Function at 0x5461b0
Capabilities:
Contain obfuscated stackstrings
Delete file
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x264
push 0
push 0
dec ecx
jne 0x5461b9
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov byte [ebp - 0x3d], cl
mov dword [ebp - 4], edx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 4]
call fcn.00405a64
xor eax, eax
push ebp
push 0x549e59
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x58aaf8]
push eax
call sub.kernel32.dll_EnterCriticalSection
xor edi, edi
push ebp
push 0x549df7
push dword fs:[edi]
mov dword fs:[edi], esp
mov eax, dword [ebp - 0x3c]
cmp byte [eax + 0xd], 0
jne 0x549d17
cmp dword [ebp - 4], 0
je 0x549d17
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [0x58af04]
call fcn.004055e4
mov eax, dword [0x58ae48]
call fcn.004055e4
mov eax, dword [0x58b270]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x58a924]
mov byte [eax], 1
mov eax, dword [0x58b69c]
mov dword [eax], 0x1e
mov eax, dword [0x58aa54]
call fcn.004055e4
mov eax, dword [0x58b36c]
call fcn.004055e4
mov eax, dword [0x58b5ac]
call fcn.004055e4
mov eax, dword [0x58ac98]
mov eax, dword [eax]
call fcn.0047f124
mov eax, dword [0x58ac98]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [0x58ac98]
mov eax, dword [eax]
call fcn.0047f130
mov eax, dword [0x58aea8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x58a890]
mov eax, dword [eax]
call fcn.00494418
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x58b038]
mov dword [edx], eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dl, 1
mov eax, dword [0x41c064]
call fcn.00404674
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x546399
lea ecx, [ebp - 0x11c4]
xor edx, edx
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11c4]
mov ecx, 0x15
mov edx, 0x549e70
call fcn.0048f7d0
test al, al
je 0x546399
xor edx, edx
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x546399
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x11cc]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x11cc]
lea edx, [ebp - 0x11c8]
call fcn.004e3c38
mov ecx, dword [ebp - 0x11c8]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0x20]
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x546355
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x549d0c
mov byte [ebp - 0x69], 0
xor ebx, ebx
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x546aa7
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x11d0]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x11d0]
lea edx, [ebp - 0xc]
call fcn.0040c938
cmp dword [ebp - 0xc], 0
je 0x546a98
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3b
je 0x546a98
cmp byte [ebp - 0x69], 0
jne 0x54644a
mov edx, 0x549e90
mov eax, dword [ebp - 0xc]
call fcn.0040c7a4
test eax, eax
jne 0x54644a
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
mov byte [ebp - 0x69], 1
jmp 0x546a98
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebp - 0x69], 0
je 0x546a98
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x5b
jne 0x54648a
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x54647c
sub eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
cmp byte [edx + eax - 1], 0x5d
je 0x546aa7
mov edx, dword [ebp - 0xc]
mov eax, 0x549ea0
call fcn.00405bc0
test eax, eax
jle 0x546a98
mov ecx, 8
mov edx, 0x549eac
mov eax, dword [ebp - 0xc]
call fcn.0048f7d0
test al, al
je 0x546567
mov esi, dword [ebp - 0xc]
test esi, esi
je 0x5464c5
sub esi, 4
mov esi, dword [esi]
lea eax, [ebp - 0x11d8]
push eax
mov ecx, esi
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11d8]
lea edx, [ebp - 0x11d4]
call fcn.0040c938
mov edx, dword [ebp - 0x11d4]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x546558
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x546558
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
je 0x54652e
mov eax, dword [ebp - 0xd0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xd0], eax
mov eax, dword [0x58aa54]
push eax
mov ecx, dword [ebp - 0xd0]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x546aa7
jmp 0x546a98
mov ecx, 8
mov edx, 0x549ec0
mov eax, dword [ebp - 0xc]
call fcn.0048f7d0
test al, al
je 0x54664a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
je 0x5465a4
mov eax, dword [ebp - 0xd4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x11e0]
push eax
mov ecx, dword [ebp - 0xd4]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11e0]
lea edx, [ebp - 0x11dc]
call fcn.0040c938
mov edx, dword [ebp - 0x11dc]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54663b
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54663b
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
je 0x546611
mov eax, dword [ebp - 0xd8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
mov eax, dword [0x58b36c]
push eax
mov ecx, dword [ebp - 0xd8]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x546aa7
jmp 0x546a98
mov ecx, 8
mov edx, 0x549ed4
mov eax, dword [ebp - 0xc]
call fcn.0048f7d0
test al, al
je 0x54672d
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
je 0x546687
mov eax, dword [ebp - 0xdc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xdc], eax
lea eax, [ebp - 0x11e8]
push eax
mov ecx, dword [ebp - 0xdc]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11e8]
lea edx, [ebp - 0x11e4]
call fcn.0040c938
mov edx, dword [ebp - 0x11e4]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54671e
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54671e
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
je 0x5466f4
mov eax, dword [ebp - 0xe0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xe0], eax
mov eax, dword [0x58b5ac]
push eax
mov ecx, dword [ebp - 0xe0]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x546aa7
jmp 0x546a98
mov ecx, 8
mov edx, 0x549ee8
mov eax, dword [ebp - 0xc]
call fcn.0048f7d0
test al, al
je 0x546829
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
je 0x54676a
mov eax, dword [ebp - 0xe4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x11f0]
push eax
mov ecx, dword [ebp - 0xe4]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11f0]
