Function at 0x5e5e0a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x24c
mov ecx, dword [esp + 0x264]
mov ebp, dword [esp + 0x260]
mov eax, dword [ebp + 0x30]
mov ebx, dword [ecx + 4]
test eax, eax
mov edi, 0x7084e0
cmovne edi, eax
mov dword [esp + 0x184], 0
mov dword [esp + 0x180], 0
mov dword [esp + 0x17c], 0
mov dword [esp + 0x178], 0
sub esp, 4
lea eax, [esp + 0x50]
push 0x11c
push 0
push eax
call fcn.004fa3a0
add esp, 0x10
movzx eax, word [ebp + 0x22]
lea ecx, [ebp + eax*2]
movzx esi, word [ebp + 0x26]
movzx edx, word [ebp + 0x24]
mov eax, edx
mov dword [esp + 0x18], esi
imul eax, esi
mov dword [esp + 0x10], ecx
lea esi, [ecx + eax*2]
mov dword [esp + 0x188], esi
mov dword [esp + 0x50], esi
mov dword [esp + 0x58], 0
lea eax, [edi + 0x100]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edi
mov eax, dword [esp + 0x268]
mov dword [esp + 0xa8], eax
xor eax, eax
mov dword [esp + 0x3c], ebx
cmp dword [ebx + 0x28], 0
sete al
mov dword [esp + 0xac], eax
mov dword [esp + 0xc8], 0
mov eax, dword [ebp + 8]
mov ebx, eax
shr ebx, 0x14
mov ecx, ebx
and cl, 7
cmp cl, 5
ja case.default.0x5e4cc8
and ebx, 7
jmp dword [ebx*4 + 0x5f1e34]
mov dword [esp + 0xd4], 0xa
xor ebx, ebx
jmp 0x5e4d3c
mov dword [esp + 0xd4], 0xd
xor ebx, ebx
mov dword [esp + 0x24], 0xd
jmp 0x5e4d44
mov dword [esp + 0xd4], 0xd0a
xor ebx, ebx
jmp 0x5e4d3c
mov dword [esp + 0xd4], 0xd0a
mov dword [esp + 0xc8], 1
mov ebx, 1
jmp 0x5e4d3c
mov dword [esp + 0xd4], 0xd0a
mov dword [esp + 0xc8], 2
mov ebx, 2
mov dword [esp + 0x24], 0xa
mov dword [esp + 0xcc], 0x7fffffff
mov dword [esp + 0xd0], 0
mov ebp, eax
shr ebp, 0x17
and ebp, 1
lea ecx, [ebp + 1]
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], 0x7fffffff
mov dword [esp + 0xe0], 0
mov ecx, eax
shr ecx, 5
and ecx, 1
mov dword [esp + 0xe4], ecx
add edi, 0x340
mov dword [esp + 0xe8], edi
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xec], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xf4], edx
mov ecx, eax
shr ecx, 0x19
and ecx, 1
mov dword [esp + 0x158], ecx
mov ecx, eax
shr ecx, 0xb
and ecx, 1
mov dword [esp + 0x15c], ecx
shr eax, 0x1d
and eax, 1
mov dword [esp + 0x160], eax
test ecx, ecx
je 0x5e4e45
mov eax, ebx
and al, 3
cmp al, 1
je 0x5e4e03
cmp al, 2
mov ecx, dword [esp + 0x24]
mov eax, ecx
jne 0x5e4e0c
mov eax, 0xd
jmp 0x5e4e0c
mov eax, 0x2029
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xcc], eax
test ebx, ebx
mov eax, 0xa
cmove eax, ecx
mov dword [esp + 0xd0], eax
test ebp, ebp
mov eax, 0x2029
mov ecx, 0xd
cmove ecx, eax
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], 0xa
mov ebp, esi
nop word [eax + eax]
mov eax, ebp
movzx ecx, word [eax + 2]
movzx edx, word [eax + ecx*2]
lea ebp, [eax + ecx*2]
cmp edx, 0x77
je 0x5e4e50
mov dword [esp + 0x6c], 0x14
mov edi, dword [esp + 0x260]
movzx eax, word [edi + 0x1e]
inc eax
sub esp, 0xc
push eax
call dword [0x6f4468]
add esp, 0x10
mov dword [esp + 0x5c], eax
test eax, eax
je case.default.0x5e4cc8
add ebp, 4
movzx ecx, word [edi + 0x1e]
inc ecx
sub esp, 4
push ecx
push 1
push eax
call fcn.004fa3a0
add esp, 0x10
cmp esi, ebp
mov dword [esp + 0x24], ebp
jae 0x5e5113
lea ebx, [esi - 2]
lea edi, [esp + 0x4c]
nop dword [eax]
movzx eax, word [esi]
add eax, 0xfffffffd
movzx eax, ax
cmp eax, 0x98
ja case.0x5e4ed4.1
jmp dword [eax*4 + 0x5f1e4c]
mov eax, dword [esp + 0x5c]
movzx ecx, word [esi + 2]
mov byte [eax + ecx], 0
add esi, 4
cmp esi, ebp
jb 0x5e4ec0
jmp 0x5e5113
movzx eax, word [esi + 4]
test eax, eax
je 0x5e4f3b
movzx ecx, word [esi + 2]
imul ecx, dword [esp + 0xf4]
add ecx, ecx
add ecx, dword [esp + 0xec]
inc eax
nop word cs:[eax + eax]
mov edx, dword [esp + 0x5c]
movzx ebp, word [ecx]
mov byte [edx + ebp], 0
mov edx, dword [esp + 0xf4]
lea ecx, [ecx + edx*2]
dec eax
cmp eax, 1
jg 0x5e4f20
add esi, 6
mov ebp, dword [esp + 0x24]
cmp esi, ebp
jb 0x5e4ec0
jmp 0x5e5113
mov eax, dword [esp + 0x5c]
movzx ecx, word [esi + 4]
mov byte [eax + ecx], 0
add esi, 6
cmp esi, ebp
jb 0x5e4ec0
jmp 0x5e5113
movzx eax, word [esi + 4]
cmp eax, 0x76
je 0x5e5c14
add esi, 4
cmp esi, ebp
jb 0x5e4ec0
jmp 0x5e5113
mov dword [esp + 0xb0], 1
mov dword [esp + 0xac], 1
add esi, 2
cmp esi, ebp
jb 0x5e4ec0
jmp 0x5e5113
mov ecx, edi
mov edx, esi
call fcn.005fd420
mov esi, eax
test esi, esi
je 0x5e5c14
nop word cs:[eax + eax]
cmp esi, ebp
jb 0x5e4ec0
jmp 0x5e5113
cmp dword [esp + 0x78], 0
jne 0x5e4ff3
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x78], eax
add eax, 4
mov dword [esp + 0x6c], eax
add esi, 4
cmp esi, ebp
jb 0x5e4ec0
jmp 0x5e5113
cmp dword [esp + 0x90], 0
jne 0x5e501f
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x90], eax
add eax, 4
mov dword [esp + 0x6c], eax
add esi, 8
cmp esi, ebp
jb 0x5e4ec0
jmp 0x5e5113
mov eax, esi
nop word cs:[eax + eax]
movzx ecx, word [eax + 2]
movzx edx, word [eax + ecx*2]
lea eax, [eax + ecx*2]
cmp edx, 0x77
je 0x5e5040
add eax, 4
cmp eax, ebx
cmova ebx, eax
add esi, 4
cmp esi, ebp
jb 0x5e4ec0
jmp 0x5e5113
cmp esi, ebx
jae 0x5e5077
mov dword [esp + 0xbc], 1
add esi, 2
cmp esi, ebp
jb 0x5e4ec0
jmp 0x5e5113
mov dword [esp + 0x8c], 1
mov dword [esp + 0xb4], 1
cmp esi, ebx
jae 0x5e5103
mov dword [esp + 0xbc], 1
jmp 0x5e5103
mov dword [esp + 0xb8], 1
mov dword [esp + 0x8c], 1
add esi, 2
cmp esi, ebp
jb 0x5e4ec0
jmp 0x5e5113
mov dword [esp + 0xb8], 1
mov dword [esp + 0x8c], 1
cmp dword [esp + 0x88], 0
jne 0x5e5103
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x88], eax
add eax, 4
mov dword [esp + 0x6c], eax
movzx eax, word [esi + 2]
lea esi, [esi + eax*2 + 6]
cmp esi, ebp
jb 0x5e4ec0
mov edx, dword [esp + 0x268]
test edx, edx
je 0x5e58b8
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x7c], eax
lea ecx, [eax + 4]
mov dword [esp + 0x6c], ecx
mov bl, 1
cmp edx, 1
mov esi, dword [esp + 0x260]
jne 0x5e515a
mov dword [esp + 0x80], ecx
add eax, 0xc
mov dword [esp + 0x6c], eax
mov bl, 1
test byte [esi + 0xa], 4
je 0x5e5164
jmp 0x5e58e6
test byte [esi + 0xa], 4
jne 0x5e58e6
cmp dword [esp + 0x8c], 0
je 0x5e5180
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x8c], eax
add eax, 4
mov dword [esp + 0x6c], eax
mov dword [esp + 0x40], ebx
cmp dword [esp + 0xb0], 0
je 0x5e519d
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x70], eax
add eax, 4
mov dword [esp + 0x6c], eax
mov ebx, dword [esp + 0x6c]
test bl, 4
jne 0x5e588f
cmp dword [esp + 0x70], 0
je 0x5e58a1
cmp dword [esp + 0x90], 0
je 0x5e51d6
movzx eax, word [esi + 0x1e]
inc eax
sub esp, 4
push eax
push 0
push dword [esp + 0x68]
call fcn.004fa3a0
add esp, 0x10
movzx eax, word [esi + 0x1e]
lea esi, [ebx + eax*8 + 8]
mov dword [esp + 0x68], esi
mov ebp, dword [esp + 0x50]
mov ebx, dword [esp + 0x24]
mov edi, ebx
sub edi, ebp
mov ecx, edi
sar ecx, 1
cmp dword [esp + 0xb8], 1
mov eax, 5
sbb eax, 0
mov dword [esp + 0x168], ecx
imul eax, ecx
sub esp, 0xc
push eax
call dword [0x6f4468]
add esp, 0x10
mov dword [esp + 0x54], eax
test eax, eax
je 0x5e590b
add edi, edi
sub esp, 4
push edi
push 0
mov dword [esp + 0x20], eax
push eax
call fcn.004fa3a0
add esp, 0x10
mov eax, dword [esp + 0x260]
movzx eax, word [eax + 0x1e]
lea ecx, [esi + eax*4 + 4]
mov dword [esp + 0x16c], ecx
cmp ebx, ebp
mov dword [esp + 0xc], ebp
jbe 0x5e584f
cmp ecx, 0x10000
jg 0x5e584f
mov eax, 1
xor esi, esi
mov ebp, dword [esp + 0xc]
nop word cs:[eax + eax]
mov dword [esp + 0x18], ecx
test eax, eax
mov dx, word [ebp]
mov dword [esp + 0x10], ebp
je 0x5e55c0
lea eax, [edx - 0x81]
movzx ecx, ax
cmp ecx, 6
ja 0x5e55c0
mov ecx, 0x57
bt ecx, eax
jae 0x5e55c0
mov ebx, ebp
nop word cs:[eax + eax]
movzx ecx, word [ebx + 2]
movzx eax, word [ebx + ecx*2]
lea ebx, [ebx + ecx*2]
cmp eax, 0x77
je 0x5e52c0
movzx eax, ax
cmp eax, 0x78
jne 0x5e55c0
add ebx, 4
mov ecx, ebx
sub ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
cmp dword [eax + ecx*2 - 4], 0
je 0x5e5318
mov eax, dword [esp + 0x10]
cmp eax, esi
jb 0x5e55c0
mov esi, eax
nop
movzx eax, word [esi + 2]
movzx ecx, word [esi + eax*2]
lea esi, [esi + eax*2]
cmp ecx, 0x77
je 0x5e5300
add esi, 4
jmp 0x5e55c0
mov dword [esp + 0x44], ecx
mov eax, ebx
sub eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
sar eax, 1
mov dword [esp + 0x20], eax
mov cx, word [ebx]
mov eax, 1
cmp cx, dx
mov ebp, ebx
mov dword [esp + 0x2c], edx
jne 0x5e53d2
mov eax, 1
mov edi, ebx
mov ebp, edi
nop dword [eax]
mov dword [esp + 0x1c], eax
nop word cs:[eax + eax]
movzx eax, word [ebp + 2]
movzx ecx, word [ebp + eax*2]
lea ebp, [ebp + eax*2]
cmp ecx, 0x77
je 0x5e5360
add ebp, 4
mov eax, ebp
sub eax, edi
sar eax, 1
cmp eax, dword [esp + 0x20]
jne 0x5e53b8
sub esp, 4
push dword [esp + 0x38]
push edi
push dword [esp + 0x1c]
call fcn.004fa3b0
add esp, 0x10
test eax, eax
jne 0x5e53bc
mov eax, dword [esp + 0x1c]
inc eax
mov cx, word [ebp]
mov edx, dword [esp + 0x2c]
cmp cx, dx
mov edi, ebp
je 0x5e5350
cmp eax, 2
je 0x5e55c0
jmp 0x5e53d2
mov ebp, edi
jmp 0x5e53c2
mov ebp, edi
mov edx, dword [esp + 0x2c]
mov cx, dx
mov eax, dword [esp + 0x1c]
cmp eax, 2
je 0x5e55c0
mov dword [esp + 0x1c], eax
mov eax, ecx
and eax, 0xfffe
cmp eax, 0x92
jne 0x5e558d
mov eax, dword [esp + 0x20]
lea eax, [eax + 3]
mov dword [esp + 0x28], eax
mov dword [esp + 0x48], 0
mov edi, ebp
mov dword [esp + 0x38], ecx
nop word cs:[eax + eax]
movzx eax, word [edi + 2]
cmp eax, 0x83
jne 0x5e548b
cmp word [edi + 6], dx
jne 0x5e557e
mov dword [esp + 0x30], edi
lea eax, [edi + 6]
mov edi, eax
nop
movzx ecx, word [edi + 2]
movzx edx, word [edi + ecx*2]
lea edi, [edi + ecx*2]
cmp edx, 0x77
je 0x5e5430
add edi, 4
mov ecx, edi
sub ecx, dword [esp + 0x30]
sar ecx, 1
cmp ecx, dword [esp + 0x28]
jne 0x5e547f
sub esp, 4
push dword [esp + 0x38]
push eax
push dword [esp + 0x1c]
call fcn.004fa3b0
add esp, 0x10
test eax, eax
jne 0x5e547f
inc dword [esp + 0x48]
mov ecx, dword [esp + 0x38]
cmp word [edi], cx
mov edx, dword [esp + 0x2c]
je 0x5e5410
jmp 0x5e558d
mov ax, 0x83
mov edx, dword [esp + 0x2c]
mov edi, dword [esp + 0x30]
cmp dword [esp + 0x48], 0
jle 0x5e558d
cmp ax, dx
jne 0x5e558d
mov eax, edi
lea edi, [edi + 2]
mov dword [esp + 0x30], edi
nop dword [eax + eax]
movzx ecx, word [edi + 2]
movzx edx, word [edi + ecx*2]
lea edi, [edi + ecx*2]
cmp edx, 0x77
je 0x5e54b0
add edi, 4
mov ecx, edi
sub ecx, eax
sar ecx, 1
mov edx, dword [esp + 0x20]
inc edx
cmp ecx, edx
jne 0x5e5574
sub esp, 4
push dword [esp + 0x38]
push dword [esp + 0x38]
push dword [esp + 0x1c]
call fcn.004fa3b0
add esp, 0x10
test eax, eax
jne 0x5e5574
xor eax, eax
mov edx, dword [esp + 0x48]
nop dword [eax + eax]
movzx ecx, word [edi]
cmp ecx, 0x78
jne 0x5e5510
inc eax
add edi, 4
cmp eax, edx
jl 0x5e5500
cmp eax, edx
jne 0x5e5574
sub edi, ebp
sar edi, 1
mov eax, ebp
sub eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov dword [ecx + eax*2 - 4], edi
movzx ecx, word [esp + 0x38]
mov edi, edx
xor edx, edx
cmp ecx, 0x92
sete dl
mov ecx, 0x28
sub ecx, edx
mov edx, dword [esp + 0x14]
mov dword [edx + eax*2], ecx
add edi, 2
mov dword [edx + eax*2 + 4], edi
mov eax, dword [esp + 0x1c]
cmp eax, 1
mov edx, dword [esp + 0x2c]
je 0x5e52f0
dec eax
mov dword [esp + 0x1c], eax
movzx eax, word [ebp - 2]
mov ecx, 0xfffffffe
sub ecx, eax
lea ebp, [ebp + ecx*2]
jmp 0x5e558d
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x2c]
jmp 0x5e5591
mov ax, 0x83
cmp dword [esp + 0x48], 0
jg 0x5e5496
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
cmp edi, 3
jl 0x5e55c0
mov ecx, dword [esp + 0x44]
sar ecx, 1
sub ebp, ebx
sar ebp, 1
mov dword [eax + ecx*4 - 4], ebp
mov dword [eax + ecx*4], 0x29
mov dword [eax + ecx*4 + 4], edi
jmp 0x5e52f0
add edx, 0xffffffdf
movzx ebp, dx
cmp ebp, 0x73
ja case.0x5e55e5.8
mov ecx, 0xfffffffe
mov edi, 4
mov ebx, 1
xor eax, eax
mov edx, 2
jmp dword [ebp*4 + 0x5f20b0]
mov eax, dword [esp + 0x10]
sub eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov dword [edx + eax*2], ecx
add ecx, 4
mov dword [esp + 0x18], ecx
mov edx, 2
jmp case.0x5e55e5.98
mov ecx, 0xfffffffe
jmp 0x5e561c
mov ecx, 0xfffffffd
mov edi, 8
mov ebp, dword [esp + 0x10]
cmp ebp, esi
jb 0x5e5640
mov eax, ebp
sub eax, dword [esp + 0xc]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov dword [ebx + eax*2], edx
add edx, edi
mov dword [esp + 0x18], edx
mov eax, 1
test ecx, ecx
js 0x5e5660
mov ebx, ecx
mov ebp, dword [esp + 0x10]
lea ebp, [ebp + ebx*2]
mov edi, dword [esp + 0x24]
jmp 0x5e573a
add ecx, ecx
sub ebp, ecx
cmp dword [esp + 0x15c], 0
je 0x5e5682
movzx eax, word [ebp - 2]
and eax, 0xfc00
lea ecx, [ebp + 2]
cmp eax, 0xd800
cmove ebp, ecx
mov eax, 1
mov edi, dword [esp + 0x24]
jmp 0x5e573a
mov ecx, 1
mov edi, 4
jmp case.0x5e55e5.1
mov eax, dword [esp + 0x10]
movzx eax, word [eax + 2]
mov ecx, 1
cmp eax, 0x11
je 0x5e56bf
mov edi, 8
movzx eax, ax
cmp eax, 0x16
jne case.0x5e55e5.1
mov eax, 1
mov ebx, 1
jmp case.0x5e55e5.113
mov ebx, 0x11
mov eax, 1
jmp case.0x5e55e5.113
mov eax, dword [esp + 0x10]
sub eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov dword [edx + eax*2], ecx
add ecx, 4
mov dword [esp + 0x18], ecx
mov edx, 3
mov ebp, dword [esp + 0x10]
cmp ebp, esi
mov edi, dword [esp + 0x24]
jb 0x5e5731
mov esi, ebp
nop word [eax + eax]
movzx ecx, word [esi + 2]
movzx eax, word [esi + ecx*2]
lea esi, [esi + ecx*2]
cmp eax, 0x77
je 0x5e5710
add esi, 4
movzx eax, ax
cmp eax, 0x78
mov eax, 0
cmove esi, eax
lea ebp, [ebp + edx*2]
mov eax, 1
mov ecx, dword [esp + 0x18]
cmp ecx, 0x10000
jg 0x5e584f
cmp ebp, edi
jb 0x5e5280
jmp 0x5e584f
lea ecx, [esp + 0x4c]
mov edx, dword [esp + 0x10]
call fcn.005fd420
mov ebp, eax
jmp 0x5e5682
mov eax, dword [esp + 0x10]
movzx edx, word [eax + 4]
mov eax, 1
mov ecx, 2
cmp edx, 0x11
je 0x5e5793
mov edi, 8
movzx edx, dx
cmp edx, 0x16
jne case.0x5e55e5.1
mov ebx, 2
jmp case.0x5e55e5.113
mov ecx, 2
jmp 0x5e561c
mov eax, dword [esp + 0x10]
movzx ebx, word [eax + 2]
test ebx, ebx
mov eax, 1
jne case.0x5e55e5.113
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x10]
cmp ecx, 0x10000
jle 0x5e574a
jmp 0x5e584f
mov ebp, dword [esp + 0x10]
lea eax, [ebp + 2]
mov edx, dword [esp + 0xc]
sub eax, edx
mov edi, dword [esp + 0x14]
cmp dword [edi + eax*2], 0
je 0x5e5833
sar eax, 1
mov ecx, ebp
sub ecx, edx
mov edx, dword [esp + 0x18]
mov dword [edi + ecx*2], edx
mov ecx, edx
add ecx, 4
mov eax, dword [edi + eax*4]
lea ebp, [ebp + eax*2]
mov edi, dword [esp + 0x24]
jmp 0x5e583b
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 2]
movzx eax, word [ecx + eax*2]
add eax, 0xffffff87
movzx eax, ax
mov edx, 2
cmp eax, 1
ja case.0x5e55e5.98
mov eax, ecx
jmp 0x5e55f0
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
add ebp, 4
mov eax, 1
cmp ecx, 0x10000
jle 0x5e574a
mov dword [esp + 0x16c], ecx
mov esi, dword [esp + 0x260]
test dword [esi + 8], 0x4000010
je 0x5e5917
cmp ecx, 0x10001
jl 0x5e59d4
sub esp, 0xc
push dword [esp + 0x60]
call dword [0x6f446c]
add esp, 4
push dword [esp + 0x68]
jmp 0x5e5c1b
add ebx, 4
mov dword [esp + 0x6c], ebx
cmp dword [esp + 0x70], 0
jne 0x5e51b5
mov dword [esp + 0x70], ebx
cmp dword [esp + 0x90], 0
jne 0x5e51bf
jmp 0x5e51d6
mov esi, dword [esp + 0x260]
test byte [esi + 0xc], 0x40
je 0x5e58da
test byte [esi + 0xb], 4
jne 0x5e58da
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x74], eax
add eax, 4
mov dword [esp + 0x6c], eax
xor ebx, ebx
test byte [esi + 0xa], 4
je 0x5e5164
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x84], eax
add eax, 4
mov dword [esp + 0x6c], eax
cmp dword [esp + 0x8c], 0
jne 0x5e516e
jmp 0x5e5180
sub esp, 0xc
push dword [esp + 0x68]
jmp 0x5e5c1b
mov dword [esp + 0x18], ecx
mov esi, dword [esp + 0x54]
mov eax, dword [esp + 0x5c]
mov ecx, 0x1f80003e
mov edi, dword [esp + 0xc]
jmp 0x5e5933
add edi, 2
movzx edx, word [edi]
cmp edx, 0x1c
ja 0x5e5940
bt ecx, edx
jb 0x5e5930
movzx edx, dx
cmp edx, 0x83
je 0x5e5953
cmp edx, 0x85
jne 0x5e5993
movzx ebx, word [edi + 2]
movzx ebp, word [edi + ebx*2]
cmp ebp, 0x78
jne 0x5e5b7b
lea ebx, [edi + ebx*2]
sub ebx, dword [esp + 0xc]
cmp dword [esi + ebx*2], 0
jne 0x5e5b7b
cmp edx, 0x85
jne 0x5e598e
movzx edx, word [edi + 4]
cmp byte [eax + edx], 0
je 0x5e5b7b
add edi, 2
add edi, 4
jmp 0x5e5933
mov ecx, edi
call fcn.005fd730
test eax, eax
je 0x5e5b7b
mov dword [esp + 0x94], edi
add edi, 2
sub edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov dword [esi + edi*2], ecx
add ecx, 4
mov dword [esp + 0x16c], ecx
mov esi, dword [esp + 0x260]
cmp ecx, 0x10001
jge 0x5e5876
mov ebx, ecx
cmp dword [esp + 0xb8], 0
je 0x5e5a1a
mov ecx, dword [esp + 0x168]
lea eax, [ecx*4]
add eax, dword [esp + 0x54]
mov dword [esp + 0x60], eax
sub esp, 4
push ecx
push 0
push eax
call fcn.004fa3a0
add esp, 0x10
mov edx, dword [esp + 0x50]
sub esp, 0xc
lea ecx, [esp + 0x58]
push 0
call fcn.005f2560
add esp, 0x10
sub esp, 0xc
push 0x64
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5e5bfe
xor eax, eax
mov ecx, 0x19
mov edi, ebp
rep stosd dword es:[edi], eax
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
mov dword [ebp + 0x2c], eax
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
lea ecx, [ebp + 0x30]
mov dword [esp + 0x20], ecx
mov dword [ebp + 0x30], eax
mov ecx, dword [ebp + 0x2c]
test eax, eax
je 0x5e5bc9
test ecx, ecx
je 0x5e5bc9
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [ebp + 0x54], 0xffffffff
mov dword [ebp + 0x44], 0xffffffff
mov dword [ebp + 0x40], 0xffffffff
mov dword [ebp + 0x3c], 0xffffffff
mov dword [ebp + 0x38], 0xffffffff
mov dword [ebp + 0x34], 0xffffffff
mov al, byte [0x7333b8]
test al, al
jne 0x5e5b04
mov eax, 0x7333cb
and eax, 0xfffffff0
mov dword [eax], 0x80000000
mov dword [eax + 0x10], 0x7fffffff
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0x80000000
mov dword [eax + 0x30], 0xffffffff
mov dword [eax + 0x34], 0x7fffffff
mov byte [0x7333b8], 1
lea eax, [ebp + 0x2c]
mov dword [esp + 0x28], eax
mov dword [esp + 0x4c], ebp
cmp dword [ebp], 0
je 0x5e5c2f
movzx edi, word [esi + 0x1e]
lea ebx, [edi + edi + 2]
mov esi, dword [esp + 0x4c]
cmp dword [esi], 0
jne 0x5e5d92
mov edx, 1
mov ecx, esi
push 8
push 0x8c
push 0
push 1
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e5d89
mov byte [eax], 0x8b
mov edx, 0x11
mov ecx, esi
push 0
push 1
push 2
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e5d92
or byte [eax + 1], 0x28
jmp 0x5e5d92
cmp dword [esp + 0xbc], 0
mov esi, dword [esp + 0x260]
mov ecx, dword [esp + 0x18]
jne 0x5e586a
sub esp, 8
lea eax, [esp + 0x174]
lea ecx, [esp + 0x54]
mov edx, dword [esp + 0x14]
push 4
push eax
call fcn.005f2430
add esp, 0x10
mov ecx, dword [esp + 0x16c]
cmp ecx, 0x10001
jl 0x5e59d4
jmp 0x5e5876
test ecx, ecx
je 0x5e5be0
sub esp, 0xc
push ecx
call dword [0x6f446c]
add esp, 0x10
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
test eax, eax
je 0x5e5bf1
sub esp, 0xc
push eax
call dword [0x6f446c]
add esp, 0x10
sub esp, 0xc
push ebp
call dword [0x6f446c]
add esp, 0x10
sub esp, 0xc
push dword [esp + 0x68]
call dword [0x6f446c]
add esp, 4
push dword [esp + 0x60]
jmp 0x5e5c1b
sub esp, 0xc
push dword [esp + 0x68]
call dword [0x6f446c]
add esp, 0x10
add esp, 0x24c
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp + 4], 0
mov dword [ebp + 0x34], 5
mov dword [ebp + 0x38], 5
mov dword [ebp + 0x3c], 0
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x54], 1
mov dword [ebp + 0x60], 8
mov dword [ebp + 0x5c], 0x10
mov dword [ebp + 0x58], 0x18
mov eax, dword [ecx + 4]
lea edx, [eax + 7]
cmp edx, 0xff8
ja 0x5e5c85
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e5cb2
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e6291
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 7
add eax, 8
mov byte [eax], 6
add dword [ebp + 0x48], 6
mov dword [eax + 1], 0x53565755
mov word [eax + 5], 0xd98b
add ebx, 3
and ebx, 0xfffffffc
add ebx, dword [ebp + 0x58]
mov dword [ebp + 0x44], ebx
mov edi, ebx
test ebx, ebx
jle 0x5e626a
mov eax, edi
cmp eax, 0x4000
jg 0x5e6008
cmp eax, 0x1001
jl 0x5e6246
mov edx, 1
mov ecx, ebp
push 0xfffff000
push 0x8d
push 0
push 0xe
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e6201
mov byte [eax], 0x8b
cmp edi, 0x2001
jl 0x5e6246
mov edx, 1
mov ecx, ebp
push 0xffffe000
push 0x8d
push 0
push 0xe
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e6a59
mov byte [eax], 0x8b
cmp edi, 0x3001
jl 0x5e6246
mov edx, 1
mov ecx, ebp
push 0xffffd000
push 0x8d
push 0
push 0xe
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e7895
mov byte [eax], 0x8b
jmp 0x5e6246
