Function at 0x54e148
Capabilities:
Copy file
Get common file path
Shutdown system

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x119
push 0
push 0
dec ecx
jne 0x54e150
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov ecx, 0xd
lea eax, [ebp - 0x204]
mov edx, dword [0x401110]
call fcn.00405490
mov ecx, 0xd
lea eax, [ebp - 0x238]
mov edx, dword [0x401110]
call fcn.00405490
mov ebx, dword [0x56108c]
xor eax, eax
push ebp
push 0x5533bd
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x310]
mov byte [eax + 0x1f8], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x36c]
mov byte [eax + 0x1f8], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x388]
mov byte [eax + 0x1f8], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
mov byte [eax + 0x1f8], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3d0]
mov byte [eax + 0x1f8], 1
mov eax, dword [ebp - 4]
call fcn.00556500
lea eax, [ebp - 0x7c]
call fcn.00404980
lea edx, [ebp - 0x24c]
mov eax, 1
call fcn.00402b98
cmp dword [ebp - 0x24c], 0
je 0x54e223
lea edx, [ebp - 0x7c]
mov eax, 1
call fcn.00402b98
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
xor edx, edx
call fcn.0045c7f0
call fcn.004f2290
dec eax
sub al, 4
jb 0x54e245
sub al, 3
jne 0x54e3b4
mov eax, 0xff
call fcn.00402838
mov esi, eax
push 0xff
push esi
call sub.kernel32.dll_GetSystemDirectoryA
lea edx, [ebp - 0x250]
mov eax, 0x5533d8
call fcn.004f24cc
mov eax, dword [ebp - 0x250]
push eax
lea eax, [ebp - 0x254]
mov edx, esi
call fcn.00404b78
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 8]
pop ecx
call fcn.00404c8c
mov eax, dword [ebp - 8]
call fcn.00409b9c
test al, al
jne 0x54e3b4
lea eax, [ebp - 0x258]
mov edx, esi
call fcn.00404b78
lea eax, [ebp - 0x258]
push eax
lea edx, [ebp - 0x25c]
mov eax, 0x553410
call fcn.004f24cc
mov edx, dword [ebp - 0x25c]
pop eax
call fcn.00404c48
mov eax, dword [ebp - 0x258]
call fcn.00409b9c
test al, al
je 0x54e32a
push 0xffffffffffffffff
mov eax, dword [ebp - 8]
call fcn.00404e40
push eax
lea eax, [ebp - 0x260]
mov edx, esi
call fcn.00404b78
lea eax, [ebp - 0x260]
push eax
lea edx, [ebp - 0x264]
mov eax, 0x553438
call fcn.004f24cc
mov edx, dword [ebp - 0x264]
pop eax
call fcn.00404c48
mov eax, dword [ebp - 0x260]
call fcn.00404e40
push eax
call sub.kernel32.dll_CopyFileA
push 0x30
lea edx, [ebp - 0x268]
mov eax, 0x553460
call fcn.004f24cc
mov eax, dword [ebp - 0x268]
call fcn.00404e40
push eax
lea edx, [ebp - 0x270]
mov eax, 0x55347c
call fcn.004f24cc
push dword [ebp - 0x270]
push 0x5534d4
lea edx, [ebp - 0x274]
mov eax, 0x5534e0
call fcn.004f24cc
push dword [ebp - 0x274]
lea eax, [ebp - 0x26c]
mov edx, 3
call fcn.00404d00
mov eax, dword [ebp - 0x26c]
call fcn.00404e40
mov edx, eax
mov eax, dword [0x561040]
mov eax, dword [eax]
pop ecx
call fcn.0047e2ac
push 2
push 2
call sub.user32.dll_ExitWindowsEx
mov eax, dword [ebp - 4]
call fcn.0047a994
mov dl, 1
mov eax, dword [0x41c100]
call fcn.00403a9c
mov dword [ebx], eax
xor eax, eax
push ebp
push 0x54f965
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x27c]
mov eax, 0x55353c
call fcn.004f24cc
mov ecx, dword [ebp - 0x27c]
mov edx, dword [0x5610c0]
mov edx, dword [edx]
lea eax, [ebp - 0x278]
call fcn.00404c8c
mov edx, dword [ebp - 0x278]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
xor ecx, ecx
call fcn.0052caf8
push 0x3e8
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x70]
call fcn.004a8434
lea edx, [ebp - 0x288]
mov eax, 0x553560
call fcn.004f24cc
push dword [ebp - 0x288]
mov eax, dword [0x5610c0]
push dword [eax]
lea edx, [ebp - 0x28c]
mov eax, 0x5535c8
call fcn.004f24cc
push dword [ebp - 0x28c]
lea eax, [ebp - 0x284]
mov edx, 3
call fcn.00404d00
mov edx, dword [ebp - 0x284]
lea eax, [ebp - 0x280]
call fcn.00405208
mov edx, dword [ebp - 0x280]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x70]
call fcn.004bcbac
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x70]
call fcn.004a842c
lea edx, [ebp - 0x294]
mov eax, 0x55367c
call fcn.004f24cc
mov ecx, dword [ebp - 0x294]
mov edx, dword [0x5610c0]
mov edx, dword [edx]
lea eax, [ebp - 0x290]
call fcn.00404c8c
mov edx, dword [ebp - 0x290]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
xor ecx, ecx
call fcn.0052caf8
push 0x3e8
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x58]
call fcn.004a8434
lea edx, [ebp - 0x2a0]
mov eax, 0x553560
call fcn.004f24cc
push dword [ebp - 0x2a0]
mov eax, dword [0x5610c0]
