Function at 0x5fd85d82
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
mov word [ecx], ax
add ecx, 2
dec edx
je 0x5fd9708d
lea eax, [edx + 0x7ffffefe]
test eax, eax
je 0x5fd83ec5
movzx eax, word [ecx + esi]
test ax, ax
jne 0x5fd83ea5
test edx, edx
je 0x5fd9708d
xor eax, eax
mov word [ecx], ax
test edi, edi
jne 0x5fd83fd9
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x4d8]
cmp ecx, eax
je 0x5fd974b5
test ecx, ecx
je 0x5fd83f45
mov edx, ecx
lea ecx, [edx + 2]
mov edi, edi
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x5fd83ef8
sub edx, ecx
lea ecx, [esp + 0x4d8]
sar edx, 1
lea esi, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x5fd83f14
sub ecx, esi
sar ecx, 1
cmp ecx, edx
je 0x5fd9746f
lea eax, [edx + 1]
cmp ecx, eax
je 0x5fd97460
lea eax, [ecx + 1]
cmp eax, edx
je 0x5fdac2ed
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x2d8]
cmp ecx, eax
je 0x5fd974b5
test ecx, ecx
je 0x5fd83fa9
mov edx, ecx
lea ecx, [edx + 2]
lea esp, [esp]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x5fd83f60
sub edx, ecx
lea ecx, [esp + 0x2d8]
sar edx, 1
lea esi, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x5fd83f7c
sub ecx, esi
sar ecx, 1
cmp ecx, edx
je 0x5fd97493
lea eax, [edx + 1]
cmp ecx, eax
je 0x5fd9706b
lea eax, [ecx + 1]
cmp eax, edx
je 0x5fdac301
mov ecx, ebx
lea eax, [esp + 0x2d8]
cmp word [eax], 0
je 0x5fd8a07c
add eax, 2
dec ecx
jne 0x5fd83fb2
cmp dword [esp + 0xc0], 0
jne 0x5fd974b5
mov edi, 0x232b
mov dword [esp + 0xc], edi
xor esi, esi
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x5fdb3709
test edi, edi
je 0x5fd83ff3
test esi, esi
jne 0x5fdb3715
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x28]
mov dword [ebx], esi
mov edx, dword [0x5fde9010]
mov esi, dword [esp + 0xc]
cmp edx, 0x5fde9010
je 0x5fd84020
test dword [edx + 0x1c], 0x400
jne 0x5fdb3723
test eax, eax
jne 0x5fd9813d
xor esi, esi
push esi
push 2
call sym.DNSAPI.dll_Reg_ReadGlobalsEx
cmp dword [0x5fde9328], esi
jne 0x5fd8af4d
push 0x103
lea eax, [esp + 0x6dd]
mov dword [esp + 0xc4], 0x104
push 0
push eax
mov byte [esp + 0x6e4], 0
call sub.api_ms_win_core_crt_l1_1_0.dll_memset
mov ebx, dword [esp + 0x1c]
lea edx, [esp + 0xcc]
add esp, 0xc
lea ecx, [esp + 0x6d8]
push 2
push 1
push 0
push ebx
call fcn.5fd85b0e
test eax, eax
je 0x5fdb3787
mov dword [esp + 0x20], 0
mov eax, dword [0x5fde9010]
cmp eax, 0x5fde9010
je 0x5fd840af
test dword [eax + 0x1c], 0x400
jne 0x5fdb3763
lea eax, [esp + 0x20]
xor edx, edx
push eax
lea eax, [esp + 0x2c]
push eax
push esi
push 1
lea ecx, [esp + 0x6e8]
call fcn.5fd87505
mov dword [esp + 0xc], eax
cmp eax, 0x7b
je 0x5fdb3787
mov dword [esp + 0x20], eax
test eax, eax
jne 0x5fd9d79c
call dword [sym.imp.IPHLPAPI.DLL_GetCurrentThreadCompartmentId]
mov esi, eax
mov dword [esp + 0x18], esi
cmp esi, 1
jne 0x5fdb37cd
mov edx, dword [0x5fde9010]
mov eax, dword [esp + 0x14]
cmp ax, 0x33
jae 0x5fd9fb7f
movzx eax, ax
cmp dword [eax*4 + 0x5fd899e0], 0
je 0x5fd9fb7f
mov eax, dword [esp + 0x2c]
cmp dword [eax + 0x14], 0
jne 0x5fd9f5e6
cmp dword [esp + 0x40], 0
jne 0x5fd9f5e6
mov eax, dword [edi + 4]
mov ecx, dword [edi]
mov dword [esp + 0xc4], eax
mov eax, ecx
and eax, 8
or eax, 0
jne 0x5fd9ddc8
mov ecx, dword [esp + 0x24]
test ecx, ecx
jne 0x5fd9e56f
cmp dword [esp + 0x48], 0
jne 0x5fd9f2b1
cmp dword [esp + 0x50], 0
jne 0x5fd9f2a3
mov edi, dword [ebp + 0x1c]
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x30]
mov edx, ebx
push edi
push 0
push ecx
mov ecx, dword [esp + 0x68]
push esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [esp + 0x50]
push dword [esp + 0x7c]
push dword [esp + 0x3c]
call fcn.5fd84740
mov esi, eax
test esi, esi
jne 0x5fdb3897
mov esi, dword [esp + 0x20]
mov dword [esp + 0xc], esi
cmp esi, 0x267b
je 0x5fdb391f
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0xc]
cmp edi, 0x2522
je 0x5fd9e5e6
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x2c]
mov dword [eax + 4], esi
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x5fdb3995
cmp dword [0x5fde907c], 0
mov eax, dword [ebx]
mov ebx, dword [edi]
