Function at 0x5ae254
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x31
push 0
push 0
dec ecx
jne 0x5ae25d
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.004048c4
lea eax, [ebp - 0x58]
mov edx, dword [0x492a04]
call fcn.00404dcc
mov esi, dword [0x5d3d10]
xor eax, eax
push ebp
push 0x5afef6
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0xc]
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.005ac1d4
lea ecx, [ebp - 0x10]
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.005ac1d4
lea ecx, [ebp - 0x14]
mov edx, 3
mov eax, dword [ebp - 4]
call fcn.005ac1d4
lea ecx, [ebp - 0x18]
mov edx, 4
mov eax, dword [ebp - 4]
call fcn.005ac1d4
mov eax, dword [ebp - 0xc]
mov edx, 0x5aff0c
call fcn.00404820
jne 0x5ae68e
mov eax, 0x5aff1c
mov dword [ebp - 0x88], eax
mov eax, 0x5aff28
mov dword [ebp - 0x84], eax
mov eax, 0x5aff38
mov dword [ebp - 0x80], eax
mov eax, 0x5aff44
mov dword [ebp - 0x7c], eax
mov eax, 0x5aff54
mov dword [ebp - 0x78], eax
mov eax, 0x5aff60
mov dword [ebp - 0x74], eax
mov eax, 0x5aff70
mov dword [ebp - 0x70], eax
mov eax, 0x5aff80
mov dword [ebp - 0x6c], eax
mov eax, 0x5aff94
mov dword [ebp - 0x68], eax
mov eax, 0x5affa8
mov dword [ebp - 0x64], eax
mov eax, 0x5affb8
mov dword [ebp - 0x60], eax
mov eax, 0x5affc8
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 0x88]
mov ecx, 0xb
mov eax, dword [ebp - 0x10]
call fcn.005ac800
test al, al
je 0x5ae383
lea ecx, [ebp - 0x58]
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
call fcn.005ac260
jmp 0x5afe74
mov eax, dword [ebp - 0x10]
mov edx, 0x5affd8
call fcn.00404820
jne 0x5ae3f1
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
mov al, byte [eax + 0x69]
test al, al
jne 0x5ae3af
lea eax, [ebp - 0x54]
mov edx, 0x5affe8
call fcn.004044ac
jmp 0x5ae3df
mov edx, dword [0x5d34c0]
cmp al, 1
jne 0x5ae3c8
lea eax, [ebp - 0x54]
mov edx, 0x5afff8
call fcn.004044ac
jmp 0x5ae3df
mov edx, dword [0x5d34c0]
cmp al, 2
jne 0x5ae3df
lea eax, [ebp - 0x54]
mov edx, 0x5b0008
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0x10]
mov edx, 0x5b0024
call fcn.00404820
jne 0x5ae428
lea eax, [ebp - 0x54]
mov edx, dword [0x5d34c0]
mov edx, dword [edx]
mov edx, dword [edx + 0x11c]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0x10]
mov edx, 0x5b0034
call fcn.00404820
jne 0x5ae472
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
cmp byte [eax + 0x64], 0
jne 0x5ae453
lea eax, [ebp - 0x54]
mov edx, 0x5b0044
call fcn.004044ac
jmp 0x5ae460
lea eax, [ebp - 0x54]
mov edx, 0x5b0050
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b005c
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0x10]
mov edx, 0x5b0068
call fcn.00404820
jne 0x5ae4cc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3c24]
sub eax, dword [edx]
cmp eax, 0xfa0
jae 0x5ae4a4
lea eax, [ebp - 0x54]
mov edx, 0x5b0078
call fcn.004044ac
jmp 0x5ae4b1
lea eax, [ebp - 0x54]
mov edx, 0x5b0084
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
mov eax, dword [0x5d3c24]
xor edx, edx
mov dword [eax], edx
jmp 0x5afe74
mov eax, 0x5b009c
mov dword [ebp - 0xbc], eax
mov eax, 0x5b00ac
mov dword [ebp - 0xb8], eax
mov eax, 0x5b00bc
mov dword [ebp - 0xb4], eax
mov eax, 0x5b00cc
mov dword [ebp - 0xb0], eax
mov eax, 0x5b00dc
mov dword [ebp - 0xac], eax
mov eax, 0x5b00ec
mov dword [ebp - 0xa8], eax
mov eax, 0x5b00fc
mov dword [ebp - 0xa4], eax
mov eax, 0x5b010c
mov dword [ebp - 0xa0], eax
mov eax, 0x5b011c
mov dword [ebp - 0x9c], eax
mov eax, 0x5b012c
mov dword [ebp - 0x98], eax
mov eax, 0x5b013c
mov dword [ebp - 0x94], eax
mov eax, 0x5b014c
mov dword [ebp - 0x90], eax
mov eax, 0x5b015c
mov dword [ebp - 0x8c], eax
lea edx, [ebp - 0xbc]
mov ecx, 0xc
mov eax, dword [ebp - 0x10]
call fcn.005ac800
test al, al
je 0x5ae585
lea ecx, [ebp - 0x58]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.005ac600
jmp 0x5afe74
mov eax, dword [ebp - 0x10]
mov edx, 0x5b016c
call fcn.00404820
jne 0x5ae5dc
mov eax, 0x5b017c
mov dword [ebp - 0xc8], eax
mov eax, 0x5b018c
mov dword [ebp - 0xc4], eax
mov eax, 0x5b019c
mov dword [ebp - 0xc0], eax
lea edx, [ebp - 0xc8]
mov ecx, 2
mov eax, dword [ebp - 0x14]
call fcn.005ac800
test al, al
je 0x5ae5dc
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 0x14]