push dword [eax]
lea edx, [ebp - 0x2a4]
mov eax, 0x55369c
call fcn.004f24cc
push dword [ebp - 0x2a4]
lea eax, [ebp - 0x29c]
mov edx, 3
call fcn.00404d00
mov edx, dword [ebp - 0x29c]
lea eax, [ebp - 0x298]
call fcn.00405208
mov edx, dword [ebp - 0x298]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x58]
call fcn.004bcbac
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x58]
call fcn.004a842c
mov ecx, dword [0x560c00]
mov ecx, dword [ecx]
mov edx, dword [0x5610c0]
mov edx, dword [edx]
lea eax, [ebp - 0x2a8]
call fcn.00404c8c
mov eax, dword [ebp - 0x2a8]
call fcn.00409b9c
test al, al
je 0x54e657
mov ecx, dword [0x560c00]
mov ecx, dword [ecx]
mov edx, dword [0x5610c0]
mov edx, dword [edx]
lea eax, [ebp - 0x2ac]
call fcn.00404c8c
mov edx, dword [ebp - 0x2ac]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
xor ecx, ecx
call fcn.0052caf8
push 0x64
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
call fcn.004a8434
lea edx, [ebp - 0x2b8]
mov eax, 0x553560
call fcn.004f24cc
push dword [ebp - 0x2b8]
mov eax, dword [0x5610c0]
push dword [eax]
lea edx, [ebp - 0x2bc]
mov eax, 0x553750
call fcn.004f24cc
push dword [ebp - 0x2bc]
lea eax, [ebp - 0x2b4]
mov edx, 3
call fcn.00404d00
mov edx, dword [ebp - 0x2b4]
lea eax, [ebp - 0x2b0]
call fcn.00405208
mov edx, dword [ebp - 0x2b0]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
call fcn.004bcbac
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
call fcn.004a842c
lea edx, [ebp - 0x2c0]
mov eax, 0x553808
call fcn.004f24cc
mov edx, dword [ebp - 0x2c0]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov ecx, dword [eax + 0x74]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
call fcn.00529fd8
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
call fcn.004b44ec
lea edx, [ebp - 0x2c4]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x2c4]
mov eax, dword [0x560ca8]
call fcn.004049d4
jmp 0x54e70c
push 0x553880
mov eax, dword [0x5610d0]
mov eax, esi
mov edx, 0x553874
call fcn.004b44ec
lea edx, [ebp - 0x2cc]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push dword [ebp - 0x2cc]
push 0x55388c
lea eax, [ebp - 0x2c8]
mov edx, 3
call fcn.00404d00
mov edx, dword [ebp - 0x2c8]
mov eax, dword [ebx]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
call fcn.004b5c2c
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov esi, dword [eax + 0x74]
cmp byte [esi + 0xa1], 0
je 0x54e6b4
mov eax, dword [0x560ca8]
mov eax, dword [eax]
call fcn.00404c40
mov esi, eax
mov eax, dword [ebp - 0x7c]
call fcn.00404c40
cmp esi, eax
jne 0x54e801
mov eax, dword [ebp - 0x7c]
mov edx, dword [0x560ca8]
mov edx, dword [edx]
call fcn.00404d8c
jbe 0x54e801
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
call fcn.004b5df0
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
call fcn.004b44ec
mov edx, dword [ebp - 0x7c]
mov ecx, dword [eax]
call dword [ecx + 0xb0]
call fcn.0040b6f4
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x2d0]
mov eax, 0x553898
call fcn.0040c3f8
mov eax, dword [ebp - 0x2d0]
push eax
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
pop edx
mov ecx, dword [eax]
call dword [ecx + 0xb0]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538b8
call fcn.004b44ec
mov edx, 0x5538c4
mov ecx, dword [eax]
call dword [ecx + 0xb0]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, dword [eax]
call dword [edx + 0x24c]
mov eax, dword [0x560ca8]
mov edx, dword [ebp - 0x7c]
call fcn.004049d4
lea edx, [ebp - 0x2d4]
mov eax, 0x5538d0
call fcn.004f24cc
mov edx, dword [ebp - 0x2d4]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov ecx, dword [eax + 0x74]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
call fcn.00529fd8
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
call fcn.004b44ec
lea edx, [ebp - 0x2d8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x2d8]
mov eax, dword [0x5612a4]
call fcn.004049d4
jmp 0x54e8b6
push 0x553880
mov eax, dword [0x5610d0]
mov eax, esi
mov edx, 0x553874
call fcn.004b44ec
lea edx, [ebp - 0x2e0]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push dword [ebp - 0x2e0]
push 0x55388c
lea eax, [ebp - 0x2dc]
mov edx, 3
call fcn.00404d00
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebx]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
call fcn.004b5c2c
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov esi, dword [eax + 0x74]
cmp byte [esi + 0xa1], 0
je 0x54e85e