cmp dword [esi], 0
je 0x5e5b53
add edi, edi
cmp ebx, 7
ja 0x5e5dd4
mov ebx, dword [esp + 0x6c]
add ebx, 4
inc edi
nop word cs:[eax + eax]
mov edx, 0x20
mov ecx, esi
push 0
push 1
push ebx
push 0x8d
call fcn.005f2690
add esp, 0x10
add ebx, 4
dec edi
jne 0x5e5db0
jmp 0x5e5e62
cmp dword [esi], 0
je 0x5e5fcf
or edi, 1
mov edx, 0x20
mov ecx, esi
push edi
push 0x40
push 0
push 3
call fcn.005f2690
add esp, 0x10
mov ecx, esi
call fcn.005f3650
mov edi, eax
mov edx, 0x20
mov ecx, esi
push 0
push 1
push 0
push 0x82
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
jne 0x5e5e62
mov edx, 0x11
mov ecx, esi
push 0
push 2
push 4
push 0x40
call fcn.005fdd80
add esp, 0x10
cmp dword [esi], 0
jne 0x5e5e62
mov edx, 0x11
mov ecx, esi
push 0
push 3
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e5e59
or byte [eax + 1], 0x28
cmp dword [esi], 0
je 0x5e6152
mov eax, dword [esp + 0x74]
test eax, eax
je 0x5e5e83
mov edx, 0x20
mov ecx, ebp
push 0
push 1
push eax
push 0x8d
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push 0
push 8
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 4
push 0x81
push 0
push 0xc
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0xc
push 0x81
push 0
push 0xb
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0x81
push 0
push 3
call fcn.005f2690
add esp, 0x10
mov edx, 0x25
mov ecx, ebp
push 0x1c
push 0x81
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 4
push 0x83
push 0
push 2
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 8
push 0x83
push 0
push 0xa
call fcn.005f2690
add esp, 0x10
cmp dword [ebp], 0
jne 0x5e5f6a
mov edx, 0x11
mov ecx, ebp
push 0
push 1
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 1
push 0x10
push 0x8d
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x98]
cmp eax, dword [esp + 0x9c]
jge 0x5e6300
mov esi, dword [esp + 0x4c]
cmp dword [esi], 0
jne 0x5e62c1
mov edx, 1
mov ecx, esi
push 0xfffffffffffffffe
push 0x8c
push 0
push 1
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e604a
mov byte [eax], 0x8d
jmp 0x5e62c1
mov eax, dword [esp + 0x6c]
add eax, dword [esi + 0x58]
mov edx, 1
mov ecx, esi
add eax, 4
je 0x5e609d
push eax
push 0x8d
push 0
push 2
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e5ddd
mov byte [eax], 0x8d
jmp 0x5e5ddd
mov edx, 1
mov ecx, ebp
push 0
push 1
push 0
push 0xd
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e6143
mov byte [eax], 0x89
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e60bd
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e60ea
cmp dword [esi], 4
jne 0x5e62c1
mov edx, 1
mov ecx, esi
push 0
push 1
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e62b8
mov byte [eax], 0x89
mov edx, 0x11
mov ecx, esi
push 0
push 1
push 2
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e62c1
or byte [eax + 1], 0x28
jmp 0x5e62c1
push 0
push 2
push 0
push 0xd
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e5ddd
mov byte [eax], 0x89
jmp 0x5e5ddd
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e6291
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 6
add eax, 8
lea ecx, [edi - 1]
sar ecx, 0xc
mov byte [eax], 5
add dword [ebp + 0x48], 5
mov byte [eax + 1], 0xba
mov dword [eax + 2], ecx
mov edx, 1
mov ecx, ebp
push 0xfffff000
push 0x81
push 0
push 0xe
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e61f2
mov byte [eax], 0x8b
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e6173
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e61a0
cmp dword [ebp], 0
jne 0x5e5b19
jmp 0x5e602a
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e65af
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e65dc
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e6291
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [ebp + 0x48], 5
mov byte [eax + 1], 0x2d
mov dword [eax + 2], 0x1000
mov edx, 0x11
mov ecx, ebp
push 0
push 2
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e62a9
or byte [eax + 1], 0x28
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 3]
cmp edx, 0xff8
ja 0x5e6210
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e6239
cmp dword [ebp], 0
jne 0x5e5b19
jmp 0x5e6126
cmp dword [ebp], 0
jne 0x5e5b19
jmp 0x5e5d1c
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e6291
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 3
add eax, 8
mov byte [eax], 2
add dword [ebp + 0x48], 2
mov word [eax + 1], 0xf075
mov eax, edi
neg eax
mov edx, 1
mov ecx, ebp
push eax
push 0x8d
push 0
push 0xe
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e629d
mov byte [eax], 0x8b
mov edx, 0x11
mov ecx, ebp
push 0
push 0xd
push edi
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e5b19
or byte [eax + 1], 0x28
jmp 0x5e5b19
mov dword [ebp], 2
jmp 0x5e5b19
cmp dword [ebp], 0
jne 0x5e5b19
jmp 0x5e626a
cmp dword [ebp], 0
jne 0x5e5b19
jmp 0x5e61d5
cmp dword [esi], 0
je 0x5e6075
mov edi, dword [esp + 0x98]
mov ebx, dword [esp + 0x9c]
cmp edi, ebx
jge 0x5e6300
nop word cs:[eax + eax]
mov edx, 0x20
mov ecx, esi
push 0
push 1
push edi
push 0x8d
call fcn.005f2690
add esp, 0x10
add edi, 4
cmp edi, ebx
jl 0x5e62e0
mov esi, dword [esp + 0x268]
cmp esi, 1
jne 0x5e632b
mov edx, 0x20
mov ecx, ebp
push 0xffffffffffffffff
push 0x40
push dword [esp + 0x88]
push 0x8d
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x88]
test eax, eax
je 0x5e634f
mov edx, 0x20
mov ecx, ebp
push 0
push 0x40
push eax
push 0x8d
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x5e6373
mov edx, 0x20
mov ecx, ebp
push 0
push 0x40
push eax
push 0x8d
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x260]
test byte [eax + 8], 0x10
mov dword [esp + 0x14], ebp
jne 0x5e63e0
mov ecx, dword [eax + 0xc]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x18c], 0
mov eax, dword [esp + 0x84]
test ch, 8
jne 0x5e63f8
test eax, eax
jne 0x5e6400
mov eax, dword [esp + 0xc8]
dec eax
cmp eax, 2
jb 0x5e63ce
xor ebp, ebp
cmp dword [esp + 0xd4], 0x100
mov dword [esp + 0x10], 0
jl 0x5e6749
mov dword [esp + 0x10], 0
mov ebp, 1
jmp 0x5e6749
mov ecx, ebp
call fcn.005f3650
mov dword [esp + 0x44], eax
mov dword [esp + 0x34], 0
jmp 0x5ea0e9
test eax, eax
je 0x5e6504
mov edx, 0x20
mov ecx, edi
push 0
push 0xc
push 0
push 4
call fcn.005f2690
add esp, 0x10
cmp dword [esp + 0xc8], 0
jne 0x5e64b6
cmp dword [esp + 0xd4], 0x100
jl 0x5e64b6
mov ecx, edi
call fcn.005f3650
mov esi, eax
xor ebp, ebp
cmp dword [edi], 0
jne 0x5e7c12
mov edx, 0x11
mov ecx, edi
push 0
push 0xc
push 2
push 0x40
call fcn.005fdd80
add esp, 0x10
xor ebp, ebp
cmp dword [edi], 0
jne 0x5e7c12
mov edx, 1
mov ecx, edi
push 0
push 0xb
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e648a
mov byte [eax], 0x3b
xor ebp, ebp
cmp dword [edi], 0
jne 0x5e7c12
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e7a5c
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e7a8a
xor ebp, ebp
cmp dword [edi], 0
jne 0x5e6626
mov edx, 1
mov ecx, edi
push 0
push 0xb
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e64df
mov byte [eax], 0x3b
xor ebp, ebp
cmp dword [edi], 0
jne 0x5e6626
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e6513
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e6541
xor ebp, ebp
mov dword [esp + 0x10], 0
jmp 0x5e6749
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5e661e
mov eax, dword [edi + 0x30]
mov dword [ebp], eax
mov dword [edi + 0x30], ebp
mov dword [ebp + 4], 0x10
add ebp, 8
mov dword [ebp], 0
mov dword [ebp + 8], 0x6000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebp
mov dword [edi + 0x1c], ebp
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e657d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e65a8
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e661e
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5e6626
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5e69e4
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x2000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [esi + 0x1c], ebx
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e699c
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e69c3
mov dword [edi], 2
xor ebp, ebp
mov ecx, edi
call fcn.005f3650
mov esi, eax
mov edx, 0x20
mov ecx, edi
push 0
push 0xc
push dword [esp + 0x8c]
push 0x8d
call fcn.005f2690
add esp, 0x10
mov edx, dword [esp + 0xcc]
sub esp, 0xc
lea ebx, [esp + 0x58]
mov ecx, ebx
push 1
call fcn.005ff340
add esp, 0x10
mov edx, dword [esp + 0xc8]
sub esp, 8
lea eax, [esp + 0x194]
mov ecx, ebx
push 1
push eax
call fcn.005ff820
add esp, 0x10
cmp dword [edi], 0
jne 0x5e66b2
mov edx, 1
mov ecx, edi
push 0
push 0xb
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e66a9
mov byte [eax], 0x3b
cmp dword [edi], 0
je 0x5e68c7
mov ecx, edi
call fcn.005f3650
test ebp, ebp
je 0x5e66d0
test eax, eax
je 0x5e66d0
mov ecx, dword [ebp + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
mov edx, 0x20
mov ecx, edi
push 0
push 0xc
push dword [esp + 0x8c]
push 0x8d
call fcn.005f2690
add esp, 0x10
mov esi, dword [esp + 0x18c]
mov ecx, edi
call fcn.005f3650
test esi, esi
mov dword [esp + 0x10], ebp
je 0x5e6730
nop word cs:[eax + eax]
test eax, eax
je 0x5e6729
mov ecx, dword [esi]
test ecx, ecx
je 0x5e6729
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x5e6710
mov edx, 0x20
mov ecx, edi
push 0
push 4
push 0
push 0xc
call fcn.005f2690
add esp, 0x10
xor ebp, ebp
xor esi, esi
cmp dword [edi], 0
je 0x5e67f0
test ebp, ebp
je 0x5e68a6
mov ecx, edi
call fcn.005f3650
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], 0
cmp dword [edi], 0
jne 0x5e6aa4
mov edx, 0x11
mov ecx, edi
push 0
push 0xc
push 2
push 0x40
call fcn.005fdd80
add esp, 0x10
mov dword [esp + 0x10], 0
cmp dword [edi], 0
jne 0x5e6aa4
mov edx, 1
mov ecx, edi
push 0
push 0xb
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e67be
mov byte [eax], 0x3b
mov dword [esp + 0x10], 0
cmp dword [edi], 0
jne 0x5e6aa4
mov ebx, dword [edi + 0x30]
mov ecx, dword [ebx + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e69ef
lea eax, [ebx + ecx + 8]
mov dword [ebx + 4], edx
jmp 0x5e6a1a
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e680a
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e6837
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5e68b5
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 5
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e6872
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e6899
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e68b5
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
test ebp, ebp
jne 0x5e675c
mov dword [esp + 0x1c], 0
xor ebx, ebx
jmp 0x5e6c8d
mov dword [edi], 2
xor esi, esi
test ebp, ebp
jne 0x5e675c
jmp 0x5e68a6
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e68e1
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e690e
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5e6991
mov eax, dword [edi + 0x30]
mov dword [ebx], eax
mov dword [edi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x4000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [edi + 0x1c], ebx
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e6949
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e6970
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e6991
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
test esi, esi
je 0x5e66b2
mov eax, dword [ebx + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], esi
jmp 0x5e66b2
mov dword [edi], 2
jmp 0x5e66b2
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e69e4
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
test edi, edi
je 0x5e5e62
mov eax, dword [ebx + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], edi
jmp 0x5e5e62
mov dword [esi], 2
jmp 0x5e5e62
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e6a96
mov ecx, dword [edi + 0x30]
mov dword [eax], ecx
mov dword [edi + 0x30], eax
mov dword [eax + 4], 0x10
add eax, 8
mov dword [eax], 0
mov dword [eax + 8], 0x6000
mov edx, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test edx, edx
cmovne ecx, edx
mov dword [ecx], eax
mov dword [esp + 0x10], eax
mov dword [edi + 0x1c], eax
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e6a68
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e6a8f
cmp dword [ebp], 0
jne 0x5e5b19
jmp 0x5e5d50
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e6a96
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5e6aa4
mov dword [edi], 2
mov dword [esp + 0x10], 0
mov edx, 0x23
mov ecx, edi
push 0
push 0x8c
push 0
push 1
call fcn.005f2690
add esp, 0x10
cmp dword [edi], 0
je 0x5e6b5b
sub esp, 8
mov edx, 0x20
mov ecx, edi
push 0
push 1
call fcn.005ffe50
add esp, 0x10
xor ebx, ebx
cmp dword [edi], 0
jne 0x5e6c8d
mov edx, 0x21
mov ecx, edi
push 0
push 1
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e6b06
or byte [eax], 0x20
xor ebx, ebx
cmp dword [edi], 0
jne 0x5e6c8d
mov edx, 1
mov ecx, edi
push 0
push 1
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e6b2f
mov byte [eax], 3
xor ebx, ebx
cmp dword [edi], 0
jne 0x5e6c8d
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e6bf5
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e6c22
movzx ebx, byte [esp + 0xd4]
mov eax, ebx
sub eax, 0xffffff80
cmp eax, 0x100
jb 0x5e6b89
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e6bb0
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e6bd7
mov edx, 0x11
mov ecx, edi
push 0
push 1
push ebx
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e6ac7
or byte [eax + 1], 0x38
jmp 0x5e6ac7
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e6bea
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [edi + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], ebx
jmp 0x5e6ac7
mov dword [edi], 2
jmp 0x5e6ac7
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5e780a
mov eax, dword [edi + 0x30]
mov dword [ebx], eax
mov dword [edi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x30000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [edi + 0x1c], ebx
add dword [edi + 0x48], 5
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e6c5d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e6c88
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e780a
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov dword [esp + 0x18], ebx
mov ecx, edi
call fcn.005f3650
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x15c]
or eax, ebp
je 0x5e6cc1
mov edx, 0x23
mov ecx, edi
push 0
push 0x8c
push 0
push 1
call fcn.005f2690
add esp, 0x10
test ebp, ebp
je 0x5e6e39
cmp dword [edi], 0
jne 0x5e6e55
mov eax, dword [esp + 0xd4]
movzx ebx, ah
mov eax, ebx
sub eax, 0xffffff80
cmp eax, 0x100
jb 0x5e6d02
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e6d2b
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e6d56
mov edx, 0x11
mov ecx, edi
push 0
push 1
push ebx
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e6d64
or byte [eax + 1], 0x38
cmp dword [edi], 0
jne 0x5e6e55
jmp 0x5e6d6d
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e6eea
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [edi + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], ebx
cmp dword [edi], 0
jne 0x5e6e55
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e6d87
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e6db4
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5e6eea
mov eax, dword [edi + 0x30]
mov dword [ebx], eax
mov dword [edi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [edi + 0x1c], ebx
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e6def
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e6e1a
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e6eea
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esp + 0x1c], 0
je 0x5e6e39
mov eax, dword [ebx + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [ebx + 8], eax
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0xc], eax
cmp dword [edi], 0
jne 0x5e6e55
mov edx, 0x11
mov ecx, edi
push 0
push 0xc
push 2
push 0x40
call fcn.005fdd80
add esp, 0x10
cmp dword [esp + 0x15c], 0
je 0x5e7094
xor ebx, ebx
cmp dword [edi], 0
jne 0x5e6f9d
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e6e88
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e6eb3
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e6f95
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [edi + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], 0xd800
xor ebx, ebx
cmp dword [edi], 0
jne 0x5e6f9d
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e6f03
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e6f2c
mov dword [edi], 2
cmp dword [esp + 0x15c], 0
jne 0x5e6e63
jmp 0x5e7094
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5e6f95
mov eax, dword [edi + 0x30]
mov dword [ebx], eax
mov dword [edi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x4000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [edi + 0x1c], ebx
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e6f67
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e6f8e
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e6f95
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5e6f9d
mov dword [edi], 2
xor ebx, ebx
sub esp, 8
mov edx, 0x65
mov ecx, edi
push 0xfc00
push 0x40
push 0
push 1
push 0
push 1
call fcn.005f2d00
add esp, 0x20
cmp dword [edi], 0
jne 0x5e701a
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e6fdd
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e7008
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e736d
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [edi + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], 0xd800
sub esp, 8
mov edx, 0x20
mov ecx, edi
push 0
push 1
call fcn.005ffe50
add esp, 0x10
cmp dword [edi], 0
jne 0x5e7076
mov edx, 0x21
mov ecx, edi
push 0
push 1
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e7053
or byte [eax], 0x20
cmp dword [edi], 0
jne 0x5e7076
mov edx, 1
mov ecx, edi
push 0
push 1
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e7076
mov byte [eax], 3
mov ecx, edi
call fcn.005f3650
test ebx, ebx
je 0x5e7094
test eax, eax
je 0x5e7094
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
mov ecx, edi
call fcn.005f3650
test esi, esi
je 0x5e70b2
test eax, eax
je 0x5e70b2
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
test ebp, ebp
mov esi, dword [esp + 0x268]
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
je 0x5e7108
mov ecx, edi
call fcn.005f3650
cmp dword [esp + 0x10], 0
je 0x5e70ea
test eax, eax
je 0x5e70ea
mov edx, dword [esp + 0x10]
mov ecx, dword [edx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edx + 8], ecx
mov dword [edx + 0xc], eax
mov ecx, edi
call fcn.005f3650
test ebx, ebx
je 0x5e7108
test eax, eax
je 0x5e7108
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
mov ecx, ebp
call fcn.005f3650
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x260]
test byte [eax + 0xb], 4
jne 0x5ea0e9
test esi, esi
jne 0x5e7532
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xc], eax
mov word [esp + 0x18c], 0
mov word [esp + 0x198], 0
mov word [esp + 0x1a4], 0
mov word [esp + 0x1b0], 0
mov word [esp + 0x1bc], 0
mov word [esp + 0x1c8], 0
mov word [esp + 0x1d4], 0
mov word [esp + 0x1e0], 0
mov word [esp + 0x1ec], 0
mov word [esp + 0x1f8], 0
mov word [esp + 0x204], 0
mov word [esp + 0x210], 0
mov word [esp + 0x21c], 0
mov word [esp + 0x228], 0
mov word [esp + 0x234], 0
mov word [esp + 0x240], 0
mov dword [esp + 0x170], 0x2710
mov edx, dword [esp + 0x50]
sub esp, 4
lea eax, [esp + 0x174]
lea esi, [esp + 0x190]
lea ecx, [esp + 0x50]
push eax
push 0x10
push esi
call fcn.00600330
add esp, 0x10
mov ebx, eax
test ebx, ebx
jle 0x5e752b
mov ecx, 3
xor edi, edi
mov edx, 0xffffffff
lea eax, [esp + 0x18c]
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], ebx
mov esi, edx
lea edx, [esi + 1]
test edi, edi
je 0x5e7269
mov ebx, esi
sub ebx, dword [esp + 0x10]
inc ebx
cmp ebx, ecx
jle 0x5e7265
mov ebp, ecx
movzx ecx, word [eax - 0xc]
cmp ecx, 0xff
mov ecx, dword [esp + 0x18]
cmovb ecx, esi
mov dword [esp + 0x18], ecx
mov ecx, ebp
cmovb ecx, ebx
mov ebx, dword [esp + 0x1c]
xor esi, esi
cmp edx, ebx
jge 0x5e7297
mov ebp, ecx
movzx ecx, word [eax]
xor esi, esi
cmp ecx, 0xfe
ja 0x5e7295
test edi, edi
mov ecx, dword [esp + 0x10]
cmove ecx, edx
mov dword [esp + 0x10], ecx
mov ecx, 1
cmove edi, ecx
mov esi, edi
mov ecx, ebp
add eax, 0xc
cmp ebx, edx
mov edi, esi
jne 0x5e7235
