Function at 0x860e30
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x52
push 0
push 0
dec ecx
jne 0x860e38
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x861c0e
push dword fs:[eax]
mov dword fs:[eax], esp
xor edi, edi
mov eax, dword [esi + 0x804]
mov eax, dword [eax + 0x2a8]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x860e88
inc eax
mov dword [ebp - 0x1c], eax
xor ebx, ebx
mov eax, dword [esi + 0x804]
mov edx, ebx
call fcn.006d9038
test al, al
je 0x860e82
inc edi
inc ebx
dec dword [ebp - 0x1c]
jne 0x860e70
test edi, edi
jne 0x860ed7
push 0
lea eax, [ebp - 0x238]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x861c28
mov edx, 0x861c50
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x238]
mov eax, dword [0x8d41e0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3d0]
call fcn.005063f8
mov eax, dword [0x8d41e0]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x150]
jmp 0x861bd8
mov eax, dword [esi + 0x434]
xor edx, edx
call fcn.00506610
mov eax, dword [esi + 0x434]
mov eax, dword [eax + 0x74]
mov edx, 0x808080
call fcn.004db68c
mov eax, dword [esi + 0x424]
xor edx, edx
call fcn.00506610
mov eax, dword [esi + 0x438]
xor edx, edx
call fcn.00506610
mov eax, dword [esi + 0x438]
mov eax, dword [eax + 0x74]
mov edx, 0x808080
call fcn.004db68c
mov eax, dword [esi + 0x428]
xor edx, edx
call fcn.00506610
mov eax, dword [esi + 0x43c]
xor edx, edx
call fcn.00506610
mov eax, dword [esi + 0x43c]
mov eax, dword [eax + 0x74]
mov edx, 0x808080
call fcn.004db68c
mov eax, dword [esi + 0x42c]
xor edx, edx
call fcn.00506610
mov eax, dword [esi + 0x440]
xor edx, edx
call fcn.00506610
mov eax, dword [esi + 0x440]
mov eax, dword [eax + 0x74]
mov edx, 0x808080
call fcn.004db68c
mov eax, dword [esi + 0x430]
xor edx, edx
call fcn.00506610
mov eax, dword [esi + 0x3e4]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x824]
mov edx, 0x861c6c
call fcn.005063f8
mov eax, dword [esi + 0x82c]
mov edx, 0x861c6c
call fcn.005063f8
mov eax, dword [esi + 0x820]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x824]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x828]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x82c]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x81c]
xor edx, edx
call fcn.00505850
mov eax, dword [esi + 0x81c]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x7e4]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x7e8]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x7ec]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x7f0]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x7f4]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x7f8]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x7c0]
call fcn.00565bb8
mov ebx, eax
mov eax, dword [ebx + 0x48]
mov edx, 0xffffff
call fcn.004dc238
lea edx, [ebp - 0x248]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x10]
lea edx, [ebp - 0x248]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov eax, dword [ebx + 0x44]
mov edx, 1
call fcn.004dbfb8
mov eax, dword [ebx + 0x44]
mov edx, 0x666666
call fcn.004dbe64
push 0x1e0
lea eax, [ebp - 0x234]
push eax
mov ecx, 0x334
mov edx, 0x46
mov eax, 0xa
call fcn.0048dc84
lea edx, [ebp - 0x234]
mov eax, ebx
call fcn.004dc464
mov eax, dword [ebx + 0x48]
mov edx, 0xcccccc
call fcn.004dc238
mov edi, dword [esi + 0x81c]
mov eax, dword [edi + 0x54]
add eax, 0x28
push eax
lea eax, [ebp - 0x234]
push eax
mov ecx, dword [edi + 0x50]
add ecx, 0x190