mov eax, dword [0x560a54]
call fcn.00404980
lea edx, [ebp - 0x2e4]
mov eax, 0x55393c
call fcn.004f24cc
mov edx, dword [ebp - 0x2e4]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov ecx, dword [eax + 0x74]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
call fcn.00529fd8
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x2f4]
mov edx, 0x553984
call fcn.004158b0
lea ecx, [ebp - 0x2f4]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54e965
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x2f8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x2f8]
mov eax, dword [0x560a54]
call fcn.004049d4
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x308]
mov edx, 0x553990
call fcn.004158b0
lea ecx, [ebp - 0x308]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54e9b8
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x74]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x318]
mov edx, 0x55399c
call fcn.004158b0
lea ecx, [ebp - 0x318]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54ea0b
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x78]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x328]
mov edx, 0x5539a8
call fcn.004158b0
lea ecx, [ebp - 0x328]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54ea74
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x32c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x32c]
call fcn.004097d0
mov edx, dword [0x561264]
mov dword [edx], eax
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x33c]
mov edx, 0x5539b4
call fcn.004158b0
lea ecx, [ebp - 0x33c]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54eadd
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x340]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x340]
call fcn.004097d0
mov edx, dword [0x561244]
mov dword [edx], eax
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x350]
mov edx, 0x5539c0
call fcn.004158b0
lea ecx, [ebp - 0x350]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54eb3c
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5539cc
call fcn.004b44ec
mov edx, dword [eax]
call dword [edx + 0x44]
test al, al
jne 0x54eb3c
mov eax, dword [0x560f14]
mov dword [eax], 0xffffffff
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x360]
mov edx, 0x5539d8
call fcn.004158b0
lea ecx, [ebp - 0x360]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54eb94
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5539cc
call fcn.004b44ec
mov edx, dword [eax]
call dword [edx + 0x44]
mov edx, dword [0x560bd8]
mov byte [edx], al
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x370]
mov edx, 0x5539e4
call fcn.004158b0
lea ecx, [ebp - 0x370]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54ebec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
push eax
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov edx, dword [eax + 0x74]
mov ecx, 0x5539f0
mov eax, dword [ebp - 4]
call fcn.005549ac
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x380]
mov edx, 0x5539fc
call fcn.004158b0
lea ecx, [ebp - 0x380]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54ec77
xor eax, eax
push ebp
push 0x54ec6d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x384]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x384]
call fcn.004097d0
mov edx, dword [0x560cac]
mov dword [edx], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x54ec77
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x394]
mov edx, 0x553a08
call fcn.004158b0
lea ecx, [ebp - 0x394]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54ed28
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x50]
mov ecx, dword [eax]
call dword [ecx + 0x60]
lea eax, [ebp - 0x398]
push eax
mov ecx, 1
mov edx, 5
mov eax, dword [ebp - 0x50]
call fcn.00404ea0
mov eax, dword [ebp - 0x398]
call fcn.004097d0
mov ebx, eax
lea eax, [ebp - 0x50]
push eax
lea edx, [ebx + 6]
mov ecx, 6
mov eax, dword [ebp - 0x50]
call fcn.00404ea0
lea eax, [ebp - 0x50]
mov ecx, 0x21
mov dx, 0x15
call fcn.004f30e0
mov eax, dword [ebp - 0x50]
call fcn.004097d0
mov ecx, 9
cdq
idiv ecx
mov dword [ebp - 0x70], eax
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x3a8]
mov edx, 0x553a14
call fcn.004158b0
lea ecx, [ebp - 0x3a8]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54edeb
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x50]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push 0
lea eax, [ebp - 0x3ac]
