Function at 0x5d8794
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x122
push 0
push 0
dec ecx
jne 0x5d879c
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x5da0e3
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x5da058
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [0x62a701], 0
cmp dword [0x62a708], 0
je 0x5d8841
mov eax, dword [0x62a708]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0x5d87e6
cmp eax, 0
je 0x5d8841
mov ecx, dword [0x62a708]
mov dl, 1
mov eax, dword [0x594d20]
call fcn.00594fe8
mov esi, eax
push 0
push 0
mov eax, esi
call fcn.00422610
mov eax, esi
mov edx, dword [eax]
call dword [edx]
mov edx, eax
lea eax, [ebp - 0x10]
call fcn.00405328
mov eax, esi
mov edx, dword [eax]
call dword [edx]
push eax
lea eax, [ebp - 0x10]
call fcn.004051f4
mov edx, eax
mov eax, esi
pop ecx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, esi
call fcn.00403e50
mov eax, dword [0x62a708]
call fcn.00422fac
mov eax, dword [0x62a6e0]
cmp eax, 0xe
ja case.0x5d884f.8
jmp dword [eax*4 + 0x5d8856]
mov edx, dword [ebp - 0x10]
mov eax, dword [0x62a6dc]
call fcn.005d7ed8
mov dl, 1
mov eax, dword [0x62a6dc]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x3e4]
xor edx, edx
call fcn.0046416c
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x3e4]
xor edx, edx
call fcn.004792fc
push 0xffffffffffffffff
mov ecx, 1
mov edx, 0x5da0fc
mov eax, dword [0x62a6dc]
call fcn.005d4500
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x3ec]
call fcn.00457068
xor edx, edx
call fcn.004541a0
jmp 0x5da04e
mov edx, dword [ebp - 0x10]
mov eax, dword [0x62a6dc]
call fcn.005d81c4
mov dl, 1
mov eax, dword [0x62a6dc]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x3e4]
xor edx, edx
call fcn.0046416c
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x3e4]
xor edx, edx
call fcn.004792fc
jmp 0x5da04e
xor eax, eax
push ebp
push 0x5d89d0
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x41cc3c]
call fcn.00403e20
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
call fcn.00404f9c
push eax
lea eax, [ebp - 0x10]
call fcn.004051f4
mov edx, eax
mov eax, dword [ebp - 0x1c]
pop ecx
call fcn.0042288c
push 0
push 0
mov eax, dword [ebp - 0x1c]
call fcn.00422610
mov eax, dword [0x62a6dc]
mov edx, dword [eax + 0x740]
mov eax, dword [ebp - 0x1c]
call fcn.00422f10
mov eax, dword [ebp - 0x1c]
call fcn.00403e50
push 1
push 0
push 0
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x740]
call fcn.0040519c
push eax
push 0x5da130
push 0
call sub.shell32.dll_ShellExecuteA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5d89f0
mov dl, 1
mov eax, dword [0x62a6dc]
mov ecx, dword [eax]
call dword [ecx + 0x64]
push 0
mov ecx, 1
mov edx, 0x5da170
mov eax, dword [0x62a6dc]
call fcn.005d4500
jmp 0x5da04e
xor eax, eax
push ebp
push 0x5d8ca1
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x41c94c]
call fcn.00403e20
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 5
jle 0x5d8c8f
xor eax, eax
push ebp
push 0x5d8c85
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x62a6dc]
mov ebx, dword [eax + 0x434]
mov eax, dword [ebx + 0x220]
mov edx, dword [eax]
call dword [edx + 0x44]
lea ecx, [ebp - 0x7e0]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x7e0]
lea eax, [ebp - 0x7dc]
mov edx, 0x5da190
call fcn.00404fe8
mov edx, dword [ebp - 0x7dc]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x7e8]
mov edx, 1
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x7e8]
lea eax, [ebp - 0x7e4]
mov edx, 0x5da1a4
call fcn.00404fe8
mov edx, dword [ebp - 0x7e4]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x7f0]
mov edx, 2
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x7f0]
lea eax, [ebp - 0x7ec]
mov edx, 0x5da1b8
call fcn.00404fe8
mov edx, dword [ebp - 0x7ec]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x7f8]
mov edx, 3
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x7f8]