mov esi, dword [edi + 4]
mov dword [esp + 0xc0], ebx
mov dword [esp + 0x44], esi
je 0x5fd8431d
xor ecx, ecx
mov word [esp + 0x868], cx
test eax, eax
je 0x5fd842fe
lea ecx, [ecx]
lea esi, [eax]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
xor eax, eax
mov word [esp + 0xd0], ax
movzx ecx, word [esi + 8]
mov eax, ecx
cmp eax, 0x1c
jne 0x5fd8aec0
lea eax, [esp + 0xd0]
push eax
lea eax, [esi + 0x18]
push eax
call dword [sym.imp.ntdll.dll_RtlIpv6AddressToStringW]
mov ecx, 0x401
lea eax, [esp + 0x868]
nop
cmp word [eax], 0
jne 0x5fd8aeb1
test ecx, ecx
je 0x5fd842f3
mov edx, 0x401
lea eax, [esp + 0x868]
sub edx, ecx
mov esi, 0x401
mov ebx, 0
lea eax, [eax + edx*2]
sub esi, edx
je 0x5fd842c4
add edx, 0x7ffffbfd
lea edi, [esp + 0xd0]
add edx, esi
sub edi, eax
lea esp, [esp]
test edx, edx
je 0x5fd8ae28
movzx ecx, word [eax + edi]
test cx, cx
je 0x5fd8ae28
mov word [eax], cx
dec edx
add eax, 2
dec esi
jne 0x5fd842a5
sub eax, 2
mov ebx, 0x8007007a
xor ecx, ecx
mov word [eax], cx
test ebx, ebx
js 0x5fd842f3
mov ecx, 0x401
lea eax, [esp + 0x868]
mov edi, edi
cmp word [eax], 0
je 0x5fd8ae35
add eax, 2
dec ecx
jne 0x5fd842e3
mov ebx, dword [esp + 0xc0]
mov esi, dword [esp + 0x44]
push 0x5fd844f0
push dword [0x5fde946c]
push dword [0x5fde9468]
call dword [sym.imp.ntdll.dll_EtwEventEnabled]
test al, al
jne 0x5fdb39ae
mov edi, dword [esp + 0xc]
mov ebx, dword [esp + 0x38]
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jne 0x5fd98400
test ebx, ebx
jne 0x5fd9e30e
mov eax, dword [0x5fde9010]
cmp eax, 0x5fde9010
je 0x5fd84352
test dword [eax + 0x1c], 0x400
jne 0x5fdb39e8
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x187c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.5fd83560
mov esp, ebp
pop ebp
ret 0x24
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1874
call fcn.5fd85ced
mov eax, dword [0x5fde94a8]
xor eax, esp
mov dword [esp + 0x1870], eax
movzx eax, dx
mov edx, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x18]
push ebx
mov ebx, dword [ebp + 8]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 0x28]
push esi
mov esi, dword [ebp + 0x20]
mov dword [esp + 0x50], eax
xor eax, eax
push edi
mov edi, dword [ebp + 0x24]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], edx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x5c], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x38], eax
mov ecx, dword [0x5fde9010]
cmp ecx, 0x5fde9010
je 0x5fd85e17
test dword [ecx + 0x1c], 0x400
jne 0x5fdb328d
cmp dword [edi + 0x14], 0
lea eax, [edi + 0x10]
mov dword [esp + 0x1c], eax
mov dword [eax], 0
jne 0x5fd9fb4e
mov ecx, dword [ebx]
mov eax, ecx
mov edx, dword [ebx + 4]
and eax, 0x100
or eax, 0
jne 0x5fda6136
mov ecx, dword [ebx]
mov eax, ecx
mov edx, dword [ebx + 4]
and eax, 0x4000000
or eax, 0
jne 0x5fdb32b1
mov ecx, dword [ebx]
mov eax, ecx
mov edx, dword [ebx + 4]
and eax, 0x2000000
or eax, 0
jne 0x5fdb32c1
mov ecx, dword [ebx]
mov eax, ecx
mov edx, dword [ebx + 4]
and eax, 0x400
or eax, 0
jne 0x5fd9fb5a
mov ecx, dword [ebx]
mov eax, ecx
mov edx, dword [ebx + 4]
and eax, 0x40000
or eax, 0
jne 0x5fd9fb6f
mov eax, dword [ebx]
lea ecx, [edi + 8]
mov dword [ecx], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x58], ecx
mov dword [ecx + 4], eax
mov dword [esp + 0x30], 0
test esi, esi
jne 0x5fd9e136
cmp dword [esp + 0x24], 0
jne 0x5fd9e2d5
xor esi, esi
cmp dword [0x5fde907c], 0
mov edi, dword [ebx]
mov ebx, dword [ebx + 4]
mov dword [esp + 0x20], esi
mov dword [esp + 0xc0], edi
mov dword [esp + 0x28], ebx
je 0x5fd85f17
xor eax, eax
mov word [esp + 0x1070], ax
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x5fda19ea
push 0x5fd84500
push dword [0x5fde946c]
push dword [0x5fde9468]
call dword [sym.imp.ntdll.dll_EtwEventEnabled]
test al, al
jne 0x5fdb32ce
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x5fd9e162
mov ebx, dword [0x5fde9010]
cmp dword [0x5fde90ac], 0
je 0x5fdac418
test esi, esi
je 0x5fd8af44
mov ecx, 0x5fd86210
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
je 0x5fd983e6
sbb eax, eax
or eax, 1
test eax, eax
je 0x5fd983f6
xor esi, esi