push eax
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov cx, word [ebp - 0x70]
mov edx, dword [ebp - 0x50]
call fcn.00529be8
mov edx, dword [ebp - 0x3ac]
lea eax, [ebp - 0x50]
call fcn.00404a18
lea eax, [ebp - 0x50]
push eax
mov ecx, 2
mov edx, 0x15
mov eax, dword [ebp - 0x50]
call fcn.00404ea0
lea eax, [ebp - 0x54]
push eax
mov ecx, 1
mov edx, 2
mov eax, dword [ebp - 0x50]
call fcn.00404ea0
lea eax, [ebp - 0x50]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x50]
call fcn.00404ea0
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x3bc]
mov edx, 0x553a20
call fcn.004158b0
lea ecx, [ebp - 0x3bc]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54ee7e
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x58]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push 0
lea eax, [ebp - 0x3c0]
push eax
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov cx, word [ebp - 0x70]
mov edx, dword [ebp - 0x58]
call fcn.00529be8
mov edx, dword [ebp - 0x3c0]
lea eax, [ebp - 0x58]
call fcn.00404a18
lea eax, [ebp - 0x58]
push eax
mov ecx, 1
mov edx, 0x15
mov eax, dword [ebp - 0x58]
call fcn.00404ea0
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x3d0]
mov edx, 0x553a2c
call fcn.004158b0
lea ecx, [ebp - 0x3d0]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54ef11
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x5c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push 0
lea eax, [ebp - 0x3d4]
push eax
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov cx, word [ebp - 0x70]
mov edx, dword [ebp - 0x5c]
call fcn.00529be8
mov edx, dword [ebp - 0x3d4]
lea eax, [ebp - 0x5c]
call fcn.00404a18
lea eax, [ebp - 0x5c]
push eax
mov ecx, 1
mov edx, 0x15
mov eax, dword [ebp - 0x5c]
call fcn.00404ea0
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x3e4]
mov edx, 0x553a38
call fcn.004158b0
lea ecx, [ebp - 0x3e4]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54ef77
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x3e8]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x3e8]
mov eax, dword [0x560bcc]
call fcn.004049d4
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x3f8]
mov edx, 0x553a44
call fcn.004158b0
lea ecx, [ebp - 0x3f8]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54f00a
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x60]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push 0
lea eax, [ebp - 0x3fc]
push eax
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov cx, word [ebp - 0x70]
mov edx, dword [ebp - 0x60]
call fcn.00529be8
mov edx, dword [ebp - 0x3fc]
lea eax, [ebp - 0x60]
call fcn.00404a18
lea eax, [ebp - 0x60]
push eax
mov ecx, 1
mov edx, 0x15
mov eax, dword [ebp - 0x60]
call fcn.00404ea0
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x40c]
mov edx, 0x553a50
call fcn.004158b0
lea ecx, [ebp - 0x40c]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54f09d
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x64]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push 0
lea eax, [ebp - 0x410]
push eax
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov cx, word [ebp - 0x70]
mov edx, dword [ebp - 0x64]
call fcn.00529be8
mov edx, dword [ebp - 0x410]
lea eax, [ebp - 0x64]
call fcn.00404a18
lea eax, [ebp - 0x64]
push eax
mov ecx, 1
mov edx, 0x15
mov eax, dword [ebp - 0x64]
call fcn.00404ea0
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x420]
mov edx, 0x553a5c
call fcn.004158b0
lea ecx, [ebp - 0x420]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54f30c
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x68]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push 0
lea eax, [ebp - 0x424]
push eax
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov bx, word [ebp - 0x70]
mov ecx, ebx
mov edx, dword [ebp - 0x68]
call fcn.00529be8
mov edx, dword [ebp - 0x424]
lea eax, [ebp - 0x68]
call fcn.00404a18
mov eax, dword [0x560f80]
push eax
mov ecx, 0xc
mov edx, 6
mov eax, dword [ebp - 0x68]
call fcn.00404ea0
push 0
lea eax, [ebp - 0x428]
push eax
mov edx, dword [0x560f80]
mov edx, dword [edx]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov ecx, ebx
call fcn.00529be8
mov edx, dword [ebp - 0x428]
mov eax, dword [0x560f80]
call fcn.004049d4
lea eax, [ebp - 0x42c]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 1
mov edx, 1
call fcn.00404ea0
mov eax, dword [ebp - 0x42c]
mov edx, dword [ebp - 0x50]
call fcn.00404d8c
