Function at 0x5f6de8
Capabilities:
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffcb8
mov eax, 0x69d2ab
xor edx, edx
push ebx
push esi
push edi
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x4c], 0x6e6050
mov dword [ebp - 0x48], esp
mov dword [ebp - 0x50], eax
mov word [ebp - 0x44], 0
mov dword [ebp - 0x38], edx
mov ecx, dword fs:[0]
mov dword [ebp - 0x54], ecx
lea eax, [ebp - 0x54]
mov dword fs:[0], eax
push 0x6de172
mov edx, dword [ebp + 0x18]
push edx
push 0x6de150
push 0x6de149
lea ecx, [ebp - 0x1a8]
push ecx
call fcn.006a0ad0
add esp, 0x14
lea eax, [ebp - 0x5c]
lea edx, [ebp - 0x58]
lea ecx, [ebp - 0x1a8]
push eax
push edx
push 0
push 0x20006
push 0
push 0
push 0
push ecx
push reloc.WSOCK32.DLL_bind
call sub.ADVAPI32.DLL_RegCreateKeyExA
test eax, eax
je 0x5f6e81
mov eax, dword [ebp - 0x54]
mov dword fs:[0], eax
jmp 0x5f79e3
mov word [ebp - 0x44], 0x14
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x10]
push edx
push 0x6de17c
push ecx
call fcn.0069a6ec
add esp, 0xc
inc dword [ebp - 0x38]
mov word [ebp - 0x44], 8
mov al, byte [ebx + 0x50]
test al, al
je 0x5f6ebd
push 0x6de17f
lea edx, [ebp - 0x10]
push edx
call fcn.0069a464
add esp, 8
push 0xa
lea ecx, [ebp - 0x1cc]
push ecx
mov eax, dword [ebx + 0x90]
push eax
call fcn.006a4f58
add esp, 0xc
mov dword [ebp - 0x68], eax
mov edx, dword [ebp - 8]
mov ecx, dword [edx - 4]
mov dword [ebp - 0x6c], ecx
mov eax, dword [ebp - 0x68]
push eax
call fcn.0069ce0c
pop ecx
mov dword [ebp - 0x70], eax
mov edx, dword [ebp - 0x70]
push edx
push 0
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp - 0x68]
push eax
push 0
mov edx, dword [ebp - 0x6c]
push edx
lea ecx, [ebp - 0x10]
push ecx
call fcn.0069ad68
add esp, 0x1c
xor eax, eax
mov al, byte [ebp + 0x14]
cmp eax, 1
sbb edx, edx
neg edx
test edx, edx
je 0x5f6f2e
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 8]
push eax
mov edx, dword [ebp - 0x58]
push edx
call sub.ADVAPI32.DLL_RegDeleteValueA
mov ecx, dword [ebp - 8]
mov eax, dword [ecx - 4]
inc eax
push eax
mov edx, dword [ebp - 8]
push edx
push 1
push 0
mov ecx, dword [ebx + 8]
push ecx
mov eax, dword [ebp - 0x58]
push eax
call sub.ADVAPI32.DLL_RegSetValueExA
mov edx, dword [ebp - 0x58]
push edx
call sub.ADVAPI32.DLL_RegCloseKey
xor ecx, ecx
mov cl, byte [ebp + 0x14]
cmp ecx, 1
sbb eax, eax
neg eax
test eax, eax
je 0x5f6fa1
mov edx, dword [ebp + 0x10]
mov ecx, dword [edx + 8]
push ecx
push 0x6de1ae
mov eax, dword [ebp + 0x18]
push eax
push 0x6de18c
push 0x6de182
lea edx, [ebp - 0x1a8]
push edx
call fcn.006a0ad0
add esp, 0x18
lea ecx, [ebp - 0x1a8]
push ecx
push reloc.WSOCK32.DLL_bind
call fcn.00446bb4
add esp, 8
mov eax, dword [ebx + 8]
push eax
push 0x6de1e8
mov edx, dword [ebp + 0x18]
push edx
push 0x6de1c6
push 0x6de1bc
lea ecx, [ebp - 0x1a8]
push ecx
call fcn.006a0ad0
add esp, 0x18
lea eax, [ebp - 0x5c]
lea edx, [ebp - 0x58]
lea ecx, [ebp - 0x1a8]
push eax
push edx
push 0
push 0x2001f
push 0
push 0
push 0
push ecx
push reloc.WSOCK32.DLL_bind
call sub.ADVAPI32.DLL_RegCreateKeyExA
test eax, eax
je 0x5f709d
dec dword [ebp - 0x38]
mov eax, dword [ebp - 8]
test eax, eax
je 0x5f708f
mov edx, dword [ebp - 8]
mov ecx, dword [edx - 0xc]
inc ecx
test ecx, ecx
je 0x5f7050
mov eax, dword [ebp - 8]
add eax, 0xfffffff4
mov dword [ebp - 0x74], eax
