Function at 0x54999c
Capabilities:
Contain obfuscated stackstrings
Delete file
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x264
push 0
push 0
dec ecx
jne 0x5499a5
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov byte [ebp - 0x3d], cl
mov dword [ebp - 4], edx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 4]
call fcn.00405a64
xor eax, eax
push ebp
push 0x54db40
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5885e8]
push eax
call sub.kernel32.dll_EnterCriticalSection
xor edi, edi
push ebp
push 0x54dade
push dword fs:[edi]
mov dword fs:[edi], esp
mov eax, dword [ebp - 0x3c]
cmp byte [eax + 0xd], 0
jne 0x54d96b
cmp dword [ebp - 4], 0
je 0x54d96b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [0x5889d8]
call fcn.004055e4
mov eax, dword [0x588924]
call fcn.004055e4
mov eax, dword [0x588d34]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x588410]
mov byte [eax], 1
mov eax, dword [0x589150]
mov dword [eax], 0x1e
mov eax, dword [0x588544]
call fcn.004055e4
mov eax, dword [0x588e20]
call fcn.004055e4
mov eax, dword [0x589060]
call fcn.004055e4
mov eax, dword [0x58877c]
mov eax, dword [eax]
call fcn.0048ad6c
mov eax, dword [0x58877c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [0x58877c]
mov eax, dword [eax]
call fcn.0048ad78
mov eax, dword [0x58897c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x58837c]
mov eax, dword [eax]
call fcn.0049e9c8
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x588b10]
mov dword [edx], eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dl, 1
mov eax, dword [0x41c04c]
call fcn.00404674
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x549c18
lea ecx, [ebp - 0x11c4]
xor edx, edx
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11c4]
mov ecx, 0x15
mov edx, 0x54db58
call fcn.0049954c
test al, al
je 0x549c18
xor edx, edx
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x549c18
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x11cc]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11cc]
lea edx, [ebp - 0x11c8]
call fcn.00547b00
mov ecx, dword [ebp - 0x11c8]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0x20]
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x549bd4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x54d960
mov byte [ebp - 0x69], 0
xor ebx, ebx
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x54a3b9
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x11d0]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x11d0]
lea edx, [ebp - 0xc]
call fcn.0040c920
cmp dword [ebp - 0xc], 0
je 0x54a3aa
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3b
je 0x54a3aa
cmp byte [ebp - 0x69], 0
jne 0x549d11
mov edx, 0x54db78
mov eax, dword [ebp - 0xc]
call fcn.0040c78c
test eax, eax
jne 0x549d11
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
mov byte [ebp - 0x69], 1
jmp 0x54a3aa
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebp - 0x69], 0
je 0x54a3aa
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x5b
jne 0x549d9c
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x549d8e
sub eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
cmp byte [edx + eax - 1], 0x5d
je 0x54a3b9
mov edx, dword [ebp - 0xc]
mov eax, 0x54db88
call fcn.00405bc0
test eax, eax
jle 0x54a3aa
mov ecx, 8
mov edx, 0x54db94
mov eax, dword [ebp - 0xc]
call fcn.0049954c
test al, al
je 0x549e79
mov esi, dword [ebp - 0xc]
test esi, esi
je 0x549dd7
sub esi, 4
mov esi, dword [esi]
lea eax, [ebp - 0x11d8]
push eax
mov ecx, esi
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11d8]
lea edx, [ebp - 0x11d4]
call fcn.0040c920
mov edx, dword [ebp - 0x11d4]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x549e6a
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x549e6a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
je 0x549e40
mov eax, dword [ebp - 0xd0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xd0], eax
mov eax, dword [0x588544]
push eax
mov ecx, dword [ebp - 0xd0]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x54a3b9
jmp 0x54a3aa
mov ecx, 8
mov edx, 0x54dba8
mov eax, dword [ebp - 0xc]
call fcn.0049954c
test al, al
je 0x549f5c
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
je 0x549eb6
mov eax, dword [ebp - 0xd4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x11e0]
push eax
mov ecx, dword [ebp - 0xd4]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11e0]
lea edx, [ebp - 0x11dc]
call fcn.0040c920
mov edx, dword [ebp - 0x11dc]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x549f4d
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x549f4d
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
je 0x549f23
mov eax, dword [ebp - 0xd8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
mov eax, dword [0x588e20]
push eax
mov ecx, dword [ebp - 0xd8]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x54a3b9
jmp 0x54a3aa
mov ecx, 8
mov edx, 0x54dbbc
mov eax, dword [ebp - 0xc]
call fcn.0049954c
test al, al
je 0x54a03f
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
je 0x549f99
mov eax, dword [ebp - 0xdc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xdc], eax
lea eax, [ebp - 0x11e8]
push eax
mov ecx, dword [ebp - 0xdc]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11e8]
lea edx, [ebp - 0x11e4]
call fcn.0040c920
mov edx, dword [ebp - 0x11e4]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54a030
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54a030
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
je 0x54a006
mov eax, dword [ebp - 0xe0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xe0], eax
mov eax, dword [0x589060]
push eax
mov ecx, dword [ebp - 0xe0]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x54a3b9
jmp 0x54a3aa
mov ecx, 8
mov edx, 0x54dbd0
mov eax, dword [ebp - 0xc]