mov edi, dword [esp + 0x3c]
mov eax, dword [edi]
and eax, 0x40000000
or eax, 0
je 0x5fd9819c
test esi, esi
jne 0x5fd9840a
mov esi, dword [esp + 0x10]
cmp ebx, 0x5fde9010
je 0x5fd85f99
test dword [ebx + 0x1c], 0x10000000
jne 0x5fdb340b
mov eax, dword [esp + 0x14]
cmp ax, 1
je 0x5fd8640e
test ax, ax
je 0x5fd8640e
cmp ax, 0x1c
je 0x5fd86443
test ax, ax
je 0x5fd86443
cmp ebx, 0x5fde9010
je 0x5fd85fd8
test dword [ebx + 0x1c], 0x4000
jne 0x5fdb350e
mov edx, esi
lea ecx, [esp + 0xa4]
call fcn.5fd86217
mov ebx, dword [esp + 0x1c]
test eax, eax
jne 0x5fdb352d
mov dword [esp + 0xc], eax
mov edx, dword [0x5fde9010]
mov esi, dword [esp + 0xc]
test esi, esi
jne 0x5fdb35dd
mov eax, dword [edi + 4]
mov ecx, dword [edi]
mov dword [esp + 0xc4], eax
mov eax, ecx
and eax, 0x4000
or eax, 0
je 0x5fd8602c
cmp word [esp + 0x14], 0x1c
jne 0x5fd8646a
cmp dword [0x5fde9254], 0
jne 0x5fdb3618
mov eax, dword [edi + 4]
mov ecx, dword [edi]
mov dword [esp + 0xc4], eax
mov eax, ecx
and eax, 8
or eax, 0
jne 0x5fd9ddb5
mov eax, ecx
and eax, 0x20
or eax, 0
jne 0x5fd84028
mov eax, ecx
and eax, 0x10000000
or eax, 0
jne 0x5fdb366c
mov dword [esp + 0x4c], 1
and ecx, 0x4000
or ecx, 0
je 0x5fd9784b
mov ebx, 1
mov ecx, dword [esp + 0x14]
xor esi, esi
xor eax, eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x28], eax
cmp cx, 0x1c
jne 0x5fd97852
mov esi, dword [esp + 0x1c]
mov dword [esi], eax
mov eax, dword [esp + 0x10]
cmp eax, 0x5fd863fc
je 0x5fd98543
test eax, eax
je 0x5fd860fa
mov ecx, eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x5fd860c9
sub ecx, edx
sar ecx, 1
cmp ecx, 8
je 0x5fdac37a
lea eax, [ecx + 1]
cmp eax, 8
mov eax, dword [esp + 0x10]
je 0x5fdac2b1
cmp ecx, 9
je 0x5fd98574
cmp eax, 0x5fd863e8
je 0x5fd98543
test eax, eax
je 0x5fd8613b
mov ecx, eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x5fd8610e
sub ecx, edx
sar ecx, 1
cmp ecx, 9
je 0x5fd98524
lea eax, [ecx + 1]
cmp eax, 9
je 0x5fdac3a2
cmp ecx, 0xa
je 0x5fd97057
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xc0], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x34], 0
cmp ebx, 0x5fd86494
je 0x5fd8b1ee
test ebx, ebx
je 0x5fd8619c
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x5fd8616f
sub ecx, edx
sar ecx, 1
cmp ecx, 0xe
je 0x5fd8b1d3
lea eax, [ecx + 1]
cmp eax, 0xe
je 0x5fdac2d9
cmp ecx, 0xf
je 0x5fd90c9d
xor eax, eax
xor edi, edi
mov dword [esp + 0xc], edi
xor esi, esi
mov word [esp + 0x4d8], ax
mov ecx, 2
mov word [esp + 0x2d8], ax
mov edx, 0x5fde9378
lock cmpxchg dword [edx], ecx
mov ebx, 0x100
cmp eax, 1
jne 0x5fd9696e
lea ecx, [esp + 0x4d8]
mov esi, 0x5fde9c38
mov eax, ecx
mov edx, ebx
sub esi, eax
lea eax, [edx + 0x7ffffefe]
test eax, eax
je 0x5fd864b2
movzx eax, word [ecx + esi]
test ax, ax
je 0x5fd864b2
mov word [ecx], ax
add ecx, 2
dec edx
jne 0x5fd861e4
jmp 0x5fd97085
lea eax, [esp + 0xc0]
mov dword [esp + 0x20], 0
push eax
lea eax, [esp + 0x24]
push eax
push 1
push esi
call dword [sym.imp.ntdll.dll_RtlIpv4StringToAddressW]
test eax, eax
jns 0x5fdb3434
mov ebx, dword [0x5fde9010]
mov eax, dword [esp + 0x14]
jmp 0x5fd85fb0
push 0
push ecx
push 0
mov edx, esi
lea ecx, [esp + 0x6c]
call fcn.5fd862e5
test eax, eax
jne 0x5fd8af3a
mov ebx, dword [0x5fde9010]
mov eax, dword [esp + 0x14]
jmp 0x5fd85fc3
mov esi, 0x57
mov dword [esp + 0xc], esi
cmp edx, 0x5fde9010
je 0x5fd841da
test dword [edx + 0x1c], 0x400
je 0x5fd841da
jmp 0x5fdb35fe
test edx, edx
je 0x5fd97085
xor eax, eax
mov esi, 0x5fde9e38
mov word [ecx], ax
mov edx, ebx
lea ecx, [esp + 0x2d8]
mov eax, ecx
sub esi, eax
mov edi, edi
jmp 0x5fd83eb2
test ecx, ecx
je 0x5fd83fc2
mov edx, ebx
lea eax, [esp + 0x2d8]
sub edx, ecx
mov edi, 0
lea eax, [eax + edx*2]
sub ebx, edx
je 0x5fdb36f5
add edx, 0x7ffffefe
mov esi, 0x5fd8a0b4
add edx, ebx
sub esi, eax
lea esp, [esp]
jmp 0x5fd8a0d9
movzx ecx, word [eax + esi]
test cx, cx
je 0x5fd8a0dd
mov word [eax], cx
dec edx
add eax, 2
dec ebx
je 0x5fdb36f5
test edx, edx
jne 0x5fd8a0c2
test ebx, ebx
je 0x5fdb36f5
xor ecx, ecx
mov word [eax], cx
test edi, edi
js 0x5fd8a146
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x5fd8a146