mov edx, dword [edi + 0x54]
mov eax, dword [edi + 0x50]
call fcn.0048dc84
lea edx, [ebp - 0x234]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov eax, dword [esi + 0x7fc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov eax, dword [esi + 0x804]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov eax, dword [esi + 0x800]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov eax, dword [esi + 0x808]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov eax, dword [esi + 0x830]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov eax, dword [esi + 0x834]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov eax, dword [esi + 0x838]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov eax, dword [esi + 0x83c]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov eax, dword [esi + 0x840]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov eax, dword [esi + 0x844]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x848]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x84c]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x850]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x814]
mov edx, dword [eax]
call dword [edx + 0x124]
mov eax, dword [esi + 0x818]
mov edx, dword [eax]
call dword [edx + 0x124]
mov eax, dword [0x8dc0e0]
call fcn.004ce8e0
xor eax, eax
mov dword [0x8dc040], eax
mov eax, dword [esi + 0x808]
mov edx, dword [eax]
call dword [edx + 0x118]
cmp eax, 4
ja case.default.0x861215
jmp dword [eax*4 + 0x86121c]
mov dword [0x8dc058], 0x100000
jmp case.default.0x861215
mov dword [0x8dc058], 0x500000
jmp case.default.0x861215
mov dword [0x8dc058], 0xa00000
jmp case.default.0x861215
mov dword [0x8dc058], 0x3200000
jmp case.default.0x861215
mov dword [0x8dc058], 0x6400000
push 0x208
lea eax, [ebp - 0x224]
push eax
call fcn.00413d08
lea eax, [ebp - 0x24c]
lea edx, [ebp - 0x224]
mov ecx, 0x104
call fcn.0040ab40
mov eax, dword [ebp - 0x24c]
lea edx, [ebp - 4]
call fcn.00423eb0
lea eax, [ebp - 0x224]
push eax
push 0
push 0
push 0x28
push 0
call fcn.00535794
mov eax, dword [0x8d35c8]
lea edx, [ebp - 0x224]
mov ecx, 0x104
call fcn.0040ab40
lea edx, [ebp - 0x250]
mov eax, dword [0x8d35c8]
mov eax, dword [eax]
call fcn.0042a550
mov edx, dword [ebp - 0x250]
mov eax, dword [0x8d35c8]
call fcn.0040a10c
lea eax, [ebp - 0x224]
push eax
push 0
push 0
push 0xe
push 0
call fcn.00535794
lea eax, [ebp - 8]
lea edx, [ebp - 0x224]
mov ecx, 0x104
call fcn.0040ab40
lea edx, [ebp - 0x254]
mov eax, dword [ebp - 8]
call fcn.0042254c
mov eax, dword [ebp - 0x254]
test eax, eax
je 0x86132e
sub eax, 4
mov eax, dword [eax]
test eax, eax
jne 0x86134a
lea eax, [ebp - 8]
push eax
mov ecx, 0x861c7c
mov edx, 0x861c9c
mov eax, 0x80000001
call fcn.005d4440
lea edx, [ebp - 0x258]
mov eax, dword [ebp - 8]
call fcn.0042254c
mov eax, dword [ebp - 0x258]
test eax, eax
je 0x861367
sub eax, 4
mov eax, dword [eax]
test eax, eax
jne 0x861380
mov edx, dword [0x8d35c8]
mov edx, dword [edx]
lea eax, [ebp - 8]
mov ecx, 0x861d2c
call fcn.0040acf0
lea edx, [ebp - 0x25c]
mov eax, dword [ebp - 8]
call fcn.0042a550
mov edx, dword [ebp - 0x25c]
lea eax, [ebp - 8]
call fcn.0040a154
mov ecx, 1
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0040b0d0
dec eax
je 0x8613bd
lea eax, [ebp - 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
call fcn.0040acf0
lea eax, [ebp - 0x224]
push eax
push 0
push 0
push 0x27
push 0
call fcn.00535794
lea eax, [ebp - 0xc]
lea edx, [ebp - 0x224]
mov ecx, 0x104
call fcn.0040ab40
