Function at 0x50429c
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x27
push 0
push 0
dec ecx
jne 0x5042a4
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x505726
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x14]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x2f8]
call fcn.00432798
mov eax, dword [ebp - 0x14]
mov edx, 0xffffff9d
call fcn.00409518
mov esi, eax
cmp esi, 0xffffff9d
jne 0x504308
mov eax, 0x505744
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x2f8]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
cmp esi, 1
jge 0x50434d
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x20], 1
mov byte [ebp - 0x1c], 0
lea edx, [ebp - 0x20]
xor ecx, ecx
mov eax, 0x505760
call fcn.0040a2e4
mov eax, dword [ebp - 0x18]
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x2f8]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
cmp esi, 0x32
jle 0x504392
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x20], 0x32
mov byte [ebp - 0x1c], 0
lea edx, [ebp - 0x20]
xor ecx, ecx
mov eax, 0x505774
call fcn.0040a2e4
mov eax, dword [ebp - 0x24]
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x2f8]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
lea edx, [ebp - 0x28]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x2fc]
call fcn.00432798
mov eax, dword [ebp - 0x28]
mov edx, 0xffffff9d
call fcn.00409518
mov ebx, eax
cmp ebx, 0xffffff9d
jne 0x5043dd
mov eax, 0x505744
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x2fc]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
mov eax, dword [0x55ca9c]
cmp byte [eax], 0
jne 0x504487
mov eax, dword [0x55c9dc]
cmp byte [eax], 0
jne 0x504487
cmp ebx, 2
jge 0x50443e
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x20], 2
mov byte [ebp - 0x1c], 0
lea edx, [ebp - 0x20]
xor ecx, ecx
mov eax, 0x505760
call fcn.0040a2e4
mov eax, dword [ebp - 0x2c]
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x2fc]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
cmp ebx, 0x32
jle 0x504514
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x20], 0x32
mov byte [ebp - 0x1c], 0
lea edx, [ebp - 0x20]
xor ecx, ecx
mov eax, 0x505774
call fcn.0040a2e4
mov eax, dword [ebp - 0x30]
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x2fc]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
cmp ebx, 2
jge 0x5044cc
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x20], 2
mov byte [ebp - 0x1c], 0
lea edx, [ebp - 0x20]
xor ecx, ecx
mov eax, 0x505788
call fcn.0040a2e4
mov eax, dword [ebp - 0x34]
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x2fc]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
cmp ebx, 0xbb8
jle 0x504514
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x20], 0xbb8
mov byte [ebp - 0x1c], 0
lea edx, [ebp - 0x20]
xor ecx, ecx
mov eax, 0x5057a0
call fcn.0040a2e4
mov eax, dword [ebp - 0x38]
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x2fc]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
lea edx, [ebp - 0x3c]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x348]
call fcn.00432798
mov eax, dword [ebp - 0x3c]
mov edx, 0xffffff9d
call fcn.00409518
mov edi, eax
cmp edi, 0xffffff9d
jne 0x50455f
mov eax, 0x505744
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x348]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
cmp edi, 1
jge 0x5045a4
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x20], 1
mov byte [ebp - 0x1c], 0
lea edx, [ebp - 0x20]
xor ecx, ecx
mov eax, 0x505760
call fcn.0040a2e4
mov eax, dword [ebp - 0x40]
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x348]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
cmp edi, 0x32
jle 0x5045e9
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x20], 0x32
mov byte [ebp - 0x1c], 0
lea edx, [ebp - 0x20]