call fcn.0049954c
test al, al
je 0x54a13b
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
je 0x54a07c
mov eax, dword [ebp - 0xe4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x11f0]
push eax
mov ecx, dword [ebp - 0xe4]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11f0]
lea edx, [ebp - 0x11ec]
call fcn.0040c920
mov edx, dword [ebp - 0x11ec]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54a12c
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54a12c
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
je 0x54a0e9
mov eax, dword [ebp - 0xe8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xe8], eax
lea eax, [ebp - 0x11f4]
push eax
mov ecx, dword [ebp - 0xe8]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11f4]
mov edx, 0x54dbe4
call fcn.00405a0c
mov eax, dword [0x588410]
sete byte [eax]
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x54a3b9
jmp 0x54a3aa
mov ecx, 8
mov edx, 0x54dbf0
mov eax, dword [ebp - 0xc]
call fcn.0049954c
test al, al
je 0x54a237
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
je 0x54a178
mov eax, dword [ebp - 0xec]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x11fc]
push eax
mov ecx, dword [ebp - 0xec]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11fc]
lea edx, [ebp - 0x11f8]
call fcn.0040c920
mov edx, dword [ebp - 0x11f8]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54a228
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54a228
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
je 0x54a1e5
mov eax, dword [ebp - 0xf0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0x1200]
push eax
mov ecx, dword [ebp - 0xf0]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1200]
mov edx, 0x1e
call fcn.0040cf24
mov edx, dword [0x589150]
mov dword [edx], eax
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x54a3b9
jmp 0x54a3aa
mov ecx, 0xe
mov edx, 0x54dc04
mov eax, dword [ebp - 0xc]
call fcn.0049954c
test al, al
je 0x54a3aa
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
je 0x54a274
mov eax, dword [ebp - 0xf4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0x1208]
push eax
mov ecx, dword [ebp - 0xf4]
sub ecx, 0xe
mov edx, 0xf
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1208]
lea edx, [ebp - 0x1204]
call fcn.0040c920
mov edx, dword [ebp - 0x1204]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54a3a4
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54a3a4
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
je 0x54a2f9
mov eax, dword [ebp - 0xf8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xf8], eax
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0xf8]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
push 0
lea eax, [ebp - 0x120c]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
mov edx, dword [0x5889d8]
mov eax, dword [ebp - 0xc]
call fcn.004991c0
mov edx, dword [ebp - 0x120c]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 0
lea eax, [ebp - 0x1214]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.004991c0
mov edx, dword [ebp - 0x1214]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 0
lea eax, [ebp - 0x1218]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
mov edx, dword [0x588924]
mov eax, dword [ebp - 0xc]
call fcn.004991c0
mov edx, dword [ebp - 0x1218]
lea eax, [ebp - 0xc]
call fcn.0040567c
inc ebx
cmp ebx, 6
jge 0x54a3b9
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x549ca9
mov eax, dword [0x589028]
cmp dword [eax], 0
je 0x54ab65
mov byte [ebp - 0x69], 0
xor ebx, ebx
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x54ab65
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x121c]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x121c]
lea edx, [ebp - 0xc]
call fcn.0040c920
cmp dword [ebp - 0xc], 0
je 0x54ab56
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3b
je 0x54ab56
cmp byte [ebp - 0x69], 0
jne 0x54a485
lea eax, [ebp - 0x1220]
push eax
mov eax, dword [0x589028]
mov eax, dword [eax]
mov dword [ebp - 0x1228], eax
mov byte [ebp - 0x1224], 0xb
lea edx, [ebp - 0x1228]
xor ecx, ecx
mov eax, 0x54dc1c
call fcn.0040e788
mov edx, dword [ebp - 0x1220]
mov eax, dword [ebp - 0xc]
call fcn.0040c78c
test eax, eax
jne 0x54a485
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
mov byte [ebp - 0x69], 1
jmp 0x54ab56
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebp - 0x69], 0
je 0x54ab56
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x5b
jne 0x54a52d
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
je 0x54a519
mov eax, dword [ebp - 0xfc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0xfc]
cmp byte [eax + edx - 1], 0x5d
je 0x54ab65
mov edx, dword [ebp - 0xc]
mov eax, 0x54db88
call fcn.00405bc0
test eax, eax
jle 0x54ab56
mov ecx, 8
mov edx, 0x54db94
mov eax, dword [ebp - 0xc]
call fcn.0049954c
test al, al
je 0x54a625
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
je 0x54a57f
mov eax, dword [ebp - 0x100]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x100], eax
lea eax, [ebp - 0x1230]
push eax
mov ecx, dword [ebp - 0x100]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1230]
lea edx, [ebp - 0x122c]
call fcn.0040c920
mov edx, dword [ebp - 0x122c]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54a616
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54a616
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
je 0x54a5ec
mov eax, dword [ebp - 0x104]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
mov eax, dword [0x5888c0]
push eax
mov ecx, dword [ebp - 0x104]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x54ab65
jmp 0x54ab56
mov ecx, 8
mov edx, 0x54dba8
mov eax, dword [ebp - 0xc]
call fcn.0049954c
test al, al
je 0x54a708
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x54a662
