Function at 0x4acdf0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x59206d
mov eax, dword fs:[0]
push eax
sub esp, 0x154
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6a3b20]
xor eax, esp
push eax
lea eax, [esp + 0x168]
mov dword fs:[0], eax
mov dword [esp + 0xa0], ecx
lea ecx, [esp + 0x20]
call dword [0x5a7d38]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x170], 0
call dword [0x5a7d38]
mov esi, dword [0x5a7d34]
push 0
push 0x5a9974
mov byte [esp + 0x178], 1
call esi
mov dword [esp + 0x44], eax
lea eax, [esp + 0x38]
push 1
push eax
mov byte [esp + 0x180], 2
call dword [0x5a7be0]
add esp, 0x10
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
mov byte [esp + 0x170], 3
test ecx, ecx
jle 0x4aceba
mov ecx, dword [eax]
cmp ecx, 1
je 0x4acea8
test ecx, ecx
je 0x4acea8
mov edx, dword [eax + 4]
push edx
lea ecx, [esp + 0x34]
call fcn.004070f0
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 8]
lea edx, [eax + ecx*4 + 0x10]
push edx
lea ecx, [esp + 0x40]
call dword [0x5a7cc4]
mov edi, dword [0x5a7c50]
mov ebp, dword [0x5a7bcc]
mov ebx, dword [0x5a7bd0]
lea esp, [esp]
push 0
push 0x5a9974
call esi
mov dword [esp + 0x34], eax
push 0
push 0x5a9974
mov byte [esp + 0x180], 4
call esi
add esp, 0x10
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x178]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
mov byte [esp + 0x170], 5
cmp edx, dword [eax + 8]
je 0x4ad3d1
mov edx, dword [eax]
cmp edx, 1
je 0x4acf2d
test edx, edx
je 0x4acf2d
mov eax, dword [eax + 4]
push eax
call fcn.004070f0
mov ecx, dword [esp + 0x178]
mov eax, dword [ecx]
mov ecx, dword [eax + 8]
lea edx, [eax + ecx*4 + 0x10]
push edx
lea ecx, [esp + 0x130]
call dword [0x5a7cd0]
lea ecx, [esp + 0x18]
push ecx
mov ecx, eax
mov byte [esp + 0x174], 6
call dword [0x5a7cd4]
lea ecx, [esp + 0x12c]
mov byte [esp + 0x170], 8
call dword [0x5a7cd8]
push 3
push 0x5b49ec
call esi
add esp, 8
mov dword [esp + 0x58], eax
push 1
push 0
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x180], 9
call dword [0x5a7ae8]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
lea edx, [eax + ecx*4 + 0x10]
push edx
lea ecx, [esp + 0x1c]
call dword [0x5a7cc4]
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
test ecx, ecx
je 0x4acfd3
cmp ecx, 0xffffffff
je 0x4ad022
or ecx, 0xffffffff
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x4ad022
mov eax, dword [esp + 0x50]
mov edx, dword [eax + 0xc]
lea ecx, [eax + edx*4 + 0x10]
mov edx, dword [eax + 8]
mov dword [esp + 0x14], eax
lea eax, [eax + edx*4 + 0x10]
mov dword [esp + 0x34], eax
cmp eax, ecx
je 0x4ad014
jmp 0x4acff7
mov ecx, dword [esp + 0x80]
sub ecx, 4
mov dword [esp + 0x80], ecx
call dword [0x5a7d90]
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x80], eax
jne 0x4acff0
mov ecx, dword [esp + 0x14]
push ecx
call dword [0x5a7d8c]
add esp, 4
lea ecx, [esp + 0x58]
mov byte [esp + 0x170], 8
call dword [0x5a7d90]
push 0
push 0x5a9974
call esi
mov dword [esp + 0x68], eax
push 4
push str._res
mov byte [esp + 0x180], 0xa
call esi
add esp, 0x10
mov dword [esp + 0x98], eax
push 0
lea edx, [esp + 0x64]
push edx
lea eax, [esp + 0xa0]
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x17c], 0xb