xor ecx, ecx
mov eax, 0x505774
call fcn.0040a2e4
mov eax, dword [ebp - 0x44]
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x348]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
lea edx, [ebp - 0x48]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x3a0]
call fcn.00432798
mov eax, dword [ebp - 0x48]
mov edx, 0xffffff9d
call fcn.00409518
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffff9d
jne 0x504636
mov eax, 0x505744
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x3a0]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
cmp dword [ebp - 0xc], 1
jge 0x50467c
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x20], 1
mov byte [ebp - 0x1c], 0
lea edx, [ebp - 0x20]
xor ecx, ecx
mov eax, 0x505760
call fcn.0040a2e4
mov eax, dword [ebp - 0x4c]
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x3a0]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
cmp dword [ebp - 0xc], 0xa
jle 0x5046c2
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x20], 0xa
mov byte [ebp - 0x1c], 0
lea edx, [ebp - 0x20]
xor ecx, ecx
mov eax, 0x505774
call fcn.0040a2e4
mov eax, dword [ebp - 0x50]
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x3a0]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
lea edx, [ebp - 0x54]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x370]
call fcn.00432798
mov eax, dword [ebp - 0x54]
or edx, 0xffffffff
call fcn.00409518
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jle 0x504709
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 4]
call fcn.00409478
mov edx, dword [ebp - 0x58]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x370]
call fcn.004327c8
jmp 0x504723
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x370]
mov edx, 0x5057b8
call fcn.004327c8
xor eax, eax
mov dword [ebp - 4], eax
lea edx, [ebp - 0x5c]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x378]
call fcn.00432798
mov eax, dword [ebp - 0x5c]
or edx, 0xffffffff
call fcn.00409518
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jle 0x50476a
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 8]
call fcn.00409478
mov edx, dword [ebp - 0x60]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x378]
call fcn.004327c8
jmp 0x504784
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x378]
mov edx, 0x5057b8
call fcn.004327c8
xor eax, eax
mov dword [ebp - 8], eax
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x334]
mov edx, dword [eax]
call dword [edx + 0xb4]
test al, al
je 0x504870
lea edx, [ebp - 0x64]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x340]
call fcn.00432798
mov eax, dword [ebp - 0x64]
or edx, 0xffffffff
call fcn.00409518
cmp eax, 0xffffffff
jne 0x5047e6
mov eax, 0x5057c8
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x340]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
cmp eax, 0x3e8
jle 0x50482d
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x20], 0x3e8
mov byte [ebp - 0x1c], 0
lea edx, [ebp - 0x20]
xor ecx, ecx
mov eax, 0x505774
call fcn.0040a2e4
mov eax, dword [ebp - 0x68]
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x340]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
dec eax
jge 0x504870
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x20], 1
mov byte [ebp - 0x1c], 0
lea edx, [ebp - 0x20]
xor ecx, ecx
mov eax, 0x505760
call fcn.0040a2e4
mov eax, dword [ebp - 0x6c]
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x340]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x308]
mov edx, dword [eax]
call dword [edx + 0xb4]
test al, al
je 0x504a44
lea edx, [ebp - 0x74]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x310]
call fcn.00432798
mov eax, dword [ebp - 0x74]
lea edx, [ebp - 0x70]
call fcn.004092f8
mov edx, dword [ebp - 0x70]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x310]