mov eax, dword [ebp - 0x108]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0x1238]
push eax
mov ecx, dword [ebp - 0x108]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1238]
lea edx, [ebp - 0x1234]
call fcn.0040c920
mov edx, dword [ebp - 0x1234]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54a6f9
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54a6f9
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
je 0x54a6cf
mov eax, dword [ebp - 0x10c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x10c], eax
mov eax, dword [0x5890f4]
push eax
mov ecx, dword [ebp - 0x10c]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x54ab65
jmp 0x54ab56
mov ecx, 8
mov edx, 0x54dbbc
mov eax, dword [ebp - 0xc]
call fcn.0049954c
test al, al
je 0x54a7eb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
je 0x54a745
mov eax, dword [ebp - 0x110]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x1240]
push eax
mov ecx, dword [ebp - 0x110]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1240]
lea edx, [ebp - 0x123c]
call fcn.0040c920
mov edx, dword [ebp - 0x123c]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54a7dc
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54a7dc
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
je 0x54a7b2
mov eax, dword [ebp - 0x114]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x114], eax
mov eax, dword [0x588498]
push eax
mov ecx, dword [ebp - 0x114]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x54ab65
jmp 0x54ab56
mov ecx, 8
mov edx, 0x54dbd0
mov eax, dword [ebp - 0xc]
call fcn.0049954c
test al, al
je 0x54a8e7
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
je 0x54a828
mov eax, dword [ebp - 0x118]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x1248]
push eax
mov ecx, dword [ebp - 0x118]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1248]
lea edx, [ebp - 0x1244]
call fcn.0040c920
mov edx, dword [ebp - 0x1244]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54a8d8
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54a8d8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x54a895
mov eax, dword [ebp - 0x11c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x124c]
push eax
mov ecx, dword [ebp - 0x11c]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x124c]
mov edx, 0x54dbe4
call fcn.00405a0c
mov eax, dword [0x588410]
sete byte [eax]
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x54ab65
jmp 0x54ab56
mov ecx, 8
mov edx, 0x54dbf0
mov eax, dword [ebp - 0xc]
call fcn.0049954c
test al, al
je 0x54a9e3
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
je 0x54a924
mov eax, dword [ebp - 0x120]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x1254]
push eax
mov ecx, dword [ebp - 0x120]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1254]
lea edx, [ebp - 0x1250]
call fcn.0040c920
mov edx, dword [ebp - 0x1250]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54a9d4
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54a9d4
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
je 0x54a991
mov eax, dword [ebp - 0x124]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x1258]
push eax
mov ecx, dword [ebp - 0x124]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1258]
mov edx, 0x1e
call fcn.0040cf24
mov edx, dword [0x589150]
mov dword [edx], eax
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x54ab65
jmp 0x54ab56
mov ecx, 0xe
mov edx, 0x54dc04
mov eax, dword [ebp - 0xc]
call fcn.0049954c
test al, al
je 0x54ab56
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
je 0x54aa20
mov eax, dword [ebp - 0x128]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x1260]
push eax
mov ecx, dword [ebp - 0x128]
sub ecx, 0xe
mov edx, 0xf
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1260]
lea edx, [ebp - 0x125c]
call fcn.0040c920
mov edx, dword [ebp - 0x125c]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54ab50
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54ab50
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x54aaa5
mov eax, dword [ebp - 0x12c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x12c]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
push 0
lea eax, [ebp - 0x1264]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
mov edx, dword [0x5889d8]
mov eax, dword [ebp - 0xc]
call fcn.004991c0
mov edx, dword [ebp - 0x1264]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 0
lea eax, [ebp - 0x1268]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.004991c0
mov edx, dword [ebp - 0x1268]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 0
lea eax, [ebp - 0x126c]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
mov edx, dword [0x588924]
mov eax, dword [ebp - 0xc]
call fcn.004991c0
mov edx, dword [ebp - 0x126c]
lea eax, [ebp - 0xc]
call fcn.0040567c
inc ebx
cmp ebx, 6
jge 0x54ab65
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x54a3ef
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x54ac14
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x1274]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1274]
lea edx, [ebp - 0x1270]
call fcn.0040c920
cmp dword [ebp - 0x1270], 0
jne 0x54ac0b
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x48]
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xffffffff
jne 0x54abcf
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebp - 0x69], 0
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x54ca07
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x1278]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1278]
lea edx, [ebp - 0xc]
call fcn.0040c920
cmp dword [ebp - 0xc], 0
je 0x54c9f8
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3b
je 0x54c9f8
cmp byte [ebp - 0x69], 0
jne 0x54acf8
mov edx, 0x54dc2c
mov eax, dword [ebp - 0xc]
call fcn.0040c78c