call fcn.005ae0e4
jmp 0x5afe74
mov eax, dword [ebp - 0x14]
mov edx, 0x5b01ac
call fcn.00404820
jne 0x5ae606
lea eax, [ebp - 0x58]
push eax
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
call fcn.005ac874
jmp 0x5afe74
mov eax, dword [ebp - 0x14]
mov edx, 0x5b01c0
call fcn.00404820
jne 0x5ae630
lea eax, [ebp - 0x58]
push eax
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
call fcn.005ad004
jmp 0x5afe74
mov edx, dword [ebp - 0x14]
mov eax, 0x5b01d4
call fcn.00404a18
test eax, eax
jle 0x5ae660
mov eax, dword [ebp - 0x18]
push eax
lea eax, [ebp - 0x58]
push eax
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.005acc20
jmp 0x5afe74
mov eax, dword [ebp - 0x14]
mov edx, 0x5b01e4
call fcn.00404820
jne 0x5afe74
lea eax, [ebp - 0x58]
push eax
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
call fcn.005ad3b0
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b01fc
call fcn.00404820
jne 0x5ae79c
lea eax, [ebp - 0x54]
call fcn.00404414
mov eax, 0x5aff1c
mov dword [ebp - 0xd8], eax
mov eax, 0x5aff38
mov dword [ebp - 0xd4], eax
mov eax, 0x5aff28
mov dword [ebp - 0xd0], eax
mov eax, 0x5aff44
mov dword [ebp - 0xcc], eax
lea edx, [ebp - 0xd8]
mov ecx, 3
mov eax, dword [ebp - 0x10]
call fcn.005ac800
test al, al
je 0x5ae703
lea ecx, [ebp - 0x58]
mov eax, dword [0x5d3e24]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
call fcn.005ac260
jmp 0x5afe74
mov eax, dword [ebp - 0x10]
mov edx, 0x5b0024
call fcn.00404820
jne 0x5ae744
mov eax, dword [0x5d3e24]
cmp dword [eax], 0
je 0x5ae732
lea eax, [ebp - 0x54]
mov edx, dword [0x5d3e24]
mov edx, dword [edx]
mov edx, dword [edx + 0x11c]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0x14]
mov edx, 0x5b01ac
call fcn.00404820
jne 0x5ae76e
lea eax, [ebp - 0x58]
push eax
mov eax, dword [0x5d3e24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
call fcn.005ac874
jmp 0x5afe74
mov eax, dword [ebp - 0x14]
mov edx, 0x5b01e4
call fcn.00404820
jne 0x5afe74
lea eax, [ebp - 0x58]
push eax
mov eax, dword [0x5d3e24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
call fcn.005ad3b0
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0210
call fcn.00404820
jne 0x5ae7d9
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 0x10]
call fcn.00408804
mov edx, dword [ebp - 0xdc]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0224
call fcn.00404820
jne 0x5ae816
lea edx, [ebp - 0xe0]
mov eax, dword [ebp - 0x10]
call fcn.00408840
mov edx, dword [ebp - 0xe0]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0238
call fcn.00404820
jne 0x5ae855
call fcn.005c1368
lea edx, [ebp - 0xe4]
call fcn.00408cf0
mov edx, dword [ebp - 0xe4]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b024c
call fcn.00404820
jne 0x5ae95d
mov eax, dword [ebp - 0x10]
mov edx, 0x5b025c
call fcn.00404820
jne 0x5ae89f
lea edx, [ebp - 0xe8]
mov eax, dword [0x5d3e58]
mov eax, dword [eax]
mov eax, dword [eax + 8]
call fcn.00408cf0
mov edx, dword [ebp - 0xe8]
lea eax, [ebp - 0x54]
call fcn.004044ac
jmp 0x5ae94b
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x10]
call fcn.004046d4
mov ecx, eax
sub ecx, 4
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00404934
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 0x10]
call fcn.005c875c
mov edx, dword [ebp - 0xec]
lea eax, [ebp - 0x10]
call fcn.004044ac
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x10], 0
je 0x5ae92f
mov eax, dword [0x5d3e58]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x5ae92f
inc eax
mov dword [ebp - 0x4c], eax
xor edi, edi
mov eax, dword [0x5d3e58]
mov eax, dword [eax]
mov edx, edi
call fcn.00419afc
mov ebx, eax
lea eax, [ebp - 0xf0]
mov edx, ebx
call fcn.00404678
mov eax, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x10]
call fcn.00404820
jne 0x5ae929
inc dword [ebp - 0x28]
inc edi
dec dword [ebp - 0x4c]
jne 0x5ae8f9
lea edx, [ebp - 0xf4]
mov eax, dword [ebp - 0x28]
call fcn.00408cf0
mov edx, dword [ebp - 0xf4]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0270
call fcn.00404820
jne 0x5ae9f4
lea eax, [ebp - 0x54]
mov edx, 0x5b0280
call fcn.004044ac
mov edi, 8
mov esi, dword [0x5d3974]
mov ebx, dword [0x5d3858]
mov eax, dword [ebp - 0x14]
mov edx, 0x5b01e4
call fcn.00404820
jne 0x5aea4c