call fcn.004327c8
lea edx, [ebp - 0x78]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x310]
call fcn.00432798
mov eax, dword [ebp - 0x78]
call fcn.00403fcc
test eax, eax
je 0x5048fb
lea edx, [ebp - 0x7c]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x310]
call fcn.00432798
mov eax, dword [ebp - 0x7c]
call fcn.00403fcc
cmp eax, 0x64
jle 0x50491f
mov eax, 0x5057e4
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x310]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
lea edx, [ebp - 0x80]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x318]
call fcn.00432798
mov eax, dword [ebp - 0x80]
or edx, 0xffffffff
call fcn.00409518
test eax, eax
jle 0x504948
cmp eax, 0x10000
jl 0x50496c
mov eax, 0x5057fc
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x318]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x31c]
mov edx, dword [eax]
call dword [edx + 0xb4]
test al, al
je 0x504b26
lea edx, [ebp - 0x84]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x324]
call fcn.00432798
mov eax, dword [ebp - 0x84]
call fcn.00403fcc
test eax, eax
je 0x5049d2
lea edx, [ebp - 0x88]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x324]
call fcn.00432798
mov eax, dword [ebp - 0x88]
call fcn.00403fcc
cmp eax, 0x64
jle 0x5049f6
mov eax, 0x505814
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x324]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
lea edx, [ebp - 0x8c]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x32c]
call fcn.00432798
mov eax, dword [ebp - 0x8c]
call fcn.00403fcc
cmp eax, 0x64
jle 0x504b26
mov eax, 0x505830
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x32c]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x350]
mov edx, dword [eax]
call dword [edx + 0xb4]
test al, al
je 0x504b26
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x380]
mov edx, dword [eax]
call dword [edx + 0xb4]
test al, al
jne 0x504b26
lea edx, [ebp - 0x94]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x358]
call fcn.00432798
mov eax, dword [ebp - 0x94]
lea edx, [ebp - 0x90]
call fcn.004092f8
mov edx, dword [ebp - 0x90]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x358]
call fcn.004327c8
lea edx, [ebp - 0x98]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x358]
call fcn.00432798
mov eax, dword [ebp - 0x98]
call fcn.00403fcc
test eax, eax
je 0x504b02
lea edx, [ebp - 0x9c]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x358]
call fcn.00432798
mov eax, dword [ebp - 0x9c]
call fcn.00403fcc
cmp eax, 0x10
jl 0x504b26
mov eax, 0x50584c
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x358]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
lea edx, [ebp - 0xa4]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
call fcn.00432798
mov eax, dword [ebp - 0xa4]
lea edx, [ebp - 0xa0]
call fcn.004092f8
mov edx, dword [ebp - 0xa0]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
call fcn.004327c8
lea edx, [ebp - 0xa8]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
call fcn.00432798
mov eax, dword [ebp - 0xa8]
call fcn.00403fcc
test eax, eax
jne 0x504bc4
mov eax, 0x505868
call fcn.00456e40
mov edx, dword [0x55ccd0]
mov edx, dword [edx]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
call fcn.004327c8
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
lea eax, [ebp - 0xac]
push eax
lea edx, [ebp - 0xb0]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
call fcn.00432798
mov eax, dword [ebp - 0xb0]
call fcn.00403fcc
push eax
lea edx, [ebp - 0xb4]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
call fcn.00432798
mov eax, dword [ebp - 0xb4]
mov ecx, 1
pop edx
call fcn.004041d4
mov eax, dword [ebp - 0xac]
mov edx, 0x505884
call fcn.004040dc
je 0x504c62
lea edx, [ebp - 0xb8]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