lea edx, [ebp - 0x11ec]
call fcn.0040c938
mov edx, dword [ebp - 0x11ec]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x54681a
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x54681a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
je 0x5467d7
mov eax, dword [ebp - 0xe8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xe8], eax
lea eax, [ebp - 0x11f4]
push eax
mov ecx, dword [ebp - 0xe8]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11f4]
mov edx, 0x549efc
call fcn.00405a0c
mov eax, dword [0x58a924]
sete byte [eax]
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x546aa7
jmp 0x546a98
mov ecx, 8
mov edx, 0x549f08
mov eax, dword [ebp - 0xc]
call fcn.0048f7d0
test al, al
je 0x546925
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
je 0x546866
mov eax, dword [ebp - 0xec]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x11fc]
push eax
mov ecx, dword [ebp - 0xec]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x11fc]
lea edx, [ebp - 0x11f8]
call fcn.0040c938
mov edx, dword [ebp - 0x11f8]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x546916
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x546916
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
je 0x5468d3
mov eax, dword [ebp - 0xf0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0x1200]
push eax
mov ecx, dword [ebp - 0xf0]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1200]
mov edx, 0x1e
call fcn.0040cf3c
mov edx, dword [0x58b69c]
mov dword [edx], eax
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x546aa7
jmp 0x546a98
mov ecx, 0xe
mov edx, 0x549f1c
mov eax, dword [ebp - 0xc]
call fcn.0048f7d0
test al, al
je 0x546a98
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
je 0x546962
mov eax, dword [ebp - 0xf4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0x1208]
push eax
mov ecx, dword [ebp - 0xf4]
sub ecx, 0xe
mov edx, 0xf
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1208]
lea edx, [ebp - 0x1204]
call fcn.0040c938
mov edx, dword [ebp - 0x1204]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x546a92
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x546a92
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
je 0x5469e7
mov eax, dword [ebp - 0xf8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xf8], eax
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0xf8]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
push 0
lea eax, [ebp - 0x120c]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
mov edx, dword [0x58af04]
mov eax, dword [ebp - 0xc]
call fcn.0048f444
mov edx, dword [ebp - 0x120c]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 0
lea eax, [ebp - 0x1214]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.0048f444
mov edx, dword [ebp - 0x1214]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 0
lea eax, [ebp - 0x1218]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
mov edx, dword [0x58ae48]
mov eax, dword [ebp - 0xc]
call fcn.0048f444
mov edx, dword [ebp - 0x1218]
lea eax, [ebp - 0xc]
call fcn.0040567c
inc ebx
cmp ebx, 6
jge 0x546aa7
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x5463e2
mov eax, dword [0x58b570]
cmp dword [eax], 0
je 0x547208
mov byte [ebp - 0x69], 0
xor ebx, ebx
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x547208
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x121c]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x121c]
lea edx, [ebp - 0xc]
call fcn.0040c938
cmp dword [ebp - 0xc], 0
je 0x5471f9
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3b
je 0x5471f9
cmp byte [ebp - 0x69], 0
jne 0x546b73
lea eax, [ebp - 0x1220]
push eax
mov eax, dword [0x58b570]
mov eax, dword [eax]
mov dword [ebp - 0x1228], eax
mov byte [ebp - 0x1224], 0xb
lea edx, [ebp - 0x1228]
xor ecx, ecx
mov eax, 0x549f34
call fcn.0040e7a0
mov edx, dword [ebp - 0x1220]
mov eax, dword [ebp - 0xc]
call fcn.0040c7a4
test eax, eax
jne 0x546b73
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
mov byte [ebp - 0x69], 1
jmp 0x5471f9
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebp - 0x69], 0
je 0x5471f9
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x5b
jne 0x546bd0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
je 0x546bbc
mov eax, dword [ebp - 0xfc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0xfc]
cmp byte [eax + edx - 1], 0x5d
je 0x547208
mov edx, dword [ebp - 0xc]
mov eax, 0x549ea0
call fcn.00405bc0
test eax, eax
jle 0x5471f9
mov ecx, 8
mov edx, 0x549eac
mov eax, dword [ebp - 0xc]
call fcn.0048f7d0
test al, al
je 0x546cc8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
je 0x546c22
mov eax, dword [ebp - 0x100]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x100], eax
lea eax, [ebp - 0x1230]
push eax
mov ecx, dword [ebp - 0x100]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1230]
lea edx, [ebp - 0x122c]
call fcn.0040c938
mov edx, dword [ebp - 0x122c]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x546cb9
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x546cb9
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
je 0x546c8f
mov eax, dword [ebp - 0x104]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
mov eax, dword [0x58ade0]
push eax
mov ecx, dword [ebp - 0x104]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x547208
jmp 0x5471f9
mov ecx, 8
mov edx, 0x549ec0
mov eax, dword [ebp - 0xc]
call fcn.0048f7d0
test al, al
je 0x546dab
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x546d05
mov eax, dword [ebp - 0x108]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0x1238]
push eax
mov ecx, dword [ebp - 0x108]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1238]
lea edx, [ebp - 0x1234]
call fcn.0040c938
mov edx, dword [ebp - 0x1234]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x546d9c
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x546d9c
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
je 0x546d72
mov eax, dword [ebp - 0x10c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x10c], eax
mov eax, dword [0x58b640]
push eax