mov edx, ecx
lea ecx, [edx + 2]
lea ecx, [ecx]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x5fd8a0fd
sub edx, ecx
lea ecx, [esp + 0x2d8]
sar edx, 1
lea esi, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x5fd8a119
sub ecx, esi
sar ecx, 1
cmp ecx, edx
je 0x5fd9707f
lea eax, [edx + 1]
cmp ecx, eax
je 0x5fd8b27c
lea eax, [ecx + 1]
cmp eax, edx
je 0x5fd8b259
mov edi, dword [esp + 0xc]
jmp 0x5fd83fc2
test esi, esi
jne 0x5fd842cc
jmp 0x5fd842c4
test ecx, ecx
je 0x5fd842f3
mov esi, 0x401
lea eax, [esp + 0x868]
sub esi, ecx
mov edx, 0x401
mov ebx, 0
lea eax, [eax + esi*2]
sub edx, esi
je 0x5fdb39a1
add esi, 0x7ffffbfd
mov edi, 0x5fd85d18
add esi, edx
sub edi, eax
test esi, esi
je 0x5fd8ae8b
movzx ecx, word [eax + edi]
test cx, cx
je 0x5fd8ae8b
mov word [eax], cx
dec esi
add eax, 2
dec edx
jne 0x5fd8ae6f
jmp 0x5fdb39a1
test edx, edx
je 0x5fdb39a1
xor ecx, ecx
mov word [eax], cx
test ebx, ebx
js 0x5fd842f3
mov eax, dword [esp + 0x48]
test eax, eax
je 0x5fd842f3
jmp 0x5fd84220
add eax, 2
dec ecx
jne 0x5fd84260
jmp 0x5fd842f3
dec eax
cmp eax, 0x20
ja case.0x5fd8aed1.3
movzx eax, byte [eax + 0x5fd8af70]
jmp dword [eax*4 + 0x5fd8af58]
lea edx, [esi + 0x18]
lea ecx, [esp + 0xd0]
call fcn.5fd8563d
jmp 0x5fd84253
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x5fd85f55
add eax, 4
add ecx, 4
test dx, dx
je 0x5fd983ef
jmp 0x5fd85f49
mov ecx, 8
jmp 0x5fdac37e
mov ecx, 0xe
jmp 0x5fd8b1d3
mov ecx, 9
jmp 0x5fd98528
mov edx, ecx
jmp 0x5fd97473
mov edx, ecx
jmp 0x5fd97497
mov edi, 0x1c
jmp 0x5fdb348b
mov edi, dword [esp + 0x3c]
jmp 0x5fd9840a
mov esi, 1
jmp 0x5fd8403e
push ecx
push 0x5fd86514
lea eax, [esp + 0xd8]
push 0x101
push eax
call fcn.5fd8a9b4
add esp, 0x10
lea ecx, [esp + 0xd0]
mov edx, 0x101
push dword [esi + 0x18]
call fcn.5fd8aa81
jmp 0x5fd84253
push ecx
push 0x5fd86494
push ecx
push ebx
push 1
push 0x7f
call dword [sym.imp.api_ms_win_core_string_l1_1_0.dll_CompareStringW]
cmp eax, 2
jne 0x5fd8619c
mov dword [esp + 0xc0], 1
mov dword [esp + 0x4c], 0
jmp 0x5fd8619c
mov eax, dword [esp + 0x10]
cmp word [eax + ecx*2], 0x2e
jne 0x5fd8a146
jmp 0x5fdb3702
cmp word [esp + edx*2 + 0x2d8], 0x2e
jne 0x5fd8a146
jmp 0x5fd9707f
cmp word [ebx + 0x1c], 0x2e
jne 0x5fd8619c
jmp 0x5fd8af18
mov edi, eax
test edi, edi
je 0x5fdb3679
push edi
mov edx, ebx
lea ecx, [esp + 0x4dc]
call fcn.5fd8aba9
mov ecx, edi
call fcn.5fd83e2e
mov ecx, 1
call fcn.5fd95a1a
mov edi, eax
test edi, edi
je 0x5fdb36b7
push edi
mov edx, ebx
lea ecx, [esp + 0x2dc]
call fcn.5fd8aba9
mov ecx, edi
call fcn.5fd83e2e
mov edi, dword [esp + 0xc]
test esi, esi
je 0x5fd83ed2
test edi, edi
jne 0x5fd97095
lea eax, [esp + 0x4d8]
mov edx, ebx
push eax
mov ecx, 0x5fde9c38
call fcn.5fd8aba9
lea eax, [esp + 0x2d8]
mov edx, ebx
push eax
mov ecx, 0x5fde9e38
call fcn.5fd8aba9
mov eax, 1
mov ecx, 0x5fde9378
xchg dword [ecx], eax
jmp 0x5fd83ed2
cmp eax, 2
je 0x5fd96978
mov esi, 1
mov ecx, 1
call fcn.5fd9679c
jmp 0x5fd968d7
mov eax, dword [esp + 0x10]
cmp word [eax + 0x12], 0x2e
jne 0x5fd8613b
jmp 0x5fd8af22
cmp word [esp + edx*2 + 0x2d8], 0x2e
jne 0x5fd83fa9
jmp 0x5fd97493
mov eax, dword [esp + 0x10]
jmp 0x5fd970a5
sub ecx, 2
jmp 0x5fd864ba
sub ecx, 2
jmp 0x5fd83ecd
xor eax, eax
jmp 0x5fd96962
mov esi, dword [esp + 0x34]
jmp 0x5fd83fdb
push edx
lea ecx, [esp + 0x2dc]
push ecx
push edx
push eax
push 1
push 0x7f
call dword [sym.imp.api_ms_win_core_string_l1_1_0.dll_CompareStringW]
mov edi, dword [esp + 0xc]
cmp eax, 2
jne 0x5fd83fc2
jmp 0x5fd974b5
cmp word [esp + edx*2 + 0x4d8], 0x2e
jne 0x5fd83f41
mov eax, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x4dc]
push ecx
push edx
push eax
push 1
push 0x7f
call dword [sym.imp.api_ms_win_core_string_l1_1_0.dll_CompareStringW]
cmp eax, 2
jne 0x5fd83f41
jmp 0x5fd974b5
mov eax, dword [esp + 0x10]
push edx
lea ecx, [esp + 0x2dc]
push ecx
push edx
push eax
push 1
push 0x7f
call dword [sym.imp.api_ms_win_core_string_l1_1_0.dll_CompareStringW]
cmp eax, 2
jne 0x5fd83fa9
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x28], 1
cmp ax, 1
jne 0x5fd987d4