jne 0x54f281
lea eax, [ebp - 0x430]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 1
mov edx, 2
call fcn.00404ea0
mov eax, dword [ebp - 0x430]
mov edx, dword [ebp - 0x54]
call fcn.00404d8c
jne 0x54f281
lea eax, [ebp - 0x434]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 1
mov edx, 3
call fcn.00404ea0
mov eax, dword [ebp - 0x434]
mov edx, dword [ebp - 0x58]
call fcn.00404d8c
jne 0x54f281
lea eax, [ebp - 0x438]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 1
mov edx, 4
call fcn.00404ea0
mov eax, dword [ebp - 0x438]
mov edx, dword [ebp - 0x5c]
call fcn.00404d8c
jne 0x54f281
lea eax, [ebp - 0x43c]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 1
mov edx, 5
call fcn.00404ea0
mov eax, dword [ebp - 0x43c]
mov edx, dword [ebp - 0x60]
call fcn.00404d8c
jne 0x54f281
lea eax, [ebp - 0x440]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 1
mov edx, 6
call fcn.00404ea0
mov eax, dword [ebp - 0x440]
mov edx, dword [ebp - 0x64]
call fcn.00404d8c
je 0x54f298
mov eax, 0x553a68
call fcn.004097d0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55307a
lea eax, [ebp - 0x444]
push eax
mov ecx, 2
mov edx, 0x15
mov eax, dword [ebp - 0x68]
call fcn.00404ea0
mov eax, dword [ebp - 0x444]
call fcn.004097d0
mov ebx, eax
lea eax, [ebp - 0x68]
push eax
mov ecx, ebx
mov edx, 0x1f
mov eax, dword [ebp - 0x68]
call fcn.00404ea0
push 0
lea eax, [ebp - 0x44c]
push eax
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov cx, word [ebp - 0x70]
mov edx, dword [ebp - 0x68]
call fcn.00529be8
mov eax, dword [ebp - 0x44c]
lea edx, [ebp - 0x448]
call fcn.004f2648
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x68]
call fcn.00404a18
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x45c]
mov edx, 0x553a74
call fcn.004158b0
lea ecx, [ebp - 0x45c]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54f57b
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x6c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
push 0
lea eax, [ebp - 0x460]
push eax
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov bx, word [ebp - 0x70]
mov ecx, ebx
mov edx, dword [ebp - 0x6c]
call fcn.00529be8
mov edx, dword [ebp - 0x460]
lea eax, [ebp - 0x6c]
call fcn.00404a18
mov eax, dword [0x560f80]
push eax
mov ecx, 0xc
mov edx, 6
mov eax, dword [ebp - 0x6c]
call fcn.00404ea0
push 0
lea eax, [ebp - 0x464]
push eax
mov edx, dword [0x560f80]
mov edx, dword [edx]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov ecx, ebx
call fcn.00529be8
mov edx, dword [ebp - 0x464]
mov eax, dword [0x560f80]
call fcn.004049d4
lea eax, [ebp - 0x468]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 1
mov edx, 1
call fcn.00404ea0
mov eax, dword [ebp - 0x468]
mov edx, dword [ebp - 0x50]
call fcn.00404d8c
jne 0x54f4f0
lea eax, [ebp - 0x46c]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 1
mov edx, 2
call fcn.00404ea0
mov eax, dword [ebp - 0x46c]
mov edx, dword [ebp - 0x54]
call fcn.00404d8c
jne 0x54f4f0
lea eax, [ebp - 0x470]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 1
mov edx, 3
call fcn.00404ea0
mov eax, dword [ebp - 0x470]
mov edx, dword [ebp - 0x58]
call fcn.00404d8c
jne 0x54f4f0
lea eax, [ebp - 0x474]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 1
mov edx, 4
call fcn.00404ea0
mov eax, dword [ebp - 0x474]
mov edx, dword [ebp - 0x5c]
call fcn.00404d8c
jne 0x54f4f0
lea eax, [ebp - 0x478]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 1
mov edx, 5
call fcn.00404ea0
mov eax, dword [ebp - 0x478]
mov edx, dword [ebp - 0x60]
call fcn.00404d8c
jne 0x54f4f0
lea eax, [ebp - 0x47c]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 1
mov edx, 6
call fcn.00404ea0
mov eax, dword [ebp - 0x47c]
mov edx, dword [ebp - 0x64]
call fcn.00404d8c
je 0x54f507
mov eax, 0x553a68
call fcn.004097d0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55307a
lea eax, [ebp - 0x480]
push eax
mov ecx, 2
mov edx, 0x15
mov eax, dword [ebp - 0x6c]
call fcn.00404ea0
mov eax, dword [ebp - 0x480]
call fcn.004097d0
mov ebx, eax
lea eax, [ebp - 0x6c]
push eax
mov ecx, ebx
mov edx, 0x1f
mov eax, dword [ebp - 0x6c]
call fcn.00404ea0
push 0
lea eax, [ebp - 0x488]
push eax
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov cx, word [ebp - 0x70]
mov edx, dword [ebp - 0x6c]
call fcn.00529be8
mov eax, dword [ebp - 0x488]
lea edx, [ebp - 0x484]
call fcn.004f2648
mov edx, dword [ebp - 0x484]
lea eax, [ebp - 0x6c]
call fcn.00404a18