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
lea eax, [ebp - 0x54]
mov edx, 0x5b0084
call fcn.004044ac
mov eax, dword [0x5d32c4]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.005b4df8
mov ebx, eax
test ebx, ebx
je 0x5afe74
lea eax, [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
mov eax, ebx
call fcn.005ad3b0
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b02b0
call fcn.00404820
jne 0x5aea7d
lea eax, [ebp - 0x54]
mov edx, dword [0x5d3770]
mov edx, dword [edx]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b02c0
call fcn.00404820
jne 0x5aeafd
push 0
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 0xf8], 0x2c
lea ecx, [ebp - 0xf8]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00492f78
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00408e98
mov edi, eax
xor edx, edx
mov eax, dword [ebp - 0x1c]
call fcn.00408e98
mov dword [ebp - 0x24], eax
call fcn.00402b3c
mov eax, dword [ebp - 0x24]
call fcn.00402e30
add eax, edi
lea edx, [ebp - 0xfc]
call fcn.00408cf0
mov edx, dword [ebp - 0xfc]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b02d0
call fcn.00404820
jne 0x5aeb40
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00408e98
mov edi, eax
lea eax, [ebp - 0x54]
push eax
mov ecx, edi
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00404934
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b02e4
call fcn.00404820
jne 0x5aeb8f
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00408e98
mov edi, eax
mov eax, dword [ebp - 0x10]
call fcn.004046d4
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x54]
push eax
mov edx, dword [ebp - 0x24]
sub edx, edi
inc edx
mov ecx, edi
mov eax, dword [ebp - 0x10]
call fcn.00404934
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b02f8
call fcn.00404820
jne 0x5aec03
push 0
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 0xf8], 0x2c
lea ecx, [ebp - 0xf8]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x14]
call fcn.00492f78
mov edx, 1
mov eax, dword [ebp - 0x20]
call fcn.00408e98
mov edi, eax
mov eax, dword [ebp - 0x10]
call fcn.004046d4
mov edx, eax
mov eax, dword [ebp - 0x1c]
call fcn.00408e98
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, edi
mov eax, dword [ebp - 0x10]
call fcn.00404934
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0308
call fcn.00404820
jne 0x5aecd7
call fcn.0040adbc
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 0x46]
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x42]
call fcn.0040ad74
lea edx, [ebp - 0x20]
movzx eax, word [ebp - 0x42]
call fcn.00408cf0
lea edx, [ebp - 0x1c]
movzx eax, word [ebp - 0x44]
call fcn.00408cf0
mov eax, dword [ebp - 0x1c]
call fcn.004046d4
dec eax
jne 0x5aec63
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov edx, 0x5b0084
call fcn.00404720
push dword [ebp - 0x20]
push 0x5b031c
push dword [ebp - 0x1c]
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.00404794
lea edx, [ebp - 0x1c]
movzx eax, word [ebp - 0x46]
call fcn.00408cf0
mov eax, dword [ebp - 0x1c]
call fcn.004046d4
dec eax
jne 0x5aeca2
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov edx, 0x5b0084
call fcn.00404720
push dword [ebp - 0x20]
push 0x5b031c
push dword [ebp - 0x1c]
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.00404794
lea eax, [ebp - 0x54]
mov edx, dword [ebp - 0x20]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0328
call fcn.00404820
jne 0x5aeddd
call fcn.0040adbc
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x3e]
lea eax, [ebp - 0x3a]
call fcn.0040aa98
lea eax, [ebp - 0x20]
call fcn.00404414
lea edx, [ebp - 0x1c]
movzx eax, word [ebp - 0x3a]
call fcn.00408cf0
mov eax, dword [ebp - 0x1c]
call fcn.004046d4
dec eax
jne 0x5aed37
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov edx, 0x5b0084
call fcn.00404720
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
call fcn.004044ac
lea edx, [ebp - 0x1c]
movzx eax, word [ebp - 0x3e]
call fcn.00408cf0
mov eax, dword [ebp - 0x1c]
call fcn.004046d4
dec eax
jne 0x5aed69
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov edx, 0x5b0084
call fcn.00404720
push dword [ebp - 0x20]
push 0x5b033c
push dword [ebp - 0x1c]
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.00404794