call edi
push eax
lea ecx, [esp + 0x1c]
call dword [0x5a7cc4]
lea ecx, [esp + 0x98]
mov byte [esp + 0x170], 0xa
call dword [0x5a7d90]
lea ecx, [esp + 0x60]
mov byte [esp + 0x170], 8
call dword [0x5a7d90]
push 0
push 0x5a9974
call esi
mov dword [esp + 0x70], eax
push 4
push str._sde
mov byte [esp + 0x180], 0xc
call esi
add esp, 0x10
mov dword [esp + 0x88], eax
push 0
lea ecx, [esp + 0x6c]
push ecx
lea edx, [esp + 0x90]
push edx
lea ecx, [esp + 0x24]
mov byte [esp + 0x17c], 0xd
call edi
push eax
lea ecx, [esp + 0x1c]
call dword [0x5a7cc4]
lea ecx, [esp + 0x88]
mov byte [esp + 0x170], 0xc
call dword [0x5a7d90]
lea ecx, [esp + 0x68]
mov byte [esp + 0x170], 8
call dword [0x5a7d90]
push 0
push 0x5a9974
call esi
mov dword [esp + 0x78], eax
push 7
push str._sdexit
mov byte [esp + 0x180], 0xe
call esi
add esp, 0x10
mov dword [esp + 0xa8], eax
push 0
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0xb0]
push ecx
lea ecx, [esp + 0x24]
mov byte [esp + 0x17c], 0xf
call edi
push eax
lea ecx, [esp + 0x1c]
call dword [0x5a7cc4]
lea ecx, [esp + 0xa8]
mov byte [esp + 0x170], 0xe
call dword [0x5a7d90]
lea ecx, [esp + 0x70]
mov byte [esp + 0x170], 8
call dword [0x5a7d90]
push 0
push 0x5a9974
call esi
mov dword [esp + 0x80], eax
push 8
push str._restore
mov byte [esp + 0x180], 0x10
call esi
add esp, 0x10
mov dword [esp + 0x90], eax
push 0
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x17c], 0x11
call edi
push eax
lea ecx, [esp + 0x1c]
call dword [0x5a7cc4]
lea ecx, [esp + 0x90]
mov byte [esp + 0x170], 0x10
call dword [0x5a7d90]
lea ecx, [esp + 0x78]
mov byte [esp + 0x170], 8
call dword [0x5a7d90]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x28]
call dword [0x5a7cc4]
push 3
push 0x5b49ec
call esi
mov dword [esp + 0x64], eax
push 2
push 0x5ab574
mov byte [esp + 0x180], 0x12
call esi
mov dword [esp + 0x64], eax
push 3
push 0x5b49ec
mov byte [esp + 0x188], 0x13
call esi
mov dword [esp + 0x64], eax
push 2
push 0x5ab57c
mov byte [esp + 0x190], 0x14
call esi
add esp, 0x20
mov dword [esp + 0x48], eax
push 1
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x5c]
push eax
push 1
lea ecx, [esp + 0x5c]
push ecx
lea edx, [esp + 0x5c]
push edx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x188], 0x15
call edi
mov ecx, eax
call edi
lea ecx, [esp + 0x48]
mov byte [esp + 0x170], 0x14
call dword [0x5a7d90]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x170], 0x13
call dword [0x5a7d90]
lea ecx, [esp + 0x54]
mov byte [esp + 0x170], 0x12
call dword [0x5a7d90]
lea ecx, [esp + 0x5c]
mov byte [esp + 0x170], 8
call dword [0x5a7d90]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x30]
call dword [0x5a7cc4]
push 0
push 0x5a9974
call esi
mov dword [esp + 0x84], eax
push 2
push 0x5ab574
mov byte [esp + 0x180], 0x16
call esi
mov dword [esp + 0x84], eax
push 0
push 0x5a9974
mov byte [esp + 0x188], 0x17
call esi
mov dword [esp + 0x84], eax
push 2
push 0x5ab57c
mov byte [esp + 0x190], 0x18
call esi
add esp, 0x20
mov dword [esp + 0x64], eax
push 1
lea ecx, [esp + 0x80]
push ecx
lea edx, [esp + 0x7c]
push edx
push 1
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x78]