mov ecx, dword [ebp - 0x10c]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x547208
jmp 0x5471f9
mov ecx, 8
mov edx, 0x549ed4
mov eax, dword [ebp - 0xc]
call fcn.0048f7d0
test al, al
je 0x546e8e
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
je 0x546de8
mov eax, dword [ebp - 0x110]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x1240]
push eax
mov ecx, dword [ebp - 0x110]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1240]
lea edx, [ebp - 0x123c]
call fcn.0040c938
mov edx, dword [ebp - 0x123c]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x546e7f
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x546e7f
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
je 0x546e55
mov eax, dword [ebp - 0x114]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x114], eax
mov eax, dword [0x58a9ac]
push eax
mov ecx, dword [ebp - 0x114]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x547208
jmp 0x5471f9
mov ecx, 8
mov edx, 0x549ee8
mov eax, dword [ebp - 0xc]
call fcn.0048f7d0
test al, al
je 0x546f8a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
je 0x546ecb
mov eax, dword [ebp - 0x118]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x1248]
push eax
mov ecx, dword [ebp - 0x118]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1248]
lea edx, [ebp - 0x1244]
call fcn.0040c938
mov edx, dword [ebp - 0x1244]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x546f7b
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x546f7b
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x546f38
mov eax, dword [ebp - 0x11c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x124c]
push eax
mov ecx, dword [ebp - 0x11c]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x124c]
mov edx, 0x549efc
call fcn.00405a0c
mov eax, dword [0x58a924]
sete byte [eax]
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x547208
jmp 0x5471f9
mov ecx, 8
mov edx, 0x549f08
mov eax, dword [ebp - 0xc]
call fcn.0048f7d0
test al, al
je 0x547086
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
je 0x546fc7
mov eax, dword [ebp - 0x120]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x1254]
push eax
mov ecx, dword [ebp - 0x120]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1254]
lea edx, [ebp - 0x1250]
call fcn.0040c938
mov edx, dword [ebp - 0x1250]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x547077
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x547077
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
je 0x547034
mov eax, dword [ebp - 0x124]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x1258]
push eax
mov ecx, dword [ebp - 0x124]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1258]
mov edx, 0x1e
call fcn.0040cf3c
mov edx, dword [0x58b69c]
mov dword [edx], eax
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
inc ebx
cmp ebx, 6
jge 0x547208
jmp 0x5471f9
mov ecx, 0xe
mov edx, 0x549f1c
mov eax, dword [ebp - 0xc]
call fcn.0048f7d0
test al, al
je 0x5471f9
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
je 0x5470c3
mov eax, dword [ebp - 0x128]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x1260]
push eax
mov ecx, dword [ebp - 0x128]
sub ecx, 0xe
mov edx, 0xf
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1260]
lea edx, [ebp - 0x125c]
call fcn.0040c938
mov edx, dword [ebp - 0x125c]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x5471f3
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3d
jne 0x5471f3
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
call dword [esi + 0x20]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x547148
mov eax, dword [ebp - 0x12c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x12c]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.00405adc
push 0
lea eax, [ebp - 0x1264]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
mov edx, dword [0x58af04]
mov eax, dword [ebp - 0xc]
call fcn.0048f444
mov edx, dword [ebp - 0x1264]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 0
lea eax, [ebp - 0x1268]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.0048f444
mov edx, dword [ebp - 0x1268]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 0
lea eax, [ebp - 0x126c]
push eax
mov byte [ebp - 0x1210], 0x7c
lea ecx, [ebp - 0x1210]
mov edx, dword [0x58ae48]
mov eax, dword [ebp - 0xc]
call fcn.0048f444
mov edx, dword [ebp - 0x126c]
lea eax, [ebp - 0xc]
call fcn.0040567c
inc ebx
cmp ebx, 6
jge 0x547208
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x546add
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x54726f
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x1274]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1274]
lea edx, [ebp - 0x1270]
call fcn.0040c938
cmp dword [ebp - 0x1270], 0
jne 0x547266
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x48]
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xffffffff
jne 0x54722a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebp - 0x69], 0
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x548f3f
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x1278]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1278]
lea edx, [ebp - 0xc]
call fcn.0040c938
cmp dword [ebp - 0xc], 0
je 0x548f30
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3b
je 0x548f30
cmp byte [ebp - 0x69], 0
jne 0x54730b
mov edx, 0x549f44
mov eax, dword [ebp - 0xc]
call fcn.0040c7a4
test eax, eax
jne 0x54730b
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov byte [ebp - 0x69], 1
jmp 0x548f30
cmp byte [ebp - 0x69], 0
je 0x548f30
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x5b
jne 0x547354
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
je 0x547340
mov eax, dword [ebp - 0x130]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x130]
cmp byte [eax + edx - 1], 0x5d
je 0x548f3f
mov edx, dword [ebp - 0xc]
mov eax, 0x549ea0
call fcn.00405bc0
mov ebx, eax
test ebx, ebx
jle 0x548f30
mov esi, dword [ebp - 0xc]
test esi, esi
je 0x547377
sub esi, 4
mov esi, dword [esi]
lea eax, [ebp - 0x1280]
push eax
mov ecx, esi
sub ecx, ebx
lea edx, [ebx + 1]