lea edx, [ebp - 0x260]
mov eax, dword [ebp - 0xc]
call fcn.0042254c
mov eax, dword [ebp - 0x260]
test eax, eax
je 0x861401
sub eax, 4
mov eax, dword [eax]
test eax, eax
jne 0x86141d
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x861d48
mov edx, 0x861c9c
mov eax, 0x80000001
call fcn.005d4440
lea edx, [ebp - 0x264]
mov eax, dword [ebp - 0xc]
call fcn.0042254c
mov eax, dword [ebp - 0x264]
test eax, eax
je 0x86143a
sub eax, 4
mov eax, dword [eax]
test eax, eax
jne 0x861453
mov edx, dword [0x8d35c8]
mov edx, dword [edx]
lea eax, [ebp - 0xc]
mov ecx, 0x861d6c
call fcn.0040acf0
lea edx, [ebp - 0x268]
mov eax, dword [ebp - 0xc]
call fcn.0042a550
mov edx, dword [ebp - 0x268]
lea eax, [ebp - 0xc]
call fcn.0040a154
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.0040b0d0
dec eax
je 0x861490
lea eax, [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
call fcn.0040acf0
lea eax, [ebp - 0x224]
push eax
push 0
push 0
push 0xd
push 0
call fcn.00535794
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x224]
mov ecx, 0x104
call fcn.0040ab40
lea edx, [ebp - 0x26c]
mov eax, dword [ebp - 0x10]
call fcn.0042254c
mov eax, dword [ebp - 0x26c]
test eax, eax
je 0x8614d4
sub eax, 4
mov eax, dword [eax]
test eax, eax
jne 0x8614f0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x861d8c
mov edx, 0x861c9c
mov eax, 0x80000001
call fcn.005d4440
lea edx, [ebp - 0x270]
mov eax, dword [ebp - 0x10]
call fcn.0042254c
mov eax, dword [ebp - 0x270]
test eax, eax
je 0x86150d
sub eax, 4
mov eax, dword [eax]
test eax, eax
jne 0x861526
mov edx, dword [0x8d35c8]
mov edx, dword [edx]
lea eax, [ebp - 0x10]
mov ecx, 0x861dac
call fcn.0040acf0
lea edx, [ebp - 0x274]
mov eax, dword [ebp - 0x10]
call fcn.0042a550
mov edx, dword [ebp - 0x274]
lea eax, [ebp - 0x10]
call fcn.0040a154
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0040b0d0
dec eax
je 0x861563
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
call fcn.0040acf0
mov edx, dword [0x8d35c8]
mov edx, dword [edx]
lea eax, [ebp - 0x14]
mov ecx, 0x861dc8
call fcn.0040acf0
mov eax, dword [esi + 0x1414]
mov dl, 1
call fcn.00566614
mov eax, dword [0x8d334c]
xor edx, edx
mov dword [eax], edx
mov byte [0x8dc03c], 1
mov eax, dword [esi + 0x7fc]
mov edx, dword [eax]
call dword [edx + 0x118]
test al, al
je 0x86173f
mov eax, dword [esi + 0x804]
xor edx, edx
call fcn.006d9038
test al, al
je 0x8615dd
mov eax, dword [0x8d3b64]
mov eax, dword [eax]
mov dl, 1
call fcn.004238d8
test al, al
je 0x8615dd
mov edx, dword [0x8d3b64]
mov edx, dword [edx]
mov eax, esi
call fcn.008606dc
mov eax, dword [0x8d3d98]
mov eax, dword [eax]
call fcn.005c8e1c
cmp byte [0x8dc03c], 0
je 0x8617bc
mov eax, dword [esi + 0x804]
mov edx, 1
call fcn.006d9038
test al, al
je 0x861622
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.004238d8
test al, al
je 0x861622
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.008606dc
mov eax, dword [0x8d3d98]
mov eax, dword [eax]
call fcn.005c8e1c
cmp byte [0x8dc03c], 0
je 0x8617bc
mov eax, dword [esi + 0x804]
mov edx, 2
call fcn.006d9038
test al, al
je 0x861667
mov dl, 1
mov eax, dword [ebp - 0xc]
call fcn.004238d8
test al, al
je 0x861667
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.008606dc
mov eax, dword [0x8d3d98]
mov eax, dword [eax]
call fcn.005c8e1c
cmp byte [0x8dc03c], 0
je 0x8617bc
mov eax, dword [esi + 0x804]
mov edx, 3
call fcn.006d9038
test al, al
je 0x8616ac
mov dl, 1
mov eax, dword [ebp - 0x10]
call fcn.004238d8
test al, al