lea edx, [ebp - 0x1c]
movzx eax, word [ebp - 0x3c]
call fcn.00408cf0
mov eax, dword [ebp - 0x1c]
call fcn.004046d4
dec eax
jne 0x5aeda8
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov edx, 0x5b0084
call fcn.00404720
push dword [ebp - 0x20]
push 0x5b033c
push dword [ebp - 0x1c]
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.00404794
lea eax, [ebp - 0x54]
mov edx, dword [ebp - 0x20]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0348
call fcn.00404820
jne 0x5aee11
lea eax, [ebp - 0x54]
mov edx, dword [0x5d3eb8]
mov edx, dword [edx]
mov edx, dword [edx + 0x7c]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b035c
call fcn.00404820
jne 0x5aee54
call sub.kernel32.dll_GetTickCount_1
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x100]
call fcn.00408ddc
mov edx, dword [ebp - 0x100]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0x10]
mov edx, 0x5b0370
call fcn.00404820
jne 0x5aef1c
cmp dword [ebp - 0xc], 0
je 0x5afe85
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0xffffffff
xor edi, edi
mov ebx, esi
lea eax, [ebp - 0x104]
mov edx, ebx
call fcn.00404678
mov eax, dword [ebp - 0x104]
mov edx, dword [ebp - 0xc]
call fcn.00404820
jne 0x5aeeb1
movzx eax, word [ebx + 0x30]
cmp eax, dword [ebp - 0x24]
jle 0x5aeeb1
mov dword [ebp - 0x28], edi
movzx eax, word [ebx + 0x30]
mov dword [ebp - 0x24], eax
inc edi
add ebx, 0x35
cmp edi, 0x2e
jne 0x5aee81
cmp dword [ebp - 0x28], 0xffffffff
je 0x5aeefd
imul eax, dword [ebp - 0x28], 0x35
movzx eax, word [esi + eax + 0x30]
mov dword [ebp - 0x10c], eax
fild dword [ebp - 0x10c]
fdiv dword [0x5b0378]
call fcn.00402bcc
push edx
push eax
lea eax, [ebp - 0x108]
call fcn.00408ddc
mov edx, dword [ebp - 0x108]
lea eax, [ebp - 0x54]
call fcn.004044ac
jmp 0x5aef0a
lea eax, [ebp - 0x54]
mov edx, 0x5b0084
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0x10]
mov edx, 0x5b0384
call fcn.00404820
jne 0x5aefd6
cmp dword [ebp - 0xc], 0
je 0x5afe85
mov dword [ebp - 0x24], 0x7fffffff
mov dword [ebp - 0x28], 0xffffffff
xor edi, edi
mov ebx, esi
lea eax, [ebp - 0x110]
mov edx, ebx
call fcn.00404678
mov eax, dword [ebp - 0x110]
mov edx, dword [ebp - 0xc]
call fcn.00404820
jne 0x5aef7b
movzx eax, word [ebx + 0x30]
cmp eax, dword [ebp - 0x24]
jge 0x5aef7b
mov dword [ebp - 0x28], edi
movzx eax, word [ebx + 0x30]
mov dword [ebp - 0x24], eax
inc edi
add ebx, 0x35
cmp edi, 0x2e
jne 0x5aef4b
cmp dword [ebp - 0x28], 0xffffffff
je 0x5aefb7
imul eax, dword [ebp - 0x28], 0x35
movzx eax, word [esi + eax + 0x30]
mov ecx, 0x64
xor edx, edx
div ecx
lea edx, [ebp - 0x114]
call fcn.00408cf0
mov edx, dword [ebp - 0x114]
lea eax, [ebp - 0x54]
call fcn.004044ac
jmp 0x5aefc4
lea eax, [ebp - 0x54]
mov edx, 0x5b0084
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b01c0
call fcn.00404820
jne 0x5af08b
push 0
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 0xf8], 0x2c
lea ecx, [ebp - 0xf8]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00492f78
or edx, 0xffffffff
mov eax, dword [ebp - 0x20]
call fcn.00408e98
mov dword [ebp - 0x2c], eax
or edx, 0xffffffff
mov eax, dword [ebp - 0x1c]
call fcn.00408e98
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x54]
mov edx, 0x5b0084
call fcn.004044ac
cmp dword [ebp - 0x2c], 0
jle 0x5af079
cmp dword [ebp - 0x30], 0
jle 0x5af079
mov eax, dword [0x5d32c4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.005b4fc4
mov ebx, eax
test ebx, ebx
je 0x5af079
cmp byte [ebx + 0xd], 0
jne 0x5af079
cmp byte [ebx + 0x78], 0
jne 0x5af079
cmp byte [ebx + 0x65], 0
je 0x5af06c
cmp byte [ebx + 0x56], 0
je 0x5af079
lea eax, [ebp - 0x54]
mov edx, 0x5b0078
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b01ac
call fcn.00404820
jne 0x5af13a
push 0
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 0xf8], 0x2c
lea ecx, [ebp - 0xf8]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00492f78
or edx, 0xffffffff
mov eax, dword [ebp - 0x20]
call fcn.00408e98
mov dword [ebp - 0x2c], eax
or edx, 0xffffffff
mov eax, dword [ebp - 0x1c]
call fcn.00408e98
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x54]
mov edx, 0x5b0084
call fcn.004044ac
cmp dword [ebp - 0x2c], 0
jle 0x5af128
cmp dword [ebp - 0x30], 0
jle 0x5af128