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1280]
lea edx, [ebp - 0x127c]
call fcn.0040c938
mov edx, dword [ebp - 0x127c]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x548f30
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0x20]
push 0x549f58
push dword [ebp - 0xc]
push 0x549f64
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00405978
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
je 0x547403
mov eax, dword [ebp - 0x134]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x9c]
call fcn.00405d04
lea eax, [ebp - 0x1168]
mov ecx, 0xff
mov edx, 0x1000
call fcn.00403e38
lea eax, [ebp - 0x11b0]
mov ecx, 0xff
mov edx, 0x48
call fcn.00403e38
lea eax, [ebp - 0x11c0]
push eax
call sub.kernel32.dll_GetLocalTime
movzx eax, word [ebp - 0x11c0]
movzx edx, word [ebp - 0x11be]
add eax, edx
movzx edx, word [ebp - 0x11ba]
add eax, edx
movzx edx, word [ebp - 0x11b8]
add eax, edx
movzx edx, word [ebp - 0x11b6]
add eax, edx
mov dword [ebp - 0x74], eax
lea edx, [ebp - 0x1284]
mov eax, dword [ebp - 0x74]
call fcn.0040cd94
mov eax, dword [ebp - 0x1284]
lea edx, [ebp - 0x168]
call fcn.00480938
lea eax, [ebp - 0x8a]
xor ecx, ecx
mov edx, 8
call fcn.00403e38
lea edx, [ebp - 0x8a]
lea eax, [ebp - 0x168]
mov ecx, 8
call fcn.004035b8
mov dword [ebp - 0x90], 0x40
mov ecx, 8
mov eax, dword [ebp - 0x90]
xor edx, edx
div ecx
mov dword [ebp - 0x90], eax
lea edx, [ebp - 0x1168]
mov eax, dword [0x58b4d0]
mov ecx, 0x1000
call fcn.004035b8
lea edx, [ebp - 0x11b0]
mov eax, dword [0x58b218]
mov ecx, 0x48
call fcn.004035b8
xor ebx, ebx
mov dword [ebp - 0x48], 0x12
lea ecx, [ebp - 0x11b0]
lea eax, [ebx + 3]
xor edx, edx
div dword [ebp - 0x90]
movzx esi, byte [ebp + edx - 0x8a]
lea eax, [ebx + 2]
xor edx, edx
div dword [ebp - 0x90]
movzx eax, byte [ebp + edx - 0x8a]
shl eax, 8
add esi, eax
lea eax, [ebx + 1]
xor edx, edx
div dword [ebp - 0x90]
movzx eax, byte [ebp + edx - 0x8a]
shl eax, 0x10
add esi, eax
movzx eax, byte [ebp + ebx - 0x8a]
shl eax, 0x18
add esi, eax
xor dword [ecx], esi
lea eax, [ebx + 4]
xor edx, edx
div dword [ebp - 0x90]
mov ebx, edx
add ecx, 4
dec dword [ebp - 0x48]
jne 0x547520
lea eax, [ebp - 0x98]
xor ecx, ecx
mov edx, 8
call fcn.00403e38
mov dword [ebp - 0x48], 9
lea ecx, [ebp - 0x11b0]
lea edx, [ebp - 0x98]
mov ebx, edx
mov eax, dword [ebx]
add edx, 4
mov edx, dword [edx]
mov esi, eax
and esi, 0xff
shl esi, 0x18
mov edi, eax
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, eax
and edi, 0xff0000
shr edi, 8
or esi, edi
and eax, 0xff000000
shr eax, 0x18
or esi, eax
mov eax, esi
mov esi, edx
and esi, 0xff
shl esi, 0x18
mov edi, edx
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, edx
and edi, 0xff0000
shr edi, 8
or esi, edi
and edx, 0xff000000
shr edx, 0x18
or esi, edx
mov edx, esi
xor eax, dword [ebp - 0x11b0]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x11ac]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x11a8]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x11a4]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x11a0]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x119c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1198]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1194]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1190]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x118c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1188]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1184]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1180]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x117c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1178]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1174]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1170]
xor edx, dword [ebp - 0x116c]
mov esi, eax
and esi, 0xff
shl esi, 0x18
mov edi, eax
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, eax
and edi, 0xff0000
shr edi, 8
or esi, edi
and eax, 0xff000000
shr eax, 0x18
or esi, eax
mov eax, esi
mov esi, edx
and esi, 0xff
shl esi, 0x18
mov edi, edx
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, edx
and edi, 0xff0000
shr edi, 8
or esi, edi
and edx, 0xff000000
shr edx, 0x18
or esi, edx
mov edx, esi
mov dword [ebx], edx
lea edx, [ebp - 0x98]
add edx, 4
mov dword [edx], eax
movzx eax, byte [ebp - 0x95]
movzx edx, byte [ebp - 0x96]
shl edx, 8
add eax, edx
movzx edx, byte [ebp - 0x97]
shl edx, 0x10
add eax, edx
movzx edx, byte [ebp - 0x98]
shl edx, 0x18
add eax, edx
mov dword [ecx], eax
movzx eax, byte [ebp - 0x91]
movzx edx, byte [ebp - 0x92]
shl edx, 8
add eax, edx
movzx edx, byte [ebp - 0x93]
shl edx, 0x10
add eax, edx
movzx edx, byte [ebp - 0x94]
shl edx, 0x18
add eax, edx
mov dword [ecx + 4], eax
add ecx, 8
dec dword [ebp - 0x48]
jne 0x5475a6
mov ebx, 4
lea ecx, [ebp - 0x1168]
mov dword [ebp - 0x48], 0x80
mov eax, ecx
mov dword [ebp - 0x154], eax
lea edx, [ebp - 0x98]
mov eax, dword [edx]
add edx, 4
mov edx, dword [edx]
mov esi, eax
and esi, 0xff
shl esi, 0x18
mov edi, eax
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, eax
and edi, 0xff0000
shr edi, 8
or esi, edi
and eax, 0xff000000
shr eax, 0x18
or esi, eax
mov eax, esi
mov esi, edx
and esi, 0xff
shl esi, 0x18
mov edi, edx
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, edx
and edi, 0xff0000
shr edi, 8
or esi, edi
and edx, 0xff000000
shr edx, 0x18
or esi, edx
mov edx, esi
xor eax, dword [ebp - 0x11b0]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x11ac]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x11a8]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x11a4]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x11a0]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x119c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1198]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1194]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1190]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x118c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1188]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1184]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1180]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x117c]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1178]