lea eax, [esp + 0x18]
push eax
push 2
call dword [sym.imp.IPHLPAPI.DLL_GetUnicastIpAddressTable]
mov edi, eax
mov dword [esp + 0xc], edi
test edi, edi
jne 0x5fd83fd9
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x1c]
lea edx, [edi + 1]
push dword [esp + 0x54]
lea ecx, [esp + 0x4e4]
push ebx
call fcn.5fd98337
mov edi, eax
mov dword [esp + 0xc], edi
test edi, edi
jne 0x5fd9709c
push dword [esp + 0x18]
call dword [sym.imp.IPHLPAPI.DLL_FreeMibTable]
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x18], edi
cmp ax, 0x1c
jne 0x5fd83fdb
lea eax, [esp + 0x18]
push eax
push 0x17
call dword [sym.imp.IPHLPAPI.DLL_GetUnicastIpAddressTable]
mov edi, eax
mov dword [esp + 0xc], edi
test edi, edi
jne 0x5fd83fdb
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x1c]
lea edx, [edi + 0x1c]
push dword [esp + 0x54]
lea ecx, [esp + 0x4e4]
push ebx
call fcn.5fd98337
mov edi, eax
mov dword [esp + 0xc], edi
test edi, edi
jne 0x5fd9709c
push dword [esp + 0x18]
call dword [sym.imp.IPHLPAPI.DLL_FreeMibTable]
mov esi, dword [esp + 0x34]
mov dword [esp + 0x18], edi
jmp 0x5fd83ff3
xor ebx, ebx
jmp 0x5fd8608d
cmp cx, 1
je 0x5fd860ab
mov ebx, dword [esp + 0x1c]
jmp 0x5fd8400b
test esi, esi
jne 0x5fd84028
cmp edx, 0x5fde9010
je 0x5fd841c2
test dword [edx + 0x1c], 0x400
je 0x5fd841c2
jmp 0x5fdb3749
mov eax, dword [esp + 0x10]
push 0x5fd981c4
push eax
call dword [sym.imp.api_ms_win_core_crt_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x5fdb33d1
mov ebx, dword [0x5fde9010]
jmp 0x5fd85f78
test dx, dx
jne 0x5fd8aeec
xor eax, eax
jmp 0x5fd85f5a
mov esi, 1
jmp 0x5fd85f64
call fcn.5fd83e2e
jmp 0x5fd84331
mov ecx, 1
call fcn.5fd95a1a
mov dword [esp + 0x5c], eax
test eax, eax
je 0x5fdb35f4
mov edx, dword [0x5fde9010]
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x10], eax
jmp 0x5fd86008
mov eax, dword [esp + 0x10]
push ecx
push 0x5fd863e8
push ecx
push eax
push 1
push 0x7f
call dword [sym.imp.api_ms_win_core_string_l1_1_0.dll_CompareStringW]
cmp eax, 2
jne 0x5fd8613b
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push esi
push ebx
mov dword [esp + 0x30], 1
call fcn.5fd98589
mov edx, dword [0x5fde9010]
mov esi, eax
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0xc], eax
mov eax, 1
jmp 0x5fd8400b
cmp word [eax + 0x10], 0x2e
jne 0x5fd860fa
jmp 0x5fd8af0e
test ebx, ebx
jne 0x5fd974cf
xor esi, esi
jmp 0x5fd9752b
cmp eax, 0x2554
je 0x5fd840e3
jmp 0x5fdb3795
movzx eax, word [esi + 8]
push eax
push 0x5fd86514
lea eax, [esp + 0xd8]
push 0x101
push eax
call fcn.5fd8a9b4
add esp, 0x10
lea ecx, [esp + 0xd0]
mov edx, 0x101
push dword [esi + 0x18]
call fcn.5fd8aa81
movzx eax, word [esi + 8]
push eax
push 0x5fd86514
lea eax, [esp + 0xd8]
push 0x101
push eax
call fcn.5fd8a9b4
add esp, 0x10
jmp 0x5fd84253
mov eax, ecx
and eax, 0x10
or eax, 0
je 0x5fd86053
jmp 0x5fdb365e
and ecx, 0x10
or ecx, 0
je 0x5fd84150
jmp 0x5fdb380d
cmp dword [esi], 0x80000001
jne 0x5fd85eb8
mov edx, 0xc
mov ecx, esi
call fcn.5fd9e093
test eax, eax
je 0x5fd85eb8
mov esi, dword [eax + 0x14]
mov dword [esp + 0x30], esi
jmp 0x5fd85eb8
mov ebx, dword [0x5fde9010]
cmp ebx, 0x5fde9010
je 0x5fd9e17d
test dword [ebx + 0x1c], 0x400
jne 0x5fdb32fe
cmp dword [esp + 0x40], 0
je 0x5fd85f2d
jmp 0x5fdb331f
mov esi, 1
jmp 0x5fd85ec5
mov ecx, ebx
call fcn.5fd83e2e
jmp 0x5fd84339
test ebx, ebx
je 0x5fd9e5b8
mov ecx, 0x200
call fcn.5fd85d21
mov dword [esp + 0x44], eax
test eax, eax
je 0x5fdb381f
mov edx, ebx
mov ecx, eax
call fcn.5fd9e5c6
test eax, eax
je 0x5fdb385b
cmp dword [0x5fde907c], 0
je 0x5fd9e5ae
mov ecx, ebx
call fcn.5fd87890
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x24]
mov edx, dword [0x5fde9010]
mov ebx, dword [esp + 0x44]
jmp 0x5fd8415c
push 0x5fd9e610
push dword [0x5fde946c]
push dword [0x5fde9468]
call dword [sym.imp.ntdll.dll_EtwEventEnabled]
test al, al
je 0x5fd84321
jmp 0x5fdb39d5
mov eax, dword [edi]
and eax, 0x10
or eax, 0
jne 0x5fd84172
mov edi, dword [ebp + 0x1c]
cmp edx, 0x5fde9010
je 0x5fd9f2c9
test dword [edx + 0x1c], 0x400
jne 0x5fdb395e
push dword [esp + 0x2c]
mov edx, ebx
push edi
push ecx