mov edx, 0x6ff36c
mov ecx, dword [ebp - 0x74]
cmp edx, ecx
je 0x5f7047
mov eax, 0x6ff36c
mov edx, dword [ebp - 0x74]
cmp eax, edx
je 0x5f7040
mov ecx, dword [ebp - 0x74]
push ecx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebp - 0x74]
mov edx, dword [eax]
inc edx
jmp 0x5f704c
mov edx, 1
jmp 0x5f704c
mov edx, 1
test edx, edx
jne 0x5f708f
mov eax, dword [ebp - 8]
add eax, 0xfffffff4
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 8]
add ecx, 0xfffffff4
mov dword [ebp - 0x7c], ecx
mov eax, dword [ebp - 0x7c]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x80], edx
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 8], ecx
mov dword [ebp - 0x84], eax
mov edx, dword [ebp - 0x84]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x1d4], ecx
mov eax, dword [ebp - 0x54]
mov dword fs:[0], eax
jmp 0x5f79e3
push str.Anonymous
mov edx, dword [ebx + 8]
push edx
call fcn.0069cfd8
add esp, 8
test eax, eax
jne 0x5f70b6
xor eax, eax
jmp 0x5f70b9
mov eax, dword [ebx + 0x18]
push eax
push 0x6de200
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov eax, dword [ebx + 0x38]
push eax
push str.HomeDir
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov ecx, dword [ebx + 0x48]
mov eax, dword [ecx - 4]
test eax, eax
je 0x5f70ef
mov eax, dword [ebx + 0x48]
jmp 0x5f70f1
xor eax, eax
push eax
push str.LoginMesFile
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov cl, byte [ebx + 0x50]
test cl, cl
je 0x5f7111
mov eax, 0x6de21e
jmp 0x5f7113
xor eax, eax
push eax
push 0x6de220
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov cl, byte [ebx + 0x51]
test cl, cl
je 0x5f7133
mov eax, 0x6de227
jmp 0x5f7135
xor eax, eax
push eax
push str.NeedSecure
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov cl, byte [ebx + 0x52]
test cl, cl
je 0x5f7155
mov eax, 0x6de234
jmp 0x5f7157
xor eax, eax
push eax
push str.RelPaths
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov cl, byte [ebx + 0x53]
test cl, cl
je 0x5f7177
mov eax, 0x6de23f
jmp 0x5f7179
xor eax, eax
push eax
push str.HideHidden
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov cl, byte [ebx + 0x54]
test cl, cl
je 0x5f7199
mov eax, 0x6de24c
jmp 0x5f719b
xor eax, eax
push eax
push str.AlwaysAllowLogin
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov cl, byte [ebx + 0x55]
test cl, cl
je 0x5f71bb
mov eax, 0x6de25f
jmp 0x5f71bd
xor eax, eax
push eax
push str.ChangePassword
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov cl, byte [ebx + 0x56]
test cl, cl
je 0x5f721a
push dword [ebx + 0x84]
push dword [ebx + 0x80]
push dword [ebx + 0x8c]
push dword [ebx + 0x88]
push str.1_I64d_I64d
lea ecx, [ebp - 0x240]
push ecx
call fcn.006a0ad0
add esp, 0x18
lea eax, [ebp - 0x240]
push eax
push 0x6de27e
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov ecx, dword [ebx + 0x90]
test ecx, ecx
jle 0x5f724e
push 0xa
lea eax, [ebp - 0x1cc]
push eax
mov edx, dword [ebx + 0x90]
push edx
call fcn.006a4f58
add esp, 0xc
push eax
push str.Expire
mov ecx, dword [ebp - 0x58]
push ecx
call fcn.00446c64
add esp, 0xc
mov eax, dword [ebx + 0x58]
test eax, eax
jle 0x5f727c
push 0xa
lea edx, [ebp - 0x1cc]
push edx
mov ecx, dword [ebx + 0x58]
push ecx
call fcn.006a55f4
add esp, 0xc
push eax
push str.MaxUsersLoginPerIP
mov eax, dword [ebp - 0x58]
push eax