mov esi, eax
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, eax
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, eax
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, eax
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor edx, esi
xor edx, dword [ebp - 0x1174]
mov esi, edx
shr esi, 0x18
and esi, 0xff
mov esi, dword [ebp + esi*4 - 0x1168]
mov edi, edx
shr edi, 0x10
and edi, 0xff
add esi, dword [ebp + edi*4 - 0xd68]
mov edi, edx
shr edi, 8
and edi, 0xff
xor esi, dword [ebp + edi*4 - 0x968]
mov edi, edx
and edi, 0xff
add esi, dword [ebp + edi*4 - 0x568]
xor eax, esi
xor eax, dword [ebp - 0x1170]
xor edx, dword [ebp - 0x116c]
mov esi, eax
and esi, 0xff
shl esi, 0x18
mov edi, eax
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, eax
and edi, 0xff0000
shr edi, 8
or esi, edi
and eax, 0xff000000
shr eax, 0x18
or esi, eax
mov eax, esi
mov esi, edx
and esi, 0xff
shl esi, 0x18
mov edi, edx
and edi, 0xff00
shl edi, 8
or esi, edi
mov edi, edx
and edi, 0xff0000
shr edi, 8
or esi, edi
and edx, 0xff000000
shr edx, 0x18
or esi, edx
mov edx, esi
lea esi, [ebp - 0x98]
mov dword [esi], edx
lea edx, [ebp - 0x98]
add edx, 4
mov dword [edx], eax
movzx eax, byte [ebp - 0x95]
movzx edx, byte [ebp - 0x96]
shl edx, 8
add eax, edx
movzx edx, byte [ebp - 0x97]
shl edx, 0x10
add eax, edx
movzx edx, byte [ebp - 0x98]
shl edx, 0x18
add eax, edx
mov edx, dword [ebp - 0x154]
mov dword [edx], eax
movzx eax, byte [ebp - 0x91]
movzx edx, byte [ebp - 0x92]
shl edx, 8
add eax, edx
movzx edx, byte [ebp - 0x93]
shl edx, 0x10
add eax, edx
movzx edx, byte [ebp - 0x94]
shl edx, 0x18
add eax, edx
mov edx, dword [ebp - 0x154]
mov dword [edx + 4], eax
add dword [ebp - 0x154], 8
dec dword [ebp - 0x48]
jne 0x547be5
add ecx, 0x400
dec ebx
jne 0x547bd6
lea eax, [ebp - 0x34]
call fcn.00405ad4
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xc]
call fcn.00405ad4
mov dword [ebp - 0xb4], eax
lea eax, [ebp - 0xb0]
mov ecx, 0xff
mov edx, 8
call fcn.00403e38
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xa8], eax
mov ebx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x9c]
test eax, eax
jns 0x54827b
add eax, 7
sar eax, 3
test eax, eax
jle 0x5488a0
mov dword [ebp - 0xc4], eax
mov edx, ebx
mov eax, dword [ebp - 0xa8]
mov ecx, 8
call fcn.004035b8
mov eax, 1
lea edx, [ebp - 0xb0]
add edx, eax
dec edx
movzx edx, byte [edx]
mov ecx, ebx
add ecx, eax
dec ecx
xor byte [ecx], dl
inc eax
cmp eax, 9
jne 0x5482a3
mov eax, dword [ebx]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
mov ecx, eax
and ecx, 0xff
shl ecx, 0x18
mov esi, eax
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, eax
and esi, 0xff0000
shr esi, 8
or ecx, esi
and eax, 0xff000000
shr eax, 0x18
or ecx, eax
mov eax, ecx
mov ecx, edx
and ecx, 0xff
shl ecx, 0x18
mov esi, edx
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, edx
and esi, 0xff0000
shr esi, 8
or ecx, esi
and edx, 0xff000000
shr edx, 0x18
or ecx, edx
mov edx, ecx
xor eax, dword [ebp - 0x11b0]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x11ac]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x11a8]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x11a4]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x11a0]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x119c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1198]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1194]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1190]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x118c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1188]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1184]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1180]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x117c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1178]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1174]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1170]
xor edx, dword [ebp - 0x116c]
mov ecx, eax
and ecx, 0xff
shl ecx, 0x18
mov esi, eax
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, eax
and esi, 0xff0000
shr esi, 8
or ecx, esi
and eax, 0xff000000
shr eax, 0x18
or ecx, eax
mov eax, ecx
mov ecx, edx
and ecx, 0xff
shl ecx, 0x18
mov esi, edx
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, edx
and esi, 0xff0000
shr esi, 8
or ecx, esi
and edx, 0xff000000
shr edx, 0x18
or ecx, edx
mov edx, ecx
mov dword [ebx], edx
mov edx, ebx
add edx, 4
mov dword [edx], eax
lea edx, [ebp - 0xb0]
mov eax, ebx
mov ecx, 8
call fcn.004035b8
mov eax, dword [ebp - 0xa8]
add eax, 8
mov dword [ebp - 0xa8], eax
add ebx, 8
dec dword [ebp - 0xc4]
jne 0x54828c
mov eax, dword [ebp - 0x9c]
and eax, 0x80000007
jns 0x5488b2
dec eax
or eax, 0xfffffff8
inc eax
test eax, eax
je 0x548ede
lea eax, [ebp - 0xb0]
mov eax, dword [eax]
lea edx, [ebp - 0xb0]
add edx, 4
mov edx, dword [edx]
mov ecx, eax
and ecx, 0xff
shl ecx, 0x18
mov esi, eax
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, eax
and esi, 0xff0000
shr esi, 8
or ecx, esi
and eax, 0xff000000
shr eax, 0x18
or ecx, eax
mov eax, ecx
mov ecx, edx
and ecx, 0xff
shl ecx, 0x18
mov esi, edx
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, edx
and esi, 0xff0000
shr esi, 8
or ecx, esi
and edx, 0xff000000
shr edx, 0x18
or ecx, edx
mov edx, ecx
xor eax, dword [ebp - 0x11b0]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x11ac]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x11a8]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x11a4]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x11a0]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x119c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1198]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1194]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1190]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x118c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1188]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1184]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1180]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x117c]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1178]
