [eax + 0x2c4]
mov edx, ebx
call fcn.00544b58
mov eax, dword [eax + 8]
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 1
lea ecx, [ebp - 0x414]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x414]
mov ecx, 0x7a28c4
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0x14]
test al, al
je 0x7a21b6
push 0x7a2f2c
lea eax, [ebp - 0x418]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x7a2f2c
mov edx, 0x7a29f0
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x418]
push eax
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x404]
mov eax, dword [eax + 0x2c4]
mov edx, ebx
call fcn.00544b58
mov eax, dword [eax + 8]
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
jmp 0x7a2201
push 0x7a2f48
lea eax, [ebp - 0x41c]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x7a2f48
mov edx, 0x7a29f0
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x41c]
push eax
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x404]
mov eax, dword [eax + 0x2c4]
mov edx, ebx
call fcn.00544b58
mov eax, dword [eax + 8]
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 3
lea ecx, [ebp - 0x420]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x420]
mov ecx, 0x7a2f68
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0xc]
test eax, eax
je 0x7a225c
push 3
lea ecx, [ebp - 0x424]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x424]
mov ecx, 0x7a2f68
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0xc]
dec eax
jne 0x7a22a7
push 0x7a2f84
lea eax, [ebp - 0x428]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x7a2f84
mov edx, 0x7a29f0
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x428]
push eax
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x404]
mov eax, dword [eax + 0x2c4]
mov edx, ebx
call fcn.00544b58
mov eax, dword [eax + 8]
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 3
lea ecx, [ebp - 0x42c]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x42c]
mov ecx, 0x7a2f68
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp eax, 2
jne 0x7a2321
push 0x7a2fa0
lea eax, [ebp - 0x430]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x7a2fa0
mov edx, 0x7a29f0
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x430]
push eax
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x404]
mov eax, dword [eax + 0x2c4]
mov edx, ebx
call fcn.00544b58
mov eax, dword [eax + 8]
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 3
lea ecx, [ebp - 0x434]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x434]
mov ecx, 0x7a2f68
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp eax, 3
jne 0x7a239b
push 0x7a2fbc
lea eax, [ebp - 0x438]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x7a2fbc
mov edx, 0x7a29f0
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x438]
push eax
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x404]
mov eax, dword [eax + 0x2c4]
mov edx, ebx
call fcn.00544b58
mov eax, dword [eax + 8]
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x43c]
mov edx, esi
mov eax, dword [ebp - 0x288]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x43c]
mov ecx, 0x7a2760
mov eax, dword [0x8dbf08]
mov edi, dword [eax]
call dword [edi + 4]
lea edx, [ebp - 0x440]
mov eax, dword [ebp - 8]
call fcn.00422220
mov edx, dword [ebp - 0x440]
mov ecx, 1
mov eax, 0x7a2fdc
call fcn.0040b0d0
test eax, eax
jle 0x7a2439
mov ecx, 1
mov edx, dword [ebp - 8]
mov eax, 0x7a2ffc
call fcn.0040b0d0
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.0040af08
lea eax, [ebp - 8]
push eax
mov ecx, 1
mov edx, dword [ebp - 8]
mov eax, 0x7a300c
call fcn.0040b0d0
mov ecx, eax
add ecx, 3
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040aec0
lea edx, [ebp - 0x444]
mov eax, dword [ebp - 8]
call fcn.00667b0c
mov edx, dword [ebp - 0x444]
lea eax, [ebp - 8]
call fcn.0040a154
mov ecx, 1
mov edx, dword [ebp - 8]
mov eax, 0x7a3024
call fcn.0040b0d0
test eax, eax
jne 0x7a258d
mov edx, dword [0x8d3a5c]
mov edx, dword [edx]
lea eax, [ebp - 0x448]
mov ecx, dword [ebp - 8]
call fcn.0040acf0
mov eax, dword [ebp - 0x448]
mov dl, 1
call fcn.00423840
test al, al
je 0x7a24a9
mov edx, dword [0x8d3a5c]
mov edx, dword [edx]
lea eax, [ebp - 8]
mov ecx, dword [ebp - 8]
call fcn.0040acf0
mov eax, dword [0x8d3a5c]
push dword [eax]
push 0x7a3038
push dword [ebp - 8]
lea eax, [ebp - 0x44c]
mov edx, 3
call fcn.0040ad78
mov eax, dword [ebp - 0x44c]
mov dl, 1
call fcn.00423840
test al, al
je 0x7a24f5
mov eax, dword [0x8d3a5c]
push dword [eax]
push 0x7a3038
push dword [ebp - 8]
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040ad78
mov eax, dword [0x8d3a5c]
push dword [eax]
push 0x7a3054
push dword [ebp - 8]
lea eax, [ebp - 0x450]
mov edx, 3
call fcn.0040ad78
mov eax, dword [ebp - 0x450]
mov dl, 1
call fcn.00423840
test al, al
je 0x7a2541
mov eax, dword [0x8d3a5c]
push dword [eax]
push 0x7a3054
push dword [ebp - 8]
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040ad78
mov eax, dword [0x8d3a5c]
push dword [eax]
push 0x7a3074
push dword [ebp - 8]
lea eax, [ebp - 0x454]
mov edx, 3
call fcn.0040ad78
mov eax, dword [ebp - 0x454]
mov dl, 1
call fcn.00423840
test al, al
je 0x7a258d
mov eax, dword [0x8d3a5c]
push dword [eax]
push 0x7a3074
push dword [ebp - 8]
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040ad78
lea edx, [ebp - 0x458]
mov eax, dword [ebp - 8]
call fcn.004221d0
mov eax, dword [ebp - 0x458]
push eax
lea edx, [ebp - 0x45c]
mov eax, dword [0x8d3a5c]
mov eax, dword [eax]
call fcn.004221d0
mov eax, dword [ebp - 0x45c]
mov ecx, 1
pop edx
call fcn.0040b0d0
test eax, eax
jle 0x7a25d0
mov al, 1
call fcn.00668074
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.007a0570
mov edx, eax
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x478]
call fcn.005a8198
push eax
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x404]
mov eax, dword [eax + 0x2c4]
mov edx, ebx
call fcn.00544b58
xor edx, edx
pop ecx
call fcn.00544654
lea edx, [ebp - 0x460]
mov eax, dword [ebp - 8]
call fcn.004221d0
mov eax, dword [ebp - 0x460]
push eax
lea edx, [ebp - 0x464]
mov eax, dword [0x8d3a5c]
mov eax, dword [eax]
call fcn.004221d0
mov eax, dword [ebp - 0x464]
mov ecx, 1
pop edx
call fcn.0040b0d0
test eax, eax
jle 0x7a2652
xor eax, eax
call fcn.00668074
inc esi
dec dword [ebp - 0x28c]
jne 0x7a2056
mov eax, dword [ebp - 0x288]
call fcn.00407f90
mov eax, dword [ebp - 0x284]
mov byte [eax + 0x47c], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x7a26ca
lea eax, [ebp - 0x464]
mov edx, 0x64
call fcn.00409d8c
lea eax, [ebp - 0x2d4]
mov edx, 0x12
call fcn.00409d8c
lea eax, [ebp - 0x280]
mov edx, dword [0x41b1d0]
call fcn.0040b38c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00409d8c
ret