mov ecx, dword [esp + 0x60]
push esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [esp + 0x48]
push dword [esp + 0x5c]
push dword [esp + 0x78]
push dword [esp + 0x38]
call fcn.5fd9f305
mov ebx, dword [esp + 0x1c]
mov edi, eax
mov dword [esp + 0xc], edi
jmp 0x5fd841c6
mov eax, dword [edi + 4]
or dword [edi], 8
mov dword [edi + 4], eax
mov edx, dword [0x5fde9010]
mov dword [esp + 0x50], 1
jmp 0x5fd84136
mov dword [edi + 0x18], 0
jmp 0x5fd85e2e
or ecx, 8
mov eax, edx
mov dword [ebx], ecx
or dword [ebx], 0x40
or dword [ebx], 0x20
mov dword [ebx + 4], eax
jmp 0x5fd85e82
or edx, 0x1000
mov dword [ebx], ecx
mov dword [ebx + 4], edx
jmp 0x5fd85e97
mov dword [esp + 0x50], 1
jmp 0x5fd8411d
push ecx
push 0x5fd86514
lea eax, [esp + 0xd8]
push 0x101
push eax
call fcn.5fd8a9b4
add esp, 0x10
lea ecx, [esp + 0xd0]
mov edx, 0x101
push dword [esi + 0x18]
call fcn.5fd8aa81
jmp case.0x5fd8aed1.33
cmp dword [eax + 4], 0
jbe 0x5fd85ef8
lea ebx, [eax + 0x20]
xor edi, edi
mov esi, eax
mov edx, ebx
lea ecx, [esp + 0x7e0]
call fcn.5fd8bb55
lea eax, [esp + 0x7e0]
mov edx, 0x401
push eax
lea ecx, [esp + 0x1074]
call fcn.5fd8aa81
test eax, eax
js 0x5fda1a49
push 0x5fd85d18
mov edx, 0x401
lea ecx, [esp + 0x1074]
call fcn.5fd8aa81
test eax, eax
js 0x5fda1a49
inc edi
add ebx, 0x40
cmp edi, dword [esi + 4]
jb 0x5fda19fb
mov esi, dword [esp + 0x20]
mov edi, dword [esp + 0xc0]
mov ebx, dword [esp + 0x28]
jmp 0x5fd85ef8
or ecx, 8
mov eax, edx
mov dword [ebx], ecx
or dword [ebx], 0x40
or dword [ebx], 0x20
mov dword [ebx + 4], eax
jmp 0x5fd85e43
cmp word [ecx*2 + 0x5fd863fc], 0x2e
jne 0x5fd860fa
jmp 0x5fdac37e
cmp word [ecx*2 + 0x5fd86494], 0x2e
jne 0x5fd8619c
jmp 0x5fd8b1d3
mov eax, dword [esp + 0x10]
cmp word [eax + ecx*2], 0x2e
jne 0x5fd83f41
jmp 0x5fd8af2c
mov eax, dword [esp + 0x10]
cmp word [eax + ecx*2], 0x2e
jne 0x5fd83fa9
jmp 0x5fd8af33
mov eax, dword [esp + 0x10]
push ecx
push 0x5fd863fc
push ecx
push eax
push 1
push 0x7f
call dword [sym.imp.api_ms_win_core_string_l1_1_0.dll_CompareStringW]
cmp eax, 2
je 0x5fd98543
mov eax, dword [esp + 0x10]
jmp 0x5fd860fa
cmp word [ecx*2 + 0x5fd863e8], 0x2e
jne 0x5fd8613b
jmp 0x5fd98524
push 0x5fde9420
call dword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_EnterCriticalSection]
cmp dword [0x5fde90ac], 0
jne 0x5fdac4bf
push 0x120
push 0
push sym.DNSAPI.dll_DnsGlobals
call sub.api_ms_win_core_crt_l1_1_0.dll_memset
add esp, 0xc
mov dword [0x5fde924c], 1
lea eax, [esp + 0xd0]
push 0x11c
push 0
push eax
call sub.api_ms_win_core_crt_l1_1_0.dll_memset
add esp, 0xc
mov dword [esp + 0xd0], 0x11c
lea eax, [esp + 0xd0]
push eax
call dword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetVersionExW]
test eax, eax
je 0x5fdb335a
mov al, byte [esp + 0x1ea]
cmp al, 1
jne 0x5fdb3380
mov dword [0x5fde9250], 1
mov dword [0x5fde90ac], 1
mov eax, dword [0x5fde9010]
cmp eax, 0x5fde9010
je 0x5fdac4bf
test byte [eax + 0x1c], 4
jne 0x5fdb33a5
push 0x5fde9420
call dword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_LeaveCriticalSection]
mov ebx, dword [0x5fde9010]
jmp 0x5fd85f3a
push dword [edi + 0x14]
mov eax, dword [esp + 0x18]
push esi
push edx
push dword [ebx]
movzx eax, ax
push eax
mov eax, dword [esp + 0x24]
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.5fdcc81a
jmp 0x5fd85e17
or ecx, 0x1000000
mov dword [ebx + 4], edx
mov dword [ebx], ecx
jmp 0x5fd85e58
or ecx, 8
mov dword [ebx + 4], edx
mov dword [ebx], ecx
jmp 0x5fd85e6d
push esi
push dword [esp + 0x34]
mov esi, dword [esp + 0x18]
lea eax, [esp + 0x1078]
push dword [ebp + 0x14]
mov edx, esi
push dword [ebp + 0x10]
push eax
mov eax, dword [esp + 0x28]
push ebx
push edi
movzx eax, ax
push eax
sub esp, 8
call fcn.5fdcfc28
jmp 0x5fd85f1b
push eax
push dword [ebx + 0x14]
mov edx, 0x5fdbd58c
mov ecx, 0x22
push dword [ebx + 0x10]
call fcn.5fdc7d09
mov ebx, dword [0x5fde9010]
jmp 0x5fd9e17d
cmp ebx, 0x5fde9010
je 0x5fdb3345
test dword [ebx + 0x1c], 0x400
je 0x5fdb3345
push dword [ebx + 0x14]
mov edx, 0x5fdbd58c
mov ecx, 0x23
push dword [ebx + 0x10]
call fcn.5fdc44b5
mov eax, dword [esp + 0x2c]