test eax, eax
jne 0x54acf8
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov byte [ebp - 0x69], 1
jmp 0x54c9f8
cmp byte [ebp - 0x69], 0
je 0x54c9f8
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x5b
jne 0x54ad41
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
je 0x54ad2d
mov eax, dword [ebp - 0x130]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x130]
cmp byte [eax + edx - 1], 0x5d
je 0x54ca07
mov edx, dword [ebp - 0xc]
mov eax, 0x54db88
call fcn.00405bc0
mov ebx, eax
test ebx, ebx
jle 0x54c9f8
mov esi, dword [ebp - 0xc]
test esi, esi
je 0x54ad64
sub esi, 4
mov esi, dword [esi]
lea eax, [ebp - 0x1280]
push eax
mov ecx, esi
sub ecx, ebx
lea edx, [ebx + 1]
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1280]
lea edx, [ebp - 0x127c]
call fcn.0040c920
mov edx, dword [ebp - 0x127c]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54c9f8
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push 0x54dc40
push dword [ebp - 0xc]
push 0x54dc4c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00405978
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
je 0x54adf0
mov eax, dword [ebp - 0x134]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x9c]
call fcn.00405d04
lea eax, [ebp - 0x1168]
mov ecx, 0xff
mov edx, 0x1000
call fcn.00403e38
lea eax, [ebp - 0x11b0]
mov ecx, 0xff
mov edx, 0x48
call fcn.00403e38
lea eax, [ebp - 0x11c0]
push eax
call sub.kernel32.dll_GetLocalTime
movzx eax, word [ebp - 0x11c0]
movzx edx, word [ebp - 0x11be]
add eax, edx
movzx edx, word [ebp - 0x11ba]
add eax, edx
movzx edx, word [ebp - 0x11b8]
add eax, edx
movzx edx, word [ebp - 0x11b6]
add eax, edx
mov dword [ebp - 0x74], eax
lea edx, [ebp - 0x1284]
mov eax, dword [ebp - 0x74]
call fcn.0040cd7c
mov eax, dword [ebp - 0x1284]
lea edx, [ebp - 0x168]
call fcn.0048fd04
lea eax, [ebp - 0x8a]
xor ecx, ecx
mov edx, 8
call fcn.00403e38
lea edx, [ebp - 0x8a]
lea eax, [ebp - 0x168]
mov ecx, 8
call fcn.004035b8
mov dword [ebp - 0x90], 0x40
mov ecx, 8
mov eax, dword [ebp - 0x90]
xor edx, edx
div ecx
mov dword [ebp - 0x90], eax
lea edx, [ebp - 0x1168]
mov eax, dword [0x588f88]
mov ecx, 0x1000
call fcn.004035b8
lea edx, [ebp - 0x11b0]
mov eax, dword [0x588cdc]
mov ecx, 0x48
call fcn.004035b8
xor ebx, ebx
mov dword [ebp - 0x48], 0x12
lea ecx, [ebp - 0x11b0]
lea eax, [ebx + 3]
xor edx, edx
div dword [ebp - 0x90]
movzx esi, byte [ebp + edx - 0x8a]
lea eax, [ebx + 2]
xor edx, edx
div dword [ebp - 0x90]
movzx eax, byte [ebp + edx - 0x8a]
shl eax, 8
add esi, eax
lea eax, [ebx + 1]
xor edx, edx
div dword [ebp - 0x90]
movzx eax, byte [ebp + edx - 0x8a]
shl eax, 0x10
add esi, eax
movzx eax, byte [ebp + ebx - 0x8a]
shl eax, 0x18
add esi, eax
xor dword [ecx], esi
lea eax, [ebx + 4]
xor edx, edx
div dword [ebp - 0x90]
mov ebx, edx
add ecx, 4
dec dword [ebp - 0x48]
jne 0x54af0d
lea eax, [ebp - 0x98]
xor ecx, ecx
mov edx, 8
call fcn.00403e38
mov dword [ebp - 0x48], 9
lea ecx, [ebp - 0x11b0]
lea edx, [ebp - 0x98]
mov ebx, edx
mov eax, dword [ebx]
add edx, 4
mov edx, dword [edx]
mov esi, eax
and esi, 0xff
shl esi, 0x18
mov edi, eax
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, eax
and edi, 0xff0000
shr edi, 8
or esi, edi
and eax, 0xff000000
shr eax, 0x18
or esi, eax
mov eax, esi
mov esi, edx
and esi, 0xff
shl esi, 0x18
mov edi, edx
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, edx
and edi, 0xff0000
shr edi, 8
or esi, edi
and edx, 0xff000000
shr edx, 0x18
or esi, edx
mov edx, esi
xor eax, dword [ebp - 0x11b0]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x11ac]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x11a8]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x11a4]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x11a0]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x119c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1198]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1194]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1190]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x118c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1188]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1184]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1180]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x117c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1178]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1174]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1170]
xor edx, dword [ebp - 0x116c]
mov esi, eax
and esi, 0xff
shl esi, 0x18
mov edi, eax
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, eax
and edi, 0xff0000
shr edi, 8
or esi, edi
and eax, 0xff000000
shr eax, 0x18
or esi, eax
mov eax, esi
mov esi, edx
and esi, 0xff
shl esi, 0x18
mov edi, edx
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, edx
and edi, 0xff0000
shr edi, 8
or esi, edi
and edx, 0xff000000
shr edx, 0x18
or esi, edx
mov edx, esi
mov dword [ebx], edx
lea edx, [ebp - 0x98]
add edx, 4
mov dword [edx], eax
movzx eax, byte [ebp - 0x95]
movzx edx, byte [ebp - 0x96]
shl edx, 8
add eax, edx
movzx edx, byte [ebp - 0x97]
shl edx, 0x10
add eax, edx
movzx edx, byte [ebp - 0x98]
shl edx, 0x18
add eax, edx
mov dword [ecx], eax
movzx eax, byte [ebp - 0x91]
movzx edx, byte [ebp - 0x92]
shl edx, 8
add eax, edx
movzx edx, byte [ebp - 0x93]
shl edx, 0x10
add eax, edx
movzx edx, byte [ebp - 0x94]
shl edx, 0x18
add eax, edx
mov dword [ecx + 4], eax
add ecx, 8
dec dword [ebp - 0x48]
jne 0x54af93
mov ebx, 4
lea ecx, [ebp - 0x1168]
mov dword [ebp - 0x48], 0x80
mov eax, ecx
mov dword [ebp - 0x154], eax
lea edx, [ebp - 0x98]
mov eax, dword [edx]
add edx, 4
mov edx, dword [edx]
mov esi, eax
and esi, 0xff
shl esi, 0x18
mov edi, eax
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, eax
and edi, 0xff0000
shr edi, 8