mov eax, dword [0x5d32c4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.005b4fc4
mov ebx, eax
test ebx, ebx
je 0x5af128
cmp byte [ebx + 0xd], 0
jne 0x5af128
cmp byte [ebx + 0x78], 0
jne 0x5af128
cmp byte [ebx + 0x54], 0
je 0x5af128
lea eax, [ebp - 0x54]
mov edx, 0x5b0078
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0398
call fcn.00404820
jne 0x5af2a2
lea eax, [ebp - 0x54]
call fcn.00404414
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
mov eax, dword [ebp - 0x10]
mov edx, 0x5b0024
call fcn.00404820
jne 0x5af1c5
mov eax, dword [0x5d3e7c]
cmp dword [eax], 0
je 0x5afe74
xor eax, eax
push ebp
push 0x5af1be
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x54]
mov edx, dword [0x5d3e7c]
mov edx, dword [edx]
mov edx, dword [edx + 0x11c]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5afe74
ret
mov eax, dword [ebp - 0x10]
mov edx, 0x5b03b0
call fcn.00404820
jne 0x5af274
mov eax, dword [0x5d3e7c]
cmp dword [eax], 0
je 0x5afe74
mov eax, dword [0x5d3e7c]
mov eax, dword [eax]
cmp byte [eax + 0x65], 0
jne 0x5af205
lea eax, [ebp - 0x54]
mov edx, 0x5b03c0
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [0x5d3e7c]
mov eax, dword [eax]
cmp byte [eax + 0x59], 0
je 0x5af224
lea eax, [ebp - 0x54]
mov edx, 0x5b03d0
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [0x5d3e7c]
mov eax, dword [eax]
cmp byte [eax + 0x56], 0
je 0x5af243
lea eax, [ebp - 0x54]
mov edx, 0x5b03e4
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [0x5d3e7c]
mov eax, dword [eax]
cmp byte [eax + 0x54], 0
je 0x5af262
lea eax, [ebp - 0x54]
mov edx, 0x5b03f4
call fcn.004044ac
jmp 0x5afe74
lea eax, [ebp - 0x54]
mov edx, 0x5b0404
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0x14]
mov edx, 0x5b01e4
call fcn.00404820
jne 0x5afe74
lea eax, [ebp - 0x58]
push eax
mov eax, dword [0x5d3e7c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
call fcn.005ad3b0
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0414
call fcn.00404820
jne 0x5af6d7
mov eax, dword [ebp - 0x14]
mov edx, 0x5b01d4
call fcn.00404820
jne 0x5af6d7
xor eax, eax
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x10]
call fcn.004044ac
cmp dword [ebp - 0xc], 0
je 0x5afe85
lea edx, [ebp - 0x118]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x118]
lea eax, [ebp - 0xc]
call fcn.004044ac
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0424
call fcn.00404820
jne 0x5af322
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
mov eax, dword [eax + 0xcc]
mov dword [ebp - 0x34], eax
jmp 0x5af6a9
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0434
call fcn.00404820
jne 0x5af37f
xor eax, eax
mov dword [ebp - 0x34], eax
mov edi, 0x2e
mov ebx, esi
mov eax, ebx
call fcn.005c5b58
test al, al
je 0x5af34b
inc dword [ebp - 0x34]
add ebx, 0x35
dec edi
jne 0x5af33d
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x34]
call fcn.00408cf0
mov edx, dword [ebp - 0x11c]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5af6a9
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0448
call fcn.00404820
jne 0x5af3dc
xor eax, eax
mov dword [ebp - 0x34], eax
mov edi, 0x2e
mov ebx, esi
mov eax, ebx
call fcn.005c5f08
test al, al
je 0x5af3a8
inc dword [ebp - 0x34]
add ebx, 0x35
dec edi
jne 0x5af39a
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 0x34]
call fcn.00408cf0
mov edx, dword [ebp - 0x120]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5af6a9
mov eax, dword [ebp - 0xc]
call fcn.005c5e24
test al, al
je 0x5af457
xor eax, eax
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 0xc]
call fcn.004046d4
mov ecx, eax
sub ecx, 4
mov edx, 5
mov eax, dword [ebp - 0xc]
call fcn.00404934
mov edi, 0x2e
mov ebx, esi
mov eax, ebx
mov edx, dword [ebp - 0xc]
call fcn.005c5c98
test al, al
je 0x5af423
inc dword [ebp - 0x34]
add ebx, 0x35
dec edi
jne 0x5af412
lea edx, [ebp - 0x124]
mov eax, dword [ebp - 0x34]
call fcn.00408cf0
mov edx, dword [ebp - 0x124]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5af6a9
mov eax, dword [ebp - 0xc]
mov edx, 0x5b045c
call fcn.00404820
jne 0x5af473
call fcn.005c6f60
mov dword [ebp - 0x34], eax
jmp 0x5af6a9
mov edi, 0x2e
mov ebx, esi
cmp byte [ebx], 0
je 0x5af5a3
mov eax, dword [ebp - 0xc]
mov edx, 0x5b046c
call fcn.00404820