cmp dword [esp + 0x18], 0
mov ebp, dword [esp + 0x14]
js 0x5e7378
mov esi, dword [esp + 0x4c]
cmp dword [esi], 0
jne 0x5ea0e2
mov dword [esp + 0x10], ecx
sub esp, 0xc
push 0x104
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5e7815
mov eax, dword [esp + 0x58]
mov dword [ebp], eax
mov dword [esp + 0x58], ebp
add ebp, 4
mov ecx, dword [esp + 0x10]
mov eax, ecx
mov esi, ecx
add al, al
sub esp, 0x10
movzx eax, al
mov dword [esp + 4], eax
mov dword [esp], ebp
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004fa3a0
mov eax, esi
add esp, 0x10
test eax, eax
jle 0x5e737a
xor eax, eax
mov ecx, dword [esp + 0x18]
sub ecx, eax
lea ecx, [ecx + ecx*2]
movzx edx, word [esp + ecx*4 + 0x18c]
test edx, edx
je 0x5e7354
lea ecx, [esp + ecx*4 + 0x18c]
lea edx, [ecx + edx*2]
add ecx, 2
lea ebx, [eax + eax]
movzx esi, byte [ecx]
movzx edi, byte [ebp + esi]
cmp ebx, edi
jge 0x5e734d
mov byte [ebp + esi], bl
add ecx, 2
cmp ecx, edx
jbe 0x5e733d
inc eax
cmp eax, dword [esp + 0x10]
jne 0x5e7318
mov ebx, dword [esp + 0x1c]
test ebx, ebx
jg 0x5e737e
mov esi, 0xffffffff
jmp 0x5e740a
mov dword [edi], 2
jmp 0x5e701a
xor ebp, ebp
test ebx, ebx
jle 0x5e7363
mov edx, 0xffffffff
xor eax, eax
lea ecx, [esp + 0x18c]
cmp edx, 0xffffffff
je 0x5e73f1
lea esi, [edx + edx]
lea edi, [esi + esi*2]
movzx esi, word [esp + edi*2 + 0x18c]
cmp esi, 2
jne 0x5e73ed
movzx esi, word [ecx]
cmp esi, 2
ja 0x5e73ed
movzx esi, si
cmp esi, 1
mov esi, eax
je 0x5e7400
movzx esi, word [esp + edi*2 + 0x190]
or edi, 1
xor si, word [esp + edi*2 + 0x18c]
movzx esi, si
lea edi, [esi + 0xffff]
test edi, esi
je 0x5e73ed
movzx esi, word [ecx + 4]
xor si, word [ecx + 2]
movzx esi, si
lea edi, [esi + 0xffff]
test edi, esi
mov esi, eax
je 0x5e7400
mov esi, edx
jmp 0x5e7400
movzx edx, word [ecx]
cmp edx, 3
mov esi, eax
jb 0x5e7400
mov esi, 0xffffffff
inc eax
add ecx, 0xc
cmp ebx, eax
mov edx, esi
jne 0x5e738c
mov eax, dword [esp + 0x18]
test eax, eax
js 0x5e74ed
cmp eax, esi
mov edi, 0xffffffff
cmovne edi, esi
dec ebx
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x84]
test eax, eax
je 0x5e77cf
mov edx, 0x20
mov esi, dword [esp + 0xc]
mov ecx, esi
push eax
push 0x8d
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, esi
push 0
push 0xb
push 0
push 4
call fcn.005f2690
add esp, 0x10
xor ebx, ebx
cmp dword [esi], 0
jne 0x5e8f7f
mov eax, dword [esp + 0x1c]
lea eax, [eax + eax]
mov edx, 0x11
mov ecx, esi
push 0
push 0xb
push eax
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e7498
or byte [eax + 1], 0x28
xor ebx, ebx
cmp dword [esi], 0
jne 0x5e8f7f
mov edx, 1
mov ecx, esi
push 0
push 1
push 0
push 0xb
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e74c1
mov byte [eax], 0x3b
xor ebx, ebx
cmp dword [esi], 0
jne 0x5e8f7f
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e87c0
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e87f1
test esi, esi
mov ebp, dword [esp + 0x14]
js 0x5e752b
lea eax, [esi + esi]
lea eax, [eax + eax*2]
movzx ecx, word [esp + eax*2 + 0x18c]
add ecx, eax
or eax, 1
movzx edi, word [esp + ecx*2 + 0x18c]
movzx edx, word [esp + eax*2 + 0x18c]
sub esp, 8
lea ecx, [esp + 0x54]
push esi
push edi
call fcn.00600e00
jmp 0x5e9feb
mov esi, dword [esp + 0x268]
mov eax, dword [esp + 0x260]
mov ecx, dword [eax + 0xc]
test cl, 0x10
jne 0x5e7613
test ch, 1
jne 0x5e7692
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x5ea0e9
test byte [eax + 4], 1
je 0x5ea0e9
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x18c], 0
cmp dword [esp + 0x84], 0
je 0x5e75b3
mov edx, 0x20
mov ecx, esi
push 0
push 0xb
push 0
push 5
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, esi
push dword [esp + 0x84]
push 0x8d
push 0
push 0xb
call fcn.005f2690
add esp, 0x10
mov ecx, esi
call fcn.005f3650
mov dword [esp + 0x10], eax
xor edi, edi
cmp dword [esi], 0
jne 0x5e8338
mov edx, 1
mov ecx, esi
push 0
push 0xb
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e75e7
mov byte [eax], 0x3b
xor edi, edi
cmp dword [esi], 0
jne 0x5e8338
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e7b9b
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e7bc8
mov ax, word [eax + 0x18]
movzx edx, ax
test cl, 0x20
je 0x5e7670
cmp edx, 0xff
ja 0x5e763a
mov eax, dword [esp + 0xa0]
movzx eax, byte [eax + edx]
cmp edx, 0x80
jb 0x5e7670
cmp dword [esp + 0x15c], 0
je 0x5e7670
mov eax, edx
and eax, 0xff80
shr eax, 7
movzx eax, byte [eax + 0x6f7fe0]
shl eax, 7
mov ecx, edx
and ecx, 0x7f
or ecx, eax
movzx eax, word [ecx + ecx + 0x6fa1e0]
mov eax, dword [eax*8 + 0x6f6964]
add eax, edx
sub esp, 0x10
movzx eax, ax
mov dword [esp], eax
mov dword [esp + 4], 0
lea ecx, [esp + 0x5c]
call fcn.00600e00
add esp, 0x10
jmp 0x5ea0e9
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x18c], 0
cmp dword [esp + 0x84], 0
je 0x5e76e1
mov edx, 0x20
mov ecx, edi
push 0
push 0xb
push 0
push 4
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push dword [esp + 0x84]
push 0x8d
push 0
push 0xb
call fcn.005f2690
add esp, 0x10
cmp dword [esp + 0xc8], 0
jne 0x5e774d
cmp dword [esp + 0xd4], 0x100
jl 0x5e774d
xor eax, eax
cmp dword [edi], 0
jne 0x5e84df
mov edx, 1
mov ecx, edi
push 0
push 0xb
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e7721
mov byte [eax], 0x3b
xor eax, eax
cmp dword [edi], 0
jne 0x5e84df
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e843b
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e846a
mov edx, 0x20
mov ecx, edi
push 0
push 8
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 4
push 0x81
push 0
push 3
call fcn.005f2690
add esp, 0x10
xor esi, esi
cmp dword [edi], 0
jne 0x5e78da
mov edx, 1
mov ecx, edi
push 0
push 3
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e77a7
mov byte [eax], 0x3b
xor esi, esi
cmp dword [edi], 0
jne 0x5e78da
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e782d
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e785a
mov esi, dword [esp + 0xc]
cmp dword [esi], 0
jne 0x5e8fb4
mov eax, dword [esp + 0x1c]
lea eax, [eax + eax]
mov edx, 0x11
mov ecx, esi
push 0
push 0xb
push eax
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e8fb4
or byte [eax + 1], 0x28
jmp 0x5e8fb4
mov dword [edi], 2
jmp 0x5e68ae
cmp dword [esi], 0
mov ebp, dword [esp + 0x14]
jne 0x5ea0e2
mov dword [esi], 2
jmp 0x5ea0e2
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5e78d2
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0xa000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e78a4
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e78cb
cmp dword [ebp], 0
jne 0x5e5b19
jmp 0x5e6246
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e78d2
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5e78da
mov dword [edi], 2
xor esi, esi
mov dword [esp + 0x10], esi
lea esi, [esp + 0x4c]
mov ecx, esi
call fcn.006030d0
mov ecx, edi
call fcn.005f3650
mov ebp, eax
mov dword [esp + 0x108], ebp
mov edx, dword [esp + 0xcc]
sub esp, 0xc
mov ecx, esi
push 1
call fcn.005ff340
add esp, 0x10
xor ebx, ebx
cmp dword [edi], 0
jne 0x5e79f7
mov edx, 1
mov ecx, edi
push 0
push 0xb
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e7938
mov byte [eax], 0x3b
xor ebx, ebx
cmp dword [edi], 0
jne 0x5e79f7
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e795d
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e7986
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5e79ef
mov eax, dword [edi + 0x30]
mov dword [ebx], eax
mov dword [edi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x6000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [edi + 0x1c], ebx
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e79c1
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e79e8
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e79ef
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5e79f7
mov dword [edi], 2
xor ebx, ebx
mov eax, dword [esp + 0xc8]
dec eax
xor esi, esi
cmp eax, 1
ja 0x5e7f94
xor esi, esi
cmp dword [edi], 0
jne 0x5e7f94
mov edx, 0x11
mov ecx, edi
push 0
push 1
push 0xd
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e7a34
or byte [eax + 1], 0x38
xor esi, esi
cmp dword [edi], 0
jne 0x5e7f94
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e7ac9
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e7af6
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5e7c0a
mov eax, dword [edi + 0x30]
mov dword [ebp], eax
mov dword [edi + 0x30], ebp
mov dword [ebp + 4], 0x10
add ebp, 8
mov dword [ebp], 0
mov dword [ebp + 8], 0x6000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebp
mov dword [edi + 0x1c], ebp
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e7b31
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e7b5c
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5e7f8c
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e7b66
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e7b91
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e7c0a
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5e7c12
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e7f8c
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5e7f94
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5e8330
mov eax, dword [esi + 0x30]
mov dword [edi], eax
mov dword [esi + 0x30], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x6000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [esi + 0x1c], edi
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e8302
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e8329
mov dword [edi], 2
xor ebp, ebp
mov edx, 0x23
mov ecx, edi
push 0xfffffffffffffffe
push 0x8c
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x23
mov ecx, edi
push 0
push 0x8c
push 0
push 3
call fcn.005f2690
add esp, 0x10
cmp dword [edi], 0
jne 0x5e7dbe
mov eax, dword [esp + 0xd4]
movzx ebx, ah
mov eax, ebx
sub eax, 0xffffff80
cmp eax, 0x100
jb 0x5e7c7f
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e7ca8
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e7cd3
mov edx, 0x11
mov ecx, edi
push 0
push 1
push ebx
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e7ce1
or byte [eax + 1], 0x38
cmp dword [edi], 0
jne 0x5e7dbe
jmp 0x5e7cea
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e7db8
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [edi + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], ebx
cmp dword [edi], 0
jne 0x5e7dbe
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e7d04
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e7d31
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5e7db8
mov eax, dword [edi + 0x30]
mov dword [ebx], eax
mov dword [edi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [edi + 0x1c], ebx
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e7d6c
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e7d93
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e7db8
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
test esi, esi
je 0x5e7f7c
mov eax, dword [ebx + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], esi
mov bl, 1
cmp dword [edi], 0
jne 0x5e7df7
jmp 0x5e7dc8
mov dword [edi], 2
test esi, esi
setne bl
cmp dword [edi], 0
jne 0x5e7df7
movzx eax, byte [esp + 0xd4]
mov edx, 0x11
mov ecx, edi
push 0
push 3
push eax
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e7dee
or byte [eax + 1], 0x38
cmp dword [edi], 0
je 0x5e7ea0
mov ecx, edi
call fcn.005f3650
test ebp, ebp
je 0x5e7e15
test eax, eax
je 0x5e7e15
mov ecx, dword [ebp + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
cmp dword [edi], 0
mov dword [esp + 0x10], ebp
jne 0x5e6730
mov esi, dword [edi + 0x58]
add esi, dword [esp + 0x84]
mov edx, 1
mov ecx, edi
push 0xfffffffffffffffe
push 0x8c
push 0
push 0xe
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e7e72
mov byte [eax], 0x8d
mov edx, 1
mov ecx, edi
push esi
push 0x8d
push 0
push 0xe
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e7e72
mov byte [eax], 0x89
jmp 0x5e6730
cmp dword [edi], 4
jne 0x5e6730
sub esp, 8
mov edx, 0x2d2b2928
mov ecx, edi
push 2
push 0x40
push 0
push 0xc
push esi
push 0x8d
call fcn.005fda00
add esp, 0x20
jmp 0x5e6730
mov dword [esp + 0x18], ebx
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e7ebe
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e7eeb
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5e7f71
mov eax, dword [edi + 0x30]
mov dword [ebx], eax
mov dword [edi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [edi + 0x1c], ebx
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e7f26
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e7f4d
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e7f71
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp byte [esp + 0x18], 0
je 0x5e7df7
mov eax, dword [ebx + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], esi
jmp 0x5e7df7
mov dword [edi], 2
jmp 0x5e7df7
xor ebx, ebx
cmp dword [edi], 0
jne 0x5e7df7
jmp 0x5e7dc8
mov dword [edi], 2
xor esi, esi
mov edx, dword [esp + 0xc8]
sub esp, 8
lea eax, [esp + 0x194]
lea ecx, [esp + 0x54]
push 0
push eax
call fcn.005ff820
add esp, 0x10
mov eax, dword [esp + 0x18c]
test eax, eax
je 0x5e7fdf
test ebp, ebp
je 0x5e7fd8
mov ecx, dword [eax]
test ecx, ecx
je 0x5e7fd8
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], ebp
mov eax, dword [eax + 4]
test eax, eax
jne 0x5e7fbf
mov eax, dword [esp + 0xc8]
dec eax
cmp eax, 1
ja 0x5e828d
xor ebp, ebp
cmp dword [edi], 0
jne 0x5e80b1
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e8015
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e803f
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5e80a9
mov eax, dword [edi + 0x30]
mov dword [ebp], eax
mov dword [edi + 0x30], ebp
mov dword [ebp + 4], 0x10
add ebp, 8
mov dword [ebp], 0
mov dword [ebp + 8], 0x30000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebp
mov dword [edi + 0x1c], ebp
add dword [edi + 0x48], 5
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e807b
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e80a2
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e80a9
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5e80b1
mov dword [edi], 2
xor ebp, ebp
mov ecx, edi
call fcn.005f3650
test esi, esi
je 0x5e80cf
test eax, eax
je 0x5e80cf
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
xor esi, esi
cmp dword [edi], 0
jne 0x5e81b7
mov edx, 1
mov ecx, edi
push 0
push 0xb
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e80f8
mov byte [eax], 0x3b
xor esi, esi
cmp dword [edi], 0
jne 0x5e81b7
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e811d
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e8146
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5e81af
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x6000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e8181
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e81a8
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e81af
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5e81b7
mov dword [edi], 2
xor esi, esi
mov edx, 0x23
mov ecx, edi
push 0
push 0x8c
push 0
push 1
call fcn.005f2690
add esp, 0x10
cmp dword [edi], 0
jne 0x5e81f5
mov edx, 0x11
mov ecx, edi
push 0
push 1
push 0xa
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e81f5
or byte [eax + 1], 0x38
sub esp, 8
mov edx, 0x20
mov ecx, edi
push 0
push 1
call fcn.005ffe50
add esp, 0x10
cmp dword [edi], 0
jne 0x5e8251
mov edx, 0x21
mov ecx, edi
push 0
push 1
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e822e
or byte [eax], 0x20
cmp dword [edi], 0
jne 0x5e8251
mov edx, 1
mov ecx, edi
push 0
push 1
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e8251
mov byte [eax], 3
mov ecx, edi
call fcn.005f3650
test esi, esi
je 0x5e826f
test eax, eax
je 0x5e826f
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
mov ecx, edi
call fcn.005f3650
test ebp, ebp
je 0x5e828d
test eax, eax
je 0x5e828d
mov ecx, dword [ebp + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
mov ecx, edi
call fcn.005f3650
test ebx, ebx
je 0x5e82ab
test eax, eax
je 0x5e82ab
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
mov ecx, edi
call fcn.005f3650
mov edx, dword [esp + 0x10]
test edx, edx
mov esi, dword [esp + 0x268]
mov ebp, dword [esp + 0x14]
je 0x5e82d8
test eax, eax
je 0x5e82d8
mov ecx, dword [edx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edx + 8], ecx
mov dword [edx + 0xc], eax
cmp dword [esp + 0x84], 0
je 0x5ea0e9
mov edx, 0x20
mov ecx, edi
push 0
push 4
push 0
push 0xb
call fcn.005f2690
add esp, 0x10
jmp 0x5ea0e9
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e8330
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5e8338
mov dword [esi], 2
xor edi, edi
mov eax, dword [esp + 0x3c]
lea ebx, [eax + 8]
mov edx, 0x23
mov ecx, esi
push 0
push 0x8c
push 0
push 1
call fcn.005f2690
add esp, 0x10
cmp dword [esp + 0x15c], 0
je 0x5e837a
mov edx, 0x20
mov ecx, esi
push 0
push 1
push 0
push 4
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x3c]
mov al, byte [eax + 0x27]
shr al, 7
movzx eax, al
sub esp, 4
lea ebp, [esp + 0x190]
lea ecx, [esp + 0x50]
mov edx, ebx
push ebp
push 1
push eax
call fcn.00603240
add esp, 0x10
xor ebp, ebp
test eax, eax
jne 0x5e8931
xor ebp, ebp
cmp dword [esi], 0
jne 0x5e886d
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e83d2
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e83fd
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e8865
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [esi + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], 0xff
xor ebp, ebp
cmp dword [esi], 0
jne 0x5e886d
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e874f
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e877d
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ecx, eax
test eax, eax
je 0x5e84d7
mov eax, dword [edi + 0x30]
mov dword [ecx], eax
mov dword [edi + 0x30], ecx
mov dword [ecx + 4], 0x10
add ecx, 8
mov esi, ecx
mov edx, esi
mov dword [edx], 0
mov dword [edx + 8], 0x6000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edx
mov dword [edi + 0x1c], edx
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e84a7
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e84ce
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e84d7
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, esi
jmp 0x5e84df
mov dword [edi], 2
xor eax, eax
mov dword [esp + 0x18], eax
mov edx, 0x20
mov ecx, edi
push 0
push 8
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 4
push 0x81
push 0
push 3
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 8
push 0x81
push 0
push 1
call fcn.005f2690
add esp, 0x10
xor esi, esi
cmp dword [edi], 0
jne 0x5e855e
mov edx, 1
mov ecx, edi
push 0
push 3
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e8553
mov byte [eax], 0x3b
xor esi, esi
cmp dword [edi], 0
je 0x5e8640
sub esp, 8
mov edx, 0x20
mov ecx, edi
push 3
push 3
call fcn.005ffe50
add esp, 0x10
cmp dword [edi], 0
jne 0x5e85ba
mov edx, 0x21
mov ecx, edi
push 0
push 3
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e8597
or byte [eax], 0x20
cmp dword [edi], 0
jne 0x5e85ba
mov edx, 1
mov ecx, edi
push 0
push 3
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e85ba
mov byte [eax], 0x2b
mov dword [esp + 0x1c], esi
mov ecx, edi
call fcn.005f3650
mov dword [esp + 0x10], eax
xor ebp, ebp
cmp dword [edi], 0
jne 0x5e9800
mov edx, 0x11
mov ecx, edi
push 0
push 0xc
push 2
push 0x40
call fcn.005fdd80
add esp, 0x10
xor ebp, ebp
cmp dword [edi], 0
jne 0x5e9800
mov edx, 1
mov ecx, edi
push 0
push 0xb
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e8614
mov byte [eax], 0x3b
xor ebp, ebp
cmp dword [edi], 0
jne 0x5e9800
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e8f02
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e8f30
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e865a
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e8689
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ecx, eax
test eax, eax
je 0x5e8742
mov eax, dword [edi + 0x30]
mov dword [ecx], eax
mov dword [edi + 0x30], ecx
mov dword [ecx + 4], 0x10
add ecx, 8
mov ebx, ecx
mov edx, ebx
mov dword [edx], 0
mov dword [edx + 8], 0xa000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edx
mov dword [edi + 0x1c], edx
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e86c6
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e86ed