or esi, edi
and eax, 0xff000000
shr eax, 0x18
or esi, eax
mov eax, esi
mov esi, edx
and esi, 0xff
shl esi, 0x18
mov edi, edx
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, edx
and edi, 0xff0000
shr edi, 8
or esi, edi
and edx, 0xff000000
shr edx, 0x18
or esi, edx
mov edx, esi
xor eax, dword [ebp - 0x11b0]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x11ac]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x11a8]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x11a4]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x11a0]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x119c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1198]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1194]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1190]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x118c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1188]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1184]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1180]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x117c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1178]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1174]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1170]
xor edx, dword [ebp - 0x116c]
mov esi, eax
and esi, 0xff
shl esi, 0x18
mov edi, eax
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, eax
and edi, 0xff0000
shr edi, 8
or esi, edi
and eax, 0xff000000
shr eax, 0x18
or esi, eax
mov eax, esi
mov esi, edx
and esi, 0xff
shl esi, 0x18
mov edi, edx
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, edx
and edi, 0xff0000
shr edi, 8
or esi, edi
and edx, 0xff000000
shr edx, 0x18
or esi, edx
mov edx, esi
lea esi, [ebp - 0x98]
mov dword [esi], edx
lea edx, [ebp - 0x98]
add edx, 4
mov dword [edx], eax
movzx eax, byte [ebp - 0x95]
movzx edx, byte [ebp - 0x96]
shl edx, 8
add eax, edx
movzx edx, byte [ebp - 0x97]
shl edx, 0x10
add eax, edx
movzx edx, byte [ebp - 0x98]
shl edx, 0x18
add eax, edx
mov edx, dword [ebp - 0x154]
mov dword [edx], eax
movzx eax, byte [ebp - 0x91]
movzx edx, byte [ebp - 0x92]
shl edx, 8
add eax, edx
movzx edx, byte [ebp - 0x93]
shl edx, 0x10
add eax, edx
movzx edx, byte [ebp - 0x94]
shl edx, 0x18
add eax, edx
mov edx, dword [ebp - 0x154]
mov dword [edx + 4], eax
add dword [ebp - 0x154], 8
dec dword [ebp - 0x48]
jne 0x54b5d2
add ecx, 0x400
dec ebx
jne 0x54b5c3
lea eax, [ebp - 0x34]
call fcn.00405ad4
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xc]
call fcn.00405ad4
mov dword [ebp - 0xb4], eax
lea eax, [ebp - 0xb0]
mov ecx, 0xff
mov edx, 8
call fcn.00403e38
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xa8], eax
mov ebx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x9c]
test eax, eax
jns 0x54bc68
add eax, 7
sar eax, 3
test eax, eax
jle 0x54c28d
mov dword [ebp - 0xc4], eax
mov edx, ebx
mov eax, dword [ebp - 0xa8]
mov ecx, 8
call fcn.004035b8
mov eax, 1
lea edx, [ebp - 0xb0]
add edx, eax
dec edx
movzx edx, byte [edx]
mov ecx, ebx
add ecx, eax
dec ecx
xor byte [ecx], dl
inc eax
cmp eax, 9
jne 0x54bc90
mov eax, dword [ebx]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
mov ecx, eax
and ecx, 0xff
shl ecx, 0x18
mov esi, eax
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, eax
and esi, 0xff0000
shr esi, 8
or ecx, esi
and eax, 0xff000000
shr eax, 0x18
or ecx, eax
mov eax, ecx
mov ecx, edx
and ecx, 0xff
shl ecx, 0x18
mov esi, edx
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, edx
and esi, 0xff0000
shr esi, 8
or ecx, esi
and edx, 0xff000000
shr edx, 0x18
or ecx, edx
mov edx, ecx
xor eax, dword [ebp - 0x11b0]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x11ac]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x11a8]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x11a4]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x11a0]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x119c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1198]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1194]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1190]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x118c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1188]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1184]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1180]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x117c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1178]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1174]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1170]
xor edx, dword [ebp - 0x116c]
mov ecx, eax
and ecx, 0xff
shl ecx, 0x18
mov esi, eax
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, eax
and esi, 0xff0000
shr esi, 8
or ecx, esi
and eax, 0xff000000
shr eax, 0x18
or ecx, eax
mov eax, ecx
mov ecx, edx
and ecx, 0xff
shl ecx, 0x18
mov esi, edx
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, edx
and esi, 0xff0000
shr esi, 8
or ecx, esi
and edx, 0xff000000
shr edx, 0x18
or ecx, edx
mov edx, ecx
mov dword [ebx], edx
mov edx, ebx
add edx, 4
mov dword [edx], eax
lea edx, [ebp - 0xb0]
mov eax, ebx
mov ecx, 8
call fcn.004035b8
mov eax, dword [ebp - 0xa8]
add eax, 8
mov dword [ebp - 0xa8], eax
add ebx, 8
dec dword [ebp - 0xc4]
jne 0x54bc79
mov eax, dword [ebp - 0x9c]
and eax, 0x80000007
jns 0x54c29f
dec eax
or eax, 0xfffffff8
inc eax
test eax, eax
je 0x54c8cb
lea eax, [ebp - 0xb0]
mov eax, dword [eax]
lea edx, [ebp - 0xb0]
add edx, 4
mov edx, dword [edx]
mov ecx, eax
and ecx, 0xff
shl ecx, 0x18
mov esi, eax
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, eax
and esi, 0xff0000
shr esi, 8
or ecx, esi
and eax, 0xff000000
shr eax, 0x18
or ecx, eax
mov eax, ecx
mov ecx, edx
and ecx, 0xff
shl ecx, 0x18
mov esi, edx
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, edx