je 0x5af4a5
mov eax, dword [ebp - 0xc]
mov edx, 0x5b047c
call fcn.00404820
jne 0x5af583
mov eax, dword [0x5d3a70]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x5af5a3
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x24], 0
mov eax, dword [0x5d3a70]
mov eax, dword [eax]
mov edx, dword [ebp - 0x24]
call fcn.00419afc
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0xc]
mov edx, 0x5b046c
call fcn.00404820
jne 0x5af526
mov eax, dword [ebp - 0x38]
add eax, 0x13
mov edx, ebx
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402da0
jne 0x5af507
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xf], 0
jne 0x5af507
add dword [ebp - 0x34], 6
jmp 0x5af575
mov eax, dword [ebp - 0x38]
mov edx, ebx
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402da0
jne 0x5af575
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xf], 0
jne 0x5af575
inc dword [ebp - 0x34]
jmp 0x5af575
mov eax, dword [ebp - 0xc]
mov edx, 0x5b047c
call fcn.00404820
jne 0x5af575
mov eax, dword [ebp - 0x38]
add eax, 0x13
mov edx, ebx
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402da0
jne 0x5af558
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xf], 1
jne 0x5af558
add dword [ebp - 0x34], 6
jmp 0x5af575
mov eax, dword [ebp - 0x38]
mov edx, ebx
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402da0
jne 0x5af575
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xf], 1
jne 0x5af575
inc dword [ebp - 0x34]
inc dword [ebp - 0x24]
dec dword [ebp - 0x4c]
jne 0x5af4c3
jmp 0x5af5a3
lea eax, [ebp - 0x128]
mov edx, ebx
call fcn.00404678
mov eax, dword [ebp - 0x128]
mov edx, dword [ebp - 0xc]
call fcn.00404820
jne 0x5af5a3
inc dword [ebp - 0x34]
add ebx, 0x35
dec edi
jne 0x5af47a
mov eax, dword [0x5d3aa0]
cmp byte [eax], 0
je 0x5af6a9
mov eax, dword [ebp - 0xc]
mov edx, 0x5b046c
call fcn.00404820
je 0x5af5dd
mov eax, dword [ebp - 0xc]
mov edx, 0x5b047c
call fcn.00404820
jne 0x5af685
mov eax, dword [0x5d3a70]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x5af6a9
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x24], 0
mov eax, dword [0x5d3a70]
mov eax, dword [eax]
mov edx, dword [ebp - 0x24]
call fcn.00419afc
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0xc]
mov edx, 0x5b046c
call fcn.00404820
jne 0x5af643
mov eax, dword [ebp - 0x38]
add eax, 0x13
mov edx, dword [0x5d3aa0]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402da0
jne 0x5af677
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xf], 0
jne 0x5af677
add dword [ebp - 0x34], 5
jmp 0x5af677
mov eax, dword [ebp - 0xc]
mov edx, 0x5b047c
call fcn.00404820
jne 0x5af677
mov eax, dword [ebp - 0x38]
add eax, 0x13
mov edx, dword [0x5d3aa0]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402da0
jne 0x5af677
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xf], 1
jne 0x5af677
add dword [ebp - 0x34], 6
inc dword [ebp - 0x24]
dec dword [ebp - 0x4c]
jne 0x5af5fb
jmp 0x5af6a9
lea eax, [ebp - 0x12c]
mov edx, dword [0x5d3aa0]
call fcn.00404678
mov eax, dword [ebp - 0x12c]
mov edx, dword [ebp - 0xc]
call fcn.00404820
jne 0x5af6a9
inc dword [ebp - 0x34]
lea edx, [ebp - 0x130]
mov eax, dword [ebp - 0x34]
call fcn.00408cf0
mov edx, dword [ebp - 0x130]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b048c
call fcn.00404820
jne 0x5af72e
mov eax, dword [0x5d3a40]
push dword [eax + 4]
push dword [eax]
call fcn.0040adbc
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.00499950
push edx
push eax
lea eax, [ebp - 0x134]
call fcn.00408ddc
mov edx, dword [ebp - 0x134]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0x10]
mov edx, 0x5b01d4
call fcn.00404820
jne 0x5afb95
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0xc], 0
je 0x5afe85
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x138]
lea eax, [ebp - 0xc]
call fcn.004044ac
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0424
call fcn.00404820
jne 0x5af790
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
mov eax, dword [eax + 0xcc]
mov dword [ebp - 0x34], eax
jmp 0x5afb17
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0434
call fcn.00404820
jne 0x5af7ed
xor eax, eax
mov dword [ebp - 0x34], eax
mov edi, 0x2e
mov ebx, esi
mov eax, ebx
call fcn.005c5b58
test al, al