lea eax, [ebp - 0x7f4]
mov edx, 0x5da1cc
call fcn.00404fe8
mov edx, dword [ebp - 0x7f4]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x800]
mov edx, 4
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x800]
lea eax, [ebp - 0x7fc]
mov edx, 0x5da1e0
call fcn.00404fe8
mov edx, dword [ebp - 0x7fc]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x808]
mov edx, 5
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x808]
lea eax, [ebp - 0x804]
mov edx, 0x5da1f4
call fcn.00404fe8
mov edx, dword [ebp - 0x804]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x810]
mov edx, 5
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x810]
lea eax, [ebp - 0x80c]
mov edx, 0x5da208
call fcn.00404fe8
mov edx, dword [ebp - 0x80c]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x818]
mov edx, 6
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x818]
lea eax, [ebp - 0x814]
mov edx, 0x5da21c
call fcn.00404fe8
mov edx, dword [ebp - 0x814]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x820]
mov edx, 7
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x820]
lea eax, [ebp - 0x81c]
mov edx, 0x5da230
call fcn.00404fe8
mov edx, dword [ebp - 0x81c]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5d8c8f
mov eax, dword [ebp - 0x24]
call fcn.00403e50
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5d8cab
push 0
mov ecx, 1
mov edx, 0x5da244
mov eax, dword [0x62a6dc]
call fcn.005d4500
mov dl, 1
mov eax, dword [0x62a6dc]
mov ecx, dword [eax]
call dword [ecx + 0x64]
jmp 0x5da04e
xor eax, eax
push ebp
push 0x5d8fda
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x41c94c]
call fcn.00403e20
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 0xa
jle 0x5d8fc8
xor eax, eax
push ebp
push 0x5d8fbe
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x62a6dc]
mov ebx, dword [eax + 0x434]
mov eax, dword [ebx + 0x220]
mov edx, dword [eax]
call dword [edx + 0x44]
lea ecx, [ebp - 0x828]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x828]
lea eax, [ebp - 0x824]
mov edx, 0x5da260
call fcn.00404fe8
mov edx, dword [ebp - 0x824]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x5da278
lea ecx, [ebp - 0x830]
mov edx, 1
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
push dword [ebp - 0x830]
push 0x5da290
lea eax, [ebp - 0x82c]
mov edx, 3
call fcn.0040505c
mov edx, dword [ebp - 0x82c]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x838]
mov edx, 2
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x838]
lea eax, [ebp - 0x834]
mov edx, 0x5da29c
call fcn.00404fe8
mov edx, dword [ebp - 0x834]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x840]
mov edx, 3
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x840]
lea eax, [ebp - 0x83c]
mov edx, 0x5da2b4
call fcn.00404fe8
mov edx, dword [ebp - 0x83c]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x848]
mov edx, 4
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x848]
lea eax, [ebp - 0x844]
mov edx, 0x5da2cc
call fcn.00404fe8
mov edx, dword [ebp - 0x844]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x850]
mov edx, 5
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x850]
lea eax, [ebp - 0x84c]
mov edx, 0x5da2e4
call fcn.00404fe8
mov edx, dword [ebp - 0x84c]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x858]
mov edx, 6
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x858]
lea eax, [ebp - 0x854]
mov edx, 0x5da2fc
call fcn.00404fe8
mov edx, dword [ebp - 0x854]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x860]
mov edx, 7
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x860]
lea eax, [ebp - 0x85c]
mov edx, 0x5da314
call fcn.00404fe8
mov edx, dword [ebp - 0x85c]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x868]
mov edx, 8
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x868]
lea eax, [ebp - 0x864]
mov edx, 0x5da32c
call fcn.00404fe8
mov edx, dword [ebp - 0x864]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x870]
mov edx, 9
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x870]
lea eax, [ebp - 0x86c]
mov edx, 0x5da344
call fcn.00404fe8
mov edx, dword [ebp - 0x86c]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x878]
mov edx, 0xa
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x878]
lea eax, [ebp - 0x874]
mov edx, 0x5da35c
call fcn.00404fe8
mov edx, dword [ebp - 0x874]
mov eax, dword [ebx + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5d8fc8
mov eax, dword [ebp - 0x24]
call fcn.00403e50
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5d8fe4
push 0
mov ecx, 1
mov edx, 0x5da374
mov eax, dword [0x62a6dc]
call fcn.005d4500
mov dl, 1
mov eax, dword [0x62a6dc]
mov ecx, dword [eax]
call dword [ecx + 0x64]
jmp 0x5da04e
lea eax, [ebp - 0x87c]
mov ecx, dword [ebp - 0x10]
mov edx, 0x5da390
call fcn.00404fe8
mov edx, dword [ebp - 0x87c]
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x44c]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov dl, 1
mov eax, dword [0x62a6dc]
mov ecx, dword [eax]
call dword [ecx + 0x64]
jmp 0x5da04e
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x464]
mov eax, dword [eax + 0x22c]
call fcn.0045dda4
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x464]
mov edx, dword [eax]
call dword [edx + 0xd8]
mov dl, 1
mov eax, dword [0x41cc3c]
call fcn.00403e20
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
call fcn.00404f9c
push eax
lea eax, [ebp - 0x10]
call fcn.004051f4
mov edx, eax
mov eax, dword [ebp - 0x1c]
pop ecx
call fcn.0042288c
push 0
push 0
mov eax, dword [ebp - 0x1c]
call fcn.00422610
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x6c4]
call fcn.0048a6e8
mov dl, 1
mov eax, dword [0x41cc3c]
call fcn.00403e20
mov dword [ebp - 0x20], eax
mov dl, 1
mov eax, dword [0x42c610]
call fcn.00435be4
mov dword [ebp - 0x28], eax
jmp 0x5d92b7
lea eax, [ebp - 0x7d8]
mov edx, 0x498
call fcn.0040842c
lea edx, [ebp - 0x7d8]
mov ecx, 0x498
mov eax, dword [ebp - 0x1c]
call fcn.00422844
xor eax, eax
push ebp
push 0x5d9168
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0xc], 0xffffffff
mov eax, dword [ebp - 0x20]
call fcn.00422fac
lea edx, [ebp - 0x740]
mov ecx, 0x400
mov eax, dword [ebp - 0x20]
call fcn.0042288c
push 0
push 0
mov eax, dword [ebp - 0x20]
call fcn.00422610
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x6c4]
mov edx, dword [ebp - 0x28]
call fcn.0048a52c
mov dword [ebp - 0xc], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5d9172
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x464]
mov eax, dword [eax + 0x22c]
call fcn.0045dba4
mov ebx, eax
cmp byte [ebp - 0x7d4], 0
jne 0x5d91a1
mov edx, 0x5da3a8
mov eax, ebx
call fcn.0045d420
jmp 0x5d91d0
lea eax, [ebp - 0x884]
lea edx, [ebp - 0x7d4]
call fcn.00404f24
mov eax, dword [ebp - 0x884]
lea edx, [ebp - 0x880]
call fcn.0040aa54
mov edx, dword [ebp - 0x880]
mov eax, ebx
call fcn.0045d420
mov eax, dword [ebp - 0x7d8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x888]
call fcn.0040a040
mov edx, dword [ebp - 0x888]
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x894], eax
xor eax, eax
mov dword [ebp - 0x890], eax
fild qword [ebp - 0x894]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x88c]
mov eax, 0x5da3bc
call fcn.0040bfe8
mov edx, dword [ebp - 0x88c]
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
fld qword [ebp - 0x748]
fcomp dword [0x5da3c4]
fnstsw ax
sahf
jbe 0x5d926a
push dword [ebp - 0x744]
push dword [ebp - 0x748]
lea eax, [ebp - 0x898]
call fcn.0040d374
mov edx, dword [ebp - 0x898]
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x5d9274
mov eax, dword [ebx + 8]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x38]
cmp byte [ebp - 0x7d4], 0
jne 0x5d928c
mov eax, dword [ebx + 8]
mov edx, 0x5da3a8
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x5d92ab
lea eax, [ebp - 0x89c]
lea edx, [ebp - 0x7d4]
call fcn.00404f24
mov edx, dword [ebp - 0x89c]
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov ecx, dword [ebp - 0xc]
xor edx, edx
mov eax, ebx
call fcn.0045d6b8
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004225e8
cmp edx, dword [esp + 4]
jne 0x5d92d1
cmp eax, dword [esp]
pop edx
pop eax
jne 0x5d90de
mov eax, dword [ebp - 0x1c]
call fcn.00403e50
mov eax, dword [ebp - 0x20]
call fcn.00403e50
mov eax, dword [ebp - 0x28]
call fcn.00403e50
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x464]
mov eax, dword [eax + 0x22c]
call fcn.0045dfd4
push 0
mov ecx, 1
mov edx, 0x5da3d0
mov eax, dword [0x62a6dc]
call fcn.005d4500
mov dl, 1
mov eax, dword [0x62a6dc]
mov ecx, dword [eax]
call dword [ecx + 0x64]
jmp 0x5da04e
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x498]
mov eax, dword [eax + 0x22c]
call fcn.0045dda4
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x498]
mov eax, dword [eax + 0x22c]
call fcn.0045dd7c
mov dl, 1
mov eax, dword [0x41cc3c]
call fcn.00403e20
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
call fcn.00404f9c
push eax
lea eax, [ebp - 0x10]
call fcn.004051f4
mov edx, eax
mov eax, dword [ebp - 0x1c]
pop ecx
call fcn.0042288c
push 0
push 0
mov eax, dword [ebp - 0x1c]
call fcn.00422610
xor eax, eax
push ebp
push 0x5d94c0
push dword fs:[eax]
mov dword fs:[eax], esp
jmp 0x5d9494
lea eax, [ebp - 0x33c]
mov edx, 0x310
call fcn.0040842c
lea edx, [ebp - 0x33c]
mov ecx, 0x310
mov eax, dword [ebp - 0x1c]
call fcn.00422844
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x498]
mov eax, dword [eax + 0x22c]
call fcn.0045dba4
mov ebx, eax
lea eax, [ebp - 0x8a0]
lea edx, [ebp - 0x330]
mov ecx, pe_nt_image_headers32
call fcn.00404f30
mov edx, dword [ebp - 0x8a0]
mov eax, ebx
call fcn.0045d420
mov eax, dword [ebp - 0x338]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x8a4]
call fcn.0040a040
mov edx, dword [ebp - 0x8a4]
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea eax, [ebp - 0x8a8]
lea edx, [ebp - 0x230]
mov ecx, pe_nt_image_headers32
call fcn.00404f30
mov edx, dword [ebp - 0x8a8]
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea eax, [ebp - 0x8ac]
lea edx, [ebp - 0x130]
mov ecx, 0x104
call fcn.00404db0
mov edx, dword [ebp - 0x8ac]
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
cmp dword [ebp - 0x334], 0
je 0x5d9486
mov ecx, 3
xor edx, edx
mov eax, ebx
call fcn.0045d6b8
jmp 0x5d9494
mov ecx, 4
xor edx, edx
mov eax, ebx
call fcn.0045d6b8
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004225e8
cmp edx, dword [esp + 4]
jne 0x5d94ae
cmp eax, dword [esp]
pop edx
pop eax
jne 0x5d93a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5d94ca
mov eax, dword [ebp - 0x1c]
call fcn.00403e50
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x498]
mov eax, dword [eax + 0x22c]
call fcn.0045dfd4
push 0
mov ecx, 1
mov edx, 0x5da3f4
mov eax, dword [0x62a6dc]
call fcn.005d4500
mov dl, 1
mov eax, dword [0x62a6dc]
mov ecx, dword [eax]
call dword [ecx + 0x64]
jmp 0x5da04e
mov dl, 1
mov eax, dword [0x62a6dc]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov dl, 1
mov eax, dword [0x41c94c]
call fcn.00403e20
mov dword [ebp - 0x24], eax
xor eax, eax
push ebp
push 0x5d980e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x3d8]
call fcn.00462198
mov edx, dword [eax + 0x24]
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x358]
call fcn.004a4000
mov eax, dword [0x62a6dc]
mov edx, dword [eax + 0x71c]
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x354]
call fcn.004a4000
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x3d8]
call fcn.00462198
cmp dword [eax + 0x10], 0x2e
jne 0x5d95c8
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x34c]
mov edx, 0x5da418
call fcn.004a4000
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x350]
xor edx, edx
call fcn.004a4000
jmp 0x5d963b
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x3d8]
call fcn.00462198
mov eax, dword [eax + 0x24]
lea edx, [ebp - 0x8b0]
call fcn.005d86d0
mov edx, dword [ebp - 0x8b0]
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x34c]
call fcn.004a4000
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x3d8]
call fcn.00462198
mov eax, dword [eax + 8]
mov edx, dword [eax]
call dword [edx + 0x50]
mov edx, eax
lea eax, [ebp - 0x8b4]
call fcn.00404eb8
mov edx, dword [ebp - 0x8b4]
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x350]
call fcn.004a4000
lea ecx, [ebp - 0x8b8]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8b8]
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x340]
call fcn.004a4000
lea ecx, [ebp - 0x8bc]
mov edx, 1
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8bc]
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x344]
call fcn.004a4000
lea ecx, [ebp - 0x8c0]
mov edx, 2
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8c0]
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x348]
call fcn.004a4000
lea ecx, [ebp - 0x8c4]
mov edx, 3
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8c4]
mov edx, 0x5da428
call fcn.004050e8
jne 0x5d96f4
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x32c]
mov dl, 1
call fcn.00545e9c
jmp 0x5d9708
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x32c]
xor edx, edx
call fcn.00545e9c
lea ecx, [ebp - 0x8c8]
mov edx, 4
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8c8]
mov edx, 0x5da428
call fcn.004050e8
jne 0x5d9743
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x328]
mov dl, 1
call fcn.00545e9c
jmp 0x5d9757
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x328]
xor edx, edx
call fcn.00545e9c
lea ecx, [ebp - 0x8cc]
mov edx, 5
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8cc]
mov edx, 0x5da428
call fcn.004050e8
jne 0x5d9792
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x330]
mov dl, 1
call fcn.00545e9c
jmp 0x5d97a6
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x330]
xor edx, edx
call fcn.00545e9c
lea ecx, [ebp - 0x8d0]
mov edx, 6
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8d0]
mov edx, 0x5da428
call fcn.004050e8
jne 0x5d97e1
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x324]
mov dl, 1
call fcn.00545e9c
jmp 0x5d97f5
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov eax, dword [eax + 0x324]
xor edx, edx
call fcn.00545e9c
mov eax, dword [0x5f6410]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0xec]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5d9818
mov eax, dword [ebp - 0x24]
call fcn.00403e50
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5da0a8
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x4c4]
mov eax, dword [eax + 0x22c]
call fcn.0045dda4
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x4c4]
mov eax, dword [eax + 0x22c]
call fcn.0045dd7c
mov dl, 1
mov eax, dword [0x41c94c]
call fcn.00403e20
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
xor esi, esi
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x5d9a73
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x10]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
inc esi
cmp esi, 1
jne 0x5d98ee
cmp dword [ebp - 0x10], 0
jne 0x5d98b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5da0a8
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x4c4]
mov eax, dword [eax + 0x22c]
call fcn.0045dba4
mov ebx, eax
lea ecx, [ebp - 0x8d4]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x8d4]
mov eax, ebx
call fcn.0045d420
cmp esi, 2
jne 0x5d9912
lea ecx, [ebp - 0x8d8]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x8d8]
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
cmp esi, 3
jne 0x5d9936
lea ecx, [ebp - 0x8dc]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x8dc]
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
cmp esi, 4
jne 0x5d9993
lea ecx, [ebp - 0x8e0]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x8e0]
mov edx, 0x5da434
call fcn.004050e8
jne 0x5d9978
xor ecx, ecx
xor edx, edx
mov eax, ebx
call fcn.0045d6b8
mov eax, dword [ebx + 8]
mov edx, 0x5da440
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x5d9993
mov ecx, 1
xor edx, edx
mov eax, ebx
call fcn.0045d6b8
mov eax, dword [ebx + 8]
mov edx, 0x5da450
mov ecx, dword [eax]
call dword [ecx + 0x38]
cmp esi, 5
jne 0x5d9a41
lea ecx, [ebp - 0x10]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x10]
mov edx, 0x5da434
call fcn.004050e8
jne 0x5d99c6
lea eax, [ebp - 0x10]
mov edx, 0x5da460
call fcn.00404d58
mov eax, dword [ebp - 0x10]
mov edx, 0x5da428
call fcn.004050e8
jne 0x5d99e2
lea eax, [ebp - 0x10]
mov edx, 0x5da470
call fcn.00404d58
mov eax, dword [ebp - 0x10]
mov edx, 0x5da480
call fcn.004050e8
jne 0x5d99fe
lea eax, [ebp - 0x10]
mov edx, 0x5da48c
call fcn.00404d58
mov eax, dword [ebp - 0x10]
mov edx, 0x5da49c
call fcn.004050e8
jne 0x5d9a1a
lea eax, [ebp - 0x10]
mov edx, 0x5da4a8
call fcn.00404d58
mov eax, dword [ebp - 0x10]
mov edx, 0x5da4b8
call fcn.004050e8
jne 0x5d9a36
lea eax, [ebp - 0x10]
mov edx, 0x5da470
call fcn.00404d58
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x38]
cmp esi, 6
jne 0x5d9a67
xor esi, esi
lea ecx, [ebp - 0x8e4]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x8e4]
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xc]
dec dword [ebp - 0x2c]
jne 0x5d9891
mov eax, dword [ebp - 0x24]
call fcn.00403e50
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x4c4]
mov eax, dword [eax + 0x22c]
call fcn.0045dfd4
push 0
mov ecx, 1
mov edx, 0x5da4c4
mov eax, dword [0x62a6dc]
call fcn.005d4500
mov dl, 1
mov eax, dword [0x62a6dc]
mov ecx, dword [eax]
call dword [ecx + 0x64]
jmp 0x5da04e
xor eax, eax
push ebp
push 0x5d9cd8
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x41c94c]
call fcn.00403e20
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x40c]
mov eax, dword [eax + 0x26c]
call fcn.00455a80
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x714]
call fcn.00454fe8
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x5d9c2c
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x8e8]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8e8]
mov edx, 0x5da4ec
call fcn.004050e8
je 0x5d9c2c
push 0x5da4fc
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x14]
push eax
mov eax, dword [ebp - 0xc]
inc eax
imul eax, eax, 0x64
pop edx
mov ecx, edx
cdq
idiv ecx
lea edx, [ebp - 0x8f0]
call fcn.00409f54
push dword [ebp - 0x8f0]
push 0x5da510
lea eax, [ebp - 0x8ec]
mov edx, 3
call fcn.0040505c
mov edx, dword [ebp - 0x8ec]
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x52c]
call fcn.004794f0
lea ecx, [ebp - 0x8f4]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x8f4]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x714]
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x40c]
mov eax, dword [eax + 0x26c]
call fcn.00455500
mov ebx, eax
mov edx, 8
mov eax, ebx
call fcn.00453dc8
mov edx, 9
mov eax, ebx
call fcn.00453e3c
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x40c]
mov eax, dword [eax + 0x26c]
mov ecx, 0x5da51c
mov edx, ebx
call fcn.00455500
mov ebx, eax
or edx, 0xffffffff
mov eax, ebx
call fcn.00453dc8
xor edx, edx
mov eax, ebx
call fcn.00453e3c
inc dword [ebp - 0xc]
dec dword [ebp - 0x2c]
jne 0x5d9b20
xor eax, eax
push ebp
push 0x5d9c62
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x40c]
mov eax, dword [eax + 0x26c]
call fcn.00455ae0
mov eax, dword [ebp - 0x24]
call fcn.00403e50
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5d9c6c
push 0
mov ecx, 1
mov edx, 0x5da528
mov eax, dword [0x62a6dc]
call fcn.005d4500
push 0xe
mov eax, dword [0x62a6dc]
mov edx, dword [eax + 0x70c]
lea eax, [ebp - 0x8f8]
mov ecx, 0x5da544
call fcn.00404fe8
mov ecx, dword [ebp - 0x8f8]
mov edx, 0x5da550
mov eax, dword [0x62a6dc]
call fcn.005d4194
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x40c]
call fcn.00457068
xor edx, edx
call fcn.004541a0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5da04e
mov dl, 1
mov eax, dword [0x41c94c]
call fcn.00403e20
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x414]
mov eax, dword [eax + 0x22c]
call fcn.0045dda4
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x414]
mov eax, dword [eax + 0x22c]
call fcn.0045dd7c
xor eax, eax
push ebp
push 0x5d9ffb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x5d9fd7
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xc], 0
test byte [ebp - 0xc], 1
jne 0x5d9fcb
lea ecx, [ebp - 0x10]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.004051fc
lea eax, [ebp - 0x10]
mov ecx, 1
mov edx, 1
call fcn.0040523c
xor eax, eax
push ebp
push 0x5d9e5b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x14]
call fcn.0040a0c0
cmp eax, 9
ja case.0x5d9db6.0
jmp dword [eax*4 + 0x5d9dbd]
lea eax, [ebp - 0x18]
mov edx, 0x5da55c
call fcn.00404d58
mov dword [ebp - 8], 0xa
jmp case.0x5d9db6.0
lea eax, [ebp - 0x18]
mov edx, 0x5da56c
call fcn.00404d58
mov dword [ebp - 8], 0xa
jmp case.0x5d9db6.0
lea eax, [ebp - 0x18]
mov edx, 0x5da57c
call fcn.00404d58
mov dword [ebp - 8], 0xc
jmp case.0x5d9db6.0
lea eax, [ebp - 0x18]
mov edx, 0x5da590
call fcn.00404d58
mov dword [ebp - 8], 0xb
jmp case.0x5d9db6.0
lea eax, [ebp - 0x18]
mov edx, 0x5da5a4
call fcn.00404d58
mov dword [ebp - 8], 0xd
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5d9e79
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x414]
mov eax, dword [eax + 0x22c]
call fcn.0045dba4
mov ebx, eax
mov ecx, dword [ebp - 8]
mov edx, 2
mov eax, ebx
call fcn.0045d6b8
mov eax, dword [ebp - 0x10]
mov edx, 0x5da5b8
call fcn.004050e8
jne 0x5d9ebd
mov edx, 0x5da5cc
mov eax, ebx
call fcn.0045d420
jmp 0x5d9ec7
mov edx, dword [ebp - 0x10]
mov eax, ebx
call fcn.0045d420
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x38]
cmp dword [ebp - 8], 0xd
jne 0x5d9f13
lea ecx, [ebp - 0x900]
mov edx, dword [ebp - 0xc]
inc edx
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x900]
lea ecx, [ebp - 0x8fc]
mov eax, dword [0x62a6dc]
call fcn.005d24c8
mov edx, dword [ebp - 0x8fc]
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x5d9fcb
lea ecx, [ebp - 0x904]
mov esi, dword [ebp - 0xc]
inc esi
mov edx, esi
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x904]
mov edx, 0x5da5dc
call fcn.004050e8
jne 0x5d9f4b
mov eax, dword [ebx + 8]
mov edx, 0x5da608
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x5d9fcb
lea ecx, [ebp - 0x908]
mov edx, esi
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x908]
mov edx, 0x5da628
call fcn.004050e8
jne 0x5d9f7c
mov eax, dword [ebx + 8]
mov edx, 0x5da650
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x5d9fcb
lea ecx, [ebp - 0x90c]
mov edx, esi
mov eax, dword [ebp - 0x24]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x90c]
mov edx, 0x5da670
call fcn.004050e8
jne 0x5d9fad
mov eax, dword [ebx + 8]
mov edx, 0x5da694
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x5d9fcb
lea ecx, [ebp - 0x910]
mov edx, esi
mov eax, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x910]
mov eax, dword [ebx + 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xc]
dec dword [ebp - 0x2c]
jne 0x5d9d57
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5da002
mov eax, dword [0x62a6dc]
mov eax, dword [eax + 0x414]
mov eax, dword [eax + 0x22c]
call fcn.0045dfd4
ret
push 0
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, dword [0x62a6dc]
call fcn.005d4500
mov dl, 1
mov eax, dword [0x62a6dc]
mov ecx, dword [eax]
call dword [ecx + 0x64]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5da0a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5da0ea
lea eax, [ebp - 0x910]
mov edx, 0x1f
call fcn.00404ce4
lea eax, [ebp - 0x88c]
mov edx, 0x2d
call fcn.00404ce4
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00404ce4
ret