call fcn.00446c64
add esp, 0xc
mov edx, dword [ebx + 0x5c]
test edx, edx
jle 0x5f72aa
push 0xa
lea ecx, [ebp - 0x1cc]
push ecx
mov eax, dword [ebx + 0x5c]
push eax
call fcn.006a55f4
add esp, 0xc
push eax
push str.SpeedLimitUp
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov ecx, dword [ebx + 0x60]
test ecx, ecx
jle 0x5f72d8
push 0xa
lea eax, [ebp - 0x1cc]
push eax
mov edx, dword [ebx + 0x60]
push edx
call fcn.006a55f4
add esp, 0xc
push eax
push str.SpeedLimitDown
mov ecx, dword [ebp - 0x58]
push ecx
call fcn.00446c64
add esp, 0xc
mov eax, dword [ebx + 0x68]
test eax, eax
jle 0x5f7306
push 0xa
lea edx, [ebp - 0x1cc]
push edx
mov ecx, dword [ebx + 0x68]
push ecx
call fcn.006a55f4
add esp, 0xc
push eax
push str.TimeOut
mov eax, dword [ebp - 0x58]
push eax
call fcn.00446c64
add esp, 0xc
mov edx, dword [ebx + 0x6c]
test edx, edx
jle 0x5f7334
push 0xa
lea ecx, [ebp - 0x1cc]
push ecx
mov eax, dword [ebx + 0x6c]
push eax
call fcn.006a55f4
add esp, 0xc
push eax
push str.SessionTimeOut
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov ecx, dword [ebx + 0x64]
test ecx, ecx
jl 0x5f7362
push 0xa
lea eax, [ebp - 0x1cc]
push eax
mov edx, dword [ebx + 0x64]
push edx
call fcn.006a55f4
add esp, 0xc
push eax
push str.MaxNrUsers
mov ecx, dword [ebp - 0x58]
push ecx
call fcn.00446c64
add esp, 0xc
mov al, byte [ebx + 0x96]
test al, al
je 0x5f7406
mov dl, byte [ebx + 0x96]
dec dl
je 0x5f7388
dec dl
je 0x5f7394
dec dl
je 0x5f73ac
dec dl
je 0x5f73a0
jmp 0x5f73b8
mov dword [ebp - 0x88], str.FilesPerSession
jmp 0x5f73c2
mov dword [ebp - 0x88], str.BytesPerSession
jmp 0x5f73c2
mov dword [ebp - 0x88], str.BytesOverall
jmp 0x5f73c2
mov dword [ebp - 0x88], str.FilesOverall
jmp 0x5f73c2
mov dword [ebp - 0x88], str.None
add esp, 0xfffffff8
fld dword [ebx + 0x78]
fstp qword [esp]
mov ecx, dword [ebx + 0x74]
push ecx
lea ecx, [ebp - 0x2a4]
mov eax, dword [ebx + 0x70]
push eax
mov edx, dword [ebp - 0x88]
push edx
push str._s_d_d_f
push ecx
call fcn.006a0ad0
add esp, 0x1c
lea eax, [ebp - 0x2a4]
push eax
push 0x6de32b
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
mov cl, byte [ebx + 0x94]
test cl, cl
je 0x5f747a
mov al, byte [ebx + 0x94]
dec al
je 0x5f7428
dec al
je 0x5f7440
dec al
je 0x5f7434
dec al
je 0x5f744c
jmp 0x5f7458
mov dword [ebp - 0x8c], str.System
jmp 0x5f7462
mov dword [ebp - 0x8c], str.Domain
jmp 0x5f7462
mov dword [ebp - 0x8c], 0x6de340
jmp 0x5f7462
mov dword [ebp - 0x8c], str.ReadOnly
jmp 0x5f7462
mov dword [ebp - 0x8c], 0x6de34f
mov edx, dword [ebp - 0x8c]
push edx
push str.Maintenance
mov ecx, dword [ebp - 0x58]
push ecx
call fcn.00446c64
add esp, 0xc
mov al, byte [ebx + 0x95]
test al, al
je 0x5f74ce
mov dl, byte [ebx + 0x95]
dec dl
je 0x5f7494
dec dl
je 0x5f74a0
jmp 0x5f74ac
mov dword [ebp - 0x90], str.OTP_S_KEY_MD4
jmp 0x5f74b6
mov dword [ebp - 0x90], str.OTP_S_KEY_MD5
jmp 0x5f74b6
mov dword [ebp - 0x90], str.Regular_password
mov ecx, dword [ebp - 0x90]
push ecx
push str.PasswordType
mov eax, dword [ebp - 0x58]
push eax
call fcn.00446c64
add esp, 0xc
mov esi, 1
jmp 0x5f7514
push esi
push 0x6de39b
push 0x6de396
lea eax, [ebp - 0x2c0]
push eax
call fcn.006a0ad0
mov eax, esi
add esp, 0x10
dec eax
mov edx, dword [ebx + 0xbc]
shl eax, 4
mov ecx, dword [edx + eax + 8]
lea eax, [ebp - 0x2c0]
push ecx
push eax