mov dword [eax + 4], 0
mov eax, 0x57
jmp 0x5fd84356
lea eax, [esp + 0xd0]
mov dword [esp + 0xd0], 0x114
push eax
call dword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetVersionExW]
test eax, eax
jne 0x5fdac49f
jmp 0x5fdac4bf
cmp al, 3
je 0x5fdb3396
cmp al, 2
jne 0x5fdac49f
mov dword [0x5fde925c], 1
mov dword [0x5fde9254], 1
jmp 0x5fdac49f
push dword [0x5fde925c]
mov edx, 0x5fdbd59c
mov ecx, 0xa
push dword [0x5fde9254]
push dword [0x5fde9250]
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.5fdc8d83
jmp 0x5fdac4bf
mov ecx, dword [esp + 0x14]
cmp cx, 1
je 0x5fdb33e5
cmp cx, 0x1c
jne 0x5fd981b7
mov eax, dword [esp + 0x2c]
cmp dword [eax + 0x14], 0
jne 0x5fd981b7
lea ebx, [eax + 0x10]
mov edx, ecx
push ecx
mov ecx, ebx
call fcn.5fdcc332
mov edi, eax
mov dword [esp + 0xc], edi
jmp 0x5fd841c6
mov eax, dword [esp + 0x14]
mov edx, 0x5fdbd754
movzx eax, ax
mov ecx, 0xf
push eax
push esi
push dword [ebx + 0x14]
push dword [ebx + 0x10]
call fcn.5fdc7c85
mov ebx, dword [0x5fde9010]
jmp 0x5fd85f99
mov eax, dword [esp + 0x20]
test eax, eax
je 0x5fdb3446
cmp word [eax], 0
jne 0x5fd86434
mov eax, esi
mov esi, 3
push 0x2e
push eax
dec esi
call dword [sym.imp.api_ms_win_core_crt_l1_1_0.dll_wcschr]
add esp, 8
test eax, eax
je 0x5fdb34fc
add eax, 2
cmp word [eax], 0
je 0x5fdb34fc
test esi, esi
jne 0x5fdb344d
mov edx, dword [esp + 0xc0]
lea ecx, [esp + 0x60]
push esi
call fcn.5fd90f8c
lea edi, [esi + 1]
mov esi, dword [esp + 0x10]
push 1
push ecx
push 0x93a80
lea eax, [esp + 0x6c]
mov edx, edi
push eax
mov ecx, esi
call fcn.5fd9c1ef
mov esi, eax
mov ebx, dword [0x5fde9010]
cmp ebx, 0x5fde9010
je 0x5fdb34df
test dword [ebx + 0x1c], 0x10000000
je 0x5fdb34df
movzx eax, di
mov edx, 0x5fdbd754
push eax
mov eax, dword [esp + 0x14]
mov ecx, 0x10
push eax
push esi
push dword [ebx + 0x14]
push dword [ebx + 0x10]
call fcn.5fdcb67b
mov ebx, dword [0x5fde9010]
mov edi, dword [esp + 0x3c]
test esi, esi
je 0x5fdb3505
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0xc], 0
mov dword [ebx], esi
xor esi, esi
jmp 0x5fd841da
mov esi, dword [esp + 0x10]
jmp 0x5fd86434
mov esi, dword [esp + 0x10]
jmp 0x5fd86461
movzx eax, ax
mov edx, 0x5fdbd58c
push eax
push esi
push dword [ebx + 0x14]
mov ecx, 0x11
push dword [ebx + 0x10]
call fcn.5fdc7c85
jmp 0x5fd85fd8
mov eax, dword [esp + 0x14]
cmp ax, 0x1c
je 0x5fdb3541
mov dword [esp + 0xc], 0x232b
jmp 0x5fdb359b
mov dword [esp + 0xc], 0x2559
test ebx, ebx
je 0x5fdb359b
mov eax, dword [esp + 0xac]
sub esp, 0x10
mov ecx, esp
mov edx, 0x93a80
push 1
mov dword [ecx], eax
mov eax, dword [esp + 0xc4]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0xc8]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0xcc]
mov dword [ecx + 0xc], eax
mov ecx, esi
push 1
call fcn.5fd98168
test eax, eax
jne 0x5fdb3595
mov dword [esp + 0xc], 0xe
mov dword [ebx], eax
mov eax, dword [esp + 0x14]
mov edx, dword [0x5fde9010]
cmp edx, 0x5fde9010
je 0x5fd85ffc
test dword [edx + 0x1c], 0x4000
je 0x5fd85ffc
push dword [esp + 0xc]
movzx eax, ax
mov ecx, 0x12
push eax
push esi
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, 0x5fdbd58c
call fcn.5fdc455e
jmp 0x5fd85ff6
cmp esi, 0x2559
jne 0x5fd841c2
xor esi, esi
mov dword [esp + 0xc], esi
jmp 0x5fd841da
mov eax, 0x25e5
jmp 0x5fd84356
push dword [edx + 0x14]
mov ecx, 0x24
push dword [edx + 0x10]
mov edx, 0x5fdbd58c
call fcn.5fdc44b5
jmp 0x5fd841da
and ecx, 0x10000000
or ecx, 0
je 0x5fd86039
lea edx, [esp + 0xc0]
call fcn.5fdcd2f5
cmp dword [esp + 0xc8], 0
je 0x5fdb3653
cmp dword [esp + 0xc4], 0
je 0x5fdb3653
mov eax, dword [edi + 4]
and dword [edi], 0xefffffff
mov dword [edi + 4], eax
mov edx, dword [0x5fde9010]
jmp 0x5fd86039
mov esi, 0x57
mov dword [esp + 0xc], esi
jmp 0x5fd841da
mov dword [esp + 0x4c], 0
jmp 0x5fd86079
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov dword [esp + 0xc], eax
mov ecx, dword [0x5fde9010]
cmp ecx, 0x5fde9010
je 0x5fdb36b0
test dword [ecx + 0x1c], 0x400
je 0x5fdb36b0
push eax
push dword [ecx + 0x14]
mov edx, 0x5fdbd58c
push dword [ecx + 0x10]
mov ecx, 0xe
call fcn.5fdc7d09
xor esi, esi