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x498]
mov edx, 0x553a80
call fcn.004158b0
lea ecx, [ebp - 0x498]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54f69b
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x49c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x49c]
mov eax, dword [0x560fe8]
call fcn.004049d4
push 0
lea eax, [ebp - 0x4a0]
push eax
mov edx, dword [0x560fe8]
mov edx, dword [edx]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov si, word [ebp - 0x70]
mov ecx, esi
call fcn.00529be8
mov edx, dword [ebp - 0x4a0]
mov eax, dword [0x560fe8]
call fcn.004049d4
lea eax, [ebp - 0x4a4]
push eax
mov eax, dword [0x560fe8]
mov eax, dword [eax]
mov ecx, 2
mov edx, 0x15
call fcn.00404ea0
mov eax, dword [ebp - 0x4a4]
call fcn.004097d0
mov ebx, eax
mov eax, dword [0x560fe8]
push eax
mov eax, dword [0x560fe8]
mov eax, dword [eax]
mov ecx, ebx
mov edx, 0x1f
call fcn.00404ea0
push 0
lea eax, [ebp - 0x4ac]
push eax
mov edx, dword [0x560fe8]
mov edx, dword [edx]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov ecx, esi
call fcn.00529be8
mov eax, dword [ebp - 0x4ac]
lea edx, [ebp - 0x4a8]
call fcn.004f2648
mov edx, dword [ebp - 0x4a8]
mov eax, dword [0x560fe8]
call fcn.004049d4
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x4bc]
mov edx, 0x553a8c
call fcn.004158b0
lea ecx, [ebp - 0x4bc]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54f7bb
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x4c0]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x4c0]
mov eax, dword [0x561044]
call fcn.004049d4
push 0
lea eax, [ebp - 0x4c4]
push eax
mov edx, dword [0x561044]
mov edx, dword [edx]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov si, word [ebp - 0x70]
mov ecx, esi
call fcn.00529be8
mov edx, dword [ebp - 0x4c4]
mov eax, dword [0x561044]
call fcn.004049d4
lea eax, [ebp - 0x4c8]
push eax
mov eax, dword [0x561044]
mov eax, dword [eax]
mov ecx, 2
mov edx, 0x15
call fcn.00404ea0
mov eax, dword [ebp - 0x4c8]
call fcn.004097d0
mov ebx, eax
mov eax, dword [0x561044]
push eax
mov eax, dword [0x561044]
mov eax, dword [eax]
mov ecx, ebx
mov edx, 0x1f
call fcn.00404ea0
push 0
lea eax, [ebp - 0x4d0]
push eax
mov edx, dword [0x561044]
mov edx, dword [edx]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov ecx, esi
call fcn.00529be8
mov eax, dword [ebp - 0x4d0]
lea edx, [ebp - 0x4cc]
call fcn.004f2648
mov edx, dword [ebp - 0x4cc]
mov eax, dword [0x561044]
call fcn.004049d4
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x4e0]
mov edx, 0x553a98
call fcn.004158b0
lea ecx, [ebp - 0x4e0]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54f8ca
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x4e4]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x4e4]
mov eax, dword [0x560f80]
call fcn.004049d4
push 0
lea eax, [ebp - 0x4e8]
push eax
mov edx, dword [0x560f80]
mov edx, dword [edx]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov si, word [ebp - 0x70]
mov ecx, esi
call fcn.00529be8
mov edx, dword [ebp - 0x4e8]
mov eax, dword [0x560f80]
call fcn.004049d4
lea eax, [ebp - 0x4ec]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, 2
mov edx, 0x15
call fcn.00404ea0
mov eax, dword [ebp - 0x4ec]
call fcn.004097d0
mov ebx, eax
mov eax, dword [0x560f80]
push eax
mov eax, dword [0x560f80]
mov eax, dword [eax]
mov ecx, ebx
mov edx, 0x1f
call fcn.00404ea0
push 0
lea eax, [ebp - 0x4f0]
push eax
mov edx, dword [0x560f80]
mov edx, dword [edx]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov ecx, esi
call fcn.00529be8
mov edx, dword [ebp - 0x4f0]
mov eax, dword [0x560f80]
call fcn.004049d4
mov eax, dword [0x561014]
call fcn.00404980
mov al, byte [0x553978]
push eax
lea eax, [ebp - 0x500]
mov edx, 0x553aa4
call fcn.004158b0
lea ecx, [ebp - 0x500]
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x553874
mov ebx, dword [eax]
call dword [ebx + 0x244]
test al, al
je 0x54f95b
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5538ac
call fcn.004b44ec
lea edx, [ebp - 0x504]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x504]
mov eax, dword [0x561014]
call fcn.004049d4
mov eax, dword [0x5610d0]
mov eax, dword [eax]
mov eax, dword [eax + 0x74]
mov edx, 0x5539cc
call fcn.004b44ec
mov edx, dword [eax]
call dword [edx + 0x44]
mov edx, dword [0x5611bc]
mov byte [edx], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x54f9c3
mov eax, dword [ebp - 0x5c]
mov edx, 0x553af0
