Function at 0x5a804d
Capabilities:
Terminate process

Disassembly:
push eax
mov eax, dword fs:[0x20]
je 0x5a8013
pop eax
jmp 0x5a8014
pop eax
jmp 0x5a8017
mov eax, fcn.005aa680
jmp 0x5a801d
call eax
cmp dword [0x5ad5a0], 0
jne 0x5a80e3
cmp dword [0x5ad5c4], 0
je 0x5a80e3
mov dword [0x5ad5c4], 0
mov eax, dword [0x5ad084]
mov dword [0x5aea4c], eax
push 0x1e
push 0x5ad170
call fcn.005aa477
add esp, 8
push 0x64
push 0x5ad190
call fcn.005aa477
add esp, 8
push 0x64
push 0x5ad1f8
call fcn.005aa477
add esp, 8
push 0x64
push 0x5ad260
call fcn.005aa477
add esp, 8
push 0x64
push 0x5ad2c8
call fcn.005aa477
add esp, 8
push 0x64
push 0x5ad330
call fcn.005aa477
add esp, 8
push 0x64
push 0x5ad398
call fcn.005aa477
add esp, 8
push 0x64
push 0x5ad400
call fcn.005aa477
add esp, 8
push 0x64
push 0x5ad468
call fcn.005aa477
add esp, 8
push 0x64
push 0x5ad4d0
call fcn.005aa477
add esp, 8
call fcn.005aa285
test byte [0x5ad048], 0x20
je 0x5a8154
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
mov dword [0x5ad598], eax
pop ebp
cmp dword [0x5ad598], 1
je 0x5a811b
cmp dword [0x5ad598], 2
jne 0x5a812a
mov dword [0x5ad59c], 1
jmp 0x5a8134
mov dword [0x5ad59c], 0
cmp dword [0x5ad598], 0
jne 0x5a814f
mov eax, dword [0x5ada04]
push eax
push 0
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x5a815e
mov dword [0x5ad59c], 1
mov dword [0x5ad5a4], 0
mov eax, entry0
sub eax, dword [0x5ad018]
mov dword [0x5ad53c], eax
mov eax, dword [0x5ad53c]
add eax, dword [0x5ad034]
mov dword [0x5ad544], eax
mov eax, dword [0x5ad53c]
add eax, dword [0x5ad044]
mov dword [0x5ad548], eax
cmp dword [0x5ad59c], 0
je 0x5a8370
cmp dword [0x5ad5a0], 0
jne 0x5a8370
mov dword [0x5ad5a0], 1
mov dword [0x5ad5a4], 1
call fcn.005aa112
test eax, eax
je 0x5a8370
call fcn.005a9aaf
test eax, eax
je 0x5a8370
mov eax, dword [0x5ad070]
xor dword [0x5ad078], eax
mov eax, dword [0x5ad068]
xor dword [0x5ad07c], eax
call fcn.005a9c64
test eax, eax
je 0x5a835e
call fcn.005a8d81
push 0x5aea78
call fcn.005a8e62
add esp, 4
call fcn.005a9c7c
mov dword [0x5ad540], eax
cmp dword [0x5ad540], 0
je 0x5a832e
call fcn.005a9d9a
test eax, eax
je 0x5a832e
test byte [0x5ad048], 0x20
je 0x5a8258
push 0x5aea8c
call fcn.005a8e62
add esp, 4
jmp 0x5a8265
push 0x5aea9c
call fcn.005a8e62
add esp, 4
call fcn.005a96a2
test eax, eax
je 0x5a8324
mov eax, dword [0x5ad070]
xor dword [0x5ad078], eax
mov eax, dword [0x5ad068]
xor dword [0x5ad07c], eax
call fcn.005a9891
mov dword [0x5ada00], eax
cmp dword [0x5ada00], 0
je 0x5a8311
mov eax, dword [0x5ad014]
add eax, dword [0x5ad53c]
push eax
call fcn.005a8a92
add esp, 4
test eax, eax
je 0x5a8311
mov eax, dword [0x5ad010]
add eax, dword [0x5ad53c]
push eax
call fcn.005a8540
add esp, 4
test eax, eax
je 0x5a8311
call fcn.005a8944
test eax, eax
je 0x5a8311
call fcn.005a8b99
test eax, eax
je 0x5a8311
mov dword [0x5ad5a4], 0
mov eax, dword [0x5ada00]
xor dword [0x5ad078], eax
mov eax, dword [0x5ad068]
xor dword [0x5ad07c], eax
push 0x8000
push 0
mov eax, dword [0x5ad590]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFree]
call fcn.005a91e8
jmp 0x5a8359
call fcn.005a91e8
push 0x64
push 0x5add20
push 0x5ad190
call fcn.005a9c35
add esp, 0xc
push 0x5ad170
push 0x5add20
call fcn.005a9281
add esp, 8
jmp 0x5a8370
push 0x5ad170
push 0x5ad260
call fcn.005a9281
add esp, 8
mov dword [0x5ad9f8], 0
cmp dword [0x5ad9f8], 0
je 0x5a83a5
push 0x10
push 0x5ad170
push 0x5aeab0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [0x5ad5a4], 1
cmp dword [0x5ad5a4], 0
je 0x5a83d2
test byte [0x5ad048], 0x20
je 0x5a83ca
mov eax, 0
ret
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [0x5ad9f4], 1
test byte [0x5ad541], 0x80
je 0x5a840a
mov eax, dword [0x5ad050]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
shl eax, 5
mov dword [0x5ada0c], eax
jmp 0x5a8420
mov eax, dword [0x5ad054]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
mov dword [0x5ada0c], eax
mov ecx, 0x3e8
mov eax, dword [0x5ada0c]
sub edx, edx
div ecx
mov dword [0x5ad5c0], eax
push 0x5ad5b0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov eax, dword [0x5ad53c]
add eax, dword [0x5ad008]
mov dword [0x5ad538], eax
mov eax, dword [0x5ad070]
cmp dword [0x5ada00], eax
je 0x5a8469
mov eax, dword [0x5ada00]
mov dword [0x5ad070], eax
mov eax, dword [0x5ad538]
jmp 0x5a846f
call eax
jmp 0x5a8471