call fcn.00432798
lea eax, [ebp - 0xb8]
mov edx, 0x505884
call fcn.00403fd4
mov edx, dword [ebp - 0xb8]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
call fcn.004327c8
lea edx, [ebp - 0xbc]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
call fcn.00432798
mov eax, dword [ebp - 0xbc]
call fcn.004f70c0
test al, al
jne 0x504cd0
lea edx, [ebp - 0xc0]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
call fcn.00432798
mov eax, dword [ebp - 0xc0]
call fcn.004cfc44
test al, al
jne 0x504cd0
mov eax, 0x505890
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
lea edx, [ebp - 0xc4]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
call fcn.00432798
mov eax, dword [ebp - 0xc4]
call fcn.004f726c
cmp eax, 0x400
jge 0x504d67
push 0
push 0x5058b0
lea edx, [ebp - 0xcc]
mov eax, 0x400
call fcn.00409478
push dword [ebp - 0xcc]
push 0x5058d0
push 0x5058e0
push 0x505918
lea eax, [ebp - 0xc8]
mov edx, 5
call fcn.0040408c
mov eax, dword [ebp - 0xc8]
mov cx, word [0x505924]
xor edx, edx
call fcn.00456d48
cmp eax, 7
jne 0x504d67
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x364]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x388]
mov edx, dword [eax]
call dword [edx + 0xb4]
test al, al
je 0x504e15
lea edx, [ebp - 0xd0]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x38c]
call fcn.00432798
mov eax, dword [ebp - 0xd0]
call fcn.00403fcc
test eax, eax
jg 0x504dcb
mov eax, 0x505930
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x38c]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
lea edx, [ebp - 0xd4]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x38c]
call fcn.00432798
mov eax, dword [ebp - 0xd4]
call fcn.00403fcc
cmp eax, 0x1e
jle 0x504e15
mov eax, 0x505950
call fcn.00456e40
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x38c]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ebx, ebx
jmp 0x5055c0
mov eax, dword [0x55cb80]
mov dword [eax], esi
lea edx, [ebp - 0xd8]
mov eax, dword [0x55cb80]
mov eax, dword [eax]
call fcn.00409478
mov edx, dword [ebp - 0xd8]
mov eax, 0x50596c
call fcn.004f6bc0
mov eax, dword [0x55ccb4]
mov dword [eax], ebx
lea edx, [ebp - 0xdc]
mov eax, dword [0x55ccb4]
mov eax, dword [eax]
call fcn.00409478
mov edx, dword [ebp - 0xdc]
mov eax, 0x505980
call fcn.004f6bc0
mov eax, dword [0x55cfa0]
mov dword [eax], edi
lea edx, [ebp - 0xe0]
mov eax, dword [0x55cfa0]
mov eax, dword [eax]
call fcn.00409478
mov edx, dword [ebp - 0xe0]
mov eax, 0x505994
call fcn.004f6bc0
mov eax, dword [0x55cb18]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
lea edx, [ebp - 0xe4]
mov eax, dword [0x55cb18]
mov eax, dword [eax]
call fcn.00409478
mov edx, dword [ebp - 0xe4]
mov eax, 0x5059b0
call fcn.004f6bc0
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x334]
mov edx, dword [eax]
call dword [edx + 0xb4]
mov edx, dword [0x55c9b4]
mov byte [edx], al
mov eax, dword [0x55cedc]
mov edx, dword [ebp - 4]
mov dword [eax], edx
lea edx, [ebp - 0xe8]
mov eax, dword [0x55cedc]
mov eax, dword [eax]
call fcn.00409478
mov edx, dword [ebp - 0xe8]
mov eax, 0x5059d0
call fcn.004f6bc0
mov eax, dword [0x55cedc]
mov eax, dword [eax]
mov edx, dword [0x55ce2c]
mov dword [edx], eax
lea edx, [ebp - 0xec]
mov eax, dword [0x55ce2c]
mov eax, dword [eax]
call fcn.00409478
mov edx, dword [ebp - 0xec]
mov eax, 0x5059e4
call fcn.004f6bc0
mov eax, dword [0x55cc24]
mov edx, dword [ebp - 8]
mov dword [eax], edx
lea edx, [ebp - 0xf0]
mov eax, dword [0x55cc24]
mov eax, dword [eax]
call fcn.00409478
mov edx, dword [ebp - 0xf0]
mov eax, 0x5059f8
call fcn.004f6bc0
mov eax, dword [0x55c9b4]
cmp byte [eax], 0
je 0x504fcf
mov edx, 0x505a10
mov eax, 0x505a1c
call fcn.004f6bc0
lea edx, [ebp - 0xf4]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x340]
call fcn.00432798