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
inc esi
lea eax, [ebx + 0xb8]
mov edx, dword [eax + 8]
mov ecx, dword [eax + 4]
sub edx, ecx
test edx, edx
jns 0x5f7529
add edx, 0xf
sar edx, 4
cmp esi, edx
jbe 0x5f74d5
mov word [ebp - 0x44], 8
mov esi, 1
jmp 0x5f7694
mov word [ebp - 0x44], 0x2c
xor eax, eax
lea edx, [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, 0x6ff378
mov dword [ebp - 0x18], eax
mov eax, 0x6ff36c
mov ecx, dword [edx + 8]
cmp eax, 0x6ff36c
mov dword [ebp - 0x2e4], ecx
je 0x5f7575
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0x38]
mov word [ebp - 0x44], 0x44
push esi
push 0x6de3a9
push 0x6de3a4
lea edx, [ebp - 0x2dc]
push edx
call fcn.006a0ad0
add esp, 0x10
mov edx, esi
dec edx
mov eax, edx
shl eax, 4
mov ecx, dword [ebx + 0xfc]
mov eax, dword [ecx + eax + 8]
mov eax, dword [eax - 4]
test eax, eax
jne 0x5f75c4
push 0x6de3ae
lea edx, [ebp - 0x20]
push edx
call fcn.0069a464
add esp, 8
jmp 0x5f75de
mov eax, edx
shl eax, 4
mov ecx, dword [ebx + 0xfc]
add eax, ecx
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0069a2e0
add esp, 8
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x2dc]
push edx
push ecx
mov eax, dword [ebp - 0x58]
push eax
call fcn.00446c64
add esp, 0xc
dec dword [ebp - 0x38]
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x5f768d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x5f763f
mov edi, dword [ebp - 0x18]
add edi, 0xfffffff4
cmp edi, 0x6ff36c
je 0x5f7636
cmp edi, 0x6ff36c
je 0x5f762f
push edi
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [edi]
inc eax
jmp 0x5f763b
mov eax, 1
jmp 0x5f763b
mov eax, 1
test eax, eax
jne 0x5f768d
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff4
mov dword [ebp - 0x94], edx
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff4
mov dword [ebp - 0x98], ecx
mov eax, dword [ebp - 0x98]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x9c], edx
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0xa0], eax
mov edx, dword [ebp - 0xa0]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x2f4], ecx
mov word [ebp - 0x44], 8
inc esi
lea eax, [ebx + 0xf8]
mov edx, dword [eax + 8]
mov ecx, dword [eax + 4]
sub edx, ecx
test edx, edx
jns 0x5f76a9
add edx, 0xf
sar edx, 4
cmp esi, edx
jbe 0x5f7540
mov word [ebp - 0x44], 8
mov esi, 1
jmp 0x5f7700
push esi
push 0x6de3b5
push 0x6de3b0
lea eax, [ebp - 0x318]
push eax
call fcn.006a0ad0
mov eax, esi
add esp, 0x10
dec eax
mov edx, dword [ebx + 0x9c]
shl eax, 4
mov ecx, dword [edx + eax + 8]
lea eax, [ebp - 0x318]
push ecx
push eax
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
inc esi
lea eax, [ebx + 0x98]
mov edx, dword [eax + 8]
mov ecx, dword [eax + 4]
sub edx, ecx
test edx, edx
jns 0x5f7715
add edx, 0xf
sar edx, 4
cmp esi, edx
jbe 0x5f76c1
lea eax, [ebx + 0xd8]
mov dword [ebp - 0xa4], eax
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [edx + 8]
mov edx, dword [eax + 4]
sub ecx, edx
test ecx, ecx
jns 0x5f7743
add ecx, 0xf
sar ecx, 4
test ecx, ecx
je 0x5f7913
mov word [ebp - 0x44], 0x5c
xor ecx, ecx
mov dword [ebp - 0xa8], ecx
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xac], 0x6ff378
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0xb0], ecx
mov eax, dword [ebp - 0xb0]
mov ecx, 0x6ff36c
cmp ecx, 0x6ff36c
mov edx, dword [eax + 8]