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e8742
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [edi], 0
mov esi, ebx
jne 0x5e855e
mov edx, 0x11
mov ecx, edi
push 0
push 1
push 4
push 0x40
call fcn.005fdd80
add esp, 0x10
cmp dword [edi], 0
jne 0x5e855e
mov edx, 1
mov ecx, edi
push 0
push 1
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e873b
mov byte [eax], 0x3b
mov esi, ebx
jmp 0x5e855e
mov dword [edi], 2
xor esi, esi
jmp 0x5e855e
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5e8865
mov eax, dword [esi + 0x30]
mov dword [ebp], eax
mov dword [esi + 0x30], ebp
mov dword [ebp + 4], 0x10
add ebp, 8
mov dword [ebp], 0
mov dword [ebp + 8], 0x4000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebp
mov dword [esi + 0x1c], ebp
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e8837
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e885e
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5e8f73
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x30]
mov dword [ebx], eax
mov dword [ecx + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0xa000
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 0x1c]
lea ecx, [edx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [edx + 0x1c], ebx
add dword [edx + 0x48], 6
mov ecx, dword [edx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e8ec8
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e8ef7
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e8865
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5e886d
mov dword [esi], 2
xor ebp, ebp
mov edx, 0x20
mov ecx, esi
push 0xff
push 0x40
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov ecx, esi
call fcn.005f3650
test ebp, ebp
je 0x5e88a5
test eax, eax
je 0x5e88a5
mov ecx, dword [ebp + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
sub esp, 8
mov edx, 0x65
mov ecx, esi
push 7
push 0x40
push 0
push 1
push 0
push 3
call fcn.005f2d00
add esp, 0x20
cmp dword [esi], 0
jne 0x5e88e6
mov edx, 0x21
mov ecx, esi
push 0
push 1
push 3
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e88e6
or byte [eax], 0x28
mov edx, 0x21
mov ecx, esi
push ebx
push 0x81
push 0
push 1
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
je 0x5e899f
sub esp, 8
mov edx, 0x265
mov ecx, esi
push 0
push 3
push 0
push 1
push 0
push 0
call fcn.005f2d00
add esp, 0x20
xor ebp, ebp
cmp dword [esi], 0
je 0x5e89c0
cmp dword [esp + 0x15c], 0
je 0x5e8952
mov edx, 0x20
mov ecx, esi
push 0
push 4
push 0
push 1
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
jne 0x5e896e
mov edx, 0x11
mov ecx, esi
push 0
push 0xc
push 2
push 0x40
call fcn.005fdd80
add esp, 0x10
cmp dword [esp + 0x15c], 0
je 0x5e8d21
cmp dword [esi], 0
jne 0x5e8c48
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e89e1
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e8a0c
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e8a48
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e8a73
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e8ace
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e8afc
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e8c42
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [esi + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], 0xd800
cmp dword [esi], 0
jne 0x5e8c48
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e8b92
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e8bbf
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e8ebd
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [esi + 0x48], 5
mov byte [eax + 1], 0xbd
mov dword [eax + 2], 1
mov edx, 0x21
mov ecx, esi
push 0
push 0xe
push 0
push 3
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e8908
or byte [eax], 0x20
mov edx, 1
mov ecx, esi
push 0
push 3
push 0
push 0xe
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e8908
mov byte [eax], 0x89
jmp 0x5e8908
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5e8b77
mov eax, dword [esi + 0x30]
mov dword [ebp], eax
mov dword [esi + 0x30], ebp
mov dword [ebp + 4], 0x10
add ebp, 8
mov dword [ebp], 0
mov dword [ebp + 8], 0x2000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebp
mov dword [esi + 0x1c], ebp
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e8b38
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e8b5f
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e8b77
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esp + 0x15c], 0
jne 0x5e893b
jmp 0x5e8952
mov dword [esi], 2
xor ebp, ebp
cmp dword [esp + 0x15c], 0
jne 0x5e893b
jmp 0x5e8952
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5e8c42
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x4000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [esi + 0x1c], ebx
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e8bfa
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e8c21
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e8c42
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esp + 0x10], 0
je 0x5e8c48
mov eax, dword [ebx + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [ebx + 8], eax
mov eax, dword [esp + 0x10]
mov dword [ebx + 0xc], eax
jmp 0x5e8c48
mov dword [esi], 2
sub esp, 8
mov edx, 0x65
mov ecx, esi
push 0xfc00
push 0x40
push 0
push 1
push 0
push 1
call fcn.005f2d00
add esp, 0x20
cmp dword [esi], 0
jne 0x5e8cc5
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e8c88
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e8cb3
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e8eb2
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [esi + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], 0xd800
sub esp, 8
mov edx, 0x20
mov ecx, esi
push 0
push 1
call fcn.005ffe50
add esp, 0x10
cmp dword [esi], 0
jne 0x5e8d2a
mov edx, 0x21
mov ecx, esi
push 0
push 1
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e8cfe
or byte [eax], 0x20
cmp dword [esi], 0
jne 0x5e8d2a
mov edx, 1
mov ecx, esi
push 0
push 1
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e8d21
mov byte [eax], 3
cmp dword [esi], 0
je 0x5e8dc6
test ebp, ebp
je 0x5e8d48
mov ecx, esi
call fcn.005f3650
test eax, eax
je 0x5e8d48
mov ecx, dword [ebp + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
mov ebx, dword [esp + 0x18c]
test ebx, ebx
mov ebp, dword [esp + 0x14]
je 0x5e8d7e
mov ecx, esi
call fcn.005f3650
test eax, eax
je 0x5e8d77
mov ecx, dword [ebx]
test ecx, ecx
je 0x5e8d77
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x5e8d5e
mov ecx, esi
call fcn.005f3650
test edi, edi
je 0x5e8d9c
test eax, eax
je 0x5e8d9c
mov ecx, dword [edi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edi + 8], ecx
mov dword [edi + 0xc], eax
cmp dword [esp + 0x84], 0
je 0x5ea0e2
mov edx, 0x20
mov ecx, esi
push 0
push 5
push 0
push 0xb
call fcn.005f2690
add esp, 0x10
jmp 0x5ea0e2
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e8de0
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e8e0d
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5e8e9f
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x30000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [esi + 0x1c], ebx
add dword [esi + 0x48], 5
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e8e48
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e8e6f
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e8e9f
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esp + 0x10], 0
je 0x5e8d2a
mov eax, dword [ebx + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [ebx + 8], eax
mov eax, dword [esp + 0x10]
mov dword [ebx + 0xc], eax
test ebp, ebp
jne 0x5e8d2e
jmp 0x5e8d48
mov dword [esi], 2
test ebp, ebp
jne 0x5e8d2e
jmp 0x5e8d48
mov dword [esi], 2
jmp 0x5e8cc5
mov dword [esi], 2
jmp 0x5e8908
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e8f73
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov esi, dword [esp + 0xc]
jmp 0x5e8f7f
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5e97f8
mov eax, dword [edi + 0x30]
mov dword [ebp], eax
mov dword [edi + 0x30], ebp
mov dword [ebp + 4], 0x10
add ebp, 8
mov dword [ebp], 0
mov dword [ebp + 8], 0x6000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebp
mov dword [edi + 0x1c], ebp
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e9714
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e973f
mov esi, dword [esp + 0xc]
mov dword [esi], 2
xor ebx, ebx
mov edx, 0x20
mov ecx, esi
push 0
push 1
push 0
push 0xb
call fcn.005f2690
add esp, 0x10
mov ecx, esi
call fcn.005f3650
test ebx, ebx
je 0x5e8fb4
test eax, eax
je 0x5e8fb4
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
mov ecx, esi
call fcn.005f3650
mov ebx, eax
xor eax, eax
cmp dword [esi], 0
mov dword [esp + 0xc], esi
mov dword [esp + 0x30], ebx
jne 0x5e90c9
mov edx, 1
mov ecx, esi
push 0
push 0xb
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e8fee
mov byte [eax], 0x3b
xor eax, eax
cmp dword [esi], 0
jne 0x5e90c9
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e9013
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e9040
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test eax, eax
je 0x5e90bd
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x6000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [esp + 0x2c], ebx
mov dword [esi + 0x1c], ebx
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e907f
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e90aa
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e90b9
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x2c]
jmp 0x5e90c5
mov esi, dword [esp + 0xc]
mov dword [esi], 2
xor eax, eax
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x18]
add eax, eax
mov edx, 0x21
mov ecx, esi
push eax
push 0x8c
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x21
mov ecx, esi
push ebp
push 0x81
push 0
push 1
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
jne 0x5e9155
mov edx, 1
mov ecx, esi
push 0
push 1
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e9128
mov byte [eax], 3
cmp dword [esi], 0
jne 0x5e9155
mov edx, 0x11
mov ecx, esi
push 0
push 1
push 0
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e914c
or byte [eax + 1], 0x38
cmp dword [esi], 0
je 0x5e92e4
test ebx, ebx
setne al
mov dword [esp + 0x18], eax
mov eax, edi
mov dword [esp + 0x10], eax
test edi, edi
mov ebx, dword [esp + 0x1c]
js 0x5e9ca6
mov eax, dword [esp + 0x10]
lea esi, [eax + eax]
mov edx, 0x23
mov edi, dword [esp + 0xc]
mov ecx, edi
push esi
push 0x8c
push 0
push 1
call fcn.005f2690
add esp, 0x10
cmp dword [edi], 0
jne 0x5e91b2
mov edx, 0x11
mov ecx, dword [esp + 0xc]
push 0
push 0xc
push 2
push 0x40
call fcn.005fdd80
add esp, 0x10
lea ebx, [esi + esi*2]
movzx eax, word [esp + ebx*2 + 0x18c]
mov edi, ebx
or edi, 1
cmp eax, 1
movzx edx, word [esp + edi*2 + 0x18c]
jne 0x5e9217
mov eax, dword [esp + 0xc]
cmp dword [eax], 0
mov ebx, dword [esp + 0x1c]
jne 0x5e9ca6
mov esi, edx
mov eax, edx
sub eax, 0xffffff80
cmp eax, 0x100
jb 0x5e92b7
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e932a
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e9359
movzx ebp, word [esp + ebx*2 + 0x190]
xor bp, dx
movzx esi, bp
lea eax, [esi + 0xffff]
test eax, esi
je 0x5e9271
xor edi, edi
mov ecx, dword [esp + 0xc]
cmp dword [ecx], 0
jne 0x5e97cb
mov esi, edx
mov eax, edx
sub eax, 0xffffff80
cmp eax, 0x100
jb 0x5e9305
mov ecx, dword [ecx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e951f
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e954e
mov eax, dword [esp + 0xc]
cmp dword [eax], 0
mov ebx, dword [esp + 0x1c]
jne 0x5e9ca6
mov eax, esi
sub eax, 0xffffff80
cmp eax, 0x100
jb 0x5e93f2
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e9682
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e96b1
mov edx, 0x11
mov ecx, dword [esp + 0xc]
push 0
push 1
push esi
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e941b
or byte [eax + 1], 0x38
mov ecx, dword [esp + 0xc]
jmp 0x5e936b
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e937d
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e93af
mov edx, 0x11
push 0
push 1
push esi
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e9560
or byte [eax + 1], 0x38
jmp 0x5e9560
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e9c98
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
mov ecx, dword [esp + 0xc]
add dword [ecx + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], esi
cmp dword [ecx], 0
mov ebx, dword [esp + 0x1c]
jne 0x5e9ca6
jmp 0x5e942c
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5e9590
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x30]
mov dword [ebp], eax
mov dword [ecx + 0x30], ebp
mov dword [ebp + 4], 0x10
add ebp, 8
mov dword [ebp], 0
mov dword [ebp + 8], 0x2000
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 0x1c]
lea ecx, [edx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebp
mov dword [edx + 0x1c], ebp
add dword [edx + 0x48], 6
mov ecx, dword [edx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e944d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e947c
mov edx, 0x11
mov ecx, dword [esp + 0xc]
push 0
push 1
push esi
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e96c3
or byte [eax + 1], 8
jmp 0x5e96c3
mov eax, dword [esp + 0xc]
cmp dword [eax], 0
mov ebx, dword [esp + 0x1c]
jne 0x5e9ca6
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e94a6
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e94d8
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e9590
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esp + 0x30], 0
je 0x5e95fe
mov eax, dword [ebp + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [ebp + 8], eax
mov eax, dword [esp + 0x30]
mov dword [ebp + 0xc], eax
mov al, 1
jmp 0x5e915a
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5e9c98
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x30]
mov dword [ebp], eax
mov dword [ecx + 0x30], ebp
mov dword [ebp + 4], 0x10
add ebp, 8
mov dword [ebp], 0
mov dword [ebp + 8], 0x2000
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 0x1c]
lea ecx, [edx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebp
mov dword [edx + 0x1c], ebp
add dword [edx + 0x48], 6
mov ecx, dword [edx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e95a3
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e95d2
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e97bf
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
mov ecx, dword [esp + 0xc]
add dword [ecx + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], esi
xor edi, edi
mov ecx, dword [esp + 0xc]
cmp dword [ecx], 0
jne 0x5e97cb
mov eax, dword [ecx + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e960b
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e963c
mov eax, dword [esp + 0xc]
mov dword [eax], 2
mov ebx, dword [esp + 0x30]
jmp 0x5e9155
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e9c98
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp byte [esp + 0x18], 0
mov ebx, dword [esp + 0x1c]
je 0x5e9ca6
mov eax, dword [ebp + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [ebp + 8], eax
mov eax, dword [esp + 0x30]
mov dword [ebp + 0xc], eax
jmp 0x5e9ca6
mov dword [esp + 0x18], 0
jmp 0x5e915e
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5e97bf
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x30]
mov dword [edi], eax
mov dword [ecx + 0x30], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x1c]
lea ebp, [ecx + 0xc]
test eax, eax
cmove eax, ebp
mov dword [eax], edi
mov dword [ecx + 0x1c], edi
add dword [ecx + 0x48], 6
mov ecx, dword [ecx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e9749
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e9774
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e9c98
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
mov ecx, dword [esp + 0xc]
add dword [ecx + 0x48], 5
mov byte [eax + 1], 0xd
mov dword [eax + 2], esi
mov eax, dword [esp + 0xc]
cmp dword [eax], 0
mov ebx, dword [esp + 0x1c]
jne 0x5e9ca6
or bp, word [esp + edi*2 + 0x18c]
movzx esi, bp
mov eax, esi
sub eax, 0xffffff80
cmp eax, 0x100
jb 0x5e9b67
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e9b89
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e9bb8
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e97f8
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5e9800
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e97bf
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov ecx, dword [esp + 0xc]
cmp dword [ecx], 0
jne 0x5e97cb
movzx esi, word [esp + ebx*2 + 0x190]
mov eax, esi
sub eax, 0xffffff80
cmp eax, 0x100
jb 0x5e9bf9
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5f1cf8
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5f1d27
mov ecx, dword [esp + 0xc]
mov dword [ecx], 2
xor edi, edi
call fcn.005f3650
test edi, edi
mov ebx, dword [esp + 0x1c]
je 0x5e9ca6
test eax, eax
je 0x5e9ca6
mov ecx, dword [edi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edi + 8], ecx
mov dword [edi + 0xc], eax
jmp 0x5e9ca6
mov dword [edi], 2
xor ebp, ebp
mov edx, 0x23
mov ecx, edi
push 0xfffffffffffffffc
push 0x8c
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x23
mov ecx, edi
push 0xfffffffffffffffe
push 0x8c
push 0
push 3
call fcn.005f2690
add esp, 0x10
cmp dword [edi], 0
jne 0x5e99b3
mov eax, dword [esp + 0xd4]
movzx esi, ah
mov eax, esi
sub eax, 0xffffff80
cmp eax, 0x100
jb 0x5e986d
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e9896
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e98c1
mov edx, 0x11
mov ecx, edi
push 0
push 1
push esi
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e98cf
or byte [eax + 1], 0x38
cmp dword [edi], 0
jne 0x5e99b3
jmp 0x5e98d8
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e99ad
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [edi + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], esi
cmp dword [edi], 0
jne 0x5e99b3
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e98f2
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e991f
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5e99ad
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e995a
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e9981
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e99ad
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esp + 0x10], 0
je 0x5e9b57
mov eax, dword [esi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [esi + 8], eax
mov eax, dword [esp + 0x10]
mov dword [esi + 0xc], eax
mov bl, 1
cmp dword [edi], 0
jne 0x5e99ef
jmp 0x5e99c0
mov dword [edi], 2
cmp dword [esp + 0x10], 0
setne bl
cmp dword [edi], 0
jne 0x5e99ef
movzx eax, byte [esp + 0xd4]
mov edx, 0x11
mov ecx, edi
push 0
push 3
push eax
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e99e6
or byte [eax + 1], 0x38
cmp dword [edi], 0
je 0x5e9a7e
mov ecx, edi
call fcn.005f3650
test ebp, ebp
je 0x5e9a0d
test eax, eax
je 0x5e9a0d
mov ecx, dword [ebp + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
mov ecx, edi
call fcn.005f3650
mov edx, dword [esp + 0x1c]
test edx, edx
mov esi, dword [esp + 0x268]
je 0x5e9a36
test eax, eax
je 0x5e9a36
mov ecx, dword [edx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edx + 8], ecx
mov dword [edx + 0xc], eax
mov ecx, edi
call fcn.005f3650
mov edx, dword [esp + 0x18]
test edx, edx
mov ebp, dword [esp + 0x14]
je 0x5e9a5c
test eax, eax
je 0x5e9a5c
mov ecx, dword [edx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edx + 8], ecx
mov dword [edx + 0xc], eax
cmp dword [esp + 0x84], 0
je 0x5ea0e9
mov edx, 0x20
mov ecx, edi
push 0
push 4
push 0
push 0xb
jmp 0x5e82f5
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e9a98
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e9ac5
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5e9b4c
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e9b00
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e9b27
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e9b4c
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
test bl, bl
je 0x5e99ef
mov eax, dword [esi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [esi + 8], eax
mov eax, dword [esp + 0x10]
mov dword [esi + 0xc], eax
jmp 0x5e99ef
mov dword [edi], 2
jmp 0x5e99ef
xor ebx, ebx
cmp dword [edi], 0
jne 0x5e99ef
jmp 0x5e99c0
mov edx, 0x11
mov ecx, dword [esp + 0xc]
push 0
push 1