mov ecx, eax
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, eax
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, eax
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, eax
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor edx, ecx
xor edx, dword [ebp - 0x1174]
mov ecx, edx
shr ecx, 0x18
and ecx, 0xff
mov ecx, dword [ebp + ecx*4 - 0x1168]
mov esi, edx
shr esi, 0x10
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0xd68]
mov esi, edx
shr esi, 8
and esi, 0xff
xor ecx, dword [ebp + esi*4 - 0x968]
mov esi, edx
and esi, 0xff
add ecx, dword [ebp + esi*4 - 0x568]
xor eax, ecx
xor eax, dword [ebp - 0x1170]
xor edx, dword [ebp - 0x116c]
mov ecx, eax
and ecx, 0xff
shl ecx, 0x18
mov esi, eax
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, eax
and esi, 0xff0000
shr esi, 8
or ecx, esi
and eax, 0xff000000
shr eax, 0x18
or ecx, eax
mov eax, ecx
mov ecx, edx
and ecx, 0xff
shl ecx, 0x18
mov esi, edx
and esi, 0xff00
shl esi, 8
or ecx, esi
mov esi, edx
and esi, 0xff0000
shr esi, 8
or ecx, esi
and edx, 0xff000000
shr edx, 0x18
or ecx, edx
mov edx, ecx
lea ecx, [ebp - 0xb0]
mov dword [ecx], edx
lea edx, [ebp - 0xb0]
add edx, 4
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
and eax, 0x80000007
jns 0x548e94
dec eax
or eax, 0xfffffff8
inc eax
mov dword [ebp - 0xa0], eax
mov edx, ebx
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa0]
call fcn.004035b8
mov eax, dword [ebp - 0xa0]
test eax, eax
jle 0x548ede
mov dword [ebp - 0xc4], eax
mov eax, 1
lea edx, [ebp - 0xb0]
add edx, eax
dec edx
movzx edx, byte [edx]
mov ecx, ebx
add ecx, eax
dec ecx
xor byte [ecx], dl
inc eax
dec dword [ebp - 0xc4]
jne 0x548ec2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.004907f8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [0x58a890]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.0049203c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0xc]
call fcn.004055e4
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x5472a3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
cmp dword [eax + 8], 0
jg 0x549d0c
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x548fc1
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x128c]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x128c]
lea edx, [ebp - 0x1288]
call fcn.0040c938
cmp dword [ebp - 0x1288], 0
jne 0x548fb8
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
call dword [ecx + 0x48]
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xffffffff
jne 0x548f7c
mov byte [ebp - 0x69], 0
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x54952f
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x1290]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1290]
lea edx, [ebp - 0xc]
call fcn.0040c938
cmp dword [ebp - 0xc], 0
je 0x549520
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x3b
je 0x549520
cmp byte [ebp - 0x69], 0
jne 0x54904f
mov edx, 0x549f70
mov eax, dword [ebp - 0xc]
call fcn.0040c7a4
test eax, eax
jne 0x54904f
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov byte [ebp - 0x69], 1
jmp 0x549520
cmp byte [ebp - 0x69], 0
je 0x549520
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x5b
jne 0x549098
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
je 0x549084
mov eax, dword [ebp - 0x138]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x138]
cmp byte [eax + edx - 1], 0x5d
je 0x54952f
mov edx, dword [ebp - 0xc]
mov eax, 0x549ea0
call fcn.00405bc0
mov ebx, eax
test ebx, ebx
jle 0x549520
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
je 0x5490d2
mov eax, dword [ebp - 0x13c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x1298]
push eax
mov ecx, dword [ebp - 0x13c]
sub ecx, ebx
lea edx, [ebx + 1]
mov eax, dword [ebp - 0xc]
call fcn.00405adc
mov eax, dword [ebp - 0x1298]
lea edx, [ebp - 0x1294]
call fcn.0040c938
mov edx, dword [ebp - 0x1294]
lea eax, [ebp - 0xc]
call fcn.0040567c
cmp dword [ebp - 0xc], 0
je 0x549520
push 1
lea eax, [ebp - 0x129c]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0048f444
mov edx, dword [ebp - 0x129c]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 1
lea eax, [ebp - 0x12a4]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.0048f444
mov edx, dword [ebp - 0x12a4]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 1
lea eax, [ebp - 0x12a8]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0xc]
call fcn.0048f444
mov edx, dword [ebp - 0x12a8]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 1
lea eax, [ebp - 0x12ac]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0xc]
call fcn.0048f444
mov edx, dword [ebp - 0x12ac]
lea eax, [ebp - 0xc]
call fcn.0040567c
push 1
lea eax, [ebp - 0x12b0]
push eax
mov byte [ebp - 0x12a0], 0x20
mov byte [ebp - 0x129f], 9
lea ecx, [ebp - 0x12a0]
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0xc]
call fcn.0048f444
mov edx, dword [ebp - 0x12b0]
lea eax, [ebp - 0xc]
call fcn.0040567c
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040cf3c
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
sub eax, 4
jae 0x54926c
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
je 0x54925c
mov eax, dword [ebp - 0x140]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x20
sete byte [ebp - 0x141]
jmp 0x549273
mov byte [ebp - 0x141], 0
cmp byte [ebp - 0x141], 0
je 0x549289
cmp dword [ebp - 0x14], 0
setne byte [ebp - 0x142]
jmp 0x549290
mov byte [ebp - 0x142], 0
cmp byte [ebp - 0x142], 0
je 0x5492a6
cmp dword [ebp - 0x18], 0
setne byte [ebp - 0x143]
jmp 0x5492ad
mov byte [ebp - 0x143], 0
cmp byte [ebp - 0x143], 0
je 0x549520
cmp dword [ebp - 0x24], 0
je 0x549520
movzx eax, byte [ebp - 0x54]
mov byte [ebp - 0x55], al
mov eax, dword [ebp - 0x14]
mov edx, 0x549f84
call fcn.00405a0c
jne 0x5492ec
lea eax, [ebp - 0x14]
mov edx, dword [0x58b254]
mov edx, dword [edx]
call fcn.0040567c
jmp 0x549327
mov edx, dword [0x58b254]