push ecx
lea ecx, [esp + 0x44]
mov byte [esp + 0x188], 0x19
call edi
mov ecx, eax
call edi
lea ecx, [esp + 0x64]
mov byte [esp + 0x170], 0x18
call dword [0x5a7d90]
lea ecx, [esp + 0x6c]
mov byte [esp + 0x170], 0x17
call dword [0x5a7d90]
lea ecx, [esp + 0x74]
mov byte [esp + 0x170], 0x16
call dword [0x5a7d90]
lea ecx, [esp + 0x7c]
mov byte [esp + 0x170], 8
call dword [0x5a7d90]
lea ecx, [esp + 0x18]
mov byte [esp + 0x170], 5
call dword [0x5a7d90]
push 0x11
push str.JPEG_file__.jpg_
call esi
mov dword [esp + 0x48], eax
push 0x11
push str.JPEG_file__.jpg_
mov byte [esp + 0x180], 0x1a
call esi
mov dword [esp + 0x94], eax
lea edx, [esp + 0xce]
push edx
mov byte [esp + 0x184], 0x1b
call ebx
movzx eax, word [eax]
push eax
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x130]
push edx
call fcn.00405e20
lea ecx, [esp + 0x4c]
push ecx
push eax
lea edx, [esp + 0xfc]
push edx
mov byte [esp + 0x19c], 0x1c
call fcn.00402e60
push eax
lea eax, [esp + 0xe0]
push eax
mov byte [esp + 0x1a4], 0x1d
call ebp
mov dword [esp + 0x48], eax
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x108]
push str.RMSTRING_SAVE_AS
push ecx
mov byte [esp + 0x1b4], 0x1e
call dword [0x5a7c1c]
add esp, 0x44
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
mov dword [ecx], 4
lea edx, [esp + 0x44]
push edx
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x8c]
push ecx
push edx
push eax
mov eax, dword [esp + 0xb4]
push eax
lea ecx, [esp + 0x50]
push ecx
mov byte [esp + 0x18c], 0x1f
call dword [0x5a8ae0]
add esp, 0x1c
lea ecx, [esp + 0xcc]
mov byte [esp + 0x170], 0x21
call dword [0x5a7d90]
lea ecx, [esp + 0xb0]
mov byte [esp + 0x170], 0x22
call dword [0x5a7d90]
lea ecx, [esp + 0xd4]
mov byte [esp + 0x170], 0x23
call dword [0x5a7d90]
mov byte [esp + 0x170], 0x24
lea ecx, [esp + 0x114]
call dword [0x5a7d90]
lea ecx, [esp + 0x84]
mov byte [esp + 0x170], 0x25
call dword [0x5a7d90]
mov edx, dword [esp + 0x38]
cmp dword [edx + 4], 0
je 0x4ade41
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x2c]
call dword [0x5a7cd0]
mov ecx, dword [esp + 0x24]
cmp dword [ecx + 4], 0
mov byte [esp + 0x170], 0x26
je 0x4ad8dc
lea edx, [esp + 0x24]
push edx
lea ecx, [esp + 0xb0]
call dword [0x5a7cbc]
push 2
push 0x5ab57c
mov byte [esp + 0x178], 0x27
call esi
mov dword [esp + 0x9c], eax
push 3
push 0x5b49ec
mov byte [esp + 0x180], 0x28
call esi
add esp, 0x10
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x144]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x174], 0x29
call dword [0x5a7850]
lea ecx, [esp + 0xec]
push ecx
mov ecx, eax
mov byte [esp + 0x174], 0x2a
call dword [0x5a7b08]
mov dword [esp + 0x14], eax
lea edx, [esp + 0x14e]
push edx
mov byte [esp + 0x174], 0x2b
call ebx
movzx eax, word [eax]
mov ecx, dword [esp + 0x18]
push eax
push ecx
lea edx, [esp + 0x128]
push edx
call fcn.00405e20
add esp, 0x10
mov dword [esp + 0x14], eax
push 1
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x94]
push ecx
lea ecx, [esp + 0xb8]
mov byte [esp + 0x17c], 0x2c
call edi
mov edx, dword [esp + 0x14]
push eax
push edx
lea eax, [esp + 0xec]
push eax
call fcn.00402e60
push str..jpg
push eax
lea ecx, [esp + 0x148]