je 0x5af7b9
inc dword [ebp - 0x34]
add ebx, 0x35
dec edi
jne 0x5af7ab
lea edx, [ebp - 0x13c]
mov eax, dword [ebp - 0x34]
call fcn.00408cf0
mov edx, dword [ebp - 0x13c]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afb17
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0448
call fcn.00404820
jne 0x5af84a
xor eax, eax
mov dword [ebp - 0x34], eax
mov edi, 0x2e
mov ebx, esi
mov eax, ebx
call fcn.005c5f08
test al, al
je 0x5af816
inc dword [ebp - 0x34]
add ebx, 0x35
dec edi
jne 0x5af808
lea edx, [ebp - 0x140]
mov eax, dword [ebp - 0x34]
call fcn.00408cf0
mov edx, dword [ebp - 0x140]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afb17
mov eax, dword [ebp - 0xc]
call fcn.005c5e24
test al, al
je 0x5af8c5
xor eax, eax
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 0xc]
call fcn.004046d4
mov ecx, eax
sub ecx, 4
mov edx, 5
mov eax, dword [ebp - 0xc]
call fcn.00404934
mov edi, 0x2e
mov ebx, esi
mov eax, ebx
mov edx, dword [ebp - 0xc]
call fcn.005c5c98
test al, al
je 0x5af891
inc dword [ebp - 0x34]
add ebx, 0x35
dec edi
jne 0x5af880
lea edx, [ebp - 0x144]
mov eax, dword [ebp - 0x34]
call fcn.00408cf0
mov edx, dword [ebp - 0x144]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afb17
mov eax, dword [ebp - 0xc]
mov edx, 0x5b045c
call fcn.00404820
jne 0x5af8e1
call fcn.005c6f60
mov dword [ebp - 0x34], eax
jmp 0x5afb17
mov edi, 0x2e
mov ebx, esi
cmp byte [ebx], 0
je 0x5afa11
mov eax, dword [ebp - 0xc]
mov edx, 0x5b046c
call fcn.00404820
je 0x5af913
mov eax, dword [ebp - 0xc]
mov edx, 0x5b047c
call fcn.00404820
jne 0x5af9f1
mov eax, dword [0x5d3a70]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x5afa11
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x24], 0
mov eax, dword [0x5d3a70]
mov eax, dword [eax]
mov edx, dword [ebp - 0x24]
call fcn.00419afc
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0xc]
mov edx, 0x5b046c
call fcn.00404820
jne 0x5af994
mov eax, dword [ebp - 0x38]
add eax, 0x13
mov edx, ebx
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402da0
jne 0x5af975
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xf], 0
jne 0x5af975
add dword [ebp - 0x34], 6
jmp 0x5af9e3
mov eax, dword [ebp - 0x38]
mov edx, ebx
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402da0
jne 0x5af9e3
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xf], 0
jne 0x5af9e3
inc dword [ebp - 0x34]
jmp 0x5af9e3
mov eax, dword [ebp - 0xc]
mov edx, 0x5b047c
call fcn.00404820
jne 0x5af9e3
mov eax, dword [ebp - 0x38]
add eax, 0x13
mov edx, ebx
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402da0
jne 0x5af9c6
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xf], 1
jne 0x5af9c6
add dword [ebp - 0x34], 6
jmp 0x5af9e3
mov eax, dword [ebp - 0x38]
mov edx, ebx
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402da0
jne 0x5af9e3
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xf], 1
jne 0x5af9e3
inc dword [ebp - 0x34]
inc dword [ebp - 0x24]
dec dword [ebp - 0x4c]
jne 0x5af931
jmp 0x5afa11
lea eax, [ebp - 0x148]
mov edx, ebx
call fcn.00404678
mov eax, dword [ebp - 0x148]
mov edx, dword [ebp - 0xc]
call fcn.00404820
jne 0x5afa11
inc dword [ebp - 0x34]
add ebx, 0x35
dec edi
jne 0x5af8e8
mov eax, dword [0x5d3aa0]
cmp byte [eax], 0
je 0x5afb17
mov eax, dword [ebp - 0xc]
mov edx, 0x5b046c
call fcn.00404820
je 0x5afa4b
mov eax, dword [ebp - 0xc]
mov edx, 0x5b047c
call fcn.00404820
jne 0x5afaf3
mov eax, dword [0x5d3a70]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x5afb17
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x24], 0
mov eax, dword [0x5d3a70]
mov eax, dword [eax]
mov edx, dword [ebp - 0x24]
call fcn.00419afc
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0xc]
mov edx, 0x5b046c
call fcn.00404820
jne 0x5afab1
mov eax, dword [ebp - 0x38]
add eax, 0x13
mov edx, dword [0x5d3aa0]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402da0
jne 0x5afae5
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xf], 0
jne 0x5afae5
add dword [ebp - 0x34], 5
jmp 0x5afae5
mov eax, dword [ebp - 0xc]
mov edx, 0x5b047c
call fcn.00404820
jne 0x5afae5
mov eax, dword [ebp - 0x38]
add eax, 0x13
mov edx, dword [0x5d3aa0]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402da0