mov edx, dword [edx]
lea eax, [ebp - 0x12b4]
mov ecx, dword [ebp - 0x14]
call fcn.004058fc
mov eax, dword [ebp - 0x12b4]
mov dword [ebp - 0x148], eax
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x148]
call fcn.004127d0
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x38]
call fcn.0040567c
lea eax, [ebp - 0x20]
mov edx, dword [0x58ac18]
add edx, 0x2bc
call fcn.00405848
mov edx, dword [ebp - 0x20]
mov eax, 0x549f90
call fcn.00405bc0
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jle 0x549366
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x4c]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x20]
call fcn.00405adc
cmp dword [ebp - 0x20], 0
jne 0x549379
lea eax, [ebp - 0x20]
mov edx, 0x549f9c
call fcn.0040567c
cmp byte [ebp - 0x55], 1
jne 0x5493f7
lea edx, [ebp - 0x12b8]
mov eax, dword [0x58b1e0]
mov eax, dword [eax]
call fcn.004775c8
mov edx, dword [ebp - 0x12b8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x58b254]
push dword [eax]
push dword [ebp - 0x20]
push 0x549f84
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00405978
mov eax, dword [ebp - 0x1c]
call fcn.0040d584
test al, al
jne 0x5493d2
mov eax, dword [ebp - 0x1c]
call fcn.0040d5a8
mov eax, dword [0x58b408]
mov byte [eax], 1
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
push 0x549fac
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00405978
jmp 0x5494a5
cmp byte [ebp - 0x55], 2
jne 0x549448
mov eax, dword [0x58b254]
push dword [eax]
push dword [ebp - 0x20]
push 0x549f84
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00405978
mov eax, dword [ebp - 0x1c]
call fcn.0040d584
test al, al
jne 0x54942d
mov eax, dword [ebp - 0x1c]
call fcn.0040d5a8
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
call fcn.004058b0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x5494a5
mov eax, dword [0x58b254]
push dword [eax]
push dword [ebp - 0x20]
push 0x549f84
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00405978
mov eax, dword [ebp - 0x1c]
call fcn.0040d584
test al, al
jne 0x549478
mov eax, dword [ebp - 0x1c]
call fcn.0040d5a8
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
call fcn.004058b0
lea eax, [ebp - 0x12bc]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.004058fc
mov edx, dword [ebp - 0x12bc]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov dl, 1
mov eax, dword [0x544ccc]
call fcn.005450f0
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
add eax, 8
mov edx, dword [ebp - 0x18]
call fcn.00405638
mov eax, dword [ebp - 0x5c]
add eax, 0xc
mov edx, dword [ebp - 0x14]
call fcn.00405638
mov eax, dword [ebp - 0x5c]
add eax, 0x10
mov edx, dword [ebp - 0x1c]
call fcn.00405638
mov eax, dword [ebp - 0x5c]
movzx edx, byte [ebp - 0x55]
mov byte [eax + 4], dl
mov eax, dword [ebp - 0x5c]
add eax, 0x18
mov edx, dword [ebp - 0x28]
call fcn.00405638
mov eax, dword [ebp - 0x5c]
add eax, 0x14
mov edx, dword [ebp - 0x24]
call fcn.00405638
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
dec edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov ecx, dword [ebp - 0x5c]
mov ebx, dword [eax]
call dword [ebx + 0x24]
inc dword [ebp - 0x44]
dec dword [ebp - 0xc0]
jne 0x548fe7
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x54957d
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x48]
call fcn.0041e2c4
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x549559
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [eax]
call dword [edx + 8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x549681
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
cmp byte [0x594770], 3
je 0x549681
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 4], 1
jne 0x549674
lea ecx, [ebp - 0x12c8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12c8]
lea ecx, [ebp - 0x12c4]
mov eax, dword [ebp - 0x3c]
call fcn.00546108
mov eax, dword [ebp - 0x12c4]
lea edx, [ebp - 0x12c0]
call fcn.0040c598
mov eax, dword [ebp - 0x12c0]
push eax
lea edx, [ebp - 0x12cc]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c598
mov edx, dword [ebp - 0x12cc]
pop eax
call fcn.0040c7a4
test eax, eax
jne 0x549658
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
jmp 0x549674
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e16c
dec dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xffffffff
jne 0x5495b4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
cmp dword [eax + 8], 0
jle 0x5496ed
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x5496dd
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x5496b9
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp 0x549809
xor eax, eax
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x30]
call fcn.004055e4
mov dl, 1
mov eax, dword [0x41c064]
call fcn.00404674
mov ebx, eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x5497af
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
cmp byte [ebp - 0x3d], 0
je 0x549783
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 4], 3
jne 0x5497a2
lea ecx, [ebp - 0x12d0]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x12d0]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov ecx, eax
mov eax, ebx
pop edx
mov esi, dword [eax]
call dword [esi + 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x48]
jmp 0x5497a2
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 4], 3
jne 0x5497a2
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
dec dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xffffffff
jne 0x549720
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x549802
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov edx, dword [ebp - 0x48]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x18]
push eax
lea ecx, [ebp - 0x12d4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x12d4]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
xor edx, edx
mov esi, dword [eax]
call dword [esi + 0x64]
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x5497c9
mov eax, ebx
call fcn.004046a4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebp - 0x6a], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x549c81