push ecx
mov byte [esp + 0x188], 0x2d
call fcn.00402ed0
push eax
lea edx, [esp + 0xf8]
push edx
mov byte [esp + 0x190], 0x2e
call ebp
add esp, 0x20
push eax
lea ecx, [esp + 0x24]
call dword [0x5a7c74]
lea ecx, [esp + 0xdc]
call dword [0x5a7d90]
lea ecx, [esp + 0x134]
mov byte [esp + 0x170], 0x2d
call dword [0x5a7d90]
lea ecx, [esp + 0xe4]
mov byte [esp + 0x170], 0x2c
call dword [0x5a7d90]
lea ecx, [esp + 0x11c]
mov byte [esp + 0x170], 0x2b
call dword [0x5a7d90]
lea ecx, [esp + 0xec]
mov byte [esp + 0x170], 0x2a
call dword [0x5a7d90]
lea ecx, [esp + 0x144]
mov byte [esp + 0x170], 0x29
call dword [0x5a7c08]
lea ecx, [esp + 0x8c]
mov byte [esp + 0x170], 0x28
call dword [0x5a7d90]
lea ecx, [esp + 0x94]
mov byte [esp + 0x170], 0x27
call dword [0x5a7d90]
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x48]
call dword [0x5a7cbc]
push 2
push 0x5ab574
mov byte [esp + 0x178], 0x2f
call esi
mov dword [esp + 0xac], eax
push 3
push 0x5b49ec
mov byte [esp + 0x180], 0x30
call esi
add esp, 0x10
mov dword [esp + 0x9c], eax
lea ecx, [esp + 0xb8]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x174], 0x31
call dword [0x5a7850]
lea edx, [esp + 0xb4]
push edx
mov ecx, eax
mov byte [esp + 0x174], 0x32
call dword [0x5a7b08]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x106]
push eax
mov byte [esp + 0x174], 0x33
call ebx
movzx ecx, word [eax]
mov edx, dword [esp + 0x18]
push ecx
push edx
lea eax, [esp + 0x148]
push eax
call fcn.00405e20
add esp, 0x10
mov dword [esp + 0x14], eax
push 1
lea ecx, [esp + 0xa8]
push ecx
lea edx, [esp + 0xa4]
push edx
lea ecx, [esp + 0x50]
mov byte [esp + 0x17c], 0x34
call edi
push eax
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x104]
push ecx
call fcn.00402e60
push str..jpg
mov byte [esp + 0x180], 0x35
push eax
lea edx, [esp + 0x138]
push edx
call fcn.00402ed0
push eax
lea eax, [esp + 0x110]
push eax
mov byte [esp + 0x190], 0x36
call ebp
add esp, 0x20
push eax
lea ecx, [esp + 0x20]
call dword [0x5a7c74]
lea ecx, [esp + 0xf4]
call dword [0x5a7d90]
lea ecx, [esp + 0x124]
mov byte [esp + 0x170], 0x35
call dword [0x5a7d90]
lea ecx, [esp + 0xfc]
mov byte [esp + 0x170], 0x34
call dword [0x5a7d90]
lea ecx, [esp + 0x13c]
mov byte [esp + 0x170], 0x33
call dword [0x5a7d90]
lea ecx, [esp + 0xb4]
mov byte [esp + 0x170], 0x32
call dword [0x5a7d90]
lea ecx, [esp + 0xb8]
mov byte [esp + 0x170], 0x31
call dword [0x5a7c08]
lea ecx, [esp + 0x9c]
mov byte [esp + 0x170], 0x30
call dword [0x5a7d90]
lea ecx, [esp + 0xa4]
mov byte [esp + 0x170], 0x2f
call dword [0x5a7d90]
lea ecx, [esp + 0x44]
mov byte [esp + 0x170], 0x27
call dword [0x5a7d90]
lea ecx, [esp + 0xac]
jmp 0x4adb7a
lea ecx, [esp + 0xf0]
push ecx
lea ecx, [esp + 0x2c]
call dword [0x5a7cd4]
mov dword [esp + 0x34], eax
lea edx, [esp + 0xe8]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x174], 0x37
call dword [0x5a7850]
lea ecx, [esp + 0xe0]
push ecx
mov ecx, eax
mov byte [esp + 0x174], 0x38
call dword [0x5a7b08]
mov dword [esp + 0x14], eax
lea edx, [esp + 0xc6]
push edx
mov byte [esp + 0x174], 0x39
call ebx
movzx eax, word [eax]
mov ecx, dword [esp + 0x18]
push eax
push ecx
lea edx, [esp + 0xe4]
push edx