je 0x8616ac
mov edx, dword [ebp - 0x10]
mov eax, esi
call fcn.008606dc
mov eax, dword [0x8d3d98]
mov eax, dword [eax]
call fcn.005c8e1c
cmp byte [0x8dc03c], 0
je 0x8617bc
mov eax, dword [esi + 0x804]
mov edx, 4
call fcn.006d9038
test al, al
je 0x8616fa
mov eax, dword [0x8d3cec]
mov eax, dword [eax]
mov dl, 1
call fcn.004238d8
test al, al
je 0x8616fa
mov edx, dword [0x8d3cec]
mov edx, dword [edx]
mov eax, esi
call fcn.008606dc
mov eax, dword [0x8d3d98]
mov eax, dword [eax]
call fcn.005c8e1c
cmp byte [0x8dc03c], 0
je 0x8617bc
mov eax, dword [esi + 0x804]
mov edx, 5
call fcn.006d9038
test al, al
je 0x86173f
mov dl, 1
mov eax, dword [ebp - 0x14]
call fcn.004238d8
test al, al
je 0x86173f
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.008606dc
mov eax, dword [esi + 0x800]
mov edx, dword [eax]
call dword [edx + 0x118]
test al, al
je 0x8617bc
mov eax, dword [esi + 0x804]
mov edx, dword [eax]
call dword [edx + 0x134]
dec eax
test eax, eax
jl 0x8617bc
inc eax
mov dword [ebp - 0x1c], eax
xor ebx, ebx
mov eax, dword [0x8d3d98]
mov eax, dword [eax]
call fcn.005c8e1c
cmp byte [0x8dc03c], 0
je 0x8617bc
mov eax, dword [esi + 0x804]
mov edx, ebx
call fcn.006d9038
test al, al
je 0x8617b6
lea ecx, [ebp - 0x278]
mov eax, dword [esi + 0x804]
mov eax, dword [eax + 0x2a8]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x278]
mov eax, esi
call fcn.008606dc
inc ebx
dec dword [ebp - 0x1c]
jne 0x86176a
mov eax, dword [0x8d3220]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x48]
mov edx, dword [0x8d3220]
mov edx, dword [edx]
mov eax, dword [0x8dc0e0]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [0x8d3220]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x861855
inc eax
mov dword [ebp - 0x1c], eax
xor ebx, ebx
mov eax, dword [0x8d3d98]
mov eax, dword [eax]
call fcn.005c8e1c
push 1
lea ecx, [ebp - 0x27c]
mov eax, dword [0x8d3220]
mov eax, dword [eax]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x27c]
mov ecx, 0x861dec
mov eax, dword [0x8dc0e0]
mov edi, dword [eax]
call dword [edi + 0xc]
dec eax
jne 0x86184f
lea ecx, [ebp - 0x280]
mov eax, dword [0x8d3220]
mov eax, dword [eax]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x280]
mov eax, dword [0x8dc0e0]
mov ecx, dword [eax]
call dword [ecx + 0x58]
inc ebx
dec dword [ebp - 0x1c]
jne 0x8617f1
call fcn.00426374
add esp, 0xfffffff8
fstp qword [esp]
wait
mov ecx, 0x861e04
mov edx, 0x861e3c
mov eax, 0x80000001
call fcn.005d4bd0
mov byte [0x8dc03c], 0
mov eax, dword [esi + 0x1414]
xor edx, edx
call fcn.00566614
mov eax, dword [esi + 0x81c]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x820]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x824]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x828]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x82c]
xor edx, edx
call fcn.005062a8
mov eax, esi
call fcn.00878928
mov eax, dword [esi + 0x3e4]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x7c0]
call fcn.00565bb8
mov edi, eax
mov eax, dword [edi + 0x48]
mov edx, 0xffffff
call fcn.004dc238
mov ebx, dword [esi + 0x81c]
mov eax, dword [ebx + 0x54]
add eax, 0x28
push eax
lea eax, [ebp - 0x234]
push eax
mov ecx, dword [ebx + 0x50]
add ecx, 0x190
mov edx, dword [ebx + 0x54]
mov eax, dword [ebx + 0x50]
call fcn.0048dc84
lea edx, [ebp - 0x234]
mov eax, edi
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov eax, dword [0x8d3220]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x48]
mov edx, dword [0x8d3220]