and esi, 0xff0000
shr esi, 8
or ecx, esi
and edx, 0xff000000
shr edx, 0x18
or ecx, edx
mov edx, ecx
xor eax, dword [ebp - 0x11b0]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x11ac]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x11a8]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x11a4]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x11a0]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x119c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1198]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1194]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1190]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x118c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1188]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1184]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1180]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x117c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1178]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1174]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1170]
xor edx, dword [ebp - 0x116c]
mov ecx, eax
and ecx, 0xff
shl ecx, 0x18
mov esi, eax
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, eax
and esi, 0xff0000
shr esi, 8
or ecx, esi
and eax, 0xff000000
shr eax, 0x18
or ecx, eax
mov eax, ecx
mov ecx, edx
and ecx, 0xff
shl ecx, 0x18
mov esi, edx
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, edx
and esi, 0xff0000
shr esi, 8
or ecx, esi
and edx, 0xff000000
shr edx, 0x18
or ecx, edx
mov edx, ecx
lea ecx, [ebp - 0xb0]
mov dword [ecx], edx
lea edx, [ebp - 0xb0]
add edx, 4
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
and eax, 0x80000007
jns 0x54c881
dec eax
or eax, 0xfffffff8
inc eax
mov dword [ebp - 0xa0], eax
mov edx, ebx
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa0]
call fcn.004035b8
mov eax, dword [ebp - 0xa0]
test eax, eax
jle 0x54c8cb
mov dword [ebp - 0xc4], eax
mov eax, 1
lea edx, [ebp - 0xb0]
add edx, eax
dec edx
movzx edx, byte [edx]
mov ecx, ebx
add ecx, eax
dec ecx
xor byte [ecx], dl
inc eax
dec dword [ebp - 0xc4]
jne 0x54c8af
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.0049ad0c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [0x58837c]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.0049c55c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0xc]
call fcn.004055e4
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x54ac90
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
cmp dword [eax + 8], 0
jg 0x54d960
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x54cad1
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x128c]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x128c]
lea edx, [ebp - 0x1288]
call fcn.0040c920
cmp dword [ebp - 0x1288], 0
jne 0x54cac8
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x48]
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xffffffff
jne 0x54ca8c
mov byte [ebp - 0x69], 0
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x54d03f
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x1290]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1290]
lea edx, [ebp - 0xc]
call fcn.0040c920
cmp dword [ebp - 0xc], 0
je 0x54d030
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3b
je 0x54d030
cmp byte [ebp - 0x69], 0
jne 0x54cb5f
mov edx, 0x54dc58
mov eax, dword [ebp - 0xc]
call fcn.0040c78c
test eax, eax
jne 0x54cb5f
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov byte [ebp - 0x69], 1
jmp 0x54d030
cmp byte [ebp - 0x69], 0
je 0x54d030
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x5b
jne 0x54cba8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
je 0x54cb94
mov eax, dword [ebp - 0x138]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x138]
cmp byte [eax + edx - 1], 0x5d
je 0x54d03f
mov edx, dword [ebp - 0xc]
mov eax, 0x54db88
call fcn.00405bc0
mov ebx, eax
test ebx, ebx
jle 0x54d030
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
je 0x54cbe2
mov eax, dword [ebp - 0x13c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x1298]
push eax
mov ecx, dword [ebp - 0x13c]
sub ecx, ebx
lea edx, [ebx + 1]
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1298]
lea edx, [ebp - 0x1294]
call fcn.0040c920
mov edx, dword [ebp - 0x1294]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54d030
push 1
lea eax, [ebp - 0x129c]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.004991c0
mov edx, dword [ebp - 0x129c]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 1
lea eax, [ebp - 0x12a4]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.004991c0
mov edx, dword [ebp - 0x12a4]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 1
lea eax, [ebp - 0x12a8]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0xc]
call fcn.004991c0
mov edx, dword [ebp - 0x12a8]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 1
lea eax, [ebp - 0x12ac]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.004991c0
mov edx, dword [ebp - 0x12ac]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 1
lea eax, [ebp - 0x12b0]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0xc]
call fcn.004991c0
mov edx, dword [ebp - 0x12b0]
lea eax, [ebp - 0xc]
call fcn.0040567c
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040cf24
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
sub eax, 4
jae 0x54cd7c
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
je 0x54cd6c
mov eax, dword [ebp - 0x140]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x20
sete byte [ebp - 0x141]
jmp 0x54cd83
mov byte [ebp - 0x141], 0
cmp byte [ebp - 0x141], 0
je 0x54cd99
cmp dword [ebp - 0x14], 0
setne byte [ebp - 0x142]
jmp 0x54cda0
mov byte [ebp - 0x142], 0
cmp byte [ebp - 0x142], 0
je 0x54cdb6
cmp dword [ebp - 0x18], 0