call fcn.00405e20
mov ecx, dword [esp + 0x44]
push ecx
push eax
lea edx, [esp + 0xe8]
push edx
mov byte [esp + 0x18c], 0x3a
call fcn.00402e60
push str._F.jpg
push eax
lea eax, [esp + 0xec]
push eax
mov byte [esp + 0x198], 0x3b
call fcn.00402ed0
push eax
lea ecx, [esp + 0xec]
push ecx
mov byte [esp + 0x1a0], 0x3c
call ebp
add esp, 0x30
push eax
lea ecx, [esp + 0x24]
call dword [0x5a7c74]
lea ecx, [esp + 0xc0]
call dword [0x5a7d90]
lea ecx, [esp + 0xc8]
mov byte [esp + 0x170], 0x3b
call dword [0x5a7d90]
lea ecx, [esp + 0xd0]
mov byte [esp + 0x170], 0x3a
call dword [0x5a7d90]
lea ecx, [esp + 0xd8]
mov byte [esp + 0x170], 0x39
call dword [0x5a7d90]
lea ecx, [esp + 0xe0]
mov byte [esp + 0x170], 0x38
call dword [0x5a7d90]
lea ecx, [esp + 0xe8]
mov byte [esp + 0x170], 0x37
call dword [0x5a7c08]
lea ecx, [esp + 0xf0]
mov byte [esp + 0x170], 0x26
call dword [0x5a7d90]
lea edx, [esp + 0x128]
push edx
lea ecx, [esp + 0x2c]
call dword [0x5a7cd4]
mov dword [esp + 0x34], eax
lea eax, [esp + 0x120]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x174], 0x3d
call dword [0x5a7850]
lea ecx, [esp + 0x118]
push ecx
mov ecx, eax
mov byte [esp + 0x174], 0x3e
call dword [0x5a7b08]
mov dword [esp + 0x14], eax
lea edx, [esp + 0x10e]
push edx
mov byte [esp + 0x174], 0x3f
call ebx
movzx eax, word [eax]
mov ecx, dword [esp + 0x18]
push eax
push ecx
lea edx, [esp + 0x11c]
push edx
call fcn.00405e20
mov ecx, dword [esp + 0x44]
push ecx
push eax
lea edx, [esp + 0x120]
push edx
mov byte [esp + 0x18c], 0x40
call fcn.00402e60
push str._R.jpg
push eax
lea eax, [esp + 0x124]
push eax
mov byte [esp + 0x198], 0x41
call fcn.00402ed0
push eax
lea ecx, [esp + 0x124]
push ecx
mov byte [esp + 0x1a0], 0x42
call ebp
add esp, 0x30
push eax
lea ecx, [esp + 0x20]
call dword [0x5a7c74]
lea ecx, [esp + 0xf8]
call dword [0x5a7d90]
lea ecx, [esp + 0x100]
mov byte [esp + 0x170], 0x41
call dword [0x5a7d90]
lea ecx, [esp + 0x108]
mov byte [esp + 0x170], 0x40
call dword [0x5a7d90]
lea ecx, [esp + 0x110]
mov byte [esp + 0x170], 0x3f
call dword [0x5a7d90]
lea ecx, [esp + 0x118]
mov byte [esp + 0x170], 0x3e
call dword [0x5a7d90]
lea ecx, [esp + 0x120]
mov byte [esp + 0x170], 0x3d
call dword [0x5a7c08]
lea ecx, [esp + 0x128]
mov byte [esp + 0x170], 0x26
call dword [0x5a7d90]
lea edx, [esp + 0x20]
push edx
call dword [0x5a7bd4]
add esp, 4
test al, al
jne 0x4adbb0
lea eax, [esp + 0x1c]
push eax
call dword [0x5a7bd4]
add esp, 4
test al, al
je 0x4add51
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x140]
push str.RMSTRING_OVERWRITE
push ecx
call dword [0x5a7c1c]
mov dword [esp + 0x24], eax
lea edx, [esp + 0x140]
push edx
mov byte [esp + 0x184], 0x43
call fcn.004c4ca0
add esp, 0x14
mov ecx, 0x103
push ecx
mov ecx, dword [esp + 0xa4]
push ecx
mov edx, 0x14000
push edx
mov edx, dword [esp + 0x20]
push edx
push eax
push 2
lea ecx, [esp + 0x168]
mov byte [esp + 0x188], 0x44
call fcn.0053e920
lea ecx, [esp + 0x130]
mov byte [esp + 0x170], 0x46
call dword [0x5a7d90]
lea ecx, [esp + 0x138]
mov byte [esp + 0x170], 0x47
call dword [0x5a7d90]
mov eax, 0x2001003
push eax
lea ecx, [esp + 0x154]
call dword [0x5a8bf0]
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x148]