jmp 0x5fd968f0
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov dword [esp + 0xc], eax
mov ecx, dword [0x5fde9010]
cmp ecx, 0x5fde9010
je 0x5fdb36ee
test dword [ecx + 0x1c], 0x400
je 0x5fdb36ee
push eax
push dword [ecx + 0x14]
mov edx, 0x5fdbd58c
push dword [ecx + 0x10]
mov ecx, 0xf
call fcn.5fdc7d09
xor esi, esi
jmp 0x5fd9691a
sub eax, 2
mov edi, 0x8007007a
jmp 0x5fd8a0e5
mov edx, ecx
jmp 0x5fd970a5
push eax
call dword [sym.imp.IPHLPAPI.DLL_FreeMibTable]
jmp 0x5fd83fe7
mov ecx, esi
call fcn.5fd85603
xor esi, esi
jmp 0x5fd83ff3
push esi
push eax
push dword [edx + 0x14]
mov ecx, 0x10
push dword [edx + 0x10]
mov edx, 0x5fdbd58c
call fcn.5fdc81e7
mov edx, dword [0x5fde9010]
mov eax, dword [esp + 0x28]
jmp 0x5fd84020
push dword [edx + 0x14]
mov ecx, 0x25
push dword [edx + 0x10]
mov edx, 0x5fdbd58c
call fcn.5fdc44b5
jmp 0x5fd841c2
push 0
lea ecx, [esp + 0x6dc]
mov edx, 0x5fdbd764
push ecx
push dword [eax + 0x14]
mov ecx, 0x13
push dword [eax + 0x10]
call fcn.5fdc8272
jmp 0x5fd840af
mov eax, 0x7b
mov dword [esp + 0xc], eax
jmp 0x5fd840d7
mov eax, dword [0x5fde9010]
cmp eax, 0x5fde9010
je 0x5fd841be
test dword [eax + 0x1c], 0x400
je 0x5fd841be
push ebx
push dword [eax + 0x14]
mov edx, 0x5fdbd58c
mov ecx, 0x26
push dword [eax + 0x10]
call fcn.5fdc7a66
jmp 0x5fd841be
mov edx, dword [0x5fde9010]
cmp edx, 0x5fde9010
je 0x5fdb3800
test dword [edx + 0x1c], 0x400
je 0x5fdb3800
push esi
push dword [edx + 0x14]
mov ecx, 0x27
push dword [edx + 0x10]
mov edx, 0x5fdbd58c
call fcn.5fdc7d09
mov edx, dword [0x5fde9010]
mov dword [esp + 0x48], 1
jmp 0x5fd840fe
mov ebx, dword [esp + 0x1c]
mov esi, 0x57
mov dword [esp + 0xc], esi
jmp 0x5fd841da
mov ecx, dword [0x5fde9010]
cmp ecx, 0x5fde9010
je 0x5fdb3849
test dword [ecx + 0x1c], 0x400
je 0x5fdb3849
push dword [ecx + 0x14]
mov edx, 0x5fdbd58c
push dword [ecx + 0x10]
lea ecx, [eax + 0x28]
call fcn.5fdc44b5
mov ebx, dword [esp + 0x1c]
mov esi, 8
mov dword [esp + 0xc], esi
jmp 0x5fd841da
mov eax, dword [0x5fde9010]
cmp eax, 0x5fde9010
je 0x5fdb3885
test dword [eax + 0x1c], 0x400
je 0x5fdb3885
push dword [eax + 0x14]
mov edx, 0x5fdbd58c
mov ecx, 0x29
push dword [eax + 0x10]
call fcn.5fdc44b5
mov ebx, dword [esp + 0x1c]
mov esi, 0x57
mov dword [esp + 0xc], esi
jmp 0x5fd841da
call fcn.5fdc02f4
test eax, eax
jne 0x5fdb38d3
mov ecx, dword [esp + 0x54]
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x30]
mov edx, ebx
push edi
push 1
push dword [esp + 0x34]
push dword [esp + 0x2c]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [esp + 0x50]
push dword [esp + 0x7c]
push dword [esp + 0x3c]
call fcn.5fd84740
mov esi, eax
test esi, esi
je 0x5fd841aa
mov edx, dword [0x5fde9010]
cmp edx, 0x5fde9010
je 0x5fdb3988
test dword [edx + 0x1c], 0x400
je 0x5fdb3951
push esi
push dword [edx + 0x14]
mov ecx, 0x2a
push dword [edx + 0x10]
mov edx, 0x5fdbd58c
call fcn.5fdc7d09
mov edx, dword [0x5fde9010]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x18]
jmp 0x5fd9f2b4
mov edx, dword [0x5fde9010]
cmp edx, 0x5fde9010
je 0x5fdb3988
test dword [edx + 0x1c], 0x400
je 0x5fdb3951
push dword [edx + 0x14]
mov ecx, 0x2b
push dword [edx + 0x10]
mov edx, 0x5fdbd58c
call fcn.5fdc44b5
mov edx, dword [0x5fde9010]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x18]
jmp 0x5fd9f2b4
mov eax, dword [esp + 0x14]
mov ecx, 0x2c
movzx eax, ax
push eax
push dword [esp + 0x14]
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, 0x5fdbd58c
call fcn.5fdc7c85
mov ecx, dword [esp + 0x24]
jmp 0x5fd9f2c9
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
jmp 0x5fd9f2c9
mov ecx, eax
call fcn.5fd83e2e
jmp 0x5fd841ed
sub eax, 2
mov ebx, 0x8007007a
jmp 0x5fd8ae93
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x868]
push eax
push dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
push esi
push ebx
movzx eax, ax
push eax
sub esp, 8
call fcn.5fdcfb37
jmp 0x5fd8431d
mov ebx, dword [esp + 0x38]
sub esp, 8
mov edx, ebx
call fcn.5fdcc711
jmp 0x5fd84325
push edi
push dword [eax + 0x14]
mov edx, 0x5fdbd58c
mov ecx, 0x2d
push dword [eax + 0x10]
call fcn.5fdc7d09
jmp 0x5fd84352