setne byte [ebp - 0x143]
jmp 0x54cdbd
mov byte [ebp - 0x143], 0
cmp byte [ebp - 0x143], 0
je 0x54d030
cmp dword [ebp - 0x24], 0
je 0x54d030
movzx eax, byte [ebp - 0x54]
mov byte [ebp - 0x55], al
mov eax, dword [ebp - 0x14]
mov edx, 0x54dc6c
call fcn.00405a0c
jne 0x54cdfc
lea eax, [ebp - 0x14]
mov edx, dword [0x588d18]
mov edx, dword [edx]
call fcn.0040567c
jmp 0x54ce37
mov edx, dword [0x588d18]
mov edx, dword [edx]
lea eax, [ebp - 0x12b4]
mov ecx, dword [ebp - 0x14]
call fcn.004058fc
mov eax, dword [ebp - 0x12b4]
mov dword [ebp - 0x148], eax
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x148]
call fcn.004127b8
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x38]
call fcn.0040567c
lea eax, [ebp - 0x20]
mov edx, dword [0x588700]
add edx, 0x2bc
call fcn.00405848
mov edx, dword [ebp - 0x20]
mov eax, 0x54dc78
call fcn.00405bc0
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jle 0x54ce76
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x4c]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x20]
call fcn.00405adc
cmp dword [ebp - 0x20], 0
jne 0x54ce89
lea eax, [ebp - 0x20]
mov edx, 0x54dc84
call fcn.0040567c
cmp byte [ebp - 0x55], 1
jne 0x54cf07
lea edx, [ebp - 0x12b8]
mov eax, dword [0x588ca8]
mov eax, dword [eax]
call fcn.00477510
mov edx, dword [ebp - 0x12b8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x588d18]
push dword [eax]
push dword [ebp - 0x20]
push 0x54dc6c
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00405978
mov eax, dword [ebp - 0x1c]
call fcn.0040d56c
test al, al
jne 0x54cee2
mov eax, dword [ebp - 0x1c]
call fcn.0040d590
mov eax, dword [0x588ec4]
mov byte [eax], 1
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
push 0x54dc94
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00405978
jmp 0x54cfb5
cmp byte [ebp - 0x55], 2
jne 0x54cf58
mov eax, dword [0x588d18]
push dword [eax]
push dword [ebp - 0x20]
push 0x54dc6c
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00405978
mov eax, dword [ebp - 0x1c]
call fcn.0040d56c
test al, al
jne 0x54cf3d
mov eax, dword [ebp - 0x1c]
call fcn.0040d590
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
call fcn.004058b0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x54cfb5
mov eax, dword [0x588d18]
push dword [eax]
push dword [ebp - 0x20]
push 0x54dc6c
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00405978
mov eax, dword [ebp - 0x1c]
call fcn.0040d56c
test al, al
jne 0x54cf88
mov eax, dword [ebp - 0x1c]
call fcn.0040d590
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
call fcn.004058b0
lea eax, [ebp - 0x12bc]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.004058fc
mov edx, dword [ebp - 0x12bc]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov dl, 1
mov eax, dword [0x547c50]
call fcn.00548088
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
add eax, 8
mov edx, dword [ebp - 0x18]
call fcn.00405638
mov eax, dword [ebp - 0x5c]
add eax, 0xc
mov edx, dword [ebp - 0x14]
call fcn.00405638
mov eax, dword [ebp - 0x5c]
add eax, 0x10
mov edx, dword [ebp - 0x1c]
call fcn.00405638
mov eax, dword [ebp - 0x5c]
movzx edx, byte [ebp - 0x55]
mov byte [eax + 4], dl
mov eax, dword [ebp - 0x5c]
add eax, 0x18
mov edx, dword [ebp - 0x28]
call fcn.00405638
mov eax, dword [ebp - 0x5c]
add eax, 0x14
mov edx, dword [ebp - 0x24]
call fcn.00405638
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov ecx, dword [ebp - 0x5c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x54caf7
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x54d0d5
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x48]
call fcn.0041e2ac
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x54d0b1
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [eax]
call dword [edx + 8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x54d224
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
cmp byte [0x5927d8], 3
je 0x54d224
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 4], 1
jne 0x54d217
lea ecx, [ebp - 0x12c8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12c8]
lea ecx, [ebp - 0x12c4]
mov eax, dword [ebp - 0x3c]
call fcn.005498f4
mov eax, dword [ebp - 0x12c4]
lea edx, [ebp - 0x12c0]
call fcn.0040c580
mov eax, dword [ebp - 0x12c0]
push eax
lea edx, [ebp - 0x12cc]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c580
mov edx, dword [ebp - 0x12cc]
pop eax
call fcn.0040c78c
test eax, eax
jne 0x54d1fb
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
jmp 0x54d217
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e154
dec dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xffffffff
jne 0x54d157
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
cmp dword [eax + 8], 0
jle 0x54d2d8
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x54d2c8
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x54d2a4
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp 0x54d3f4
xor eax, eax
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x30]
call fcn.004055e4
mov dl, 1
mov eax, dword [0x41c04c]
call fcn.00404674
mov ebx, eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x54d39a
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
cmp byte [ebp - 0x3d], 0
je 0x54d36e
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 4], 3
jne 0x54d38d
lea ecx, [ebp - 0x12d0]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x12d0]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov ecx, eax
mov eax, ebx
pop edx
mov esi, dword [eax]
call dword [esi + 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x48]
jmp 0x54d38d
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 4], 3
jne 0x54d38d
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
dec dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xffffffff
jne 0x54d30b
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x54d3ed