mov eax, dword [ebp - 0xf4]
mov edx, 8
call fcn.00409518
mov edx, dword [0x55d08c]
mov dword [edx], eax
lea edx, [ebp - 0xf8]
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x340]
call fcn.00432798
mov edx, dword [ebp - 0xf8]
mov eax, 0x505a30
call fcn.004f6bc0
jmp 0x504fde
mov edx, 0x505a48
mov eax, 0x505a1c
call fcn.004f6bc0
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x338]
mov edx, dword [eax]
call dword [edx + 0xb4]
mov edx, dword [0x55cd68]
mov byte [edx], al
mov eax, dword [0x55cd68]
cmp byte [eax], 0
je 0x505014
mov edx, 0x505a10
mov eax, 0x505a54
call fcn.004f6bc0
jmp 0x505023
mov edx, 0x505a48
mov eax, 0x505a54
call fcn.004f6bc0
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x34c]
mov edx, dword [eax]
call dword [edx + 0xb4]
mov edx, dword [0x55cacc]
mov byte [edx], al
mov eax, dword [0x55cacc]
cmp byte [eax], 0
je 0x505059
mov edx, 0x505a10
mov eax, 0x505a68
call fcn.004f6bc0
jmp 0x505068
mov edx, 0x505a48
mov eax, 0x505a68
call fcn.004f6bc0
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x300]
mov edx, dword [eax]
call dword [edx + 0xb4]
test al, al
je 0x5050a9
mov edx, dword [0x55c9d8]
mov edx, dword [edx]
lea eax, [ebp - 0xfc]
mov ecx, 0x505a7c
call fcn.00404018
mov eax, dword [ebp - 0xfc]
mov edx, 0x505a10
call fcn.004f6bc0
jmp 0x5050d1
mov edx, dword [0x55c9d8]
mov edx, dword [edx]
lea eax, [ebp - 0x100]
mov ecx, 0x505a7c
call fcn.00404018
mov eax, dword [ebp - 0x100]
mov edx, 0x505a48
call fcn.004f6bc0
mov dl, 1
mov eax, dword [0x474574]
call fcn.004746e0
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x505177
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000002
mov eax, dword [ebp - 0x10]
call fcn.004747bc
mov cl, 1
mov edx, 0x505a94
mov eax, dword [ebp - 0x10]
call fcn.00474900
test al, al
je 0x505159
mov eax, dword [0x55f634]
mov eax, dword [eax + 0x330]
mov edx, dword [eax]
call dword [edx + 0xb4]
test al, al
je 0x50514c
lea edx, [ebp - 0x104]
mov eax, dword [0x55cde4]
mov eax, dword [eax]
call fcn.004510b0
mov ecx, dword [ebp - 0x104]
mov edx, 0x505acc
mov eax, dword [ebp - 0x10]
call fcn.00474d64
jmp 0x505159
mov edx, 0x505acc
mov eax, dword [ebp - 0x10]
call fcn.00474b9c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x50517e
mov eax, dword [ebp - 0x10]
call fcn.0047478c
mov eax, dword [ebp - 0x10]
call fcn.00402ff0
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x505730
lea eax, [ebp - 0x13c]
call fcn.00403d3c
lea eax, [ebp - 0x138]
mov edx, 6
call fcn.00403d60
lea eax, [ebp - 0x120]
call fcn.00403d3c
lea eax, [ebp - 0x11c]
mov edx, 6
call fcn.00403d60
lea eax, [ebp - 0x104]
mov edx, 3
call fcn.00403d60
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.00403d60
lea eax, [ebp - 0xf0]
mov edx, 7
call fcn.00403d60
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.00403d60
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.00403d60
lea eax, [ebp - 0xc4]
mov edx, 9
call fcn.00403d60
lea eax, [ebp - 0xa0]
call fcn.00403d3c
lea eax, [ebp - 0x9c]
mov edx, 3
call fcn.00403d60
lea eax, [ebp - 0x90]
call fcn.00403d3c
lea eax, [ebp - 0x8c]
mov edx, 7
call fcn.00403d60
lea eax, [ebp - 0x70]
mov edx, 3
call fcn.00403d60
lea eax, [ebp - 0x64]
call fcn.00403d3c
lea eax, [ebp - 0x60]
call fcn.00403d3c
lea eax, [ebp - 0x5c]
call fcn.00403d3c
lea eax, [ebp - 0x58]
call fcn.00403d3c
lea eax, [ebp - 0x54]
call fcn.00403d3c
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.00403d60
lea eax, [ebp - 0x48]
call fcn.00403d3c
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.00403d60
lea eax, [ebp - 0x3c]
call fcn.00403d3c
lea eax, [ebp - 0x38]
mov edx, 4
call fcn.00403d60
lea eax, [ebp - 0x28]
call fcn.00403d3c
lea eax, [ebp - 0x24]
call fcn.00403d3c
lea eax, [ebp - 0x18]
call fcn.00403d3c
lea eax, [ebp - 0x14]
call fcn.00403d3c
ret