push esi
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e9bca
or byte [eax + 1], 0x38
jmp 0x5e9bca
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e9c98
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
mov ecx, dword [esp + 0xc]
add dword [ecx + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], esi
mov eax, dword [esp + 0xc]
cmp dword [eax], 0
mov ebx, dword [esp + 0x1c]
jne 0x5e9ca6
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e9c22
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e9c50
mov edx, 0x11
mov ecx, dword [esp + 0xc]
push 0
push 1
push esi
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5f1d39
or byte [eax + 1], 0x38
jmp 0x5f1d39
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5e9c98
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x30]
mov dword [ebp], eax
mov dword [ecx + 0x30], ebp
mov dword [ebp + 4], 0x10
add ebp, 8
mov dword [ebp], 0
mov dword [ebp + 8], 0x2000
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 0x1c]
lea ecx, [edx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebp
mov dword [edx + 0x1c], ebp
add dword [edx + 0x48], 6
mov ecx, dword [edx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
jbe 0x5e9513
sub esp, 0xc
push 0x1000
jmp 0x5e95ab
mov eax, dword [esp + 0xc]
mov dword [eax], 2
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x10]
test edi, edi
mov esi, dword [esp + 0xc]
je 0x5e9eee
mov eax, dword [esp + 0x15c]
test eax, eax
je 0x5e9eee
mov edx, 0x23
mov ecx, esi
test edi, edi
js 0x5e9ce5
push 0xfffffffffffffffe
push 0x8c
push 0
push 1
call fcn.005f2690
add esp, 0x10
jmp 0x5e9d01
push 0
push 0x8c
push 0
push 1
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
je 0x5e9dbc
sub esp, 8
mov edx, 0x65
mov ecx, esi
push 0xfc00
push 0x40
push 0
push 1
push 0
push 1
call fcn.005f2d00
add esp, 0x20
cmp dword [esi], 0
jne 0x5e9d83
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x5e9d41
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e9d6c
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e9def
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [esi + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], 0xdc00
cmp dword [esi], 0
je 0x5e9dd5
test edi, edi
jns 0x5e9eee
cmp dword [esi], 0
jne 0x5e9eee
mov edx, 0x11
mov ecx, esi
push 0
push 0xc
push 2
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e9eee
or byte [eax + 1], 0x28
jmp 0x5e9eee
mov edx, 0x11
mov ecx, esi
push 0
push 0xc
push 2
push 0x40
call fcn.005fdd80
jmp 0x5e9ce0
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e9dff
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5e9e31
mov dword [esi], 2
test edi, edi
jns 0x5e9eee
jmp 0x5e9d8b
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5e9ed4
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x30]
mov dword [ebp], eax
mov dword [ecx + 0x30], ebp
mov dword [ebp + 4], 0x10
add ebp, 8
mov dword [ebp], 0
mov dword [ebp + 8], 0
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 0x1c]
lea ecx, [edx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebp
mov dword [edx + 0x1c], ebp
add dword [edx + 0x48], 6
mov ecx, dword [edx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5e9e71
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5e9e9c
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5e9ed4
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp byte [esp + 0x18], 0
mov esi, dword [esp + 0xc]
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x10]
je 0x5e9d83
mov eax, dword [ebp + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [ebp + 8], eax
mov eax, dword [esp + 0x30]
mov dword [ebp + 0xc], eax
test edi, edi
jns 0x5e9eee
jmp 0x5e9d8b
mov esi, dword [esp + 0xc]
mov dword [esi], 2
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x10]
test edi, edi
js 0x5e9d8b
test edi, edi
mov ebp, dword [esp + 0x14]
js 0x5e9f1a
cmp dword [esi], 0
jne 0x5e9f1a
mov edx, 0x11
mov ecx, esi
push 0
push 0xc
push 2
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e9f1a
or byte [eax + 1], 0x28
mov ecx, esi
call fcn.005f3650
mov edx, dword [esp + 0x2c]
test edx, edx
je 0x5e9f3c
test eax, eax
je 0x5e9f3c
mov ecx, dword [edx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edx + 8], ecx
mov dword [edx + 0xc], eax
mov eax, dword [esp + 0x84]
test eax, eax
je 0x5e9fcb
mov edx, 0x20
mov ecx, esi
push eax
push 0x8d
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, esi
push 0
push 4
push 0
push 0xb
call fcn.005f2690
add esp, 0x10
mov edi, esi
xor esi, esi
cmp dword [edi], 0
jne 0x5ea0ad
mov edx, 1
mov ecx, edi
push 0
push 1
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5e9fa6
mov byte [eax], 0x3b
xor esi, esi
cmp dword [edi], 0
jne 0x5ea0ad
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5e9ff3
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ea024
cmp dword [esi], 0
jne 0x5ea0e2
add ebx, ebx
mov edx, 0x11
mov ecx, dword [esp + 0xc]
push 0
push 0xb
push ebx
push 0x40
call fcn.005fdd80
add esp, 0x10
jmp 0x5ea0e2
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5ea09d
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x30]
mov dword [esi], eax
mov dword [ecx + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0xa000
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 0x1c]
lea ecx, [edx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edx + 0x1c], esi
add dword [edx + 0x48], 6
mov ecx, dword [edx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ea063
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ea08e
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ea09d
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov ebp, dword [esp + 0x14]
mov edi, dword [esp + 0xc]
jmp 0x5ea0ad
mov edi, dword [esp + 0xc]
mov dword [edi], 2
xor esi, esi
mov ebp, dword [esp + 0x14]
mov edx, 0x20
mov ecx, edi
push 0
push 1
push 0
push 0xc
call fcn.005f2690
add esp, 0x10
mov ecx, edi
call fcn.005f3650
test esi, esi
je 0x5ea0e2
test eax, eax
je 0x5ea0e2
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
mov esi, dword [esp + 0x268]
xor ecx, ecx
test esi, esi
je 0x5ea1ca
mov eax, dword [esp + 0x74]
test eax, eax
mov dword [esp + 0x10], ecx
je 0x5ea298
mov ecx, dword [esp + 0x260]
movzx edx, word [ecx + 0x1a]
mov dword [esp + 0xc], edx
mov ebx, dword [ecx + 0xc]
mov esi, dword [esp + 0x4c]
mov edx, 0x20
mov ecx, esi
push eax
push 0x8d
push 0
push 3
call fcn.005f2690
add esp, 0x10
xor edi, edi
cmp dword [esi], 0
mov eax, 0
jne 0x5ea41f
mov edx, 1
mov ecx, esi
push 0x3e8
push 0x8c
push 0
push 1
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea2ac
mov byte [eax], 0x8d
mov eax, dword [esi]
xor edi, edi
test eax, eax
mov eax, 0
jne 0x5ea41f
mov edx, 1
mov ecx, esi
push 0
push 0xb
push 0
push 1
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea199
mov byte [eax], 0x3b
xor edi, edi
cmp dword [esi], 0
mov eax, 0
jne 0x5ea41f
mov edi, dword [esi + 0x30]
mov ecx, dword [edi + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ea34f
lea eax, [edi + ecx + 8]
mov dword [edi + 4], edx
jmp 0x5ea37a
mov eax, dword [esp + 0x3c]
cmp dword [eax + 0x28], 0
je 0x5ea2a5
xor ecx, ecx
mov eax, dword [esp + 0x260]
test byte [eax + 0xb], 4
jne 0x5ea0f3
mov edx, 0x20
mov ecx, ebp
push 0xffffffffffffffff
push 0x40
push 0
push 1
call fcn.005f2690
add esp, 0x10
xor ecx, ecx
cmp dword [ebp], 0
jne 0x5ea0f3
mov eax, dword [esp + 0x3c]
mov esi, dword [eax + 0x28]
add esi, esi
mov edx, 1
mov ecx, ebp
push esi
push 0x8c
push 0
push 3
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea2f4
mov byte [eax], 0x8d
mov eax, dword [ebp]
xor ecx, ecx
test eax, eax
jne 0x5ea0f3
mov edx, 1
mov ecx, ebp
push 0
push 0xb
push 0
push 3
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea266
mov byte [eax], 0x3b
xor ecx, ecx
cmp dword [ebp], 0
jne 0x5ea0f3
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ea9af
lea ecx, [eax + ecx + 8]
mov dword [eax + 4], edx
mov eax, ecx
jmp 0x5ea9dc
mov dword [esp + 0x2c], 0
jmp 0x5eac91
xor ecx, ecx
jmp 0x5ea0f3
mov eax, dword [esi]
cmp eax, 4
jne 0x5ea16c
mov edx, 1
mov ecx, esi
push 0
push 1
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea33d
mov byte [eax], 0x89
mov edx, 0x11
mov ecx, esi
push 0
push 1
push 0x3e8
push 0x40
call fcn.005fdd80
add esp, 0x10
jmp 0x5ea16a
mov eax, dword [ebp]
cmp eax, 4
jne 0x5ea23e
mov edx, 1
mov ecx, ebp
push 0
push 3
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea99e
mov byte [eax], 0x89
mov edx, 0x11
mov ecx, ebp
push 0
push 3
push esi
push 0x40
call fcn.005fdd80
add esp, 0x10
jmp 0x5ea23b
xor edi, edi
cmp dword [esi], 0
mov eax, 0
jne 0x5ea41f
jmp 0x5ea2d5
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ea415
mov ecx, dword [esi + 0x30]
mov dword [eax], ecx
mov dword [esi + 0x30], eax
mov dword [eax + 4], 0x10
add eax, 8
mov dword [eax], 0
mov dword [eax + 8], 0x4000
mov ecx, dword [esi + 0x1c]
lea edi, [esi + 0xc]
test ecx, ecx
cmove ecx, edi
mov dword [ecx], eax
mov ebp, eax
mov dword [esi + 0x1c], eax
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ea3b7
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ea3de
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ea415
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esi], 0
jne 0x5ea40f
mov edx, 1
mov ecx, esi
push 0
push 3
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea406
mov byte [eax], 0x3b
cmp dword [esi], 0
je 0x5eaa1c
xor eax, eax
mov edi, ebp
jmp 0x5ea41f
mov dword [esi], 2
xor edi, edi
xor eax, eax
test bl, 0x10
mov dword [esp + 0x18], eax
jne 0x5ea441
mov edx, 0x20
mov ecx, esi
push 0
push 0xc
push 0
push 1
call fcn.005f2690
add esp, 0x10
jmp 0x5ea4a7
cmp dword [esi], 0
jne 0x5ea4a7
mov edx, 1
mov ecx, esi
push 2
push 0x8c
push 0
push 1
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea469
mov byte [eax], 0x8d
jmp 0x5ea4a7
cmp dword [esi], 4
jne 0x5ea4a7
mov edx, 1
mov ecx, esi
push 0
push 1
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea4a2
mov byte [eax], 0x89
mov edx, 0x11
mov ecx, esi
push 0
push 1
push 2
push 0x40
call fcn.005fdd80
jmp 0x5ea43c
cmp dword [esi], 0
je 0x5ea48c
mov dword [esp + 0x1c], edi
mov ecx, esi
call fcn.005f3650
mov dword [esp + 0x30], eax
xor edi, edi
cmp dword [esi], 0
jne 0x5ea59e
mov edx, 1
mov ecx, esi
push 0
push 0xb
push 0
push 1
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea4df
mov byte [eax], 0x3b
xor edi, edi
cmp dword [esi], 0
jne 0x5ea59e
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ea504
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ea52d
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ea596
mov eax, dword [esi + 0x30]
mov dword [edi], eax
mov dword [esi + 0x30], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x6000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [esi + 0x1c], edi
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ea568
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ea58f
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ea596
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5ea59e
mov dword [esi], 2
xor edi, edi
mov dword [esp + 0x2c], edi
mov edx, 0x23
mov ecx, esi
push 0
push 0x81
push 0
push 3
call fcn.005f2690
add esp, 0x10
test bl, bl
jns 0x5ea616
mov edx, dword [esp + 0xc]
cmp edx, 0xff
mov ebp, edx
ja 0x5ea5e1
mov eax, dword [esp + 0xa0]
movzx ebp, byte [eax + edx]
cmp edx, 0x80
jb 0x5ea612
cmp dword [esp + 0x15c], 0
je 0x5ea612
mov eax, edx
shr eax, 7
movzx eax, byte [eax + 0x6f7fe0]
shl eax, 7
mov ecx, edx
and ecx, 0x7f
or ecx, eax
movzx eax, word [ecx + ecx + 0x6fa1e0]
mov ebp, dword [eax*8 + 0x6f6964]
add ebp, edx
cmp ebp, edx
jne 0x5ea678
xor ebx, ebx
cmp dword [esi], 0
mov edi, 0
jne 0x5eabf1
mov edx, 0x11
mov ecx, esi
push 0
push 3
push dword [esp + 0x14]
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea647
or byte [eax + 1], 0x38
xor ebx, ebx
cmp dword [esi], 0
mov edi, 0
jne 0x5eabf1
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ea778
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ea7a5
mov eax, ebp
xor eax, dword [esp + 0xc]
lea ecx, [eax - 1]
test ecx, eax
mov ecx, dword [esi]
je 0x5ea6e8
xor ebx, ebx
test ecx, ecx
mov edi, 0
jne 0x5eabf1
mov edx, 0x11
mov ecx, esi
push 0
push 3
push dword [esp + 0x14]
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea6b7
or byte [eax + 1], 0x38
xor ebx, ebx
cmp dword [esi], 0
mov edi, 0
jne 0x5eabf1
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ea85c
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ea889
xor ebx, ebx
test ecx, ecx
mov edi, 0
jne 0x5eabf1
mov edx, 0x11
mov ecx, esi
push 0
push 3
push eax
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea715
or byte [eax + 1], 8
xor ebx, ebx
cmp dword [esi], 0
mov edi, 0
jne 0x5eabf1
or ebp, dword [esp + 0xc]
mov edx, 0x11
mov ecx, esi
push 0
push 3
push ebp
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ea747
or byte [eax + 1], 0x38
xor ebx, ebx
cmp dword [esi], 0
mov edi, 0
jne 0x5eabf1
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5eab7b
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5eaba4
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5eabe7
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [esi + 0x1c], ebx
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ea7e0
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ea80b
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5eabe7
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
xor edi, edi
mov word [eax], pe_nt_image_headers32
cmp dword [esi], 0
jne 0x5eabf1
mov edx, 0x11
mov ecx, esi
push 0
push 1
push 2
push 0x40
call fcn.005fdd80
add esp, 0x10
cmp dword [esi], 0
jne 0x5eabf1
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ea92d
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ea95b
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5eabe7
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0
mov eax, dword [esi + 0x1c]
lea edi, [esi + 0xc]
test eax, eax
cmove eax, edi
mov dword [eax], ebx
mov dword [esi + 0x1c], ebx
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ea8c4
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ea8ef
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5eabe7
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esi], 0
jne 0x5eabef
mov edx, 0x11
mov ecx, esi
push 0
push 3
push ebp
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ec432
or byte [eax + 1], 0x38
cmp dword [esi], 0
jne 0x5eabef
jmp 0x5ec43b
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x5eaabe
mov eax, dword [esi + 0x30]
mov dword [ebp], eax
mov dword [esi + 0x30], ebp
mov dword [ebp + 4], 0x10
add ebp, 8
mov dword [ebp], 0
mov dword [ebp + 8], 0x30000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebp
mov dword [esi + 0x1c], ebp
add dword [esi + 0x48], 5
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5eaa3d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5eaa64
xor ecx, ecx
cmp dword [ebp], 0
jne 0x5ea0f3
jmp 0x5ea322
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5eaac9
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
mov dword [eax], edx
mov dword [ecx], eax
mov dword [eax + 4], 0x10
add eax, 8
mov dword [eax], 0
mov dword [eax + 8], 0x8000
mov edx, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test edx, edx
cmovne ecx, edx
mov dword [ecx], eax
mov esi, eax
mov dword [ebp + 0x1c], eax
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5eaa89
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5eaab2
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5eaad7
lea ecx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5eab04
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5eaabe
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x5eabf1
mov eax, dword [ebp + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], ecx
jmp 0x5eabf1
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5eaac9
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov ecx, esi
jmp 0x5ea0f3
mov dword [esi], 2
jmp 0x5eabf1
mov dword [ebp], 2
xor ecx, ecx
jmp 0x5ea0f3
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ecx, eax
test eax, eax
je 0x5ec427
mov eax, dword [esi + 0x30]
mov dword [ecx], eax
mov dword [esi + 0x30], ecx
mov dword [ecx + 4], 0x10
add ecx, 8
mov dword [ecx], 0
mov dword [ecx + 8], 0x4000
mov eax, dword [esi + 0x1c]
test eax, eax
cmovne edi, eax
mov dword [edi], ecx
mov dword [esp + 0x18], ecx
mov dword [esi + 0x1c], ecx
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5eab40
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5eab6b
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ec427
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov edi, ebp
mov eax, dword [esp + 0x18]
jmp 0x5ea41f
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5eabe7
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [esi + 0x1c], ebx
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
jbe 0x5ea7d7
sub esp, 0xc
push 0x1000
jmp 0x5ea7e8
mov dword [esi], 2
xor ebx, ebx
xor edi, edi
mov ecx, esi
call fcn.005f3650
test ebx, ebx
je 0x5eac0f
test eax, eax
je 0x5eac0f
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
test edi, edi
mov ebp, dword [esp + 0x14]
je 0x5eac31
mov ecx, esi
call fcn.005f3650
test eax, eax
je 0x5eac31
mov ecx, dword [edi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edi + 8], ecx
mov dword [edi + 0xc], eax
mov edx, 0x20
mov ecx, esi
push 0
push 1
push dword [esp + 0x7c]
push 0x8d
call fcn.005f2690
add esp, 0x10
mov ecx, esi
call fcn.005f3650
mov edx, dword [esp + 0x18]
test edx, edx
je 0x5eac6f
test eax, eax
je 0x5eac6f
mov ecx, dword [edx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edx + 8], ecx
mov dword [edx + 0xc], eax
mov ecx, esi
call fcn.005f3650
mov edx, dword [esp + 0x1c]
test edx, edx
je 0x5eac91
test eax, eax
je 0x5eac91
mov ecx, dword [edx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edx + 8], ecx
mov dword [edx + 0xc], eax
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push dword [esp + 0x74]
push 0x8d
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0x10
push 0x8d
push 0
push 9
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x90]
test eax, eax
je 0x5eaceb
mov edx, 0x20
mov ecx, ebp
push 0xffffffffffffffff
push 0x40
push eax
push 0x8d
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x94]
test eax, eax
je 0x5ead1c
mov esi, dword [esp + 0x54]
add eax, 2
sub eax, dword [esp + 0x50]
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push dword [esi + eax*2]
push 0x8d
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x70]
cmp eax, dword [esp + 0x6c]
je 0x5ead3f
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push eax
push 0x8d
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x268]
cmp eax, 1
jne 0x5eadab
xor esi, esi
cmp dword [ebp], 0
jne 0x5eae77
mov eax, dword [ebp + 0x58]
add eax, dword [esp + 0x80]
mov edx, 0x11
mov ecx, ebp
push eax
push 0x8d
push 0xffffffffffffffff
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ead82
or byte [eax + 1], 0x38
xor esi, esi
cmp dword [ebp], 0
jne 0x5eae77
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5eadd8
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5eae03
cmp eax, 2
jne 0x5eaed7
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push dword [esp + 0x84]
push 0x8d
call fcn.005f2690
add esp, 0x10
jmp 0x5eaed7
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5eae6e
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5eae3e
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5eae67
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5eae6e
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5eae77
mov dword [ebp], 2
xor esi, esi
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push dword [esp + 0x84]
push 0x8d
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x80]
add eax, 4
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push eax
push 0x8d
call fcn.005f2690
add esp, 0x10
mov ecx, ebp
call fcn.005f3650
test esi, esi
je 0x5eaed7
test eax, eax
je 0x5eaed7
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
mov edx, dword [esp + 0x50]
sub esp, 8
lea eax, [esp + 0x180]
lea ecx, [esp + 0x54]
push eax
push dword [esp + 0x30]
call fcn.005f3730
add esp, 0x10
cmp dword [ebp], 0
je 0x5eaf9a
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
test eax, eax
je 0x5eaf25