jne 0x5afae5
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xf], 1
jne 0x5afae5
add dword [ebp - 0x34], 6
inc dword [ebp - 0x24]
dec dword [ebp - 0x4c]
jne 0x5afa69
jmp 0x5afb17
lea eax, [ebp - 0x14c]
mov edx, dword [0x5d3aa0]
call fcn.00404678
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0xc]
call fcn.00404820
jne 0x5afb17
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0
jne 0x5afb67
mov eax, dword [0x5d32c4]
mov eax, dword [eax]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x5afb67
inc eax
mov dword [ebp - 0x4c], eax
xor edi, edi
mov eax, dword [0x5d32c4]
mov eax, dword [eax]
mov eax, dword [eax + 0x10]
mov edx, edi
call fcn.00419afc
mov ebx, eax
cmp byte [ebx + 0x78], 0
jne 0x5afb61
mov eax, dword [ebx + 0x11c]
mov edx, dword [ebp - 0xc]
call fcn.00404820
jne 0x5afb61
inc dword [ebp - 0x34]
inc edi
dec dword [ebp - 0x4c]
jne 0x5afb35
lea edx, [ebp - 0x150]
mov eax, dword [ebp - 0x34]
call fcn.00408cf0
mov edx, dword [ebp - 0x150]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0x10]
mov edx, 0x5b04a4
call fcn.00404820
jne 0x5afbe2
mov eax, dword [0x5d3eb8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.005b9428
mov edi, eax
lea edx, [ebp - 0x154]
mov eax, edi
call fcn.00408cf0
mov edx, dword [ebp - 0x154]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, 0x5b04b4
mov dword [ebp - 0x174], eax
mov eax, 0x5b04c4
mov dword [ebp - 0x170], eax
mov eax, 0x5b04d4
mov dword [ebp - 0x16c], eax
mov eax, 0x5b04e4
mov dword [ebp - 0x168], eax
mov eax, 0x5b04f4
mov dword [ebp - 0x164], eax
mov eax, 0x5b0504
mov dword [ebp - 0x160], eax
mov eax, 0x5b0514
mov dword [ebp - 0x15c], eax
mov eax, 0x5b0524
mov dword [ebp - 0x158], eax
lea edx, [ebp - 0x174]
mov ecx, 7
mov eax, dword [ebp - 0x10]
call fcn.005ac800
test al, al
je 0x5afd32
lea eax, [ebp - 0x1c]
push eax
mov ecx, 4
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00404934
mov eax, dword [ebp - 0x1c]
mov edx, 0x5b0538
call fcn.00404820
jne 0x5afcdb
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0xc]
call fcn.004046d4
mov ecx, eax
sub ecx, 4
mov edx, 5
mov eax, dword [ebp - 0xc]
call fcn.00404934
mov eax, dword [ebp - 0x20]
call fcn.00408e5c
mov edi, eax
imul eax, edi, 0x35
lea eax, [esi + eax]
mov edx, dword [ebp - 0x10]
call fcn.005ad798
lea edx, [ebp - 0x178]
call fcn.00408cf0
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
call fcn.005c52e0
test eax, eax
jl 0x5afe74
mov eax, dword [ebp - 0xc]
call fcn.005c52e0
imul eax, eax, 0x35
mov edx, dword [0x5d3260]
lea eax, [edx + eax]
mov edx, dword [ebp - 0x10]
call fcn.005ad798
lea edx, [ebp - 0x17c]
call fcn.00408cf0
mov edx, dword [ebp - 0x17c]
lea eax, [ebp - 0x54]
call fcn.004044ac
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0548
call fcn.00404820
jne 0x5afd7e
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
mov eax, dword [ebp - 0x10]
call fcn.005cb368
test al, al
je 0x5afd6c
lea eax, [ebp - 0x54]
mov edx, 0x5b0078
call fcn.004044ac
jmp 0x5afe74
lea eax, [ebp - 0x54]
mov edx, 0x5b0084
call fcn.004044ac
jmp 0x5afe74
mov eax, dword [ebp - 0xc]
mov edx, 0x5b0560
call fcn.00404820
jne 0x5afdbd
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
call fcn.005cb4a0
lea edx, [ebp - 0x180]
call fcn.00408cf0
mov edx, dword [ebp - 0x180]
lea eax, [ebp - 0x54]
call fcn.004044ac
jmp 0x5afe74
mov edx, dword [ebp - 4]
mov eax, 0x5b0574
call fcn.00404a18
test eax, eax
jg 0x5afddf
mov edx, dword [ebp - 4]
mov eax, 0x5b0580
call fcn.00404a18
test eax, eax
jle 0x5afe41
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x188]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00404934
mov eax, dword [ebp - 0x188]
push eax
lea eax, [ebp - 0x18c]
push eax
mov eax, dword [ebp - 4]
call fcn.004046d4
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.00404934
mov edx, dword [ebp - 0x18c]
mov eax, ebx
pop ecx
call fcn.005ac098
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 4]
call fcn.004044ac
lea eax, [ebp - 0x54]
mov edx, dword [ebp - 4]
call fcn.004044ac
mov eax, dword [ebp - 4]
call fcn.005c4c4c
test al, al
je 0x5afe67
lea eax, [ebp - 0x50]
mov edx, 0x5b0090
call fcn.004044ac
jmp 0x5afe74
lea eax, [ebp - 0x50]
mov edx, 0x5b0018
call fcn.004044ac