push str.RMSTRING_YES
push eax
call dword [0x5a7c1c]
add esp, 0x10
push eax
push 0x4000
lea ecx, [esp + 0x158]
mov byte [esp + 0x178], 0x48
call dword [0x5a8e50]
lea ecx, [esp + 0x140]
mov byte [esp + 0x170], 0x47
call dword [0x5a7d90]
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x150]
push str.RMSTRING_NO
push ecx
call dword [0x5a7c1c]
add esp, 0x10
push eax
push 0x10000
lea ecx, [esp + 0x158]
mov byte [esp + 0x178], 0x49
call dword [0x5a8e50]
lea ecx, [esp + 0x148]
mov byte [esp + 0x170], 0x47
call dword [0x5a7d90]
lea ecx, [esp + 0x150]
call dword [0x5a8e54]
cmp eax, 0x4000
jne 0x4ade53
lea edx, [esp + 0x20]
push edx
call dword [0x5a7bd4]
add esp, 4
cmp al, 1
jne 0x4add1c
lea eax, [esp + 0x20]
push eax
call dword [0x5a7bd8]
add esp, 4
lea ecx, [esp + 0x1c]
push ecx
call dword [0x5a7bd4]
add esp, 4
cmp al, 1
jne 0x4add3c
lea edx, [esp + 0x1c]
push edx
call dword [0x5a7bd8]
add esp, 4
lea ecx, [esp + 0x150]
mov byte [esp + 0x170], 0x26
call dword [0x5a8e74]
lea ecx, [esp + 0x28]
mov byte [esp + 0x170], 0x25
call dword [0x5a7cd8]
lea ecx, [esp + 0x38]
mov byte [esp + 0x170], 0x1a
call dword [0x5a7d90]
lea ecx, [esp + 0x40]
mov byte [esp + 0x170], 5
call dword [0x5a7d90]
lea ecx, [esp + 0x24]
mov byte [esp + 0x170], 4
call dword [0x5a7d90]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x170], 3
call dword [0x5a7d90]
lea eax, [esp + 0x20]
push eax
call dword [0x5a7bd4]
add esp, 4
test al, al
jne 0x4aced0
lea ecx, [esp + 0x1c]
push ecx
call dword [0x5a7bd4]
add esp, 4
test al, al
jne 0x4aced0
mov esi, dword [esp + 0x178]
mov ecx, dword [esi]
mov eax, dword [ecx]
cmp eax, 1
je 0x4addf6
test eax, eax
je 0x4addf6
mov eax, dword [ecx + 4]
push eax
mov ecx, esi
call fcn.004070f0
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov edi, dword [0x5a7854]
lea ecx, [esp + 0x20]
push ecx
lea eax, [eax + edx*4 + 0x10]
push eax
call edi
mov ecx, dword [esi]
mov eax, dword [ecx]
add esp, 8
cmp eax, 1
je 0x4ade28
test eax, eax
je 0x4ade28
mov ecx, dword [ecx + 4]
push ecx
mov ecx, esi
call fcn.004070f0
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
lea ecx, [esp + 0x1c]
lea eax, [eax + edx*4 + 0xc]
push ecx
push eax
call edi
add esp, 8
jmp 0x4adec2
mov edx, dword [esp + 0x178]
push edx
call fcn.004a9790
add esp, 4
jmp 0x4ade7a
lea ecx, [esp + 0x150]
mov byte [esp + 0x170], 0x26
call dword [0x5a8e74]
lea ecx, [esp + 0x28]
mov byte [esp + 0x170], 0x25
call dword [0x5a7cd8]
lea ecx, [esp + 0x38]
mov byte [esp + 0x170], 0x1a
call dword [0x5a7d90]
lea ecx, [esp + 0x40]
mov byte [esp + 0x170], 5
call dword [0x5a7d90]
lea ecx, [esp + 0x24]
mov byte [esp + 0x170], 4
call dword [0x5a7d90]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x170], 3
call dword [0x5a7d90]
lea ecx, [esp + 0x30]
mov byte [esp + 0x170], 2
call fcn.00401250
lea ecx, [esp + 0x3c]
mov byte [esp + 0x170], 1
call dword [0x5a7d90]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x170], 0
call dword [0x5a7d90]
lea ecx, [esp + 0x20]
mov dword [esp + 0x170], 0xffffffff
call dword [0x5a7d90]
mov ecx, dword [esp + 0x168]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x160
ret 4