nop word [eax + eax]
mov esi, dword [eax]
sub esp, 0xc
push eax
call dword [0x6f446c]
add esp, 0x10
test esi, esi
mov eax, esi
jne 0x5eaf10
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
test eax, eax
je 0x5eaf45
nop
mov esi, dword [eax]
sub esp, 0xc
push eax
call dword [0x6f446c]
add esp, 0x10
test esi, esi
mov eax, esi
jne 0x5eaf30
sub esp, 0xc
push ebp
call dword [0x6f446c]
add esp, 4
push dword [esp + 0x68]
call dword [0x6f446c]
add esp, 4
push dword [esp + 0x60]
call dword [0x6f446c]
add esp, 0x10
mov eax, dword [esp + 0x58]
test eax, eax
je case.default.0x5e4cc8
nop dword [eax + eax]
mov esi, dword [eax]
sub esp, 0xc
push eax
call dword [0x6f446c]
add esp, 0x10
test esi, esi
mov eax, esi
jne 0x5eaf80
jmp case.default.0x5e4cc8
cmp dword [esp + 0xac], 0
je 0x5eaffb
mov eax, dword [ebp + 0x58]
add eax, dword [esp + 0x6c]
mov edx, 1
mov ecx, ebp
push eax
push 0x8d
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
mov esi, dword [esp + 0x260]
je 0x5eafd2
mov byte [eax], 0x3b
xor edi, edi
cmp dword [ebp], 0
jne 0x5eb0b0
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5eb011
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5eb03c
xor edi, edi
mov dword [esp + 0x24], 0
mov esi, dword [esp + 0x260]
jmp 0x5eb0bd
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5eb0a7
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [edi], eax
mov dword [ecx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [ebp + 0x1c], edi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5eb077
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5eb0a0
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5eb0a7
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5eb0b0
mov dword [ebp], 2
xor edi, edi
mov dword [esp + 0x24], edi
mov ecx, ebp
call fcn.005f3650
mov edi, eax
mov ecx, ebp
call fcn.005f3650
mov dword [esp + 0x104], eax
mov ecx, dword [esp + 0x12c]
test ecx, ecx
je 0x5eb107
nop word cs:[eax + eax]
test eax, eax
je 0x5eb100
mov edx, dword [ecx]
test edx, edx
je 0x5eb100
mov esi, dword [edx + 8]
and esi, 0xfffffffc
or esi, 1
mov dword [edx + 8], esi
mov esi, dword [esp + 0x260]
mov dword [edx + 0xc], eax
mov ecx, dword [ecx + 4]
test ecx, ecx
jne 0x5eb0e0
movzx ebp, word [esi + 0x1e]
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x6c]
add eax, 4
mov edx, 0x20
mov ecx, esi
push eax
push 0x8d
push 0
push 0xa
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x6c]
add eax, 4
mov edx, 0x20
mov ecx, esi
push 0
push 0xc
push eax
push 0x8d
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, esi
push 0
push 8
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x88]
test eax, eax
je 0x5eb18a
mov edx, 0x20
mov ecx, esi
push eax
push 0x8d
push 0
push 3
call fcn.005f2690
add esp, 0x10
mov edx, 0x26
mov ecx, esi
push 0x24
push 0x81
push 0
push 2
call fcn.005f2690
add esp, 0x10
cmp dword [esp + 0x88], 0
je 0x5eb1c8
mov edx, 0x20
mov ecx, esi
push 0
push 3
push 0x14
push 0x81
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
jne 0x5eb214
mov edx, 1
mov ecx, esi
push 0x10
push 0x81
push 0
push 3
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb20f
mov byte [eax], 0x8b
mov edx, 0x11
mov ecx, esi
push 0
push 3
push 4
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb214
or byte [eax + 1], 0x28
jmp 0x5eb214
cmp dword [esi], 0
je 0x5eb1ee
mov dword [esp + 0x18], edi
mov edx, 0x20
mov ecx, esi
push 8
push 0x81
push 0
push 1
call fcn.005f2690
add esp, 0x10
xor ebx, ebx
cmp dword [esi], 0
jne 0x5eb36f
mov eax, dword [esi + 0x58]
add eax, dword [esp + 0x6c]
je 0x5eb268
mov edx, 1
mov ecx, esi
push eax
push 0x8d
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb286
mov byte [eax], 0x8d
jmp 0x5eb286
mov edx, 1
mov ecx, esi
push 0
push 0xc
push 0
push 0xd
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb286
mov byte [eax], 0x89
xor ebx, ebx
cmp dword [esi], 0
jne 0x5eb36f
mov edx, 0x11
mov ecx, esi
push 0
push 2
push 0
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb2b0
or byte [eax + 1], 0x38
xor ebx, ebx
cmp dword [esi], 0
jne 0x5eb36f
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5eb2d5
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5eb2fe
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5eb367
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [esi + 0x1c], ebx
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5eb339
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5eb360
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5eb367
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5eb36f
mov dword [esi], 2
xor ebx, ebx
mov ecx, esi
call fcn.005f3650
mov dword [esp + 0x1c], eax
mov edx, 0x20
mov ecx, esi
push 0
push 0x8c
push 0
push 0xb
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
jne 0x5eb412
mov edx, 0x11
mov ecx, esi
push 0
push 0xc
push 4
push 0x40
call fcn.005fdd80
add esp, 0x10
cmp dword [esi], 0
jne 0x5eb412
mov edx, 0x11
mov ecx, esi
push 0
push 3
push 4
push 0x40
call fcn.005fdd80
add esp, 0x10
cmp dword [esi], 0
jne 0x5eb412
mov edx, 1
mov ecx, esi
push 0
push 1
push 0
push 0xb
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb3ef
mov byte [eax], 0x2b
cmp dword [esi], 0
jne 0x5eb412
mov edx, 0x21
mov ecx, esi
push 0
push 0xb
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb412
or byte [eax], 0x38
mov edx, 0x26
mov ecx, esi
push 0
push 0xb
push 0
push 0x83
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
jne 0x5eb459
mov edx, 0x11
mov ecx, esi
push 0
push 2
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb450
or byte [eax + 1], 0x28
cmp dword [esi], 0
je 0x5eb95e
mov ecx, esi
call fcn.005f3650
test ebx, ebx
je 0x5eb477
test eax, eax
je 0x5eb477
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
test bp, bp
je 0x5eb556
cmp dword [esi], 0
je 0x5eb8de
add ebp, 2
mov edx, 0x20
mov ecx, esi
push ebp
push 0x40
push 0
push 2
call fcn.005f2690
add esp, 0x10
mov ecx, esi
call fcn.005f3650
mov ebx, eax
mov edx, 0x20
mov ecx, esi
push 0
push 0x81
push 0
push 3
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
mov ebp, dword [esp + 0x14]
jne 0x5eb53d
mov edx, 0x11
mov ecx, esi
push 0
push 1
push 8
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb4ed
or byte [eax + 1], 0x28
cmp dword [esi], 0
jne 0x5eb53d
mov edx, 0x11
mov ecx, esi
push 0
push 2
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb511
or byte [eax + 1], 0x28
cmp dword [esi], 0
jne 0x5eb53d
mov edx, 1
mov ecx, esi
push 0
push 0xa
push 0
push 3
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb534
mov byte [eax], 0x3b
cmp dword [esi], 0
je 0x5ec064
mov edx, 0x20
mov ecx, esi
push 0
push 2
push 0
push 1
call fcn.005f2690
add esp, 0x10
jmp 0x5eb571
mov edx, 0x20
mov ecx, esi
push 1
push 0x40
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov ebp, dword [esp + 0x14]
mov ecx, ebp
call fcn.005f3650
mov dword [esp + 0x100], eax
mov dword [esp + 0xfc], eax
mov ecx, dword [esp + 0x120]
test ecx, ecx
mov ebx, dword [esp + 0x40]
je 0x5eb5c0
nop word cs:[eax + eax]
test eax, eax
je 0x5eb5b9
mov edx, dword [ecx]
test edx, edx
je 0x5eb5b9
mov esi, dword [edx + 8]
and esi, 0xfffffffc
or esi, 1
mov dword [edx + 8], esi
mov dword [edx + 0xc], eax
mov ecx, dword [ecx + 4]
test ecx, ecx
jne 0x5eb5a0
mov eax, dword [esp + 0x128]
test eax, eax
je 0x5eb600
mov ecx, dword [esp + 0x100]
nop word cs:[eax + eax]
test ecx, ecx
je 0x5eb5f9
mov edx, dword [eax]
test edx, edx
je 0x5eb5f9
mov esi, dword [edx + 8]
and esi, 0xfffffffc
or esi, 1
mov dword [edx + 8], esi
mov dword [edx + 0xc], ecx
mov eax, dword [eax + 4]
test eax, eax
jne 0x5eb5e0
mov edx, dword [esp + 0x10]
test edx, edx
je 0x5eb622
mov eax, dword [esp + 0x100]
test eax, eax
je 0x5eb622
mov ecx, dword [edx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edx + 8], ecx
mov dword [edx + 0xc], eax
cmp dword [ebp], 0
je 0x5eb8ae
test bl, bl
je 0x5eb88e
mov ecx, dword [esp + 0x14]
call fcn.005f3650
mov dword [esp + 0xf8], eax
mov ecx, dword [esp + 0x11c]
test ecx, ecx
je 0x5eb66f
test eax, eax
je 0x5eb668
mov edx, dword [ecx]
test edx, edx
je 0x5eb668
mov esi, dword [edx + 8]
and esi, 0xfffffffc
or esi, 1
mov dword [edx + 8], esi
mov dword [edx + 0xc], eax
mov ecx, dword [ecx + 4]
test ecx, ecx
jne 0x5eb64f
mov esi, dword [esp + 0x4c]
mov ebp, dword [esp + 0xfc]
mov edx, 0x20
mov ecx, esi
push 0
push 8
push 0
push 2
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, esi
push 0xfffffffffffffff4
push 0x40
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x26
mov ecx, esi
push 0x20
push 0x82
push 0
push 3
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
jne 0x5eb6ef
mov edx, 0x11
mov ecx, esi
push 0
push 3
push 2
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb6e6
or byte [eax + 1], 0x38
cmp dword [esi], 0
je 0x5ebb27
test ebp, ebp
setne al
mov dword [esp + 0x10], eax
mov edx, 0x20
mov ecx, esi
push 8
push 0x82
push 0
push 0xc
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, esi
push 0x10
push 0x82
push 0
push 2
call fcn.005f2690
add esp, 0x10
xor ebx, ebx
cmp dword [esi], 0
jne 0x5eb75d
mov edx, 0x11
mov ecx, esi
push 0
push 3
push 3
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb752
or byte [eax + 1], 0x38
xor ebx, ebx
cmp dword [esi], 0
je 0x5ebb48
mov edx, 0x26
mov ecx, esi
push 0
push 3
push 8
push 0x82
call fcn.005f2690
add esp, 0x10
mov ecx, esi
call fcn.005f3650
test ebx, ebx
je 0x5eb795
test eax, eax
je 0x5eb795
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
cmp dword [esp + 0xa8], 2
lea eax, [esp + 0x80]
lea edi, [esp + 0x7c]
cmovne edi, eax
mov edx, 0x20
mov ecx, esi
push dword [edi]
push 0x8d
push 0
push 3
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
jne 0x5eb80b
mov edx, 1
mov ecx, esi
push 0
push 0xc
push 0
push 0xb
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb7e8
mov byte [eax], 0x2b
cmp dword [esi], 0
jne 0x5eb80b
mov edx, 0x21
mov ecx, esi
push 0
push 0xb
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb80b
or byte [eax], 0x38
mov edx, 0x26
mov ecx, esi
push 0
push 0xb
push 4
push 0x82
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
jne 0x5eb86b
mov edx, 1
mov ecx, esi
push 0
push 0xc
push 0
push 3
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb848
mov byte [eax], 0x2b
cmp dword [esi], 0
jne 0x5eb86b
mov edx, 0x21
mov ecx, esi
push 0
push 3
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb86b
or byte [eax], 0x38
mov edx, 0x26
mov ecx, esi
push 0
push 3
push 0
push 0x82
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
je 0x5eb91b
cmp dword [esp + 0xac], 0
je 0x5ebbec
mov ebp, dword [esp + 0x14]
mov ecx, ebp
call fcn.005f3650
mov esi, eax
jmp 0x5ebbf2
test byte [ebp + 4], 1
mov eax, dword [ebp + 0x44]
jne 0x5eb93c
mov edx, 0x11
mov ecx, ebp
push 0
push 0xd
push eax
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
jne 0x5eb989
jmp 0x5eb97f
lea eax, [ebp*8]
add eax, dword [esp + 0x6c]
add eax, dword [esi + 0x58]
je 0x5ebaa3
mov edx, 1
mov ecx, esi
push eax
push 0x8d
push 0
push 1
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb489
mov byte [eax], 0x8d
jmp 0x5eb489
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5eba3b
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5eba68
mov edx, 1
mov ecx, ebp
push eax
push 0x8d
push 0
push 0xd
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb97f
mov byte [eax], 0x8b
jmp 0x5eb989
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ebb69
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ebb96
cmp dword [ebp], 0
jne 0x5eb62c
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ebp + 0x34]
cmp eax, 7
lea eax, [eax - 5]
mov edx, 2
cmovg edx, eax
mov eax, dword [ebp + 0x38]
cmp eax, 4
mov esi, 3
cmovl esi, eax
lea eax, [esi + edx]
cmp dword [ebp + 0x54], 2
lea ebx, [esi + edx + 2]
cmovle ebx, eax
mov eax, dword [ecx + 4]
lea edx, [ebx + eax + 1]
cmp edx, 0xff8
ja 0x5eb9d1
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5eb9fd
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ebd7c
lea ecx, [ebx + 1]
mov esi, dword [esp + 0x28]
mov edx, dword [esi]
mov dword [eax], edx
mov dword [esi], eax
mov dword [eax + 4], ecx
add eax, 8
lea ecx, [ebp + 0x34]
mov byte [eax], bl
add dword [ebp + 0x48], ebx
cmp dword [ebp + 0x38], 0
jg 0x5eba16
mov edx, dword [ecx]
cmp edx, 0xc
jl 0x5ebd9f
mov byte [eax + 1], 0x5b
add eax, 2
cmp dword [ebp + 0x38], 1
mov ebx, dword [esp + 0x40]
jg 0x5ebda9
mov edx, dword [ecx]
cmp edx, 0xb
jge 0x5ebda9
jmp 0x5ebdb5
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ebbd8
mov eax, dword [esi + 0x30]
mov dword [edi], eax
mov dword [esi + 0x30], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x30000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [esi + 0x1c], edi
add dword [esi + 0x48], 5
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ebaca
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ebaf5
mov edx, 1
mov ecx, esi
push 0
push 1
push 0
push 0xd
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb489
mov byte [eax], 0x89
jmp 0x5eb489
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ebbd8
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp byte [esp + 0x10], 0
je 0x5eb88e
mov eax, dword [edi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [edi + 8], eax
mov dword [edi + 0xc], ebp
cmp dword [esp + 0xac], 0
jne 0x5eb89c
jmp 0x5ebbec
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ebdef
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ebe1c
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ebe5a
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ebe87
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ebd94
mov eax, dword [esi + 0x30]
mov dword [edi], eax
mov dword [esi + 0x30], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x2000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [esi + 0x1c], edi
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ebd2d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ebd54
mov dword [esi], 2
cmp dword [esp + 0xac], 0
jne 0x5eb89c
xor esi, esi
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x180]
lea ecx, [esp + 0x4c]
call fcn.005f8fa0
cmp dword [ebp], 0
je 0x5ebcaa
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
test eax, eax
je 0x5ebc35
nop word cs:[eax + eax]
mov esi, dword [eax]
sub esp, 0xc
push eax
call dword [0x6f446c]
add esp, 0x10
test esi, esi
mov eax, esi
jne 0x5ebc20
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
test eax, eax
je 0x5ebc55
nop
mov esi, dword [eax]
sub esp, 0xc
push eax
call dword [0x6f446c]
add esp, 0x10
test esi, esi
mov eax, esi
jne 0x5ebc40
sub esp, 0xc
push ebp
call dword [0x6f446c]
add esp, 4
push dword [esp + 0x68]
call dword [0x6f446c]
add esp, 4
push dword [esp + 0x60]
call dword [0x6f446c]
add esp, 0x10
mov eax, dword [esp + 0x58]
test eax, eax
je case.default.0x5e4cc8
nop dword [eax + eax]
mov esi, dword [eax]
sub esp, 0xc
push eax
call dword [0x6f446c]
add esp, 0x10
test esi, esi
mov eax, esi
jne 0x5ebc90
jmp case.default.0x5e4cc8
mov ecx, ebp
call fcn.005f3650
mov dword [esp + 0x168], eax
cmp dword [esp + 0x268], 1
jne 0x5ec136
xor ebx, ebx
cmp dword [ebp], 0
jne 0x5ec0be
mov eax, dword [ebp + 0x58]
add eax, dword [esp + 0x80]
mov edx, 0x11
mov ecx, ebp
push eax
push 0x8d
push 0
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ebcfd
or byte [eax + 1], 0x38
xor ebx, ebx
cmp dword [ebp], 0
jne 0x5ec0be
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ebffa
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ec029
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ebd94
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esp + 0x1c], 0
je 0x5eb459
mov eax, dword [edi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [edi + 8], eax
mov eax, dword [esp + 0x1c]
mov dword [edi + 0xc], eax
jmp 0x5eb459
mov dword [ebp], 2
mov ebx, dword [esp + 0x40]
test bl, bl
jne 0x5eb634
jmp 0x5eb88e
mov dword [esi], 2
jmp 0x5eb459
inc eax
mov ebx, dword [esp + 0x40]
cmp edx, 0xb
jl 0x5ebdb5
mov byte [eax], 0x5e
inc eax
cmp dword [ebp + 0x38], 2
jg 0x5ebdba
mov edx, dword [ecx]
cmp edx, 0xa
jl 0x5ebdbe
mov byte [eax], 0x5f
inc eax
mov byte [eax], 0x5d
cmp dword [ebp + 0x54], 3
jl 0x5ebdde
mov word [eax + 1], 0x4c2
mov byte [eax + 3], 0
test bl, bl
jne 0x5eb634
jmp 0x5eb88e
mov byte [eax + 1], 0xc3
test bl, bl
jne 0x5eb634
jmp 0x5eb88e
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ebfd5
mov eax, dword [esi + 0x30]
mov dword [edi], eax
mov dword [esi + 0x30], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0xc000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [esi + 0x1c], edi
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ebec2
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ebeed
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5ebfe0
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0xc000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [esi + 0x1c], ebx
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ebf10
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ebf3b
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ebfd5
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
test ebp, ebp
je 0x5ebfed
mov eax, dword [edi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [edi + 8], eax
mov dword [edi + 0xc], ebp
mov al, 1
jmp 0x5eb6f4
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ebfe0
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esi], 0
jne 0x5eb75d
mov eax, dword [esp + 0x80]
add eax, 4
cmp dword [esp + 0xa8], 2
cmove eax, dword [esp + 0x70]
add eax, dword [esi + 0x58]
mov edx, 1
mov ecx, esi
push eax
push 0x8d
push 0
push 3
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ec28f
mov byte [eax], 0x8b
mov edx, 1
mov ecx, esi
push 0
push 0xc
push 0
push 3
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ebfa5
mov byte [eax], 0x2b
cmp dword [esi], 0
jne 0x5eb75d
mov edx, 0x21
mov ecx, esi
push 0
push 3
push 1
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eb75d
or byte [eax], 0x38
jmp 0x5eb75d
mov dword [esi], 2
jmp 0x5eb6ef
mov dword [esi], 2
xor ebx, ebx
jmp 0x5eb75d
mov dword [esp + 0x10], 0
jmp 0x5eb6f8
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5ec0b5
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [ebx], eax
mov dword [ecx], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x2000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [ebp + 0x1c], ebx
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ec085
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ec0ae
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ec29d
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ec2ca
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ec0b5
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5ec0be
mov dword [ebp], 2
xor ebx, ebx
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x7c]
push 0x8d
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0xffffffffffffffff
push 0x40
push dword [esp + 0x84]
push 0x8d
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 1
push dword [esp + 0x88]
push 0x8d
call fcn.005f2690
add esp, 0x10
mov ecx, ebp
call fcn.005f3650
test ebx, ebx
je 0x5ec136
test eax, eax
je 0x5ec136
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
mov eax, 0x40010
mov ecx, dword [esp + 0x260]
and eax, dword [ecx + 8]
cmp eax, 0x40000
jne 0x5ec16b
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x84]
push 0x8d
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x94]
test eax, eax
je 0x5ec185
add eax, 2
sub eax, dword [esp + 0x50]
add eax, eax
add eax, dword [esp + 0x54]
jmp 0x5ec189
lea eax, [esp + 0x70]
mov edx, 0x20
mov ecx, ebp
push dword [eax]
push 0x8d
push 0
push 0xc
call fcn.005f2690
add esp, 0x10
mov eax, dword [esp + 0x260]
mov eax, dword [eax + 8]
test al, 0x10
jne 0x5ec5a8
cmp dword [esp + 0x108], 0
je 0x5ec220
test eax, 0x40000
jne 0x5ec5a8
cmp dword [ebp], 0
jne 0x5ec5a8
mov edx, 1
mov ecx, ebp
push 0
push 0xb
push 0
push 0xc
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ec1f2
mov byte [eax], 0x3b
cmp dword [ebp], 0
jne 0x5ec5a8
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ec358
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ec387
cmp dword [ebp], 0
jne 0x5ec5a8
test eax, 0x40000
mov eax, 0xb
mov edi, 1
cmove edi, eax
sub esp, 8
mov edx, 0x862
mov ecx, ebp
push 0
push edi