call fcn.00404d8c
je 0x54f9e5
mov eax, dword [ebp - 0x5c]
mov edx, 0x553afc
call fcn.00404d8c
je 0x54f9e5
xor eax, eax
jmp 0x54f9e7
mov al, 1
mov edx, dword [0x560ae4]
mov byte [edx], al
mov eax, dword [0x5610cc]
mov edx, dword [ebp - 0x58]
call fcn.004049d4
mov eax, dword [ebp - 0x58]
mov edx, 0x553b08
call fcn.00404d8c
jne 0x54fa1c
mov eax, dword [0x560ce0]
mov edx, 0x553b14
call fcn.004049d4
jmp 0x54fa9a
mov eax, dword [ebp - 0x58]
mov edx, 0x553b24
call fcn.00404d8c
jne 0x54fa3c
mov eax, dword [0x560ce0]
mov edx, 0x553b30
call fcn.004049d4
jmp 0x54fa9a
mov eax, dword [ebp - 0x58]
mov edx, 0x553af0
call fcn.00404d8c
jne 0x54fa5c
mov eax, dword [0x560ce0]
mov edx, 0x553b40
call fcn.004049d4
jmp 0x54fa9a
mov eax, dword [ebp - 0x58]
mov edx, 0x553afc
call fcn.00404d8c
jne 0x54fa7c
mov eax, dword [0x560ce0]
mov edx, 0x553b50
call fcn.004049d4
jmp 0x54fa9a
mov eax, dword [ebp - 0x58]
mov edx, 0x553b60
call fcn.00404d8c
jne 0x54fa9a
mov eax, dword [0x560ce0]
mov edx, 0x553b6c
call fcn.004049d4
mov eax, dword [0x560b80]
mov byte [eax], 0x42
mov eax, dword [ebp - 0x74]
mov edx, 0x553b30
call fcn.00404d8c
jne 0x54fb20
mov eax, dword [ebp - 0x78]
mov edx, 0x553b7c
call fcn.00404d8c
jne 0x54fb20
mov eax, dword [ebp - 0x58]
mov edx, 0x553b24
call fcn.00404d8c
jne 0x54fb20
mov eax, dword [ebp - 0x64]
mov edx, 0x553b08
call fcn.00404d8c
jne 0x54fb20
lea edx, [ebp - 0x514]
mov eax, dword [0x560bcc]
mov eax, dword [eax]
call fcn.004f24cc
mov eax, dword [ebp - 0x514]
lea ecx, [ebp - 0x510]
mov edx, 2
call fcn.0043ab80
mov eax, dword [ebp - 0x510]
mov edx, 0x553b7c
call fcn.00404d8c
jne 0x54fb20
mov eax, dword [0x560b80]
mov byte [eax], 0x45
mov eax, dword [ebp - 0x74]
mov edx, 0x553b14
call fcn.00404d8c
jne 0x54fb9e
mov eax, dword [ebp - 0x78]
mov edx, 0x553b88
call fcn.00404d8c
jne 0x54fb9e
mov eax, dword [ebp - 0x58]
mov edx, 0x553b08
call fcn.00404d8c
jne 0x54fb9e
mov eax, dword [ebp - 0x64]
mov edx, 0x553af0
call fcn.00404d8c
jne 0x54fb9e
lea edx, [ebp - 0x51c]
mov eax, dword [0x560bcc]
mov eax, dword [eax]
call fcn.004f24cc
mov eax, dword [ebp - 0x51c]
lea ecx, [ebp - 0x518]
mov edx, 2
call fcn.0043ab80
mov eax, dword [ebp - 0x518]
mov edx, 0x553b88
call fcn.00404d8c
jne 0x54fb9e
mov eax, dword [0x560b80]
mov byte [eax], 0x41
mov eax, dword [ebp - 0x74]
mov edx, 0x553b40
call fcn.00404d8c
jne 0x54fc1c
mov eax, dword [ebp - 0x78]
mov edx, 0x553b94
call fcn.00404d8c
jne 0x54fc1c
mov eax, dword [ebp - 0x58]
mov edx, 0x553af0
call fcn.00404d8c
jne 0x54fc1c
mov eax, dword [ebp - 0x64]
mov edx, 0x553afc
call fcn.00404d8c
jne 0x54fc1c
lea edx, [ebp - 0x524]
mov eax, dword [0x560bcc]
mov eax, dword [eax]
call fcn.004f24cc
mov eax, dword [ebp - 0x524]
lea ecx, [ebp - 0x520]
mov edx, 2
call fcn.0043ab80
mov eax, dword [ebp - 0x520]
mov edx, 0x553b94
call fcn.00404d8c
jne 0x54fc1c
mov eax, dword [0x560b80]
mov byte [eax], 0x42
mov eax, dword [ebp - 0x74]
mov edx, 0x553b50
call fcn.00404d8c
jne 0x54fc9a
mov eax, dword [ebp - 0x78]
mov edx, 0x553ba0
call fcn.00404d8c
jne 0x54fc9a
mov eax, dword [ebp - 0x58]
mov edx, 0x553afc
call fcn.00404d8c
jne 0x54fc9a
mov eax, dword [ebp - 0x64]
mov edx, 0x553b60
call fcn.00404d8c
jne 0x54fc9a
lea edx, [ebp - 0x52c]
mov eax, dword [0x560bcc]
mov eax, dword [eax]
call fcn.004f24cc
mov eax, dword [ebp - 0x52c]
lea ecx, [ebp - 0x528]
mov edx, 2
call fcn.0043ab80
mov eax, dword [ebp - 0x528]
mov edx, 0x553ba0
call fcn.00404d8c
jne 0x54fc9a
mov eax, dword [0x560b80]
mov byte [eax], 0x43
mov eax, dword [ebp - 0x74]
mov edx, 0x553b6c
call fcn.00404d8c
jne 0x54fd18
mov eax, dword [ebp - 0x78]
mov edx, 0x553bac
call fcn.00404d8c
jne 0x54fd18
mov eax, dword [ebp - 0x58]
mov edx, 0x553b60
call fcn.00404d8c
jne 0x54fd18
mov eax, dword [ebp - 0x64]
mov edx, 0x553bb8
call fcn.00404d8c
jne 0x54fd18
lea edx, [ebp - 0x534]
mov eax, dword [0x560bcc]
mov eax, dword [eax]
call fcn.004f24cc
mov eax, dword [ebp - 0x534]
lea ecx, [ebp - 0x530]
mov edx, 2
call fcn.0043ab80
mov eax, dword [ebp - 0x530]
mov edx, 0x553bac
call fcn.00404d8c
jne 0x54fd18
mov eax, dword [0x560b80]
mov byte [eax], 0x44
mov eax, dword [0x560a54]
mov eax, dword [eax]
mov edx, 0x553bc4
call fcn.00404d8c
je 0x54fd42
mov eax, dword [0x560a54]
mov eax, dword [eax]
mov edx, 0x553bd4
call fcn.00404d8c
jne 0x54fde7
push 0x553be0
call sub.kernel32.dll_GlobalAddAtomA
movzx eax, ax
sub eax, 0xc000
mov edx, dword [ebp - 4]
mov dword [edx + 0x42c], eax