mov dword [ebp - 0x320], edx
je 0x5f77a7
push 0x6ff36c
call sub.KERNEL32.DLL_InterlockedIncrement
inc dword [ebp - 0x38]
mov word [ebp - 0x44], 0x74
xor esi, esi
jmp 0x5f781a
test esi, esi
je 0x5f77ff
mov eax, dword [ebp - 0x28]
mov edx, dword [eax - 4]
mov dword [ebp - 0xb4], edx
push 0x6de3bc
call fcn.0069ce0c
pop ecx
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
push ecx
push 0
mov eax, dword [ebp - 0xb8]
push eax
push 0x6de3bc
push 0
mov edx, dword [ebp - 0xb4]
push edx
lea ecx, [ebp - 0x30]
push ecx
call fcn.0069ad68
add esp, 0x1c
mov eax, esi
shl eax, 4
mov edx, dword [ebx + 0xdc]
add eax, edx
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.0069b708
add esp, 8
inc esi
lea eax, [ebx + 0xd8]
mov edx, dword [eax + 8]
mov ecx, dword [eax + 4]
sub edx, ecx
test edx, edx
jns 0x5f782f
add edx, 0xf
sar edx, 4
cmp esi, edx
jb 0x5f77b4
mov eax, dword [ebp - 0x28]
push eax
push str.Group
mov edx, dword [ebp - 0x58]
push edx
call fcn.00446c64
add esp, 0xc
dec dword [ebp - 0x38]
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x5f7907
mov eax, dword [ebp - 0x28]
mov edx, dword [eax - 0xc]
inc edx
test edx, edx
je 0x5f78b9
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff4
mov dword [ebp - 0xbc], ecx
mov eax, 0x6ff36c
mov edx, dword [ebp - 0xbc]
cmp eax, edx
je 0x5f78b0
mov ecx, 0x6ff36c
mov eax, dword [ebp - 0xbc]
cmp ecx, eax
je 0x5f78a9
mov edx, dword [ebp - 0xbc]
push edx
call sub.KERNEL32.DLL_InterlockedDecrement
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ecx]
inc eax
jmp 0x5f78b5
mov eax, 1
jmp 0x5f78b5
mov eax, 1
test eax, eax
jne 0x5f7907
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff4
mov dword [ebp - 0xc0], edx
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff4
mov dword [ebp - 0xc4], ecx
mov eax, dword [ebp - 0xc4]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0xc8], edx
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0xcc], eax
mov edx, dword [ebp - 0xcc]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x330], ecx
mov word [ebp - 0x44], 0x74
mov word [ebp - 0x44], 8
mov eax, dword [ebp - 0x58]
push eax
call sub.ADVAPI32.DLL_RegCloseKey
dec dword [ebp - 0x38]
mov edx, dword [ebp - 8]
test edx, edx
je 0x5f79d4
mov ecx, dword [ebp - 8]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x5f7986
mov edx, dword [ebp - 8]
add edx, 0xfffffff4
mov dword [ebp - 0xd0], edx
mov ecx, 0x6ff36c
mov eax, dword [ebp - 0xd0]
cmp ecx, eax
je 0x5f797d
mov edx, 0x6ff36c
mov ecx, dword [ebp - 0xd0]
cmp edx, ecx
je 0x5f7976
mov eax, dword [ebp - 0xd0]
push eax
call sub.KERNEL32.DLL_InterlockedDecrement
mov edx, dword [ebp - 0xd0]
mov ecx, dword [edx]
inc ecx
jmp 0x5f7982
mov ecx, 1
jmp 0x5f7982
mov ecx, 1
test ecx, ecx
jne 0x5f79d4
mov eax, dword [ebp - 8]
add eax, 0xfffffff4
mov dword [ebp - 0xd4], eax
mov edx, dword [ebp - 8]
add edx, 0xfffffff4
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 0xd8]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0xdc], edx
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 8], ecx
mov dword [ebp - 0xe0], eax
mov edx, dword [ebp - 0xe0]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x340], ecx
mov word [ebp - 0x44], 8
mov eax, dword [ebp - 0x54]
mov dword fs:[0], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret