Function at 0x5a2160
Capabilities:
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
push 0xffffffffffffffff
push 0x657097
mov eax, dword fs:[0]
push eax
sub esp, 0xf0
mov eax, dword [0x7496c8]
xor eax, esp
mov dword [esp + 0xec], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x7496c8]
xor eax, esp
push eax
lea eax, [esp + 0x104]
mov dword fs:[0], eax
mov eax, dword [esp + 0x114]
xor ebx, ebx
mov esi, ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x28], ebx
cmp byte [esi + 0x3201], bl
je 0x5a22a4
fldz
fcomp qword [esi + 0x31f0]
fnstsw ax
test ah, 0x44
jp 0x5a22a4
lea edx, [esp + 0x28]
push edx
lea edi, [ebx + 0xd]
push edi
lea eax, [esp + 0x68]
lea ecx, [esi + 0x10]
push eax
mov byte [esp + 0x6c], 0x46
mov byte [esp + 0x6d], 0x4c
mov byte [esp + 0x6e], 0x56
mov byte [esp + 0x6f], 1
mov byte [esp + 0x70], 5
mov byte [esp + 0x71], bl
mov byte [esp + 0x72], bl
mov byte [esp + 0x73], bl
mov byte [esp + 0x74], 9
mov byte [esp + 0x75], bl
mov byte [esp + 0x76], bl
mov byte [esp + 0x77], bl
mov byte [esp + 0x78], bl
mov dword [esp + 0x2c], ecx
call fcn.00560f90
mov ecx, edi
mov ebp, eax
cmp dword [esp + 0x28], ecx
jne 0x5a2cdf
mov eax, dword [esi + 0xc0]
mov edx, dword [eax + 0x3d8]
or edx, dword [eax + 0x3dc]
jne 0x5a226e
fldz
fcomp qword [eax + 0x3a8]
fnstsw ax
test ah, 5
jnp 0x5a226e
mov ecx, dword [esi + 0x31ec]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push 2
call edx
mov ecx, dword [esi + 0x31ec]
call fcn.005a7e80
mov ecx, edi
add dword [esi + 0x78], ecx
mov eax, dword [esi + 0xa4]
mov byte [esi + 0x3201], bl
adc dword [esi + 0x7c], ebx
add dword [esi + 0x80], ecx
adc dword [esi + 0x84], ebx
add dword [eax], ecx
adc dword [eax + 4], ebx
mov eax, dword [esi + 0xa8]
add dword [eax], ecx
adc dword [eax + 4], ebx
cmp ebp, ebx
je 0x5a2cdf
mov edi, dword [esp + 0x118]
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x28]
push eax
push edi
lea ecx, [esi + 0x10]
push edx
mov dword [esp + 0x2c], ecx
call fcn.00560f90
cmp eax, ebx
je 0x5a2cdf
cmp edi, dword [esp + 0x28]
jne 0x5a2cdf
mov eax, dword [esi + 0x49bc]
add eax, 0x96000
cmp dword [esi + 0x49b8], eax
jle 0x5a22ee
mov ecx, esi
call fcn.005a1830
mov ecx, dword [esi + 0xa4]
xor eax, eax
add dword [esi + 0x78], edi
adc dword [esi + 0x7c], eax
add dword [esi + 0x80], edi
adc dword [esi + 0x84], eax
add dword [ecx], edi
adc dword [ecx + 4], eax
mov ecx, dword [esi + 0xa8]
add dword [ecx], edi
lea edi, [esi + 0x434]
push edi
adc dword [ecx + 4], eax
call fcn.00616d61
mov eax, dword [edi]
sub eax, dword [esi + 0x428]
mov ecx, dword [esi + 0xc0]
add esp, 4
push eax
mov dword [esi + 0x440], eax
call fcn.005580f0
mov ecx, esi
call fcn.00557bf0
fld qword [0x6796f0]
mov dword [esi + 0xb4], ebx
cmp byte [esi + 0x31fc], bl
jne 0x5a2386
mov ecx, dword [esi + 0xe4]
sub ecx, dword [esi + 0x49f0]
mov eax, dword [esi + 0x31f8]
mov dword [esp + 0x24], ecx
fild dword [esp + 0x24]
test ecx, ecx
jge 0x5a2380
fadd qword [0x673118]
fdiv st(1)
fadd qword [eax]
fstp qword [eax]
mov eax, dword [esi + 0xe4]
mov edi, dword [esi + 0x49f0]
mov dword [esi + 0x49f0], eax
cmp byte [esi + 0x31fc], bl
jne 0x5a2475
mov ecx, dword [esi + 0xa0]
mov edx, dword [ecx + 0x58]
cmp edx, ebx
je 0x5a241a
mov edx, dword [edx + 0x1c]
cmp eax, edx
jb 0x5a2475
cmp edi, edx
jae 0x5a23e2
mov ecx, dword [esi + 0x31f8]
sub eax, edx
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
test eax, eax
jge 0x5a23da
fadd qword [0x673118]
fdivrp st(1)
fsubr qword [ecx]
fstp qword [ecx]
jmp 0x5a23e4
fstp st(0)
mov edx, dword [esi + 0xa0]
mov eax, dword [edx + 0x58]
mov ecx, dword [eax + 0x1c]
mov dword [esi + 0x3238], ecx
mov byte [esi + 0x31fc], 1
mov edx, dword [0x750318]
push 1
push edx
mov ecx, esi
call fcn.005581e0
mov ecx, dword [esi + 0x31ec]
call fcn.005a7080
jmp 0x5a2477
mov ecx, dword [ecx + 0x20]
cmp ecx, ebx
je 0x5a2475
cmp eax, ecx
jb 0x5a2475
cmp edi, ecx
jae 0x5a244b
mov edx, dword [esi + 0x31f8]
sub eax, ecx
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
test eax, eax
jge 0x5a2443
fadd qword [0x673118]
fdivrp st(1)
fsubr qword [edx]
fstp qword [edx]
jmp 0x5a244d
fstp st(0)
mov eax, dword [esi + 0xa0]
mov byte [esi + 0x31fc], 1
mov ecx, dword [eax + 0x20]
mov dword [esi + 0x3238], ecx
mov edx, dword [0x750318]
push 1
push edx
mov ecx, esi
call fcn.005581e0
jmp 0x5a2477
fstp st(0)
mov edx, dword [esi + 0x4a10]
mov ebp, dword [esi + 0x4a14]
lea edi, [esi + 0x4a10]
cmp edx, dword [esi + 0x4a08]
jne 0x5a249d
cmp ebp, dword [esi + 0x4a0c]
je 0x5a2cdb
mov ecx, dword [esi + 0x4a1c]
xor eax, eax
add ecx, edx
mov edx, dword [esi + 0x7c]
adc eax, ebp
add ecx, 0xf
adc eax, ebx
cmp edx, eax
jl 0x5a2cdb
jg 0x5a24c6
mov eax, dword [esi + 0x78]
cmp eax, ecx
jb 0x5a2cdb
mov ecx, dword [esi + 0xa0]
mov edx, dword [ecx + 0x60]
mov ecx, dword [esi + 0x31ec]
push edi
push edx
call fcn.005a6f10
mov edx, dword [edi]
mov ebp, dword [edi + 4]
mov eax, dword [esi + 0xa0]
mov dword [esi + 0x4a08], edx
mov dword [esi + 0x4a0c], ebp
mov ecx, dword [eax + 0x58]
cmp ecx, ebx
je 0x5a26a9
mov eax, dword [esi + 0xe4]
cmp eax, dword [ecx + 0x1c]
jb 0x5a2cdb
mov ecx, dword [ecx + 0x10]
lea eax, [esp + 0x18]
push eax
mov eax, dword [esi + 0x4a1c]
push ecx
mov ecx, dword [esi + 0x4a18]
add eax, 0xf
push eax
push ebp
push edx
push ecx
mov ecx, esi
call fcn.0059fda0
test eax, eax
je 0x5a25c4
mov edx, dword [esi + 0x3234]
mov eax, dword [esi + 0x4a1c]
lea ecx, [edx + eax + 0xf]
mov edx, dword [esi + 0xa0]
mov eax, dword [edx + 0x58]
mov dword [eax + 0x24], ecx
mov ecx, dword [esi + 0xa0]
mov ecx, dword [ecx + 0x58]
call fcn.00556ec0
mov edx, dword [esi + 0x4a1c]
xor eax, eax
mov ecx, edx
add ecx, dword [edi]
adc eax, dword [edi + 4]
add ecx, 0xf
adc eax, ebx
mov ebx, dword [esi + 0x7c]
cmp ebx, eax
jl 0x5a259a
jg 0x5a2586
mov eax, dword [esi + 0x78]
cmp eax, ecx
jbe 0x5a259a
mov ecx, dword [esi + 0x78]
sub ecx, dword [edi]
sub ecx, edx
sub ecx, 0xf
push ecx
mov ecx, dword [esp + 0x24]
call fcn.00560c10
mov edx, dword [esi + 0xc0]
mov byte [edx + 0x335], 1
mov ecx, dword [esi + 0x31ec]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push 1
call edx
mov ecx, esi
call fcn.0059ef20
xor eax, eax
jmp 0x5a2d53
cmp dword [esp + 0x18], ebx
je 0x5a25d8
mov ecx, esi
call fcn.0059fa50
xor eax, eax
jmp 0x5a2d53
inc dword [esi + 0x4a30]
cmp dword [esi + 0x4a30], 0xa
jle 0x5a2cdb
mov eax, dword [esi + 0xc0]
cmp byte [eax + 0x335], bl
jne 0x5a2cdb
mov ecx, dword [esi + 0x31ec]
cmp dword [ecx + 0x134], ebx
jne 0x5a2cdb
push str.cmpkfcount___MAX_CMP_KEYFRAMES__set_NO_REST_n
mov ecx, esi
call fcn.005579a0
mov ecx, dword [esi + 0x31ec]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
push 2
call eax
mov ecx, dword [esi + 0xa0]
mov edx, dword [ecx + 0x58]
mov edi, dword [edx]
xor ebp, ebp
cmp edi, ebx
je 0x5a2651
mov ebp, dword [edi + 0xe4]
cmp ebp, ebx
jne 0x5a2651
mov ebp, dword [edi + 0xe8]
add ebp, dword [edi + 0xe0]
mov ecx, esi
call fcn.0059fa50
cmp edi, ebx
je 0x5a2cdb
mov dword [edi + 0x9c], 0xe
mov dword [edi + 0x94], ebx
mov eax, dword [esi + 0xe4]
cmp eax, ebp
jae 0x5a2cdb
mov esi, dword [esi + 0x31f8]
sub ebp, eax
mov dword [esp + 0x24], ebp
fild dword [esp + 0x24]
test ebp, ebp
jge 0x5a2698
fadd qword [0x673118]
fdiv qword [0x6796f0]
xor eax, eax
fsubr qword [esi]
fstp qword [esi]
jmp 0x5a2d53
mov ecx, dword [eax + 0x20]
cmp ecx, ebx
je 0x5a2cdb
cmp dword [esi + 0xe4], ecx
jb 0x5a2cdb
mov ecx, dword [eax + 0x2c]
cmp ecx, ebx
je 0x5a26cb
mov eax, ecx
jmp 0x5a26ce
add eax, 0x30
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 0x4a18]
push eax
mov eax, dword [esi + 0x4a1c]
add eax, 0xf
push eax
push ebp
push edx
push ecx
mov ecx, esi
call fcn.0059fda0
test eax, eax
je 0x5a2822
mov edx, dword [esi + 0x3234]
mov eax, dword [esi + 0x4a1c]
lea ecx, [esp + 0x14]
lea ebp, [edx + eax + 0xf]
call fcn.00402500
mov dword [esp + 0x10c], ebx
mov ecx, dword [esi + 0xa0]
mov edx, dword [ecx + 0x28]
push edx
lea eax, [esp + 0x18]
push 0x66b41c
push eax
call fcn.00402f80
mov eax, dword [esp + 0x20]
add esp, 0xc
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 0x31ec]
lea edx, [esp + 0x40]
push edx
push ebx
push ebx
mov dword [esp + 0x30], 0x10
mov edx, dword [ecx + 0x104]
push eax
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
jne 0x5a27a1
push 1
push ebx
push ebx
push ebp
call fcn.00617ef0
mov ecx, dword [esp + 0x44]
xor ebp, ebp
add eax, ecx
mov ecx, dword [esi + 0x31ec]
adc edx, ebp
push 0x10
mov dword [esp + 0x4c], edx
lea edx, [esp + 0x40]
push edx
push ebx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x20]
mov edx, dword [ecx + 0x104]
push ebx
push eax
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
jmp 0x5a27ad
push str.Error____rtmpcn_l1983_n
mov ecx, esi
call fcn.005579a0
mov edx, dword [esi + 0x4a1c]
xor eax, eax
mov ecx, edx
add ecx, dword [edi]
adc eax, dword [edi + 4]
add ecx, 0xf
adc eax, ebx
mov ebx, dword [esi + 0x7c]
cmp ebx, eax
jl 0x5a27e4
jg 0x5a27d1
mov eax, dword [esi + 0x78]
cmp eax, ecx
jbe 0x5a27e4
mov ecx, dword [esi + 0x78]
sub ecx, dword [edi]
sub ecx, edx
sub ecx, 0xf
push ecx
lea ecx, [esi + 0x10]
call fcn.00560c10
mov edx, dword [esi + 0xc0]
mov byte [edx + 0x335], 1
mov ecx, dword [esi + 0x31ec]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push 1
call edx
mov ecx, esi
call fcn.0059ef20
mov dword [esp + 0x10c], 0xffffffff
lea ecx, [esp + 0x14]
call fcn.00402570
xor eax, eax
jmp 0x5a2d53
cmp dword [esp + 0x20], ebx
je 0x5a2cdb
lea ecx, [esp + 0x1c]
call fcn.00402500
mov dword [esp + 0x10c], 1
mov eax, dword [esi + 0xa0]
mov ecx, dword [eax + 0x2c]
add eax, 0x2c
cmp ecx, ebx
jne 0x5a2853
lea ecx, [eax + 4]
push ecx
call fcn.00616da3
add esp, 4
sub esp, 0xc
cmp eax, 0xffffffff
mov eax, dword [esi + 0xa0]
mov ecx, esp
jne 0x5a2873
push str.Could_not_delete_temp_file__s_n
jmp 0x5a2878
push str.Delete_temp_file__s_n
mov edx, dword [eax + 0x2c]
add eax, 0x2c
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
lea ecx, [esp + 0x2c]
push ecx
call fcn.00402f80
mov edx, dword [esp + 0x30]
add esp, 0x14
push edx
mov ecx, esi
call fcn.005579a0
mov ebp, 0x10
lea ecx, [esp + 0x14]
mov dword [esi + 0x3234], ebx
mov byte [esi + 0x31fc], bl
mov dword [esi + 0x3238], ebx
mov dword [esp + 0x4c], ebp
call fcn.00402500
mov byte [esp + 0x10c], 2
mov eax, dword [esi + 0xa0]
mov ecx, dword [eax + 0x28]
push ecx
lea edx, [esp + 0x18]
push 0x66b41c
push edx
call fcn.00402f80
mov edx, dword [esp + 0x20]
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
add esp, 0xc
lea eax, [esp + 0x4c]
push eax
mov eax, dword [esi + 0x31ec]
lea ecx, [esp + 0x30]
push ecx
mov ecx, dword [eax + 0x104]
push ebx
push ebx
push edx
push ecx
call edi
cmp eax, ebx
je 0x5a293b
push eax
lea edx, [esp + 0x20]
push str.Error_reading_registry__errCode___d._n
push edx
call fcn.00402f80
mov eax, dword [esp + 0x28]
add esp, 0xc
push eax
mov ecx, esi
call fcn.005579a0
jmp 0x5a2cb6
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x74]
push str._skf
push edx
call fcn.0061611b
fldz
add esp, 0xc
fstp qword [esp + 0x60]
lea eax, [esp + 0x20]
push eax
mov eax, dword [esi + 0x31ec]
lea ecx, [esp + 0x54]
push ecx
push ebx
push ebx
lea edx, [esp + 0x80]
mov dword [esp + 0x30], ebp
mov ecx, dword [eax + 0x104]
push edx
push ecx
call edi
cmp eax, ebx
jne 0x5a2a1c
mov ecx, dword [esp + 0x58]
cmp ecx, 0xffffffff
je 0x5a2a1c
mov eax, dword [esi + 0xe4]
cmp eax, ecx
jbe 0x5a29c8
sub eax, ecx
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
test eax, eax
jge 0x5a29b2
fadd qword [0x673118]
fdiv qword [0x6796f0]
mov eax, dword [esi + 0x31f8]
fst qword [esp + 0x60]
fadd qword [eax]
fstp qword [eax]
jmp 0x5a2a1c
lea ecx, [esp + 0x18]
call fcn.00402500
mov byte [esp + 0x10c], 3
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x30]
push eax
push ecx
push edx
lea eax, [esp + 0x28]
push str.error_2099__id_d__next_d__starttime_ld__ts_ld_n
push eax
call fcn.00402f80
mov ecx, dword [esp + 0x30]
add esp, 0x18
push ecx
mov ecx, esi
call fcn.005579a0
mov byte [esp + 0x10c], 2
lea ecx, [esp + 0x18]
call fcn.00402570
cmp dword [esp + 0x30], 0xffffffff
je 0x5a2b44
lea ecx, [esp + 0x18]
mov dword [esp + 0x24], ebp
call fcn.00402500
mov byte [esp + 0x10c], 4
mov edx, dword [esp + 0x30]
push edx
lea eax, [esp + 0x1c]
push 0x66b41c
push eax
call fcn.00402f80
mov eax, dword [esp + 0x24]
add esp, 0xc
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esi + 0x31ec]
lea edx, [esp + 0x40]
push edx
mov edx, dword [ecx + 0x104]
push ebx
push ebx
push eax
push edx
call edi
cmp eax, ebx
jne 0x5a2b31
mov eax, dword [esi + 0xa0]
mov ecx, dword [esp + 0x44]
mov dword [eax + 0x20], ecx
mov edx, dword [esi + 0xa0]
mov eax, dword [esp + 0x3c]
push ebx
push 0xa
lea ecx, [esp + 0x88]
mov dword [edx + 0x28], eax
mov edx, dword [esp + 0x44]
push ecx
push edx
call fcn.00615fa2
add esp, 0xc
push eax
mov eax, dword [esi + 0x31ec]
mov ecx, dword [eax + 0xb0]
mov edx, dword [ecx + 0x10]
mov ecx, dword [esi + 0xa0]
push edx
push 0x66add0
add ecx, 0x2c
call fcn.00402320
mov eax, dword [esi + 0xa0]
mov ecx, dword [eax + 0x20]
mov eax, dword [esp + 0x18]
push ebp
lea edx, [esp + 0x40]
push edx
push ebx
mov dword [esp + 0x50], ecx
mov ecx, dword [esi + 0x31ec]
push ebx
mov dword [esp + 0x58], ebx
mov edx, dword [ecx + 0x104]
push eax
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [esi + 0xa0]
mov ecx, dword [esi + 0xe4]
cmp ecx, dword [eax + 0x20]
jb 0x5a2b31
mov byte [esi + 0x31fc], 1
mov edx, dword [eax + 0x20]
mov eax, dword [esi + 0x31f8]
mov dword [esi + 0x3238], edx
fld qword [eax]
fsub qword [esp + 0x60]
fstp qword [eax]
mov byte [esp + 0x10c], 2
lea ecx, [esp + 0x18]
call fcn.00402570
jmp 0x5a2b61
mov eax, dword [esi + 0xa0]
mov dword [eax + 0x20], ebx
mov ecx, dword [esi + 0xa0]
push ebx
add ecx, 0x2c
push 0x66b96c
call fcn.00401980
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0x31ec]
mov eax, dword [edx + 0x104]
mov edi, dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov ebp, dword [esp + 0x30]
push ecx
push eax
call edi
mov edx, dword [esi + 0x31ec]
mov eax, dword [edx + 0x104]
lea ecx, [esp + 0x70]
push ecx
push eax
call edi
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push str.Join_with_next__deleting_record_with_num__s_n
push edx
call fcn.00402f80
mov eax, dword [esp + 0x28]
add esp, 0xc
push eax
mov ecx, esi
call fcn.005579a0
mov ecx, dword [esi + 0xa0]
mov edx, dword [ecx + 0x60]
push edx
lea eax, [esp + 0x18]
push 0x66b41c
push eax
call fcn.00402f80
mov eax, dword [esp + 0x20]
add esp, 0xc
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 0x31ec]
lea edx, [esp + 0x30]
push edx
push ebx
push ebx
mov dword [esp + 0x30], 0x10
mov edx, dword [ecx + 0x104]
push eax
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
je 0x5a2c21
push eax
lea eax, [esp + 0x20]
push str.Error_reading_registry__errCode___d._n
push eax
call fcn.00402f80
mov ecx, dword [esp + 0x28]
add esp, 0xc
push ecx
mov ecx, esi
call fcn.005579a0
mov dword [esp + 0x30], ebp
cmp ebp, 0xffffffff
je 0x5a2c39
mov edx, dword [esi + 0x31ec]
dec ebp
mov dword [edx + 0xbc], ebp
jmp 0x5a2c57
mov eax, dword [esi + 0x31ec]
mov ecx, dword [eax + 0xc0]
mov dword [eax + 0xbc], ecx
mov edx, dword [esi + 0x31ec]
mov dword [edx + 0xf4], ebx
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0x31ec]
push 0x10
lea eax, [esp + 0x30]
push eax
mov eax, dword [edx + 0x104]
push ebx
push ebx
push ecx
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x1c]
push eax
push ecx
push edx
lea eax, [esp + 0x30]
push str.Updating_record_with_num__s:_set_ID__d__startPos__I64d__nextID__d_n
push eax
call fcn.00402f80
mov ecx, dword [esp + 0x38]
add esp, 0x1c
push ecx
mov ecx, esi
call fcn.005579a0
mov ecx, esi
call fcn.00557cd0
mov byte [esp + 0x10c], 1
lea ecx, [esp + 0x14]
call fcn.00402570
mov dword [esp + 0x10c], 0xffffffff
lea ecx, [esp + 0x1c]
call fcn.00402570
xor eax, eax
jmp 0x5a2d53
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esp + 0x28]
mov ebx, eax
push ebx
push edx
push edi
lea eax, [esp + 0x8c]
push str.File_write_error__Received__d_bytes__wrote__d_bytes__errCode___ld_n
push eax
call fcn.0061611b
add esp, 0x14
lea ecx, [esp + 0x80]
push ecx
mov ecx, esi
call fcn.005579a0
cmp ebx, 5
jne 0x5a2d29
mov edx, dword [0x74fb44]
mov ecx, dword [esi + 0xac]
push edx
call fcn.00560a60
mov ecx, esi
call fcn.0055a010
test eax, eax
je 0x5a2d3b
mov eax, 0xfffffffb
jmp 0x5a2d53
mov eax, dword [esi + 0xa0]
mov ecx, dword [eax + 0x10]
push ecx
mov ecx, dword [esp + 0x24]
call fcn.005613c0
mov eax, 0xfffffffe
mov ecx, dword [esp + 0x104]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xec]
xor ecx, esp
call fcn.00613241
add esp, 0xfc
ret 8