push 0
push 0xc
push 0
push 0
call fcn.005f2d00
add esp, 0x20
test eax, eax
jne 0x5ec5a8
cmp dword [ebp], 0
jne 0x5ec5a8
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ec45e
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ec48d
cmp dword [esi], 0
jne 0x5eb75d
jmp 0x5ebf87
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ec34d
mov eax, dword [esi + 0x30]
mov dword [edi], eax
mov dword [esi + 0x30], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [esi + 0x1c], edi
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ec305
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ec32c
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ec34d
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
test ebx, ebx
je 0x5eb53d
mov eax, dword [edi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [edi + 8], eax
mov dword [edi + 0xc], ebx
jmp 0x5eb53d
mov dword [esi], 2
jmp 0x5eb53d
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ec410
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [edi], eax
mov dword [ecx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x4000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [ebp + 0x1c], edi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ec3c2
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ec3eb
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ec410
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 0x108]
test eax, eax
je 0x5ec5a8
mov ecx, dword [edi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edi + 8], ecx
jmp 0x5ec51d
mov dword [ebp], 2
cmp dword [esp + 0x2c], 0
jne 0x5ec5af
jmp 0x5ec5cd
mov dword [esi], 2
jmp 0x5ea40f
cmp dword [esi], 0
jne 0x5eabef
mov ebp, edi
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ec530
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ec55d
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ec59d
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [edi], eax
mov dword [ecx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x4000
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x1c]
lea ecx, [edx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [edx + 0x1c], edi
add dword [edx + 0x48], 6
mov ecx, dword [edx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ec4cc
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ec4f9
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ec59d
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esp + 0x34], 0
mov ebp, dword [esp + 0x14]
je 0x5ec5a8
mov eax, dword [edi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [edi + 8], eax
mov eax, dword [esp + 0x34]
mov dword [edi + 0xc], eax
cmp dword [esp + 0x2c], 0
jne 0x5ec5af
jmp 0x5ec5cd
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5f1ab3
mov eax, dword [esi + 0x30]
mov dword [edi], eax
mov dword [esi + 0x30], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0
mov eax, dword [esi + 0x1c]
test eax, eax
cmovne ebp, eax
mov dword [ebp], edi
mov dword [esi + 0x1c], edi
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5f1a78
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ea80d
mov ebp, dword [esp + 0x14]
mov dword [ebp], 2
cmp dword [esp + 0x2c], 0
je 0x5ec5cd
mov ecx, ebp
call fcn.005f3650
test eax, eax
je 0x5ec5cd
mov edx, dword [esp + 0x2c]
mov ecx, dword [edx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edx + 8], ecx
mov dword [edx + 0xc], eax
cmp dword [esp + 0x268], 1
jne 0x5ec612
cmp dword [ebp], 0
jne 0x5ec612
mov eax, dword [ebp + 0x58]
add eax, dword [esp + 0x80]
mov edx, 0x11
mov ecx, ebp
push eax
push 0x8d
push 0xffffffffffffffff
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ec608
or byte [eax + 1], 0x38
cmp dword [ebp], 0
je 0x5edd85
mov edx, 0x20
mov ecx, ebp
push 0xffffffffffffffff
push 0x40
push 0
push 1
call fcn.005f2690
add esp, 0x10
cmp dword [ebp], 0
je 0x5edb4c
lea ecx, [esp + 0x4c]
call fcn.005fc4b0
cmp dword [esp + 0xac], 0
je 0x5ec776
mov ebp, dword [esp + 0x14]
mov ecx, ebp
call fcn.005f3650
mov edx, dword [esp + 0x24]
test edx, edx
je 0x5ec670
test eax, eax
je 0x5ec670
mov ecx, dword [edx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edx + 8], ecx
mov dword [edx + 0xc], eax
mov edx, 0x20
mov ecx, ebp
push 0
push 8
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x21
mov ecx, ebp
push 0x2a
push 0x81
push 0
push 3
call fcn.005f2690
add esp, 0x10
cmp dword [ebp], 0
mov ebx, dword [esp + 0x18]
jne 0x5ec6d4
mov edx, 0x11
mov ecx, ebp
push 0
push 3
push 0
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ec6ca
or byte [eax + 1], 0x38
cmp dword [ebp], 0
je 0x5edd19
test esi, esi
setne al
mov dword [esp + 0x10], eax
mov edx, 0x21
mov ecx, ebp
push 0x2b
push 0x81
push 0
push 3
call fcn.005f2690
add esp, 0x10
cmp dword [ebp], 0
jne 0x5ec726
mov edx, 0x11
mov ecx, ebp
push 0
push 3
push 0
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ec71c
or byte [eax + 1], 0x38
cmp dword [ebp], 0
je 0x5edd39
test ebx, ebx
setne bl
mov edx, 0x20
mov ecx, ebp
push 4
push 0x81
push 0
push 3
call fcn.005f2690
add esp, 0x10
cmp dword [ebp], 0
jne 0x5ec776
mov edx, 1
mov edi, dword [esp + 0x14]
mov ecx, edi
push 0
push 0xc
push 0
push 3
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ec76d
mov byte [eax], 0x3b
cmp dword [edi], 0
je 0x5edd5d
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x114]
mov dword [esp + 0x118], eax
mov dword [esp + 0xc0], 1
test eax, eax
jne 0x5ecbfc
jmp 0x5eda70
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5eca2e
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx]
mov dword [edi], eax
mov dword [ecx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x30000
mov eax, dword [ebx + 0x1c]
test eax, eax
cmove eax, dword [esp + 0x24]
mov dword [eax], edi
mov dword [ebx + 0x1c], edi
add dword [ebx + 0x48], 5
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ec831
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ec85c
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5eca2e
mov ecx, dword [ebx + 0x2c]
mov dword [eax], ecx
mov dword [ebx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebx], 0
jne 0x5ed781
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x5ec9ed
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5eca16
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ec8da
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ec909
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5eca39
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5eca68
mov dword [ebx], 2
jmp 0x5eda42
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ecb9b
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx]
mov dword [edi], eax
mov dword [ecx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x32000
mov eax, dword [ebx + 0x1c]
test eax, eax
mov ecx, dword [esp + 0x24]
cmovne ecx, eax
mov dword [ecx], edi
mov dword [ebx + 0x1c], edi
add dword [ebx + 0x48], 5
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ec945
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ec970
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ecb9b
mov ecx, dword [ebx + 0x2c]
mov dword [eax], ecx
mov dword [ebx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebx], 0
jne 0x5ed816
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 8]
cmp edx, 0x7f8
ja 0x5ecb50
mov dword [esp + 0x24], edx
lea edx, [eax + ecx + 8]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x24]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x138]
mov dword [eax + ecx + 0xc], edx
mov dword [eax + ecx + 8], edi
mov eax, dword [esp + 0x10]
mov dword [esp + 0x138], eax
mov edx, 0x11
mov ecx, ebx
push 0
push 2
push dword [esp + 0x34]
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ed816
or byte [eax + 1], 0x28
jmp 0x5ed816
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5eca2e
mov edx, dword [esp + 0x10]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [esp + 0x120]
mov dword [eax + 4], ecx
mov dword [eax], edi
mov dword [esp + 0x120], eax
jmp 0x5ed781
mov dword [ebx], 2
jmp 0x5ed781
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ecbf1
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx]
mov dword [edi], eax
mov dword [ecx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x32000
mov eax, dword [ebx + 0x1c]
test eax, eax
cmove eax, dword [esp + 0x24]
mov dword [eax], edi
mov dword [ebx + 0x1c], edi
add dword [ebx + 0x48], 5
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ecaa2
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ecacd
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ecbf1
mov ecx, dword [ebx + 0x2c]
mov dword [eax], ecx
mov dword [ebx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebx], 0
jne 0x5ed756
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 8]
cmp edx, 0x7f8
ja 0x5ecba6
mov dword [esp + 0x174], edx
lea edx, [eax + ecx + 8]
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x174]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x138]
mov dword [eax + ecx + 0xc], edx
mov dword [eax + ecx + 8], edi
mov eax, dword [esp + 0x40]
mov dword [esp + 0x138], eax
mov edx, 0x11
mov ecx, ebx
push 0
push 2
push dword [esp + 0x3c]
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ed756
or byte [eax + 1], 0x28
jmp 0x5ed756
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ecb9b
mov ecx, dword [ebx + 0x30]
mov dword [eax], ecx
mov dword [ebx + 0x30], eax
mov dword [eax + 4], 8
mov ecx, eax
add ecx, 8
cmp dword [ebx], 0
mov edx, dword [esp + 0x138]
mov dword [eax + 0xc], edx
mov dword [eax + 8], edi
mov dword [esp + 0x138], ecx
jne 0x5ed816
jmp 0x5ec9c3
mov dword [ebx], 2
jmp 0x5ed816
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ecbf1
mov ecx, dword [ebx + 0x30]
mov dword [eax], ecx
mov dword [ebx + 0x30], eax
mov dword [eax + 4], 8
mov ecx, eax
add ecx, 8
mov edx, dword [esp + 0x138]
cmp dword [ebx], 0
mov dword [eax + 0xc], edx
mov dword [eax + 8], edi
mov dword [esp + 0x138], ecx
jne 0x5ed756
jmp 0x5ecb26
mov dword [ebx], 2
jmp 0x5ed756
mov edi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
mov eax, dword [eax + 0xc]
lea edx, [ecx + eax*2]
movzx eax, word [ecx + eax*2]
mov ebp, edx
movzx ecx, word [ebp + 2]
movzx esi, word [ebp + ecx*2]
lea ebp, [ebp + ecx*2]
cmp esi, 0x77
je 0x5ecc10
mov dword [esp + 0x48], edi
movzx eax, ax
xor ecx, ecx
cmp eax, 0x83
setne cl
lea edi, [edx + ecx*2 + 4]
sub esp, 4
lea ecx, [esp + 0x50]
mov dword [esp + 0x38], edx
lea eax, [esp + 0x174]
push eax
push 1
push 0
call fcn.0061a5d0
add esp, 0x10
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x170]
mov dword [esp + 0x30], eax
cmp eax, 1
mov eax, 3
sbb eax, 0
cmp edi, ebp
mov dword [esp + 0x18], edi
jae 0x5ecc9c
mov ecx, dword [esp + 0x50]
mov ebx, dword [esp + 0x54]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x15c]
mov dword [esp + 0x10], edx
mov edx, edi
mov edi, eax
jmp 0x5ecd80
mov edi, eax
jmp 0x5ece9c
lea ecx, [esp + 0x4c]
call fcn.005fd420
jmp 0x5ece90
movzx eax, word [edx + 2]
lea eax, [edx + eax*2]
mov ecx, esi
sub edx, ecx
cmp dword [ebx + edx*2], 0
je 0x5ece92
movzx ecx, word [eax]
mov dword [esp + 0x1c], ecx
lea edx, [ecx - 0x62]
movzx ecx, dx
cmp ecx, 7
ja 0x5ecd54
mov ecx, 0x3a
bt ecx, edx
jae 0x5ecd24
mov edx, 1
jmp 0x5ecd56
mov eax, edx
mov ecx, esi
sub eax, ecx
cmp dword [ebx + eax*2], 0
je 0x5ecd01
inc edi
lea eax, [edx + 2]
sub eax, ecx
mov eax, dword [ebx + eax*2]
lea edx, [edx + eax*2]
add edx, 4
mov eax, edx
jmp 0x5ece92
movzx eax, word [edx + 2]
movzx eax, word [edx + eax*2]
add eax, 0xffffff87
movzx eax, ax
cmp eax, 2
adc edi, 0
jmp 0x5ecdd9
mov ecx, 5
bt ecx, edx
mov edx, 2
mov ecx, esi
jb 0x5ecd58
movzx edx, word [eax + 4]
test edx, edx
je 0x5ecd5f
mov ecx, edx
movzx edx, word [eax + 2]
sub ecx, edx
mov edx, ecx
cmp edx, 2
mov ecx, 2
cmovae edx, ecx
jmp 0x5ecd56
xor edx, edx
mov ecx, esi
add edi, edx
jmp 0x5ece92
movzx edx, word [esp + 0x1c]
cmp edx, 0x68
mov edx, 0
sete dl
inc edx
add edi, edx
jmp 0x5ece92
mov esi, ecx
movzx eax, word [edx]
add eax, 0xffffffdf
movzx ecx, ax
cmp ecx, 0x6b
ja case.0x5ecd99.8
mov eax, 0x11
jmp dword [ecx*4 + 0x5f2280]
mov eax, edx
mov ecx, esi
sub eax, ecx
cmp dword [ebx + eax*2], 1
sbb edi, 0xffffffff
lea eax, [edx + 4]
cmp dword [esp + 0x10], 0
je 0x5ece92
movzx ecx, word [edx + 2]
and ecx, 0xfc00
add edx, 6
cmp ecx, 0xd800
mov ecx, esi
cmove eax, edx
jmp 0x5ece92
inc edi
add edx, 4
jmp 0x5ece8e
mov eax, edx
sub eax, esi
lea ecx, [edi + 2]
cmp dword [ebx + eax*2], 0
cmovne edi, ecx
lea eax, [edx + 4]
cmp dword [esp + 0x10], 0
je 0x5ece90
movzx ecx, word [edx + 2]
and ecx, 0xfc00
add edx, 6
jmp 0x5ece31
mov eax, edx
sub eax, esi
lea ecx, [edi + 2]
cmp dword [ebx + eax*2], 0
cmovne edi, ecx
lea eax, [edx + 6]
cmp dword [esp + 0x10], 0
je 0x5ece90
movzx ecx, word [edx + 4]
and ecx, 0xfc00
add edx, 8
cmp ecx, 0xd800
cmove eax, edx
jmp 0x5ece90
mov eax, edx
mov ecx, esi
sub eax, ecx
cmp dword [ebx + eax*2], 1
sbb edi, 0xffffffff
jmp 0x5ece5b
mov eax, edx
sub eax, esi
lea ecx, [edi + 2]
cmp dword [ebx + eax*2], 0
cmovne edi, ecx
mov ecx, esi
add edx, 2
mov eax, edx
jmp 0x5ece92
mov eax, edx
sub eax, esi
lea ecx, [edi + 2]
cmp dword [ebx + eax*2], 0
cmovne edi, ecx
mov ecx, esi
jmp 0x5ecd01
movzx eax, word [edx + 4]
mov ecx, dword [esp + 0x24]
cmp byte [ecx + eax], 1
adc edi, 0
jmp 0x5ece8b
add edi, 2
add edx, 6
mov eax, edx
mov ecx, esi
cmp eax, ebp
mov edx, eax
jb 0x5ecd80
mov dword [esp + 0x1c], edi
mov dword [esp + 0x64], 0
mov ecx, dword [esp + 0x2c]
test ecx, ecx
mov eax, 0
cmovns eax, ecx
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x34]
movzx eax, word [ecx + 2]
movzx eax, word [ecx + eax*2]
mov dword [esp + 0x24], eax
cmp eax, 0x77
sete byte [esp + 0x10]
mov esi, dword [esp + 0x48]
mov ecx, esi
call fcn.005f3650
mov ecx, dword [esp + 0x118]
mov dword [ecx + 4], eax
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x5ecf10
nop
test eax, eax
je 0x5ecf09
mov edx, dword [ecx]
test edx, edx
je 0x5ecf09
mov edi, dword [edx + 8]
and edi, 0xfffffffc
or edi, 1
mov dword [edx + 8], edi
mov dword [edx + 0xc], eax
mov ecx, dword [ecx + 4]
test ecx, ecx
jne 0x5ecef0
cmp dword [esi], 0
jne 0x5ecf64
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ecf2f
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ecf5a
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ed07c
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov byte [eax], 1
inc dword [esi + 0x48]
mov byte [eax + 1], 0x59
xor ebx, ebx
mov al, byte [esp + 0x10]
mov bl, al
mov edi, dword [esp + 0x4c]
sub esp, 8
mov edx, 0x262
mov ecx, edi
push 1
push 0x40
push 0
push 9
push 0
push 9
call fcn.005f2d00
add esp, 0x20
cmp dword [edi], 0
mov dword [esp + 0x10], ebx
jne 0x5ed0cd
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ecfb5
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ecfe2
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5ed0c3
mov eax, dword [edi + 0x30]
mov dword [ebx], eax
mov dword [edi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [edi + 0x1c], ebx
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ed021
mov dword [esp + 0x38], ebx
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ed050
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ed0c3
mov dword [esp + 0x38], ebx
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [edi], 0
mov ebx, dword [esp + 0x10]
jne 0x5ed0cd
mov ecx, dword [edi + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
mov ebx, dword [esp + 0x38]
ja 0x5ed087
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ed0ae
mov dword [esi], 2
jmp 0x5ecf64
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ed0c3
mov ecx, dword [edi + 0x30]
mov dword [eax], ecx
mov dword [edi + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [esp + 0x130]
mov dword [eax + 4], ecx
mov dword [eax], ebx
mov dword [esp + 0x130], eax
jmp 0x5ed0c9
mov dword [edi], 2
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
add eax, dword [esp + 0xc]
add eax, ebx
mov dword [esp + 0x1c], eax
mov edi, dword [esp + 0x4c]
xor ebx, ebx
cmp dword [edi], 0
jne 0x5ed1fb
mov eax, dword [esp + 0x1c]
lea eax, [eax*4]
mov edx, 0x11
mov ecx, edi
push 0
push 2
push eax
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ed113
or byte [eax + 1], 0x28
xor ebx, ebx
cmp dword [edi], 0
jne 0x5ed1fb
mov edx, 1
mov ecx, edi
push 0
push 0xa
push 0
push 2
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ed13c
mov byte [eax], 0x3b
xor ebx, ebx
cmp dword [edi], 0
jne 0x5ed1fb
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ed161
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ed18a
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x5ed1f3
mov eax, dword [edi + 0x30]
mov dword [ebx], eax
mov dword [edi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x4000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [edi + 0x1c], ebx
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ed1c5
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ed1ec
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ed1f3
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5ed1fb
mov dword [edi], 2
xor ebx, ebx
mov edi, dword [esp + 0x4c]
cmp dword [edi], 0
jne 0x5ed270
mov dword [esp + 0x38], ebx
mov ebx, dword [edi + 0x30]
mov ecx, dword [ebx + 4]
lea edx, [ecx + 0xc]
cmp edx, 0x7f8
ja 0x5ed222
lea eax, [ebx + ecx + 8]
mov dword [ebx + 4], edx
jmp 0x5ed24d
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ed624
mov ecx, dword [edi + 0x30]
mov dword [eax], ecx
mov dword [edi + 0x30], eax
mov dword [eax + 4], 0xc
add eax, 8
mov ecx, dword [esp + 0x38]
mov dword [eax], ecx
mov ebx, eax
mov ecx, edi
call fcn.005f3650
mov dword [ebx + 4], eax
mov eax, dword [esp + 0x10c]
mov dword [ebx + 8], eax
mov dword [esp + 0x10c], ebx
mov eax, dword [esp + 0x1c]
lea eax, [eax*4 - 4]
mov edx, 0x20
mov ebx, esi
mov ecx, ebx
push 0
push 3
push eax
push 0x82
call fcn.005f2690
add esp, 0x10
mov esi, dword [esp + 0xc]
add esi, dword [esp + 0x10]
sub esp, 0xc
lea ecx, [esp + 0x58]
mov edx, dword [esp + 0x24]
mov edi, dword [esp + 0x3c]
push edi
push dword [esp + 0x2c]
mov eax, esi
mov dword [esp + 0x20], eax
push esi
push 1
push ebp
call fcn.00625010
add esp, 0x20
test edi, edi
je 0x5ed2e7
mov edx, 0x20
mov ecx, ebx
push 0
push 0x40
push dword [esp + 0x94]
push 0x8d
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebx
push 0
push 2
push dword [esp + 0x80]
push 0x8d
call fcn.005f2690
add esp, 0x10
cmp dword [esp + 0x2c], 0
mov esi, dword [esp + 0x34]
js 0x5ed32c
mov eax, dword [esp + 0xc]
dec eax
sub esp, 4
lea ecx, [esp + 0x50]
mov edx, esi
push 1
push eax
push 0
call fcn.0061aa60
add esp, 0x10
movzx eax, word [esp + 0x24]
cmp eax, 0x77
mov edi, dword [esp + 0x18]
jne 0x5ed354
mov edx, 0x20
mov ecx, ebx
push 0
push 0xc
push 0
push 0x82
call fcn.005f2690
add esp, 0x10
lea eax, [esi + 2]
mov ecx, dword [esp + 0x1c]
lea ecx, [ecx*4]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x19c], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x190], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x12c], 0
lea ecx, [ebx + 0x30]
mov dword [esp + 0x10], ecx
lea ecx, [ebx + 0xc]
mov dword [esp + 0x24], ecx
mov ecx, edi
jmp 0x5ed3f6
movzx eax, word [esi]
cmp eax, 0x77
mov edi, dword [esp + 0x18]
jne 0x5ed5e5
lea eax, [esi + 2]
lea ecx, [esi + 4]
mov dword [esp + 0x19c], ecx
movzx eax, word [eax]
lea esi, [esi + eax*2]
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
cmp ecx, edi
mov edx, edi
je 0x5ed440
mov edx, 0x20
mov ecx, ebx
push 0
push 0x82
push 0
push 0xc
call fcn.005f2690
add esp, 0x10
mov edx, dword [esp + 0x19c]
sub esp, 8
lea ecx, [esp + 0x54]
lea eax, [esp + 0x194]
push eax
push esi
call fcn.005f3730
add esp, 0x10
cmp dword [ebx], 0
jne 0x5eda42
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ed480
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ed4af
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ed580
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx]
mov dword [edi], eax
mov dword [ecx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x30000
mov eax, dword [ebx + 0x1c]
test eax, eax
cmove eax, dword [esp + 0x24]
mov dword [eax], edi
mov dword [ebx + 0x1c], edi
add dword [ebx + 0x48], 5
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ed4f0
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ed517