push 9
push 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x42c]
push eax
mov eax, dword [ebp - 4]
call fcn.00463204
push eax
call sub.user32.dll_RegisterHotKey
push 0x553be8
call sub.kernel32.dll_GlobalAddAtomA
movzx eax, ax
sub eax, 0xc000
mov edx, dword [ebp - 4]
mov dword [edx + 0x424], eax
push 0x2c
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x424]
push eax
mov eax, dword [ebp - 4]
call fcn.00463204
push eax
call sub.user32.dll_RegisterHotKey
push 0x553bf0
call sub.kernel32.dll_GlobalAddAtomA
movzx eax, ax
sub eax, 0xc000
mov edx, dword [ebp - 4]
mov dword [edx + 0x428], eax
push 0x2c
push 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x428]
push eax
mov eax, dword [ebp - 4]
call fcn.00463204
push eax
call sub.user32.dll_RegisterHotKey
xor eax, eax
push ebp
push 0x54fe82
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x538]
mov eax, dword [0x561040]
mov eax, dword [eax]
call fcn.0047e72c
mov edx, dword [ebp - 0x538]
lea eax, [ebp - 0x1d0]
call fcn.00402f48
mov eax, dword [0x561178]
mov byte [eax], 0
mov edx, 1
lea eax, [ebp - 0x1d0]
call fcn.00403414
call fcn.004029a0
lea eax, [ebp - 0x1d0]
call fcn.00403284
call fcn.004029a0
cmp eax, 0x360a00
je 0x54fe64
push 0x98967f
call sub.kernel32.dll_Sleep_1
jmp 0x54fe4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x54fe89
lea eax, [ebp - 0x1d0]
call fcn.004030e0
call fcn.004029a0
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5533c7
lea eax, [ebp - 0x8c8]
mov edx, 9
call fcn.004049a4
lea eax, [ebp - 0x8a4]
call fcn.00411164
lea eax, [ebp - 0x894]
mov edx, dword [0x4b6fcc]
mov ecx, 2
call fcn.0040557c
lea eax, [ebp - 0x88c]
mov edx, 3
call fcn.004049a4
lea eax, [ebp - 0x880]
call fcn.0040508c
lea eax, [ebp - 0x87c]
call fcn.0040670c
lea eax, [ebp - 0x878]
mov edx, 0x21
call fcn.004049a4
lea eax, [ebp - 0x7f4]
call fcn.00411164
lea eax, [ebp - 0x7e4]
mov edx, 0xc
call fcn.004049a4
lea eax, [ebp - 0x7b4]
mov edx, 2
call fcn.004049a4
lea eax, [ebp - 0x7ac]
mov edx, 0x21
call fcn.004049a4
lea eax, [ebp - 0x720]
mov edx, 2
call fcn.004049a4
lea eax, [ebp - 0x728]
mov edx, 2
call fcn.004049a4
lea eax, [ebp - 0x718]
mov edx, 0x60
call fcn.004049a4
lea eax, [ebp - 0x594]
mov edx, 2
call fcn.004049a4
lea eax, [ebp - 0x598]
call fcn.00404980
lea eax, [ebp - 0x58c]
mov edx, 0x23
call fcn.004049a4
lea eax, [ebp - 0x500]
call fcn.00411164
lea eax, [ebp - 0x4f0]
mov edx, 4
call fcn.004049a4
lea eax, [ebp - 0x4e0]
call fcn.00411164
lea eax, [ebp - 0x4d0]
mov edx, 5
call fcn.004049a4
lea eax, [ebp - 0x4bc]
call fcn.00411164
lea eax, [ebp - 0x4ac]
mov edx, 5
call fcn.004049a4
lea eax, [ebp - 0x498]
call fcn.00411164
lea eax, [ebp - 0x488]
mov edx, 0xb
call fcn.004049a4
lea eax, [ebp - 0x45c]
call fcn.00411164
lea eax, [ebp - 0x44c]
mov edx, 0xb
call fcn.004049a4
lea eax, [ebp - 0x420]
call fcn.00411164
lea eax, [ebp - 0x410]
call fcn.00404980
lea eax, [ebp - 0x40c]
call fcn.00411164
lea eax, [ebp - 0x3fc]
call fcn.00404980
lea eax, [ebp - 0x3f8]
call fcn.00411164
lea eax, [ebp - 0x3e8]
call fcn.00404980
lea eax, [ebp - 0x3e4]
call fcn.00411164
lea eax, [ebp - 0x3d4]
call fcn.00404980
lea eax, [ebp - 0x3d0]
call fcn.00411164
lea eax, [ebp - 0x3c0]
call fcn.00404980
lea eax, [ebp - 0x3bc]
call fcn.00411164
lea eax, [ebp - 0x3ac]
call fcn.00404980
lea eax, [ebp - 0x3a8]
call fcn.00411164
lea eax, [ebp - 0x398]
call fcn.00404980
lea eax, [ebp - 0x394]
call fcn.00411164
lea eax, [ebp - 0x384]
call fcn.00404980
lea eax, [ebp - 0x380]
mov edx, dword [0x40112c]
mov ecx, 4
call fcn.0040557c
lea eax, [ebp - 0x340]
call fcn.00404980
lea eax, [ebp - 0x33c]
call fcn.00411164
lea eax, [ebp - 0x32c]
call fcn.00404980
lea eax, [ebp - 0x328]
mov edx, dword [0x40112c]
mov ecx, 3
call fcn.0040557c
lea eax, [ebp - 0x2f8]
call fcn.00404980
lea eax, [ebp - 0x2f4]
call fcn.00411164
lea eax, [ebp - 0x2e4]
mov edx, 0xd
call fcn.004049a4
lea eax, [ebp - 0x2b0]
call fcn.0040508c
lea eax, [ebp - 0x2ac]
mov edx, 5
call fcn.004049a4
lea eax, [ebp - 0x298]
call fcn.0040508c
lea eax, [ebp - 0x294]
mov edx, 5
call fcn.004049a4
lea eax, [ebp - 0x280]
call fcn.0040508c
lea eax, [ebp - 0x27c]
mov edx, 0xd
call fcn.004049a4
lea eax, [ebp - 0x238]
mov ecx, 0x1a
mov edx, dword [0x401110]
call fcn.0040557c
lea eax, [ebp - 0x80]
mov edx, 4
call fcn.004049a4
lea eax, [ebp - 0x6c]
mov edx, 0x10
call fcn.004049a4
lea eax, [ebp - 0x28]
mov edx, 9
call fcn.004049a4
ret