mov edx, dword [edx]
mov eax, dword [0x8dc0e0]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [0x8d3220]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jne 0x8619af
xor edx, edx
mov eax, esi
call fcn.0085fb4c
push 0
lea eax, [ebp - 0x284]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x861e78
mov edx, 0x861e98
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x284]
mov eax, dword [0x8d41e0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3d0]
call fcn.005063f8
mov eax, dword [0x8d41e0]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x150]
jmp 0x861bd8
mov eax, dword [0x8d3220]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x861a27
inc eax
mov dword [ebp - 0x1c], eax
xor ebx, ebx
push 1
lea ecx, [ebp - 0x288]
mov eax, dword [0x8d3220]
mov eax, dword [eax]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x288]
mov ecx, 0x861dec
mov eax, dword [0x8dc0e0]
mov edi, dword [eax]
call dword [edi + 0xc]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0x28c]
mov eax, dword [0x8d3220]
mov eax, dword [eax]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x28c]
mov ecx, 0x861eb4
mov eax, dword [0x8dc0e0]
mov edi, dword [eax]
call dword [edi + 0x10]
inc ebx
dec dword [ebp - 0x1c]
jne 0x8619c6
mov eax, dword [esi + 0x80c]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x11c]
mov eax, dword [esi + 0x80c]
mov dl, 1
call fcn.005062a8
xor edx, edx
mov eax, esi
call fcn.008635e8
mov eax, dword [esi + 0x7e0]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x810]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x814]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x818]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x7fc]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x800]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x804]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x808]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x830]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x834]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x838]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x83c]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x840]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x7d0]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x7d4]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x7d8]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x7dc]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x848]
call fcn.00565bb8
push eax
mov eax, dword [esi + 0x844]
call fcn.00565bb8
mov cl, 1
pop edx
call fcn.00669fbc
mov eax, dword [esi + 0x844]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x848]
xor edx, edx
call fcn.005062a8
push 0
lea eax, [ebp - 0x290]
push eax
mov eax, dword [0x8d4254]
mov eax, dword [eax]
mov ecx, 0x861ed4
mov edx, 0x861e98
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x290]
mov eax, dword [esi + 0x84c]
call fcn.005063f8
mov eax, dword [0x8d3ac8]
cmp dword [eax], 2
jne 0x861bb0
mov eax, dword [esi + 0x84c]
mov eax, dword [eax + 0x74]
mov edx, 0xa
call fcn.004dba38
mov eax, dword [esi + 0x84c]
mov dl, 1
call fcn.005062a8
mov eax, dword [esi + 0x850]
xor edx, edx
call fcn.005062a8
mov eax, dword [esi + 0x814]
mov edx, dword [eax]
call dword [edx + 0x114]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x861c15
lea eax, [ebp - 0x290]
mov edx, 0x12
call fcn.00409d8c
lea eax, [ebp - 0x238]
call fcn.00409d2c
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.00409d8c
ret