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ed580
mov ecx, dword [ebx + 0x2c]
mov dword [eax], ecx
mov dword [ebx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebx], 0
jne 0x5ed586
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x5ed53e
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ed567
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ed580
mov edx, dword [esp + 0x10]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [esp + 0x12c]
mov dword [eax + 4], ecx
mov dword [eax], edi
mov dword [esp + 0x12c], eax
jmp 0x5ed586
mov dword [ebx], 2
mov edx, dword [esp + 0x194]
lea ecx, [esp + 0x4c]
call fcn.005f8fa0
cmp dword [ebx], 0
jne 0x5eda42
mov edi, dword [esp + 0x198]
mov ecx, ebx
call fcn.005f3650
test edi, edi
je 0x5ed3e0
nop word cs:[eax + eax]
test eax, eax
je 0x5ed5d9
mov ecx, dword [edi]
test ecx, ecx
je 0x5ed5d9
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov edi, dword [edi + 4]
test edi, edi
jne 0x5ed5c0
jmp 0x5ed3e0
mov edx, 0x20
mov ecx, ebx
push 0
push 0x40
push 0
push 4
call fcn.005f2690
add esp, 0x10
xor esi, esi
cmp dword [ebx], 0
jne 0x5ed6ca
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ed62f
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ed65a
mov dword [edi], 2
jmp 0x5ed270
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5ed6c2
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebx + 0x1c]
test eax, eax
cmove eax, dword [esp + 0x24]
mov dword [eax], esi
mov dword [ebx + 0x1c], esi
add dword [ebx + 0x48], 5
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ed694
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ed6bb
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ed6c2
mov ecx, dword [ebx + 0x2c]
mov dword [eax], ecx
mov dword [ebx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5ed6ca
mov dword [ebx], 2
xor esi, esi
mov edi, dword [esp + 0x120]
test edi, edi
je 0x5ed781
mov ecx, ebx
call fcn.005f3650
test eax, eax
je 0x5ed6f9
mov ecx, dword [edi]
test ecx, ecx
je 0x5ed6f9
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov edi, dword [edi + 4]
test edi, edi
jne 0x5ed6e0
mov edx, 0x20
mov ecx, ebx
push dword [esp + 0x78]
push 0x8d
push 0
push 2
call fcn.005f2690
add esp, 0x10
cmp dword [esp + 0x2c], 0
js 0x5ed756
cmp dword [ebx], 0
jne 0x5ed756
mov eax, dword [esp + 0xc]
lea eax, [eax*4]
mov edx, 0x11
mov ecx, ebx
push 0
push 2
mov dword [esp + 0x3c], eax
push eax
push 0x40
call fcn.005fdd80
add esp, 0x10
cmp dword [ebx], 0
je 0x5ec8ab
mov edx, 0x20
mov ecx, ebx
push 0
push 0x40
push 0
push 4
call fcn.005f2690
add esp, 0x10
mov dword [esp + 0x120], 0
cmp dword [ebx], 0
je 0x5ed9e9
mov edi, dword [esp + 0x12c]
mov ecx, ebx
call fcn.005f3650
test edi, edi
je 0x5ed7c0
nop word cs:[eax + eax]
test eax, eax
je 0x5ed7b9
mov ecx, dword [edi]
test ecx, ecx
je 0x5ed7b9
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov edi, dword [edi + 4]
test edi, edi
jne 0x5ed7a0
mov edx, 0x20
mov ecx, ebx
push dword [esp + 0x78]
push 0x8d
push 0
push 2
call fcn.005f2690
add esp, 0x10
cmp dword [esp + 0x2c], 0
js 0x5ed816
cmp dword [ebx], 0
jne 0x5ed816
mov eax, dword [esp + 0xc]
lea eax, [eax*4]
mov edx, 0x11
mov ecx, ebx
push 0
push 2
mov dword [esp + 0x34], eax
push eax
push 0x40
call fcn.005fdd80
add esp, 0x10
cmp dword [ebx], 0
je 0x5ec88e
mov edx, 0x20
mov ecx, ebx
push 1
push 0x40
push 0
push 4
call fcn.005f2690
add esp, 0x10
mov ecx, ebx
call fcn.005f3650
test esi, esi
je 0x5ed84b
test eax, eax
je 0x5ed84b
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
mov esi, dword [esp + 0x120]
test esi, esi
mov edi, dword [esp + 0x18]
je 0x5ed890
mov ecx, ebx
call fcn.005f3650
nop word cs:[eax + eax]
test eax, eax
je 0x5ed889
mov ecx, dword [esi]
test ecx, ecx
je 0x5ed889
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x5ed870
sub esp, 0xc
lea ecx, [esp + 0x58]
mov edx, edi
mov esi, dword [esp + 0x3c]
push esi
push dword [esp + 0x2c]
push dword [esp + 0x20]
push 0
push ebp
call fcn.00625010
add esp, 0x20
mov ecx, dword [esp + 0x4c]
cmp dword [ecx], 0
jne 0x5ed8d1
mov edx, 0x11
push 0
push 2
push dword [esp + 0x40]
push 0x40
call fcn.005fdd80
add esp, 0x10
mov edx, 0x20
mov ecx, ebx
test esi, esi
je 0x5ed958
push 0xfffffffffffffff4
push 0x82
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebx
push 0xfffffffffffffff8
push 0x82
push 0
push 3
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebx
push 0
push 1
push dword [esp + 0x80]
push 0x8d
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebx
push 0
push 4
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebx
push 0
push 3
push dword [esp + 0x94]
push 0x8d
jmp 0x5ed999
push 0xfffffffffffffff8
push 0x82
push 0
push 3
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebx
push 0
push 4
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebx
push 0
push 3
push dword [esp + 0x80]
push 0x8d
call fcn.005f2690
add esp, 0x10
cmp dword [ebx], 0
jne 0x5eda42
mov edx, 1
mov ecx, ebx
push 0xfffffffffffffffc
push 0x82
push 0
push 0
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eda42
mov byte [eax], 0xff
or byte [eax + 1], 0x30
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5eda0d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5eda38
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ec7c8
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ec7f7
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ec8cf
mov ecx, dword [ebx + 0x2c]
mov dword [eax], ecx
mov dword [ebx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov byte [eax], 1
inc dword [ebx + 0x48]
mov byte [eax + 1], 0xc3
mov edi, dword [esp + 0x14]
cmp dword [edi], 0
jne 0x5edb70
lea ecx, [esp + 0x4c]
call fcn.005fc4b0
mov eax, dword [esp + 0x118]
mov eax, dword [eax]
mov dword [esp + 0x118], eax
test eax, eax
jne 0x5ecbfc
mov dword [esp + 0xc0], 0
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xfc], eax
mov esi, dword [esp + 0x134]
mov ebp, dword [esp + 0x14]
mov ecx, ebp
call fcn.005f3650
test esi, esi
je 0x5edabc
test eax, eax
je 0x5edab5
mov ecx, dword [esi]
test ecx, ecx
je 0x5edab5
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x5eda9c
cmp dword [ebp], 0
jne 0x5edae4
mov edx, 1
mov ecx, ebp
push dword [ebp + 0x58]
push 0x8d
push 0
push 0
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5edae4
mov byte [eax], 0x8f
mov edx, 0x20
mov ecx, ebp
push 0
push 2
push 4
push 0x8d
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 8
push 0
push 1
call fcn.005f2690
add esp, 0x10
cmp dword [ebp], 0
jne 0x5ee117
mov edx, 1
mov ecx, ebp
push 0xffffe000
push 0x8a
push 0
push 2
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5edcc2
mov byte [eax], 0x8d
jmp 0x5ee117
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5edbfb
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5edc2a
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
test eax, eax
je 0x5edb8f
mov esi, dword [eax]
sub esp, 0xc
push eax
call dword [0x6f446c]
add esp, 0x10
test esi, esi
mov eax, esi
jne 0x5edb7a
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
test eax, eax
je 0x5edbae
mov esi, dword [eax]
sub esp, 0xc
push eax
call dword [0x6f446c]
add esp, 0x10
test esi, esi
mov eax, esi
jne 0x5edb99
sub esp, 0xc
push edi
call dword [0x6f446c]
add esp, 4
push dword [esp + 0x68]
call dword [0x6f446c]
add esp, 4
push dword [esp + 0x60]
call dword [0x6f446c]
add esp, 0x10
mov eax, dword [esp + 0x58]
test eax, eax
je case.default.0x5e4cc8
mov esi, dword [eax]
sub esp, 0xc
push eax
call dword [0x6f446c]
add esp, 0x10
test esi, esi
mov eax, esi
jne 0x5edbe1
jmp case.default.0x5e4cc8
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5edcb6
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [edi], eax
mov dword [ecx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [ebp + 0x1c], edi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5edc65
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5edc8e
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5edcb6
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 0xfc]
test eax, eax
je 0x5ec633
mov ecx, dword [edi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edi + 8], ecx
mov dword [edi + 0xc], eax
jmp 0x5ec633
mov dword [ebp], 2
jmp 0x5ec633
cmp dword [ebp], 4
jne 0x5ee117
mov edx, 1
mov ecx, ebp
push 0
push 2
push 0
push 0xa
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ee10d
mov byte [eax], 0x89
mov edx, 0x11
mov ecx, ebp
push 0
push 2
push 0x2000
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ee117
or byte [eax + 1], 0x28
jmp 0x5ee117
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5edda9
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5eddd8
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ede1a
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ede49
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ede8b
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
mov ecx, dword [esp + 0x14]
jmp 0x5edebe
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ee01a
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ee049
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ee084
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [edi], eax
mov dword [ecx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x2000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [ebp + 0x1c], edi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5edf00
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5edf2d
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ee090
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [edi], eax
mov dword [ecx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [ebp + 0x1c], edi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5edf50
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5edf7d
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
mov ecx, dword [esp + 0x14]
je 0x5ef089
mov edx, dword [esp + 0x20]
mov eax, dword [edx]
mov dword [edi], eax
mov dword [edx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x2000
mov eax, dword [ecx + 0x1c]
lea ebp, [ecx + 0xc]
test eax, eax
cmove eax, ebp
mov dword [eax], edi
mov dword [ecx + 0x1c], edi
add dword [ecx + 0x48], 6
mov ecx, dword [ecx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5edfa0
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5edfcd
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ee084
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
test esi, esi
je 0x5ee0f9
mov eax, dword [edi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [edi + 8], eax
mov dword [edi + 0xc], esi
mov al, 1
jmp 0x5ec6d9
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ee090
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
test ebx, ebx
je 0x5ee106
mov eax, dword [edi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [edi + 8], eax
mov dword [edi + 0xc], ebx
mov bl, 1
jmp 0x5ec72b
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ef240
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
test bl, bl
je 0x5edfe9
mov eax, dword [edi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [edi + 8], eax
mov eax, dword [esp + 0x18]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x14]
cmp dword [eax], 0
jne 0x5ec776
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ef119
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ef148
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ee0ed
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [edi], eax
mov dword [ecx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x2000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [ebp + 0x1c], edi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ee09c
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ee0c5
mov dword [ebp], 2
jmp 0x5ec6d4
mov dword [ebp], 2
jmp 0x5ec726
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ee0ed
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 0xf8]
test eax, eax
je 0x5ec612
mov ecx, dword [edi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edi + 8], ecx
mov dword [edi + 0xc], eax
jmp 0x5ec612
mov dword [ebp], 2
jmp 0x5ec612
mov dword [esp + 0x10], 0
jmp 0x5ec6dd
xor ebx, ebx
jmp 0x5ec72b
cmp dword [ebp], 0
je 0x5edcee
mov edx, 0x20
mov ecx, ebp
push 0
push 0x81
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 3
push 0
push 0xa
call fcn.005f2690
add esp, 4
mov edx, 0x111
mov ecx, ebp
push 0x5fcc50
call fcn.005fc740
add esp, 0x10
xor esi, esi
cmp dword [ebp], 0
jne 0x5ee24f
mov edx, 0x11
mov ecx, ebp
push 0
push 1
push 0
push 0x40
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ee187
or byte [eax + 1], 0x38
xor esi, esi
cmp dword [ebp], 0
jne 0x5ee24f
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ee1b0
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ee1db
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5ee246
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ee216
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ee23f
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ee246
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x5ee24f
mov dword [ebp], 2
xor esi, esi
mov edx, 0x20
mov ecx, ebp
push 0
push 0xa
push 0
push 3
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 1
push 0
push 0xa
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0x8d
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 4
push 0x8d
push 0
push 2
call fcn.005f2690
add esp, 0x10
cmp dword [ebp], 0
jne 0x5ee30e
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 3]
cmp edx, 0xff8
ja 0x5ee2d4
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ee301
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ee7e2
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 3
add eax, 8
mov byte [eax], 2
add dword [ebp + 0x48], 2
mov word [eax + 1], 0xc350
mov ecx, ebp
call fcn.005f3650
test esi, esi
je 0x5ee32c
test eax, eax
je 0x5ee32c
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
mov edx, 0x20
mov ecx, ebp
push 0xffffffffffffffe5
push 0x40
push 0
push 1
call fcn.005f2690
add esp, 0x10
cmp dword [ebp], 0
je 0x5ee573
mov esi, dword [esp + 0x130]
mov ecx, ebp
call fcn.005f3650
test esi, esi
je 0x5ee37f
test eax, eax
je 0x5ee378
mov ecx, dword [esi]
test ecx, ecx
je 0x5ee378
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x5ee35f
mov edx, 0x20
mov ecx, ebp
push 0xfffffffffffffff8
push 0x40
push 0
push 1
call fcn.005f2690
add esp, 0x10
cmp dword [ebp], 0
je 0x5ee593
mov esi, dword [esp + 0x138]
test esi, esi
je 0x5eeb91
mov ecx, ebp
call fcn.005f3650
test eax, eax
je 0x5ee3cf
mov ecx, dword [esi]
test ecx, ecx
je 0x5ee3cf
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x5ee3b6
mov esi, dword [esp + 0x4c]
cmp dword [esi], 0
jne 0x5ee41b
lea eax, [esi + 0x58]
lea ecx, [esi + 0x5c]
cmp dword [esi + 0x34], 5
cmovl ecx, eax
mov eax, 0xffffffec
mov edi, 0xfffffff8
cmovl edi, eax
add edi, dword [ecx]
mov edx, 1
mov ecx, esi
push edi
push 0x8d
push 0
push 0
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5ee41b
mov byte [eax], 0x8f
mov edx, 0x20
mov ecx, esi
push 0
push 2
push 0
push 4
call fcn.005f2690
add esp, 0x10
cmp dword [esi], 0
je 0x5ee5b7
mov ecx, esi
call fcn.005f3650
mov edi, eax
mov edx, 0x20
mov ecx, esi
push 0xfffffffffffffffc
push 0x82
push 0
push 3
call fcn.005f2690
add esp, 0x10
xor ebx, ebx
cmp dword [esi], 0
jne 0x5ee48f
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ee5eb
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ee61a
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5ee658
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5ee687
mov eax, dword [esi + 0x58]
mov edx, 1
mov ecx, esi
test eax, eax
je 0x5ee7a1
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5ee768
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ee6c2
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ee6ef
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5ee774
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ee717
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ee740
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ee768
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 0xfc]
test eax, eax
je 0x5ee34d
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp 0x5ee34d
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ee774
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 0xfc]
test eax, eax
je 0x5ee3a0
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp 0x5ee3a0
mov dword [ebp], 2
jmp 0x5ee34d
mov dword [ebp], 2
jmp 0x5ee3a0
mov dword [ebp], 2
jmp 0x5ee30e
mov esi, dword [esp + 0x13c]
test esi, esi
je 0x5ef7fd
mov ecx, ebp
call fcn.005f3650
test eax, eax
je 0x5eebc0
mov ecx, dword [esi]
test ecx, ecx
je 0x5eebc0
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x5eeba7
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x18c], 0
cmp dword [edi], 0
jne 0x5eebfd
mov edx, 1
mov ecx, edi
push dword [edi + 0x58]
push 0x8d
push 0
push 0
call fcn.005fdd80
add esp, 0x10
test eax, eax
je 0x5eebfd
mov edx, 0x20
mov ecx, edi
push 0
push 8
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 8
push 0x81
push 0
push 1
call fcn.005f2690
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 0
push 0x40
push 4
push 0x8d
call fcn.005f2690
add esp, 0x10
xor esi, esi
cmp dword [edi], 0
jne 0x5eee2b
mov dword [ecx], 2
jmp 0x5ec776
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x5ef240
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov dword [edi], eax
mov dword [ecx], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x30000
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x1c]
test eax, eax
cmovne ebp, eax
mov dword [ebp], edi
mov dword [ecx + 0x1c], edi
add dword [ecx + 0x48], 5
mov ecx, dword [ecx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5ef1f3
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5ef21c
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5ef240
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp byte [esp + 0x10], 0
je 0x5ec776
mov eax, dword [edi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [edi + 8], eax
mov dword [edi + 0xc], esi
jmp 0x5ec776
mov eax, dword [esp + 0x14]
mov dword [eax], 2
jmp 0x5ec776
mov esi, dword [esp + 0x140]
test esi, esi
je 0x5efa42
mov ecx, ebp
call fcn.005f3650
test eax, eax
je 0x5ef82c
mov ecx, dword [esi]
test ecx, ecx
je 0x5ef82c
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x5ef813
mov esi, dword [esp + 0x4c]
cmp dword [esi], 0
jne 0x5ef8c4
mov esi, dword [esp + 0x144]
test esi, esi
je 0x5efec4
mov ecx, ebp
call fcn.005f3650
test eax, eax
je 0x5efa71
mov ecx, dword [esi]
test ecx, ecx
je 0x5efa71
mov esi, dword [esi + 4]
test esi, esi
jne 0x5efa58
mov esi, dword [esp + 0x148]
test esi, esi
je 0x5f0118
mov ecx, ebp
call fcn.005f3650
test eax, eax
je 0x5efef3
mov esi, dword [esp + 0x14c]
test esi, esi
je 0x5f0334
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5f1ab3
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
jmp 0x5ea80d
mov dword [esi], 2
jmp 0x5eabef
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5f1e25
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
mov ecx, dword [esp + 0xc]
add dword [ecx + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], esi
mov ecx, dword [esp + 0xc]
cmp dword [ecx], 0
jne 0x5e97cb
mov eax, dword [ecx + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x5f1d60
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x5f1d91
sub esp, 0xc
push 0x800
call dword [0x6f4468]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x5f1e25
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x30]
mov dword [esi], eax
mov dword [ecx + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x1c]
test eax, eax
cmovne ebp, eax
mov dword [ebp], esi
mov dword [ecx + 0x1c], esi
add dword [ecx + 0x48], 6
mov ecx, dword [ecx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x5f1dce
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x5f1df9
sub esp, 0xc
push 0x1000
call dword [0x6f4468]
add esp, 0x10
test eax, eax
je 0x5f1e25
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp byte [esp + 0x18], 0
mov ecx, dword [esp + 0xc]
je 0x5e97cb
mov eax, dword [esi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [esi + 8], eax
mov eax, dword [esp + 0x30]
mov dword [esi + 0xc], eax
jmp 0x5e97cb
mov ecx, dword [esp + 0xc]
mov dword [ecx], 2
jmp 0x5e97cb