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
cmp byte [0x594770], 3
je 0x549c81
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
lea ecx, [ebp - 0x12e0]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12e0]
lea ecx, [ebp - 0x12dc]
mov eax, dword [ebp - 0x3c]
call fcn.00546108
mov eax, dword [ebp - 0x12dc]
lea edx, [ebp - 0x12d8]
call fcn.0040c598
mov eax, dword [ebp - 0x12d8]
push eax
lea edx, [ebp - 0x12e4]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c598
mov edx, dword [ebp - 0x12e4]
pop eax
call fcn.0040c7a4
test eax, eax
jne 0x549c27
mov eax, dword [ebp - 0x5c]
movzx eax, byte [eax + 4]
sub al, 1
jb 0x54992f
dec al
je 0x5498f0
dec al
je 0x5499df
jmp 0x549c72
lea ecx, [ebp - 0x12e8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12e8]
mov eax, dword [ebp - 0x5c]
add eax, 0x10
call fcn.00405638
mov eax, dword [ebp - 0x5c]
mov byte [eax + 4], 6
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e16c
jmp 0x549c72
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x12f4]
call fcn.004058fc
mov edx, dword [ebp - 0x12f4]
lea ecx, [ebp - 0x12f0]
mov eax, dword [ebp - 0x3c]
call fcn.00546108
mov eax, dword [ebp - 0x12f0]
lea edx, [ebp - 0x12ec]
call fcn.0040c598
mov eax, dword [ebp - 0x12ec]
push eax
lea edx, [ebp - 0x12f8]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c598
mov edx, dword [ebp - 0x12f8]
pop eax
call fcn.0040c7a4
test eax, eax
jne 0x5499a0
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
jmp 0x549c72
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e16c
lea ecx, [ebp - 0x12fc]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12fc]
mov eax, dword [ebp - 0x5c]
add eax, 0x10
call fcn.00405638
mov eax, dword [ebp - 0x5c]
mov byte [eax + 4], 4
jmp 0x549c72
cmp byte [ebp - 0x6a], 0
je 0x5499f2
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
jmp 0x549c72
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x1308]
call fcn.004058fc
mov edx, dword [ebp - 0x1308]
lea ecx, [ebp - 0x1304]
mov eax, dword [ebp - 0x3c]
call fcn.00546108
mov eax, dword [ebp - 0x1304]
lea edx, [ebp - 0x1300]
call fcn.0040c598
mov eax, dword [ebp - 0x1300]
push eax
lea edx, [ebp - 0x130c]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c598
mov edx, dword [ebp - 0x130c]
pop eax
call fcn.0040c7a4
test eax, eax
jne 0x549b0e
mov byte [ebp - 0x6a], 1
mov dl, 1
mov eax, dword [0x41c38c]
call fcn.00404674
mov dword [ebp - 0x70], eax
xor eax, eax
push ebp
push 0x549ac5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x1310]
call fcn.004058fc
mov edx, dword [ebp - 0x1310]
mov eax, dword [ebp - 0x70]
call fcn.00421988
push 0
push 0
mov eax, dword [ebp - 0x70]
call fcn.004211b8
mov eax, dword [0x58b48c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x70]
call fcn.00484390
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x549af9
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
mov eax, dword [ebp - 0x70]
call fcn.004046a4
jmp 0x549c72
lea ecx, [ebp - 0x1318]
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x3c]
call fcn.00546108
mov eax, dword [ebp - 0x1318]
lea edx, [ebp - 0x1314]
call fcn.0040c598
mov eax, dword [ebp - 0x1314]
push eax
lea edx, [ebp - 0x131c]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x18]
call fcn.0040c598
mov edx, dword [ebp - 0x131c]
pop eax
call fcn.0040c7a4
test eax, eax
jne 0x549c72
mov dl, 1
mov eax, dword [0x41c38c]
call fcn.00404674
mov dword [ebp - 0x70], eax
xor eax, eax
push ebp
push 0x549baf
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x70]
call fcn.00421988
push 0
push 0
mov eax, dword [ebp - 0x70]
call fcn.004211b8
mov eax, dword [0x58b48c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x70]
call fcn.00484390
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x549be3
lea ecx, [ebp - 0x1320]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1320]
mov eax, dword [ebp - 0x5c]
add eax, 0x10
call fcn.00405638
mov eax, dword [ebp - 0x5c]
mov byte [eax + 4], 5
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e16c
mov eax, dword [ebp - 0x70]
call fcn.004046a4
jmp 0x549c72
lea ecx, [ebp - 0x1324]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1324]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
call fcn.00405a74
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x14d], al
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x5c]
call fcn.0041e16c
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x549851
cmp byte [ebp - 0x6a], 0
jne 0x549cf3
mov eax, dword [0x58a980]
cmp dword [eax], 0
je 0x549cf3
mov eax, dword [0x58a980]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0x549ca8
cmp eax, 0
jbe 0x549cf3
jmp 0x549caa
jle 0x549cf3
mov byte [ebp - 0x6a], 1
mov dl, 1
mov eax, dword [0x41c38c]
call fcn.00404674
mov dword [ebp - 0x70], eax
mov eax, dword [0x58a980]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, dword [0x58a980]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, dword [ebp - 0x70]
call fcn.0042121c
mov eax, dword [0x58b48c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x70]
call fcn.00484390
mov eax, dword [ebp - 0x70]
call fcn.004046a4
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x44]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0xbc]
call fcn.004046a4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [0x594770], 3
jne 0x549dde
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x549d78
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [ebp - 0x48]
call fcn.0041e2c4
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x549d54
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x78]
mov edx, dword [eax]
call dword [edx + 8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x549dd3
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.004046a4
inc dword [ebp - 0x48]
dec dword [ebp - 0xc0]
jne 0x549daf
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax]
call dword [edx + 0x44]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x549dfe
mov eax, dword [0x58aaf8]
push eax
call sub.kernel32.dll_LeaveCriticalSection
ret