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov edx, dword [ebp - 0x48]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x18]
push eax
lea ecx, [ebp - 0x12d4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x12d4]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
xor edx, edx
mov esi, dword [eax]
call dword [esi + 0x64]
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x54d3b4
mov eax, ebx
call fcn.004046a4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebp - 0x6a], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x54d8ff
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
cmp byte [0x5927d8], 3
je 0x54d8ff
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
lea ecx, [ebp - 0x12e0]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12e0]
lea ecx, [ebp - 0x12dc]
mov eax, dword [ebp - 0x3c]
call fcn.005498f4
mov eax, dword [ebp - 0x12dc]
lea edx, [ebp - 0x12d8]
call fcn.0040c580
mov eax, dword [ebp - 0x12d8]
push eax
lea edx, [ebp - 0x12e4]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c580
mov edx, dword [ebp - 0x12e4]
pop eax
call fcn.0040c78c
test eax, eax
jne 0x54d8a5
mov eax, dword [ebp - 0x5c]
movzx eax, byte [eax + 4]
sub al, 1
jb 0x54d5ad
dec al
je 0x54d56e
dec al
je 0x54d65d
jmp 0x54d8f0
lea ecx, [ebp - 0x12e8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12e8]
mov eax, dword [ebp - 0x5c]
add eax, 0x10
call fcn.00405638
mov eax, dword [ebp - 0x5c]
mov byte [eax + 4], 6
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e154
jmp 0x54d8f0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x12f4]
call fcn.004058fc
mov edx, dword [ebp - 0x12f4]
lea ecx, [ebp - 0x12f0]
mov eax, dword [ebp - 0x3c]
call fcn.005498f4
mov eax, dword [ebp - 0x12f0]
lea edx, [ebp - 0x12ec]
call fcn.0040c580
mov eax, dword [ebp - 0x12ec]
push eax
lea edx, [ebp - 0x12f8]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c580
mov edx, dword [ebp - 0x12f8]
pop eax
call fcn.0040c78c
test eax, eax
jne 0x54d61e
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
jmp 0x54d8f0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e154
lea ecx, [ebp - 0x12fc]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12fc]
mov eax, dword [ebp - 0x5c]
add eax, 0x10
call fcn.00405638
mov eax, dword [ebp - 0x5c]
mov byte [eax + 4], 4
jmp 0x54d8f0
cmp byte [ebp - 0x6a], 0
je 0x54d670
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
jmp 0x54d8f0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x1308]
call fcn.004058fc
mov edx, dword [ebp - 0x1308]
lea ecx, [ebp - 0x1304]
mov eax, dword [ebp - 0x3c]
call fcn.005498f4
mov eax, dword [ebp - 0x1304]
lea edx, [ebp - 0x1300]
call fcn.0040c580
mov eax, dword [ebp - 0x1300]
push eax
lea edx, [ebp - 0x130c]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c580
mov edx, dword [ebp - 0x130c]
pop eax
call fcn.0040c78c
test eax, eax
jne 0x54d78c
mov byte [ebp - 0x6a], 1
mov dl, 1
mov eax, dword [0x41c374]
call fcn.00404674
mov dword [ebp - 0x70], eax
xor eax, eax
push ebp
push 0x54d743
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x1310]
call fcn.004058fc
mov edx, dword [ebp - 0x1310]
mov eax, dword [ebp - 0x70]
call fcn.004218d0
push 0
push 0
mov eax, dword [ebp - 0x70]
call fcn.00421100
mov eax, dword [0x588f48]
mov eax, dword [eax]
mov edx, dword [ebp - 0x70]
call fcn.004936ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x54d777
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
mov eax, dword [ebp - 0x70]
call fcn.004046a4
jmp 0x54d8f0
lea ecx, [ebp - 0x1318]
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x3c]
call fcn.005498f4
mov eax, dword [ebp - 0x1318]
lea edx, [ebp - 0x1314]
call fcn.0040c580
mov eax, dword [ebp - 0x1314]
push eax
lea edx, [ebp - 0x131c]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c580
mov edx, dword [ebp - 0x131c]
pop eax
call fcn.0040c78c
test eax, eax
jne 0x54d8f0
mov dl, 1
mov eax, dword [0x41c374]
call fcn.00404674
mov dword [ebp - 0x70], eax
xor eax, eax
push ebp
push 0x54d82d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x70]
call fcn.004218d0
push 0
push 0
mov eax, dword [ebp - 0x70]
call fcn.00421100
mov eax, dword [0x588f48]
mov eax, dword [eax]
mov edx, dword [ebp - 0x70]
call fcn.004936ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x54d861
lea ecx, [ebp - 0x1320]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1320]
mov eax, dword [ebp - 0x5c]
add eax, 0x10
call fcn.00405638
mov eax, dword [ebp - 0x5c]
mov byte [eax + 4], 5
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e154
mov eax, dword [ebp - 0x70]
call fcn.004046a4
jmp 0x54d8f0
lea ecx, [ebp - 0x1324]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1324]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
call fcn.00405a74
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x14d], al
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e154
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x54d4cf
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x44]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0xbc]
call fcn.004046a4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [0x5927d8], 3
jne 0x54dac5
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x54da17
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x48]
call fcn.0041e2ac
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x54d9f3
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [eax]
call dword [edx + 8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x54daba
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x54da96
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x44]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x54dae5
mov eax, dword [0x5885e8]
push eax
call sub.kernel32.dll_LeaveCriticalSection
ret